Repository navigation
fix(setup): install Caddy without the Cloudsmith apt repo - #146
Merged
Merged
Conversation
dl.cloudsmith.io/public/caddy/stable now answers 402 Payment Required, so apt-get update in step 1 fails and every deploy (and the 15-minute agentbbs-update timer) aborts before doing anything. - Step 1 removes /etc/apt/sources.list.d/caddy-stable.list and its keyring before apt-get update. - Step 9 installs the pinned GitHub release (CADDY_VERSION=2.11.7, SHA-512 verified) to /usr/bin/caddy with the caddy user and upstream's unit, only when caddy is missing. Ubuntu's own package is 2.6.2, too old. - An existing install (the dpkg 2.11.7 on bbs.profullstack.com, unit in /usr/lib/systemd/system) is left untouched, so the Caddyfile and unit keep working as before. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ThreatCrush Security Scan10 finding(s) HIGH/CRITICAL: 7 | LOW: 3
Snippets are redacted; ThreatCrush never prints matched credential material. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The deploy for #145 failed at
apt-get update: Caddy's Cloudsmith apt repo (dl.cloudsmith.io/public/caddy/stable) now returns 402 Payment Required, so setup.sh aborts in step 1. That blocks every deploy and the 15-minuteagentbbs-update.timerrun./etc/apt/sources.list.d/caddy-stable.listand/usr/share/keyrings/caddy-stable-archive-keyring.gpgbeforeapt-get update.caddyis missing, installs the pinned GitHub release instead (CADDY_VERSION=2.11.7, SHA-512 from the release's checksums file, amd64 + arm64). It goes to/usr/bin/caddyand gets thecaddysystem user,/etc/caddyand upstream'scaddy.service(written only if no unit exists). Ubuntu 26.04's own package is 2.6.2 (2022), so it is not used./usr/lib/systemd/system/caddy.serviceare kept as is.caddy validateon the live Caddyfile reports "Valid configuration".Tested:
bash -npasses.shellcheck -S warningreports no new warnings (one existing SC2097/8 at the news-cert line). The checksum-and-extract logic ran against the real amd64 tarball and the binary reports v2.11.7.🤖 Generated with Claude Code