ochenstarik/server-monitor-manager
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases 17 Packages Wiki Activity Actions
106 commits 8 branches 20 tags 2.6 MiB
Commit graph

46 commits

Author SHA1 Message Date
ochenstarik-ui
45b1ad3abe fix(ci): remove alpha.8 backward-compat test from manifest verification, bump to alpha.12 
The alpha.8 backward-compat test in test-manifest-verification.sh was the
second copy that broke both alpha.10 and alpha.11 pipelines. The test fails
because verify-release checks for artifacts (bootstrap/*, mesh firewall unit)
that were added after alpha.8.

Per release-policy.md, tags are immutable — bump to alpha.12.
 2026-08-12 00:52:03 +07:00
ochenstarik-ui
5349533994 Bump version to v0.1.0-alpha.11 
alpha.10 tag produced a failed release pipeline (test-release-contract.sh
still asserted alpha.9, and run-negative-tests.sh test 5 failed on
cross-version verify-release). Per release-policy.md, published tags are
immutable — errors are fixed in the next tag.
 2026-08-12 00:47:02 +07:00
ochenstarik-ui
48d096a06e fix(ci): update release contract to alpha.10, remove backward compat test from bootstrap job 
- test-release-contract.sh: update hardcoded DEFAULT_RELEASE_TAG assertion to v0.1.0-alpha.10
- run-negative-tests.sh: remove test 5 (alpha.8 backward compat) — verify-release checks
  for artifacts added in later versions, making cross-version testing inherently fragile
 2026-08-11 12:01:19 +07:00
ochenstarik-ui
481d4b7c8a Add alpha.8 backward compatibility test 2026-08-11 01:30:39 +07:00
ochenstarik-ui
6ca8ac8469 Add release verification workflow 2026-08-11 01:28:50 +07:00
Ochenstarik
b897b0ea88 fix(bootstrap): compare release versions semantically against the installed one 
The update guard compared the archive version with PROGRAM_VERSION using shell
string ordering. Both halves were wrong.

PROGRAM_VERSION is a constant describing the bootstrap source tree ("0.2.0-dev"),
never the deployed component, so it could not represent what is installed. The
cross-role compatibility check compared it with a manifest field such as
"v0.1.0-alpha.9"; those can never be equal, so update-control on a host that also
runs the agent always failed. The downgrade guard compared the same mismatched
pair and passed only by accident, because "v" sorts above "0" in ASCII.

String ordering is also wrong for the version scheme in use: "0.1.0-alpha.10"
sorts below "0.1.0-alpha.9", so the next release after the ninth would have been
rejected as a downgrade.

- record the installed version per role at install and update time, and compare
  against that instead of PROGRAM_VERSION;
- order versions with sort -V after stripping the leading "v", so prerelease
  numbering and tag prefixes compare correctly;
- treat an unknown peer version as a warning rather than a failure, because
  installations predating version recording have nothing to compare against;
- guard all of the above in the bootstrap contract test, including the six
  ordering cases and a check that the lexicographic comparison is not restored.

Verified by deliberately reintroducing each defect: lexicographic comparison,
sort without -V, and a missing version record are all caught by the contract test.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
 2026-08-11 01:05:22 +07:00
ochenstarik-ui
b314b4eb03 fix(tests): preserve SMM_ALLOW_UNSIGNED over sudo in native smoke tests 2026-08-10 23:12:59 +07:00
ochenstarik-ui
ff24aceaa3 fix(tests): Support hardened verify_archive in smoke and contract tests 
- test-bootstrap-contract: Generate signed manifest.json with cosign test key
- systemd smoke tests: Pass SMM_ALLOW_UNSIGNED=1 fallback when manifest is missing (for CI PR runs)
 2026-08-10 23:08:57 +07:00
ochenstarik-ui
d21c0c5d22 fix(security): Add version mismatch check, MSIX cleanup on hash failure, TraceSource diagnostics, csproj fix 
- UpdateService: manifest version must match release tag_name (prevents cross-version attacks)
- UpdateService: corrupted MSIX deleted immediately on hash mismatch
- UpdateService: TraceSource logging for all verification steps
- UpdateService: Trust anchor constants with docs/release-policy.md reference
- Bootstrap: docs/release-policy.md reference next to identity constants
- Test csproj: add UpdateService.cs Compile Include (tests won't compile without this)
 2026-08-10 20:12:18 +07:00
ochenstarik-ui
ad396fd6a2 fix(tests): Fix Test4 broken JSON, Test2 false positive, add cleanup trap and Test9/Test10 2026-08-10 20:07:49 +07:00
ochenstarik-ui
4f583c9a03 feat(security): Finalize Queue B signed delivery requirements 2026-08-10 19:58:58 +07:00
ochenstarik-ui
ef137bcf7a fix(bootstrap): verify compatible component versions during updates 
- Fixed archive hash extraction from manifest using archive basename
- Added version compatibility checks for Control/Agent/helper in update_role
- Expanded UpdateService tests to 4 unit tests
- Verified against alpha.8 manifest
 2026-08-10 18:12:22 +07:00
Ochenstarik
004f01a842 [verified] Enforce a single release publisher 2026-08-10 17:43:18 +07:00
Ochenstarik
12dfaf71e8 [verified] Fix monitor snapshot contract and release compatibility 2026-08-10 17:24:07 +07:00
ochenstarik-ui
9c2440412d feat(monitor): add monitor role installation 2026-08-10 15:04:08 +07:00
ochenstarik-ui
04eab57ef1 Merge branch 'antigravity/signed-delivery-queue-a' 2026-08-10 14:34:57 +07:00
ochenstarik-ui
f3aed21aea style: fix trailing whitespace in SchemaCompatibilityTests.cs 2026-08-10 13:35:50 +07:00
ochenstarik-ui
39736dcee0 Fix CI failure in SQLite compat test 2026-08-10 13:32:36 +07:00
ochenstarik-ui
03e3683074 Add SQLite backward compatibility test (Hermes Task 1) 2026-08-10 13:26:21 +07:00
ochenstarik-ui
79a5e8c071 feat: Manifest v2 and keyless signing 2026-08-10 12:06:53 +07:00
ochenstarik-ui
c30a1fc56e feat(cert): refine certificate renewal endpoints, remove TEST_EVIDENCE.md, and add 401 rejection unit test 2026-08-10 12:01:44 +07:00
ochenstarik-ui
25a93f7b35 feat: client certificate lifecycle management, auto-renewal, and CA rotation guide 2026-08-10 12:01:43 +07:00
dependabot[bot]
df4dfd177a
Bump SQLitePCLRaw.bundle_e_sqlite3 from 2.1.12 to 3.0.5 (#23) 
* Bump SQLitePCLRaw.bundle_e_sqlite3 from 2.1.12 to 3.0.5

---
updated-dependencies:
- dependency-name: SQLitePCLRaw.bundle_e_sqlite3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* build: update Control.Tests lockfile for SQLite 3.0.5

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ochenstarik-ui <ochenstarik@gmail.com>
 2026-08-10 00:54:27 +07:00
dependabot[bot]
ebd9ae5ac4
Bump Microsoft.NET.Test.Sdk from 18.0.1 to 18.8.1 (#22) 
* Bump Microsoft.NET.Test.Sdk from 18.0.1 to 18.8.1

---
updated-dependencies:
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* build: update Desktop Security lockfile for Microsoft.NET.Test.Sdk 18.8.1

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ochenstarik-ui <ochenstarik@gmail.com>
 2026-08-10 00:45:57 +07:00
ochenstarik-ui
80b4797f2a
fix(enrollment): repair node enrollment path (#24) 
* fix(enrollment): repair node enrollment path

Make trimmed Agent configuration fail closed, harden Control URL validation, add device-code and bootstrap delivery, and make alpha.7 Control updates migration- and recovery-safe.

* fix(enrollment): allow agent token cleanup

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-08-09 22:32:53 +07:00
ochenstarik-ui
1b798e7ee8
Merge pull request #15 from ochenstarik-ui/antigravity/reproducible-builds 
feat: reproducible builds — central package versions and lock files
 2026-08-09 19:08:08 +07:00
ochenstarik-ui
ec78537656 feat: reproducible builds — central package versions and lock files 2026-08-09 18:13:34 +07:00
ochenstarik-ui
d645812d29
test(helper): cover missing node row (#17) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-08-09 17:56:13 +07:00
ochenstarik-ui
00dadf27ce
feat(control): reconcile links from factual state (#16) 
Add fact-first Link reconciliation, duplicate and orphan cleanup, generation-aware scheduling, retention, Desktop drift visibility, and strict helper contracts. Preserve exact B-3R batching and lock-safe finalization with Linux/native trimmed evidence.

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-08-09 12:53:49 +07:00
ochenstarik-ui
b11c277ac7
feat(control): add background link reconciliation (#12) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-08-03 13:55:48 +07:00
ochenstarik-ui
89ef2fd9d3
feat(control): reconcile link policies (#11) 
* feat(control): reconcile link policies

* test(control): align factual helper sequence

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-08-03 10:52:18 +07:00
ochenstarik-ui
ba14d29211
fix(security): close desktop and helper debts (#10) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-31 13:22:00 +07:00
ochenstarik-ui
c13501e529
fix(security): pin SSH trust and protect session keys (#8) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-31 02:36:52 +07:00
ochenstarik-ui
93e0f8ddbd
fix(security): harden enrollment and provisioning helper (#7) 
Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-31 02:32:47 +07:00
ochenstarik-ui
2d28b8d19c
Execute confirmed timezone provisioning safely (#6) 
* Add standalone Linux bootstrap foundation

* Record bootstrap foundation progress

* Add single-code Node enrollment

* Validate bootstrap release payloads

* Add managed WireGuard mesh bootstrap

* Exercise repeated systemd installation in CI

* Expose systemd smoke failure diagnostics

* Fix bootstrap os-release variable collision

* Create policy helper directory during install

* Capture systemd smoke healthcheck errors

* Report Control listener diagnostics in CI

* Capture stalled Control process diagnostics

* Set service working directories

* Run protected CA healthcheck as root

* Add local Mesh emergency recovery

* Add multi-architecture Linux system matrix

* Add provisioning job control plane

* Stabilize Debian systemd smoke files

* Add node-scoped provisioning job channel

* Add provisioning progress state machine

* Reconcile expired provisioning jobs

* Add provisioning rollback workflow

* Add redacted provisioning event history

* Add restricted provisioning preflight helper

* Persist typed provisioning preflight facts

* Add preflight desired state drift detection

* Define strict base install schema catalog

* Add safe base install plan generation

* Add pre-confirmation base install plans

* Test base install plan API flow

* Authorize confirmed provisioning execution

* Execute confirmed timezone provisioning safely

* test: stabilize execution grant expiry boundary

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-30 21:40:30 +07:00
ochenstarik-ui
3851d87534
Add standalone Linux bootstrap foundation (#5) 
* Add standalone Linux bootstrap foundation

* Record bootstrap foundation progress

* Add single-code Node enrollment

* Validate bootstrap release payloads

* Add managed WireGuard mesh bootstrap

* Exercise repeated systemd installation in CI

* Expose systemd smoke failure diagnostics

* Fix bootstrap os-release variable collision

* Create policy helper directory during install

* Capture systemd smoke healthcheck errors

* Report Control listener diagnostics in CI

* Capture stalled Control process diagnostics

* Set service working directories

* Run protected CA healthcheck as root

* Add local Mesh emergency recovery

* Add multi-architecture Linux system matrix

* Add provisioning job control plane

* Stabilize Debian systemd smoke files

* Add node-scoped provisioning job channel

* Add provisioning progress state machine

* Reconcile expired provisioning jobs

* Add provisioning rollback workflow

* Add redacted provisioning event history

* Add restricted provisioning preflight helper

* Persist typed provisioning preflight facts

* Add preflight desired state drift detection

* Define strict base install schema catalog

* Add safe base install plan generation

* Add pre-confirmation base install plans

* Test base install plan API flow

* Authorize confirmed provisioning execution

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-30 21:18:39 +07:00
ochenstarik-ui
266900115c
Harden Link lifecycle and Control operations 
* Harden link lifecycle and control operations

* Complete three-server acceptance lifecycle

---------

Co-authored-by: Ochenstarik <ochenstarik@inbox.ru>
 2026-07-19 12:25:10 +07:00
Ochenstarik
199e70c804 Add 100-node Hub load test 2026-07-17 08:28:31 +07:00
Ochenstarik
f34f902f3b Add source-scoped automation identity 2026-07-17 08:15:35 +07:00
Ochenstarik
160a5c683d Export redacted desktop diagnostics 2026-07-17 00:56:29 +07:00
Ochenstarik
2fe570afd8 Test kill switch helper failures 2026-07-17 00:38:54 +07:00
Ochenstarik
7cffd04d2f Enforce disabled links after reconnect 2026-07-17 00:27:42 +07:00
Ochenstarik
d63554c629 Add certificate re-enrollment lifecycle 2026-07-16 23:59:52 +07:00
Ochenstarik
9efd8324eb Buffer offline agent metrics 2026-07-16 23:07:36 +07:00
Ochenstarik
1e5e44a6ad Move Links to SQLite control plane 2026-07-16 21:59:20 +07:00
Ochenstarik
46a1c393c7 Add persistent mTLS control layer 2026-07-16 20:35:05 +07:00