fleet/orbit/pkg
Allen Houchins 150318c87e
Add Python script support for macOS and Linux (#38562)
This commit introduces support for Python (.py) scripts on macOS and
Linux, including validation for Python shebangs and updates to
documentation, UI, error messages, and backend validation logic. It also
updates tests and file upload handling to recognize and properly process
Python scripts alongside existing shell (.sh) and PowerShell (.ps1)
scripts.

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] If paths of existing endpoints are modified without backwards
compatibility, checked the frontend/CLI for any necessary changes

## Testing

- [ ] Added/updated automated tests
- [ ] Where appropriate, [automated tests simulate multiple hosts and
test for host
isolation](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/reference/patterns-backend.md#unit-testing)
(updates to one hosts's records do not affect another)

- [ ] QA'd all new/changed functionality manually

For unreleased bug fixes in a release candidate, one of:

- [ ] Confirmed that the fix is not expected to adversely impact load
test results
- [ ] Alerted the release DRI if additional load testing is needed

## Database migrations

- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).

## New Fleet configuration settings

- [ ] Setting(s) is/are explicitly excluded from GitOps

If you didn't check the box above, follow this checklist for
GitOps-enabled settings:

- [ ] Verified that the setting is exported via `fleetctl
generate-gitops`
- [ ] Verified the setting is documented in a separate PR to [the GitOps
documentation](https://github.com/fleetdm/fleet/blob/main/docs/Configuration/yaml-files.md#L485)
- [ ] Verified that the setting is cleared on the server if it is not
supplied in a YAML file (or that it is documented as being optional)
- [ ] Verified that any relevant UI is disabled when GitOps mode is
enabled

## fleetd/orbit/Fleet Desktop

- [ ] Verified compatibility with the latest released version of Fleet
(see [Must
rule](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/workflows/fleetd-development-and-release-strategy.md))
- [ ] If the change applies to only one platform, confirmed that
`runtime.GOOS` is used as needed to isolate changes
- [ ] Verified that fleetd runs on macOS, Linux and Windows
- [ ] Verified auto-update works from the released version of component
to the new version (see [tools/tuf/test](../tools/tuf/test/README.md))

---------

Co-authored-by: Jordan Montgomery <elijah.jordan.montgomery@gmail.com>
Co-authored-by: melpike <79950145+melpike@users.noreply.github.com>
Co-authored-by: jkatz01 <yehonatankatz@gmail.com>
Co-authored-by: Jonathan Katz <44128041+jkatz01@users.noreply.github.com>
2026-03-24 10:01:54 -04:00
..
augeas Update golangci-lint to v2.4.0 (#33251) 2025-09-22 13:17:11 -05:00
bitlocker Fixed BitLocker encryption failing after migrating. (#41911) 2026-03-19 11:06:45 -05:00
build Add user agent to Orbit HTTP client (#5429) 2022-05-02 11:03:49 -07:00
constant Changes to not rely on Fleet Desktop for Linux setup experience (#33018) 2025-09-16 13:26:00 -03:00
cryptoinfo Enable staticcheck Go linter. (#23487) 2024-11-05 11:16:24 -06:00
dataflatten Additional CA validation (#27169) 2025-03-19 08:27:55 -05:00
dialog Removed indicator for background LUKS validation (#28218) 2025-04-16 12:25:41 -04:00
execuser 🤖 Fix fleetd escrow in X11 multi-user sessions (#39795) 2026-02-16 14:15:10 -03:00
go-paniclog Fix Windows lint issues and enable linting on Windows (#28704) 2025-05-02 16:11:26 -04:00
insecure Make creation of http.Client uniform across the codebase (#3097) 2021-11-24 15:56:54 -05:00
installer Add mcp_listening_servers table (#34286) 2025-10-21 11:25:11 -07:00
kdialog Fix orbit active GUI session detection to start Fleet Desktop and key escrowing on Linux (#39777) 2026-02-16 11:41:16 -03:00
keystore Update golangci-lint to v2.4.0 (#33251) 2025-09-22 13:17:11 -05:00
logging Reduce orbit logging when the server is down (#16968) 2024-02-21 15:36:15 -03:00
luks Fix orbit active GUI session detection to start Fleet Desktop and key escrowing on Linux (#39777) 2026-02-16 11:41:16 -03:00
lvm Linux agent LVM volume detection on older Ubuntu versions (#24193) 2024-11-27 10:39:25 -07:00
migration fix: add missing comments 2024-08-15 19:00:47 -04:00
osquery Enable gzip compression in osquery when run by Orbit (#38673) 2026-01-27 12:14:55 -08:00
osservice 8009 fleet desktop icon duplication (#8017) 2022-10-13 10:58:37 -03:00
packaging Update Orbit CA certs [automated] (#37834) 2026-01-05 15:11:17 -03:00
platform Fix fleetd crash in Apple M5 hardware by upgrading gopsutil (#41940) 2026-03-18 11:21:02 -03:00
process Fleetctl to package .app bundles for osquery (and changes for orbit to support them) (#4393) 2022-03-15 16:04:12 -03:00
profiles check for DEP capable migration before showing automatic preview (#41274) 2026-03-10 14:51:29 -05:00
scripts Add Python script support for macOS and Linux (#38562) 2026-03-24 10:01:54 -04:00
setup_experience Improve initial loading state of macOS setup experience when displaying web view UI (#41561) 2026-03-16 10:30:47 -05:00
swiftdialog Use webview in MacOS setup experience (#33884) 2025-10-08 17:51:26 +01:00
table Rename wifi_network to macadmins_wifi_network (#40629) 2026-03-20 08:04:50 -04:00
token Make StartRotation concurrency safe (#34186) 2025-10-15 14:28:52 -05:00
update Fixed BitLocker encryption failing after migrating. (#41911) 2026-03-19 11:06:45 -05:00
user Icon mis sized on KDE envs (#40259) 2026-02-24 11:59:35 -04:00
useraction check for DEP capable migration before showing automatic preview (#41274) 2026-03-10 14:51:29 -05:00
windows Add Kolide osquery tables 2023-11-01 20:11:35 -06:00
zenity Fix orbit active GUI session detection to start Fleet Desktop and key escrowing on Linux (#39777) 2026-02-16 11:41:16 -03:00