Many hyperlinks are disabled.
Use anonymous login
to enable hyperlinks.
50 most recent check-ins
|
2026-05-28
| ||
| 14:12 | Fix various stuff after more testing. - Add heartbeat integration to cert_check, restic and sqlite_rsync scripts - Clean up download locations in runbooks. StepRunner does not delete/redownloads target files, but reuses them after checking hash - Create common credentials_dropin runbook - Integrate IP info database into application server setup - Isolate cert_check, restic PATH (and fix application server bin directory setup) - RecordHeartbeat now supports creating heartbeats on the fly (easier for local heartbeats) and form content - Setup cert_check timer and service - UpdateServerDeployment now supports form data (easier to use from curl) - Use dedicated 'provisioning_dir' instead of adding it to props leaf check-in: d3809d4ac5 user: chrswk tags: trunk | |
|
2026-05-18
| ||
| 13:24 | Integrate various missing concepts that have been floating around (or where part of a previous rewrite) for a long time. - Change all uses of zip as assembly/package format to tar.zst - Encrypt update archive directly instead of using password protected ZIP - Remove bundled 7zz binary and switch to tar/unpack (see EvenMoreFiles.extract) - Start drafting user registration/login state machines - Use JDK instead of JRE due to JFR limitations. JDK is downloaded during installer assembly instead of including the JRE via dependency mechanism - Use PATH instead of hardcoding directories in various places check-in: 3f305d227f user: chrswk tags: trunk | |
|
2026-05-12
| ||
| 13:55 | Implement heartbeat basics and add to restic and sqlite rsync scripts. - Add cause to ErrorRes - Rename user contacts to identifiers - Update passwords.txt check-in: 4b937f3ace user: chrswk tags: trunk | |
|
2026-05-08
| ||
| 13:34 | Change update mechanism from update script to config that contains the install runbook. check-in: 5a863efdbf user: chrswk tags: trunk | |
|
2026-05-07
| ||
| 21:54 | Various provisioning fixes and improvements after more blueprince tests. - Explore different style for acl URNs check-in: 503d87ff03 user: chrswk tags: trunk | |
|
2026-05-06
| ||
| 13:50 | Work on lighthouse frontend and iam components. - Introduce TypeIds.Spec - More tinkering with IamService and access control - Refactor MethodType - Remove exploratory WebPushTest check-in: 2c6c96fb5c user: chrswk tags: trunk | |
|
2026-05-04
| ||
| 12:36 | Continue the work on lighthouse frontend. - Minor work on IamService check-in: 9ae0f7ca82 user: chrswk tags: trunk | |
|
2026-05-02
| ||
| 14:20 | Remove ResourceHandler.MethodHandlerConfig. - Start using Untrusted and [untrusted] markers - Continue work on lighthouse pages check-in: 488976aedf user: chrswk tags: trunk | |
|
2026-04-30
| ||
| 18:11 | Create dedicated subclasses of ResourceHandler for api/site use case. Remove Context from MethodHandler, use request attributes instead. - Finalize use of Reporting-Endpoints header - Fix ApiClient request error handling - Switch to using faster SHA512 instead of SHA256 check-in: 30d38df0f4 user: chrswk tags: trunk | |
|
2026-04-29
| ||
| 19:26 | Work on IamService. - Fix some more things after blueprince tests check-in: 4aea8c3e69 user: chrswk tags: trunk | |
|
2026-04-28
| ||
| 19:56 | Start fixing some stuff after blueprince tests. check-in: 802664b484 user: chrswk tags: trunk | |
| 14:23 | Finish WebPushTest. - Refactor TokenWithRealm to SecretWithRealm and open up Secret interface check-in: 81f5e941c0 user: chrswk tags: trunk | |
|
2026-04-24
| ||
| 14:53 | Start web push exploration test, including service worker support. - Create generic SseEventSource and use it for EventClient - Start with alert, health check, heartbeat implementation - Start with gateway implementation - Switch from echarts to uplot - Work on FileService implementation, including first Magika integration - Work on HTMX integration, including csfr tokens, resource bundles and headers check-in: cf6597d458 user: chrswk tags: trunk | |
|
2026-04-17
| ||
| 20:06 | Refactor and restructure resource handlers. - Refactor and continue IamService session handling check-in: 8c7774752e user: chrswk tags: trunk | |
|
2026-04-15
| ||
| 20:09 | Convert ContentType from enum to record to allow defining custom ones. - Consolidate esbuild scripts into build_helper and get tsc to work with node types check-in: 3f3141b5a6 user: chrswk tags: trunk | |
|
2026-04-14
| ||
| 20:06 | Rewrite token/session handling in IamService. Use opaque ids by default and only use paseto for acl and root tokens. - Fix tsc build. Setup did not work with imports in other projects - Get jte build and hot reloading to work with templates from other modules (framework/lighthouse/example) - Remove exploratory Jte, Oidc, WebAuthn, WebResourceHandler test classes check-in: cde6dda731 user: chrswk tags: trunk | |
|
2026-04-10
| ||
| 18:37 | Split repo into parent, dev and blueprint repos. check-in: 37e38cd79a user: chrswk tags: trunk | |
| 14:59 | Get the final (final) web pipeline ready. - Add csp header containing script and style hash from esbuild output - Add JteTemplatePreprocessor in releng. Inserts esbuild output names and squashes partial templates to a single line - Implement full hot reload for esbuild (with --watch) and jte templates with preprocessing using WebHelper.startTemplateWatcher - Prepare to split repo into multiple repos - Start with a generic SseStream implementation - Switch to montory.pro server for npm and maven - Switch to htmx and hyperscript - Switch to zstd - Use hash in esbuild output to get immutable files check-in: 43c97d4e05 user: chrswk tags: trunk | |
|
2026-04-02
| ||
| 18:16 | Implement WebAuthnTest with all three flows. - Finish OidcTest, use openid-configuration for discovery and verify JWT signature and id token claims check-in: 13445cc0df user: chrswk tags: trunk | |
|
2026-04-01
| ||
| 14:16 | Remove session id as a separate concept, use the token as the session identifier. Cleanup ResourceHandler/IamService in the process. - Continue exploring cel to sql - Introduce token for anonymous (not logged in) sessions - Use Blake3 for token hash check-in: 2e6c7d59fe user: chrswk tags: trunk | |
|
2026-03-30
| ||
| 19:18 | More exploration (CelSqlGenerator, OidcTest, IpInfoTest). check-in: b9f9a85c20 user: chrswk tags: trunk | |
|
2026-03-29
| ||
| 21:08 | Continue with various exploration stuff (IamService, PagingToken/PagingCache in O11yRepository). - Implement first version of Localizer to support i18n in templates via ICU - Make SeleniumExtension lazier - Move documentation to repo root check-in: a64a8c162b user: chrswk tags: trunk | |
|
2026-03-26
| ||
| 21:55 | Continue web exploration in WebResourceHandlerTest. - Add sec fetch header precondition to ResourceHandler - Caddy now only serves static files and redirects everything else to reverse proxy - Remove all visibility modifiers from test code - Replace TmpDirExtension with TempDir from junit check-in: 57a4877bd2 user: chrswk tags: trunk | |
|
2026-03-25
| ||
| 21:08 | Add ApiResourceHandler and WebResourceHandler on top of ResourceHandler. Use WebResourceHandler for the minimal datastar example in lighthouse. - Implement resource handler config suppliers - Include docopts by default in installer zip and use it for install script - Move docopt java code to a vendor jar - Use jsonc file extension for runnbooks to make support for comments clear check-in: 5d43db98b8 user: chrswk tags: trunk | |
|
2026-03-22
| ||
| 14:25 | Improve esbuild scripts. - Fix missing Handlers class check-in: c2d1d6b395 user: chrswk tags: trunk | |
| 13:46 | Create lighthouse-es-client module with static www content, build.js. This is what gets served by caddy. - Implement minimal client example with jte and datastar in lighthouse-server - Rename es modules so they are grouped together - Remove eslint-plugin-qunit due to peer dependency conflict. Maybe try again later - Use new JsonTypeName annotation instead of JsonSubTypes check-in: 85ce710171 user: chrswk tags: trunk | |
|
2026-03-21
| ||
| 19:54 | Get rid of ApiException, so we don't have execptions in hot path. Replaced with an 'either' shaped interface. - Add some tests - Various code cleanup check-in: 49ac1b2240 user: chrswk tags: trunk | |
|
2026-03-19
| ||
| 21:43 | Finish BluePrinceTest.update_application_server by fixing updater service/script and creating an event in LighthouseService. - Finish updating to java 26 - Fix .profile variables in workstation runbooks check-in: 0a1e684a2e user: chrswk tags: trunk | |
|
2026-03-18
| ||
| 16:20 | Get event service running, so we can complete BluePrinceTest for now. - Apply service hardening of server.service to rest of services - Cleanup of es build - Cleanup of pom property names - Fix chrome, firefox runbooks - Get rid of provisioning.sh. It's now the new install.sh - Include docopt.java sources and use it for all main methods - Rename tool/promontory-dev to tool/releng (also applies to tools runbook) - Start updating to java 26 - Use docopts for all releng scripts - Work on docs check-in: 21e3143eed user: chrswk tags: trunk | |
|
2026-03-13
| ||
| 20:55 | Split selenium runbook into chrome/firefox. - Update 7z version - Update dependencies doc check-in: e6c6aaeea5 user: chrswk tags: trunk | |
| 16:53 | Add dependencies license information. check-in: 20b41bb0e3 user: chrswk tags: trunk | |
| 15:58 | Getting update cycle milestone done. - Fix resource handling in StepRunner - Fix Resource.deflate/inflateFieldValue - Fix updater service/script - Improve env var step - Introduce staging system property. - Make versioned runbooks that have snapshot versions idempotent - Switch to using Charset.defaultCharset check-in: af862ef084 user: chrswk tags: trunk | |
|
2026-03-11
| ||
| 21:13 | Some minor cleanup and refactorings. - Fix 'self' slot by adding merge policy that defaults to MERGE, but uses OVERRIDE for 'self' slot - Get rid of Defaults, just read pom properties directly in tests - Try to get all tests running check-in: b2c7addbb3 user: chrswk tags: trunk | |
|
2026-03-10
| ||
| 20:31 | Continue work on BluePrinceTest for our update cycle milestone. We are almost there. - Get framework server running with file, iam, ops service - Implement file, lighthouse client and handlers - Implement HostsExtension. Can be used for ip/hostname mappings in tests with jdk.net.hosts.file - Implement stubs for file, lighthouse service methods required for update cycle - Remove some of the default properties defined in pom. Not any better than just using the actual values - Rename 'exit code' to 'exit status' - Round of dependency updates check-in: 13e5522132 user: chrswk tags: trunk | |
|
2026-03-04
| ||
| 22:16 | Fix mistakes from previous commit. - Replace remaining vars in tests - Add builtin before/after slots to include step - Rename mkdir step path parameter to dir check-in: 9229121975 user: chrswk tags: trunk | |
| 13:29 | Add logorrr to workstation tool runbooks. check-in: 770e669566 user: chrswk tags: trunk | |
| 13:12 | Fix various stuff after test installation of development workstation. - Add idea configs - Add vscodium runbook - Fix assemble-provisioning-module profile activation - Remove winslop support check-in: 5c49316a85 user: chrswk tags: trunk | |
|
2026-03-02
| ||
| 21:41 | Continue work on Deployer (add incus server integration, remove archiveDir). - Add first draft of prepare_release/prepare_snapshot scripts - Add manifest.properties to installer, similar to MANIFEST.MF in JARs - Cleanup Jenkinsfiles - Get example-ops/test module running with failsafe plugin - Move Incus core logic to own class - Move ops module resources to src/main/resources/installer - Remove web client modules - Switch to eclipse temurin JDK/JRE - Use maven profiles to manage plugin activation in maven build check-in: f9f71c7031 user: chrswk tags: trunk | |
|
2026-02-25
| ||
| 21:41 | Continue working towards milestone of full update cycle, including starting with file, iam. - Remove lighthouse, example client modules - Fix relations between CelConfigStore/CelConfigSupplier/ConfigChangeSupport check-in: 552b46e29d user: chrswk tags: trunk | |
|
2026-02-08
| ||
| 21:17 | Start implementing Deployer and related api and client stuff. - Add ScheduledTasks, crypto utils - Continue ApiClient, ApiHandler, ServerRuntime implementations - Rewrite Resource to use static fields instead of annotations - Use maven properties to pass installer properties instead of env check-in: d1c0615dbf user: chrswk tags: trunk | |
|
2026-02-03
| ||
| 20:42 | Rewrite Db migrations. - Get application provisioning up and running - Move systemd credentials to drop-ins check-in: f9f0a61c92 user: chrswk tags: trunk | |
|
2026-02-01
| ||
| 22:24 | Continue work on expanding and testing provisioning modules. - Implement more basics of framework server (ApiHandler, ConfigSupplier & Co) and test happy path check-in: 8f0c391c69 user: chrswk tags: trunk | |
|
2026-01-27
| ||
| 19:14 | Continue work on application install runbooks. - Get BlueprintTest running - Some work on docs check-in: bf64ac6e85 user: chrswk tags: trunk | |
|
2026-01-26
| ||
| 21:26 | Continue work on application runbooks. check-in: 6aebd9c5cf user: chrswk tags: trunk | |
|
2026-01-25
| ||
| 22:17 | Almost done with next milestone (SSH, HTTPS and backup between instances) for BlueprintTest. - Replace duplicity with restic check-in: 46d92b9a9f user: chrswk tags: trunk | |
|
2026-01-22
| ||
| 22:22 | Work on development server setup. check-in: f6891d7dc5 user: chrswk tags: trunk | |
| 13:57 | Continue with BlueprintTest, get ssh running. check-in: c77471463a user: chrswk tags: trunk | |
|
2026-01-21
| ||
| 15:18 | Get incus integration running and expand blueprint test. check-in: f15533ea02 user: chrswk tags: trunk | |
|
2026-01-15
| ||
| 20:37 | More work on development workstation. - Add caddy, selenium test extensions - Start work on incus test extension check-in: 203e77f105 user: chrswk tags: trunk | |
|
2026-01-11
| ||
| 21:31 | Work towards a working developer workstation and switch to Linux only. check-in: 970b29ecb4 user: chrswk tags: trunk | |