Fix updater Go cache environment in transient systemd units

README.md

@@ -2,7 +2,7 @@
 
 DebTik is a Debian/Proxmox router appliance with an embedded web interface, REST API and RouterOS-style CLI. It manages network interfaces, routing, firewall/NAT, DHCP/DNS, WireGuard, IPsec, PPP, VRRP and AeroTUN. AeroTUN v3 uses pinned peer identities and encrypted tunnels; it works with native TUN or a veth fallback when `/dev/net/tun` is unavailable.
 
-Current release: **1.2.0**. See [functionality corrections and verification](docs/functionality-fixes.md) for network persistence, firewall isolation/IPv6, service error handling and certificate renewal changes.
+Current release: **1.2.1**. See [functionality corrections and verification](docs/functionality-fixes.md) for network persistence, firewall isolation/IPv6, service error handling and certificate renewal changes.
 
 ## Install
 

VERSION

@@ -1 +1 @@
-1.2.0
+1.2.1

docs/functionality-fixes.md

@@ -1,4 +1,4 @@
-# DebTik 1.2.0 — functionality corrections
+# DebTik 1.2.1 — functionality corrections
 
 This release addresses the 2026-10-31 functionality review. Changes were tested
 before deployment; disruptive tests use private mount and network namespaces.
@@ -70,3 +70,11 @@ Kernel integration tests use private namespaces and temporary filesystem binds:
 Public CA issuance is not triggered by tests. Renewal selection and account-key
 reuse are unit tested; actual renewal depends on the configured public domain
 and challenge connectivity.
+
+## Legacy updater environment
+
+Version 1.2.1 explicitly sets Go cache paths because transient systemd units may
+omit HOME. An existing 1.1.0 helper can fail before installing this fix with
+`module cache not found`. Such an installation needs its first upgrade started
+with HOME set, or the current helper installed once from this checkout.
+Subsequent updates use the corrected helper automatically.

scripts/debtik-update

@@ -1,6 +1,11 @@
 #!/usr/bin/env bash
 set -Eeuo pipefail
 umask 077
+# Transient systemd units may omit HOME; Go needs explicit cache locations.
+export HOME=${HOME:-/root}
+export GOPATH=${GOPATH:-/var/cache/debtik/go}
+export GOCACHE=${GOCACHE:-/var/cache/debtik/go-build}
+mkdir -p "$GOPATH" "$GOCACHE"
 base=/var/lib/debtik/update
 mkdir -p "$base"
 exec 9>"$base/lock"