Pascal Vizeli
1f69cf0fe6
Verify the cgroup supported level ( #3688 )
...
* Verify the cgroup supported level
* add tests
2022-06-22 11:22:27 -04:00
Mike Degatano
ccd2c31390
Move repository urls to store settings file ( #3665 )
...
* Move repository urls to store settings file
* Remove default repos from supervisor config
* Fix clone at initial store load
* Mock git load in repository fixture
2022-06-07 10:02:21 +02:00
Mike Degatano
138fd7eec9
APIs for adding/removing an addon repository ( #3649 )
...
* APIs for adding/removing an addon repository
* Misunderstood addons.store, fixed usage
2022-05-23 09:16:42 +02:00
Pascal Vizeli
942b5e6150
Rework fixups & Add integrity ( #3614 )
...
* Rework fixups & Add integrity
* Fix tests
* fix test v2
* Protect ddos
2022-05-05 16:21:19 +02:00
Pascal Vizeli
ca1f764080
Add integrity check ( #3608 )
...
* Add integrity check
* add API test
* add tests
* tests for add-ons
2022-04-30 10:14:43 +02:00
Mike Degatano
8bb4596d04
Add API option to disable fallback DNS ( #3586 )
...
* Add API option to disable fallback DNS
* DNS unsupported evaluation and fallback in sentry
2022-04-25 18:15:40 +02:00
Mike Degatano
f3e2ccce43
Create issue for detected DNS server problem ( #3578 )
...
* Create issue for detected DNS server problem
* Validate behavior on restart as well
* tls:// not supported, remove check
* Move DNS server checks into resolution checks
* Revert all changes to plugins.dns
* Run DNS server checks if affected
* Mock aiodns query during all checks tests
2022-04-21 10:55:49 +02:00
Mike Degatano
dd3a4a1f47
Add unsupported message if no systemd-resolved ( #3487 )
...
* Require resolved for supported systems
* Added properties for dbus resolved
2022-03-07 10:38:24 +01:00
Pascal Vizeli
9104b287e5
New Backup format for core ( #3451 )
...
* New Backup format for core
* cleanup
* next round
* partial resotre encrypted function of metadata
* Using securetar as modul
* fix securetar imports
* simplify
* more typing
* adjust handling
* Handling replace better
* increase the order
* more logic cleanup
* create new core backup
* handle restore
* fix tests
* better checks
* Fix attribute issues
* Update supervisor/backups/manager.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Address comments
* Fix tests
* Update supervisor/exceptions.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2022-02-23 16:08:02 +01:00
Mike Degatano
d2e0b0417c
Hash correct folder in source_mods tests ( #3442 )
...
Source mods test was corrected to start from `supervisor` folder within repo and not include tests. The patch here was still starting from the workspace directory since that's what it used to do
2022-02-10 11:33:47 -05:00
dependabot[bot]
d4fd8f3f0d
Bump black from 21.12b0 to 22.1.0 ( #3425 )
...
* Bump black from 21.12b0 to 22.1.0
Bumps [black](https://github.com/psf/black ) from 21.12b0 to 22.1.0.
- [Release notes](https://github.com/psf/black/releases )
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md )
- [Commits](https://github.com/psf/black/commits/22.1.0 )
---
updated-dependencies:
- dependency-name: black
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update black
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Pascal Vizeli <pvizeli@syshack.ch>
2022-02-10 14:13:40 +01:00
Pascal Vizeli
3478005e70
Using CAS for content-trust ( #3382 )
...
* Using CAS for content-trust
* v2
* Fix linting errors
* Adjust field checked for status in CAS response
* CI workflow needs CAS not VCN now
* Use cwd in test as code won't be in /usr/src
* Pre-cache CAS pub key for supervisor
* Cas doesn't actually need key file executable
Co-authored-by: Mike Degatano <michael.degatano@gmail.com>
2022-02-10 09:21:21 +01:00
Joakim Sørensen
ef5b6a5f4c
Rename unsupported reason container to software ( #3240 )
...
* Rename unsupported reason container to software
* rename in tests
2021-10-19 11:26:58 +02:00
Joakim Sørensen
bb474a5c14
Only run container evaluation when system is running ( #3239 )
...
* Only run container evaluation when system is running
* adjust test
2021-10-18 20:25:50 +02:00
Joakim Sørensen
8a553dbb59
Adjust container evaluation ( #3174 )
...
* Adjust container evaluation
* remove test
2021-10-18 13:58:51 +02:00
Pascal Vizeli
5933b66b1c
Add os-agent to evaluations for supported systems ( #3138 )
2021-09-22 15:59:35 +02:00
Pascal Vizeli
271e4f0cc4
Support OS-Agent Data disk ( #3120 )
...
* Support OS-Agent Data disk
* fix lint
* add tests
* Fix empty path
* revert change
* Using as_posix()
* clean not needed cast
* rename
* Rename files
2021-09-17 15:01:07 +02:00
Pascal Vizeli
b2abe37d72
Add check for plugin trust ( #3080 )
...
* Add check for plugin trust
* Update supervisor/resolution/checks/plugin_trust.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2021-08-30 10:56:05 +02:00
Pascal Vizeli
d54c23952f
Codenotary vcn 0.9.8 - System trust check ( #3070 )
...
* Update codenotary 0.9.8
* Fix lint
* ditch wrong code
* Fix run health check
* remove old code
* better structured
* more cleaner
* Fix core
* Add tests
* addjust test
* Split checks
* Update supervisor/resolution/checks/core_trust.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Fix line end
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2021-08-24 12:19:08 +02:00
Joakim Sørensen
419f603571
Rename snapshot -> backup ( #2940 )
2021-07-27 10:06:09 +02:00
Pascal Vizeli
2b6829a786
OS-Agent support ( #2811 )
...
* OS-Agent support
* add agent to host feature
* Add support for os-agent on devcontainer
* Rename core
* fix tests
* add setter
* add cgroup / apparmor
* all interfaces added
* fix import
* Add tests
* More tests
* Finish tests
* reformating xml files
* fix doc string
* address comments
* change return value
* fix tests
* Update supervisor/dbus/agent/__init__.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Update scripts/supervisor.sh
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2021-06-30 11:55:53 +02:00
Joakim Sørensen
4f9e646b4c
Fix addon_pwned enabled setter ( #2952 )
...
* Fix addon_pwned enabled setter
* whatever
* adjust
2021-06-14 11:33:53 +02:00
Pascal Vizeli
b59f741162
Validate secrets on options/validate UI check ( #2854 )
...
* Validate secrets on options/validate UI check
* Allow schema as payload
* Update supervisor/api/addons.py
Co-authored-by: Franck Nijhof <git@frenck.dev>
* Offload into a module
* using new function
* disable check
* fix options value
* generated return value
* add debug logging
Co-authored-by: Franck Nijhof <git@frenck.dev>
2021-05-10 14:27:50 +02:00
Pascal Vizeli
62d198111c
System unsupported source modification ( #2789 )
...
Co-authored-by: Franck Nijhof <git@frenck.dev>
2021-04-13 11:59:12 +02:00
Pascal Vizeli
3615091c93
Evaluate AppArmor support ( #2784 )
...
* Evaluate AppArmor support
* Update supervisor/resolution/evaluations/apparmor.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2021-04-06 23:41:57 +02:00
Pascal Vizeli
82f76f60bd
Force / Enforce security if service is not available ( #2744 )
...
* Force / Enforce security if service is not available
* add options
* Add tests
* force security on test
* force security add-on validation
* Adjust style like codenotary
* Different exception type for backend error
* Adjust messages
* add comments
* ditch, not needed
* Address comment
* fix build
2021-03-24 14:36:23 +01:00
Pascal Vizeli
cb3e2dab71
Full content trust support ( #2735 )
...
* Full content trust support
* expose content-trust for info
* fix log message
* Add system test
* Fix name
* Add tests
* ditch wrong disable
* fix partition
* remove untrust image
2021-03-20 00:10:35 +01:00
Joakim Sørensen
059233c111
Dynamically load resolution checks ( #2716 )
...
* Dynamically load resouces checks
* address comment
* Apply suggestions from code review
Co-authored-by: Pascal Vizeli <pvizeli@syshack.ch>
* Update supervisor/resolution/check.py
* fix check
Co-authored-by: Pascal Vizeli <pvizeli@syshack.ch>
2021-03-15 10:28:18 +01:00
Joakim Sørensen
73849b7468
Check management ( #2703 )
...
* Check management
* Add test
* Don't allow disable core_security
* options and decorator
* streamline config handling
* streamline v2
* fix logging
* Add tests
* Fix test
* cleanup v1
* fix api
* Add more test
* Expose option also for cli
* address comments from Paulus
* Address second comment
* Update supervisor/resolution/checks/base.py
Co-authored-by: Paulus Schoutsen <balloob@gmail.com>
* fix lint
* Fix black
Co-authored-by: Pascal Vizeli <pvizeli@syshack.ch>
Co-authored-by: Paulus Schoutsen <balloob@gmail.com>
2021-03-12 11:32:56 +01:00
Pascal Vizeli
33385b46a7
Fix add-on is not installed anymore ( #2656 )
...
* Fix add-on is not installed anymore
* Fix and add tests
2021-03-01 17:19:38 +01:00
Pascal Vizeli
31f5033dca
Add throttle to job execution ( #2631 )
...
* Add throttle to job execution
* fix unittests
* Add tests
* address comments
* add comment
* better on __init__
* New text
* Simplify logic
2021-02-25 23:29:03 +01:00
Pascal Vizeli
85d527bfbc
Add check for pwned secrets to resolution center ( #2614 )
...
* Add check for pwned secrets to resolution center
* restructure check
* add checks
* Add test
* Add test
* reload secrets before check
* simplify
* create notification
* Use own exceptions
* Check on startup
* Apply suggestions from code review
Co-authored-by: Franck Nijhof <git@frenck.dev>
* Add job decorator
* Update supervisor/resolution/notify.py
Co-authored-by: Franck Nijhof <git@frenck.dev>
* Update supervisor/utils/pwned.py
Co-authored-by: Franck Nijhof <git@frenck.dev>
Co-authored-by: Franck Nijhof <git@frenck.dev>
2021-02-25 09:37:45 +01:00
Pascal Vizeli
785dc64787
Imrove the LXC detection ( #2599 )
2021-02-22 11:39:18 +01:00
Pascal Vizeli
6a0206c1e7
Next generation hardware handling ( #2429 )
...
* Next generation hardware handling
* need daemon for some details
* fix tests
* fix wrong coresys lookup
* test initial import
* test device lookup
* validate if device exists
* Add cgroups rules manager
* mapping udev from host
* Modify validation/options handling
* lookup devices
* add support for host udev mapping
* next
* Add policy support to add-ons
* Depricate hardware trigger call
* next cleanup round
* detect USB linking
* optimize
* readd udev utils for backwards compatibility
* fix tests
* Add more tests
* fix tests
* Make device explicit
* Add filter
* work on tests
* Add migration step
* clean out auto_uart
* Fix all tests
* Expose all device information
* small improvment
* Fix loop over right devices
* Use migration for new device format
* Update rootfs/etc/cont-init.d/udev.sh
Co-authored-by: Franck Nijhof <git@frenck.dev>
* Fix old helper
* Fix API
* add helper for by-id
* fix tests
* Fix serial helper
* Fix hardware API schema
* Hide some virtual devices from tracking
* Apply suggestions from code review
Co-authored-by: Stefan Agner <stefan@agner.ch>
* Update supervisor/addons/validate.py
Co-authored-by: Stefan Agner <stefan@agner.ch>
* Update supervisor/addons/validate.py
Co-authored-by: Stefan Agner <stefan@agner.ch>
* fix lint
* Apply suggestions from code review
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Apply suggestions from code review
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* fix black
* fix lint
Co-authored-by: Franck Nijhof <git@frenck.dev>
Co-authored-by: Stefan Agner <stefan@agner.ch>
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2021-01-28 15:26:56 +01:00
Joakim Sørensen
480eebc6cb
Update alert notification ( #2457 )
2021-01-23 21:06:55 +01:00
Joakim Sørensen
88eb9511bf
Add core version check ( #2436 )
...
* Add core version check
* Fix version handling, rename and use correct paths
* simplify check
* wrap approve check
2021-01-15 21:13:42 +01:00
Pascal Vizeli
0b085354db
Send list of images to sentry ( #2321 )
2020-12-01 14:29:37 +01:00
Pascal Vizeli
2d294f6841
Make evaluation of container better ( #2316 )
2020-11-30 18:00:12 +01:00
Pascal Vizeli
19620d6808
Fix: cleanup repository from list ( #2310 )
...
* Fix: cleanup repository from list
* Add repr
* Avoid not exists error message
2020-11-29 14:00:29 +01:00
Pascal Vizeli
aa5297026f
Handle Store suggestion ( #2306 )
...
* Handle Store suggestion
* Add fixup
* Add more fixup & list
* Enable fixups
* Add tests
* fix index
* fix break
* fix import
* Load it anyway
* Run suFix ccestion on load too
* fix error message
* fix error message
* Fix remove
* Finishing
* Add tests
* Fix error
* fix cleanup stale stuff
* Fix source
* use source as url
* add test for url
* Apply suggestions from code review
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2020-11-28 15:03:44 +01:00
Pascal Vizeli
d9e20307de
Allow check to cleanup issues ( #2302 )
2020-11-26 22:38:33 +01:00
Pascal Vizeli
fda1b523ba
Extend resolution center ( #2297 )
...
* Extend resolution center
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* move forward
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* Rename it to fixups
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* Finish p1
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* Finish p1 - add files
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* Finishup
* Add more tests
* Add test for suggestion
* Add more tests
* fix tests & isort
* address comments
* address comments v2
* fix isort
* Change reference handling
2020-11-26 17:16:36 +01:00
Pascal Vizeli
845c935b39
Add JobManager API ignore ( #2290 )
...
* Disable job condition for unhealth & unsupported systems
* Add JobManager API ignore
* Apply suggestions from code review
Co-authored-by: Paulus Schoutsen <balloob@gmail.com>
* Update tests/resolution/evaluation/test_evaluate_job_conditions.py
Co-authored-by: Paulus Schoutsen <balloob@gmail.com>
* fix names
* address comments
* Update decorator.py
* adjust security
* add reset
* Apply suggestions from code review
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
Co-authored-by: Paulus Schoutsen <balloob@gmail.com>
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2020-11-24 10:54:57 +01:00
Pascal Vizeli
3dd3340e35
Make host feature cheaper to call and relay on it ( #2266 )
2020-11-18 14:13:49 +01:00
Pascal Vizeli
2040102e21
Handle Unhealthy like Unsupported ( #2255 )
...
* Handle Unhealthy like Unsupported
* Add tests
* Add unhealthy to sentry
* Add test
2020-11-14 16:16:00 +01:00
Pascal Vizeli
bd786811a3
Network: abstract dbus and supervisor - ipv6/wifi/vlan ( #2217 )
...
* Abstract code between dbus - supervisor
* cleanup v2
* fix address vs interface
* fix API calls
* Fix methodnames
* add vlan type
* add vlan support
* Fix tests
* Add wifi support
* more OOO
* fix typing import
* typing part 2
* Fix profile
* fix test payload
* ignore powersafe
* support privancy
* fix property
* Fix tests
* full support all API
* Fix all
* more robust
* Update supervisor/dbus/network/connection.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Fix gateway
* fix empty gateway
* Allow no ipv6 or ipv4 kernel support
* Exclude device drivers
* Add wifi
* Use loop on api
* refactory p1
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* refactory p2
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* refactory p3
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* refactory p4
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* refactory p5
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* refactory p6
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* refactory p7
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* refactory p8
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* Fix lint
* update sup p1
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* update sup p2
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* fix tests
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* fix logging
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* improve mock handling
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* add fixtures
Signed-off-by: Pascal Vizeli <pvizeli@syshack.ch>
* fix tests
* better testing
* Add more tests
* Fix API test
* Add test for vlan payload
* Support variation
* Fix doc string
* support remove & wifi scan
* make sure we ignore local-link on ipv6
* remove privancy - add vlan
* Fix tests
* fix isort
* Fixture dbus by commands
* Add dnsmanager fixture
* expose commands called by dbus
* Add wifi tests
* Update supervisor/plugins/dns.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Address comments & fix tests
* change url to be closer on others
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2020-11-09 08:56:42 +01:00
Joakim Sørensen
9479672b88
Create evaluation modules ( #2220 )
...
* Create evaluation modules
* Use sys_core
2020-11-05 17:36:02 +01:00
Pascal Vizeli
01064564b4
Fix new version handling with Plugins ( #2159 )
2020-10-22 12:29:53 +02:00
Pascal Vizeli
d119e99001
Resolution: extend type and context ( #2130 )
...
* Resolution: extend type and context
* fix property
* add helper
* fix api
* fix tests
* Fix patch
* finish tests
* Update supervisor/resolution/const.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Update supervisor/resolution/const.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Fix type
* fix lint
* Update supervisor/api/resolution.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Update supervisor/resolution/__init__.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Update API & add more tests
* Update supervisor/api/resolution.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Update supervisor/resolution/__init__.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* Update supervisor/resolution/__init__.py
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
* fix black
* remove azure ci
* fix test
* fix tests
* fix tests
* fix tests p2
Co-authored-by: Joakim Sørensen <joasoe@gmail.com>
2020-10-16 12:22:32 +02:00
Joakim Sørensen
02e72726a5
Add issues/suggestion to resolution center / start with diskspace ( #2125 )
...
Co-authored-by: Pascal Vizeli <pvizeli@syshack.ch>
2020-10-14 17:14:25 +02:00
