Delivery System for a Privately Deployed AIGC Practical Training Platform for Colleges

Every deployment must include three artifacts carrying the deployment number: student UDF installation media (a single installation entry point), a teacher-side Windows installer and an Ubuntu server package; intermediate files are cleaned up automatically to avoid mistaken installation across different colleges.

Local inference resources of about 66 GB (5 model weights plus the ComfyUI archive, 65,974,196,650 bytes in total): packaging supports resumable transfer, and installation computes SHA-256 while copying, writing to disk only after verification passes.

Two-level signature verification: the platform issues the server instance identity signed with Ed25519; the client sends a nonce challenge, the server signs the response with its instance key, and the client verifies both levels of signature.

Three checkpoints from source code to artifact: when Builder generates the manifest, when the platform receives the release package, and when the per-school script re-checks, Python / TypeScript source code, source maps and script files are rejected and SHA-256 is compared file by file; on the platform side, a self-written ZIP parser rejects Zip64, encrypted entries and path traversal, and verifies executable file headers.

Supply-chain locking: Builder verifies its 12 built-in toolchain components one by one; the toolchain archive, 24 Python wheels, the Node runtime and the source build inputs are pinned by SHA-256; once the source code has been pulled, the compile stage needs no network access (Zig is used instead of MSVC).

Credentials tiered by purpose: wake-up links are valid for 10 minutes and single-use, compile sessions for 24 hours, build credentials and the inference service download credentials issued with them for 7 days, and deployment tokens and desktop tool download tokens for 30 minutes; activation credentials are single-use, and a new batch automatically invalidates old credentials; tokens are stored only as SHA-256 hashes, and credentials awaiting delivery are temporarily stored encrypted with AES-256-GCM.

The authorization center does not depend on a web framework: native node:http + node:sqlite (12 tables), with activation, migration and version switching all done in database transactions; its only direct runtime dependency is an object storage SDK. A single read-only version anchor constrains 7 components, and the build is refused if versions are inconsistent.

Delivery repository size: 92 commits (all by me), 252 tracked files, about 37,000 lines including tests and build scripts, 53 test files.

Designed the entire delivery architecture in four layers (public control plane, build and release, deliverables, on campus), using a read-only version anchor and Ed25519 authorization signatures to link 7 components into a traceable delivery chain.

Independently developed the authorization and delivery control center (native Node.js 24 implementation): deployments and release batches, per-school build script generation, packaging sessions and compile sessions, file-by-file artifact verification and private storage, server activation, heartbeat lease renewal and migration, and the admin console.

Independently developed the Windows inference service compiler (Builder): pulls the locked commit read-only and verifies its ancestry, compiles a native service containing no Python source code with Nuitka on a pinned toolchain, and uploads after the manifest is verified file by file.

Independently developed the visual packaging workbench (Electron, macOS arm64): one-time wake-up via a custom protocol, a six-step wizard, resumable transfer and verification of about 66 GB of resources, isolated execution of per-school scripts, and cross-building of the Windows installers and UDF student media on a Mac.

Independently developed the Electron desktop shells for the student and teacher clients and the unified student installer (the business UI reuses the MovLab team’s front end): server discovery and dual signature verification, school account verification, managed launch of the inference service and a local gateway, environment pre-checks, and model installation with resumable download.

Independently developed the Ubuntu on-campus server package: Docker Compose orchestration, a single deployment command, a netplan network wizard with timeout rollback, and the authorization agent (machine fingerprint, immediate reporting of IP changes, suspension of business access when the lease expires).

Took part in business development of the MovLab teaching platform (a team project) and independently completed the local school edition branch: separate builds for the student and teacher clients, obfuscation of production packages, the on-campus cloud drive, and unified login.