Implemented Remote Agent Updater Script

This commit is contained in:
2025-10-04 21:13:36 -06:00
parent a50af1eccc
commit 13c571cc8e
4 changed files with 17 additions and 232 deletions

View File

@@ -39,54 +39,6 @@ def _find_borealis_root() -> Optional[str]:
return None
def _launch_silent_update_task():
if os.name != 'nt':
raise RuntimeError('Silent update is supported on Windows hosts only.')
root = _find_borealis_root()
if not root:
raise RuntimeError('Unable to locate Borealis.ps1 on this agent.')
ps_exe = os.path.expandvars(r"%SystemRoot%\\System32\\WindowsPowerShell\\v1.0\\powershell.exe")
if not os.path.isfile(ps_exe):
ps_exe = 'powershell.exe'
task_name = f"Borealis Agent - SilentUpdate - {uuid.uuid4().hex}"
task_literal = _ps_literal(task_name)
ps_literal = _ps_literal(ps_exe)
root_literal = _ps_literal(root)
args_literal = _ps_literal('-NoProfile -ExecutionPolicy Bypass -File .\\Borealis.ps1 -SilentUpdate')
cleanup_script = (
"Start-Job -ScriptBlock { Start-Sleep -Seconds 600; "
f"try {{ Unregister-ScheduledTask -TaskName {task_literal} -Confirm:$false -ErrorAction SilentlyContinue }} catch {{}} }} | Out-Null"
)
ps_script = "\n".join(
[
"$ErrorActionPreference='Stop'",
f"$task = {task_literal}",
"try { Unregister-ScheduledTask -TaskName $task -Confirm:$false -ErrorAction SilentlyContinue } catch {}",
f"$action = New-ScheduledTaskAction -Execute {ps_literal} -Argument {args_literal} -WorkingDirectory {root_literal}",
"$settings = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable -DeleteExpiredTaskAfter (New-TimeSpan -Minutes 30)",
"$principal= New-ScheduledTaskPrincipal -UserId 'SYSTEM' -LogonType ServiceAccount -RunLevel Highest",
"Register-ScheduledTask -TaskName $task -Action $action -Settings $settings -Principal $principal -Force | Out-Null",
"Start-ScheduledTask -TaskName $task | Out-Null",
cleanup_script,
]
)
flags = 0x08000000 if os.name == 'nt' else 0
proc = subprocess.run(
[ps_exe, '-NoProfile', '-ExecutionPolicy', 'Bypass', '-Command', ps_script],
capture_output=True,
text=True,
creationflags=flags,
)
if proc.returncode != 0:
stderr = proc.stderr or proc.stdout or 'scheduled task registration failed'
raise RuntimeError(stderr.strip())
def _canonical_env_key(name: str) -> str:
cleaned = re.sub(r"[^A-Za-z0-9_]", "_", (name or "").strip())
return cleaned.upper()
@@ -328,46 +280,6 @@ class Role:
def register_events(self):
sio = self.ctx.sio
@sio.on('agent_silent_update')
async def _on_agent_silent_update(payload):
hostname = None
details = payload if isinstance(payload, dict) else {}
try:
import socket
hostname = socket.gethostname()
target = (details.get('target_hostname') or '').strip().lower()
if target and target != hostname.lower():
return
loop = asyncio.get_running_loop()
await loop.run_in_executor(None, _launch_silent_update_task)
try:
await sio.emit(
'agent_silent_update_status',
{
'request_id': details.get('request_id') or '',
'hostname': hostname,
'status': 'started',
},
)
except Exception:
pass
except Exception as e:
try:
await sio.emit(
'agent_silent_update_status',
{
'request_id': details.get('request_id') or '',
'hostname': hostname or '',
'status': 'error',
'error': str(e),
},
)
except Exception:
pass
@sio.on('quick_job_run')
async def _on_quick_job_run(payload):
try: