projection: bind the repaired release source
The final projection state matches the source-owned release and public-surface policy. Source-Sha: c1a84422a30a1dcf4ac9880a979de8fc6d4cb6c1 Policy-Sha: c1a84422a30a1dcf4ac9880a979de8fc6d4cb6c1 Tree-Digest: 13c2b0b731c29662c4909f73fc7246e8a0592c7e914fb8724d74594e38bebd69
This commit is contained in:
Fimeg
parent
b735850987
commit
d175bc5f77
8 changed files with 23 additions and 53 deletions
|
|
@ -299,7 +299,12 @@ jobs:
|
|||
|
||||
- name: Install cargo-zigbuild
|
||||
if: matrix.use_zigbuild
|
||||
run: pip3 install --break-system-packages cargo-zigbuild
|
||||
run: |
|
||||
pip_args=()
|
||||
if pip3 install --help | grep -q -- '--break-system-packages'; then
|
||||
pip_args+=(--break-system-packages)
|
||||
fi
|
||||
pip3 install "${pip_args[@]}" cargo-zigbuild
|
||||
|
||||
- name: Download web UI
|
||||
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3
|
||||
|
|
|
|||
|
|
@ -59,17 +59,6 @@ RAF/verification/03-key-rotation.md
|
|||
RAF/verification/04-replay-protection.md
|
||||
README.md
|
||||
SECURITY.md
|
||||
Screenshots/7Zip-Updates-RedFlag-Dependency.png
|
||||
Screenshots/RedFlag Agent List.png
|
||||
Screenshots/RedFlag Default Dashboard.png
|
||||
Screenshots/RedFlag Docker Dashboard.png
|
||||
Screenshots/RedFlag Heartbeat System.png
|
||||
Screenshots/RedFlag History Dashboard.png
|
||||
Screenshots/RedFlag Linux Agent Details.png
|
||||
Screenshots/RedFlag Live Operations - Failed Dashboard.png
|
||||
Screenshots/RedFlag Updates Dashboard.png
|
||||
Screenshots/RedFlag Windows Agent Details.png
|
||||
Screenshots/Upstream-Version-Tracking.png
|
||||
THIRD_PARTY_LICENSES.md
|
||||
agent/NOTICE
|
||||
agent/cmd/agent/cli.go
|
||||
|
|
|
|||
|
|
@ -7,35 +7,9 @@
|
|||
".publication/evidence/github-break-glass-2026-09-04.json",
|
||||
"RAF/components/06-session-broker.md",
|
||||
"RAF/flows/03-agent-upgrade.md",
|
||||
"Screenshots/AgentMgmt.png",
|
||||
"Screenshots/Lore Testing.png",
|
||||
"Screenshots/Overview.png",
|
||||
"Screenshots/RedFlag Agent Dashboard.png",
|
||||
"Screenshots/RedFlag Linux Agent Health Details.png",
|
||||
"Screenshots/RedFlag Linux Agent History Extended.png",
|
||||
"Screenshots/RedFlag Linux Agent Update Details.png",
|
||||
"Screenshots/RedFlag Registration Tokens.jpg",
|
||||
"Screenshots/RedFlag Settings Page.jpg",
|
||||
"Screenshots/RedFlag Windows Agent History .png",
|
||||
"Screenshots/RedFlag Windows Agent History Extended.png",
|
||||
"Screenshots/RedFlagIntro.jpg",
|
||||
"Screenshots/Screenshot 2026-05-31 at 10-24-24 RedFlag Dashboard.png",
|
||||
"Screenshots/Screenshot 2026-05-31 at 12-13-09 RedFlag Dashboard.png",
|
||||
"Screenshots/Screenshot 2026-05-31 at 20-49-57 RedFlag Dashboard.png",
|
||||
"scripts/generate-keypair.go"
|
||||
],
|
||||
"review_required": [
|
||||
"Screenshots/7Zip-Updates-RedFlag-Dependency.png",
|
||||
"Screenshots/RedFlag Default Dashboard.png",
|
||||
"Screenshots/RedFlag Docker Dashboard.png",
|
||||
"Screenshots/RedFlag Heartbeat System.png",
|
||||
"Screenshots/RedFlag History Dashboard.png",
|
||||
"Screenshots/RedFlag Linux Agent Details.png",
|
||||
"Screenshots/RedFlag Live Operations - Failed Dashboard.png",
|
||||
"Screenshots/RedFlag Agent List.png",
|
||||
"Screenshots/RedFlag Updates Dashboard.png",
|
||||
"Screenshots/Upstream-Version-Tracking.png",
|
||||
"Screenshots/RedFlag Windows Agent Details.png",
|
||||
"RAF/README.md",
|
||||
"RAF/components/04-helper.md",
|
||||
"RAF/components/05-desktop.md",
|
||||
|
|
|
|||
|
|
@ -10,6 +10,14 @@ Format: version, date, then grouped by category (Added, Changed, Removed, Fixed,
|
|||
|
||||
---
|
||||
|
||||
## v0.2.9.7 (September 2026)
|
||||
|
||||
### Fixed
|
||||
- Release builds now use one pinned MSI compiler from the source tree and
|
||||
install the introspection headers it requires.
|
||||
- Darwin release jobs install cargo-zigbuild across both externally managed
|
||||
and conventional Python environments.
|
||||
|
||||
## v0.2.9.6 (September 2026)
|
||||
|
||||
### Fixed
|
||||
|
|
|
|||
14
README.md
14
README.md
|
|
@ -38,19 +38,19 @@ What makes RedFlag different: the software that patches your fleet runs as root
|
|||
|
||||
---
|
||||
|
||||
|  |  |  |
|
||||
|  |  |  |
|
||||
|---|---|---|
|
||||
|
||||
<details>
|
||||
<summary>More screenshots</summary>
|
||||
|
||||
|  |  |  |
|
||||
|  |  |  |
|
||||
|---|---|---|
|
||||
|
||||
|  |  |  |
|
||||
|  |  |  |
|
||||
|---|---|---|
|
||||
|
||||
|  |  | |
|
||||
|  |  | |
|
||||
|---|---|---|
|
||||
|
||||
</details>
|
||||
|
|
@ -101,12 +101,6 @@ curl -sfL -H "X-Registration-Token: your-token" "https://your-server.com/api/v1/
|
|||
```
|
||||
|
||||
**Windows:**
|
||||
|
||||
Run elevated Windows PowerShell with an operator-installed OpenSSL 3 executable
|
||||
on `PATH` (`Get-Command openssl`). The installer checks Ed25519 acceptance and
|
||||
rejection before changing the agent. Missing verification support, unsigned or
|
||||
invalid signatures, and manifest hash mismatches stop installation. Installing
|
||||
PowerShell 7 alone does not supply this verifier.
|
||||
```powershell
|
||||
iwr -Headers @{"X-Registration-Token"="your-token"} "https://your-server.com/api/v1/install/windows" | iex
|
||||
```
|
||||
|
|
|
|||
|
|
@ -21,7 +21,7 @@ services:
|
|||
context: .
|
||||
dockerfile: ./server/Dockerfile
|
||||
args:
|
||||
BUILD_VERSION: ${BUILD_VERSION:-0.2.9.6}
|
||||
BUILD_VERSION: ${BUILD_VERSION:-0.2.9.7}
|
||||
container_name: redflag-server
|
||||
volumes:
|
||||
- server-config:/app/config
|
||||
|
|
|
|||
|
|
@ -9,8 +9,8 @@ WORK=$(mktemp -d)
|
|||
|
||||
sudo apt-get update -qq
|
||||
sudo apt-get install -y -qq build-essential valac bison gettext ninja-build \
|
||||
libglib2.0-dev libgsf-1-dev libgcab-dev libxml2-dev gobject-introspection \
|
||||
python3-venv curl jq
|
||||
libglib2.0-dev libgirepository1.0-dev libgsf-1-dev libgcab-dev \
|
||||
libxml2-dev gobject-introspection python3-venv curl jq
|
||||
|
||||
curl --fail --location --retry 3 \
|
||||
https://download.gnome.org/sources/msitools/0.106/msitools-0.106.tar.xz \
|
||||
|
|
|
|||
|
|
@ -15,8 +15,8 @@ import (
|
|||
// tag — the release gate enforces this. ldflags may override at build time;
|
||||
// the release pipeline injects the tag so binaries and source agree.
|
||||
var (
|
||||
AgentVersion = "0.2.9.6"
|
||||
ConfigVersion = "0.2.9.6"
|
||||
AgentVersion = "0.2.9.7"
|
||||
ConfigVersion = "0.2.9.7"
|
||||
MinAgentVersion = "0.1.22"
|
||||
)
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue