wirenboard / wb-cloud-agent / 72

97%

Build Type

push

github

Committed by web-flow

Commit Message

Render metrics collector from the package template (agent >= 1.8.1) (#73)

* Render metrics collector from bundled template; never run cloud scripts

Ship metrics_collector.py.tpl in the package and render it on the controller from the variables sent by the cloud (agents >= 1.8.1), persisting them to a per-provider config file. A script delivered in the payload is no longer written or executed, so a compromised backend cannot run code on the fleet; variable values are escaped before substitution to keep them inside string literals.

On agent start, reconcile the rendered script against the bundled template so a fix shipped in a new package version is applied without waiting for the cloud. Older backends that still send the full script keep working.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* Bump bundled collector to 1.0.10; log wb-mqtt-db downtime as WARNING; fix template test path

wb-mqtt-db down/inactive is logged at WARNING (not ERROR) so the health monitor does not report it; genuine RPC timeouts stay at ERROR. test_bundled_template_renders_with_all_substitutions now finds the template by walking up the tree, so it passes in the .pybuild build dir where the deb build runs pytest (this was the Jenkins failure).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Coverage Stats

168 of 173 new or added lines in 7 files covered. (97.11%)

3 existing lines in 1 file now uncovered.

2243 of 2301 relevant lines covered (97.48%)

0.97 hits per line