Lemon-miaow
54942f30f3
feat(bootstrap): 从发布产物安装二进制、镜像与插件，Docker 按需安装
2026-09-26 15:23:53 +08:00
Lemon-miaow
36b8a8b444
fix(updater): PostgreSQL 大版本提示改为导出再恢复并更正地址相关注释
2026-09-26 13:34:41 +08:00
Lemon-miaow
40d6e4d0ca
feat(bootstrap): 在 k3s 内部署 felis-postgres 并从宿主 PostgreSQL 迁移
2026-09-26 13:17:05 +08:00
Lemon-miaow
1f2a6130ac
feat(bootstrap): 装机前一次性预检平台/内存/磁盘/端口/网段/外网，问题全列出后再停
2026-09-26 11:30:31 +08:00
Lemon-miaow
54a533103a
fix(bootstrap): felis-link.properties 内容不变就不重写，domain check 不再误报代理落后
2026-09-26 10:24:14 +08:00
Lemon-miaow
eaef592014
fix(bootstrap): offsite_enabled 改为先取变量再匹配，重跑不再因 SIGPIPE 竞态误删 off-site timer
2026-09-26 10:24:14 +08:00
Lemon-miaow
23b7c14b00
fix(bootstrap): 重跑安装器保留 [auth]，换域改为拒绝并指向 felis domain set
2026-09-26 10:24:04 +08:00
Lemon-miaow
5099b2501f
feat(velocity): legacy forwarding 列表跟随 CR 的 forwarding=legacy 标签实时更新 ( #15 )
2026-09-26 08:09:49 +08:00
Lemon-miaow
6a4c30b3f1
fix(bootstrap): kubeconfig 仅 root 可读、固定 k3s 节点名、开启 NTP 与持久日志，DHCP 地址告警并交给 watchdog 监测
2026-09-26 01:25:48 +08:00
Lemon-miaow
d9453a6488
build(plugins): 插件构建统一钉到 gradle 9.8 镜像与带 sha256 的 wrapper，paper-api/Limbo 对齐锁文件并启用依赖校验
2026-09-25 23:45:33 +08:00
Lemon-miaow
7f160e2feb
feat(update): 主机每日记录组件版本比对，面板更新页展示可用更新与应用命令
2026-09-25 21:50:49 +08:00
Lemon-miaow
24373823cc
feat(build): 扫描门按可配严重度拦截并可接受已知风险，留存 Trivy 报告与 CycloneDX SBOM，面板构建页展示扫描结果
2026-09-25 21:28:57 +08:00
Lemon-miaow
d76683f5cb
fix(setup): 系统服与副本 Secret 改用带乐观锁的 merge-patch 并冲突重试，安装器在构建变化时把登录与大厅固定到 digest
2026-09-25 20:04:06 +08:00
Lemon-miaow
87dee3e5a5
feat(api): 单次上传上限改为 context_max_bytes 可配，Cloudflare 边缘后默认 95Mi，新增 GET /me/submissions/limits 供面板预检
2026-09-25 18:31:10 +08:00
Lemon-miaow
a883c1fe07
feat(api): 内部面 token 按调用方拆分为 velocity/limbo/build/ops 并按路由限定调用方，审计来源区分调用方，安装器生成并下发各自 Secret，新增 felis rotate-token 轮换命令
2026-09-25 15:21:41 +08:00
Lemon-miaow
f156e385f0
fix(panel): 服务器地址改为一键复制并带上非默认游戏端口，玩家列表去掉无意义的连接地址列，管理员列改称内部地址
2026-09-25 12:51:16 +08:00
Lemon-miaow
367ef2678a
fix(deploy): 安装脚本的 apt 调用抑制 needrestart 以免重跑时重启代理，服务单元与镜像列表先读完再匹配避免 pipefail 下的 SIGPIPE 误判
2026-09-25 11:49:39 +08:00
Lemon-miaow
8fb3d298ae
feat(offsite): 异地副本加入提交上传的整合包，按内容去重加密，索引按版本保留 14 天，新增 fetch-uploads 恢复
2026-09-25 04:48:34 +08:00
Lemon-miaow
e3ac9cd545
feat(offsite): 异地副本加入 registry 用户镜像，按摘要加密去重，索引按版本保留 14 天，新增 fetch-images 回推恢复
2026-09-25 04:33:23 +08:00
Lemon-miaow
074bd1783c
fix(install): 重跑安装时撤销旧版本为世界根目录授予 uid 1000 的 ACL 与 o+x 遍历权限
2026-09-25 03:46:53 +08:00
Lemon-miaow
0770a4d676
feat(reaper): 未配置世界目录时渲染只清理备份库存的 CronJob，默认安装也每日删除过期备份，安装器与清单生成器说明回收开关状态
2026-09-25 03:42:55 +08:00
Lemon-miaow
3ed6603201
feat(store): api/reaper/offsite/migrate 按版本集合校验 schema，库比二进制新时拒绝启动；bootstrap 迁移前失败回滚宿主二进制
2026-09-25 01:46:33 +08:00
Lemon-miaow
b1678f78c8
feat(update): felis update 报告 JRE 与 PostgreSQL（含停更提示），bootstrap 支持 FELIS_UPGRADE_DEPS=1 升级 k3s/cloudflared
2026-09-25 01:35:52 +08:00
Lemon-miaow
989be55b4a
feat(bootstrap): Velocity 堆可由 FELIS_VELOCITY_XMX 配置，全新安装预建 k3s 存储根目录消除 reaper 警告
2026-09-25 01:20:52 +08:00
Lemon-miaow
3e61fde06d
fix(bootstrap): 关闭 BuildKit 默认 attestation，无改动重跑不再重启 login/lobby；同版本重跑同时重启 registry gate
2026-09-25 00:43:02 +08:00
Lemon-miaow
1141ebcd49
ci: 加 -race、staticcheck、govulncheck、shellcheck 与真 PostgreSQL 集成测试门禁，release 复用 ci 门禁
2026-09-25 00:35:09 +08:00
Lemon-miaow
82545548e7
feat(bootstrap): game stack 按 lock 文件固定构建并校验 sha256，基础镜像按 digest 固定，JRE 固定补丁版本
2026-09-25 00:24:02 +08:00
Lemon-miaow
aace66e8d3
fix(bootstrap): 重跑只重启有变化的 Velocity、系统服与 PostgreSQL，无 firewalld 时用 nftables 收口 5432，PG 大版本不符拒绝启动
2026-09-25 00:06:47 +08:00
Lemon-miaow
a4fa16ae69
feat(bootstrap): 控制面镜像按版本打 tag，升级后 rollout undo 可回到上一版本
2026-09-24 23:52:30 +08:00
Lemon-miaow
26dc1722f4
feat(bootstrap): 先校验 SHA256SUMS 再运行下载的 felis，固定 k3s、cloudflared 与 registry 镜像版本
2026-09-24 23:39:38 +08:00
Lemon-miaow
bf18712a6c
feat(build): kaniko/trivy 与扫描库改用 registry 内的 mirror 副本，定时刷新并在过期时告警
2026-09-24 23:25:21 +08:00
Lemon-miaow
e75448a118
feat(platform): registry/uploads/backup PVC 容量可配置
2026-09-24 23:10:40 +08:00
Lemon-miaow
720ab81bf8
feat(submit): 上传存储全局上限、磁盘余量检查，被拒上下文 7 天后回收
2026-09-24 23:10:40 +08:00
Lemon-miaow
151c9d2e30
feat(registry): api 定期删除无引用 manifest，gate 提供 manifest 索引
2026-09-24 22:58:07 +08:00
Lemon-miaow
7f772bccbb
feat(registry): 开启 manifest 删除，GC sidecar 在 gate 只读窗口内回收 blob
2026-09-24 22:46:37 +08:00
Lemon-miaow
c49336ba21
fix(bootstrap): 元数据下载在 TLS 握手中断时整体重试
2026-09-24 22:26:30 +08:00
Lemon-miaow
e836a73a8a
fix(build): 构建并发上限与排队，构建命名空间加 ResourceQuota，SyncAll 逐个容错
2026-09-24 22:26:21 +08:00
Lemon-miaow
13b65e19ec
fix(build): 构建 pod 等出口策略生效再运行，加 seccomp、可选 user namespace 与磁盘上限，上下文解包限总字节与条目数
2026-09-24 20:42:14 +08:00
Lemon-miaow
9bda3a52fa
fix(backup): 手动备份按服冷却、每服保留上限与独立保留期，容量驱逐不再删除回收世界的唯一副本
2026-09-24 19:58:59 +08:00
Lemon-miaow
47890ca913
feat(offsite): 世界归档与数据库备份加密同步到异地 S3，reaper 确认异地副本后才删除世界
2026-09-24 19:25:16 +08:00
Lemon-miaow
d17524cd67
feat(watchdog): 主机侧巡检定时器按异常邮件通知平台所有者，operator 增加 phase 与 build_info 指标、卡死存活探针与告警规则
2026-09-24 18:06:19 +08:00
Lemon-miaow
215bfd78d7
fix(images): 服务器镜像在创建时固定到仓库 digest，更换镜像需确认备份，安装器重建前先固定旧服并推送不可变版本标签
2026-09-24 16:57:38 +08:00
Lemon-miaow
5521e498a9
fix(platform): minecraft 命名空间强制 PodSecurity baseline，reaper 世界根目录改走静态 hostPath PV
2026-09-24 16:28:12 +08:00
Lemon-miaow
c7db7d4126
feat(db): 控制面 PG 定时备份、迁移前快照与原子恢复
2026-09-24 15:19:42 +08:00
Lemon-miaow
7819e5de50
feat(netpol): 锁定游戏服出站并为 registry 加入站围栏
2026-09-24 14:25:17 +08:00
Lemon-miaow
4648175773
fix(velocity): felis:control 按来源服务器限权并关闭 bungeecord 通道
2026-09-24 13:39:38 +08:00
Lemon-miaow
b14bacbfc6
fix(build): mirror the Trivy Java DB — jar-bearing builds failed closed at the scan gate ( #72 )
2026-09-24 03:11:01 +08:00
Lemon-miaow
2c6739ad76
fix(updater,install,docs): follow the move to FelisMC/Felis ( #53 )
...
The repository moved to FelisMC/Felis, but the felis-api release coordinate, the installer's default FELIS_REPO_URL, the PaperMC user-agent strings and both READMEs still named MliroLirrorsIngenuity/Felis. Live on the audit box, 'felis update' reported 'github: MliroLirrorsIngenuity/Felis releases/latest returned HTTP 404 -- ...', pointing operators at a coordinate that no longer exists; the old path keeps answering today only because GitHub still 301s the transfer (verified with a read token against api.github.com: old path 301, new path 200), and if that redirect is ever retired every install and every update check breaks with it.
Replace the coordinate in the six tracked files: the updater topology and both test fixtures, the bootstrap default URL and user-agent strings, and README.md/README_EN.md. Green live: the same command now reports 'github: FelisMC/Felis releases/latest returned HTTP 404 -- ...' (still 404 because the new home has published no stable release yet -- a release-process fact, not a code bug).
Gates: gofmt, go vet, go test ./..., deploy/bootstrap_test.sh all clean.
2026-09-23 20:58:34 +08:00
Lemon-miaow
328e570309
fix(setup,install): refresh the workload namespace's felis-config mirror ( #51 )
2026-09-23 20:07:20 +08:00
Lemon-miaow
4d3c85fd06
fix(bootstrap): [smtp] carry stops hoarding the auth_source comment block ( #50 )
2026-09-23 19:45:26 +08:00
Lemon-miaow