linux_patch_api

Private

Public Access

Author	SHA1	Message	Date
Echo	9a129170f8	feat: add self-enrollment workflow for automated PKI provisioning Some checks failed CI/CD Pipeline / Code Format (push) Failing after 1s Details CI/CD Pipeline / Clippy Lints (push) Failing after 43s Details CI/CD Pipeline / Enrollment Tests (push) Has been skipped Details CI/CD Pipeline / Verify Enrollment CLI Flag (push) Has been skipped Details CI/CD Pipeline / All Unit Tests (push) Successful in 1m14s Details CI/CD Pipeline / Build Debian Package (push) Has been skipped Details CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Has been skipped Details CI/CD Pipeline / Build RPM Package (push) Has been skipped Details CI/CD Pipeline / Build Alpine Package (push) Has been skipped Details CI/CD Pipeline / Build Arch Package (push) Has been skipped Details CI/CD Pipeline / Security Audit (push) Successful in 5s Details - Phase 1: CLI args (--enroll flag), enroll module skeleton, config support - Phase 2: Registration request, polling loop (24h timeout), main.rs integration - Phase 3: PKI extraction, atomic cert writing, whitelist auto-append, mTLS transition - Phase 4: E2E test suite, README/DEPLOYMENT docs, CI pipeline - Phase 5: SPEC.md, API_DOCUMENTATION.md, CHANGELOG.md, ROADMAP.md sync Security review: APPROVED (0 critical, 0 high findings) Cross-distro compatible: Debian/Ubuntu, RHEL/CentOS/Fedora, Alpine, Arch Linux	2026-05-17 05:30:42 +00:00
Echo	d297c8d3b1	docs: add self-enrollment client workflow to API documentation All checks were successful CI/CD Pipeline / Code Format (push) Successful in 4s Details CI/CD Pipeline / Clippy Lints (push) Successful in 41s Details CI/CD Pipeline / Unit Tests (push) Successful in 54s Details CI/CD Pipeline / Security Audit (push) Successful in 5s Details CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Successful in 2m16s Details CI/CD Pipeline / Build Debian Package (push) Successful in 2m17s Details CI/CD Pipeline / Build Arch Package (push) Successful in 2m30s Details CI/CD Pipeline / Build Alpine Package (push) Successful in 3m29s Details CI/CD Pipeline / Build RPM Package (push) Successful in 3m53s Details	2026-05-16 19:18:25 +00:00
Echo	76ce246893	docs: add systemd sandboxing and E2E test lessons learned All checks were successful CI/CD Pipeline / Code Format (push) Successful in 4s Details CI/CD Pipeline / Clippy Lints (push) Successful in 38s Details CI/CD Pipeline / Unit Tests (push) Successful in 47s Details CI/CD Pipeline / Security Audit (push) Successful in 5s Details CI/CD Pipeline / Build Debian Package (push) Successful in 1m55s Details CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Successful in 2m1s Details CI/CD Pipeline / Build Arch Package (push) Successful in 1m58s Details CI/CD Pipeline / Build Alpine Package (push) Successful in 3m15s Details CI/CD Pipeline / Build RPM Package (push) Successful in 3m26s Details	2026-05-03 04:31:19 +00:00
Echo	77e8ac2e65	fix: remove linux-patch-api user from dpkg scripts, change ownership to root All checks were successful CI/CD Pipeline / Code Format (push) Successful in 1s Details CI/CD Pipeline / Clippy Lints (push) Successful in 46s Details CI/CD Pipeline / Unit Tests (push) Successful in 58s Details CI/CD Pipeline / Security Audit (push) Successful in 4s Details CI/CD Pipeline / Build Arch Package (push) Successful in 1m55s Details CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Successful in 1m59s Details CI/CD Pipeline / Build Alpine Package (push) Successful in 3m17s Details CI/CD Pipeline / Build RPM Package (push) Successful in 3m42s Details CI/CD Pipeline / Build Debian Package (push) Successful in 2m2s Details - Remove user/group creation from preinst (service runs as root) - Change directory ownership to root:root in preinst and postinst - Remove user/group deletion from postrm - Service runs as root, no dedicated user needed	2026-05-03 02:29:06 +00:00
Echo	2b35a143da	fix: implement actual system reboot via shutdown/systemctl commands All checks were successful CI/CD Pipeline / Code Format (push) Successful in 2s Details CI/CD Pipeline / Clippy Lints (push) Successful in 40s Details CI/CD Pipeline / Unit Tests (push) Successful in 1m27s Details CI/CD Pipeline / Security Audit (push) Successful in 4s Details CI/CD Pipeline / Build Arch Package (push) Successful in 1m56s Details CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Successful in 2m32s Details CI/CD Pipeline / Build Alpine Package (push) Successful in 3m25s Details CI/CD Pipeline / Build RPM Package (push) Successful in 3m44s Details CI/CD Pipeline / Build Debian Package (push) Successful in 3m0s Details - Fix reboot_system() to use shutdown -r +N for delayed reboots - Fix patches handler to call reboot_system() instead of just logging - Add CAP_SYS_BOOT capability to systemd service for LXC reboot support - Remove unused warn import from packages/mod.rs - Bump version to 0.3.1	2026-05-03 01:37:22 +00:00
Echo	03786d1798	v0.2.0: Fix List Jobs bug, TLS 1.3 enforcement, client_disconnect_timeout, RwLock contention Some checks failed CI/CD Pipeline / Code Format (push) Failing after 1s Details CI/CD Pipeline / Clippy Lints (push) Failing after 2s Details CI/CD Pipeline / Unit Tests (push) Failing after 7s Details CI/CD Pipeline / Build Debian Package (push) Has been skipped Details CI/CD Pipeline / Build Debian Package (Ubuntu 22.04) (push) Has been skipped Details CI/CD Pipeline / Build RPM Package (push) Has been skipped Details CI/CD Pipeline / Build Alpine Package (push) Has been skipped Details CI/CD Pipeline / Build Arch Package (push) Has been skipped Details CI/CD Pipeline / Security Audit (push) Failing after 3s Details Bug fixes: - Fix List Jobs connection reset: Add client_disconnect_timeout (5s) to prevent TLS write truncation - Enforce TLS 1.3 only: Add with_protocol_versions(&[&TLS13]) to rustls ServerConfig - Fix RwLock contention: Release read lock before sorting in list_jobs() - Fix systemd service: Remove ProtectSystem=strict (blocks package management) - Fix systemd service: Change Type=notify to Type=simple (fixes restart hangs) - Fix systemd service: Add DEBIAN_FRONTEND=noninteractive - Fix systemd service: Add ReadWritePaths for apt/dpkg paths CI/CD: - Add Ubuntu 22.04 build job to CI workflow E2E Testing: - Add comprehensive E2E test suite (test_e2e.py) - Tests cover health, packages, patches, jobs, security, and reboot endpoints Other: - Bump version to 0.2.0 - Add lessons learned documentation	2026-05-02 20:59:02 +00:00

6 Commits