oxmc
a86ad3298e
This checkout is PawletOS's fork (git.oxmc.me/PawletOS/profiled), so its own identity should read PawletOS, not VesperOS: binary/package name, AIDL package+interface (me.oxmc.vesperos.profile -> os.pawlet.profiled), D-Bus service/object/error names, C++ namespace (vesperos::profile -> pawletos::profile), sepolicy types, data paths (/data/system/vesperos -> /data/system/pawletos, /etc/vesperprofiled -> /etc/pawletprofiled), the vendored OpenSSL static-lib module names, and the ZTE protocol string. Also drops generated build output (obj-x86_64-linux-gnu/, debian/.debhelper, debian staging dir, debhelper log/substvars files) that had been committed by mistake, and adds a .gitignore so they don't come back. The stock/upstream vesperprofiled at git.oxmc.me/VesperOS/vesperprofiled is untouched -- this commit only goes to the pawletos remote.
66 lines
2.0 KiB
Plaintext
66 lines
2.0 KiB
Plaintext
Source: pawletprofiled
|
|
Section: admin
|
|
Priority: optional
|
|
Maintainer: oxmc <packages@oxmc.me>
|
|
Build-Depends:
|
|
debhelper-compat (= 13),
|
|
cmake (>= 3.18),
|
|
libssl-dev (>= 3.0),
|
|
libyaml-dev,
|
|
libdbus-1-dev,
|
|
libsystemd-dev,
|
|
libcurl4-openssl-dev,
|
|
pkg-config
|
|
Standards-Version: 4.7.0
|
|
Homepage: https://pawletos.oxmc.me
|
|
Vcs-Git: https://git.oxmc.me/PawletOS/profiled.git
|
|
|
|
Package: pawletprofiled
|
|
Architecture: any
|
|
Depends:
|
|
${shlibs:Depends},
|
|
${misc:Depends},
|
|
pawletprofiled-config-schema (>= 1.0.0),
|
|
libssl3 (>= 3.0),
|
|
libyaml-0-2,
|
|
libdbus-1-3,
|
|
libsystemd0,
|
|
libcurl4,
|
|
dbus,
|
|
network-manager,
|
|
ca-certificates
|
|
Recommends:
|
|
cloud-init,
|
|
nftables,
|
|
network-manager-strongswan,
|
|
network-manager-l2tp,
|
|
libnss3-tools,
|
|
libpam-pwquality,
|
|
libpam-faillock,
|
|
unattended-upgrades,
|
|
dconf-cli,
|
|
tpm2-tools
|
|
Suggests:
|
|
pawlet-zte-server,
|
|
pawletos-ca
|
|
Description: PawletOS configuration profile daemon with Zero-Touch Enrollment
|
|
pawletprofiled is the unified device management daemon for PawletOS.
|
|
It ships as a single binary containing two subsystems:
|
|
.
|
|
Profile Service — parses, verifies, and applies .vconfig configuration
|
|
profiles. Profiles are YAML files optionally wrapped in a CMS/PKCS#7
|
|
signed envelope. Which payload types are accepted is controlled by the
|
|
installed pawletprofiled-config-schema package, allowing OEMs to restrict
|
|
the available configuration surface for their platform.
|
|
.
|
|
ZTE Client — Zero-Touch Enrollment. Collects hardware identity (DMI UUID,
|
|
system/board serial, machine-id, permanent MAC addresses, EFI GUID) and
|
|
queries a ZTE lookup server on first internet connection. If the device is
|
|
registered, the signed MDM enrollment profile is downloaded and installed
|
|
automatically. Deferred enrollment is fully supported: if no network is
|
|
available at first boot, the ZTE client enrolls on first connectivity.
|
|
.
|
|
The profile service is exposed as a D-Bus system service at
|
|
os.pawlet.ProfiledService. The ZTE client runs as a background
|
|
thread in the same process.
|