Many hyperlinks are disabled.
Use anonymous login
to enable hyperlinks.
50 most recent check-ins
|
2026-07-13
| ||
| 13:55 | Refactor of o11y under new name of trace. Event is now part of trace. Doesn't use JUL to dispatch events. Includes new JUL to SLF4J bridge. - Remove concept of permissions and only keep the ACL name, so we don't need to use arbitrary permissions on resources that don't match CRUD schema. Add methods to enumerate ACL and rate limit names in IAM service - Start implementing email, sms gateways - Update to TypeScript 7 leaf check-in: 685d8959f9 user: chrswk tags: trunk | |
|
2026-06-29
| ||
| 11:39 | Fix IamService.Config. check-in: ddb5575e3d user: chrswk tags: trunk | |
| 11:31 | Continue work on IAM (rate limiting, repo, session handling, caching, pii). - Create interfaces for repos - Store epoch millis in db check-in: 99c09cba3e user: chrswk tags: trunk | |
|
2026-06-04
| ||
| 09:58 | Continue registration/login frontend work. - Add service worker build step to esbuild scripts - Create test fixture interfaces in test module for reuse in other test modules - Fix style-src CSP - Improve jte integration. jte.properties is now only a marker file for maven profile activation. entry_point.properties is now added to server jar and used at runtime instead of in preprocessor. - Remove dependency on fxlae/typeid-java and create own implementation using UUID.ofEpochMillis check-in: 5a291f2f67 user: chrswk tags: trunk | |
|
2026-05-28
| ||
| 14:12 | Fix various stuff after more testing. - Add heartbeat integration to cert_check, restic and sqlite_rsync scripts - Clean up download locations in runbooks. StepRunner does not delete/redownloads target files, but reuses them after checking hash - Create common credentials_dropin runbook - Integrate IP info database into application server setup - Isolate cert_check, restic PATH (and fix application server bin directory setup) - RecordHeartbeat now supports creating heartbeats on the fly (easier for local heartbeats) and form content - Setup cert_check timer and service - UpdateServerDeployment now supports form data (easier to use from curl) - Use dedicated 'provisioning_dir' instead of adding it to props check-in: d3809d4ac5 user: chrswk tags: trunk | |
|
2026-05-18
| ||
| 13:24 | Integrate various missing concepts that have been floating around (or where part of a previous rewrite) for a long time. - Change all uses of zip as assembly/package format to tar.zst - Encrypt update archive directly instead of using password protected ZIP - Remove bundled 7zz binary and switch to tar/unpack (see EvenMoreFiles.extract) - Start drafting user registration/login state machines - Use JDK instead of JRE due to JFR limitations. JDK is downloaded during installer assembly instead of including the JRE via dependency mechanism - Use PATH instead of hardcoding directories in various places check-in: 3f305d227f user: chrswk tags: trunk | |
|
2026-05-12
| ||
| 13:55 | Implement heartbeat basics and add to restic and sqlite rsync scripts. - Add cause to ErrorRes - Rename user contacts to identifiers - Update passwords.txt check-in: 4b937f3ace user: chrswk tags: trunk | |
|
2026-05-08
| ||
| 13:34 | Change update mechanism from update script to config that contains the install runbook. check-in: 5a863efdbf user: chrswk tags: trunk | |
|
2026-05-07
| ||
| 21:54 | Various provisioning fixes and improvements after more blueprince tests. - Explore different style for acl URNs check-in: 503d87ff03 user: chrswk tags: trunk | |
|
2026-05-06
| ||
| 13:50 | Work on lighthouse frontend and iam components. - Introduce TypeIds.Spec - More tinkering with IamService and access control - Refactor MethodType - Remove exploratory WebPushTest check-in: 2c6c96fb5c user: chrswk tags: trunk | |
|
2026-05-04
| ||
| 12:36 | Continue the work on lighthouse frontend. - Minor work on IamService check-in: 9ae0f7ca82 user: chrswk tags: trunk | |
|
2026-05-02
| ||
| 14:20 | Remove ResourceHandler.MethodHandlerConfig. - Start using Untrusted and [untrusted] markers - Continue work on lighthouse pages check-in: 488976aedf user: chrswk tags: trunk | |
|
2026-04-30
| ||
| 18:11 | Create dedicated subclasses of ResourceHandler for api/site use case. Remove Context from MethodHandler, use request attributes instead. - Finalize use of Reporting-Endpoints header - Fix ApiClient request error handling - Switch to using faster SHA512 instead of SHA256 check-in: 30d38df0f4 user: chrswk tags: trunk | |
|
2026-04-29
| ||
| 19:26 | Work on IamService. - Fix some more things after blueprince tests check-in: 4aea8c3e69 user: chrswk tags: trunk | |
|
2026-04-28
| ||
| 19:56 | Start fixing some stuff after blueprince tests. check-in: 802664b484 user: chrswk tags: trunk | |
| 14:23 | Finish WebPushTest. - Refactor TokenWithRealm to SecretWithRealm and open up Secret interface check-in: 81f5e941c0 user: chrswk tags: trunk | |
|
2026-04-24
| ||
| 14:53 | Start web push exploration test, including service worker support. - Create generic SseEventSource and use it for EventClient - Start with alert, health check, heartbeat implementation - Start with gateway implementation - Switch from echarts to uplot - Work on FileService implementation, including first Magika integration - Work on HTMX integration, including csfr tokens, resource bundles and headers check-in: cf6597d458 user: chrswk tags: trunk | |
|
2026-04-17
| ||
| 20:06 | Refactor and restructure resource handlers. - Refactor and continue IamService session handling check-in: 8c7774752e user: chrswk tags: trunk | |
|
2026-04-15
| ||
| 20:09 | Convert ContentType from enum to record to allow defining custom ones. - Consolidate esbuild scripts into build_helper and get tsc to work with node types check-in: 3f3141b5a6 user: chrswk tags: trunk | |
|
2026-04-14
| ||
| 20:06 | Rewrite token/session handling in IamService. Use opaque ids by default and only use paseto for acl and root tokens. - Fix tsc build. Setup did not work with imports in other projects - Get jte build and hot reloading to work with templates from other modules (framework/lighthouse/example) - Remove exploratory Jte, Oidc, WebAuthn, WebResourceHandler test classes check-in: cde6dda731 user: chrswk tags: trunk | |
|
2026-04-10
| ||
| 18:37 | Split repo into parent, dev and blueprint repos. check-in: 37e38cd79a user: chrswk tags: trunk | |
| 14:59 | Get the final (final) web pipeline ready. - Add csp header containing script and style hash from esbuild output - Add JteTemplatePreprocessor in releng. Inserts esbuild output names and squashes partial templates to a single line - Implement full hot reload for esbuild (with --watch) and jte templates with preprocessing using WebHelper.startTemplateWatcher - Prepare to split repo into multiple repos - Start with a generic SseStream implementation - Switch to montory.pro server for npm and maven - Switch to htmx and hyperscript - Switch to zstd - Use hash in esbuild output to get immutable files check-in: 43c97d4e05 user: chrswk tags: trunk | |
|
2026-04-02
| ||
| 18:16 | Implement WebAuthnTest with all three flows. - Finish OidcTest, use openid-configuration for discovery and verify JWT signature and id token claims check-in: 13445cc0df user: chrswk tags: trunk | |
|
2026-04-01
| ||
| 14:16 | Remove session id as a separate concept, use the token as the session identifier. Cleanup ResourceHandler/IamService in the process. - Continue exploring cel to sql - Introduce token for anonymous (not logged in) sessions - Use Blake3 for token hash check-in: 2e6c7d59fe user: chrswk tags: trunk | |
|
2026-03-30
| ||
| 19:18 | More exploration (CelSqlGenerator, OidcTest, IpInfoTest). check-in: b9f9a85c20 user: chrswk tags: trunk | |
|
2026-03-29
| ||
| 21:08 | Continue with various exploration stuff (IamService, PagingToken/PagingCache in O11yRepository). - Implement first version of Localizer to support i18n in templates via ICU - Make SeleniumExtension lazier - Move documentation to repo root check-in: a64a8c162b user: chrswk tags: trunk | |
|
2026-03-26
| ||
| 21:55 | Continue web exploration in WebResourceHandlerTest. - Add sec fetch header precondition to ResourceHandler - Caddy now only serves static files and redirects everything else to reverse proxy - Remove all visibility modifiers from test code - Replace TmpDirExtension with TempDir from junit check-in: 57a4877bd2 user: chrswk tags: trunk | |
|
2026-03-25
| ||
| 21:08 | Add ApiResourceHandler and WebResourceHandler on top of ResourceHandler. Use WebResourceHandler for the minimal datastar example in lighthouse. - Implement resource handler config suppliers - Include docopts by default in installer zip and use it for install script - Move docopt java code to a vendor jar - Use jsonc file extension for runnbooks to make support for comments clear check-in: 5d43db98b8 user: chrswk tags: trunk | |
|
2026-03-22
| ||
| 14:25 | Improve esbuild scripts. - Fix missing Handlers class check-in: c2d1d6b395 user: chrswk tags: trunk | |
| 13:46 | Create lighthouse-es-client module with static www content, build.js. This is what gets served by caddy. - Implement minimal client example with jte and datastar in lighthouse-server - Rename es modules so they are grouped together - Remove eslint-plugin-qunit due to peer dependency conflict. Maybe try again later - Use new JsonTypeName annotation instead of JsonSubTypes check-in: 85ce710171 user: chrswk tags: trunk | |
|
2026-03-21
| ||
| 19:54 | Get rid of ApiException, so we don't have execptions in hot path. Replaced with an 'either' shaped interface. - Add some tests - Various code cleanup check-in: 49ac1b2240 user: chrswk tags: trunk | |
|
2026-03-19
| ||
| 21:43 | Finish BluePrinceTest.update_application_server by fixing updater service/script and creating an event in LighthouseService. - Finish updating to java 26 - Fix .profile variables in workstation runbooks check-in: 0a1e684a2e user: chrswk tags: trunk | |
|
2026-03-18
| ||
| 16:20 | Get event service running, so we can complete BluePrinceTest for now. - Apply service hardening of server.service to rest of services - Cleanup of es build - Cleanup of pom property names - Fix chrome, firefox runbooks - Get rid of provisioning.sh. It's now the new install.sh - Include docopt.java sources and use it for all main methods - Rename tool/promontory-dev to tool/releng (also applies to tools runbook) - Start updating to java 26 - Use docopts for all releng scripts - Work on docs check-in: 21e3143eed user: chrswk tags: trunk | |
|
2026-03-13
| ||
| 20:55 | Split selenium runbook into chrome/firefox. - Update 7z version - Update dependencies doc check-in: e6c6aaeea5 user: chrswk tags: trunk | |
| 16:53 | Add dependencies license information. check-in: 20b41bb0e3 user: chrswk tags: trunk | |
| 15:58 | Getting update cycle milestone done. - Fix resource handling in StepRunner - Fix Resource.deflate/inflateFieldValue - Fix updater service/script - Improve env var step - Introduce staging system property. - Make versioned runbooks that have snapshot versions idempotent - Switch to using Charset.defaultCharset check-in: af862ef084 user: chrswk tags: trunk | |
|
2026-03-11
| ||
| 21:13 | Some minor cleanup and refactorings. - Fix 'self' slot by adding merge policy that defaults to MERGE, but uses OVERRIDE for 'self' slot - Get rid of Defaults, just read pom properties directly in tests - Try to get all tests running check-in: b2c7addbb3 user: chrswk tags: trunk | |
|
2026-03-10
| ||
| 20:31 | Continue work on BluePrinceTest for our update cycle milestone. We are almost there. - Get framework server running with file, iam, ops service - Implement file, lighthouse client and handlers - Implement HostsExtension. Can be used for ip/hostname mappings in tests with jdk.net.hosts.file - Implement stubs for file, lighthouse service methods required for update cycle - Remove some of the default properties defined in pom. Not any better than just using the actual values - Rename 'exit code' to 'exit status' - Round of dependency updates check-in: 13e5522132 user: chrswk tags: trunk | |
|
2026-03-04
| ||
| 22:16 | Fix mistakes from previous commit. - Replace remaining vars in tests - Add builtin before/after slots to include step - Rename mkdir step path parameter to dir check-in: 9229121975 user: chrswk tags: trunk | |
| 13:29 | Add logorrr to workstation tool runbooks. check-in: 770e669566 user: chrswk tags: trunk | |
| 13:12 | Fix various stuff after test installation of development workstation. - Add idea configs - Add vscodium runbook - Fix assemble-provisioning-module profile activation - Remove winslop support check-in: 5c49316a85 user: chrswk tags: trunk | |
|
2026-03-02
| ||
| 21:41 | Continue work on Deployer (add incus server integration, remove archiveDir). - Add first draft of prepare_release/prepare_snapshot scripts - Add manifest.properties to installer, similar to MANIFEST.MF in JARs - Cleanup Jenkinsfiles - Get example-ops/test module running with failsafe plugin - Move Incus core logic to own class - Move ops module resources to src/main/resources/installer - Remove web client modules - Switch to eclipse temurin JDK/JRE - Use maven profiles to manage plugin activation in maven build check-in: f9f71c7031 user: chrswk tags: trunk | |
|
2026-02-25
| ||
| 21:41 | Continue working towards milestone of full update cycle, including starting with file, iam. - Remove lighthouse, example client modules - Fix relations between CelConfigStore/CelConfigSupplier/ConfigChangeSupport check-in: 552b46e29d user: chrswk tags: trunk | |
|
2026-02-08
| ||
| 21:17 | Start implementing Deployer and related api and client stuff. - Add ScheduledTasks, crypto utils - Continue ApiClient, ApiHandler, ServerRuntime implementations - Rewrite Resource to use static fields instead of annotations - Use maven properties to pass installer properties instead of env check-in: d1c0615dbf user: chrswk tags: trunk | |
|
2026-02-03
| ||
| 20:42 | Rewrite Db migrations. - Get application provisioning up and running - Move systemd credentials to drop-ins check-in: f9f0a61c92 user: chrswk tags: trunk | |
|
2026-02-01
| ||
| 22:24 | Continue work on expanding and testing provisioning modules. - Implement more basics of framework server (ApiHandler, ConfigSupplier & Co) and test happy path check-in: 8f0c391c69 user: chrswk tags: trunk | |
|
2026-01-27
| ||
| 19:14 | Continue work on application install runbooks. - Get BlueprintTest running - Some work on docs check-in: bf64ac6e85 user: chrswk tags: trunk | |
|
2026-01-26
| ||
| 21:26 | Continue work on application runbooks. check-in: 6aebd9c5cf user: chrswk tags: trunk | |
|
2026-01-25
| ||
| 22:17 | Almost done with next milestone (SSH, HTTPS and backup between instances) for BlueprintTest. - Replace duplicity with restic check-in: 46d92b9a9f user: chrswk tags: trunk | |
|
2026-01-22
| ||
| 22:22 | Work on development server setup. check-in: f6891d7dc5 user: chrswk tags: trunk | |