mirror of https://github.com/fleetdm/fleet synced 2026-05-23 00:49:03 +00:00

Lucas Manuel Rodriguez a674a01144

Use build date for version for local TUF orbits (#29442 )

Two new improvements for local TUF after feedback from @iansltx and QA
folks:

1. The static `42` was confusing when making or sharing several builds
of locally built fleetd. Locally TUF-built version of orbit will now be:
`YY.MM.XXXXX`, e.g. `25.5.56178` (patch version is a 16-bit number made
from day, hour and minute).
2. Also prompting user to delete `test_tuf` which is usually a source of
confusion/errors.

2025-05-28 17:13:58 -03:00

2.9 KiB

Raw Blame History

Fleetd auto-update N+1 test

The following guide describes how to test an N+1 upgrade to fleetd components. We need to test that the main (to-be-released) version of fleetd has not broken the auto-update mechanism.

This guide only supports running from a macOS workstation.

Setup

Follow the setup in the README.md.

Build and push fleetd N+1

First, load new version Orbit variables:

source ./tools/tuf/test/load_orbit_version_vars.sh

orbit

Build:

GOOS=darwin GOARCH=amd64 go build -ldflags="-X github.com/fleetdm/fleet/v4/orbit/pkg/build.Version=$ORBIT_VERSION" -o orbit-darwin ./orbit/cmd/orbit
GOOS=linux GOARCH=amd64 go build -ldflags="-X github.com/fleetdm/fleet/v4/orbit/pkg/build.Version=$ORBIT_VERSION" -o orbit-linux ./orbit/cmd/orbit
GOOS=windows GOARCH=amd64 go build -ldflags="-X github.com/fleetdm/fleet/v4/orbit/pkg/build.Version=$ORBIT_VERSION" -o orbit.exe ./orbit/cmd/orbit

Push:

./tools/tuf/test/push_target.sh macos orbit orbit-darwin $ORBIT_VERSION
./tools/tuf/test/push_target.sh linux orbit orbit-linux $ORBIT_VERSION
./tools/tuf/test/push_target.sh windows orbit orbit.exe $ORBIT_VERSION

desktop

Build:

FLEET_DESKTOP_VERSION=$ORBIT_VERSION make desktop-app-tar-gz
FLEET_DESKTOP_VERSION=$ORBIT_VERSION make desktop-windows
FLEET_DESKTOP_VERSION=$ORBIT_VERSION make desktop-linux

./tools/tuf/test/push_target.sh macos desktop desktop.app.tar.gz $ORBIT_VERSION
./tools/tuf/test/push_target.sh windows desktop fleet-desktop.exe $ORBIT_VERSION
./tools/tuf/test/push_target.sh linux desktop desktop.tar.gz $ORBIT_VERSION

osqueryd

Assuming we are upgrading to 5.11.0 (you can also downgrade to a lower version to test the auto-update mechanism)

Download:

# macOS
make osqueryd-app-tar-gz version=5.11.0 out-path=.

# osqueryd
curl -L https://github.com/osquery/osquery/releases/download/5.11.0/osquery_5.11.0-1.linux_amd64.deb --output osquery.deb
ar x osquery.deb
tar xf data.tar.gz
chmod +x ./opt/osquery/bin/osqueryd
cp ./opt/osquery/bin/osqueryd osqueryd

# Windows
curl -L https://github.com/osquery/osquery/releases/download/5.11.0/osquery-5.11.0.msi --output osquery-5.11.0.msi
# Run the following on a Windows device:
msiexec /a osquery-${{ env.OSQUERY_VERSION }}.msi /qb TARGETDIR=C:\temp
# Copy C:\temp\osquery\osqueryd\osqueryd.exe from the Windows device into the macOS workstation.

Release:

./tools/tuf/test/push_target.sh macos-app osqueryd osqueryd.app.tar.gz 5.11.0
./tools/tuf/test/push_target.sh linux osqueryd ./osqueryd 5.11.0
./tools/tuf/test/push_target.sh windows osqueryd ./osqueryd.exe 5.11.0

Verify auto-update

Run the following live query on the hosts: SELECT * FROM orbit_info;. The query should now return version=$ORBIT_VERSION.
Run the following live query on the hosts: SELECT * FROM osquery_info;. The query should now return version=5.11.0.
Verify all hosts now show "Fleet Desktop $ORBIT_VERSION" on the Fleet Desktop menu.

2.9 KiB Raw Blame History