gamertan/tend
Archived
1
0
Fork 0
Code Issues Pull Requests Releases 3 Activity

3 Releases 4 Tags

RSS Feed
  • v0.2.0-preview.2 9d9fc83dd0
    Compare

    Gamertan Tend v0.2.0-preview.2 Pre-Release

    gamertan released this 2026-08-18 06:49:31 -04:00 | -2 commits to main since this release

    Gamertan Tend v0.2.0-preview.2

    This preview strengthens Tend's Linux/systemd/Caddy deployment contract with bounded deployment-event JSONL, explicit desired/candidate/active/previous release identities, routed singleton handoff, previous-slot continuity checks, and automatic restoration across activation-window failures.

    The attached Linux/amd64 release was built twice byte-identically with Go 1.26.6, CGO_ENABLED=0, and -trimpath. Trusted Gitea verification run 301 and release-candidate run 302 passed for the exact private source commit.

    • Canonical public snapshot: 9d9fc83dd043f7407e2faa0f9013f63de6c24bf6
    • Private source commit: 8aab3db43f35e6a49aa497f45d73701b13fc9f32
    • Private source tree: 992132ea4703437dc13ffdbb04a077816c02caf9
    • Archive SHA-256: ce33ea55bc8ac8c8ce8dfbc2674d191bcd14d20aae56eff4ef53f0c1e0c964f6
    • Binary SHA-256: 6c39aa231ecdfcf41a46a44e02c349d8dfc0e9ab916331a918380886d61a2120
    • Signed-tag key fingerprint: SHA256:sivAohrDwTeFv7xrbznLRc2zY136V1Z3Y57ZybQBZrE

    Final dogfood evidence

    That exact binary completed explicit rollback and reactivation for all three supported deployment shapes in production:

    • Gamertan returned to approved artifact 4700b075640b8b2fb5c17e0e02cf8d96ee67ceee10fe76d108c8b411983a88aa on its green blue/green slot.
    • The Sandwich Hime website returned to approved singleton artifact 46b4da41cf6703fb8818e7d25e3a9c13e57cf700f5608b1888c4adb3352e4d38.
    • Gamertan Observatory returned to approved singleton artifact 9ef0ddd8ec25d8fb75d6a6887e3ba874df7ebba16d3254f6250fcc646f4fd7f4.

    An independent Linux host probed Gamertan, both Sandwich Hime origins, Observatory, and EQL health for ten minutes. Each origin returned 2,396 HTTP 200 responses out of 2,398 attempts. The two connection-level failures occurred simultaneously across every origin and aligned exactly with Caddy reloads at 10:38:59Z and 10:39:28Z; there were no HTTP error statuses. Caddy kept the same PID with zero restarts.

    Every installed application unit and the Observatory agent finished active with zero restarts and no warning-or-higher application logs. Candidate listeners were closed, the shared deployment lock was free, and Observatory's three Tend-event cursors exactly matched their source files with zero dropped records or discontinuities.

    Scope

    Tend remains an opinionated preview for small Go services on Linux with systemd and Caddy. It deliberately excludes databases, migrations, containers, Kubernetes, arbitrary shell hooks, and EQL Helper's application-specific catalog activation. Production secrets remain outside repositories and artifacts in root-owned referenced environment files.

    Canonical source, documentation, threat model, dogfood evidence, and friction ledger: https://gitea.speelman.ca/gamertan/tend

    Public source line frozen

    This is the final public Tend CLI preview. The canonical public repository is preserved as an archived record, and every existing AGPL-3.0-only and 0BSD grant and release artifact remains unchanged. Private control-plane research continues without a public release commitment.

    Downloads
  • v0.2.0-preview.1 00d1dd4209
    Compare

    Gamertan Tend v0.2.0-preview.1 Pre-Release

    gamertan released this 2026-08-16 19:03:38 -04:00 | -1 commits to main since this release

    Gamertan Tend v0.2.0-preview.1

    This preview adds a restricted OpenSSH deployment transport, schema-2 service configurations, root-owned environment-file references, multi-service host policy, and a host-wide activation lock for Linux/systemd/Caddy Go services.

    The attached Linux/amd64 release was built twice, byte-identically, with Go 1.26.6, CGO_ENABLED=0, -trimpath, and networking disabled against the audited module cache. Its archive SHA-256 is:

    09cda65af4e9281903ea1627ce6969d49f37ceeaeb2057b45f4d8c5e85b8a2ff

    The binary reports source commit 4d7094c8b7c61991bfb67b11fc1558724c874eb2; its SHA-256 is:

    340247cffcd7769a3438bb67dd7082f3112e23ab4f9071705dd95b0f023d5aeb

    Dogfood evidence

    That exact binary was installed through the restricted receiver and then used for the final maintenance campaign:

    • Gamertan preview 28 artifact c17b4db1a4e2fd5406b392ec72195b947272097e4d1bfcec9d700d0889c3a4c6 activated, rolled back to preview 27, and reactivated.
    • Sandwich Hime preview 31 artifact d418f93ced3307fa788f5d2209b5f09f16bceabec4a9698a9beec6a05e439f35 passed an isolated candidate, activated, rolled back to preview 30, and reactivated.
    • Both service states remained independent; the shared Sandwich Hime mount retained routing precedence; EQL Helper remained healthy.
    • Final public acceptance returned HTTP 200 across Gamertan, Sandwich Hime, mounted, tutorial, news, case-study, and EQL health/readiness routes.
    • All installed application units and Caddy were active with zero restarts, the candidate port was closed, and the successful rollout window contained no warning-level service logs.

    Two fail-closed defects discovered during dogfood were fixed before this release: preserving the exact receiver protocol through restricted sudo, and rejecting singleton shared environment files that could override the candidate listen address. Neither failure changed live traffic or release pointers.

    This remains a preview for small Linux/systemd/Caddy Go services. It deliberately excludes databases, migrations, containers, Kubernetes, arbitrary shell hooks, and EQL Helper's application-specific catalog activation.

    Canonical source, documentation, security model, and evidence: https://gitea.speelman.ca/gamertan/tend

    Downloads
  • v0.1.0-preview.2 b2cc4482f6
    Compare

    Gamertan Tend v0.1.0-preview.2 Pre-Release

    gamertan released this 2026-08-14 14:20:04 -04:00 | 0 commits to main since this release

    Gamertan Tend v0.1.0-preview.2

    This is the first usable public preview of Gamertan Tend: an opinionated,
    health-gated release tool for small Go services on Linux, systemd, and Caddy.

    Preview 1 is withdrawn because a tagged go install reported the development
    version. Its signed tag remains immutable for auditability. Preview 2 fixes that
    identity boundary and reports v0.1.0-preview.2 through both direct and public
    Go-proxy installations.

    What is included

    • tend check, package, deploy, status, rollback, prune, and version;
    • strict versioned JSON configuration;
    • reproducible Go builds, SHA-256 manifests, build metadata, and an SPDX SBOM;
    • content-addressed immutable releases;
    • singleton-candidate and Caddy-switched blue/green deployment strategies;
    • health, readiness, application-smoke, shared-lock, and Caddy-validation gates;
    • automatic restoration after activation failures and explicit rollback state;
    • strict path, archive, symlink, and file-type validation without shell hooks;
    • zero third-party Go module requirements.

    The reusable example configurations and service templates are 0BSD. Tend,
    its infrastructure, and its release machinery are AGPL-3.0-only.

    Exact evidence

    • signed canonical tag: v0.1.0-preview.2;
    • canonical public commit: b2cc4482f6c1a2c6f36d72fbc1ccc203aaa8659e;
    • private reviewed source commit: 9907afdfa18099ac488fe4011291ea454036435a;
    • Go toolchain: go1.26.6 linux/amd64, CGO_ENABLED=0;
    • Tend binary SHA-256: a6b6733c83242d30775e94e97b5228d48da64a088205dd093fcb020ff115a3cd;
    • release archive SHA-256: 7e30dd01dc20067fddbc59c3b2793f51f7143811dc0e1697ec4336610318a733.

    The exact binary performed maintenance releases for both intended dogfood
    targets. Sandwich Hime website preview 27 was activated, explicitly rolled back
    to preview 26, and reactivated. Gamertan preview 11 was activated, explicitly
    rolled back to preview 10, and reactivated. Both final services passed their
    health, readiness, and application-smoke gates; Caddy preserved the Sandwich
    Hime route precedence; retained rollback releases remain present.

    Fresh isolated GOPROXY=direct and proxy-only/SumDB installations both resolved
    this tag to the canonical Gitea commit. The proxy module sums are:

    gamertan.com/tend v0.1.0-preview.2 h1:q6HN644WASGU3iSTNg5mCNSkNvdM7R5YWZGAcetAG+g=
gamertan.com/tend v0.1.0-preview.2/go.mod h1:JEzonyOsZsG+jcPDCE6LkTw6E8rHg+Vp5TFgBz5sEVE=

    Install

    go install gamertan.com/tend/cmd/tend@v0.1.0-preview.2
tend version --json

    This is a deliberately narrow preview. It supports Linux/systemd/Caddy Go
    services. It does not support databases, migrations, containers, Kubernetes,
    arbitrary shell hooks, or EQL Helper's application-specific catalog activation.

    Review RELEASE.json, BUILDINFO.json, SBOM.spdx.json, and SHA256SUMS
    inside the archive before using it. Production credentials and target
    configuration remain outside source repositories and release artifacts.

    Downloads