Commit graph

Select branches

Hide pull requests

main

0.0.2

0.0.4

0.1.0

0.1.1

0.1.2

0.1.3

0.1.4

0.1.5

0.1.6

0.1.7

0.2.0

0.2.2

0.2.3

0.3.0

0.4.0

0.4.1

0.4.2

0.4.3

0.4.4

0.5.0

0.6.0

0.7.0

0.8.0

0.8.1

0.8.2

Mono Color

• 32bf09887a
  
  0.8.2 main 0.8.2 Miguel Jacq 2026-08-03 17:17:39 +10:00
• 4559aa6c70
  
  0.8.2 Miguel Jacq 2026-08-03 15:59:43 +10:00
• 5932d22801
  
  Make remote harvest zipapp stdlib-only Miguel Jacq 2026-08-03 15:58:14 +10:00
• 70c90c62ae
  
  Bump dependencies Miguel Jacq 2026-08-03 15:53:51 +10:00
• 5166894992
  
  0.8.1 0.8.1 Miguel Jacq 2026-08-03 15:30:20 +10:00
• 1e9806d2dc
  
  Fix a TOCTOU in remote harvest zipapp Miguel Jacq 2026-08-03 15:29:17 +10:00
• 82db7a7d72
  
  Remove Fediverse link Miguel Jacq 2026-07-24 10:57:46 +10:00
• 098b9c3ac6
  
  Correct remote host Miguel Jacq 2026-07-13 10:54:24 +10:00
• 5bf247c485
  
  * Security: keep sudo-created remote harvest bundles root-owned while root packages and hashes them, expose only the archive to the authenticated SSH uid, and verify the root-computed digest after download. This removes the post-harvest tampering window created by recursively chowning the bundle before packaging without making the plaintext archive world-readable. * Security: enforce tar member limits while lazily parsing untrusted archives rather than after TarFile.getmembers() has already indexed the entire archive; count repeated . entries and cap remote compressed downloads as well. * Security: apply aggregate byte and total filesystem-entry limits when freezing directory harvest bundles, reject symlinked bundle roots, and abort when files or discovered directories change during the copy, so direct directory inputs remain bounded and fail closed under mutation. 0.8.0 Miguel Jacq 2026-07-13 10:15:43 +10:00
• da0d8851d3
  
  Tweaks 0.7.0 Miguel Jacq 2026-07-05 11:30:45 +10:00
• bcaf660349
  
  Update lock file Miguel Jacq 2026-07-05 11:30:15 +10:00
• 9d24ea99e9
  
  Fix for bookworm build Miguel Jacq 2026-07-05 11:21:05 +10:00
• 7d54696402
  
  0.7.0 Miguel Jacq 2026-07-05 10:58:33 +10:00
• 1148b34bce
  
  More hardening Miguel Jacq 2026-07-03 13:17:49 +10:00
• d2a46394fe
  
  More hardening Miguel Jacq 2026-07-03 12:24:08 +10:00
• 40bff49815
  
  Forbid the ansible globals Miguel Jacq 2026-07-02 14:52:20 +10:00
• 65cbe18819
  
  Don't reference built-in globals in Jinja2 into keys Miguel Jacq 2026-07-02 14:21:23 +10:00
• 47c2c8accc
  
  Metadata: Tighten to prefer stat taken from the no-follow descriptor that was inspected, to avoid tiny TOCTOU. Ensure schema forbids .. in src_rel (even though caught in validate anyway - defense in depth) Miguel Jacq 2026-07-01 15:52:04 +10:00
• c6e171e0f0
  
  Better detection of commented out Authorization strings (ignore policy) Miguel Jacq 2026-07-01 15:41:38 +10:00
• c468bc221e
  
  Sanitise the 'validate' output error messages too just in case Miguel Jacq 2026-07-01 11:33:26 +10:00
• 5ffad10665
  
  Catch key/value sensitive strings in ignore, where there is no : or = delimiter Miguel Jacq 2026-07-01 11:04:33 +10:00
• 17f771cadd
  
  Sanitise the diff and explain markdown content like we do with README Miguel Jacq 2026-07-01 11:03:38 +10:00
• a34813e788
  
  Update README.md Miguel Jacq 2026-06-30 15:48:31 +10:00
• 85345083a3
  
  Remove reference to --jinjaturtle auto/on/off (it's a boolean arg). Fix alma python Miguel Jacq 2026-06-30 12:34:26 +10:00
• e72044b610
  
  Ensure markdown README gets sanitised Miguel Jacq 2026-06-30 12:11:48 +10:00
• 43fca6b3da
  
  Resist 'pw' as well Miguel Jacq 2026-06-30 12:11:17 +10:00
• 3b9cfea404
  
  Build on almalinux 10? Miguel Jacq 2026-06-30 12:01:25 +10:00
• f3e8387a10
  
  Fix in right place Miguel Jacq 2026-06-30 11:48:08 +10:00
• a98d3372fb
  
  Fix perms Miguel Jacq 2026-06-30 11:43:07 +10:00
• 3781d602a1
  
  Fix overenthusiastic match on pass Miguel Jacq 2026-06-30 11:34:37 +10:00
• 4146aa997b
  
  Fix tests Miguel Jacq 2026-06-30 11:11:38 +10:00
• 737316d507
  
  More phrases to catch as potentially sensitive Miguel Jacq 2026-06-30 11:10:57 +10:00
• 6d55ac6cc5
  
  jinjaturtle tests can run on rpm via git Miguel Jacq 2026-06-30 09:26:34 +10:00
• 0fd722281e
  
  Fix test of jinjaturtle without apt Miguel Jacq 2026-06-29 20:45:21 +10:00
• bb17e57f93
  
  Revert "Try and install jinjaturtle via poetry / appimage" Miguel Jacq 2026-06-29 15:05:26 +10:00
• b546bb9bf2
  
  Fix import of stat_triplet Miguel Jacq 2026-06-29 14:51:32 +10:00
• 3c1e08bdde
  
  More TOCTOU, update to tests for jinjaturtle Miguel Jacq 2026-06-29 14:30:07 +10:00
• 56ae883948
  
  Don't skip jinjaturtle on RPM Miguel Jacq 2026-06-29 14:16:28 +10:00
• 76aafcc08d
  
  Try and install jinjaturtle via poetry / appimage Miguel Jacq 2026-06-29 14:05:52 +10:00
• 78b52eae71
  
  Fix tests Miguel Jacq 2026-06-29 13:19:04 +10:00
• 1c20dddf52
  
  Update docs Miguel Jacq 2026-06-29 13:18:25 +10:00
• 7519adc705
  
  Update docs Miguel Jacq 2026-06-29 13:13:33 +10:00
• b3d4adf7d4
  
  Show a warning when manifesting from a harvest as reminder it should be trusted first Miguel Jacq 2026-06-29 12:25:35 +10:00
• ddb18403c8
  
  fail loudly on an empty/truncated frozen harvest bundle. Tighten as much as we can the remote harvesting Miguel Jacq 2026-06-29 08:56:06 +10:00
• a2dc054882
  
  Close TOCTOU gap by freezing directory harvest bundles into a private 0700 copy before the two consumers that actually read artifacts (manifest and diff) touch them. Miguel Jacq 2026-06-28 21:07:49 +10:00
• 1bfbfd90f6
  
  Escape verbatim JSON and defend against jinja in it. Add option to salt role prefix to guard against malicious injection of var names Miguel Jacq 2026-06-28 20:34:06 +10:00
• 44d1a22db4
  
  hardlinked source files are refused, remote schema URLs require an explicit flag, generated harvest artifacts use the hardened bundle writer, and task/handler/playbook YAML writes go through one safety gate. Miguel Jacq 2026-06-28 18:17:45 +10:00
• f56f076765
  
  Update CHANGELOG Miguel Jacq 2026-06-28 17:43:28 +10:00
• f5b85d29d3
  
  Better protection against symlink traversal in flatpak. Other hardening Miguel Jacq 2026-06-28 17:03:24 +10:00
• 903125976d
  
  Remove 'enroll diff --enforce' option. Tighten yaml data re: handlers - use listen: instead of notify: Miguel Jacq 2026-06-28 16:01:11 +10:00
• e9d7d74445
  
  Remove puppet and salt Miguel Jacq 2026-06-25 16:54:23 +10:00
• 88e9dba39a
  
  Revert "Byebye Enroll" Miguel Jacq 2026-06-25 16:14:19 +10:00
• 680d286a20
  
  Revert "So long, etc" Miguel Jacq 2026-06-25 16:14:08 +10:00
• 8a9fe82461
  
  Revert "Fix typos" Miguel Jacq 2026-06-25 16:13:50 +10:00
• 1d42b2bfb9
  
  Fix typos Miguel Jacq 2026-06-22 20:51:52 +10:00
• d99ba66951
  
  So long, etc Miguel Jacq 2026-06-22 20:40:51 +10:00
• 958f8e3aa7
  
  Byebye Enroll Miguel Jacq 2026-06-22 20:29:47 +10:00
• d96ad3dc02
  
  Some more hardening to not process raw jinja inside salt/ansible cmd. But, I think this is the end of the road Miguel Jacq 2026-06-22 20:26:06 +10:00
• c3c3608049
  
  Validate state.json is a normal file Miguel Jacq 2026-06-22 17:47:36 +10:00
• 5757bf4275
  
  Update DEVELOPMENT.md Miguel Jacq 2026-06-22 17:23:31 +10:00
• 992b8060a5
  
  validation of artifact dir Miguel Jacq 2026-06-22 17:23:25 +10:00
• efb6d7cc15
  
  Be strict about XDG_CACHE_DIR ownership etc Miguel Jacq 2026-06-22 17:22:27 +10:00
• 4277e029d0
  
  fix changelog Miguel Jacq 2026-06-22 15:39:22 +10:00
• 5930758398
  
  Fix pyproject to make debian build happy Miguel Jacq 2026-06-22 15:39:17 +10:00
• 952687e15d
  
  Ensure that --include-path records (but does not traverse) symlinks Miguel Jacq 2026-06-22 15:34:44 +10:00
• 07b07e60c5
  
  Ensure paths are not followed through parent links Miguel Jacq 2026-06-22 15:32:40 +10:00
• e10a3f62b0
  
  Belts and braces: normalise paths before globbing Miguel Jacq 2026-06-22 15:06:46 +10:00
• c4448226c0
  
  Ensure tests run through the poetry env's pytest Miguel Jacq 2026-06-22 15:05:48 +10:00
• 00f960d01e
  
  Upgrade to Poetry 2 Miguel Jacq 2026-06-22 15:03:32 +10:00
• 70525e52d8
  
  Doc updates Miguel Jacq 2026-06-22 14:49:56 +10:00
• ad019f6b09
  
  normalise control characters in generated manifest scalars Miguel Jacq 2026-06-22 14:45:12 +10:00
• cec6023a40
  
  Ensure that diff also runs through validate() Miguel Jacq 2026-06-22 14:14:51 +10:00
• 1312b7eac2
  
  Add SECURITY.md Miguel Jacq 2026-06-22 13:33:30 +10:00
• a1d7a9e4e6
  
  Add warning about --dangerous mode if sops is not in use Miguel Jacq 2026-06-22 12:56:21 +10:00
• bf1c72c542
  
  CHANGELOG updates Miguel Jacq 2026-06-22 12:47:39 +10:00
• d93de8a8a2
  
  Fix for remote harvest tmp dir Miguel Jacq 2026-06-22 12:46:45 +10:00
• 21a3ef3447
  
  More safety about writing output harvests/manifests to safe locations, including SOPS and diff. Miguel Jacq 2026-06-22 12:21:33 +10:00
• 3feba9a9f2
  
  More information about use of --dangerous mode Miguel Jacq 2026-06-22 12:03:48 +10:00
• d1e99db2df
  
  Update the cli help info about enroll.ini location Miguel Jacq 2026-06-22 12:00:48 +10:00
• def1c2bbc7
  
  Add note about README.md Miguel Jacq 2026-06-22 11:59:38 +10:00
• e78f61c5ed
  
  Avoid TOCTOU issues, stronger perms on manifest dir, don't allow harvesting to existing dir by default, scan whole file for potential secrets Miguel Jacq 2026-06-22 11:41:11 +10:00
• c7a6bfe979
  
  Update tests Miguel Jacq 2026-06-22 11:06:24 +10:00
• a0914e1369
  
  Strict validation of PATH when running as root in case it could contain potentially unsafe binaries Miguel Jacq 2026-06-22 11:06:01 +10:00
• 205c419a7a
  
  Sanity check on FQDN name to avoid accidental path traversal and similar woes Miguel Jacq 2026-06-22 10:59:17 +10:00
• 3e8ad600e2
  
  Use shlex.quote on remote commands Miguel Jacq 2026-06-22 10:58:20 +10:00
• 0a0f067111
  
  Add other common strings that could represent sensitive values to ignore unless in --dangerous mode Miguel Jacq 2026-06-22 10:57:54 +10:00
• e2b61bcdf1
  
  Ensure jinjifying an artifact passes through safe_artifact_file just in case Miguel Jacq 2026-06-22 10:57:08 +10:00
• 03dc467e32
  
  Updates to DEVELOPMENT.md re: manifest and validate Miguel Jacq 2026-06-22 10:09:31 +10:00
• 1e61ae2ff9
  
  Fix tests for deb build Miguel Jacq 2026-06-22 10:05:17 +10:00
• 67b92731f6
  
  Update tests Miguel Jacq 2026-06-22 09:58:54 +10:00
• 0384f8817b
  
  Fail closed on SMTP STARTTLS credential failure before sending creds. Ensure diff's manifest dir works now that we don't remove the target location if it exists (temp dir) Miguel Jacq 2026-06-22 09:57:56 +10:00
• 5ffd4ee755
  
  Perform harvest validation before trying to manifest from it Miguel Jacq 2026-06-22 09:56:55 +10:00
• 706604df74
  
  Stricter validation of harvests to ensure that they meet the schema and don't contain unsafe artifacts (e.g symlinks pointing outside the artifact tree) Miguel Jacq 2026-06-22 09:55:38 +10:00
• a85e8265f4
  
  Don't allow .enroll.ini in CWD, rely on env var or XDG path Miguel Jacq 2026-06-22 09:52:33 +10:00
• 6ee8c60e64
  
  Fix the almalinux tests - skip jinjaturtle and systemd in CI Miguel Jacq 2026-06-21 16:37:19 +10:00
• ce2652a3b3
  
  Handle gracefully debian stuff when testing on rhel-like Miguel Jacq 2026-06-21 16:15:33 +10:00
• b704a6c80b
  
  Add node before checkout Miguel Jacq 2026-06-21 16:07:03 +10:00
• b3a9cd3fb9
  
  Fix curl on almalinux Miguel Jacq 2026-06-21 16:00:35 +10:00
• 429da3f4c1
  
  Attempt to run tests on Alma Linux Miguel Jacq 2026-06-21 15:57:41 +10:00
• f21bac7d1c
  
  Updates to CHANGELOG and release script Miguel Jacq 2026-06-21 13:40:07 +10:00