chore: public-repo install flow and CI fixes

- setup.sh: point the curl one-liner at main, drop the private-repo wording,
  keep the prebuilt-binary path as an offline fallback
- README: install URL now uses main
- GIST: curl install is the primary path again
- ci.yml: run on main pushes too, and grant SYS_ADMIN to the distro containers
  so the root-gated bind-mount tests (TestCheckSocketRoundTrip) pass

Author: MohammedNaser28

.github/workflows/ci.yml

@@ -2,9 +2,9 @@ name: QO2 Multi-Distro CI
 
 on:
   push:
-    branches: [ ctf-improvements ]
+    branches: [ main, ctf-improvements ]
   pull_request:
-    branches: [ ctf-improvements ]
+    branches: [ main, ctf-improvements ]
 
 jobs:
   unit-tests:
@@ -39,7 +39,9 @@ jobs:
 
       - name: Run Distro Container Build & Test Verification
         run: |
-          docker run --rm -v ${{ github.workspace }}:/workspace -w /workspace ${{ matrix.distro }} /bin/bash -c "
+          # SYS_ADMIN lets the root-gated sandbox tests bind-mount /dev/null
+          # into the chroot (TestCheckSocketRoundTrip); it is not granted by default.
+          docker run --rm --cap-add SYS_ADMIN -v ${{ github.workspace }}:/workspace -w /workspace ${{ matrix.distro }} /bin/bash -c "
             set -e
             if command -v apt-get >/dev/null; then
               apt-get update && apt-get install -y sqlite3 git tar zip gzip bzip2 curl

GIST.md

@@ -4,42 +4,36 @@
 
 ## 1. Install `qo`
 
-Download the **`qo`** binary and **`setup.sh`** from the drive (see step 2 — the same
-folder as `test.enc`), save both in your home folder, then:
+Open a terminal and run:
 
 ```bash
-cd ~
-chmod +x qo setup.sh
-./setup.sh ./qo
+curl -fsSL https://raw.githubusercontent.com/Open-Source-Community/qo2/main/setup.sh | bash
 ```
 
-The script installs `qo` to `/usr/local/bin` and creates the `qo-check`,
-`qo-setup`, and `qo-reset` aliases it needs.
-
-> No script? Install manually:
->
-> ```bash
-> chmod +x qo
-> sudo mv qo /usr/local/bin/qo
-> sudo ln -sf /usr/local/bin/qo /usr/local/bin/qo-check
-> sudo ln -sf /usr/local/bin/qo /usr/local/bin/qo-setup
-> sudo ln -sf /usr/local/bin/qo /usr/local/bin/qo-reset
-> ```
+The script detects your distro, installs the required tools (Go, tar, gzip), clones the source, builds `qo` as a static binary, and installs it to `/usr/local/bin/qo` with the `qo-check`, `qo-setup`, and `qo-reset` aliases it needs.
 
 Verify:
 
 ```bash
 qo --help
 ```
 
+> No network access? Download the prebuilt **`qo`** binary and **`setup.sh`** from
+> the drive folder (step 2), save both in your home folder, then:
+>
+> ```bash
+> cd ~
+> chmod +x qo setup.sh
+> ./setup.sh ./qo
+> ```
+
 ## 2. Download the test archive
 
 Get the practice archive from the drive:
 
 **https://drive.google.com/drive/folders/1nhKUefmOJ8FNPSUXz4sXmCMmDvnXtsc3?usp=sharing**
 
-Download `test.enc` (and `qo` + `setup.sh` from step 1, if you haven't) and save
-them in your home folder.
+Download `test.enc` and save it in your home folder.
 
 ## 3. Start the practice session
 

README.md

@@ -22,7 +22,7 @@ A tool for creating customizable sandboxed Linux environments for educational te
 Run this command to install `qo`.
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/Open-Source-Community/qo2/ctf-improvements/setup.sh | bash
+curl -fsSL https://raw.githubusercontent.com/Open-Source-Community/qo2/main/setup.sh | bash
 ```
 
 ## Quick Start

setup.sh

@@ -6,14 +6,13 @@
 # qo-check / qo-setup / qo-reset aliases the sandbox uses.
 #
 # Usage:
-#   curl -fsSL https://raw.githubusercontent.com/Open-Source-Community/qo2/ctf-improvements/setup.sh | bash
+#   curl -fsSL https://raw.githubusercontent.com/Open-Source-Community/qo2/main/setup.sh | bash
 #
 # Or from a checkout:
 #   ./setup.sh
 #
-# If the qo2 repo is private (it is), the curl/clone path above will not work —
-# that flow is for public checkouts only. For private repos, distribute the
-# static binary directly (e.g. alongside test.enc) and install it with:
+# No network access to the repo? Distribute the static binary directly
+# (e.g. alongside test.enc) and install it with:
 #   ./setup.sh ./qo        # path to the downloaded qo binary
 #   ./setup.sh qo          # or any local file
 #
@@ -141,8 +140,7 @@ if [ "$1" = "uninstall" ]; then
 fi
 
 # Prebuilt binary path: if a local qo binary is given (or present in cwd),
-# install it directly. This is the flow for private-repo distribution — the
-# clone/curl paths below need the repo to be public.
+# install it directly without cloning or building.
 if [ -n "$1" ] && [ -f "$1" ]; then
     install_binary "$1"
     exit 0
@@ -161,7 +159,7 @@ else
     TMP_DIR=$(mktemp -d)
     trap 'rm -rf "$TMP_DIR"' EXIT
     log "cloning $REPO_URL ..."
-    git clone --depth=1 "$REPO_URL" "$TMP_DIR/qo2" || die "cannot clone $REPO_URL — the repo is private; download the qo binary and run: ./setup.sh ./qo"
+    git clone --depth=1 "$REPO_URL" "$TMP_DIR/qo2" || die "cannot clone $REPO_URL — check your network/git access, or download the qo binary and run: ./setup.sh ./qo"
     build_and_install "$TMP_DIR/qo2"
 fi