anti
430262e01a
Two pieces, one PR because they share a deployment surface: 1. systemd. decnet-reconciler.service.j2 mirrors the orchestrator unit shape (docker group, hardened sandbox, append-logs). Read-only /var/lib/decnet so it can read decnet-state.json without write access. Auto-discovered by `decnet init` via the existing decnet-*.service.j2 glob — no init.py change needed. Added to decnet.target so `systemctl start decnet.target` brings it up alongside collector / sniffer / mutator / etc. Also added to the agent reaper script so self-destruct cleans it up on workers. 2. Bus signal. reconcile_once now publishes `decky.<host_uuid:name>.state` on every insert / delete / state-changed transition. Reuses the existing DECKY_STATE topic family (no bus/topics.py change → no wiki update needed per the bus-signals doc rule). Composite host_uuid:name segment keeps fleet rows distinguishable from MazeNET TopologyDecky rows whose ids are bare UUIDs. Quiet ticks publish nothing — convergence means silence. Bus is plumbed through the worker, defaults to None for unit-test callers. publish_safely keeps the source-of-truth contract: DB write is authoritative, the publish is best-effort notification. Captures previous_state into a local before update_fleet_decky_state runs — a fake repo that mutates rows in-place would otherwise see the post-update state and report previous == current. Real repos don't have this concern but the fix is cheap and makes the function less order-dependent.
26 lines
947 B
SYSTEMD
26 lines
947 B
SYSTEMD
[Unit]
|
|
Description=DECNET honeypot framework (all master-host workers)
|
|
Documentation=https://git.resacachile.cl/anti/DECNET/wiki/Workers
|
|
# Bring workers up in dependency order: bus first (everything else publishes
|
|
# heartbeats to it), then the API + data-plane workers. systemd resolves the
|
|
# actual ordering via each unit's own After=/Wants= on decnet-bus.service —
|
|
# this target is a convenience grouping, not an ordering primitive.
|
|
Wants=decnet-bus.service \
|
|
decnet-api.service \
|
|
decnet-web.service \
|
|
decnet-collector.service \
|
|
decnet-profiler.service \
|
|
decnet-sniffer.service \
|
|
decnet-prober.service \
|
|
decnet-mutator.service \
|
|
decnet-reconciler.service \
|
|
decnet-reuse-correlator.service \
|
|
decnet-enrich.service \
|
|
decnet-clusterer.service \
|
|
decnet-campaign-clusterer.service \
|
|
decnet-webhook.service
|
|
After=decnet-bus.service
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|