gtiandClaude Sonnet 5
8d6122c096
One universal Windows Agent package per version (agent_releases: version/ platform/architecture/sha256/status DRAFT|PUBLISHED|REVOKED; the binary lives on a local release-storage volume, never in PostgreSQL). An operator creates a pending installation (agent_enrollments) from Agents / Servidores -> + Nova instalação, then either downloads it directly or generates a one-time HTTPS link (short TTL, single use). Either path streams the package plus a freshly minted enrollment.json whose token is never written to storage in plaintext, only its SHA-256 hash. On the client host, gti-agent.ps1 install-auto verifies the bundle's SHA-256, refuses a non- HTTPS Hub, enrolls via POST /v1/agents/enroll (deleting the enrollment token immediately after, success or failure), writes an ACL-restricted .env with the newly issued permanent Agent token, and registers the Windows Service without starting it (Firebird stays unconfigured on purpose). Idempotent, replay-proof, rate-limited per IP, fully audited, never logs a secret. Migration 0022_agent_releases_enrollment (verified fresh-DB == upgrade-from-0021 by pg_dump diff). GTI_FISCAL_VERSION/AGENT_VERSION bumped to 1.1.0 as the single source of truth across code, packages, the release manifest and every published AgentRelease row. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
34 lines
1.8 KiB
HTML
34 lines
1.8 KiB
HTML
{% extends "base.html" %}
|
|
{% block title %}Nova instalação | GTI Fiscal{% endblock %}
|
|
{% block content %}
|
|
<div class="page-heading"><div><p class="eyebrow">DISTRIBUIÇÃO DO AGENT</p><h1>Nova instalação</h1><p class="muted">Cria uma instalação pendente; o pacote e o vínculo de enrollment só existem depois de gerados aqui.</p></div><div><a href="/agents" class="secondary">Voltar</a></div></div>
|
|
<section class="panel" style="max-width:560px">
|
|
{% if error %}<p class="error" role="alert">{{ error }}</p>{% endif %}
|
|
{% if not releases %}
|
|
<p class="muted">Nenhuma versão do Agent está publicada ainda. Publique uma release primeiro (<code>python central/scripts/publish_agent_release.py</code>) e ela aparecerá aqui.</p>
|
|
{% else %}
|
|
<form method="post" action="/agents/new">
|
|
<input type="hidden" name="csrf_token" value="{{ csrf_token }}">
|
|
<label>Cliente
|
|
<select name="tenant_id" required>
|
|
<option value="">Selecione</option>
|
|
{% for tenant in tenants %}<option value="{{ tenant.id }}">{{ tenant.name }}</option>{% endfor %}
|
|
</select>
|
|
</label>
|
|
<label>Nome da instalação
|
|
<input name="display_name" placeholder="ex. Servidor Principal" maxlength="160" required>
|
|
</label>
|
|
<label>Hostname esperado (opcional)
|
|
<input name="expected_hostname" placeholder="ex. SRV-CONSTRUCAO" maxlength="255">
|
|
</label>
|
|
<label>Versão do Agent
|
|
<select name="release_id" required>
|
|
{% for release in releases %}<option value="{{ release.id }}" {% if loop.first %}selected{% endif %}>{{ release.version }} ({{ release.platform }}/{{ release.architecture }})</option>{% endfor %}
|
|
</select>
|
|
</label>
|
|
<p><button type="submit">Criar instalação</button></p>
|
|
</form>
|
|
{% endif %}
|
|
</section>
|
|
{% endblock %}
|