admin/felhom-agent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
130e3ed8829e98601f461d2c951cfa193164e49a
felhom-agent/internal
T
History
admin be398f92e8 R-99: the PBS phantom WARN names the cleanup runbook (09 §3 decision 140) 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-06 11:24:45 +02:00
..
authz
…
backup
R-99: the PBS phantom WARN names the cleanup runbook (09 §3 decision 140)
2026-10-06 11:24:45 +02:00
capability
R-444: weekly guest disk trim (pct fstrim) outside the night, under the heavy-op gate
2026-10-06 11:24:45 +02:00
config
R-444: weekly guest disk trim (pct fstrim) outside the night, under the heavy-op gate
2026-10-06 11:24:45 +02:00
desired
v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep
2026-07-11 16:24:07 +02:00
dr
…
escrow
R-861 review fixes: the signed update hands the A/B wrapper a root-owned copy of the hashed bytes; mount units accept no Wants/Requires/Before and no continuation lines; the escrow read walks the path without following any symlink
2026-10-05 12:13:42 +02:00
fasttick
v0.90.0 — guest RAM resize (R-24) + fast-tick-until-convergence (R-28)
2026-07-17 19:09:40 +02:00
felhomsshd
R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned
2026-10-05 12:00:43 +02:00
fstrim
R-444: weekly guest disk trim (pct fstrim) outside the night, under the heavy-op gate
2026-10-06 11:24:45 +02:00
guesthook
R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned
2026-10-05 12:00:43 +02:00
guestnet
v0.96.0 — R-50 island NIC: provision attaches the guest island net1
2026-07-25 14:16:23 +02:00
httpx
R-344: restore the idle-connection timeout our hand-rolled transports lost
2026-08-20 11:09:39 +02:00
hub
R-444: weekly guest disk trim (pct fstrim) outside the night, under the heavy-op gate
2026-10-06 11:24:45 +02:00
lanresolver
R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)
2026-10-05 18:56:13 +02:00
localapi
R-25 (agent half): the format answer carries the NEW filesystem's UUID, bound to the durable id
2026-10-05 21:16:11 +02:00
log
v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep
2026-07-11 16:24:07 +02:00
mgmtplane
…
osupdate
R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned
2026-10-05 12:00:43 +02:00
pbs
R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)
2026-10-05 18:56:13 +02:00
pbsdr
v0.128.0 — R-221: the escrow seed is asserted every tick, not remembered once
2026-08-08 16:29:13 +02:00
poke
v0.89.0: pbsdr self-grant (R-22) + escrow config live-reload + agent-plane poke listener (Direction-2a)
2026-07-16 22:47:22 +02:00
privapplytest
R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned
2026-10-05 12:00:43 +02:00
provision
R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned
2026-10-05 12:00:43 +02:00
proxmox
restore test takes only this box's archives (R-727): an archive encrypted with another key is another box's
2026-09-30 10:33:52 +02:00
reconcile
R-840: the config bundle — a signed agent_config_update brings a box's root-owned files (sudoers, wrappers, units)
2026-10-04 19:36:58 +02:00
restorespace
v0.133.0: a restore-test can never fill a box's disk; leftovers retried on a timer (R-672, R-673)
2026-09-24 16:23:15 +02:00
selfheal
agent v0.85.0 WIP: F12/F11/F10/F9/F2/F1 boot-recovery plane + appliance self-heal (pre-build)
2026-07-12 07:48:49 +02:00
selfupdate
R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned
2026-10-05 12:00:43 +02:00
signedjobs
Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the version report (facts mode -> host report system stanza, R-852), guest restart scan every pass (R-849), the crash guard (kernel.panic=10, the 3rd unclean stop in 60 min stays off, 24 h re-arm)
2026-10-04 16:14:36 +02:00
storage
R-25 (agent half): the format answer carries the NEW filesystem's UUID, bound to the durable id
2026-10-05 21:16:11 +02:00
wgtunnel
R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned
2026-10-05 12:00:43 +02:00