177 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Echo	f3555c1570	fix(ci): use github.ref_type for upload conditions to fix Gitea runner compatibility v1.1.1	2026-05-17 21:05:43 +00:00
Echo	cea162b048	fix(ci): force IPv4 for rustup download on Alpine runner	2026-05-17 20:35:48 +00:00
Echo	08493fc782	fix(ci): add openssl runtime package for Alpine musl builds	2026-05-17 18:40:47 +00:00
Echo	8b890625f6	fix(ci): disable reqwest default features to eliminate OpenSSL on musl builds ... Requiring default-features=false on reqwest prevents native-tls/openssl-sys from being pulled in as transitive dependencies, which broke static linking on Alpine musl target. Also reverts invalid openssl-static package from CI. - Cargo.toml: add default-features = false to reqwest dependency - ci.yml: revert non-existent openssl-static package	2026-05-17 17:18:35 +00:00
Echo	835c8d79cf	fix(ci): add openssl-static for Alpine musl static linking ... The Alpine build job links against musl which requires static OpenSSL libraries. Adding openssl-static package to resolve -lssl and -lcrypto linker errors.	2026-05-17 17:07:10 +00:00
Echo	8fd7d7620a	fix(ci): add OpenSSL dev dependencies to all build jobs ... Add libssl-dev to Ubuntu-based runners and openssl-devel to Fedora runner to resolve openssl-sys crate compilation failures in CI pipeline. - clippy, test, audit: +libssl-dev - enrollment-tests, verify-enrollment-cli: +libssl-dev - build-deb, build-deb-u2204: +libssl-dev - build-rpm (Fedora): +openssl-devel	2026-05-17 16:48:43 +00:00
Echo	3e8eacab9a	fix(tests): resolve all clippy warnings for CI compliance ... - Remove needless borrows on format!() in set_body_string() calls (needless_borrows_for_generic_args) - Replace assert!(false, ...) with collected assertion (assertions_on_constants + never_loop) - Use direct Method::POST comparison instead of to_string() (cmp_owned) - Simplify negated equality to != operator (nonminimal_bool) CI pipeline now passes with -D warnings enabled	2026-05-17 16:02:57 +00:00
Echo	a09e3eaa68	fix: add truncate(true) to lock file OpenOptions for clippy compliance ... Resolves clippy::suspicious_open_options warning on whitelist lock file creation.	2026-05-17 15:21:52 +00:00
Echo	6cfef766a7	fix: apply cargo fmt to resolve CI formatting failures ... Format all enrollment module source files and tests per rustfmt standards. Resolves Gitea CI workflow cargo fmt check failures.	2026-05-17 05:49:26 +00:00
Echo	9a129170f8	feat: add self-enrollment workflow for automated PKI provisioning ... - Phase 1: CLI args (--enroll flag), enroll module skeleton, config support - Phase 2: Registration request, polling loop (24h timeout), main.rs integration - Phase 3: PKI extraction, atomic cert writing, whitelist auto-append, mTLS transition - Phase 4: E2E test suite, README/DEPLOYMENT docs, CI pipeline - Phase 5: SPEC.md, API_DOCUMENTATION.md, CHANGELOG.md, ROADMAP.md sync Security review: APPROVED (0 critical, 0 high findings) Cross-distro compatible: Debian/Ubuntu, RHEL/CentOS/Fedora, Alpine, Arch Linux v1.1.0-enrollment	2026-05-17 05:30:42 +00:00
Echo	d297c8d3b1	docs: add self-enrollment client workflow to API documentation	2026-05-16 19:18:25 +00:00
Echo	abcc5c5e40	fix: use resolved service name for socket activation detection v0.3.12	2026-05-07 01:42:20 +00:00
Echo	3ea0194c6c	fix: remove duplicate comment causing cargo fmt failure v0.3.11	2026-05-05 18:18:57 +00:00
Echo	fb3ba3f2c1	chore: bump to v0.3.10 for CI trigger	2026-05-05 18:11:37 +00:00
Echo	4b32db0d26	fix: detect socket activation for service status healthy logic v0.3.9	2026-05-05 16:25:59 +00:00
Echo	a7b48a59cc	chore: bump version to 0.3.8 for clean CI build v0.3.8	2026-05-05 01:02:05 +00:00
Echo	87601fe510	fix: correct debian changelog format (add missing 0.3.5 header) v0.3.7	2026-05-05 00:56:01 +00:00
Echo	76c26aa379	chore: bump version to 0.3.7 for CI rebuild	2026-05-05 00:23:22 +00:00
Echo	8ca616a02c	chore: update debian changelog to v0.3.6 v0.3.6	2026-05-04 23:57:56 +00:00
Echo	8b6d9ed861	Add GET /api/v1/system/services/{name} endpoint for service health checks ... - Add ServiceStatus struct with name, display_name, active_state, sub_state, load_state, enabled_state, main_pid, healthy fields - Add get_service_status() to PackageManagerBackend trait - Implement get_service_status() in AptBackend with systemd and OpenRC support - Add get_service_status HTTP handler in system.rs - Add /system/services/{name} route - Add E2E test for service status endpoint - Bump version to 0.3.6	2026-05-04 23:44:26 +00:00
Echo	c44045db38	feat: implement proper WebSocket handler with actix-web-actors ... - Replace stub websocket_handler with proper actix_web_actors::ws::start() - Add WsJobActor that subscribes to JobManager broadcast channel - Add broadcast::Sender/Receiver to JobManager for real-time status updates - Emit JobStatusEvent on job state changes (create, update, complete, fail) - Handle subscribe/unsubscribe client messages for per-job filtering - Add 5-second heartbeat ping/pong for connection keepalive - Properly compute Sec-WebSocket-Accept header per RFC 6455	2026-05-04 15:19:44 +00:00
Echo	76ce246893	docs: add systemd sandboxing and E2E test lessons learned	2026-05-03 04:31:19 +00:00
Echo	6ba708abb1	fix: remove all systemd capability restrictions blocking package management ... - Remove CapabilityBoundingSet and AmbientCapabilities (apt needs full root capabilities) - Remove ReadWritePaths (unnecessary without ProtectSystem=strict) - Fix E2E test: properly FAIL on status=failed package operations - Fix E2E test: require status=completed for install/update/remove lifecycle - Update dpkg packaging service file to match configs/ - Bump version to 0.3.5 v0.3.5	2026-05-03 04:13:50 +00:00
Echo	de7ec9905f	fix: correct Cargo.toml version to 0.3.4 v0.3.4	2026-05-03 03:11:52 +00:00
Echo	508037d656	chore: bump version to 0.3.4 for clean CI build	2026-05-03 03:11:41 +00:00
Echo	56de1d73e1	fix(ci): prevent recursive tag triggers and u2204 release duplication ... - Change tag trigger from v* to v*.*.* to prevent recursive CI runs - Upload u2204 deb to same release tag (not creating -u2204 suffix) - Rename u2204 deb filename to include u2204 for differentiation	2026-05-03 02:49:18 +00:00
Echo	157376af7e	chore: bump version to 0.3.3 for dpkg and service fixes v0.3.3	2026-05-03 02:35:32 +00:00
Echo	77e8ac2e65	fix: remove linux-patch-api user from dpkg scripts, change ownership to root ... - Remove user/group creation from preinst (service runs as root) - Change directory ownership to root:root in preinst and postinst - Remove user/group deletion from postrm - Service runs as root, no dedicated user needed	2026-05-03 02:29:06 +00:00
Echo	9e42f32270	fix: remove sudo from apt commands and RestrictSUIDSGID from service ... - Remove sudo from apt command execution (service runs as root) - Remove RestrictSUIDSGID from systemd service (blocks setuid for apt/dpkg) - Remove NoNewPrivileges from systemd service (blocks sudo PERM_SUDOERS) - Bump version to 0.3.2 v0.3.2	2026-05-03 02:24:52 +00:00
Echo	2b35a143da	fix: implement actual system reboot via shutdown/systemctl commands ... - Fix reboot_system() to use shutdown -r +N for delayed reboots - Fix patches handler to call reboot_system() instead of just logging - Add CAP_SYS_BOOT capability to systemd service for LXC reboot support - Remove unused warn import from packages/mod.rs - Bump version to 0.3.1 v0.3.1	2026-05-03 01:37:22 +00:00
Echo	6f75ec4865	chore: bump version to 0.3.0 for beta release v0.3.0	2026-05-03 00:55:27 +00:00
Echo	a6cab4bbec	style: fix import ordering in mtls.rs for cargo fmt compliance	2026-05-03 00:40:11 +00:00
Echo	de9638e1b0	fix: resolve clippy errors for rustls 0.23 API and unnecessary_map_or lint ... - Fix ServerConfig::builder() to builder_with_provider() for TLS 1.3 enforcement - Add aws_lc_rs feature to rustls in Cargo.toml - Fix clippy unnecessary_map_or -> is_some_and in packages/mod.rs	2026-05-03 00:36:32 +00:00
Echo	6d177c81a4	fix(ci): add apt-get -f install to resolve broken runner dependencies ... Runners may have broken apt state from partial upgrades (e.g., openssh-client version mismatch). Adding apt-get -f install before build deps ensures CI works regardless of runner package state.	2026-05-03 00:31:13 +00:00
Echo	36890f65b1	style: fix cargo fmt compliance for mtls.rs closure and packages matches!	2026-05-02 21:52:39 +00:00
Echo	2ec8de961a	style: fix mtls.rs indentation for cargo fmt compliance	2026-05-02 21:30:12 +00:00
Echo	03786d1798	v0.2.0: Fix List Jobs bug, TLS 1.3 enforcement, client_disconnect_timeout, RwLock contention ... Bug fixes: - Fix List Jobs connection reset: Add client_disconnect_timeout (5s) to prevent TLS write truncation - Enforce TLS 1.3 only: Add with_protocol_versions(&[&TLS13]) to rustls ServerConfig - Fix RwLock contention: Release read lock before sorting in list_jobs() - Fix systemd service: Remove ProtectSystem=strict (blocks package management) - Fix systemd service: Change Type=notify to Type=simple (fixes restart hangs) - Fix systemd service: Add DEBIAN_FRONTEND=noninteractive - Fix systemd service: Add ReadWritePaths for apt/dpkg paths CI/CD: - Add Ubuntu 22.04 build job to CI workflow E2E Testing: - Add comprehensive E2E test suite (test_e2e.py) - Tests cover health, packages, patches, jobs, security, and reboot endpoints Other: - Bump version to 0.2.0 - Add lessons learned documentation	2026-05-02 20:59:02 +00:00
Echo	bda8d5c10c	BUG-17: Strip release suffixes from package names in list_patches() ... BUG-18: Add sudo prefix for apt install/upgrade/remove operations - list_patches() now strips /noble-updates,noble-security suffixes - run_apt() uses sudo for modifying operations (install, upgrade, etc.) - Requires sudoers config for linux-patch-api user on agents	2026-04-30 22:55:02 +00:00
Echo	bd3384d573	fix: correct Gitea API URL in upload-release.sh ... The Gitea server hostname is gitea-lxc.moon-dragon.us not gitea.moon-dragon.us. curl exit status 6 = Could not resolve host. v0.0.2	2026-04-27 02:13:31 +00:00
Echo	2caf13b6a5	fix: properly commit build fixes that were never in 2774e02 ... CRITICAL: Previous commit 2774e02 did not include these fixes. Debian (debian/rules): - Use && to keep cargo build in same shell as . "$HOME/.cargo/env" - Make runs each recipe line in a separate shell Arch (build-arch.sh): - Use << "EOF" heredoc with hardcoded path to prevent $pkgdir expansion - $pkgdir must be literal for makepkg to expand at runtime Alpine (build-alpine.sh): - Copy signing public key to /etc/apk/keys/ BEFORE abuild - Use || true on abuild because index update may fail but APK is still created	2026-04-27 01:52:56 +00:00
Echo	2774e02cde	fix: resolve final build failures ... debian/rules: Escape $HOME for make (use $$HOME) - Make interprets $H as variable, $$ escapes it build-alpine.sh: Install signing public key - Copy .abuild/*.rsa.pub to /etc/apk/keys/ - Fixes UNTRUSTED signature error on index update build-arch.sh: Use /home/builduser/repo for all paths - PKGDIR=/home/builduser/repo/arch-package - WORKSPACE_DIR=/home/builduser/repo - Fixes permission denied on act cache path	2026-04-27 01:06:56 +00:00
Echo	93602db2f3	fix: resolve remaining build failures ... debian/rules: Source cargo env before calling cargo - Add `. "$HOME/.cargo/env"` to override_dh_auto_build build-alpine.sh: Use /home/builduser for all paths - PKGDIR=/home/builduser/apk-package (accessible by builduser) - WORKSPACE_DIR=/home/builduser (for APKBUILD package function) - Removed duplicate else line build-arch.sh: Copy repo to accessible directory - Copy repo contents to /home/builduser/repo before makepkg - Run makepkg in /home/builduser/repo (not act cache path)	2026-04-27 00:57:03 +00:00
Echo	b74d5386d3	fix: resolve all build job failures ... CI workflow (ci.yml): - Proper YAML structure for all steps - curl+tar checkout (act runners lack git) - GITEATOKEN authentication for private repo access - build-essential/gcc added to all jobs - dpkg-buildpackage -d flag (skip apt dep check) Build scripts: - build-alpine.sh: Copy APKBUILD to /home/builduser before abuild - build-arch.sh: Use REPO_DIR variable instead of $(pwd) in su commands	2026-04-27 00:37:51 +00:00
Echo	392a08abb7	fix: resolve all 4 build job failures ... Debian: Add -d flag to dpkg-buildpackage (skip dep check, rustup installed Rust not apt) RPM/Arch: Fix missing run: | YAML syntax in dependency steps Alpine: Fix abuild working directory - use /home/builduser explicitly instead of $(pwd) which referenced act cache path	2026-04-27 00:19:32 +00:00
Echo	256238eae6	fix: add build-essential/gcc for Rust linker ... Rust compilation requires a C compiler (cc) for linking. Act runner containers do not have gcc installed by default. Added build-essential (Ubuntu), gcc (Fedora/Alpine/Arch) to dependency installation steps before Rust compilation.	2026-04-27 00:07:20 +00:00
Echo	9cef189d57	fix: use curl+tar checkout (act runners lack git) ... Act runner containers do not have git installed. Using curl+tar to download repo archive instead. GITEATOKEN secret already verified working independently.	2026-04-27 00:00:49 +00:00
Echo	4956004ab9	fix: match secret name case GITEATOKEN (uppercase) ... Gitea secrets are case-sensitive. The encrypted secret in DB is named GITEATOKEN (uppercase). Workflow was using giteatoken (lowercase) which caused decryption failures in Gitea runner. Also unblocked stuck action_run #166 in database (status=1 queued).	2026-04-26 23:36:43 +00:00
Echo	65465efdfe	fix: SSH checkout bypasses Gitea secret encryption issue ... Gitea logs show: "decrypt secret giteatoken: failed to decrypt by secret, the key might be incorrect" - secrets must be encrypted with Gitea SECRET_KEY, not plaintext in DB. Solution: Use SSH git clone for checkout which requires no secrets. Runners are already registered with Gitea and have SSH access.	2026-04-26 23:29:39 +00:00
Echo	1f2fe167ed	fix: simplified curl+tar checkout now that giteatoken secret is in DB ... Secret was inserted directly into Gitea MySQL database. Checkout now uses simple authenticated curl to download archive.	2026-04-26 23:07:14 +00:00
Echo	7a58cf0303	fix: use SSH git clone for checkout to bypass Gitea API 404 ... Gitea archive API returns 404 for private repos. Switched to SSH-based git clone which uses runner SSH keys for authentication. - Replace curl+tar archive download with git clone over SSH - Add ssh-keyscan for host key verification - Alpine job installs openssh-client and git - All other runners have git/ssh pre-installed	2026-04-26 21:16:07 +00:00