菜单
Operate edgesentry-rs in production — check health, query metrics, run backups, restore from backup. Use when monitoring or maintaining a deployed instance.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Add a new rule to an edgesentry-rs safety profile. Use when implementing a new regulation-backed detection rule (PROXIMITY_ALERT, ZONE_ENTRY, etc.).
Deploy edgesentry-rs to a new server — TLS, PostgreSQL, S3/MinIO, systemd. Use when setting up a new deployment environment.
Build, test, and lint edgesentry-rs before committing. Use before every commit or when verifying the workspace is clean.
Scaffold a new crate in the edgesentry-rs Cargo workspace. Use when adding a new pipeline stage or utility crate.
Publish a new edgesentry-rs release to crates.io. Use when cutting a release after all tests pass.
Verify an edgesentry audit chain using the eds CLI. Use to confirm a chain is intact and a payload matches its AuditRecord.
| name | eds-ops |
| description | Operate edgesentry-rs in production — check health, query metrics, run backups, restore from backup. Use when monitoring or maintaining a deployed instance. |
| license | Apache-2.0 |
| compatibility | Requires access to deployed instance, Prometheus, PostgreSQL, S3/MinIO |
| metadata | {"repo":"edgesentry-rs"} |
curl -sf https://<host>/health | jq .
Expected: {"status":"ok","chain_head":<n>}
| Metric | Alert threshold |
|---|---|
edgesentry_ingest_errors_total | > 0 sustained for 5 min |
edgesentry_chain_lag_seconds | > 30 |
edgesentry_verify_failures_total | Any non-zero value |
Full metric reference: references/operations.md
# PostgreSQL
pg_basebackup -h <host> -U edgesentry -D /backup/pg -Ft -z -P
# S3/MinIO — verify Object Lock is enabled before treating as tamper-proof
aws s3 ls s3://edgesentry-audit --recursive | wc -l
# Stop service
systemctl stop edgesentry-ingest
# Restore PostgreSQL
pg_restore -h <host> -U edgesentry -d edgesentry /backup/pg/base.tar.gz
# Restart and verify chain
systemctl start edgesentry-ingest
eds audit verify-chain --chain <latest-export>.json
See references/operations.md for RTO/RPO targets, alert routing, and OpenTelemetry configuration.