Kunpeng DevKit WebUI Installation Skill

Overview

Create a Kunpeng (aarch64) ECS instance via Python SDK (ECS + KMS), use hcloud CLI for cloud operations (EIP, VPC), use Python paramiko SSH to connect and install Kunpeng DevKit in WebUI mode. Password never leaves Python process memory.

Tool separation principle:

• Python SDK — ECS creation + KMS encrypt/decrypt/delete (password never leaves Python process memory, never appears in ps -ef)
• hcloud CLI — All other cloud operations (EIP create/bind, VPC query, security group)
• Python paramiko — SSH connection + DevKit installation (password from KMS decrypt, stays in Python memory only)

Security architecture:

• ECS password is randomly generated by Python code (never typed by user, never passed via hcloud CLI, never exported to shell)
• Password is encrypted and stored in Huawei Cloud KMS via Python SDK (never appears in ps -ef, env vars, or conversation)
• Password is decrypted from KMS and passed to paramiko SSHClient.connect(password=...) (in Python process memory, not CLI args → no ps -ef leakage)
• Only kms_key_id and kms_cipher_text_file are exported (password itself is never exported; cipher text is written to a local file, never passed via command line)
• KMS key is scheduled for deletion after DevKit installation
• No COC dependency, no UniAgent dependency, no third-party skill dependency