git-echo/linux_patch_api
Private
Public Access
1
0
Fork 0
Code Releases 32 Wiki Activity
214 Commits 5 Branches 36 Tags
1fb9962c22b2c1f3481494d46bbf533fc339cf88
Commit Graph

5 Commits

Author SHA1 Message Date
Echo
42e2f8989a fix: remove all systemd capability restrictions blocking package management 
- Remove CapabilityBoundingSet and AmbientCapabilities (apt needs full root capabilities)
- Remove ReadWritePaths (unnecessary without ProtectSystem=strict)
- Fix E2E test: properly FAIL on status=failed package operations
- Fix E2E test: require status=completed for install/update/remove lifecycle
- Update dpkg packaging service file to match configs/
- Bump version to 0.3.5
 2026-05-03 04:13:50 +00:00
Echo
64e7e787f5 fix: remove sudo from apt commands and RestrictSUIDSGID from service 
- Remove sudo from apt command execution (service runs as root)
- Remove RestrictSUIDSGID from systemd service (blocks setuid for apt/dpkg)
- Remove NoNewPrivileges from systemd service (blocks sudo PERM_SUDOERS)
- Bump version to 0.3.2
 2026-05-03 02:24:52 +00:00
Echo
3e037f2648 fix: implement actual system reboot via shutdown/systemctl commands 
- Fix reboot_system() to use shutdown -r +N for delayed reboots
- Fix patches handler to call reboot_system() instead of just logging
- Add CAP_SYS_BOOT capability to systemd service for LXC reboot support
- Remove unused warn import from packages/mod.rs
- Bump version to 0.3.1
 2026-05-03 01:37:22 +00:00
Echo
b2ace87ee9 v0.2.0: Fix List Jobs bug, TLS 1.3 enforcement, client_disconnect_timeout, RwLock contention 
Bug fixes:
- Fix List Jobs connection reset: Add client_disconnect_timeout (5s) to prevent TLS write truncation
- Enforce TLS 1.3 only: Add with_protocol_versions(&[&TLS13]) to rustls ServerConfig
- Fix RwLock contention: Release read lock before sorting in list_jobs()
- Fix systemd service: Remove ProtectSystem=strict (blocks package management)
- Fix systemd service: Change Type=notify to Type=simple (fixes restart hangs)
- Fix systemd service: Add DEBIAN_FRONTEND=noninteractive
- Fix systemd service: Add ReadWritePaths for apt/dpkg paths

CI/CD:
- Add Ubuntu 22.04 build job to CI workflow

E2E Testing:
- Add comprehensive E2E test suite (test_e2e.py)
- Tests cover health, packages, patches, jobs, security, and reboot endpoints

Other:
- Bump version to 0.2.0
- Add lessons learned documentation
 2026-05-02 20:59:02 +00:00
Echo
a5b3f9b05a Phase 1: Foundation - CI/CD, systemd service, test framework 
Completed Phase 1 foundation tasks:
- CI/CD pipeline (.github/workflows/ci.yml)
  - Format check (rustfmt)
  - Clippy lints
  - Unit tests with codecov
  - Security audit (cargo-audit)
  - Build release artifacts
  - Ubuntu package build
- Systemd service file (configs/linux-patch-api.service)
  - Security hardening (ProtectSystem, SystemCallFilter)
  - Journal logging integration
  - Resource limits
- Test framework structure (tests/unit/, tests/integration/)
  - Initial unit test template
  - Test framework verified with cargo test

Rust toolchain 1.94.1 installed and verified.
 2026-04-09 19:12:45 +00:00