|
|
@@ -121,6 +121,7 @@ Supported action types currently include:
|
|
|
|
- The `pacman` orphan cleanup remote command now avoids nested `bash -lc` argument-passing issues by selecting between two simple remote `sh -c` commands, one with `--noconfirm` and one without
|
|
|
|
- The `pacman` orphan cleanup remote command now avoids nested `bash -lc` argument-passing issues by selecting between two simple remote `sh -c` commands, one with `--noconfirm` and one without
|
|
|
|
- The `docker-stacks` action uses a remote shell script sent over SSH stdin, with the stack directory exported as a remote environment assignment before `bash -s`, to keep path handling working after recent SSH command-construction changes
|
|
|
|
- The `docker-stacks` action uses a remote shell script sent over SSH stdin, with the stack directory exported as a remote environment assignment before `bash -s`, to keep path handling working after recent SSH command-construction changes
|
|
|
|
- Unknown actions and reboot SSH failures now propagate error status more consistently
|
|
|
|
- Unknown actions and reboot SSH failures now propagate error status more consistently
|
|
|
|
|
|
|
|
- The `reboot` action now triggers a detached remote reboot command (`reboot || /sbin/reboot || shutdown -r now` under `nohup`) so an expected SSH disconnect during restart is less likely to be reported as a failure
|
|
|
|
- A focused code review identified the next recommended work items and suggested splitting them into separate commits rather than combining them in one larger hardening change
|
|
|
|
- A focused code review identified the next recommended work items and suggested splitting them into separate commits rather than combining them in one larger hardening change
|
|
|
|
- `whiptail` checklist defaults are now passed explicitly as `ON`/`OFF`, and selected items are parsed through a dedicated helper instead of relying on raw shell word splitting
|
|
|
|
- `whiptail` checklist defaults are now passed explicitly as `ON`/`OFF`, and selected items are parsed through a dedicated helper instead of relying on raw shell word splitting
|
|
|
|
- The CLI help and README now clarify that `-f` preselects all nodes in the interactive checklist
|
|
|
|
- The CLI help and README now clarify that `-f` preselects all nodes in the interactive checklist
|
|
|
@@ -128,6 +129,9 @@ Supported action types currently include:
|
|
|
|
- The `apk` action no longer passes `-y` to `apk upgrade`, because current Alpine `apk` does not accept that option there; `-y` remains a best-effort flag for other supported package managers
|
|
|
|
- The `apk` action no longer passes `-y` to `apk upgrade`, because current Alpine `apk` does not accept that option there; `-y` remains a best-effort flag for other supported package managers
|
|
|
|
- The `apt` action now uses `apt-get autoremove --purge` and no longer runs `apt-get purge` without arguments, which makes the cleanup step more meaningful and avoids a misleading command in the log
|
|
|
|
- The `apt` action now uses `apt-get autoremove --purge` and no longer runs `apt-get purge` without arguments, which makes the cleanup step more meaningful and avoids a misleading command in the log
|
|
|
|
- The `pacman` action was further hardened by simplifying orphan cleanup command construction, reducing quoting-related regressions while still skipping removal when no orphan packages are present
|
|
|
|
- The `pacman` action was further hardened by simplifying orphan cleanup command construction, reducing quoting-related regressions while still skipping removal when no orphan packages are present
|
|
|
|
|
|
|
|
- `README.md` no longer lists `sed` as a required dependency and now better reflects the local utilities actually used by the script
|
|
|
|
|
|
|
|
- Startup dependency checks now include `mv`, which is required by the log-summary rewrite
|
|
|
|
|
|
|
|
- The sample configuration in `config/netupgrade/hypervisor-01.cfg` now comments out the alternate `docker-01` reboot step so the two-step example remains visible without being active by default
|
|
|
|
|
|
|
|
|
|
|
|
## Change guidance
|
|
|
|
## Change guidance
|
|
|
|
- Preserve backward compatibility for existing config files where possible
|
|
|
|
- Preserve backward compatibility for existing config files where possible
|
|
|
@@ -153,7 +157,8 @@ Supported action types currently include:
|
|
|
|
- Highest priority should go to defining an explicit execution and failure policy, because it currently affects operator trust more than missing features do
|
|
|
|
- Highest priority should go to defining an explicit execution and failure policy, because it currently affects operator trust more than missing features do
|
|
|
|
- The next highest priority should be protecting against regressions in SSH command construction by documenting manual test cases for commands with spaces, pipes, redirections, `&&`, `||`, and quoted arguments
|
|
|
|
- The next highest priority should be protecting against regressions in SSH command construction by documenting manual test cases for commands with spaces, pipes, redirections, `&&`, `||`, and quoted arguments
|
|
|
|
- A small CLI usability pass would have strong value: `-f` currently only preselects nodes in `whiptail`, so a true non-interactive selection mode would improve automation without changing the overall project model
|
|
|
|
- A small CLI usability pass would have strong value: `-f` currently only preselects nodes in `whiptail`, so a true non-interactive selection mode would improve automation without changing the overall project model
|
|
|
|
- The dependency list should be rechecked: `README.md` still mentions `sed`, while the current implementation no longer appears to require it after the log-summary rewrite
|
|
|
|
- The dependency list was realigned: `README.md` no longer mentions `sed`, and the script dependency check now includes `mv` for the log-summary rewrite
|
|
|
|
|
|
|
|
- The sample configuration set was clarified to avoid an active duplicate reboot step for `docker-01`; the alternate `cmd:reboot` example remains commented out for illustration
|
|
|
|
- The sample configuration set should be reviewed for consistency; for example, duplicate or mismatched display names attached to different IPs increase the risk of accidental operations on the wrong host
|
|
|
|
- The sample configuration set should be reviewed for consistency; for example, duplicate or mismatched display names attached to different IPs increase the risk of accidental operations on the wrong host
|
|
|
|
- Shell quality improvements should favor linting, targeted helpers, and incremental refactors before any broad strict-mode changes
|
|
|
|
- Shell quality improvements should favor linting, targeted helpers, and incremental refactors before any broad strict-mode changes
|
|
|
|
- Future testing should focus first on parser behavior, command construction, and result reporting rather than trying to build a large end-to-end framework immediately
|
|
|
|
- Future testing should focus first on parser behavior, command construction, and result reporting rather than trying to build a large end-to-end framework immediately
|
|
|
|