docs(fpagent): document 32-bit bundles and the default service

The installer section still showed --enable-service as required and named no
architecture. Note that x86_64 and i386 are both published, that the codename
bundle is preferred, and that the service and self-update timer are on by
default unless --no-service or --no-updates is passed.
This commit is contained in:
2026-10-06 19:19:16 +01:00
parent fa33c6e179
commit e432585f04
+10 -7
View File
@@ -161,22 +161,25 @@ is claimed or a scan does not complete.
### Installing the agent
`/fpagent/install.sh` is a public installer (also served for `curl | bash`). It
fetches the newest bundle from the private
fetches the newest bundle for the host architecture — x86_64 or 32-bit i386,
preferring the bundle built for the machine's Ubuntu codename — from the private
[`fingerprint-agent`](https://sources.yrka.app/YOUreka/fingerprint-agent/releases)
forge, verifies its sha256, then runs the bundle's own installer, which handles
libfprint, the udev rule, `plugdev` and the systemd service. On a field laptop:
```sh
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --enable-service
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --check # report only
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0 --enable-service
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0
```
Rerunning it is the upgrade path: it installs the newest release (or `--tag`
for a pinned one), the bundle installer reports the version change, and with
`--enable-service` it restarts a running service so the new binary takes effect.
The version is the git hash carried in the asset name, stamped next to the
binary (`/usr/local/bin/fpagent.version`) and compared on the next run.
for a pinned one), the bundle installer reports the version change, and it
restarts a running service so the new binary takes effect. The version is the
git hash carried in the asset name, stamped next to the binary
(`/usr/local/bin/fpagent.version`) and compared on the next run. The systemd
service and the self-update timer are on by default; pass `--no-service` or
`--no-updates` to leave them off.
The forge is private, so the operator's laptop needs no credentials: the app
reads the release with `GITEA_RELEASE_INSTALL_KEY` and proxies it through