Pulse

danvics/Pulse

Fork 0

Commit graph

Author	SHA1	Message	Date
rcourtman	1ccbdfe046	test: add unit tests for agentupdate security features - Test binary magic verification (ELF, PE, Mach-O) - Test architecture detection - Test Unraid persistent path generation - Test updater configuration defaults - Test edge cases: empty files, too short, non-existent	2025-11-26 13:50:19 +00:00
rcourtman	09ec0c3f01	security: harden agent installers and auto-update mechanism Install script (scripts/install.sh): - Add multi-platform support: Unraid, OpenRC/Alpine, Synology DSM 6/7 - Add input validation for URL, token format, and interval - Add binary magic verification (ELF/Mach-O/PE) - Add cleanup trap for temp files - Wrap script in main() for partial download protection - Fix shellcheck compliance issues - Add curl timeouts Agent auto-update (agentupdate, dockeragent): - Enforce TLS 1.2 minimum version - Make SHA256 checksum verification mandatory - Add 100MB binary size limit - Add binary magic verification before replacement - Add Unraid persistent binary update after self-update - Add 5-minute download timeout Frontend: - Update Linux install description to note auto-detection of init systems	2025-11-26 13:14:58 +00:00
rcourtman	ee35d9e5a5	feat: add auto-update support for unified agent Implement self-update capability for the unified pulse-agent binary: - Add internal/agentupdate package with cross-platform update logic - Hourly version checks against /api/agent/version endpoint - SHA256 checksum verification for downloaded binaries - Atomic binary replacement with backup/rollback on failure - Support for Linux, macOS, and Windows (10 platform/arch combinations) Build and release changes: - Dockerfile builds unified agent for all platforms - build-release.sh includes unified agent in release artifacts - validate-release.sh validates unified agent binaries - Install scripts (install.sh, install.ps1) use correct URL format Related to #727, #737	2025-11-25 23:15:03 +00:00

Author

SHA1

Message

Date

rcourtman

1ccbdfe046

test: add unit tests for agentupdate security features

- Test binary magic verification (ELF, PE, Mach-O)
- Test architecture detection
- Test Unraid persistent path generation
- Test updater configuration defaults
- Test edge cases: empty files, too short, non-existent

2025-11-26 13:50:19 +00:00

rcourtman

09ec0c3f01

security: harden agent installers and auto-update mechanism

Install script (scripts/install.sh):
- Add multi-platform support: Unraid, OpenRC/Alpine, Synology DSM 6/7
- Add input validation for URL, token format, and interval
- Add binary magic verification (ELF/Mach-O/PE)
- Add cleanup trap for temp files
- Wrap script in main() for partial download protection
- Fix shellcheck compliance issues
- Add curl timeouts

Agent auto-update (agentupdate, dockeragent):
- Enforce TLS 1.2 minimum version
- Make SHA256 checksum verification mandatory
- Add 100MB binary size limit
- Add binary magic verification before replacement
- Add Unraid persistent binary update after self-update
- Add 5-minute download timeout

Frontend:
- Update Linux install description to note auto-detection of init systems

2025-11-26 13:14:58 +00:00

rcourtman

ee35d9e5a5

feat: add auto-update support for unified agent

Implement self-update capability for the unified pulse-agent binary:

- Add internal/agentupdate package with cross-platform update logic
- Hourly version checks against /api/agent/version endpoint
- SHA256 checksum verification for downloaded binaries
- Atomic binary replacement with backup/rollback on failure
- Support for Linux, macOS, and Windows (10 platform/arch combinations)

Build and release changes:
- Dockerfile builds unified agent for all platforms
- build-release.sh includes unified agent in release artifacts
- validate-release.sh validates unified agent binaries
- Install scripts (install.sh, install.ps1) use correct URL format

Related to #727, #737

2025-11-25 23:15:03 +00:00

3 commits