docs(fpagent): document 32-bit bundles and the default service
The installer section still showed --enable-service as required and named no architecture. Note that x86_64 and i386 are both published, that the codename bundle is preferred, and that the service and self-update timer are on by default unless --no-service or --no-updates is passed.
This commit is contained in:
@@ -161,22 +161,25 @@ is claimed or a scan does not complete.
|
||||
### Installing the agent
|
||||
|
||||
`/fpagent/install.sh` is a public installer (also served for `curl | bash`). It
|
||||
fetches the newest bundle from the private
|
||||
fetches the newest bundle for the host architecture — x86_64 or 32-bit i386,
|
||||
preferring the bundle built for the machine's Ubuntu codename — from the private
|
||||
[`fingerprint-agent`](https://sources.yrka.app/YOUreka/fingerprint-agent/releases)
|
||||
forge, verifies its sha256, then runs the bundle's own installer, which handles
|
||||
libfprint, the udev rule, `plugdev` and the systemd service. On a field laptop:
|
||||
|
||||
```sh
|
||||
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --enable-service
|
||||
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash
|
||||
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --check # report only
|
||||
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0 --enable-service
|
||||
curl -fsSL https://tools.yrka.app/fpagent/install.sh | bash -s -- --tag v1.0.0
|
||||
```
|
||||
|
||||
Rerunning it is the upgrade path: it installs the newest release (or `--tag`
|
||||
for a pinned one), the bundle installer reports the version change, and with
|
||||
`--enable-service` it restarts a running service so the new binary takes effect.
|
||||
The version is the git hash carried in the asset name, stamped next to the
|
||||
binary (`/usr/local/bin/fpagent.version`) and compared on the next run.
|
||||
for a pinned one), the bundle installer reports the version change, and it
|
||||
restarts a running service so the new binary takes effect. The version is the
|
||||
git hash carried in the asset name, stamped next to the binary
|
||||
(`/usr/local/bin/fpagent.version`) and compared on the next run. The systemd
|
||||
service and the self-update timer are on by default; pass `--no-service` or
|
||||
`--no-updates` to leave them off.
|
||||
|
||||
The forge is private, so the operator's laptop needs no credentials: the app
|
||||
reads the release with `GITEA_RELEASE_INSTALL_KEY` and proxies it through
|
||||
|
||||
Reference in New Issue
Block a user