22e50b3f11
Introduce the standalone device agent binary and shared library for enrollment, posture checks, self-update, and OS service integration. Include build targets, module deps, and release workflow so the agent can ship independently of server changes. Signed-off-by: Bryan Frimin <bryan@probo.com>
1.6 KiB
1.6 KiB
Changelog
All notable changes to the probo-agent device posture agent will be
documented in this file.
Unreleased
[0.1.0] - 2026-05-17
Added
- Initial release of the Probo device posture agent.
probo-agent install,uninstall,run,status,collectCLI commands.- Managed OS service installation for macOS (
launchd), Linux (systemd), FreeBSD (rc.d), and Windows (Service Control Manager). - v1 posture check set per OS: disk encryption, screen lock, firewall, time sync, OS version, auto update, password policy, remote login.
- Enrollment / heartbeat / posture reporting against the new
/api/agent/v1Probo REST API. - Auto-update: the agent periodically checks GitHub Releases for a
newer
probo-agent/v*tag and self-installs it. The running binary is swapped atomically and the OS service supervisor is asked to restart via a dedicated exit code (75). - Cosign signature verification of every release before installation:
checksums.txt.bundleis verified withsigstore-goagainst the Sigstore public-good trust root, pinned to the GitHub Actions OIDC identity forrelease-probo-agent.yamlon a tagged commit. Releases without a Sigstore bundle, with an invalid bundle, or signed by a different workflow are rejected without touching the running binary. probo-agent update [--check]command for manual one-shot upgrade.probo-agent install --no-auto-updateflag to opt out of automatic upgrades; the flag is persisted inconfig.jsonasupdates_disabled.probo-agent statusnow reports the configured update interval and whether auto-update is enabled.