6 Commits

Include renames

Author	SHA1	Message	Date
adminandClaude Opus 5.5	f1b9b41214	R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 18:56:13 +02:00
adminandClaude Opus 5.5	c3d08b4821	OS updates host fast lane + true tunnel status + fast leg: wrapper host layer (R12 appliance proof from the root-owned install record, R14 kernel/boot/firmware refused), select pending-fast, one call per layer, host-side version checks, restart scan only after an install, reboot-needed for PID 1/lxc-start; the leg runs the host step after a healthy guest step; GuestTunnelProber reads the cloudflared container + its readiness check (R-841) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-04 12:54:02 +02:00
admin	1c8a67eece	R-106 + R-109: the DR recipe records the resolved namespace and names the backup target (v0.118.0) ... Both defects were live on both demo boxes: the recipe said namespace "root" while storage.cfg said demo-felhom/demo-hp, and it never named which of two content=backup dir storages holds the local archives. R-106: the namespace came from the listed snapshot, but PBS omits `ns` per item once the list is namespace-scoped, so it was always empty and normalised to "root". It now resolves from the pbs STORAGE (storage.cfg's `namespace`) — the same field vzdump makes PVE read, so the recipe cannot disagree with the backup. R-109: backup_target resolves from the primary tier of cfg.Backup.BackupTiers(), the function the scheduler consults, and carries the mountpoint that separates /mnt/hdd_1 from /var/lib/vz. The resolver reports the tier IN EFFECT (daemon-start config), not agent.json on disk — a target move rewrites the file and deliberately does not restart. Unresolvable is recorded as unresolvable: resolved|unknown plus a distinct reason, never a default, an empty string, or a placeholder. Needs hub v0.83.0 — AssembleDRRecipe allow-lists top-level keys, so backup_target would otherwise be stored intact and dropped before any operator saw it. 9 tests, 4 red-proofs (each mutation asserted to have landed). Suite rc=0, 29 ok.	2026-07-30 13:11:08 +02:00
adminandClaude Opus 4.8	bf8e3be3f4	agent: report served local-API leaf fingerprint (hub re-key detection, Part A) v0.48.0 ... HostReport.LeafFingerprint rides the served fp (from EnsureLeaf) on every report; empty when local API disabled. Collector.SetLeafFingerprint threads it like Capabilities. Hub watches it for a re-key. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Pg8ANF97SEeKYSN5Jxw3qJ	2026-06-29 23:14:52 +02:00
adminandClaude Opus 4.8	fbe113011d	v0.39.0 — DR-recipe completion: live PBS coord + drop role/restic_repo_coord from v1 drive shape ... Live PBS coord: new internal/pbs/live_reporter.go (LiveSnapshotReporter implements hub.PBSReporter via the cheap Client.Snapshots() list with last-known-good fallback, bounded by an 8s timeout, list-only — never triggers a verify). Closes the gap where the recipe's pbs block was omitted whenever the verify-loop SnapshotStore was empty (one-shot collect + the first ~6h after a daemon restart). SnapshotStore.Get added (per-datastore LKG). Wired into the collector in both runDaemon and runSelftestHub; the verify loop keeps Recording into the SAME shared store via one hoisted pbsTargets. v1 host-half drive shape: dropped drives[].role (hub/operator-owned manifest concept, not host-derivable) and drives[].restic_repo_coord (named a backup tier that doesn't exist). Drive shape is now {durable_id, mount_path, intent, fs_type?, total_bytes}. Hub reads drives as json.RawMessage → no hub struct change; goldens re-pinned byte-identical (agent + hub copies). Tests: live_reporter_test.go (T1 load-bearing coord-without-verify + T2..T6), TestDRRecipeHostHalf_V1DriveShape; each companion demonstrated to fail pre-fix then reverted. go build/vet/test green. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-16 20:25:09 +02:00
adminandClaude Opus 4.8	8abc1b8852	agent v0.38.0: DR recipe — emit secret-free storage/guest/PBS half in host-report ... DR recipe slice (agent half), grounded in SPIKE-dr-recipe-2026-06-16. Additive `dr_recipe` host-report section = the non-secret reconstruction scaffolding the operator must rebuild before PBS bytes can land. Built by pure BuildDRRecipeHostHalf from facts the report already collects (no new reads): guests[] sizing, drives[] (user-data by durable_id/role/mount/intent), pve_storage[] (storage.cfg), pbs coordinates. BOUNDARY (Phase-1 lesson): every field is an identifier/intent/size/coordinate — never a key/password/token/hash/ENC:. PBS key stays in escrow; restic password stays in escrow; the recipe names only the coordinates the restore targets. Tests: BuildDRRecipeHostHalf selection, NoPBS, NoSecrets (boundary mirror), dr_recipe key-set in the cross-repo golden contract test. recipe_version=1, ignore-unknown on read. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-16 18:32:15 +02:00