slawek/linux-cloud-router
3
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: the web service manages users also when it started before setup.
Release / release (push) Successful in 19s
Details

Browse Source
This commit is contained in:
slawek committed 2026-10-24 21:32:00 +02:00
1 parent 8782edff0f
commit 581b53d447
3 files changed
+17 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

ADR.md
+4 -2
View File
@@ -143,8 +143,10 @@ Decision: `vpnrouter_users.py` holds the user operations, the checks and a sessi
lock and the connection of the user manager account. The web service imports it and maps a lock and the connection of the user manager account. The web service imports it and maps a
`Failure` to the HTTP status; `vpn-router-user` imports it and adds the argument parsing and `Failure` to the HTTP status; `vpn-router-user` imports it and adds the argument parsing and
the output, text for people and JSON with `--json`. The web unit allows writing the paths the the output, text for people and JSON with `--json`. The web unit allows writing the paths the
operations need: `/run/vpn-router` for the lock, `/etc/vpn-router/pki` for the certificates and operations need: `/run/vpn-router` for the lock, its `RuntimeDirectory`, which systemd creates
the CA's state, and `/etc/swanctl/x509crl` for the published CRL. before the service starts, also before setup has run, and keeps when it stops, as setup's state
files are there too; `/etc/vpn-router/pki` for the certificates and the CA's state, and
`/etc/swanctl/x509crl` for the published CRL.
Consequences: The rules exist once. A request starts no process, and a password never leaves Consequences: The rules exist once. A request starts no process, and a password never leaves
the process that received it. The web service imports `python3-ldap` and the package's the process that received it. The web service imports `python3-ldap` and the package's
debian-package/debian/changelog
+10
View File
@@ -1,3 +1,13 @@
vpn-router (0.12.2-1) unstable; urgency=medium
fix: the web service manages users also when it started before setup.
* vpn-router-web creates /run/vpn-router when it starts, so the user
operations take their lock there; started before vpn-router-setup had
made the directory, they failed with "Read-only file system".
-- Slawomir Koszewski <slawek@koszewscy.waw.pl> Sun, 25 Oct 2026 12:00:00 +0200
vpn-router (0.12.1-1) unstable; urgency=medium vpn-router (0.12.1-1) unstable; urgency=medium
fix: the status page shows whether the Router Manager runs. fix: the status page shows whether the Router Manager runs.
debian-package/debian/vpn-router.vpn-router-web.service
+3 -1
View File
@@ -13,7 +13,9 @@ Restart=on-failure
RestartSec=15 RestartSec=15
NoNewPrivileges=yes NoNewPrivileges=yes
ProtectSystem=strict ProtectSystem=strict
ReadWritePaths=-/run/vpn-router -/etc/vpn-router -/etc/swanctl/x509crl RuntimeDirectory=vpn-router
RuntimeDirectoryPreserve=yes
ReadWritePaths=-/etc/vpn-router -/etc/swanctl/x509crl
ProtectHome=yes ProtectHome=yes
PrivateTmp=yes PrivateTmp=yes