Lucas RayanandClaude Sonnet 5
8a80504c45
Release / Plan (reuse the published image?) (push) Successful in 3s
CI / Docker image (build and smoke test) (push) Skipped
CI / Format and clippy (push) Successful in 4m32s
CI / Dependency audit (push) Successful in 11s
CI / Tests (Linux) (push) Successful in 9m15s
Release / ci (push) Successful in 9m18s
Release / Build image (arm64) (push) Failing after 7m7s
Release / Build image (amd64) (push) Failing after 13m53s
Release / Publish tags (push) Skipped
Release / Gitea release (push) Skipped
Acaua is a collective SOC daemon consuming only Zeek log files, not a single-user tool needing local hardware like its siblings. Drop the Tauri desktop shell, installers and self-update entirely; the server and its web dashboard ship as a container, updated by pulling a new image tag. Link against the official prebuilt libduckdb instead of compiling it from source via the bundled feature, cutting image build time from 15+ minutes to about 3. Fix a real bug found along the way: as PID 1 in a container, the daemon ignored SIGTERM and was always killed after the stop timeout; it now shuts down gracefully. Also corrects the Pillar 1 beaconing score: the period estimate had a harmonic alias (a perfectly periodic 4h series resolved to 600s), and the old score formula flagged pure random traffic as suspicious (p95 = 0.839 on Poisson noise). The new formula was validated against 300 samples per scenario. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01VAyr8d7HuAdUGB6aA5xmDD
36 lines
1.6 KiB
Markdown
36 lines
1.6 KiB
Markdown
# Changelog
|
|
|
|
**English** · [Português](CHANGELOG.pt-BR.md)
|
|
|
|
Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions follow SemVer.
|
|
|
|
## [Unreleased]
|
|
|
|
### Changed
|
|
- Distribution pivoted to 100% Docker and docker-compose (server daemon and web dashboard); native binary tarballs and desktop installers are discontinued.
|
|
- DuckDB is now a mandatory runtime dependency, dynamically linked against the official prebuilt `libduckdb.so` (v1.5.6) with fixed SHA-256 via `scripts/fetch-libduckdb.sh`.
|
|
- Upgraded workspace MSRV to Rust 1.88 (required by `duckdb ~1.10506.1`).
|
|
- Upgraded container runtime and base image to Debian 13 trixie.
|
|
|
|
### Fixed
|
|
- Graceful shutdown on `SIGTERM` when running as PID 1 in container environments.
|
|
|
|
### Removed
|
|
- Tauri desktop application (`apps/gui/src-tauri`) and associated desktop build scripts.
|
|
- Self-update flag (`acaua update --apply`) and in-place binary overwrite. Updates are now handled via image pulls (`docker compose pull`).
|
|
|
|
## [0.1.0] - 2026-10-31
|
|
|
|
### Added
|
|
- Rust workspace with `acaua-core` and `acaua-cli`.
|
|
- CLI skeleton with `serve`, `analyze`, `doctor` and `update [--apply]`.
|
|
- Axum API skeleton with health, status, alerts, analyze and update-check routes.
|
|
- Embedded vanilla UI and Tauri desktop shell.
|
|
- Deterministic pillar, fusion, storage, Zeek and updater stubs with smoke tests.
|
|
- English/Portuguese documentation, CI/release workflows and local check script.
|
|
|
|
### Notes
|
|
- The four mathematical pillars are not implemented.
|
|
- The Zeek parser and DuckDB storage are stubs.
|
|
- No release artifact has been published.
|