Add server update alerting and fleet client auto-update system (synchronized release lockstep)

2026-10-02 22:08:51 +02:00
parent f2a9e43619
commit 2c08f9fc15
11 changed files with 1216 additions and 31 deletions
@@ -42,7 +42,8 @@ from client_transport import (
    get_tls_socket,
    load_config,
    ensure_enrolled as transport_ensure_enrolled,
-    send_encrypted_logs_over_socket as transport_send_encrypted_logs
+    send_encrypted_logs_over_socket as transport_send_encrypted_logs,
+    check_and_apply_auto_update
 )

 CONFIG_FILE_NAME = "client_config.json"
@@ -103,6 +104,12 @@ def main():
        # Continuously verify/renew PKI enrollment if server is licensed & online
        ensure_enrolled(config, machine_id)

+        # Periodically check server for client auto-updates
+        try:
+            check_and_apply_auto_update(config=config, machine_id=machine_id, os_type="linux")
+        except Exception as update_err:
+            pass
+
        print(f"[*] Scanning Linux journalctl for unsent entries (last {args.hours} hours)...")
        candidate_logs = collector.collect_logs(hours=args.hours)
        print(f"[*] Found {len(candidate_logs)} unsent candidate entries (INFO to ERROR, entries > {args.hours}h and already-sent skipped).")