docs(fpagent): document 32-bit bundles and the default service
The installer section still showed --enable-service as required and named no architecture. Note that x86_64 and i386 are both published, that the codename bundle is preferred, and that the service and self-update timer are on by default unless --no-service or --no-updates is passed.
This commit is contained in:
@@ -161,22 +161,25 @@ is claimed or a scan does not complete.
|
|||||||
### Installing the agent
|
### Installing the agent
|
||||||
|
|
||||||
`/fpagent/install.sh` is a public installer (also served for `curl | bash`). It
|
`/fpagent/install.sh` is a public installer (also served for `curl | bash`). It
|
||||||
fetches the newest bundle from the private
|
fetches the newest bundle for the host architecture — x86_64 or 32-bit i386,
|
||||||
|
preferring the bundle built for the machine's Ubuntu codename — from the private
|
||||||
[`fingerprint-agent`](https://sources.yrka.app/YOUreka/fingerprint-agent/releases)
|
[`fingerprint-agent`](https://sources.yrka.app/YOUreka/fingerprint-agent/releases)
|
||||||
forge, verifies its sha256, then runs the bundle's own installer, which handles
|
forge, verifies its sha256, then runs the bundle's own installer, which handles
|
||||||
libfprint, the udev rule, `plugdev` and the systemd service. On a field laptop:
|
libfprint, the udev rule, `plugdev` and the systemd service. On a field laptop:
|
||||||
|
|
||||||
```sh
|
```sh
|
||||||
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --enable-service
|
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash
|
||||||
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --check # report only
|
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --check # report only
|
||||||
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0 --enable-service
|
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0
|
||||||
```
|
```
|
||||||
|
|
||||||
Rerunning it is the upgrade path: it installs the newest release (or `--tag`
|
Rerunning it is the upgrade path: it installs the newest release (or `--tag`
|
||||||
for a pinned one), the bundle installer reports the version change, and with
|
for a pinned one), the bundle installer reports the version change, and it
|
||||||
`--enable-service` it restarts a running service so the new binary takes effect.
|
restarts a running service so the new binary takes effect. The version is the
|
||||||
The version is the git hash carried in the asset name, stamped next to the
|
git hash carried in the asset name, stamped next to the binary
|
||||||
binary (`/usr/local/bin/fpagent.version`) and compared on the next run.
|
(`/usr/local/bin/fpagent.version`) and compared on the next run. The systemd
|
||||||
|
service and the self-update timer are on by default; pass `--no-service` or
|
||||||
|
`--no-updates` to leave them off.
|
||||||
|
|
||||||
The forge is private, so the operator's laptop needs no credentials: the app
|
The forge is private, so the operator's laptop needs no credentials: the app
|
||||||
reads the release with `GITEA_RELEASE_INSTALL_KEY` and proxies it through
|
reads the release with `GITEA_RELEASE_INSTALL_KEY` and proxies it through
|
||||||
|
|||||||
Reference in New Issue
Block a user