mirror of
https://github.com/p1neappleXpress/OpenFlux.git
synced 2026-10-20 06:11:02 +08:00
8da36d909d
* node-install.sh: any systemd from 219, remove by name, list, uninstall - Portability: "systemctl --now" (systemd 220) and "show --value" (230) are gone, "ss -H" too (older iproute2); apply creates the channel's state directory and the unit allows it with ReadWritePaths=-, so a channel runs where StateDirectory= is unknown (before 235). The updater (restart, liveness by MainPID, rollback) works on those systems too. - remove CHANNEL removes one channel by name from the server's shell (the apps keep passing a config file); list prints the channels with their state and port; uninstall removes every channel and everything the script installed (updater, unit, cores, folders, node user, firewall ports), stopping channel instances whose config is already gone. - mobile: OfferExitCookies (a sign-in handed to the exit) is removed; the account feature it served is not coming. - CI: .github/workflows/node-install.yml runs TestInstallOnVDS on Ubuntu 24.04/22.04/20.04, Debian 12/11, Rocky 9, Alma 8, Fedora 42, Arch and openSUSE Leap 15.6 in systemd containers (deploy/test/vds-dockerfile.sh); the test now also covers list, remove by name and uninstall. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * provision: pin node-install.sh768745dCo-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * Node wizard: no Yandex sign-in for the node The apps no longer hand a node a Yandex sign-in (the wizard takes a link to your own document), so the whole path goes: - node-install.sh: cookies= and set-cookies (write_cookies); a node's own cookie store (CookieStore in node.conf, the transports' state) stays. - provision: Channel.Cookies, CookieStore, ChannelCookies, SetCookies; Plan takes the channel only. - --node-wizard: withCookies, cookies, setCookies, signedIn. - mobile: NodePlan/NodeApply lose withCookies/cookieHeader; NodeSetCookies and NodeSignedIn are removed. Apps already out pin their own script and bundle their own core, so they are not affected. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * provision: pin node-install.shb6b0e3cCo-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * CI node-install: Debian 13 for EOL Debian 11, PAM on RHEL images, state dir owner Debian 11's archive moved (apt-get update fails); RHEL-family images get an authselect profile so sshd's PAM stack exists; systemd sets the state directory's mode itself, so the test checks its owner. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * provision: run the multi-command VDS checks under sh; set test passwords by hash Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * ci: node-install: sshd and PAM state on failure Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * test VDS: /etc/shadow readable by root without CAP_DAC_OVERRIDE Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: p1neappleXpress <a@a.a> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>