GithubBackup/IP-Sentinel
1
0
Fork 0
mirror of https://github.com/hotyue/IP-Sentinel.git synced 2026-05-11 18:10:00 +08:00
Code Issues Packages Projects Releases Wiki Activity
414 Commits 2 Branches 45 Tags
43adf55a4b5bbc2b88b30d9917d451ce609c1de3
Commit Graph

48 Commits

Author SHA1 Message Date
hotyue
43adf55a4b fix(master): 对齐全网防御架构，为司令部安装/卸载器引入 mktemp 动态沙盒与无落地内存流，彻底阻断 TOCTOU 提权劫持 2026-04-28 00:58:27 +00:00
hotyue
df77f397aa fix(master): 对齐 Agent 架构，重构中枢安装器引入原子化防砖交接与 SIGKILL 绝对抹杀机制 2026-04-28 00:05:26 +00:00
hotyue
8ae3a6534d feat: 🚀 跃升至 v4.0.2，全面重构 IP 质量态势感知矩阵，新增 Google 与 ChatGPT 历史轨迹追踪 2026-04-24 14:36:36 +00:00
hotyue
71fe3bde51 fix(master): 补齐 Master 部署脚本缺失的 openssl 核心依赖，杜绝纯净系统下因 HMAC 签名生成失败导致指令被全网拒收的致命隐患 2026-04-24 10:48:18 +00:00
hotyue
853e6c09e1 fix(install): 修复 Alpine Linux 下 dcron 依赖缺失导致 openssl 链式静默安装失败的漏洞 2026-04-24 09:44:29 +00:00
hotyue
b1ecbd4f9a chore: 恢复拉取源为 main 并移除 Beta 标识，准备发布 v4.0.0 正式版 2026-04-24 03:25:32 +00:00
hotyue
ae6559c850 fix(master): 同步修复 V6 环境下提取云端版本号超时的 Bug，并抬高兜底版本至 v4.0.0 2026-04-24 03:24:24 +00:00
hotyue
d2b575fe85 chore: 临时将全局拉取源切换至 dev/v4.0.0-sonar，准备进行深海声呐实弹测试 2026-04-23 13:33:07 +00:00
hotyue
981b9e4859 feat(master): 完善部署脚本，新增 ip_trend_log 数据表以支持 IP 污染趋势追踪 2026-04-23 13:26:11 +00:00
hotyue
7fd432ffee fix(install): 修复装机量统计逻辑，仅在全新部署时触发探针，彻底解决平滑升级导致的数据虚高与 Cloudflare KV 写入配额耗尽问题 2026-04-23 11:18:46 +00:00
hotyue
c03f6ca9ba chore: 准备 v3.6.3 正式发布，将所有云端资源路由切换回 main 主干分支 2026-04-21 09:48:14 +00:00
hotyue
66f3ba7d06 perf(master): 优化包管理器参数，拒绝冗余依赖捆绑，实现 Master 中枢极致轻量化部署 2026-04-21 09:32:54 +00:00
hotyue
068734da16 fix(ota): 引入 bash -n 语法树完整性校验，彻底阻断因网络波动下载不全导致的单点死机风险 2026-04-21 05:45:50 +00:00
hotyue
a7f08ec7a7 chore(release): 解除测试沙箱 URL 劫持，跃升至 v3.6.2，正式开启 Systemd 与智能双栈纪元 2026-04-21 02:42:04 +00:00
hotyue
0bb96169e5 fix(core): 引入 Ceasefire Protocol (停火协议)，彻底解决 Systemd 架构下 OTA 升级引发的无限重启风暴 2026-04-21 02:21:43 +00:00
hotyue
34320b2385 refactor(core): 手工融合 Systemd 引擎与 Root 权限校验 (提取自 PR #25)，修复 Cgroup 误杀与交互逻辑陷阱，构建灰度测试候选版 2026-04-21 02:00:10 +00:00
hotyue
3b28ead0e4 chore: 战略撤退，代码全量回滚至 9a38fb6 (PR 引入前的纯净状态) 2026-04-20 17:37:47 +00:00
hotyue
201df489db refactor(core): 缝合 Systemd 架构，修复 PR #25 中的管道符闪退及 oneshot 守护进程死锁漏洞 2026-04-20 16:24:32 +00:00
IcySteam
2d680c5fc7 refactor(core): Enable Systemd and upgrade Sentinel service orchestration 
The legacy crontabs have been superseded by Systemd to fortify orchestration of our global fleet of Sentinels.

While cron relies on timed, fire-and-forget execution, Systemd elevates our operations into natively integrated, state-aware OS daemons. This paradigm shift unlocks precise lifecycle management, unified logging (inspect all service logs with `journalctl -t ip-sentinel`), and absolute control over module deployment.

- Battle-Hardened: Sentinels now auto-resurrect upon failure, bypassing minute-long cron wait times.
- Zero-Impact Missions: Sentinels now operate under strict `idle` CPU/IO scheduling. This guarantees that automated maintenance cycles yield to high-priority user interactions, and never impact primary server workloads.
- Field Intelligence Auto-Stagger: Service-level `RandomizedDelaySec` natively staggers Agent check-ins to protect the Command Center.
- Legacy Fallback: OS interrogation on deployment ensures a seamless fallback to cron for Sentinels operating in Alpine/OpenRC environments.

The fleet is more resilient than ever, but the architecture is always evolving. I highly welcome any reviews/suggestions from the original Author/Commander to perfect this pull request!
 2026-04-21 00:27:01 +10:00
IcySteam
4a28f7f395 fix(core): Mandate root privileges for all setup scripts 
The old setup scripts assume root privileges. We are fixing this by explicitly requiring an `$EUID` root check before execution so that no borked, non-root installations happen.
 2026-04-20 19:46:30 +10:00
hotyue
a0bb0f30f2 chore(master): 移除安装向导测试期锚点，恢复生产环境 main 主分支直链 2026-04-18 00:54:22 +00:00
hotyue
c27f2fced9 feat(master): 实装司令部金蝉脱壳 (Silent Override) 架构，新增中枢免交互 OTA 热重载能力与自动捷报推送 2026-04-18 00:41:03 +00:00
hotyue
8baa141339 chore(master): 临时切换 install_master.sh 拉取直链至 dev-v3.6.1 分支以支持扁平化 UI 演习测试 2026-04-18 00:20:45 +00:00
hotyue
2eceb43ac3 chore(master): 临时切换 install_master.sh 拉取直链至 dev-v3.6.1 分支以支持扁平化 UI 演习测试 2026-04-18 00:17:12 +00:00
hotyue
5dfaa19cca chore: 移除测试期 dev-v3.6.0 专属锚点，全系组件直链恢复至 main 主分支，准备发布正式版 2026-04-17 15:07:45 +00:00
hotyue
f19d165ece refactor(master): 移植 Agent 级智能依赖探测引擎，实现缺啥补啥的优雅部署，并增加二次复检熔断机制 2026-04-17 14:49:10 +00:00
hotyue
970867f3c7 fix(master): 司令部启动追加 disown 脱钩指令，抹除卸载与升级时底层 Bash 的 Killed 进程报错，提升静默优雅度 2026-04-17 14:18:39 +00:00
hotyue
cfe6dd59c8 feat(master): 部署向导新增官方与私有网关身份选择，固化 IS_OFFICIAL_GATEWAY 标识以支持 UI 级物理熔断 2026-04-17 14:10:40 +00:00
hotyue
3e9a82a657 chore: 临时将各组件拉取直链指向 dev-v3.6.0 分支，修复跨分支拉取导致的数据解析错位 2026-04-17 13:27:20 +00:00
hotyue
e88cf4ac5b feat(master): 部署引擎移植全境兼容嗅探器，并预建 SQLite 数据库的 enable_ota 控制字段 2026-04-17 13:07:14 +00:00
hotyue
31014e571d feat(master): [v3.5.3] 升级 SQLite 初始表结构，新增模块状态追踪字段以支持红绿灯 UI (Resolves #19) 2026-04-17 02:40:23 +00:00
hotyue
5e40ed426b chore: revert failed v3.6.0 attempts, rollback to safe state 2026-04-17 02:24:07 +00:00
hotyue
2166753569 feat(master): [v3.6.0] 司令部部署引入 OTA 下发权限控制，重构 SQLite 初始表结构以支持状态机 (Resolves #17, Resolves #19) 2026-04-17 01:19:20 +00:00
hotyue
05e708ed21 fix(master): [v3.5.2] 修复交互向导首选项的默认值丢失问题，防止直接回车导致主控数据库被误删 2026-04-16 07:57:02 +00:00
hotyue
03a54bcca0 chore(master): [v3.5.2] 完善全新部署时的 SQLite 表结构 (增加 region 与 node_alias) 2026-04-16 01:35:16 +00:00
hotyue
423a765e5f feat(core): 引入 KV 环境分解法，实现 Agent 与 Master 版本独立解耦 2026-04-15 05:58:28 +00:00
hotyue
5627c0115a feat(installer): 引入 SSOT 动态版本抓取机制，并重构边缘节点战区分组交互 UI 2026-04-15 03:56:45 +00:00
hotyue
918c73b5dc feat(master): 🧠 中枢安装脚本实现版本号补录与无损热升级 2026-04-14 08:00:47 +00:00
hotyue
aa2874fdcd chore(master): ⬆️ 对齐主控端安装脚本头部版本号 2026-04-14 06:18:12 +00:00
hotyue
d43163703e chore(master): ⬆️ 对齐主控端版本号至 v3.3.0 2026-04-13 08:18:10 +00:00
hotyue
6b9563b858 fix(deploy): 🐛 [v3.2.3] 修复防火墙提示盲区，支持根据 IPv4/IPv6 动态下发 iptables/ip6tables 放行指令 2026-04-13 03:32:41 +00:00
hotyue
f698bc4b92 feat(deploy): 🚀 [v3.2.2] 引入全系平滑热更新引擎，支持 Agent 与 Master 状态机嗅探及无损覆盖安装 2026-04-13 01:43:03 +00:00
hotyue
01305f98b5 feat(master): Master 脚本接入透明统计，并新增部署前旧进程自洁功能 2026-04-11 07:08:21 +00:00
hotyue
62deadda1e security(master): 部署脚本新增配置文件与数据库权限收敛 (chmod 600)，防止 Bot Token 与节点网络拓扑泄露 (v3.0.3-part3) 2026-04-11 00:30:58 +00:00
hotyue
f8b4777ed8 feat(master): 新增 Master 中枢一键卸载功能及安装脚本交互菜单 2026-04-10 12:50:53 +00:00
hotyue
f7bbfe9010 feat(master): 新增 Master 中枢一键卸载功能及安装脚本交互菜单 2026-04-10 12:42:28 +00:00
hotyue
c30f34aea6 chore: 统一为所有 Shell 脚本配置 Git 可执行权限 (mode 100755) 2026-04-02 09:27:55 +00:00
hotyue
f6512fb1c3 feat: 新增 Master 司令部架构 (SQLite 集成与 Webhook 调度) 2026-04-01 10:19:20 +00:00