Packages

FAQ › EUZOS Server › Packages · Nederlands

What is it?

What an EUZOS Server does is decided by its packages. A package is either a role (code in the EUZOS Server kernel, switched on by a config file in \EOS\FW\) or an app (a signed package from the profile server's app catalogue, installed into apps/ on partition 2). All packages are in one list, euzos_install::server::PACKAGES; the installer and the packages command show that list automatically.

Finished today: Workplace management (werkplek), the local EUZOS workplace server managed with Server Admin; the Package cache (cache), which serves apps (such as Chromium) to the PCs in the network on top of it (Package cache); the File server (files): shared folders for the EUZOS PCs, see File server; the Web server (web): static sites and a reverse proxy with certificates from Let's Encrypt (see Web server); and Backup (backup): encrypted backups of the PCs to the server (Backup). A later package is shown as "Coming soon" until it is finished.

How do I…?

How do I see which packages are on?

packages on the console, or Packages (serveradmin <server> packages) in Server Admin. The console shows each package with its kind and state: on (with the name), off (disabled with Server Admin), not set up, or coming soon.

How do I set up Workplace management after installation?

The installer does it if you chose the package. By hand: workplace setup [name] writes WORKPLC.TXT (role=workplace, the name) and creates the keys WPKEY.TXT and WPTLS.TXT; it never overwrites existing files. Then reboot, and register the workplace server on the profile server (workplace shows the public key to register; see Organisations).

How do I turn a package on or off?

With Server Admin on an EUZOS PC:

serveradmin <server> packages
serveradmin <server> package-on <id>
serveradmin <server> package-off <id>           shows what will happen
serveradmin <server> package-off <id> confirm   and does it

• Turning off needs confirmation (the server refuses without it, confirmation_needed) and closes the package's ports in the firewall (Workplace management: the cache port 8445). A rule that also allows the admin protocol stays and is reported. Workplace management off means: no cache (the cache port refuses), but sign-in and management stay, so it can be turned on again. Stored as package=off in WORKPLC.TXT (legacy pakket=uit is still read).
• Turning on does not open the firewall; the reply names the rule to open: firewall-open allow tcp 8445 lan.
• Coming-soon packages cannot be turned on (pakket_binnenkort).
• Every change goes into the server's log (log in Server Admin): who, from which PC, and what happened to the firewall.

How do I make the server sign in and fill the cache now?

workplace now on the console (or fill in Server Admin). Normally the server signs in at the profile server every 30 minutes and checks the catalogue for new app versions.

How do I see the state of the workplace server?

workplace (or workplace status): role, port and apps, whether the package is off, organisation or registration code from the installer, the public key and fingerprint, the TLS pin, the LAN address, the sign-in state, the last message, the cache contents and the traffic.

Why is a role "downloaded" only with a new release?

There is no module loader: loading role code at run time would enlarge the attack surface. A role arrives with a new signed EUZOS Server release (fetch/install). What needs no kernel rights can be an app from the catalogue, like Server Admin and Chromium, updated separately.

Details

Workplace management (the workplace server)

When \EOS\FW\WORKPLC.TXT says role=workplace (legacy rol=werkplek; the value werkplek is also accepted) and the server boots from its internal disk, crate::packages::start starts the role (crate::workplace::start): no login screen and no desktop, but the console, network, NTP and:

• sign in at the profile server of PROFILE.TXT with the workplace key (WPKEY.TXT, Ed25519): a challenge, then a signed message (EUZOS-werkplek-aanmelden-v1); repeated every 30 minutes (sooner after an error). This gives a workplace token, the public download key and the organisation; the profile server learns the LAN address and the TLS pin.
• fill the cache: each app from apps= in WORKPLC.TXT (default chromium) is fetched with the same code as on a PC into apps/ on partition 2 (signature, version, SHA-256, block hash), with a download token obtained via the workplace token. Not when Workplace management or the Package cache is off; quota, LRU and on-demand filling: Package cache.
• an HTTPS server on the cache port (default 8445; TLS 1.3 with the P-256 key from WPTLS.TXT; the PC pins the key) serving GET|HEAD /<app>/<version>/<file> with the PC's download token and one Range. At most 16 connections at the same time, 4 per address.
• the admin protocol on TCP 8446 for Server Admin (see Server Admin).

Secrets (keys, tokens) never go into the log. The log keeps the last 200 lines.

Reference

Console commands

werkplek is the legacy alias of workplace. On the desktop, workplace and packages answer "only in EUZOS Server".

Functions and modules

Config files

EUZOS writes the English keys and values and still reads the legacy Dutch ones (a Dutch key and its English one count as the same key).

API endpoints

Called by the workplace server on the profile server (details in API); the kernel uses the legacy paths:

Served by the workplace server on the cache port (default 8445):

Errors: 404 not_in_cache (not that version in the cache), 404 pad (unknown file), 503 klok (no clock), and the token errors of euzos_workplace::token.

Protocol messages and formats

• Sign-in message (EUZOS-werkplek-aanmelden-v1), lines omgeving=, server=, sleutel=, uitdaging=, tijd=, lan= (https://<IPv4>:<port>/), tls= (SHA-256 of the SPKI), naam=, then handtekening= (Ed25519 over <kind>\0 + everything before that line).
• Download token: ezdl1.<kid>.<app>.<version>.<exp>.<jti>.<account>.<signature>, Ed25519 over EUZOS-downloadtoken-v1\0 + everything before the last dot; valid at most 2 hours (+5 minutes slack).
• Package list for Server Admin (packages::text): one line per package pakket=<id>\t<title>\t<state>\t<description>, state aan, uit, niet-ingericht or binnenkort.
• Reason codes of packages::set: pakket_onbekend, pakket_binnenkort, confirmation_needed, package_not_installed, geen_rol.

These field names, states and codes are wire format and stay Dutch.

See also

• docs/EDITIONS.md ("Server packages: the model")
• docs/WORKPLACE.md
• docs/WORKPLACE-PROTOCOL.md
• docs/DOWNLOADSERVER.md
• Server Admin, Apps and downloads