dsh-setup

Provision an Apple Silicon Mac into a hardened DSH sovereign node.

3|Updated Apr 18, 2026
One-click install
npx skills add https://github.com/garochee33/DSH --skill dsh-setup
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dsh-setup
Source: https://github.com/garochee33/DSH/tree/main/kb/claude/skills/dsh-setup
Command: npx skills add https://github.com/garochee33/DSH --skill dsh-setup

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill removes the complexity of setting up a fresh Dome Sovereign Hub node by guiding a complete, validated installation on macOS, including environment preparation, secrets rendering, lockdown hardening, machine probing, and local model initialization.

Core Features & Use Cases

  • End-to-end bootstrap: Runs the sovereign macOS setup flow and verifies required tooling, Python environment, and environment files are in place.
  • Secrets and hardening: Renders .env values from Keychain or pass, then applies multi-phase lockdown scripts for DNS, firewall, pf anchors, and daemon auditing.
  • Local AI readiness: Probes machine capacity, selects right-sized Ollama models, and initializes the knowledge base and database state for downstream agents.
  • Use case: A developer with a new Apple Silicon Mac can use this Skill to turn a clean clone of DSH into a hardened, ready-to-use sovereign workstation.

Quick Start

Ask the assistant to install DSH on the current Mac, validate prerequisites, render secrets, apply lockdown, probe the machine, and initialize the local AI stack.

Frequently Asked Questions about dsh-setup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I bootstrap and harden a fresh macOS Apple Silicon Mac for local AI deployment?

To bootstrap and harden a fresh macOS Apple Silicon Mac for local AI deployment, you need a complete sovereign node setup that verifies tooling, renders secrets from Keychain or pass, applies firewall and DNS lockdown, and initializes Ollama models.

What is a DSH sovereign node setup on macOS?

A DSH sovereign node setup on macOS is an end-to-end provisioning process that transforms a clean Apple Silicon Mac into a hardened local AI workstation by validating prerequisites, enforcing daemon auditing, and initializing a local knowledge base.

Does the macOS hardening process support secrets rendering from both Keychain and pass?

Yes, the macOS hardening process supports secrets rendering from both Keychain and pass, extracting environment values to populate .env files before applying multi-phase lockdown scripts for DNS, pf anchors, and firewall enforcement.

How are Ollama models selected during local AI workstation initialization on macOS?

Ollama models are selected during local AI workstation initialization by probing the machine capacity and detecting the specific hardware tier of the Apple Silicon Mac, ensuring the chosen models are right-sized for the system.

What's the best way to enforce firewall and DNS lockdown on a fresh Mac deployment?

The best way to enforce firewall and DNS lockdown on a fresh Mac deployment is through multi-phase lockdown scripts that configure pf anchors, enforce DNS settings, and apply daemon auditing as part of the system provisioning flow.

Do I need sudo authorization to apply lockdown enforcement on a macOS sovereign node?

Yes, you need sudo authorization to apply lockdown enforcement on a macOS sovereign node, because the bootstrap process requires shell execution to modify system-level security configurations like pf anchors and daemon auditing rules.