anti 6bbb2376f7 refactor(services): make artifact root configurable via DECNET_ARTIFACTS_ROOT ...

The ssh and telnet services hard-coded /var/lib/decnet/artifacts as the host
quarantine mount. Read it from DECNET_ARTIFACTS_ROOT with the same default so
dev/rootless deploys can point it elsewhere.

2026-04-22 09:23:36 -04:00

..

agent

feat(agent,forwarder,updater): publish system.<worker>.health heartbeats (DEBT-031 workers 7-9)

2026-04-21 17:02:10 -04:00

bus

feat(mutator): emit_decky_mutated helper — RFC 5424 + bus in one call

2026-04-21 19:29:21 -04:00

cli

feat(mutator,web): add_decky op — create-and-attach in one mutation

2026-04-21 20:13:39 -04:00

collector

feat(collector): publish system.log per ingested event (DEBT-031 worker 5)

2026-04-21 16:57:21 -04:00

correlation

feat(correlation): interleave mutation markers into attacker traversals

2026-04-21 19:37:35 -04:00

engine

feat(templates): wire SSH+Telnet to sessrec transcript recorder

2026-04-21 23:03:42 -04:00

logging

refactor: strip DECNET tokens from container-visible surface

2026-04-17 22:57:53 -04:00

mutator

feat(mutator,web): add_decky op — create-and-attach in one mutation

2026-04-21 20:13:39 -04:00

prober

feat(prober): publish attacker.fingerprinted on the bus (DEBT-031)

2026-04-21 16:47:55 -04:00

profiler

feat(profiler): publish attacker.scored per profile upsert (DEBT-031 worker 4)

2026-04-21 16:54:40 -04:00

services

refactor(services): make artifact root configurable via DECNET_ARTIFACTS_ROOT

2026-04-22 09:23:36 -04:00

sniffer

feat(prober): publish attacker.fingerprinted on the bus (DEBT-031)

2026-04-21 16:47:55 -04:00

swarm

feat(agent,forwarder,updater): publish system.<worker>.health heartbeats (DEBT-031 workers 7-9)

2026-04-21 17:02:10 -04:00

templates

feat(templates): wire SSH+Telnet to sessrec transcript recorder

2026-04-21 23:03:42 -04:00

topology

feat(agent/collector): topology-label discovery and master-authoritative supersede

2026-04-21 10:23:10 -04:00

updater

feat(agent,forwarder,updater): publish system.<worker>.health heartbeats (DEBT-031 workers 7-9)

2026-04-21 17:02:10 -04:00

web

test(web): transcripts API + attacker-transcripts router coverage

2026-04-21 23:11:40 -04:00

__init__.py

feat(env): run decnet.ini loader at package import; expose DECNET_MODE

2026-04-19 03:17:25 -04:00

archetypes.py

refactor(ssh): consolidate real_ssh into ssh, remove duplication

2026-04-11 19:51:41 -04:00

composer.py

feat: fleet-wide MACVLAN sniffer microservice

2026-04-14 15:02:34 -04:00

config_ini.py

feat(enroll): systemd units for agent/forwarder/engine + log-directory INI key

2026-04-19 05:46:08 -04:00

config.py

chores: fix linting

2026-04-18 06:46:10 -04:00

custom_service.py

Add per-service customization, stealth hardening, and BYOS support

2026-04-04 04:08:27 -03:00

distros.py

fix: stabilize tests with synchronous DB init and handle Bandit security findings

2026-04-09 01:33:15 -04:00

env.py

feat(bus): host-local UNIX-socket pub/sub worker (DEBT-029)

2026-04-21 13:49:02 -04:00

fleet.py

feat: fleet-wide MACVLAN sniffer microservice

2026-04-14 15:02:34 -04:00

ini_loader.py

fix: align tests with model validation and API error reporting

2026-04-13 01:43:52 -04:00

models.py

feat(swarm): DeckyConfig.host_uuid + fix agent log/status field refs

2026-04-18 19:10:25 -04:00

network.py

fix(network): sweep orphan Docker bridges that squat on our subnet

2026-04-20 23:19:42 -04:00

os_fingerprint.py

feat(os_fingerprint): Phase 2 — add icmp_ratelimit + icmp_ratemask sysctls

2026-04-10 16:41:23 -04:00

privdrop.py

fix: chown log files to sudo-invoking user so non-root API can append

2026-04-17 13:39:09 -04:00

telemetry.py

fix: resolve all ruff and bandit lint/security issues

2026-04-16 01:04:57 -04:00