refactor(fingerprint): start fingerprint snapshots, merge with posture checks #358

New Issue

MrUnknownDE · 2026-04-05T17:07:47+02:00

MrUnknownDE commented

2026-04-05 17:07:47 +02:00

Originally created by @water-sucks on 1/20/2026

Community Contribution License Agreement

By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.

Description

This PR does a number of changes to the fingerprints and posture checking server-side:

It moves the posture checks into the fingerprint tables.
It periodically takes snapshots of both fingerprints and posture checks, as well as exposing a current fingerprint table for easy storage of the current detected value, alongside its last collected and first/last seen timestamps.
Fingerprint snapshots are now only added to the table as their values change over time, rather than at every ping. This is done using a hash stored in the database.

How to test?

Fingerprint collection from clients should not change on the client side, just their handling on the server side.

*Originally created by @water-sucks on 1/20/2026* ## Community Contribution License Agreement By creating this pull request, I grant the project maintainers an unlimited, perpetual license to use, modify, and redistribute these contributions under any terms they choose, including both the AGPLv3 and the Fossorial Commercial license terms. I represent that I have the right to grant this license for all contributed content. ## Description This PR does a number of changes to the fingerprints and posture checking server-side: - It moves the posture checks into the fingerprint tables. - It periodically takes snapshots of both fingerprints and posture checks, as well as exposing a current fingerprint table for easy storage of the current detected value, alongside its last collected and first/last seen timestamps. - Fingerprint snapshots are now only added to the table as their values change over time, rather than at every ping. This is done using a hash stored in the database. ## How to test? Fingerprint collection from clients should not change on the client side, just their handling on the server side.

MrUnknownDE closed this issue

2026-04-05 17:07:47 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#358