mirror of
https://scm.tikali.ai/tikali/applications/monky/monky-deployd.git
synced 2026-09-18 03:36:16 +00:00
mdella
037782e1ff
deployd#3 (DD-0620): every kit for a backend registered since 2026-09-08 died at `--site`. env-dev-08 (2026-09-11..13): two days of "identity is not readable" ticks — ziti-edge-tunnel re-creates the file with mode 0600, the ACL mask goes to ---, group membership stops helping. identity-acl.sh + monky-deployd-identity-acl.path re-apply the grant on every directory change. Doc-Drift: DD-0620 fixed Closes #3 Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01ASnneBmT7rfaJLE8NGNw7S
62 lines
2.3 KiB
YAML
62 lines
2.3 KiB
YAML
# nfpm (https://nfpm.goreleaser.com) — builds monky-deployd_<ver>_amd64.deb in CI (`package` job).
|
|
# The venv under /opt/monky-deployd/venv is created by CI on ubuntu:26.04 with the system
|
|
# python3 (3.14 on 26.04; the agent needs >= 3.12) and the vendored openziti wheel when present.
|
|
name: monky-deployd
|
|
arch: amd64
|
|
platform: linux
|
|
version: ${VERSION}
|
|
section: admin
|
|
priority: optional
|
|
maintainer: Tikali <mdella@tikali.ai>
|
|
description: |
|
|
Monky backend pull agent (MONKY-ADR-0028): checkin -> bundle -> lease -> OpenBao -> docker compose -> report,
|
|
over the OpenZiti mesh with the box's own host identity.
|
|
vendor: Tikali
|
|
homepage: https://scm.tikali.ai/tikali/applications/monky/monky-deployd
|
|
license: Proprietary
|
|
depends:
|
|
- python3 (>= 3.12)
|
|
- acl
|
|
- ca-certificates
|
|
recommends:
|
|
- docker-compose-plugin
|
|
- ziti-edge-tunnel
|
|
contents:
|
|
- src: ./build/venv
|
|
dst: /opt/monky-deployd/venv
|
|
- src: ./packaging/bin/monky-deployd
|
|
dst: /usr/bin/monky-deployd
|
|
file_info: { mode: 0755 }
|
|
- src: ./packaging/systemd/monky-deployd.service
|
|
dst: /usr/lib/systemd/system/monky-deployd.service
|
|
- src: ./packaging/systemd/monky-deployd.timer
|
|
dst: /usr/lib/systemd/system/monky-deployd.timer
|
|
- src: ./packaging/systemd/monky-deployd-proxy.service
|
|
dst: /usr/lib/systemd/system/monky-deployd-proxy.service
|
|
- src: ./packaging/systemd/monky-deployd-identity-acl.path
|
|
dst: /usr/lib/systemd/system/monky-deployd-identity-acl.path
|
|
- src: ./packaging/systemd/monky-deployd-identity-acl.service
|
|
dst: /usr/lib/systemd/system/monky-deployd-identity-acl.service
|
|
- src: ./packaging/bin/identity-acl.sh
|
|
dst: /usr/share/monky-deployd/identity-acl.sh
|
|
file_info:
|
|
mode: 0755
|
|
- src: ./packaging/monky-deployd.sysusers
|
|
dst: /usr/lib/sysusers.d/monky-deployd.conf
|
|
- src: ./packaging/monky-deployd.tmpfiles
|
|
dst: /usr/lib/tmpfiles.d/monky-deployd.conf
|
|
- src: ./config.example.yaml
|
|
dst: /etc/monky-deployd/config.example.yaml
|
|
type: config
|
|
- src: ./packaging/install.sh
|
|
dst: /usr/share/monky-deployd/install.sh
|
|
file_info: { mode: 0755 }
|
|
- src: ./README.md
|
|
dst: /usr/share/doc/monky-deployd/README.md
|
|
- src: ./docs/OPERATIONS.md
|
|
dst: /usr/share/doc/monky-deployd/OPERATIONS.md
|
|
scripts:
|
|
postinstall: ./packaging/scripts/postinstall.sh
|
|
preremove: ./packaging/scripts/preremove.sh
|
|
postremove: ./packaging/scripts/postremove.sh
|