@forgezero/agent 0.1.131 → 0.1.132

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/dist/agent-heartbeat.js +1 -1
  2. package/dist/bootstrap.js +1 -1
  3. package/dist/fz-agent.js +8 -4
  4. package/dist/fz.js +6 -3
  5. package/dist/metal-bootstrap.js +1 -1
  6. package/dist/metal-helper-socket.js +7 -3
  7. package/dist/metal-provision.js +7 -3
  8. package/dist/operator-bootstrap.js +6 -3
  9. package/dist/platform-fleet-verification.js +1 -1
  10. package/dist/provision.js +1 -1
  11. package/dist/version.d.ts +1 -1
  12. package/package.json +1 -1
package/dist/agent-heartbeat.js CHANGED
@@ -917,7 +917,7 @@ async function postSignedNode(options, path, body) {
917
917
  }
918
918
 
919
919
  // src/version.ts
920
- var VERSION3 = "0.1.131";
920
+ var VERSION3 = "0.1.132";
921
921
 
922
922
  // src/agent-heartbeat.ts
923
923
  function readAgentHostMetrics() {
package/dist/bootstrap.js CHANGED
@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
1460
1460
  var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
1461
1461
 
1462
1462
  // src/version.ts
1463
- var VERSION = "0.1.131";
1463
+ var VERSION = "0.1.132";
1464
1464
 
1465
1465
  // src/software.ts
1466
1466
  var PINNED_BUN_VERSION = "1.3.14";
package/dist/fz-agent.js CHANGED
@@ -9640,7 +9640,7 @@ async function writeAndCloseProcessInput(input, value) {
9640
9640
  }
9641
9641
 
9642
9642
  // src/version.ts
9643
- var VERSION2 = "0.1.131";
9643
+ var VERSION2 = "0.1.132";
9644
9644
 
9645
9645
  // src/ssh-bootstrap.ts
9646
9646
  function deriveMetalAdmissionProvisioning(lscpu) {
@@ -10834,9 +10834,13 @@ function guestBootstrapOperations(profile, attested = Boolean(profile.confidenti
10834
10834
  "/run/forgezero-bun.zip"
10835
10835
  ],
10836
10836
  ["/usr/bin/sha256sum", "--check", "/etc/forgezero/bun.sha256"],
10837
- ["/usr/bin/unzip", "-q", "/run/forgezero-bun.zip", "-d", "/run/forgezero-bun"],
10837
+ ["/usr/bin/busybox", "unzip", "-o", "-q", "/run/forgezero-bun.zip", "-d", "/run/forgezero-bun"],
10838
10838
  ["/usr/bin/install", "-d", "-m", "0755", "/usr/local/lib/forgezero/runtime", agentBun],
10839
- ["/usr/bin/install", "-m", "0755", "/run/forgezero-bun/bun-linux-x64/bun", "/usr/local/lib/forgezero/runtime/bun"],
10839
+ ["/usr/bin/rm", "-f", "--", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
10840
+ ["/usr/bin/cp", "--", "/run/forgezero-bun/bun-linux-x64/bun", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
10841
+ ["/usr/bin/chown", "root:root", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
10842
+ ["/usr/bin/chmod", "0755", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
10843
+ ["/usr/bin/mv", "-f", "--", "/usr/local/lib/forgezero/runtime/bun.forgezero-next", "/usr/local/lib/forgezero/runtime/bun"],
10840
10844
  ["/usr/bin/ln", "-sfn", "/usr/local/lib/forgezero/runtime/bun", "/usr/local/bin/bun"],
10841
10845
  [
10842
10846
  "/usr/bin/env",
@@ -10894,7 +10898,7 @@ package_update: true
10894
10898
  ${users}disable_root: true
10895
10899
  # Git is part of the deployment transport, not a tenant-selected prerequisite:
10896
10900
  # every dynamically claimed repository must be cloneable on a clean image.
10897
- packages: [curl, ca-certificates, openssl, openssh-client, git, unzip${claim.spec.confidential ? ", python3" : ""}]
10901
+ packages: [curl, ca-certificates, openssl, openssh-client, git, busybox-static${claim.spec.confidential ? ", python3" : ""}]
10898
10902
  write_files:
10899
10903
  ${enrolmentFiles}${attestationFile}${bunChecksum}runcmd:
10900
10904
  ${bootstrap.map((argv2) => ` - ${JSON.stringify(argv2)}`).join(`
package/dist/fz.js CHANGED
@@ -6007,7 +6007,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
6007
6007
  var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
6008
6008
 
6009
6009
  // src/version.ts
6010
- var VERSION2 = "0.1.131";
6010
+ var VERSION2 = "0.1.132";
6011
6011
 
6012
6012
  // src/software.ts
6013
6013
  var PINNED_BUN_VERSION = "1.3.14";
@@ -18168,14 +18168,17 @@ async function installPackagedAgent(request, knownHosts, exec, directory, remote
18168
18168
  "--no-install-recommends",
18169
18169
  "ca-certificates",
18170
18170
  "curl",
18171
- "unzip"
18171
+ "busybox-static"
18172
18172
  ], "remote bootstrap prerequisites");
18173
18173
  const archive = await verifiedBunArchive(directory, options.fetch ?? fetch);
18174
18174
  await copy(exec, request, knownHosts, archive, `${remoteTemp}/bun.zip`);
18175
18175
  const digest = await remote(exec, request, knownHosts, ["/usr/bin/sha256sum", `${remoteTemp}/bun.zip`], "remote Bun checksum");
18176
18176
  if (digest.split(/\s+/)[0] !== BUN_RELEASE_SHA256)
18177
18177
  throw new Error("remote Bun checksum mismatch");
18178
- await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/unzip", "-q", `${remoteTemp}/bun.zip`, "-d", `${remoteTemp}/bun-release`], "remote Bun unpack");
18178
+ await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/busybox", "unzip", "-o", "-q", `${remoteTemp}/bun.zip`, "-d", `${remoteTemp}/bun-release`], "remote Bun unpack");
18179
+ if (!await remoteRegularFileExists(exec, request, knownHosts, `${remoteTemp}/bun-release/bun-linux-x64/bun`)) {
18180
+ throw new Error("remote Bun unpack did not produce the pinned executable");
18181
+ }
18179
18182
  await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/install", "-d", "-m", "0755", "/usr/local/lib/forgezero/runtime", "/usr/local/bin"], "remote Bun directory");
18180
18183
  await replaceRemoteFile(exec, request, knownHosts, `${remoteTemp}/bun-release/bun-linux-x64/bun`, "/usr/local/lib/forgezero/runtime/bun", "0755", "remote Bun install");
18181
18184
  await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/ln", "-sfn", "/usr/local/lib/forgezero/runtime/bun", "/usr/local/bin/bun"], "remote Bun link");
package/dist/metal-bootstrap.js CHANGED
@@ -366,7 +366,7 @@ function systemdAgentEgressDirectives(loopbackTcpPorts = []) {
366
366
  }
367
367
 
368
368
  // src/version.ts
369
- var VERSION = "0.1.131";
369
+ var VERSION = "0.1.132";
370
370
 
371
371
  // src/otel-collector.ts
372
372
  var FORGEZERO_OTEL_COLLECTOR_UNIT = "forgezero-otel-collector.service";
package/dist/metal-helper-socket.js CHANGED
@@ -975,9 +975,13 @@ function guestBootstrapOperations(profile, attested = Boolean(profile.confidenti
975
975
  "/run/forgezero-bun.zip"
976
976
  ],
977
977
  ["/usr/bin/sha256sum", "--check", "/etc/forgezero/bun.sha256"],
978
- ["/usr/bin/unzip", "-q", "/run/forgezero-bun.zip", "-d", "/run/forgezero-bun"],
978
+ ["/usr/bin/busybox", "unzip", "-o", "-q", "/run/forgezero-bun.zip", "-d", "/run/forgezero-bun"],
979
979
  ["/usr/bin/install", "-d", "-m", "0755", "/usr/local/lib/forgezero/runtime", agentBun],
980
- ["/usr/bin/install", "-m", "0755", "/run/forgezero-bun/bun-linux-x64/bun", "/usr/local/lib/forgezero/runtime/bun"],
980
+ ["/usr/bin/rm", "-f", "--", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
981
+ ["/usr/bin/cp", "--", "/run/forgezero-bun/bun-linux-x64/bun", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
982
+ ["/usr/bin/chown", "root:root", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
983
+ ["/usr/bin/chmod", "0755", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
984
+ ["/usr/bin/mv", "-f", "--", "/usr/local/lib/forgezero/runtime/bun.forgezero-next", "/usr/local/lib/forgezero/runtime/bun"],
981
985
  ["/usr/bin/ln", "-sfn", "/usr/local/lib/forgezero/runtime/bun", "/usr/local/bin/bun"],
982
986
  [
983
987
  "/usr/bin/env",
@@ -1035,7 +1039,7 @@ package_update: true
1035
1039
  ${users}disable_root: true
1036
1040
  # Git is part of the deployment transport, not a tenant-selected prerequisite:
1037
1041
  # every dynamically claimed repository must be cloneable on a clean image.
1038
- packages: [curl, ca-certificates, openssl, openssh-client, git, unzip${claim.spec.confidential ? ", python3" : ""}]
1042
+ packages: [curl, ca-certificates, openssl, openssh-client, git, busybox-static${claim.spec.confidential ? ", python3" : ""}]
1039
1043
  write_files:
1040
1044
  ${enrolmentFiles}${attestationFile}${bunChecksum}runcmd:
1041
1045
  ${bootstrap.map((argv) => ` - ${JSON.stringify(argv)}`).join(`
package/dist/metal-provision.js CHANGED
@@ -975,9 +975,13 @@ function guestBootstrapOperations(profile, attested = Boolean(profile.confidenti
975
975
  "/run/forgezero-bun.zip"
976
976
  ],
977
977
  ["/usr/bin/sha256sum", "--check", "/etc/forgezero/bun.sha256"],
978
- ["/usr/bin/unzip", "-q", "/run/forgezero-bun.zip", "-d", "/run/forgezero-bun"],
978
+ ["/usr/bin/busybox", "unzip", "-o", "-q", "/run/forgezero-bun.zip", "-d", "/run/forgezero-bun"],
979
979
  ["/usr/bin/install", "-d", "-m", "0755", "/usr/local/lib/forgezero/runtime", agentBun],
980
- ["/usr/bin/install", "-m", "0755", "/run/forgezero-bun/bun-linux-x64/bun", "/usr/local/lib/forgezero/runtime/bun"],
980
+ ["/usr/bin/rm", "-f", "--", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
981
+ ["/usr/bin/cp", "--", "/run/forgezero-bun/bun-linux-x64/bun", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
982
+ ["/usr/bin/chown", "root:root", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
983
+ ["/usr/bin/chmod", "0755", "/usr/local/lib/forgezero/runtime/bun.forgezero-next"],
984
+ ["/usr/bin/mv", "-f", "--", "/usr/local/lib/forgezero/runtime/bun.forgezero-next", "/usr/local/lib/forgezero/runtime/bun"],
981
985
  ["/usr/bin/ln", "-sfn", "/usr/local/lib/forgezero/runtime/bun", "/usr/local/bin/bun"],
982
986
  [
983
987
  "/usr/bin/env",
@@ -1035,7 +1039,7 @@ package_update: true
1035
1039
  ${users}disable_root: true
1036
1040
  # Git is part of the deployment transport, not a tenant-selected prerequisite:
1037
1041
  # every dynamically claimed repository must be cloneable on a clean image.
1038
- packages: [curl, ca-certificates, openssl, openssh-client, git, unzip${claim.spec.confidential ? ", python3" : ""}]
1042
+ packages: [curl, ca-certificates, openssl, openssh-client, git, busybox-static${claim.spec.confidential ? ", python3" : ""}]
1039
1043
  write_files:
1040
1044
  ${enrolmentFiles}${attestationFile}${bunChecksum}runcmd:
1041
1045
  ${bootstrap.map((argv) => ` - ${JSON.stringify(argv)}`).join(`
package/dist/operator-bootstrap.js CHANGED
@@ -1460,7 +1460,7 @@ var UPDATE_RETRY_BASE_MS = 5 * 60000;
1460
1460
  var UPDATE_RETRY_MAX_MS = 24 * 60 * 60000;
1461
1461
 
1462
1462
  // src/version.ts
1463
- var VERSION = "0.1.131";
1463
+ var VERSION = "0.1.132";
1464
1464
 
1465
1465
  // src/software.ts
1466
1466
  var PINNED_BUN_VERSION = "1.3.14";
@@ -7347,14 +7347,17 @@ async function installPackagedAgent(request, knownHosts, exec, directory, remote
7347
7347
  "--no-install-recommends",
7348
7348
  "ca-certificates",
7349
7349
  "curl",
7350
- "unzip"
7350
+ "busybox-static"
7351
7351
  ], "remote bootstrap prerequisites");
7352
7352
  const archive = await verifiedBunArchive(directory, options.fetch ?? fetch);
7353
7353
  await copy(exec, request, knownHosts, archive, `${remoteTemp}/bun.zip`);
7354
7354
  const digest = await remote(exec, request, knownHosts, ["/usr/bin/sha256sum", `${remoteTemp}/bun.zip`], "remote Bun checksum");
7355
7355
  if (digest.split(/\s+/)[0] !== BUN_RELEASE_SHA256)
7356
7356
  throw new Error("remote Bun checksum mismatch");
7357
- await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/unzip", "-q", `${remoteTemp}/bun.zip`, "-d", `${remoteTemp}/bun-release`], "remote Bun unpack");
7357
+ await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/busybox", "unzip", "-o", "-q", `${remoteTemp}/bun.zip`, "-d", `${remoteTemp}/bun-release`], "remote Bun unpack");
7358
+ if (!await remoteRegularFileExists(exec, request, knownHosts, `${remoteTemp}/bun-release/bun-linux-x64/bun`)) {
7359
+ throw new Error("remote Bun unpack did not produce the pinned executable");
7360
+ }
7358
7361
  await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/install", "-d", "-m", "0755", "/usr/local/lib/forgezero/runtime", "/usr/local/bin"], "remote Bun directory");
7359
7362
  await replaceRemoteFile(exec, request, knownHosts, `${remoteTemp}/bun-release/bun-linux-x64/bun`, "/usr/local/lib/forgezero/runtime/bun", "0755", "remote Bun install");
7360
7363
  await remote(exec, request, knownHosts, ["/usr/bin/sudo", "-n", "/usr/bin/ln", "-sfn", "/usr/local/lib/forgezero/runtime/bun", "/usr/local/bin/bun"], "remote Bun link");
package/dist/platform-fleet-verification.js CHANGED
@@ -3020,7 +3020,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
3020
3020
  }
3021
3021
 
3022
3022
  // src/version.ts
3023
- var VERSION3 = "0.1.131";
3023
+ var VERSION3 = "0.1.132";
3024
3024
 
3025
3025
  // src/egress-policy.ts
3026
3026
  import { realpathSync as realpathSync3 } from "node:fs";
package/dist/provision.js CHANGED
@@ -3020,7 +3020,7 @@ function requestSoftware(requirements, socketPath = DEFAULT_SOFTWARE_HELPER_SOCK
3020
3020
  }
3021
3021
 
3022
3022
  // src/version.ts
3023
- var VERSION3 = "0.1.131";
3023
+ var VERSION3 = "0.1.132";
3024
3024
 
3025
3025
  // src/egress-policy.ts
3026
3026
  import { realpathSync as realpathSync3 } from "node:fs";
package/dist/version.d.ts CHANGED
@@ -1,2 +1,2 @@
1
1
  /** One package version shared by both public binaries. Pinned to package.json by tests. */
2
- export declare const VERSION = "0.1.131";
2
+ export declare const VERSION = "0.1.132";
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@forgezero/agent",
3
- "version": "0.1.131",
3
+ "version": "0.1.132",
4
4
  "type": "module",
5
5
  "scripts": {
6
6
  "check": "tsc --noEmit",