Sven van GinkelandGitHub 1da59e3771 fix(agent): make package update checks work under the systemd sandbox (#2538) ...

The agent runs as the beszel user under ProtectSystem=strict, so package
managers that write temp, cache or log files failed with only
"exit status 1" in the log.

- Include the command's stderr in package update check errors.
- dnf5: point XDG_STATE_HOME and XDG_CACHE_HOME into the agent's data
  dir. They default to $HOME, which is /nonexistent for the beszel user.
  With -C, dnf5 still reads the system metadata cache.
- zypper: keep the solv cache in the data dir with --solv-cache-dir,
  since the agent user cannot rebuild it in /var/cache/zypp.
- install-agent.sh, Debian unit: add PrivateTmp=yes. dnf4 (Rocky, Alma)
  and zypper keep temporary files in /var/tmp, which ProtectSystem=strict
  makes read-only. The install script also adds it to existing units
  when re-run.

2026-10-13 08:07:44 -04:00

..

debian

fix(agent): make package update checks work under the systemd sandbox (#2538)

2026-10-13 08:07:44 -04:00

docker

update docker-compose.yml examples

2026-05-19 20:20:13 -04:00

guides

add EXTRA_FILESYSTEMS to systemd script and example

2024-09-04 16:22:01 -04:00

helm

chore(helm): update app version to 0.21.0 (#2498)

2026-10-05 10:51:53 -04:00

licenses

embed smartctl in the windows binary (#1362)

2025-11-05 13:03:47 -05:00

scripts

fix(agent): make package update checks work under the systemd sandbox (#2538)

2026-10-13 08:07:44 -04:00

CHANGELOG.md

chore: update changelog

2026-10-02 12:31:52 -04:00