scripts: consolidate Agent deployment and remove Probe packages

Use Agent for native, container, systemd and OpenWrt installations and signed updates. Remove retired Probe deployment templates and smoke scripts.
2026-10-21 11:55:41 +08:00
1 parent ad5efc62ff
commit 016dbc2bbf
@@ -1,16 +0,0 @@
-[Unit]
-Description=MoShiro Probe (Podman container)
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-EnvironmentFile=/etc/moshiro-update/probe.image
-Restart=always
-RestartSec=5
-TimeoutStopSec=30
-ExecStartPre=-/usr/bin/podman rm -f moshiro-probe
-ExecStart=/usr/bin/podman run --rm --name moshiro-probe --network host --read-only --security-opt no-new-privileges --security-opt label=disable --cap-drop all --tmpfs /tmp:rw,noexec,nosuid,size=64m,mode=1777 -e MOSHIRO_NETWORK_SCOPE=host -v /etc/os-release:/etc/os-release:ro -v moshiro-probe-config:/etc/moshiro -v moshiro-probe-status:/etc/moshiro/update-status:ro ${IMAGE}
-ExecStop=/usr/bin/podman stop -t 20 moshiro-probe
-
-[Install]
-WantedBy=multi-user.target
@@ -1,16 +0,0 @@
-[Unit]
-Description=MoShiro Probe (Docker container)
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-EnvironmentFile=/etc/moshiro-update/probe.image
-Restart=always
-RestartSec=5
-TimeoutStopSec=30
-ExecStartPre=-/usr/bin/docker rm -f moshiro-probe
-ExecStart=/usr/bin/docker run --rm --name moshiro-probe --network host --read-only --security-opt no-new-privileges --security-opt label=disable --cap-drop all --tmpfs /tmp:rw,noexec,nosuid,size=64m,mode=1777 -e MOSHIRO_NETWORK_SCOPE=host -v /etc/os-release:/etc/os-release:ro -v moshiro-probe-config:/etc/moshiro -v moshiro-probe-status:/etc/moshiro/update-status:ro ${IMAGE}
-ExecStop=/usr/bin/docker stop -t 20 moshiro-probe
-
-[Install]
-WantedBy=multi-user.target
@@ -1,16 +0,0 @@
-[Unit]
-Description=MoShiro Probe (rootless Podman container)
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-EnvironmentFile=%h/.config/moshiro/probe.image
-Restart=always
-RestartSec=5
-TimeoutStopSec=30
-ExecStartPre=-/usr/bin/podman rm -f moshiro-probe
-ExecStart=/usr/bin/podman run --rm --name moshiro-probe --network host --read-only --security-opt no-new-privileges --security-opt label=disable --cap-drop all --tmpfs /tmp:rw,noexec,nosuid,size=64m,mode=1777 -e MOSHIRO_NETWORK_SCOPE=host -v /etc/os-release:/etc/os-release:ro -v moshiro-probe-config:/etc/moshiro -v moshiro-probe-status:/etc/moshiro/update-status:ro ${IMAGE}
-ExecStop=/usr/bin/podman stop -t 20 moshiro-probe
-
-[Install]
-WantedBy=default.target
@@ -1,44 +0,0 @@
-[Unit]
-Description=MoShiro probe (network line quality measurement origin)
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-Type=exec
-User=moshiro
-Group=moshiro
-Environment=LD_LIBRARY_PATH=/usr/lib/moshiro
-ExecStart=/usr/lib/moshiro/moshiro-probe --config /etc/moshiro/probe.json
-Restart=always
-RestartSec=5
-
-# The probe is a pure collector: it never starts processes and writes no measurement data.
-# The only file the probe writes is agents.json (the latest agent list) next to probe.json.
-ReadWritePaths=/etc/moshiro
-NoNewPrivileges=yes
-ProtectSystem=strict
-ProtectHome=yes
-PrivateTmp=yes
-PrivateDevices=yes
-ProtectKernelTunables=yes
-ProtectKernelModules=yes
-ProtectKernelLogs=yes
-ProtectControlGroups=yes
-ProtectClock=yes
-ProtectHostname=yes
-RestrictAddressFamilies=AF_INET AF_INET6
-RestrictNamespaces=yes
-RestrictRealtime=yes
-LockPersonality=yes
-# NativeAOT does not JIT, so writable+executable memory is never needed.
-MemoryDenyWriteExecute=yes
-SystemCallArchitectures=native
-# No capabilities needed: the probe only dials out.
-CapabilityBoundingSet=
-
-MemoryMax=64M
-TasksMax=64
-LimitNOFILE=4096
-
-[Install]
-WantedBy=multi-user.target