Build the read-only remote plan
I maintainer di solito rispondono entro 1 giorno
Nessuno ha ancora preso questa issue.
Valutazione
- Difficoltà
- 4/5
- Tempo stimato
- 3-5 giorni
- Idoneità per principianti
- 55/100
- Tipo di issue
- Funzionalità
- Chiarezza
- Abbastanza chiara
- Stato di attività
- Attiva
- Stack tecnologico
- bash, powershell
- Ambito
- cli
Direzione di ricerca
Start on branch phase-5/remote-plan; read design 00 §5 and design 21 §5 and the existing plan command. Write bats and Pester acceptance tests first: unchanged hosts, skipped failed checks, returned logs. Done means remote plan --group runs over SSH and PowerShell remoting, returning plans without altering any host.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Descrizione
Read first
- Roadmap, section 4.1: remote mode, why
remote planis built read-only first - Design 00, section 5: execution model, local and remote mode and the
remotecommands - Design 21, section 5: signed manifest and known commit, section 5.1: the release check on each host and section 5.2: getting the release onto a host
- Blueprint, section 6.1: tooling, local mode as the standard and the hardened control node
- Conventions, section 3.3: planned actions and options, where the name and letters of a new command are recorded first
- Conventions, section 3.1: commands, the preview that
remote planruns on each host - Lab, section 1: machines, the control node and the hosts to try it on
- AGENTS.md: hard rules 4 (plan by default) and 7 (reversible), and changing the command line
Read these before starting. If this issue and the spec disagree, the spec wins; say so in the pull request.
Summary
Build remote plan <phase> --group <group>, a read-only way to see every host's plan from one place. Remote mode runs from a control node, a hardened server that can reach every host over SSH (Linux) or PowerShell remoting (Windows). A plan is the list of changes a run would make, with nothing changed. Today a person must log in to each host to see its plan; this is built first and remote apply (#87) waits until it has run safely in the lab.
Depends on
- Blocked by #66 (automatic runs and the approval queue) and #65 (the command line and the installed
laby). - Blocks #87 (remote apply).
Location & Context
- Branch:
phase-5/remote-plan. Specs: design 00, section 5 and design 21, section 5. - A new
remotecommand in both runners (labyrinth.sh,labyrinth.ps1), run on the control node. Record its name and options in Conventions 3.3 first, then add it to the manual anddocs/Commands.md. - Tests: new bats and Pester files, and
tests/manual/manual.bats. The lab pass uses the control node and several hosts (docs/lab/README.md).
Current Behavior
A person must log in to every host to see its plan. Without remote plan, no view of all hosts exists from one control node.
Plan
- Build
remote plan <phase> --group <group>over SSH and PowerShell remoting. - Copy and check the release on each host (design 21, sections 5 and 5.1), run the local
plan, and bring back the plans and logs. - Change nothing on the hosts.
Acceptance tests
Write these first, in bats and Pester:
-
remote planleaves every host unchanged (inventory identical before and after). - A host whose release check fails is not run.
- Plans and logs come back for every host in the group.
- Negative test: protected accounts and scored services are untouched before and after.
Done when
- The Linux and Windows versions both pass CI.
- The tests above pass in the lab on a control node and hosts of both platforms (
docs/lab/README.md), before #87 starts. - The command is in both runners, the manual,
docs/Commands.md, its-hpage, the Conventions table and both test suites, in one branch (Roadmap section 2). Help never runs anything.
Out of scope
- Making changes on hosts:
remote apply, #87. - The signature check on the control node, and cleanup: #105.
- Scheduled probes and checkpoints from the control node: #91.
- Getting the release onto a host when there is no control node: #71.
- Lingua principale
- PowerShell
- Stelle
- 0
- Fork
- 0
- Merge medio
- 2h 7m
- PR unite (30g)
- 53
Preparare l'ambiente
- Nessun Dockerfile né file Docker Compose
- Ha un modello di pull request
- Leggi la guida per i contributori
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di dotnetdork/Labyrinth
-
Count wrapped rows when clearing a shown password or seed on LinuxForse già presa @dotnetdork l’ha presa oggi. Apertaarea: core platform: linux type: bug
dotnetdork/Labyrinth#151 · 1 assegnatario ·
I maintainer di solito rispondono entro 1 giorno
-
area: accounts area: core type: docs
Difficoltà 3/5 1-2 giorni Idoneità per principianti 75/100
dotnetdork/Labyrinth#137 ·
I maintainer di solito rispondono entro 1 giorno
-
area: command-line platform: linux platform: windows type: docs
Difficoltà 4/5 3-5 giorni Idoneità per principianti 70/100
dotnetdork/Labyrinth#125 ·
I maintainer di solito rispondono entro 1 giorno
-
area: tests-ci platform: windows type: build
Difficoltà 4/5 3-5 giorni Idoneità per principianti 55/100
dotnetdork/Labyrinth#124 ·
I maintainer di solito rispondono entro 1 giorno
-
area: command-line platform: linux platform: windows type: feature
Difficoltà 4/5 3-5 giorni Idoneità per principianti 70/100
dotnetdork/Labyrinth#120 ·
I maintainer di solito rispondono entro 1 giorno
Tutte le issue di dotnetdork/Labyrinth
Issue simili
-
cli good first issue
Difficoltà 2/5 1-3 ore Idoneità per principianti 85/100
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 68/100
Agent-Threat-Rule/agent-threat-rules#766 ·
I maintainer di solito rispondono entro 1 giorno
-
[v5-preview5] `func new` displays incorrect command in error message when project is not initializedApertaNeeds: Triage (Functions) v5 v5-preview5
Difficoltà 1/5 Meno di un'ora Idoneità per principianti 85/100
Azure/azure-functions-core-tools#5838 ·
I maintainer di solito rispondono entro 2 giorni
-
enhancement good first issue help wanted
Difficoltà 2/5 1-3 ore Idoneità per principianti 82/100
-
good first issue help wanted new check
Difficoltà 2/5 3-5 giorni Idoneità per principianti 78/100