feat: add one-command alpha14 server installation #42

Merged

ochenstarik-ui merged 2 commits from codex/release-alpha14 into main

2026-08-15 15:52:21 +00:00

ochenstarik-ui commented

2026-08-15 15:05:03 +00:00

(Migrated from github.com)

Summary - add `smm-setup.sh install-hub PUBLIC_HOST [HTTPS_PORT] [WG_PORT]` and zero-argument `install-node` convenience commands; - detect x86_64/aarch64, download the matching archive plus checksum, manifest, signature, and Fulcio certificate with public `curl`, and fail closed when signed-release material is incomplete; - preserve bootstrap command pass-through, including explicit `-- COMMAND` mode; - document the short installation path and the immutable history of alpha.10-alpha.14; - extend the release contract for argument validation, x64/arm64 selection, orchestration, pass-through, and missing manifest/signature/certificate failures for both new commands. ## Local verification - `bash -n` for scripts under `deploy/` and `tests/bootstrap/` — passed; - `tests/bootstrap/test-release-contract.sh` — passed (`RELEASE_CONTRACT=PASS`); - `tests/bootstrap/test-bootstrap-contract.sh` — passed (`BOOTSTRAP_CONTRACT=PASS`); - `dotnet build ServerMonitorManager.slnx --configuration Release` — passed with 40 pre-existing analyzer warnings on `main` and no errors; - 120 Control tests — passed; - `test-enrollment-token-argv.sh` was not run locally because it requires Linux; - `test-manifest-verification.sh` was not run locally because cosign is not installed; CI covers the signed-manifest path; - local shellcheck was unavailable; CI shellcheck passed. ## CI verification - Linux control and agent — passed - Windows build — passed - Linux platform matrix — passed - Release pipeline workflow_dispatch dry run — passed ## Release safety The dry run used branch `codex/release-alpha14` at `c83fd1ea92692458af2917f783ab441e5a49762b`. Manifest generation and keyless signing passed; the GitHub Release publication step was skipped because the ref was not a tag. This PR has not been merged and `v0.1.0-alpha.14` has not been created.

## Summary - add `smm-setup.sh install-hub PUBLIC_HOST [HTTPS_PORT] [WG_PORT]` and zero-argument `install-node` convenience commands; - detect x86_64/aarch64, download the matching archive plus checksum, manifest, signature, and Fulcio certificate with public `curl`, and fail closed when signed-release material is incomplete; - preserve bootstrap command pass-through, including explicit `-- COMMAND` mode; - document the short installation path and the immutable history of alpha.10-alpha.14; - extend the release contract for argument validation, x64/arm64 selection, orchestration, pass-through, and missing manifest/signature/certificate failures for both new commands. ## Local verification - `bash -n` for scripts under `deploy/` and `tests/bootstrap/` — passed; - `tests/bootstrap/test-release-contract.sh` — passed (`RELEASE_CONTRACT=PASS`); - `tests/bootstrap/test-bootstrap-contract.sh` — passed (`BOOTSTRAP_CONTRACT=PASS`); - `dotnet build ServerMonitorManager.slnx --configuration Release` — passed with 40 pre-existing analyzer warnings on `main` and no errors; - 120 Control tests — passed; - `test-enrollment-token-argv.sh` was not run locally because it requires Linux; - `test-manifest-verification.sh` was not run locally because cosign is not installed; CI covers the signed-manifest path; - local shellcheck was unavailable; CI shellcheck passed. ## CI verification - [Linux control and agent — passed](https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31892897669) - [Windows build — passed](https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31892897628) - [Linux platform matrix — passed](https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31892897638) - [Release pipeline workflow_dispatch dry run — passed](https://github.com/ochenstarik-ui/server-monitor-manager/actions/runs/31893228278) ## Release safety The dry run used branch `codex/release-alpha14` at `c83fd1ea92692458af2917f783ab441e5a49762b`. Manifest generation and keyless signing passed; the GitHub Release publication step was skipped because the ref was not a tag. This PR has not been merged and `v0.1.0-alpha.14` has not been created.