From ba6f30492cd7dcfc07cdbf19892098a39743f280 Mon Sep 17 00:00:00 2001
From: reachableceo <charles@turnsys.com>
Date: Mon, 10 Aug 2026 14:35:11 -0500
Subject: [PATCH] fix(access): ultix-field uses ultixfield, stlpc-garage done,
 -t fix for su
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

access-matrix.sh:
- ultix-field mapped to ultixfield (was falling through to localuser)

bootstrap-all.sh:
- Removed stlpc-garage (now accessible)
- ultix-field moved to ultixfield user
- Added ssh -t for proper su terminal allocation
- 14 systems remaining

Refs [#403]

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
---
 access-matrix.sh |  1 +
 bootstrap-all.sh | 25 ++++++++++++-------------
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/access-matrix.sh b/access-matrix.sh
index a36f40b..47c9c1c 100644
--- a/access-matrix.sh
+++ b/access-matrix.sh
@@ -22,6 +22,7 @@ users_for() {
     tsys-ucs-*)                      echo "root:no" ;;
     ultix-streaming)                 echo "root:no" ;;
     stlpc-*)                         echo "root:labuser:no" ;;
+    ultix-field)                     echo "ultixfield:yes" ;;
     subopi*)                         echo "subodev:yes" ;;
     *)                               echo "localuser:yes" ;;
   esac
diff --git a/bootstrap-all.sh b/bootstrap-all.sh
index ef54fd7..5e6834f 100644
--- a/bootstrap-all.sh
+++ b/bootstrap-all.sh
@@ -2,8 +2,8 @@
 # bootstrap-all.sh — push agent key + sudo to every remaining NO-KEY system.
 #
 # Groups (user determined by system type):
-#   1. labuser+root  → stlpc-* systems (key to both, no sudo for labuser)
-#   2. subodev       → subopi* systems
+#   1. subodev       → subopi* systems
+#   2. ultixfield    → ultix-field
 #   3. localuser     → everything else (cloudron, siem, ubuntu server, kali, etc.)
 #
 # You'll enter passwords interactively. Idempotent: safe to re-run.
@@ -21,7 +21,7 @@ run_as_user() {
   echo "  $name ($ip) — $user"
   echo "========================================"
   if scp "${SSH_OPTS[@]}" "$SCRIPT" "${user}@${ip}:/tmp/" 2>/dev/null; then
-    if ssh "${SSH_OPTS[@]}" "${user}@${ip}" 'su -c "bash /tmp/'"$SCRIPT"'"'; then
+    if ssh -t "${SSH_OPTS[@]}" "${user}@${ip}" 'su -c "bash /tmp/'"$SCRIPT"'"'; then
       echo "  -> $name DONE"; ok=$((ok+1))
     else
       echo "  -> $name FAILED (su to root)"; fail=$((fail+1)); faillist="$faillist $name"
@@ -32,22 +32,22 @@ run_as_user() {
   echo
 }
 
-# === Group 1: labuser (stlpc-* — agent-bootstrap pushes keys to root+labuser) ===
+# === Group 1: subodev (subopi*) ===
 echo "########################################"
-echo "# Group 1: labuser (stlpc-*)"
-echo "########################################"
-echo
-run_as_user stlpc-garage 100.72.192.22 labuser
-
-# === Group 2: subodev (subopi*) ===
-echo "########################################"
-echo "# Group 2: subodev (subopi*)"
+echo "# Group 1: subodev (subopi*)"
 echo "########################################"
 echo
 run_as_user subopi3 100.93.17.77 subodev
 run_as_user subopi-dev-3 100.64.231.65 subodev
 run_as_user subopi-dev-4 100.65.224.85 subodev
 
+# === Group 2: ultixfield ===
+echo "########################################"
+echo "# Group 2: ultixfield"
+echo "########################################"
+echo
+run_as_user ultix-field 100.115.233.124 ultixfield
+
 # === Group 3: localuser (everything else) ===
 echo "########################################"
 echo "# Group 3: localuser (standard systems)"
@@ -63,7 +63,6 @@ run_as_user preprod-siem 100.98.162.14 localuser
 run_as_user sectestbed-cloudron 100.97.140.105 localuser
 run_as_user sectestbed-siem 100.108.121.18 localuser
 run_as_user tsys-siem 100.72.35.113 localuser
-run_as_user ultix-field 100.115.233.124 localuser
 
 echo "========================================"
 echo "Summary: $ok done, $fail failed"