Commit Graph

  • e593fb277a v0.56.0: resolve a raw enrolled drive's durable-id from the mount table admin 2026-07-01 18:29:22 +02:00
  • 4f8d2fcb57 docs: REPORT for agent v0.55.0 (Impl-2a discovery + registry tracking; validated) admin 2026-07-01 17:38:52 +02:00
  • 91f6a26490 v0.55.0: raw-device discovery + registry-sourced drive tracking (Impl-2a) admin 2026-07-01 17:33:49 +02:00
  • 066e3bf153 docs: REPORT for agent v0.54.0 (Impl-1 format-safety; live-validated) admin 2026-07-01 17:01:08 +02:00
  • 52098302ab v0.54.0: format-safety foundation — unclaimed-disk guard + guarded-mkfs wrapper admin 2026-07-01 16:52:31 +02:00
  • 05f22a9ab4 docs: REPORT for agent v0.53.0 (pool-scoped restore; supervised swap validated) admin 2026-07-01 13:01:29 +02:00
  • 7639ab5c4b v0.53.0: restore guests INTO the felhom pool (pool-scoped-ACL enabler) admin 2026-07-01 12:32:41 +02:00
  • 33e3443545 docs: REPORT for agent v0.52.0 (CPU/RAM cap; T-A scratch proof; manifest follow-up) admin 2026-07-01 08:19:14 +02:00
  • 0573ec95c1 v0.52.0: operator-opt-in CPU/RAM cap for the provisioned guest (-cores/-memory) admin 2026-07-01 08:03:57 +02:00
  • 1502ca644a docs: REPORT for agent v0.51.0 (vzdump retention, live-validated keep-last=3) admin 2026-06-30 20:03:42 +02:00
  • 06e0bc9c25 agent v0.51.0: local vzdump retention default (--prune-backups keep-last=3) admin 2026-06-30 19:44:07 +02:00
  • 79eb0a8486 docs: REPORT for v0.50.0 (NAS Part A1, sim-validated A-D) admin 2026-06-30 11:40:08 +02:00
  • 63aa63d0d6 agent v0.50.0: NAS network storage Part A1 (NFS/SMB automount foundation) admin 2026-06-30 11:12:27 +02:00
  • 7aeb7caefe docs: §D supervised reboot — F2-a + F2-b live-validated (both findings CLOSED) admin 2026-06-30 10:04:58 +02:00
  • d077c8e4dd agent: stale-lock start allows the benign LXC nesting WARNINGS advisory admin 2026-06-30 09:07:50 +02:00
  • 1c078b943d agent: stale-lock guard uses tasks?source=active (PVE 9.x rejects ?running=1) admin 2026-06-30 09:06:01 +02:00
  • 6e38e2f921 agent v0.49.0: reboot-during-backup stale-lock recovery (F2-b) + shared-parent script redeploy fix (F2-a) admin 2026-06-30 09:00:32 +02:00
  • 81954c3d2a docs: REPORT for v0.48.0 (agent reports served leaf fp, Part A) admin 2026-06-29 23:32:11 +02:00
  • bf8e3be3f4 agent: report served local-API leaf fingerprint (hub re-key detection, Part A) v0.48.0 admin 2026-06-29 23:14:52 +02:00
  • 61f9b4dcc3 docs: REPORT + README for v0.47.0 F1 verify hardening (live rollback re-test PASS) admin 2026-06-29 22:50:16 +02:00
  • 3844df7c23 controllerswap: F1 verify hardening — reject crash-looping no-healthcheck image v0.47.0 admin 2026-06-29 22:45:41 +02:00
  • bb548e3c5a docs: REPORT for v0.46.0 leaf-regenerate loud-log (live-validated) admin 2026-06-29 22:01:40 +02:00
  • 9b0d6c2c82 agent: EnsureLeaf signals + loud-WARNs a regenerated leaf (prevention B.1) v0.46.0 admin 2026-06-29 21:45:25 +02:00
  • de6b72651b docs: REPORT + README for v0.45.0 controller-swap (stdin tee + FELHOM_CONTROLLERSWAP) admin 2026-06-29 19:45:17 +02:00
  • 8a4ccab3e6 controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0) admin 2026-06-29 19:42:30 +02:00
  • 61c89a7efa docs: REPORT + README for v0.44.0 capability self-probe admin 2026-06-29 18:57:22 +02:00
  • 25024d9dda capability: agent privileged-capability self-probe (manifest + build-test + runtime snapshot) v0.44.0 admin 2026-06-29 18:43:49 +02:00
  • 19582046ba REPORT: sudoers completeness audit — multi-drive restored; controller-swap surfaced admin 2026-06-29 16:06:40 +02:00
  • 55888e5686 sudoers: close non-root allowlist gaps (lxc-info, make-private, restart dnsmasq, pct reboot/onboot) — restores multi-drive admin 2026-06-29 15:58:41 +02:00
  • c3020ee3a8 REPORT: v0.43.0 BUNDLE slice (canonical unit + Gitea publish + live install) admin 2026-06-28 09:03:23 +02:00
  • a8d14fc384 sudoers: escape commas in lvs/lsblk -o arg lists (visudo -cf rejected the file) admin 2026-06-28 08:56:16 +02:00
  • 29aeaa6bb4 v0.43.0: canonical systemd unit + publish agent binary + golden to Gitea (BUNDLE slice) admin 2026-06-28 08:38:01 +02:00
  • aaa276a7b9 build-golden.sh: default controller image → current (0.85.1); golden rebuilt admin 2026-06-27 11:56:40 +02:00
  • 2dcee2d7e8 docs: v0.42.0 controller-swap — README endpoint + REPORT (live-validated) admin 2026-06-26 21:43:22 +02:00
  • b17d07bf2d fix: register controller-swap in --selftest allowlist admin 2026-06-26 21:29:17 +02:00
  • 6f14b66191 v0.42.0: agentic controller update — in-guest image swap + rollback (Phase 1) admin 2026-06-26 21:26:12 +02:00
  • 4725396c81 REPORT/CHANGELOG: F3 capstone live-validated (re-provision onboot:1 + host-reboot auto-start) admin 2026-06-24 12:48:04 +02:00
  • 3b752b48f2 REPORT: agent v0.41.0 deployed to felhom-pve; 9201 remediated onboot:1 admin 2026-06-24 11:22:43 +02:00
  • 166a1c8bcb v0.41.0: provision back-half sets onboot:1 so customer guests auto-start after host reboot (F3) admin 2026-06-24 11:20:45 +02:00
  • db95d5106e REPORT: v0.40.0 live acceptance DONE — golden rebuilt (mp0+mp1 included), 9201 re-provisioned, /mnt/sys_drive separate+warning-cleared+PBS-covered admin 2026-06-23 16:48:39 +02:00
  • 64b7436015 REPORT: v0.40.0 third CT volume — code shipped + agent v0.40.0 deployed live; golden/re-provision pending operator secrets+CHECKPOINT admin 2026-06-23 16:30:11 +02:00
  • 459dad954b v0.40.0: third CT volume — SSD user-data (/mnt/sys_drive, mp1) baked + -sysdata-grow admin 2026-06-23 16:25:14 +02:00
  • b908b9a8e5 REPORT: v0.39.0 DR-recipe completion (live PBS coord + v1 drive-shape) — live-validated admin 2026-06-16 20:34:31 +02:00
  • fbe113011d v0.39.0 — DR-recipe completion: live PBS coord + drop role/restic_repo_coord from v1 drive shape admin 2026-06-16 20:25:09 +02:00
  • 8abc1b8852 agent v0.38.0: DR recipe — emit secret-free storage/guest/PBS half in host-report admin 2026-06-16 18:32:15 +02:00
  • c8d7ec6bb5 docs(REPORT): live host-reboot x2 acceptance — sdb<->sdc swap tolerated by UUID admin 2026-06-16 18:08:29 +02:00
  • 3e39dbb4f8 agent v0.37.0: re-assert mounted-but-DISABLED units (live felhom-usb fix) admin 2026-06-16 17:55:48 +02:00
  • a621f4c5a0 agent v0.37.0: host-reboot remount re-resolves enrolled drives by fs-UUID admin 2026-06-16 17:49:00 +02:00
  • 437f096d9d docs: REPORT — storage lifecycle + acceptance sweep (agent half) admin 2026-06-15 20:42:04 +02:00
  • 1e205840dc agent v0.36.7: isolate shared parent only on create (no peer-group churn) admin 2026-06-15 20:31:38 +02:00
  • 2b17419e60 agent v0.36.6: shared parent make-private before make-shared (ROOT CAUSE of double-bind) admin 2026-06-15 20:28:57 +02:00
  • 2da4c38773 agent v0.36.5: AttachDrive normalizes to exactly one bind (converges stacked binds) admin 2026-06-15 20:24:42 +02:00
  • a356d6def4 agent v0.36.4: serialize AttachDrive/DetachDrive (no double-bind TOCTOU race) admin 2026-06-15 20:19:07 +02:00
  • cff9284453 agent v0.36.3: DetachDrive loop-umounts stacked binds (full detach) admin 2026-06-15 20:16:47 +02:00
  • 038f0ecd5d agent v0.36.2: eject keeps raw mounted (reconnectable, like decommission) admin 2026-06-15 20:12:44 +02:00
  • 281c7b7e3f agent v0.36.1: decommission keeps raw mounted (re-enrollable) admin 2026-06-15 20:06:23 +02:00
  • 05be509e6e agent v0.36.0: guest boot-id on /disks (deterministic guest-reboot recreate) admin 2026-06-15 19:13:15 +02:00
  • 9b4ae3df28 docs: REPORT — intermediary-mount re-architecture (agent half) admin 2026-06-15 18:01:49 +02:00
  • a2374ca679 agent v0.35.1: shared-parent unit runs before pve-guests on host boot admin 2026-06-15 17:58:52 +02:00
  • 26c6d1e4d1 agent v0.35.0: intermediary mount — guest-reboot re-propagation (load-bearing) admin 2026-06-15 17:26:32 +02:00
  • 3a9be73875 agent v0.34.0: intermediary mount model — shared parent + host-side attach/detach + reconcile admin 2026-06-15 16:29:32 +02:00
  • 44cdf82631 agent v0.33.0: C1 net — pre-start self-heal hook + decommission mp-delete admin 2026-06-15 16:11:10 +02:00
  • 2a4affc3a8 docs(claude): refine A4 live-test rule (pipeline-bypass is the line, not API-vs-UI) admin 2026-06-15 10:07:55 +02:00
  • 76f9cb5977 docs: REPORT for v0.32.0 self-serve decommission + intent-aware re-assert admin 2026-06-14 20:18:01 +02:00
  • f43697c881 v0.32.0: self-serve decommission endpoint + intent-aware re-assert (B2a) admin 2026-06-14 19:55:17 +02:00
  • 8e6d00a57f docs(claude): require real UI/user-flow live validation (A4) admin 2026-06-14 17:33:33 +02:00
  • 20e03902c8 docs: v0.31.0 CHANGELOG + REPORT + CLAUDE banner (F9/F20-BUG2/BUG3 live-validated) admin 2026-06-14 15:41:59 +02:00
  • 4777f8a221 F20-BUG3: run mkfs detached (survives request deadline + agent restart); v0.31.0 admin 2026-06-14 15:16:01 +02:00
  • 4cd1d024e9 F9: auto-re-assert enrolled guest data-drive binds on agent startup admin 2026-06-14 15:07:37 +02:00
  • a2a76e7624 F20-BUG2 + F9-reporting: /disks surfaces wipe_durable_id (gate scheme) + guest_attached admin 2026-06-14 15:00:56 +02:00
  • b566fbe57f docs(claude): codify trunk-based no-branches rule admin 2026-06-14 11:03:10 +02:00
  • 238ec02754 docs(claude): refresh stale version banner v0.13.0 -> v0.30.0 (current state summary) admin 2026-06-13 23:05:36 +02:00
  • 1c37a1689e report: AGENT-001 v0.30.0 merged + deployed to demo (verified, no rollback) admin 2026-06-13 22:31:53 +02:00
  • 8572a0f5f4 v0.30.0: AGENT-001 anti-retarget wipe fix (version bump + CHANGELOG) admin 2026-06-13 22:26:07 +02:00
  • 9370b6751d Merge AGENT-001 anti-retarget wipe fix (fix/agent-001-wipe-durable-reresolve) admin 2026-06-13 22:25:00 +02:00
  • d96e5bddd0 fix(AGENT-001): anti-retarget re-resolution for inline customer-confirmed wipe admin 2026-06-13 19:26:27 +02:00
  • d17b5ab45d docs: v0.29.1 lanresolver fix note in REPORT admin 2026-06-13 16:59:26 +02:00
  • 77fa5af592 v0.29.1: lanresolver restarts dnsmasq on change (SIGHUP doesn't re-read config) admin 2026-06-13 16:56:39 +02:00
  • 4d30444914 docs: REPORT for v0.29.0 storage split (live-validated via 9201 re-provision) admin 2026-06-13 16:44:00 +02:00
  • e8dab27653 golden: restart (not start) docker after daemon.json so overlay2 takes effect admin 2026-06-13 15:52:47 +02:00
  • 239f5f6440 golden: use classic overlay2 (containerd-snapshotter off) so images land on the data volume admin 2026-06-13 15:50:39 +02:00
  • d7d68fdd83 v0.29.0: OS/Docker-data storage split — golden + provision (Phase 1) admin 2026-06-13 15:38:26 +02:00
  • 5ab159521d spike: OS/Docker-data storage-split findings (Part B, build-nothing) admin 2026-06-13 14:46:20 +02:00
  • 716cbcd705 docs: REPORT.md for v0.28.0 (PBS re-target + decommission + restore-test fix) admin 2026-06-12 21:08:25 +02:00
  • b66c137aa7 restore-test: add rootfs override alongside bind-mount overrides admin 2026-06-12 20:54:46 +02:00
  • 7fb7ef5c3d restore-test: neutralize source bind-mount mountpoints for scratch restore admin 2026-06-12 20:50:35 +02:00
  • 109dd853a3 v0.28.0: backup re-target → felhom-pbs (offsite DR) + operator-signed decommission admin 2026-06-12 20:26:34 +02:00
  • 9ff0410755 docs(v0.27.0): REPORT — P3 self-heal reconcile done; live-validated on 9201 admin 2026-06-12 17:57:05 +02:00
  • 9580c8c75d fix(P3): record enrolled intent on the idempotent guest-attach path too admin 2026-06-12 17:51:52 +02:00
  • bbb284e378 fix: derive intent store path from the agent state dir (not LocalAPI.StateDir) admin 2026-06-12 17:50:24 +02:00
  • 237b85f420 agent v0.27.0: slice 10 P3 — self-heal watchdog reconcile + 4-state intent model admin 2026-06-12 17:49:25 +02:00
  • bc4f2b9168 docs(v0.26.0): REPORT — activation-UX done (guest-reboot endpoint + pending detection) admin 2026-06-12 17:26:33 +02:00
  • bb1692cbfb agent v0.26.0: slice 10 P2 activation — POST /guest/reboot (user-triggered) admin 2026-06-12 17:19:12 +02:00
  • 7336a87514 docs: live-activation finding (host inject blocked on unprivileged LXC) + decision admin 2026-06-12 16:18:11 +02:00
  • 13a02e4871 docs(v0.25.0): REPORT — slice 10 P1 spike + P2 passthrough; live-validated on 9201 admin 2026-06-12 15:55:03 +02:00
  • 5f87e9099e agent: golden P2B — controller container gets /mnt:rslave + /mnt made rshared admin 2026-06-12 15:42:50 +02:00
  • c1d04c28c1 agent v0.25.0: slice 10 P2 — bind enrolled user-data drives into the guest admin 2026-06-12 15:38:55 +02:00
  • d1bd44d2d5 docs(v0.24.0): REPORT for the eject role-gate; live-validated on guest 9201 admin 2026-06-12 09:50:28 +02:00
  • 7ae82e1d5d agent v0.24.0: role-gate the eject path (system/backup mounts unmount-protected at the agent) admin 2026-06-12 09:29:09 +02:00
  • 832b73e6e8 agent v0.23.0: expose per-drive capacity (total/used/fraction) in GET /disks for the controller capacity bar admin 2026-06-11 21:30:38 +02:00