gamertan/tend
Archived
1
0
Fork 0
Code Issues Pull Requests Releases 3 Activity

3 Releases 4 Tags

RSS Feed
  • v0.2.0-preview.1 00d1dd4209
    Compare

    Gamertan Tend v0.2.0-preview.1 Pre-Release

    gamertan released this 2026-08-16 19:03:38 -04:00 | -1 commits to main since this release

    Gamertan Tend v0.2.0-preview.1

    This preview adds a restricted OpenSSH deployment transport, schema-2 service configurations, root-owned environment-file references, multi-service host policy, and a host-wide activation lock for Linux/systemd/Caddy Go services.

    The attached Linux/amd64 release was built twice, byte-identically, with Go 1.26.6, CGO_ENABLED=0, -trimpath, and networking disabled against the audited module cache. Its archive SHA-256 is:

    09cda65af4e9281903ea1627ce6969d49f37ceeaeb2057b45f4d8c5e85b8a2ff

    The binary reports source commit 4d7094c8b7c61991bfb67b11fc1558724c874eb2; its SHA-256 is:

    340247cffcd7769a3438bb67dd7082f3112e23ab4f9071705dd95b0f023d5aeb

    Dogfood evidence

    That exact binary was installed through the restricted receiver and then used for the final maintenance campaign:

    • Gamertan preview 28 artifact c17b4db1a4e2fd5406b392ec72195b947272097e4d1bfcec9d700d0889c3a4c6 activated, rolled back to preview 27, and reactivated.
    • Sandwich Hime preview 31 artifact d418f93ced3307fa788f5d2209b5f09f16bceabec4a9698a9beec6a05e439f35 passed an isolated candidate, activated, rolled back to preview 30, and reactivated.
    • Both service states remained independent; the shared Sandwich Hime mount retained routing precedence; EQL Helper remained healthy.
    • Final public acceptance returned HTTP 200 across Gamertan, Sandwich Hime, mounted, tutorial, news, case-study, and EQL health/readiness routes.
    • All installed application units and Caddy were active with zero restarts, the candidate port was closed, and the successful rollout window contained no warning-level service logs.

    Two fail-closed defects discovered during dogfood were fixed before this release: preserving the exact receiver protocol through restricted sudo, and rejecting singleton shared environment files that could override the candidate listen address. Neither failure changed live traffic or release pointers.

    This remains a preview for small Linux/systemd/Caddy Go services. It deliberately excludes databases, migrations, containers, Kubernetes, arbitrary shell hooks, and EQL Helper's application-specific catalog activation.

    Canonical source, documentation, security model, and evidence: https://gitea.speelman.ca/gamertan/tend

    Downloads