feat: install plugins from approved source commits

host_agent/examples/agent.toml

@@ -17,7 +17,7 @@ connection_timeout_seconds = 5
 worker_threads = 1
 
 [store]
-base_url = "https://store.example.invalid"
+base_url = "https://netbox.mrblake.cc"
 plugin_endpoint_template = "/api/v1/plugins/{plugin_slug}/"
 release_endpoint_template = "/api/v1/plugins/{plugin_slug}/releases/{version}/"
 timeout_seconds = 10
@@ -26,7 +26,7 @@ max_artifact_bytes = 268435456
 allow_private_addresses = false
 allow_http_for_testing = false
 # Add an artifact origin only when releases intentionally use that origin.
-allowed_hosts = ["store.example.invalid"]
+allowed_hosts = ["netbox.mrblake.cc", "git.mrblake.cc", "github.com", "codeload.github.com"]
 # bearer_token_file = "/etc/netbox-store-agent/store.token"
 # ca_file = "/etc/ssl/certs/internal-store-ca.pem"
 
@@ -42,6 +42,11 @@ manage_path = "/opt/netbox/netbox/manage.py"
 systemctl_path = "/usr/bin/systemctl"
 services = ["netbox", "netbox-rq"]
 command_timeout_seconds = 900
+unshare_path = "/usr/bin/unshare"
+setpriv_path = "/usr/bin/setpriv"
+# Dedicated unprivileged account used only for reviewed source builds.
+source_build_uid = 65534
+source_build_gid = 65534
 
 [policy]
 netbox_version = "4.6.8"