v0.2.0

What's Changed

Features

• [Agent] Default backup rules from Plesk backup processes by @LarsLaskowski in #344
• [Agent] Bound the hold-back of a failing renamed log file by @LarsLaskowski in #350

Bug fixes

• [Agent] Close the connection when an answer body is cut off by @LarsLaskowski in #351

Other changes

• [Docs] Document running the backend as a host user and without Compose by @LarsLaskowski in #256
• [Web] Fix the login behind a proxy and the doubled header logo by @LarsLaskowski in #257
• [Agent] Add agent runtime frame with collector scheduler by @LarsLaskowski in #262
• [Agent] Open the configuration file without a stat-then-open race by @LarsLaskowski in #264
• [Agent] Add system metrics collectors including PSI by @LarsLaskowski in #265
• [Agent] Add process collector with PSS per program by @LarsLaskowski in #272
• [Agent] Measure model text limits as the encoder writes them by @LarsLaskowski in #275
• [Agent] Network connection collector from the kernel socket tables by @LarsLaskowski in #280
• Bump dotnet-sdk from 10.0.401 to 10.0.402 by @dependabot[bot] in #259
• Bump the nuget-packages group with 3 updates by @dependabot[bot] in #260
• [Backend] Report listeners that appeared while the agent was stopped by @LarsLaskowski in #281
• [Agent] Add systemd service collector by @LarsLaskowski in #282
• [Agent] Add MariaDB collector by @LarsLaskowski in #284
• [Agent] Record kernel OOM kills, reboots and backup runs by @LarsLaskowski in #288
• [Agent] Ship journal and syslog file lines live from the agent by @LarsLaskowski in #293
• [Agent] Drop CAP_DAC_READ_SEARCH and correct the privilege guarantee by @LarsLaskowski in #295
• [Agent] Add persistent on-disk spool for the agent's records by @LarsLaskowski in #302
• [Agent] Record the socket owner's UID in connection snapshots by @LarsLaskowski in #306
• [Agent] Read journal files of the COMPACT layout by @LarsLaskowski in #308
• [Agent] Add transmission and backfill of spooled records by @LarsLaskowski in #313
• [Backend] Add the ingest API for agent batches by @LarsLaskowski in #316
• Bump the nuget-packages group with 1 update by @dependabot[bot] in #311
• [Backend] Classify records as live or backfilled from the data by @LarsLaskowski in #322
• [Docker] Refresh base image digests and SBOM generator pin by @LarsLaskowski in #328
• [Security] Hardened agent unit and install scripts, delivered as a release bundle by @LarsLaskowski in #324
• [Agent] Stabilize the scheduler pressure test and the connstats heap bound by @LarsLaskowski in #336
• [Security] Example tailnet policy and checks for the monitored server by @LarsLaskowski in #339
• [Tests] Document the 24-hour footprint of the agent by @LarsLaskowski in #343
• [Logs] Ship the Plesk and web server error logs from the agent by @LarsLaskowski in #346
• [Logs] Classify live log lines in the agent by @LarsLaskowski in #349
• [Docs] Record the non-empty user journal check in the agent area by @LarsLaskowski in #352
• [Agent] Save boot and backup state only after the run's records are kept by @LarsLaskowski in #353
• Bump the nuget-packages group with 3 updates by @dependabot[bot] in #348
• Bump dotnet-sdk from 10.0.402 to 10.0.403 by @dependabot[bot] in #347
• [Agent] Harden the spool's free-space check and size accounting by @LarsLaskowski in #355
• [Backend] Show the socket's UID and user in the new-listener findings by @LarsLaskowski in #357
• [Agent] Report a known listener endpoint whose socket UID changes by @LarsLaskowski in #359
• [Agent] Bound journal cursor reads from a cached entry array by the arena by @LarsLaskowski in #361
• [Backend] Evict idle untrusted ingest connections when the cap is full by @LarsLaskowski in #363
• [Backend] Replace real-time waits in the ingest drain tests by @LarsLaskowski in #368
• [Agent] Count sender body bytes at the response body in the 4 KiB cut test by @LarsLaskowski in #369
• [Security] Bind agent connections to the tailnet device by @LarsLaskowski in #374
• [Ops] Record the Tailscale checks of the production server by @LarsLaskowski in #376
• [Agent] Accept signed fdinfo positions and memfd mount ID 0 in owner scan by @LarsLaskowski in #377
• [Core] Make the decoder time-ratio test hold under the full coverage run by @LarsLaskowski in #383
• [Backend] Lock the captured standard error of BackendFixture by @LarsLaskowski in #387
• [Agent] Refuse host names in backend.url so a forged answer cannot reach loopback by @LarsLaskowski in #386
• [Backend] Bound the report page's memory for external texts to 16 runs by @LarsLaskowski in #393
• Bump go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6 in the go-modules group by @dependabot[bot] in #390
• [agent] Refuse malformed IPv6 literals in install.sh --backend-url by @LarsLaskowski in #395
• Ignore env secrets and bump analyzer by @LarsLaskowski in #396
• [Docker] Refresh base image digests and SBOM generator pin by @LarsLaskowski in #405
• [CI] Stress-run load-dependent Go tests under CPU load by @LarsLaskowski in #409
• [Tests] Replace the 200 ms wait in ReportServiceRunsOneReportAtATime by @LarsLaskowski in #412
• [Backend] Move the backend to .NET 11 by @LarsLaskowski in #417
• Bump the nuget-packages group with 2 updates by @dependabot[bot] in #420
• [Tests] Fix two timing-dependent tests that failed intermittently in CI by @LarsLaskowski in #424
• [Web] Correct the live connection's session check in the web login document by @LarsLaskowski in #425
• [Backend] Meet CA2100 in the SQL command helpers by @LarsLaskowski in #432
• [Backend] Meet CA2213 for fields the type does not own by @LarsLaskowski in #434
• [Docs] Retirement guide for the legacy script and v0.2.0 changelog by @LarsLaskowski in #439

Full Changelog: v0.1.0...v0.2.0

Docker image: networlddev/vandox:0.2.0@sha256:a4da8f04f32c7d6b065052affe0dba6c1e171e62340b56742fce49c6d0313c7a