Skip to main content
← back to extensions

Syscheck

@stateless/syscheckv2026.06.12.2· 12d agoWORKFLOWSREPORTS
01README

Fleet node verification framework. A catalog of tagged checks (category × cadence × scope) contributed by domains — host-OS/apt hygiene & fitness over scripts/host-probe.sh, plus a proxmox provider for PVE-scoped checks — run by the syscheck workflow and scored into a per-node pass/warn/fail verdict. Domains (proxmox, future @stateless/docker, …) plug in via a CheckProvider contract. Sits above the domains; results belong in @stateless/inventory.

02Workflows1
@stateless/syscheckf76562a4-caa0-467b-8b84-644615a9ec92

syscheck — run the read-only host-probe across the selected hosts and evaluate the @stateless/syscheck check catalog (host + proxmox providers; CPU microcode, non-free-firmware, kernel) into a per-node pass/warn/fail verdict. Operates over @swamp/ssh (host-OS / apt facts the PVE API cannot see); the PVE-API check subset is added as the catalog grows. READ-ONLY — no mutations, safe to run on a cadence or as an upgrade preflight.

probeRead-only host probe (host-OS / apt facts) across the selected hosts.
1.probe-host${{ inputs.inventoryModel }}.script— Run the read-only host probe on each host; the single-line JSON on stdout lands in that host's runResult.stdout for the syscheck report to evaluate. (Probe inlined from scripts/host-probe.sh — keep in sync.)
03Reports1
@stateless/syscheckworkflow
syscheck.ts

Fleet node verification — runs a catalog of tagged checks (category × cadence × scope) contributed by domains (host, proxmox, …) against the probe, and reports a per-node pass/warn/fail verdict.

auditfleetverificationbest-practice
04Previous Versions1
2026.06.12.1Jun 12, 2026
05Stats
A
92 / 100
Downloads
1
Archive size
17.7 KB
  • Has README or module doc2/2earned
  • README has a code example1/1earned
  • README is substantive0/1missing
  • Most symbols documented1/1earned
  • No slow types (deprecated)1/1earned
  • Dependencies pass trust audit2/2earned
  • Has description1/1earned
  • Platform support declared (or universal)2/2earned
  • License declared1/1earned
  • Verified public repository2/2earned
Repository
https://github.com/stateless/swamp-extensions
06Platforms
07Labels
#verification#audit#best-practice#fleet