Unverified Commit 0798f903 authored by Minseong Choi's avatar Minseong Choi 💬
Browse files

feat(bootstrap): allow the Felis-Legacy Velocity fork to be installed as the proxy 

Stock Velocity will not offer the login-plugin-message exchange below 1.13, so a
1.8 client reaching a modern-forwarding backend today is a side effect of Via
replacing the channel initialisers before that check runs. It works, and nobody
designed it. FL-008's fork registers the two login packets from 1.7.2 and drops
the handshake gate, which makes the same outcome deliberate — and its gateonly
control shows the registry half is the load-bearing one.

FELIS_VELOCITY_FORK_JAR points at such a build; unset, the default, nothing
changes and the stock 3.5.1 download runs as before. It stays opt-in because the
fork is unmeasured where it counts: FL-008's probe runs offline-mode against a
stub backend, while this jar would carry every real Mojang session on the server.

No digest is pinned for it. The gradle build is not byte-reproducible across
machines, so a hash here would assert a provenance that does not exist; the jar
is trusted because that probe certified a build, and the path is checked for
readability before anything is replaced.
parent c9f3aa68

deploy/bootstrap.sh

+21 −0
Changes for deploy/bootstrap.sh: 21 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -108,6 +108,20 @@ FELIS_LOBBY_IMAGE="${FELIS_LOBBY_IMAGE:-felis-lobby:demo}" 
# runtime. Crossing a major is a deliberate code change, so we track the newest BUILD of

# a pinned minor and let a human move the pin.

FELIS_VELOCITY_VERSION="${FELIS_VELOCITY_VERSION:-3.5.1}"

# Path to a Felis-Legacy Velocity fork build, installed as the proxy in place of the

# stock download. Unset — the default — changes nothing.

#

# Stock Velocity will not offer the login-plugin-message exchange below 1.13, so a 1.8

# client reaching a modern-forwarding backend today is a side effect of Via replacing

# the channel initializers before that check runs. It works, and nobody designed it.

# The fork registers the login packets on 1.7.2 and drops the gate, which makes the

# same outcome deliberate.

#

# Opt-in because it is unmeasured where it counts: FL-008's probe runs offline-mode

# against a stub, and this jar would carry every real Mojang session on the server.

# The build lives in Felis-Legacy and is not byte-reproducible, so there is no digest

# to pin here — the jar is trusted because that probe certified the build.

FELIS_VELOCITY_FORK_JAR="${FELIS_VELOCITY_FORK_JAR:-}"

# Temurin 25: Velocity 3.5 needs 21+, and 25 is also what a future Velocity 4 requires,

# so the runtime does not have to move again when the pin does. Distro JDK packaging is

# a lottery across four package managers — a tarball is one code path everywhere (same
@@ -1403,6 +1417,12 @@ install_velocity() { 
  install_jre

  local url tmp

  prepare_velocity_layout

  if [ -n "$FELIS_VELOCITY_FORK_JAR" ]; then

    [ -f "$FELIS_VELOCITY_FORK_JAR" ] \

      || die "FELIS_VELOCITY_FORK_JAR is not a readable file: ${FELIS_VELOCITY_FORK_JAR}"

    log "installing the Felis-Legacy Velocity fork from ${FELIS_VELOCITY_FORK_JAR}"

    atomic_install_file "$FELIS_VELOCITY_FORK_JAR" "${VELOCITY_DIR}/velocity.jar" 0644 root root

  else

    log "resolving the newest Velocity ${FELIS_VELOCITY_VERSION} build"

    url="$(papermc_latest_jar velocity "$FELIS_VELOCITY_VERSION")" \

      || die "no Velocity build for ${FELIS_VELOCITY_VERSION} (override with FELIS_VELOCITY_VERSION)"
@@ -1411,6 +1431,7 @@ install_velocity() { 
    remember_temp "$tmp"

    curl -fsSL "$url" -o "$tmp" || die "failed to download Velocity: ${url}"

    atomic_install_file "$tmp" "${VELOCITY_DIR}/velocity.jar" 0644 root root

  fi



  install_via_plugins

  write_velocity_config