anti
6d7877c679
Previously `decnet status` on an agent showed every microservice as DOWN
because deploy's auto-spawn was unihost-scoped and the agent CLI gate
hid the per-host commands. Now:
- collect, probe, profiler, sniffer drop out of MASTER_ONLY_COMMANDS
(they run per-host; master-side work stays master-gated).
- mutate stays master-only (it orchestrates swarm-wide respawns).
- decnet/mutator/ excluded from agent tarballs — never invoked there.
- decnet/web exclusion tightened: ship db/ + auth.py + dependencies.py
(profiler needs the repo singleton), drop api.py, swarm_api.py,
ingester.py, router/, templates/.
- Four new systemd unit templates (decnet-collector/prober/profiler/
sniffer) shipped in every enrollment tarball.
- enroll_bootstrap.sh enables + starts all four alongside agent and
forwarder at install time.
- updater restarts the aux units on code push so they pick up the new
release (best-effort — legacy enrollments without the units won't
fail the update).
- status table hides Mutator + API rows in agent mode.
21 lines
604 B
Django/Jinja
21 lines
604 B
Django/Jinja
[Unit]
|
|
Description=DECNET attacker profiler — {{ agent_name }}
|
|
Documentation=https://github.com/anti/DECNET
|
|
After=network-online.target decnet-agent.service
|
|
Wants=network-online.target
|
|
PartOf=decnet-agent.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
WorkingDirectory=/opt/decnet
|
|
Environment=DECNET_MODE=agent
|
|
Environment=DECNET_SYSTEM_LOGS=/var/log/decnet/decnet.profiler.log
|
|
ExecStart=/usr/local/bin/decnet profiler --interval 30
|
|
Restart=on-failure
|
|
RestartSec=5
|
|
StandardOutput=append:/var/log/decnet/decnet.profiler.log
|
|
StandardError=append:/var/log/decnet/decnet.profiler.log
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|