git-echo/linux_patch_api
Private
Public Access
1
0
Fork 0
Code Releases 32 Wiki Activity

fix: implement actual system reboot via shutdown/systemctl commands
All checks were successful
CI/CD Pipeline / Code Format (push) Successful in 2s
Details
CI/CD Pipeline / Clippy Lints (push) Successful in 40s
Details
CI/CD Pipeline / Unit Tests (push) Successful in 1m27s
Details
CI/CD Pipeline / Security Audit (push) Successful in 4s
Details
CI/CD Pipeline / Build Arch Package (push) Successful in 1m56s
Details
CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Successful in 2m32s
Details
CI/CD Pipeline / Build Alpine Package (push) Successful in 3m25s
Details
CI/CD Pipeline / Build RPM Package (push) Successful in 3m44s
Details
CI/CD Pipeline / Build Debian Package (push) Successful in 3m0s
Details

Browse Source 
- Fix reboot_system() to use shutdown -r +N for delayed reboots
- Fix patches handler to call reboot_system() instead of just logging
- Add CAP_SYS_BOOT capability to systemd service for LXC reboot support
- Remove unused warn import from packages/mod.rs
- Bump version to 0.3.1
This commit is contained in:
Echo
2026-05-03 01:37:22 +00:00
parent 6f75ec4865
commit 2b35a143da
8 changed files with 67 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
configs/linux-patch-api.service
View File

@ -18,6 +18,9 @@ RuntimeDirectoryMode=0755
# Security hardening
NoNewPrivileges=true
# Allow reboot capability for scheduled reboots
CapabilityBoundingSet=CAP_SYS_BOOT
AmbientCapabilities=CAP_SYS_BOOT
# ProtectSystem removed - package management requires write access to /usr, /etc, /lib
# Network security provided by mTLS + IP whitelist
ProtectHome=true