fleet/orbit/pkg/packaging
Lucas Manuel Rodriguez 009f54bdda
Changes to migrate to new TUF repository (#23588)
# Changes

- orbit >= 1.38.0, when configured to connect to
https://tuf.fleetctl.com (existing fleetd deployments) will now connect
to https://updates.fleetdm.com and start using the metadata in path
`/opt/orbit/updates-metadata.json`.
- orbit >= 1.38.0, when configured to connect to some custom TUF (not
Fleet's TUFs) will copy `/opt/orbit/tuf-metadata.json` to
`/opt/orbit/updates-metadata.json` (if it doesn't exist) and start using
the latter.
- fleetctl `4.63.0` will now generate artifacts using
https://updates.fleetdm.com by default (or a custom TUF if
`--update-url` is set) and generate two (same file) metadata files
`/opt/orbit/updates-metadata.json` and the legacy one to support
downgrades `/opt/orbit/tuf-metadata.json`.
- fleetctl `4.62.0` when configured to use custom TUF (not Fleet's TUF)
will generate just the legacy metadata file
`/opt/orbit/tuf-metadata.json`.

## User stories

See "User stories" in
https://github.com/fleetdm/confidential/issues/8488.

- [x] Update `update.defaultRootMetadata` and `update.DefaultURL` when
the new repository is ready.
- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [X] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [X] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [X] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2025-01-10 14:27:30 -03:00
..
wix Fixed macOS MSI package -- using local wine and wix (#16307) 2024-01-30 11:08:21 -06:00
certs.pem Update Orbit CA certs [automated] (#20148) 2024-07-02 15:22:52 -03:00
deb.go update documentation of orbit/pkg/packaging (#6819) 2022-07-25 20:14:20 -03:00
linux_shared.go Check opt.NativeTooling before creating build directory (#23894) 2024-11-18 11:32:55 -03:00
macos.go fleetd to start up when TUF signatures are expired (#23102) 2024-10-28 20:40:19 -03:00
macos_notarize.go Update to latest gon with notarytool until we find a better solution (#14918) 2023-11-03 18:56:30 -05:00
macos_rcodesign.go device_token endpoint improvements (#15849) 2023-12-28 14:20:36 -06:00
macos_templates.go Enable launch daemon before trying to bootstrap it (#22764) 2024-10-23 13:54:41 -03:00
mk-ca-bundle.pl Update mk-ca-bundle.pl tool in repository (#8184) 2022-10-12 12:01:18 -03:00
packaging.go Changes to migrate to new TUF repository (#23588) 2025-01-10 14:27:30 -03:00
rpm.go update documentation of orbit/pkg/packaging (#6819) 2022-07-25 20:14:20 -03:00
windows.go Use goreleaser v2 in CI (#23748) 2024-12-03 16:15:31 -06:00
windows_templates.go Fix backward compatibility bug with Windows MSI END_USER_EMAIL (#20116) 2024-07-01 10:49:59 -05:00
windows_test.go Add support for pre-release on Windows orbit builder (#18102) 2024-04-05 18:41:46 -03:00