felhom-host-install.sh 1.29.0: installs the OS-update wrapper (felhom-os-apply) from the pinned agent tag; skipped with a warning on an agent older than 0.140.0; uninstall removes it

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-04 11:40:37 +02:00
parent 0e22a0ecc7
commit eaae94a4b8
2 changed files with 33 additions and 1 deletions
@@ -1,3 +1,12 @@
+## felhom-host-install.sh 1.29.0 — installs the OS-update wrapper (2026-10-04, `11-os-updates.md` §8 step 2)
+
+- Step 5 fetches `configs/felhom-os-apply` from the pinned agent tag and installs it as
+  `/usr/local/sbin/felhom-os-apply` (0755 root:root, python3 syntax check first). The FELHOM_OSAPPLY sudoers line rides
+  the canonical sudoers fetch from the same tag. An agent older than 0.140.0 carries neither, so a missing wrapper is
+  SKIPPED with a warning (OS updates stay off), never fatal. `--uninstall` removes it.
+- **Existing boxes get neither the wrapper nor the sudoers line from this** — the installer runs on a new box; the
+  agent's signed self-update replaces only the binary (R-840).
+
 ## one-register reads suffix ids and splits on pipes outside code (2026-10-03, backlog triage, Part D)

 - `one_register_gate.py`: the id pattern was `R-(\d+)`, so ROADMAP rows R-27b, R-27c and R-50b were never read;