Ludovic Vielle ae769f52a1 Serialize enrollment install with enrolling.lock ...

Concurrent enroll-url launches could both pass the enrollment
marker check and run overlapping elevated installs, racing on
LoadOrExchangeAPIKey and overwriting agent.key.

Add an exclusive flock on {configDir}/enrolling.lock for the
full install path and re-check IsEnrolled under that lock so
only one install exchanges a token and configures the device.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

2026-07-24 15:08:30 +02:00

3.8 KiB

Raw Blame History

View Raw