secubox/secubox-deb
1
0
Fork 0
mirror of https://github.com/CyberMind-FR/secubox-deb.git synced 2026-07-28 21:17:36 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fix(appstore): sbx-apt-mesh prepend so mesh IP wins — 0.3.3 (ref #768)
Some checks are pending
License Headers / check (push) Waiting to run
Details

Browse Source
This commit is contained in:
CyberMind-FR 2026-07-01 07:59:12 +02:00
parent 1406a8b0b6
commit 47cc9c8fd0
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
packages/secubox-appstore/debian/changelog
View File

@ -1,4 +1,4 @@
secubox-appstore (0.3.2-1~bookworm1) bookworm; urgency=medium
secubox-appstore (0.3.3-1~bookworm1) bookworm; urgency=medium
* fix(#768): sbx-apt-mesh resolves apt.secubox.in to the rendezvous wg-mesh IP
via /etc/hosts, so the existing signed https source installs over WireGuard

8
packages/secubox-appstore/sbin/sbx-apt-mesh
View File

@ -20,8 +20,12 @@ cmd="${1:-status}"; ip="${2:-$(_rv_ip)}"
case "$cmd" in
enable)
[ "$(_self_ip)" = "$ip" ] && { echo "this node is the rendezvous ($ip) — repo is local"; exit 0; }
sed -i "/$TAG\$/d" "$HOSTS" # drop our previous line
echo "$ip $DOMAIN $TAG" >> "$HOSTS" # resolve over the mesh
# Prepend our line so it WINS over any pre-existing apt.secubox.in entry
# (getent returns the first match); the original stays and resumes on
# disable. Resolves the signed https repo over the mesh.
tmp=$(mktemp)
{ echo "$ip $DOMAIN $TAG"; grep -v "$TAG\$" "$HOSTS"; } > "$tmp"
cat "$tmp" > "$HOSTS"; rm -f "$tmp"
echo "$DOMAIN -> $(getent hosts $DOMAIN | awk '{print $1}' | head -1) (mesh)"
apt-get update >/dev/null 2>&1 && echo "apt-get update OK — packages now install over the mesh, GPG-verified" \
|| { echo "apt-get update FAILED — check mesh reach to $ip:443"; exit 3; }