DCCONSTRUCTIONS
a3c15e11e9
Discover independent camera instances and prepare their versioned runtime from Node or remote Core. Add isolated SDK workers, camera controls, raw dual-fisheye WebRTC preview, and shared action/region loading states. Recover existing Node bindings over known Tailscale addresses after a Core LAN address change. Preserve identities and trust, pin both peers, migrate endpoints with revision checks, and require real heartbeats for online status. Fix the Python client certificate profile for Go X509 verification. Pin Design Guideline 8c53f73 and retain installer/build/acceptance history. Node 0.8.19 is installed; X4 0.1.3-3 is bundled but hardware activation is pending. Validation: qualified DG/Node builds and Go race tests; 31 fleet tests; Python-to-Go certificate interoperability and live tailnet recovery with five fresh heartbeats; prior 38 X4 tests and bounded remote WebRTC acceptance. Clean-OS, replug/power autonomy, local X4 video and long-run stability remain open.
32 lines
800 B
Desktop File
32 lines
800 B
Desktop File
[Unit]
|
|
Description=Mission Core Insta360 model broker
|
|
ConditionPathExists=/var/lib/mission-core-insta360/active.path
|
|
[Service]
|
|
Type=simple
|
|
User=mission-core-insta360
|
|
Group=mission-core-node
|
|
ExecStart=/usr/bin/python3 -I /usr/lib/mission-core-node/insta360/bootstrap.py broker
|
|
RuntimeDirectory=mission-core-insta360
|
|
RuntimeDirectoryMode=0750
|
|
StateDirectory=mission-core-insta360-broker
|
|
StateDirectoryMode=0700
|
|
UMask=0007
|
|
NoNewPrivileges=yes
|
|
ProtectSystem=strict
|
|
ProtectHome=yes
|
|
PrivateTmp=yes
|
|
PrivateDevices=yes
|
|
ProtectKernelTunables=yes
|
|
ProtectKernelModules=yes
|
|
ProtectControlGroups=yes
|
|
RestrictSUIDSGID=yes
|
|
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
|
|
CapabilityBoundingSet=
|
|
TasksMax=192
|
|
MemoryMax=1G
|
|
CPUQuota=150%
|
|
Restart=on-failure
|
|
RestartSec=3
|
|
[Install]
|
|
WantedBy=multi-user.target
|