rcourtman dc4669f9f6 security: harden agent installers and auto-update mechanism ...

Install script (scripts/install.sh):
- Add multi-platform support: Unraid, OpenRC/Alpine, Synology DSM 6/7
- Add input validation for URL, token format, and interval
- Add binary magic verification (ELF/Mach-O/PE)
- Add cleanup trap for temp files
- Wrap script in main() for partial download protection
- Fix shellcheck compliance issues
- Add curl timeouts

Agent auto-update (agentupdate, dockeragent):
- Enforce TLS 1.2 minimum version
- Make SHA256 checksum verification mandatory
- Add 100MB binary size limit
- Add binary magic verification before replacement
- Add Unraid persistent binary update after self-update
- Add 5-minute download timeout

Frontend:
- Update Linux install description to note auto-detection of init systems

2025-11-26 13:14:58 +00:00

..

dev

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

lib

Improve installer UX with pauses and popups on failure

2025-11-25 11:17:37 +00:00

systemd

Fix temperature monitoring on standalone Proxmox nodes (addresses #571)

2025-11-13 13:02:15 +00:00

tests

Improve temperature proxy diagnostics and tests

2025-11-13 22:31:53 +00:00

.go-version

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

build-release.sh

fix: remove references to deleted install-host-agent.sh script

2025-11-26 09:57:06 +00:00

bundle.manifest

feat: add shared script library system and refactor docker-agent installer

2025-10-20 15:13:38 +00:00

bundle.sh

feat: add shared script library system and refactor docker-agent installer

2025-10-20 15:13:38 +00:00

clean-mock-alerts.sh

Add guest agent caching and update doc hints (refs #560)

2025-10-16 08:15:49 +00:00

cleanup.sh

Refactor: Code cleanup and localStorage consolidation

2025-11-04 21:50:46 +00:00

create-sensor-user.sh

security: complete Phase 1 sensor proxy hardening

2025-10-20 15:13:37 +00:00

docker-build.sh

security: complete Phase 1 sensor proxy hardening

2025-10-20 15:13:37 +00:00

generate-release-notes.sh

Polish release notes fallback

2025-11-13 09:10:43 +00:00

harden-sensor-proxy.sh

security: complete Phase 1 sensor proxy hardening

2025-10-20 15:13:37 +00:00

hot-dev.sh

Fix macOS build for sensor-proxy and improve hot-dev script

2025-11-20 12:28:01 +00:00

install-container-agent.sh

fix(scripts): improve checksum verification robustness against whitespace

2025-11-25 08:24:26 +00:00

install-docker-agent.sh

feat: improve legacy agent detection and migration UX

2025-11-25 23:26:22 +00:00

install-docker.sh

feat: serve install scripts from GitHub releases instead of main branch

2025-11-26 08:59:59 +00:00

install-go-toolchain.sh

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

install-host-agent.ps1

feat: improve legacy agent detection and migration UX

2025-11-25 23:26:22 +00:00

install-sensor-proxy.sh

feat: serve install scripts from GitHub releases instead of main branch

2025-11-26 08:59:59 +00:00

install.ps1

fix: propagate unified agent version and improve legacy cleanup

2025-11-25 23:39:10 +00:00

install.sh

security: harden agent installers and auto-update mechanism

2025-11-26 13:14:58 +00:00

migrate-sensor-proxy-control-plane.sh

fix(sensor-proxy): eliminate race in migration script

2025-11-19 11:04:58 +00:00

migrate-temperature-proxy.sh

Auto-deploy proxy for standalone temp monitoring

2025-11-16 09:47:07 +00:00

package-helm-chart.sh

release: prepare v4.25.0

2025-10-22 10:46:18 +00:00

pulse-auto-update.sh

feat: serve install scripts from GitHub releases instead of main branch

2025-11-26 08:59:59 +00:00

pulse-proxy-rotate-keys.sh

refactor: Rename pulse-temp-proxy to pulse-sensor-proxy

2025-10-13 13:17:05 +00:00

pulse-sensor-cleanup.sh

fix: filter out qdevice from cluster node discovery

2025-11-24 22:54:58 +00:00

pulse-sensor-proxy.service

Fix temperature monitoring for clustered and LXC Proxmox environments (addresses #571)

2025-11-13 13:25:27 +00:00

run-tests-mock.sh

Adopt multi-token auth across docs, UI, and tooling

2025-10-14 15:47:49 +00:00

secure-sensor-files.sh

security: complete Phase 1 sensor proxy hardening

2025-10-20 15:13:37 +00:00

setup-log-forwarding.sh

docs: highlight runbooks in index and script verification checklist

2025-11-14 10:39:10 +00:00

sync-production-config.sh

WIP: Save all pending changes including frontend updates and unified agent scaffolding

2025-11-25 11:27:07 +00:00

test-vm-disk.sh

Update Proxmox guest agent permissions docs and tooling (refs #548)

2025-10-14 10:21:52 +00:00

toggle-mock.sh

refactor: remove legacy DISABLE_AUTH flag and enhance authentication UX

2025-10-27 19:46:51 +00:00

trigger-release.sh

chore: remove outdated docs, update cleanup script and release workflow

2025-11-24 19:14:54 +00:00

uninstall-host-agent.ps1

Refine Windows host installer logging (related to #709)

2025-11-13 23:09:22 +00:00

uninstall-host-agent.sh

Add TrueNAS SCALE persistence for host agent (Related to #718)

2025-11-21 10:07:14 +00:00

validate-published-release.sh

Related to #698: harden installer release detection

2025-11-12 17:56:16 +00:00

validate-release.sh

fix: remove references to deleted install-host-agent.sh script

2025-11-26 09:57:06 +00:00