Echo
b615a5639e
Phase 2: Core API Development - 15 REST API endpoints (packages, patches, system, jobs, websocket) - mTLS authentication layer (src/auth/mtls.rs) - IP whitelist enforcement (src/auth/whitelist.rs) - Job manager with async operation support - WebSocket streaming for job status Phase 3: Security Hardening - Security testing: 16/16 tests passing - Fuzz testing: 21 tests, all findings resolved - Threat model validation (STRIDE matrix) - TLS binding fix (critical vulnerability resolved) - Security documentation complete Phase 4: Production Readiness - Performance benchmarking (all targets met) - Package creation (.deb/.rpm structures) - Documentation (README, API docs, deployment guide) - Security hardening (6 vulnerabilities fixed) Deliverables: - API_DOCUMENTATION.md (889 lines) - DEPLOYMENT_GUIDE.md (733 lines) - SECURITY.md (346 lines) - README.md (525 lines) - debian/ package structure - linux-patch-api.spec (RPM) - install.sh installer script - benches/api_benchmarks.rs - Multiple security/performance reports Security Status: 0 vulnerabilities remaining Test Coverage: 31 unit tests, 21 integration tests Build Status: Release optimized
35 lines
1.1 KiB
Plaintext
35 lines
1.1 KiB
Plaintext
Source: linux-patch-api
|
|
Section: admin
|
|
Priority: optional
|
|
Maintainer: Echo <echo@moon-dragon.us>
|
|
Build-Depends: debhelper (>= 12),
|
|
cargo,
|
|
rustc,
|
|
libsystemd-dev,
|
|
pkg-config
|
|
Standards-Version: 4.6.0
|
|
Homepage: https://gitea.moon-dragon.us/echo/linux_patch_api
|
|
Vcs-Git: https://gitea.moon-dragon.us/echo/linux_patch_api.git
|
|
Vcs-Browser: https://gitea.moon-dragon.us/echo/linux_patch_api
|
|
|
|
Package: linux-patch-api
|
|
Architecture: amd64
|
|
Depends: systemd,
|
|
libsystemd0,
|
|
${shlibs:Depends},
|
|
${misc:Depends}
|
|
Description: Secure remote package management API for Linux systems
|
|
Linux Patch API provides a secure, mTLS-authenticated REST API for
|
|
remote package management operations including:
|
|
- Package installation and removal
|
|
- Security patch application
|
|
- System health monitoring
|
|
- Job queue management with WebSocket status streaming
|
|
.
|
|
Features:
|
|
- Mutual TLS (mTLS) authentication
|
|
- IP whitelist enforcement
|
|
- Asynchronous job processing
|
|
- Comprehensive audit logging
|
|
- Systemd integration with security hardening
|