Echo
64e7e787f5
- Remove sudo from apt command execution (service runs as root) - Remove RestrictSUIDSGID from systemd service (blocks setuid for apt/dpkg) - Remove NoNewPrivileges from systemd service (blocks sudo PERM_SUDOERS) - Bump version to 0.3.2
43 lines
2.0 KiB
Plaintext
43 lines
2.0 KiB
Plaintext
linux-patch-api (0.3.2-1) unstable; urgency=low
|
|
|
|
* Fix package install: Remove sudo from apt commands (service runs as root)
|
|
* Fix reboot endpoint: Implement actual system reboot via shutdown/systemctl
|
|
* Fix patches handler: Call reboot_system() instead of just logging
|
|
* Remove NoNewPrivileges and RestrictSUIDSGID from systemd service
|
|
* Add CAP_SYS_BOOT capability to systemd service for LXC reboot support
|
|
* Fix dpkg packaging: Remove linux-patch-api user creation, fix directory ownership
|
|
|
|
-- Echo <echo@moon-dragon.us> Sat, 02 May 2026 21:25:00 -0500
|
|
linux-patch-api (0.3.1-1) unstable; urgency=low
|
|
|
|
* Fix reboot endpoint: Implement actual system reboot via shutdown/systemctl
|
|
* Fix patches handler: Call reboot_system() instead of just logging
|
|
* Add CAP_SYS_BOOT capability to systemd service for LXC reboot support
|
|
* Remove unused warn import
|
|
|
|
-- Echo <echo@moon-dragon.us> Sat, 02 May 2026 20:37:00 -0500
|
|
linux-patch-api (0.3.0-1) unstable; urgency=low
|
|
|
|
* v0.3.0 beta release
|
|
* Fix List Jobs connection reset: Add client_disconnect_timeout (5s)
|
|
* Enforce TLS 1.3 only with builder_with_provider()
|
|
* Fix RwLock contention: Release read lock before sorting in list_jobs()
|
|
* Fix systemd service: Remove ProtectSystem=strict
|
|
* Fix systemd service: Change Type=notify to Type=simple
|
|
* Fix systemd service: Add DEBIAN_FRONTEND=noninteractive
|
|
* Add Ubuntu 22.04 CI build job
|
|
* Add apt-get -f install for broken runner deps
|
|
|
|
-- Echo <echo@moon-dragon.us> Sat, 02 May 2026 19:55:00 -0500
|
|
linux-patch-api (1.0.0-1) stable; urgency=medium
|
|
|
|
* Initial production release
|
|
* Secure mTLS-authenticated REST API for remote package management
|
|
* 15 API endpoints for package install/remove, patch application, system management
|
|
* Asynchronous job processing with WebSocket status streaming
|
|
* IP whitelist enforcement and comprehensive audit logging
|
|
* Systemd integration with security hardening
|
|
* Supports Debian 11/12, Ubuntu 20.04/22.04/24.04
|
|
|
|
-- Echo <echo@moon-dragon.us> Thu, 09 Apr 2026 18:57:12 -0500
|