b00ef72581
Lets share-less (Intune/local-account) PCs pull installers the manifest references over HTTPS instead of SMB - the general capability the whole fleet migrates toward. New ManifestBlob registry (migration 0002) with bytes on disk at instance/geenforce/payloads/<sha256> (deduped by content); service.store_blob + blob_path; client-facing GET /api/geenforce/payload/<sha256> (geenforce.fetch token, ETag=hash, serves the blob store or an inline DB payload by hash). The serializer now emits PayloadSource/PayloadSha256/PayloadRef for http/inline entries only (smb entries round-trip unchanged - parity green). CLI 'flask geenforce add-payload <file>' registers a blob and prints its sha256. This is the shopdb half (B1); the PS client/engine fetch is B2.
47 lines
996 B
Python
47 lines
996 B
Python
"""GE-Enforce plugin models."""
|
|
|
|
from .manifest import (
|
|
ManifestScope,
|
|
ManifestEntry,
|
|
ManifestEntryPcType,
|
|
ManifestEntryHostname,
|
|
ManifestEntryMachineNumber,
|
|
ManifestInUseCheck,
|
|
ManifestInUseCheckProcess,
|
|
ManifestPublishedVersion,
|
|
ManifestPayload,
|
|
ManifestBlob,
|
|
ManifestEnforcementReport,
|
|
ManifestEnforcementResult,
|
|
PcTypeAlias,
|
|
PHASES,
|
|
ENTRY_TYPES,
|
|
REG_TYPES,
|
|
PAYLOAD_SOURCES,
|
|
DETECTION_METHODS,
|
|
APPLY_MODES,
|
|
INUSE_BEHAVIORS,
|
|
)
|
|
|
|
__all__ = [
|
|
'ManifestScope',
|
|
'ManifestEntry',
|
|
'ManifestEntryPcType',
|
|
'ManifestEntryHostname',
|
|
'ManifestEntryMachineNumber',
|
|
'ManifestInUseCheck',
|
|
'ManifestInUseCheckProcess',
|
|
'ManifestPublishedVersion',
|
|
'ManifestPayload',
|
|
'ManifestEnforcementReport',
|
|
'ManifestEnforcementResult',
|
|
'PcTypeAlias',
|
|
'PHASES',
|
|
'ENTRY_TYPES',
|
|
'REG_TYPES',
|
|
'PAYLOAD_SOURCES',
|
|
'DETECTION_METHODS',
|
|
'APPLY_MODES',
|
|
'INUSE_BEHAVIORS',
|
|
]
|