admin
3ba8e6e6c2
refactor: clean layout + docker binary
2026-08-03 14:50:01 +00:00
admin
587aa70554
feat: self-contained /opt/fw/ — Docker runtime, offline dir, connectivity check
...
- setup.sh checks git.sechpoint.app reachability first
- Docker installed under /opt/fw/docker/ (binaries + data)
- /opt/fw/offline/ for pre-downloaded binaries (air-gapped)
- /opt/fw/fw.conf — user-editable config
- All self-contained, no system-wide installs
2026-08-03 14:33:20 +00:00
admin
e25ea0560b
feat: offline mode — drop binaries in /opt/fw/offline/
...
Offline deployment for air-gapped corporate environments:
- /opt/fw/offline/docker-29.2.1.tgz → Docker static binary
- /opt/fw/offline/wallarm-node.tar → Wallarm Docker image
- Setup auto-detects and uses offline files
- Falls back to apt/docker.io if no offline files
2026-08-03 14:29:14 +00:00
admin
c747e9da63
fix: add Docker named volume for persistent data
2026-08-03 14:21:57 +00:00
admin
156c81f230
feat: add/edit/remove individual nodes, create fw.conf interactively
2026-08-03 14:20:10 +00:00
admin
3037f5f8ef
fix: remove volume mount — it overwrites container /opt/wallarm
2026-08-03 13:32:03 +00:00
admin
b3cf1c8250
fix: handle nested and flat fw.conf formats
2026-08-03 13:24:44 +00:00
admin
350434e690
pivot: Docker-based deployment — one container per node
...
- Clean Docker approach: pull wallarm/node image, run containers
- No symlinks, no path patching, no filesystem tricks
- Works on any Linux with Docker (VMs, LXC, bare metal)
- Multi-node: each container gets unique port + volume
- Simplified to one Python file
2026-08-03 13:24:20 +00:00
admin
10fa528e77
feat: unshare -m bind mount for per-instance /opt/wallarm isolation
2026-08-03 13:08:23 +00:00
admin
b8b46daf00
revert: back to symlink approach, PrivateMounts incompatible
2026-08-03 13:03:16 +00:00
admin
d277d976d0
fix: mkdir -p /opt/wallarm before bind mount, fix status parsing
2026-08-03 13:02:07 +00:00
admin
06c1ecfe85
feat: systemd PrivateMounts bind-mount isolation, port offsets kept
2026-08-03 12:58:35 +00:00
admin
c8fd8bc37e
fix: status parsing from systemd list-units
2026-08-03 12:47:32 +00:00
admin
1974fd0293
fix: save state in deploy_all, discover nodes from systemd
2026-08-03 12:28:01 +00:00
admin
d28d77661d
fix: remove -f flag from cloud check (Wallarm API returns 404 on root)
2026-08-03 12:14:16 +00:00
admin
112bffb742
refactor: /opt/fw/deploy.sh wrapper, app/ subdir for main.py + config
...
- /opt/fw/deploy.sh — simple wrapper, user entry point
- /opt/fw/app/main.py — deploy script
- /opt/fw/app/fw.conf — node config
- /opt/fw/app/state.json — deployment state
- Instances stay at /opt/fw/{name}/wallarm/
2026-08-03 12:06:33 +00:00
admin
8ea81cdb17
fix: remove /opt/wallarm symlink after deploy
2026-08-03 11:57:57 +00:00
admin
944df2d394
chore: fix comment
2026-08-03 11:55:32 +00:00
admin
2049bcf617
fix: wcli uses -cfg not --config-file
2026-08-03 11:53:47 +00:00
admin
a2a658caaa
fix: nginx ExecStartPre non-fatal (-) so deploy nginx doesn't block
2026-08-03 11:49:17 +00:00
admin
31013b3e82
fix: message when fw.conf is empty
2026-08-03 11:34:53 +00:00
admin
076b801eda
fix: proper error handling for access denied, kill deploy nginx before systemd
2026-08-03 11:26:49 +00:00
admin
03f56964b9
fix: cloud check is warning not failure, --help works
2026-08-03 11:24:47 +00:00
admin
43dfc6ec06
pivot: Python rewrite replacing Go — single deploy.py
...
- Single deploy.py (~400 lines) replaces all Go code
- setup.sh installs Python 3.12 via pyenv (cross-distro)
- Same functionality: menu, deploy, edit, remove, status, tunnel
- No build step — script runs directly
- Path patching and port offset in native Python
2026-08-03 11:09:08 +00:00
