mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 09:14:33 +00:00
CyberMind-FR
d67e2c03b7
Wires the scale-to-zero services into debian/ packaging: secubox-wakectl entry point (/usr/sbin), templates/waking.html now ships, secubox-waker and secubox-sleeper systemd units registered via dh_installsystemd --name=, enabled/restarted (try-restart, preserving runtime state) in postinst alongside secubox-profiles.service. postinst now also runs secubox-wakectl waf-sync/health-sync so sbxwaf and the health monitor have their lists from first install (nginx-sync stays unwired per the 2026-07-20 pivot). Hardens secubox-sleeper.service with ProtectSystem=strict and an explicit ReadWritePaths covering the actuator's real write set, traced through api/actuate.py/snapshot.py/audit.py: /run/secubox, /var/lib/secubox/profiles/rollback, /var/log/secubox, /data/lxc, and /etc/secubox/waf (haproxy-routes.json, written on a routed module's STOP — missed by a naive reading of the write set). Documents the lifecycle/wake_class policy, the waker/sleeper mechanism and a pilot procedure in README.md, wiki/Architecture.md and .claude/MODULE-COMPLIANCE.md. Bumps changelog to 0.8.0. Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
9 lines
387 B
Plaintext
9 lines
387 B
Plaintext
api/*.py usr/lib/secubox/profiles/api/
|
|
templates/waking.html usr/lib/secubox/profiles/templates/
|
|
profiles/*.toml usr/share/secubox/profiles/
|
|
sbin/secubox-profilectl usr/sbin/
|
|
sbin/secubox-wakectl usr/sbin/
|
|
www/profiles/index.html usr/share/secubox/www/profiles/
|
|
menu.d/11-profiles.json usr/share/secubox/menu.d/
|
|
nginx/profiles.conf etc/nginx/secubox-routes.d/
|