Skip to content

Harden assimilate.sh: arch-aware delta, quoted $HOME, perms - #18

Open
akan72 wants to merge 1 commit into
akan72/nvim-lazy-migrationfrom
akan72/assimilate-fixes
Open

Harden assimilate.sh: arch-aware delta, quoted $HOME, perms#18
akan72 wants to merge 1 commit into
akan72/nvim-lazy-migrationfrom
akan72/assimilate-fixes

Conversation

@akan72

@akan72 akan72 commented May 29, 2026

Copy link
Copy Markdown
Owner

Summary

  • Make the pinned delta installation architecture-aware.
  • Use the Apple Silicon archive on arm64 and Homebrew as the Intel Mac fallback.
  • Quote $HOME and enforce restrictive Git and SSH permissions.
  • Stack position 9 of 15, after Migrate Neovim plugins from Packer to lazy.nvim #17.

Test Plan

  • Ran the complete installer in a fresh synthetic home on the Mac mini.
  • Simulated Intel macOS before and after; only this PR dispatched brew install git-delta.
  • Ran bash -n assimilate.sh bash_profile and git diff --check.
  • Screenshots: not applicable; validation was CLI-based.

@akan72
akan72 changed the base branch from main to akan72/nvim-lazy-migration August 22, 2026 19:29
@akan72
akan72 force-pushed the akan72/assimilate-fixes branch from f541275 to 1e77e4f Compare August 22, 2026 19:29
@akan72
akan72 force-pushed the akan72/assimilate-fixes branch from 1e77e4f to 43ebd74 Compare August 22, 2026 19:36
@akan72
akan72 force-pushed the akan72/assimilate-fixes branch from 43ebd74 to 0bf2f8a Compare August 22, 2026 19:42
@akan72
akan72 force-pushed the akan72/assimilate-fixes branch 2 times, most recently from d3c7795 to dc90409 Compare August 22, 2026 19:50
- delta install: detect arch with uname -m. Apple Silicon uses the pinned
  aarch64-apple-darwin tarball; Intel Macs fall back to 'brew install git-delta'
  (delta ships no x86_64-apple-darwin build, so there's no pinned tarball to verify)
- bash_profile: quote $HOME in the .bashrc test/source (handles paths with spaces)
- chmod 600 ~/.gitconfig and chmod 700 ~/.ssh (when present) after symlinking
@akan72
akan72 force-pushed the akan72/assimilate-fixes branch from dc90409 to 451afbe Compare August 22, 2026 19:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant