17 Commits

Author	SHA1	Message	Date
Echo	67e397f018	feat: add DNF and YUM package manager backends for RPM-based systems	2026-05-20 20:54:38 +00:00
Echo	fb0ce8ac32	fix: RPM packaging - pre-build binary, fix ownership, fix deps, prevent stale cache	2026-05-20 19:45:38 +00:00
Echo	4d75bb0e29	feat: Add APK (Alpine Linux) package manager backend; machine-id generation; OpenRC fix; v1.1.12	2026-05-20 17:25:21 +00:00
Echo	e033cb8536	fix: Alpine install scripts - use separate files with valid abuild suffixes ... Root cause: .apk-install is not a valid abuild suffix (lines 247-257 of abuild). abuild expects SEPARATE files: pkgname.pre-install, .post-install, .pre-deinstall, .post-deinstall. The old single .apk-install file caused abuild to die with "unknown install script suffix", but CI used || true which masked the failure, so APK was built WITHOUT install scripts. Verified on actual Alpine runner: install script suffixes now pass abuild validation. - configs/linux-patch-api.pre-install: create dirs, set permissions (matches Debian preinst) - configs/linux-patch-api.post-install: copy example configs, enable service (matches Debian postinst) - configs/linux-patch-api.pre-deinstall: stop and disable service (matches Debian prerm) - configs/linux-patch-api.post-deinstall: clean up empty dirs (matches Debian postrm) - Removed configs/linux-patch-api.apk-install (invalid format) - Updated build-alpine.sh: copy 4 install scripts to workspace, updated install= line in APKBUILD	2026-05-20 12:43:37 +00:00
Echo	392e7553c4	release: bump version to 1.1.9 for non-Ubuntu package fixes	2026-05-20 02:54:09 +00:00
Echo	19f76f4d9d	fix: comment out RPM BuildRequires for CI (rustup not RPM), fix changelog date	2026-05-20 02:32:31 +00:00
Echo	8952589efd	fix: align all non-Ubuntu packages with Debian baseline behavior ... - Arch: remove system user creation, root:root ownership, fix $startdir path in PKGBUILD - RPM: uncomment BuildRequires, add runtime deps (openssl-libs, ca-certificates), remove system user, root:root ownership - Alpine: remove system user creation, root:root ownership, co-locate install script with APKBUILD - All platforms now match Debian: no system user, root:root, create dirs, copy example configs, enable service	2026-05-20 02:01:52 +00:00
Echo	bcc0d40413	release: bump version to 1.1.8	2026-05-19 00:34:21 +00:00
Echo	653623b9f0	fix: FQDN resolution and display_name blank bug; fix: Arch/Alpine/RPM packages ... Bug fixes: - get_fqdn() now prioritizes 'hostname -f' (returns full FQDN) over /etc/hostname (returns short hostname) - Added get_hostname() for short hostname extraction - Added hostname field to EnrollmentRequest for manager display_name population - Updated SPEC.md and API_DOCUMENTATION.md Package fixes: - Arch: Added linux-patch-api.install with post_install/upgrade/remove hooks, user creation, directory creation, config handling - Alpine: Added linux-patch-api.apk-install with pre/post install/deinstall hooks, user creation, directory creation, config handling, missing config.yaml.example - RPM: Dynamic version from Cargo.toml, %ghost %config(noreplace) for live configs, tarball exclusions, /var/log in %files	2026-05-18 23:51:00 +00:00
Echo	92ce1e6e45	Fix: Disable debug package generation to fix empty debugsourcefiles.list error	2026-04-13 15:13:49 +00:00
Echo	f55331253e	Fix build-rpm: add certs directory creation in %install section	2026-04-13 02:15:13 +00:00
Echo	ea7edbd793	Fix build-rpm: comment out BuildRequires (apt packages don't register in RPM db - tools available via apt-get)	2026-04-13 02:07:59 +00:00
Echo	2de8492efa	Enable BuildRequires for Fedora container (native RPM dependency validation)	2026-04-13 01:42:20 +00:00
Echo	6180484af4	Fix build-rpm: comment out BuildRequires (RPM db check fails in Debian container - tools provided by apt/rust-toolchain)	2026-04-13 01:37:06 +00:00
Echo	e1b8c30a24	Fix build-rpm: remove systemd-rpm-macros (Fedora-only, not in Debian repos)	2026-04-13 01:20:10 +00:00
Echo	6f00f5dd8b	Fix RPM build: correct tarball structure, add Source0 to spec, restore script permissions	2026-04-13 00:33:25 +00:00
Echo	65cfb40abb	v1.0.0 Release - All Phases Complete ... Phase 2: Core API Development - 15 REST API endpoints (packages, patches, system, jobs, websocket) - mTLS authentication layer (src/auth/mtls.rs) - IP whitelist enforcement (src/auth/whitelist.rs) - Job manager with async operation support - WebSocket streaming for job status Phase 3: Security Hardening - Security testing: 16/16 tests passing - Fuzz testing: 21 tests, all findings resolved - Threat model validation (STRIDE matrix) - TLS binding fix (critical vulnerability resolved) - Security documentation complete Phase 4: Production Readiness - Performance benchmarking (all targets met) - Package creation (.deb/.rpm structures) - Documentation (README, API docs, deployment guide) - Security hardening (6 vulnerabilities fixed) Deliverables: - API_DOCUMENTATION.md (889 lines) - DEPLOYMENT_GUIDE.md (733 lines) - SECURITY.md (346 lines) - README.md (525 lines) - debian/ package structure - linux-patch-api.spec (RPM) - install.sh installer script - benches/api_benchmarks.rs - Multiple security/performance reports Security Status: 0 vulnerabilities remaining Test Coverage: 31 unit tests, 21 integration tests Build Status: Release optimized	2026-04-10 01:41:19 +00:00