docs(fpagent): document 32-bit bundles and the default service

The installer section still showed --enable-service as required and named no
architecture. Note that x86_64 and i386 are both published, that the codename
bundle is preferred, and that the service and self-update timer are on by
default unless --no-service or --no-updates is passed.
This commit is contained in:
2026-10-06 19:19:16 +01:00
parent fa33c6e179
commit e432585f04
+10 -7
View File
@@ -161,22 +161,25 @@ is claimed or a scan does not complete.
### Installing the agent ### Installing the agent
`/fpagent/install.sh` is a public installer (also served for `curl | bash`). It `/fpagent/install.sh` is a public installer (also served for `curl | bash`). It
fetches the newest bundle from the private fetches the newest bundle for the host architecture — x86_64 or 32-bit i386,
preferring the bundle built for the machine's Ubuntu codename — from the private
[`fingerprint-agent`](https://sources.yrka.app/YOUreka/fingerprint-agent/releases) [`fingerprint-agent`](https://sources.yrka.app/YOUreka/fingerprint-agent/releases)
forge, verifies its sha256, then runs the bundle's own installer, which handles forge, verifies its sha256, then runs the bundle's own installer, which handles
libfprint, the udev rule, `plugdev` and the systemd service. On a field laptop: libfprint, the udev rule, `plugdev` and the systemd service. On a field laptop:
```sh ```sh
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --enable-service curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --check # report only curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --check # report only
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0 --enable-service curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0
``` ```
Rerunning it is the upgrade path: it installs the newest release (or `--tag` Rerunning it is the upgrade path: it installs the newest release (or `--tag`
for a pinned one), the bundle installer reports the version change, and with for a pinned one), the bundle installer reports the version change, and it
`--enable-service` it restarts a running service so the new binary takes effect. restarts a running service so the new binary takes effect. The version is the
The version is the git hash carried in the asset name, stamped next to the git hash carried in the asset name, stamped next to the binary
binary (`/usr/local/bin/fpagent.version`) and compared on the next run. (`/usr/local/bin/fpagent.version`) and compared on the next run. The systemd
service and the self-update timer are on by default; pass `--no-service` or
`--no-updates` to leave them off.
The forge is private, so the operator's laptop needs no credentials: the app The forge is private, so the operator's laptop needs no credentials: the app
reads the release with `GITEA_RELEASE_INSTALL_KEY` and proxies it through reads the release with `GITEA_RELEASE_INSTALL_KEY` and proxies it through