diff --git a/deploy/homeagent.service b/deploy/hologramagent.service similarity index 84% rename from deploy/homeagent.service rename to deploy/hologramagent.service index 013ac613..8f636ed0 100644 --- a/deploy/homeagent.service +++ b/deploy/hologramagent.service @@ -1,6 +1,6 @@ [Unit] -Description=HomeAgent - 24/7 AI Butler -Documentation=https://github.com/trueagent/HomeAgent +Description=HologramAgent - 24/7 AI Butler +Documentation=https://github.com/trueagent/HologramAgent After=network-online.target docker.service Wants=network-online.target @@ -28,9 +28,9 @@ Wants=network-online.target Type=exec # ★ guard 模式(与本机生产实例一致)。 -# 数据目录默认 /var/lib/homeagent(Debian 惯例);迁移到别的目录时 +# 数据目录默认 /var/lib/hologram(Debian 惯例);迁移到别的目录时 # 必须**同时**改这里和 core.daemon.data_dir —— 两者不等价,见 README。 -ExecStart=/usr/bin/homed --role=guard --data /var/lib/homeagent +ExecStart=/usr/bin/homed --role=guard --data /var/lib/hologram Restart=always RestartSec=10 @@ -58,11 +58,11 @@ TimeoutStopSec=25s # 一起收,双保险不留孤儿进程。 KillMode=control-group -WorkingDirectory=/var/lib/homeagent -StateDirectory=homeagent +WorkingDirectory=/var/lib/hologram +StateDirectory=hologram Environment=HOME=/root # onnx 运行库随包安装(不在 /opt,见 packaging/package-linux.sh) -Environment=ONNXRUNTIME_DIR=/usr/lib/homeagent/onnxruntime +Environment=ONNXRUNTIME_DIR=/usr/lib/hologram/onnxruntime # ★ 主密钥生产注入(security/key.go) # @@ -74,8 +74,8 @@ Environment=ONNXRUNTIME_DIR=/usr/lib/homeagent/onnxruntime # 不在磁盘留副本、也不进 environ。 # # 生成密钥(一次性,然后妥善保管): -# head -c 32 /dev/urandom | xxd -p -c 64 | sudo tee /etc/homeagent/security.key -# sudo chmod 600 /etc/homeagent/security.key +# head -c 32 /dev/urandom | xxd -p -c 64 | sudo tee /etc/hologram/security.key +# sudo chmod 600 /etc/hologram/security.key # # ⚠ 该文件就是数据的主密钥:**丢了它,已加密的变量全部解不开**(响亮失败, # 不会静默重建)。请与备份一并保管。 @@ -83,11 +83,11 @@ Environment=ONNXRUNTIME_DIR=/usr/lib/homeagent/onnxruntime # ⚠ 未配置时**不要**留一个空文件 —— 凭据目录一旦被设置而凭据缺失,内核会 # **拒绝启动**(不静默回退到磁盘密钥)。若要用磁盘密钥路径,删掉下面这行。 # -# ⚠ 从旧版(/var/lib/homeagent/security.key 磁盘钥)升级时: +# ⚠ 从旧版(/var/lib/homeagent/security.key,改名前的路径)升级时: # 内核支持"磁盘钥 + 内嵌钥"并存解密(AdditionalDecryptKeys), -# 所以先放 /etc/homeagent/security.key 与旧磁盘钥**同一份内容**再启用本行, +# 所以先放 /etc/hologram/security.key 与旧磁盘钥**同一份内容**再启用本行, # 否则旧密文解不开。 -LoadCredential=homed_security_key:/etc/homeagent/security.key +LoadCredential=homed_security_key:/etc/hologram/security.key # Security hardening NoNewPrivileges=true @@ -97,9 +97,9 @@ PrivateTmp=true PrivateDevices=false DevicePolicy=closed # 只允许读主密钥所在目录,其余系统路径保持只读 -ReadOnlyPaths=/etc/homeagent +ReadOnlyPaths=/etc/hologram # 插件需要写自己目录 + 数据目录 + 插件沙箱 -ReadWritePaths=/var/lib/homeagent +ReadWritePaths=/var/lib/hologram # Audio devices DeviceAllow=/dev/snd rw DeviceAllow=/dev/dsp rw diff --git a/deploy/packaging/linux/homeagent.spec b/deploy/packaging/linux/hologramagent.spec similarity index 100% rename from deploy/packaging/linux/homeagent.spec rename to deploy/packaging/linux/hologramagent.spec diff --git a/deploy/systemd/embed-sidecar.service b/deploy/systemd/embed-sidecar.service index 49220bfb..ffe03497 100644 --- a/deploy/systemd/embed-sidecar.service +++ b/deploy/systemd/embed-sidecar.service @@ -1,5 +1,5 @@ [Unit] -Description=Jina v5-omni-nano Embedding Sidecar for HomeAgent +Description=Jina v5-omni-nano Embedding Sidecar for HologramAgent After=network.target [Service]