|
|
b2ace87ee9
|
v0.2.0: Fix List Jobs bug, TLS 1.3 enforcement, client_disconnect_timeout, RwLock contention
Bug fixes:
- Fix List Jobs connection reset: Add client_disconnect_timeout (5s) to prevent TLS write truncation
- Enforce TLS 1.3 only: Add with_protocol_versions(&[&TLS13]) to rustls ServerConfig
- Fix RwLock contention: Release read lock before sorting in list_jobs()
- Fix systemd service: Remove ProtectSystem=strict (blocks package management)
- Fix systemd service: Change Type=notify to Type=simple (fixes restart hangs)
- Fix systemd service: Add DEBIAN_FRONTEND=noninteractive
- Fix systemd service: Add ReadWritePaths for apt/dpkg paths
CI/CD:
- Add Ubuntu 22.04 build job to CI workflow
E2E Testing:
- Add comprehensive E2E test suite (test_e2e.py)
- Tests cover health, packages, patches, jobs, security, and reboot endpoints
Other:
- Bump version to 0.2.0
- Add lessons learned documentation
|
2026-05-02 20:59:02 +00:00 |
|
|
|
78f8882663
|
Add Alpine/OpenRC compatibility for init system support
- Updated SPEC.md: Changed systemd requirements to distribution-dependent init system
- Updated ARCHITECTURE.md: Added OpenRC hardening options and init script locations
- Updated build-alpine.sh: Replaced systemd-dev with openrc, use /etc/init.d
- Created configs/linux-patch-api-openrc: Full OpenRC init script
- Added Dockerfile.rpm for RPM build container
Init system support:
- systemd: Debian, Ubuntu, RHEL, CentOS, Fedora
- OpenRC: Alpine Linux
Binary remains init-system agnostic - no Rust code changes required.
|
2026-04-13 20:16:10 +00:00 |
|
|
|
b615a5639e
|
v1.0.0 Release - All Phases Complete
Phase 2: Core API Development
- 15 REST API endpoints (packages, patches, system, jobs, websocket)
- mTLS authentication layer (src/auth/mtls.rs)
- IP whitelist enforcement (src/auth/whitelist.rs)
- Job manager with async operation support
- WebSocket streaming for job status
Phase 3: Security Hardening
- Security testing: 16/16 tests passing
- Fuzz testing: 21 tests, all findings resolved
- Threat model validation (STRIDE matrix)
- TLS binding fix (critical vulnerability resolved)
- Security documentation complete
Phase 4: Production Readiness
- Performance benchmarking (all targets met)
- Package creation (.deb/.rpm structures)
- Documentation (README, API docs, deployment guide)
- Security hardening (6 vulnerabilities fixed)
Deliverables:
- API_DOCUMENTATION.md (889 lines)
- DEPLOYMENT_GUIDE.md (733 lines)
- SECURITY.md (346 lines)
- README.md (525 lines)
- debian/ package structure
- linux-patch-api.spec (RPM)
- install.sh installer script
- benches/api_benchmarks.rs
- Multiple security/performance reports
Security Status: 0 vulnerabilities remaining
Test Coverage: 31 unit tests, 21 integration tests
Build Status: Release optimized
|
2026-04-10 01:41:19 +00:00 |
|
|
|
ab53177210
|
Phase 1: Internal CA setup documentation
Completed Phase 1 foundation:
- Internal CA setup guide (configs/CA_SETUP.md)
- CA private key generation
- Server certificate creation
- Client certificate generation
- Certificate deployment instructions
- Renewal and security notes
Phase 1 Foundation now fully complete.
|
2026-04-09 19:14:37 +00:00 |
|
|
|
a5b3f9b05a
|
Phase 1: Foundation - CI/CD, systemd service, test framework
Completed Phase 1 foundation tasks:
- CI/CD pipeline (.github/workflows/ci.yml)
- Format check (rustfmt)
- Clippy lints
- Unit tests with codecov
- Security audit (cargo-audit)
- Build release artifacts
- Ubuntu package build
- Systemd service file (configs/linux-patch-api.service)
- Security hardening (ProtectSystem, SystemCallFilter)
- Journal logging integration
- Resource limits
- Test framework structure (tests/unit/, tests/integration/)
- Initial unit test template
- Test framework verified with cargo test
Rust toolchain 1.94.1 installed and verified.
|
2026-04-09 19:12:45 +00:00 |
|
|
|
46dbbbbfce
|
Phase 0: Rust project scaffolding (M0 complete)
Completed Rust project initialization:
- Cargo.toml with all dependencies (actix-web, tokio, rustls, etc.)
- Project structure (src/, tests/, configs/)
- Module declarations (api, auth, config, jobs, logging, packages, systemd)
- Clippy and rustfmt configured
- Initial lib.rs and main.rs with logging setup
- Config examples (config.yaml.example, whitelist.yaml.example)
Dependencies resolved and project compiles successfully.
Rust toolchain 1.94.1 installed.
|
2026-04-09 18:15:35 +00:00 |
|
