admin/felhom-agent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d5c769173b5e651355eecdee37f692bf7653c601
felhom-agent/internal
T
History
admin 50751b8901 F-LEAK third attempt: band-scoped fenced destroy (v0.110.0) 
The per-VM ACL is consumed by the destroy it authorises (PVE remove_vm_access,
LXC.pm:906), so it works once per slot. Fourth root-fenced exception, band-enforced in
sudoers literally + in code + at the caller. API destroy still tried first.
2026-07-28 11:28:54 +02:00
..
authz
slice 10B: operator-signed destructive completion (offline key + signing CLI) (v0.16.0)
2026-06-10 20:14:16 +02:00
backup
docs: correct inflight.go's DEFERS claim (F-A1)
2026-07-28 08:50:23 +02:00
capability
fix(v0.92.0): the guestnet probes need their own sudoers grant (found live)
2026-07-21 12:32:27 +02:00
config
v0.99.0 — R-82 operator rulings: 2-week offsite retention + one backup at a time
2026-07-26 15:05:54 +02:00
desired
v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep
2026-07-11 16:24:07 +02:00
dr
dr: recovered WG-key install + host_loss directive→restore-PLAN (S5 safe halves)
2026-07-04 21:06:31 +02:00
escrow
escrow: a recovery code can no longer contain a hyphenated word (v0.93.0)
2026-07-21 14:46:51 +02:00
fasttick
v0.90.0 — guest RAM resize (R-24) + fast-tick-until-convergence (R-28)
2026-07-17 19:09:40 +02:00
felhomsshd
fix(felhomsshd): operator_peer_configured from belt @operator_ips (agent-readable)
2026-07-05 22:58:58 +02:00
guesthook
F11 matrix-correction: re-arm on guest-blind (active mounts not inherited by rebooted guest — live finding)
2026-07-12 07:58:39 +02:00
guestnet
v0.96.0 — R-50 island NIC: provision attaches the guest island net1
2026-07-25 14:16:23 +02:00
hub
v0.95.0: SMART coverage — union-path drives + LVM/dm root + device model
2026-07-25 08:21:45 +02:00
lanresolver
v0.29.1: lanresolver restarts dnsmasq on change (SIGHUP doesn't re-read config)
2026-06-13 16:56:39 +02:00
localapi
gofmt: normalize internal/localapi (whitespace only)
2026-07-28 11:15:45 +02:00
log
v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep
2026-07-11 16:24:07 +02:00
mgmtplane
feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0
2026-07-05 18:49:27 +02:00
pbs
v0.91.2 — log a healthy credential probe at Debug
2026-07-21 10:20:10 +02:00
pbsdr
test: assert the agent upgrade alone is hash-neutral (no spurious re-apply at STOP-1)
2026-07-21 10:15:24 +02:00
poke
v0.89.0: pbsdr self-grant (R-22) + escrow config live-reload + agent-plane poke listener (Direction-2a)
2026-07-16 22:47:22 +02:00
provision
agent v0.86.0: DR-tier-by-default — capability inactive state (GatedBy/GateActive, pbsdr gate via DRConfigured) + F-3 root-run provision parent ownership
2026-07-12 20:06:27 +02:00
proxmox
F-LEAK third attempt: band-scoped fenced destroy (v0.110.0)
2026-07-28 11:28:54 +02:00
reconcile
F-LEAK third attempt: band-scoped fenced destroy (v0.110.0)
2026-07-28 11:28:54 +02:00
selfheal
agent v0.85.0 WIP: F12/F11/F10/F9/F2/F1 boot-recovery plane + appliance self-heal (pre-build)
2026-07-12 07:48:49 +02:00
selfupdate
v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep
2026-07-11 16:24:07 +02:00
signedjobs
v0.83.0: observability pass — always-DEBUG capture ring + GET /debug/logs + heartbeat log-pull + gap-fill sweep
2026-07-11 16:24:07 +02:00
storage
v0.95.0: SMART coverage — union-path drives + LVM/dm root + device model
2026-07-25 08:21:45 +02:00
wgtunnel
v0.90.0 — guest RAM resize (R-24) + fast-tick-until-convergence (R-28)
2026-07-17 19:09:40 +02:00