admin/felhom-agent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
72d6132907291d0b915b0ae1baacd647c27c48d9
felhom-agent/internal
T
History
admin 72d6132907 fix(felhomsshd): reachable=listener-present (belt blocks a dial); operator/key configured from persistent state 
reachable now checks a bound listener via ss (the belt correctly drops even
localhost→felhom-sshd, so a dial always failed). operator_peer_configured derives
from the persistent wg-felhom.conf (2nd AllowedIPs /32) + operator_key from the
installed authorized_keys file — accurate immediately after an agent restart,
before the next desired-state fetch.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6
2026-07-05 22:57:35 +02:00
..
authz
slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)
2026-06-10 20:14:16 +02:00
backup
agent v0.51.0: local vzdump retention default (--prune-backups keep-last=3)
2026-06-30 19:44:07 +02:00
capability
feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)
2026-07-05 15:32:15 +02:00
config
feat(felhomsshd): dedicated OOB sshd instance + port-adaptive belt (H1 Parts 2-4 agent)
2026-07-05 22:27:02 +02:00
desired
dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)
2026-07-04 21:06:31 +02:00
dr
dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)
2026-07-04 21:06:31 +02:00
escrow
wgtunnel: S3 Part 3 — FELHOM_WG sudoers + capabilities + config (DEFAULT OFF) + main wiring + escrow join
2026-07-04 07:14:33 +02:00
felhomsshd
fix(felhomsshd): reachable=listener-present (belt blocks a dial); operator/key configured from persistent state
2026-07-05 22:57:35 +02:00
guesthook
v0.63.0: B3+B2 fresh-install fixes — TokenStore reload-on-miss + guesthook snippets dir
2026-07-03 15:48:24 +02:00
hub
test(hub): collector OOB stanza wiring (H1)
2026-07-05 22:30:01 +02:00
lanresolver
v0.29.1: lanresolver restarts dnsmasq on change (SIGHUP doesn't re-read config)
2026-06-13 16:56:39 +02:00
localapi
v0.63.0: B3+B2 fresh-install fixes — TokenStore reload-on-miss + guesthook snippets dir
2026-07-03 15:48:24 +02:00
log
…
mgmtplane
feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0
2026-07-05 18:49:27 +02:00
pbs
pbs: namespace-aware client for per-customer offsite tenancy (S4)
2026-07-04 16:12:15 +02:00
provision
controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)
2026-06-29 19:42:30 +02:00
proxmox
pbs: namespace-aware client for per-customer offsite tenancy (S4)
2026-07-04 16:12:15 +02:00
reconcile
feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)
2026-07-05 15:32:15 +02:00
selfupdate
feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)
2026-07-05 15:32:15 +02:00
signedjobs
feat: D1 Part 2 — agent self-update Go plumbing (op class, opsign, executor, commit, report)
2026-07-05 15:32:15 +02:00
storage
v0.61.0: audit fixes B1 (random temp staging) + D1 (mkfs wrapper member/RO re-checks) + D2 (empty-lsblk fail-safe) + D3 (blank-format anti-retarget)
2026-07-03 07:25:50 +02:00
wgtunnel
feat(wgtunnel): render operator OOB /32 into wg-felhom AllowedIPs (H1 Part 1, [OF-1])
2026-07-05 22:08:04 +02:00