Saved networks: profile "Run on connect" field is really breadcrumbs' bootstrap SSID #52

New issue

Closed

opened 2026-10-08 23:18:23 +08:00 by Breadway · 0 comments

Breadway commented

2026-10-08 23:18:23 +08:00

Owner

How I found it

Reviewing the v2 build of bos-settings in a nested session, Wi-Fi & network, location profiles. The School profile in the real config has bootstrap = "Totally NCC", but the form shows it under "Run on connect" with the placeholder "Optional command (optional)". frontend/src/lib/views/Breadcrumbs.svelte binds that text field to profile.bootstrap.

Confidence

High. Read breadcrumbs src/flow.rs (around line 282): profile.bootstrap is looked up with cfg.network(b) and joined as an SSID before the profile's real networks ("bootstrap connected: ...", "bootstrap SSID '...' has no credentials in config"). It is never executed as a command.

Explanation

Anyone following the label types a shell command into the field. breadcrumbs then treats that command as an SSID, finds no credentials for it and logs a bootstrap failure, so the place stops working the way it should. Present since before v2.

Fix (on fix/v2-review-gaps): the field is now "Connect through first", a picker of saved networks plus "Nothing (connect directly)", with a one-line explanation. Each place also gets a plain summary sentence ("joins NCC, signs in through Totally NCC first and sends traffic through hestia").

## How I found it Reviewing the v2 build of bos-settings in a nested session, Wi-Fi & network, location profiles. The School profile in the real config has `bootstrap = "Totally NCC"`, but the form shows it under "Run on connect" with the placeholder "Optional command (optional)". `frontend/src/lib/views/Breadcrumbs.svelte` binds that text field to `profile.bootstrap`. ## Confidence High. Read breadcrumbs `src/flow.rs` (around line 282): `profile.bootstrap` is looked up with `cfg.network(b)` and joined as an SSID before the profile's real networks ("bootstrap connected: ...", "bootstrap SSID '...' has no credentials in config"). It is never executed as a command. ## Explanation Anyone following the label types a shell command into the field. breadcrumbs then treats that command as an SSID, finds no credentials for it and logs a bootstrap failure, so the place stops working the way it should. Present since before v2. Fix (on `fix/v2-review-gaps`): the field is now "Connect through first", a picker of saved networks plus "Nothing (connect directly)", with a one-line explanation. Each place also gets a plain summary sentence ("joins NCC, signs in through Totally NCC first and sends traffic through hestia").

Breadway added the

bug

network

labels

2026-10-08 23:18:23 +08:00

Breadway closed this issue

2026-10-13 19:05:06 +08:00