Pulse/scripts
rcourtman 09ec0c3f01 security: harden agent installers and auto-update mechanism
Install script (scripts/install.sh):
- Add multi-platform support: Unraid, OpenRC/Alpine, Synology DSM 6/7
- Add input validation for URL, token format, and interval
- Add binary magic verification (ELF/Mach-O/PE)
- Add cleanup trap for temp files
- Wrap script in main() for partial download protection
- Fix shellcheck compliance issues
- Add curl timeouts

Agent auto-update (agentupdate, dockeragent):
- Enforce TLS 1.2 minimum version
- Make SHA256 checksum verification mandatory
- Add 100MB binary size limit
- Add binary magic verification before replacement
- Add Unraid persistent binary update after self-update
- Add 5-minute download timeout

Frontend:
- Update Linux install description to note auto-detection of init systems
2025-11-26 13:14:58 +00:00
..
dev Fix settings security tab navigation 2025-10-11 23:29:47 +00:00
lib Improve installer UX with pauses and popups on failure 2025-11-25 11:17:37 +00:00
systemd Fix temperature monitoring on standalone Proxmox nodes (addresses #571) 2025-11-13 13:02:15 +00:00
tests Improve temperature proxy diagnostics and tests 2025-11-13 22:31:53 +00:00
.go-version Fix settings security tab navigation 2025-10-11 23:29:47 +00:00
build-release.sh fix: remove references to deleted install-host-agent.sh script 2025-11-26 09:57:06 +00:00
bundle.manifest feat: add shared script library system and refactor docker-agent installer 2025-10-20 15:13:38 +00:00
bundle.sh feat: add shared script library system and refactor docker-agent installer 2025-10-20 15:13:38 +00:00
clean-mock-alerts.sh Add guest agent caching and update doc hints (refs #560) 2025-10-16 08:15:49 +00:00
cleanup.sh Refactor: Code cleanup and localStorage consolidation 2025-11-04 21:50:46 +00:00
create-sensor-user.sh security: complete Phase 1 sensor proxy hardening 2025-10-20 15:13:37 +00:00
docker-build.sh security: complete Phase 1 sensor proxy hardening 2025-10-20 15:13:37 +00:00
generate-release-notes.sh Polish release notes fallback 2025-11-13 09:10:43 +00:00
harden-sensor-proxy.sh security: complete Phase 1 sensor proxy hardening 2025-10-20 15:13:37 +00:00
hot-dev.sh Fix macOS build for sensor-proxy and improve hot-dev script 2025-11-20 12:28:01 +00:00
install-container-agent.sh fix(scripts): improve checksum verification robustness against whitespace 2025-11-25 08:24:26 +00:00
install-docker-agent.sh feat: improve legacy agent detection and migration UX 2025-11-25 23:26:22 +00:00
install-docker.sh feat: serve install scripts from GitHub releases instead of main branch 2025-11-26 08:59:59 +00:00
install-go-toolchain.sh Fix settings security tab navigation 2025-10-11 23:29:47 +00:00
install-host-agent.ps1 feat: improve legacy agent detection and migration UX 2025-11-25 23:26:22 +00:00
install-sensor-proxy.sh feat: serve install scripts from GitHub releases instead of main branch 2025-11-26 08:59:59 +00:00
install.ps1 fix: propagate unified agent version and improve legacy cleanup 2025-11-25 23:39:10 +00:00
install.sh security: harden agent installers and auto-update mechanism 2025-11-26 13:14:58 +00:00
migrate-sensor-proxy-control-plane.sh fix(sensor-proxy): eliminate race in migration script 2025-11-19 11:04:58 +00:00
migrate-temperature-proxy.sh Auto-deploy proxy for standalone temp monitoring 2025-11-16 09:47:07 +00:00
package-helm-chart.sh release: prepare v4.25.0 2025-10-22 10:46:18 +00:00
pulse-auto-update.sh feat: serve install scripts from GitHub releases instead of main branch 2025-11-26 08:59:59 +00:00
pulse-proxy-rotate-keys.sh refactor: Rename pulse-temp-proxy to pulse-sensor-proxy 2025-10-13 13:17:05 +00:00
pulse-sensor-cleanup.sh fix: filter out qdevice from cluster node discovery 2025-11-24 22:54:58 +00:00
pulse-sensor-proxy.service Fix temperature monitoring for clustered and LXC Proxmox environments (addresses #571) 2025-11-13 13:25:27 +00:00
run-tests-mock.sh Adopt multi-token auth across docs, UI, and tooling 2025-10-14 15:47:49 +00:00
secure-sensor-files.sh security: complete Phase 1 sensor proxy hardening 2025-10-20 15:13:37 +00:00
setup-log-forwarding.sh docs: highlight runbooks in index and script verification checklist 2025-11-14 10:39:10 +00:00
sync-production-config.sh WIP: Save all pending changes including frontend updates and unified agent scaffolding 2025-11-25 11:27:07 +00:00
test-vm-disk.sh Update Proxmox guest agent permissions docs and tooling (refs #548) 2025-10-14 10:21:52 +00:00
toggle-mock.sh refactor: remove legacy DISABLE_AUTH flag and enhance authentication UX 2025-10-27 19:46:51 +00:00
trigger-release.sh chore: remove outdated docs, update cleanup script and release workflow 2025-11-24 19:14:54 +00:00
uninstall-host-agent.ps1 Refine Windows host installer logging (related to #709) 2025-11-13 23:09:22 +00:00
uninstall-host-agent.sh Add TrueNAS SCALE persistence for host agent (Related to #718) 2025-11-21 10:07:14 +00:00
validate-published-release.sh Related to #698: harden installer release detection 2025-11-12 17:56:16 +00:00
validate-release.sh fix: remove references to deleted install-host-agent.sh script 2025-11-26 09:57:06 +00:00