Skip to content

v0.9.44-alpha — TAKWERX infra-TAK

Choose a tag to compare

View all tags
@takwerx takwerx released this 05 Jun 03:22
v0.9.44-alpha
2718964

Reliability release — fleet self-healing. The console, kernel patching, TAK Server, and the CloudTAK plugin marketplace all gained silent self-heal + honest-status behavior, so the fleet recovers from common failure modes on its own — mostly on the daily console restart, with no SSH. Drop-in via Update Now or a dev/main pull (installs on the next console restart).

Console

  • Daily console-restart timer (idle-gated, 04:00) — recovers a wedged gunicorn worker. Self-installs on startup; derives its port from the systemd unit.

CloudTAK plugin marketplace

  • Rollback + honest badge — a failed plugin rebuild now rolls back so CloudTAK stays buildable, and the "update available" badge reflects the SHA that actually built, not the source cache.

Kernel patching

  • Never auto-upgrades TAK Server — the patch job holds takserver/takserver-fed-hub for the run so OS patching can't sweep in a TAK Server major upgrade.
  • No longer stuck on "in progress" — completion is derived from job log markers + /var/run/reboot-required, surfacing the "Reboot now" control. Reboot-needed also keys off running vs newest installed kernel.

TAK Server

  • Self-heal half-configured dpkg state — clears the flag without re-running the non-idempotent postinstall, never touching the running server.
  • 8446 Let's Encrypt cert self-heal — re-imports Caddy's current cert into TAK's keystore when it drifts (fixes CloudTAK login CERT_HAS_EXPIRED). Syncs on cert content, daily.
  • Update verifies dpkg state — install ok installed is confirmed before reporting success; a half-configured outcome surfaces as a failure, not a silent wedge.
  • server_ip subnet-move refresh — re-detects the stored private IP when it no longer belongs to any local interface.

Field-validated on the dev fleet (3 boxes, ≥60 min soak each) before release.

Assets 2
Loading