Repository navigation

Harden Asuswrt-Merlin service install and lifecycle - #3

Closed

maghuro wants to merge 82 commits into

mainfrom

fix/merlin-service-lifecycle

Closed

Harden Asuswrt-Merlin service install and lifecycle#3
maghuro wants to merge 82 commits into
mainfrom
fix/merlin-service-lifecycle

Commits on Sep 27, 2026
- Render Merlin startup script safely
  maghuro
  committed
  983de49
- Make Merlin hooks idempotent and uninstall safe
  maghuro
  committed
  5fc9304
- Validate Merlin service PID ownership
  maghuro
  committed
  ab7277a
- Make Merlin service install and uninstall reversible
  maghuro
  committed
  ef63ced
- Rollback partial Merlin service installs cleanly
  maghuro
  committed
  e67e7b6
- Test Merlin service lifecycle safeguards
  maghuro
  committed
  4dd7d05
- Fix Merlin PID ownership test escape
  maghuro
  committed
  c1463c2
- Wait for Merlin service child exec
  maghuro
  committed
  e00ac4a
- Test Merlin child exec startup wait
  maghuro
  committed
  5f24b68
- Preserve shared Merlin hook ownership on install rollback
  maghuro
  committed
  104fd0b
- Report stopped Merlin service state correctly
  maghuro
  committed
  74e0dc2
- Test Merlin stopped service status handling
  maghuro
  committed
  eff5a93
- Preserve Merlin service argument boundaries
  maghuro
  committed
  19ae9cb
- Test Merlin service shell quoting
  maghuro
  committed
  a5758e1
- Publish Merlin startup script atomically
  maghuro
  committed
  604a367
- Test atomic Merlin startup publication
  maghuro
  committed
  f067b46
- Resume interrupted Merlin service installs safely
  maghuro
  committed
  1d66661
- Validate dnsmasq PID before diskmon signal
  maghuro
  committed
  5824840
- Test diskmon dnsmasq PID ownership check
  maghuro
  committed
  412ea6f
- Avoid destructive Merlin hook reappend
  maghuro
  committed
  28720b8
- Test non-destructive Merlin hook editing
  maghuro
  committed
  5eeefb8
- Keep Merlin directory fsync Unix-specific
  maghuro
  committed
  fd8bae3
- Preserve pre-existing Merlin hook lines on rollback
  maghuro
  committed
  8880826
- Test Merlin hook append provenance
  maghuro
  committed
  b96a920
- Fix Merlin hook editor test escape
  maghuro
  committed
  43107b9
- Validate Merlin shared hooks and preserve concurrent lines
  maghuro
  committed
  0c6a4ce
- Test Merlin shared hook executability
  maghuro
  committed
  a4f5f75
- Propagate Merlin shared hook append failures
  maghuro
  committed
  d27e84b
- Test Merlin hook append failure propagation
  maghuro
  committed
  8390ac9
- Quote Merlin startup hook paths safely
  maghuro
  committed
  228244b
- Share quoted Merlin startup hook lines
  maghuro
  committed
  18ce907
- Test quoting of Merlin shared hook paths
  maghuro
  committed
  a76f486
- Reject unsafe Merlin shared-hook symlinks
  maghuro
  committed
  79e4692
- Test safe Merlin shared-hook path validation
  maghuro
  committed
  98a179d
- Make Merlin hook creation race-safe and clean legacy lines
  maghuro
  committed
  85c8239
- Test legacy Merlin hook line cleanup
  maghuro
  committed
  894b84a
- Set executable mode explicitly on new Merlin hooks
  maghuro
  committed
  870c5ee
- Test Merlin hook mode under restrictive umask
  maghuro
  committed
  599f294
- Scope restrictive umask regression to Linux
  maghuro
  committed
  639a9fd
- Scope Merlin POSIX mode tests off Windows
  maghuro
  committed
  97b08f4
- Reject symlinked Merlin startup scripts
  maghuro
  committed
  cd368d4
- Make Merlin startup path validation testable
  maghuro
  committed
  79b0499
- Test Merlin startup symlink rejection
  maghuro
  committed
  4cab0f1
- Pin Merlin startup validation to one descriptor
  maghuro
  committed
  01d063d
- Keep Merlin startup tests portable off Linux
  maghuro
  committed
  9680e70
- Use descriptor-pinned Merlin startup preparation
  maghuro
  committed
  b611444
- Test descriptor-pinned Merlin startup preparation
  maghuro
  committed
  20a2f83
- Serialize Merlin service lifecycle mutations
  maghuro
  committed
  ae44e5e
- Serialize Merlin service lifecycle mutations
  maghuro
  committed
  4722c73
- Migrate recognized legacy Merlin startup script safely
  maghuro
  committed
  a043c2a
- Migrate recognized legacy Merlin startup script portably
  maghuro
  committed
  dc708c6
- Migrate legacy Merlin startup scripts on service start
  maghuro
  committed
  847c1a5
- Test safe Merlin startup migration on upgrade
  maghuro
  committed
  e4ecdf5
- Open Merlin startup script writable for legacy migration
  maghuro
  committed
  ac0626f
- Open Merlin startup script writable for legacy migration
  maghuro
  committed
  2365644
- Harden Merlin lifecycle lock path
  maghuro
  committed
  3da0f98
- Fix Merlin lock error style
  maghuro
  committed
  ab2ce89
- Preserve installed Merlin startup arguments during refresh
  maghuro
  committed
  ccf61fe
- Migrate Merlin startup scripts atomically
  maghuro
  committed
  9fe809f
- Keep portable Merlin startup migration atomic
  maghuro
  committed
  289e609
- Test Merlin startup argument recovery and conservative refresh
  maghuro
  committed
  5f33499
- Migrate Merlin startup from the new running binary
  maghuro
  committed
  09b4279
- Run Merlin startup migration from upgraded binary
  maghuro
  committed
  f846a1c
- Serialize Merlin stop and restart lifecycle
  maghuro
  committed
  99968eb
- Make upgraded-binary Merlin migration testable
  maghuro
  committed
  8029987
- Test first upgraded-binary Merlin migration
  maghuro
  committed
  1d5b756
- Start safely when legacy Merlin migration cannot publish
  maghuro
  committed
  51f2f93
- Publish Merlin startup migration with atomic target verification
  maghuro
  committed
  55c3548
- Revalidate portable Merlin startup migration content
  maghuro
  committed
  6aba9a3
- Make Merlin migration fallback decision testable
  maghuro
  committed
  cc594d2
- Test safe fallback after Merlin migration failure
  maghuro
  committed
  dc8520d
- Test atomic Merlin migration race preservation
  maghuro
  committed
  1541952
- Keep published Merlin startup script for resumable install
  maghuro
  committed
  793e377
- Expose atomic Merlin restart transaction
  maghuro
  committed
  643c574
- Serialize real CLI restart transactions on Merlin
  maghuro
  committed
  4f43ebc
- Preserve restart behavior after stop wait timeout
  maghuro
  committed
  d87063f
- Make Merlin migration rollback non-clobbering
  maghuro
  committed
  14cf317
- Limit atomic restart transaction to Merlin
  maghuro
  committed
  9fff4c6
- Keep non-Merlin restart wait flow unchanged
  maghuro
  committed
  ca31579
- Harden Merlin hook publication and PID stop handling
  maghuro
  committed
  d6db326
- Test Merlin stop uses validated PID
  maghuro
  committed
  4f2e88c
- Test shared Merlin hook publication is no-clobber
  maghuro
  committed
  6db0253

Commits

Commits on Sep 27, 2026