admin abcc1e6833 R-1285: after every bundle install the agent asks the wrapper now on disk for the appliance-only policy pass, so a BYO host upgraded from an older wrapper loses our SSH drop-in in one update. Red-proved. Commit only, not released.

2026-10-25 21:46:38 +01:00

..

agent.example.json

v0.96.0 — R-50 island NIC: provision attaches the guest island net1

2026-07-25 14:16:23 +02:00

build-golden.sh

CHANGELOG v0.143.0 (R-840); build-golden.sh 3.2.0: GOLDEN_GUEST_PKGS — the approved guest release at bake time, first-night count

2026-10-04 20:08:16 +02:00

crash-guard.conf

Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the version report (facts mode -> host report system stanza, R-852), guest restart scan every pass (R-849), the crash guard (kernel.panic=10, the 3rd unclean stop in 60 min stays off, 24 h re-arm)

2026-10-04 16:14:36 +02:00

felhom-agent-limits.conf

feat(configs): D1 Part 1 — self-update host artifacts (guarded wrapper, rollback unit, limits drop-in, sudoers alias)

2026-07-05 15:20:37 +02:00

felhom-agent-rollback.service

feat(configs): D1 Part 1 — self-update host artifacts (guarded wrapper, rollback unit, limits drop-in, sudoers alias)

2026-07-05 15:20:37 +02:00

felhom-agent.service

v0.43.0: canonical systemd unit + publish agent binary + golden to Gitea (BUNDLE slice)

2026-06-28 08:38:01 +02:00

felhom-agent.sudoers

R-1124 + R-1012: forget a decommissioned drive that is gone; name an orphan thin device in a backup failure

2026-10-17 15:20:34 +02:00

felhom-backup-target-apply

v0.113.0 — E-2a: guarded backup-target wrapper + POST /backup/target

2026-07-29 09:05:59 +02:00

felhom-crash-guard

Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the version report (facts mode -> host report system stanza, R-852), guest restart scan every pass (R-849), the crash guard (kernel.panic=10, the 3rd unclean stop in 60 min stays off, 24 h re-arm)

2026-10-04 16:14:36 +02:00

felhom-crash-guard-check.service

Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the version report (facts mode -> host report system stanza, R-852), guest restart scan every pass (R-849), the crash guard (kernel.panic=10, the 3rd unclean stop in 60 min stays off, 24 h re-arm)

2026-10-04 16:14:36 +02:00

felhom-crash-guard-check.timer

Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the version report (facts mode -> host report system stanza, R-852), guest restart scan every pass (R-849), the crash guard (kernel.panic=10, the 3rd unclean stop in 60 min stays off, 24 h re-arm)

2026-10-04 16:14:36 +02:00

felhom-crash-guard.service

Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the version report (facts mode -> host report system stanza, R-852), guest restart scan every pass (R-849), the crash guard (kernel.panic=10, the 3rd unclean stop in 60 min stays off, 24 h re-arm)

2026-10-04 16:14:36 +02:00

felhom-grub-oneshot-entries.sh

R-836: the kernel lane — one-shot boot through the ESP flag, boot good / one self-revert, night step on a told night

2026-10-07 15:18:24 +02:00

felhom-grub-oneshot.sh

R-836: the kernel lane — one-shot boot through the ESP flag, boot good / one self-revert, night step on a told night

2026-10-07 15:18:24 +02:00

felhom-guest-hook.sh

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

felhom-internal-place

Security review of 912f7c1: the mkfs wrapper trusts no sibling claim; the internal-place helper fails closed

2026-10-16 04:02:00 +02:00

felhom-localapi-firewall.example

v0.96.0 — R-50 island NIC: provision attaches the guest island net1

2026-07-25 14:16:23 +02:00

felhom-mgmt-watchdog.service

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

felhom-mgmt-watchdog.sh

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

felhom-mgmt-watchdog.timer

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

felhom-mkfs-guarded.sh

Security review of 912f7c1: the mkfs wrapper trusts no sibling claim; the internal-place helper fails closed

2026-10-16 04:02:00 +02:00

felhom-oob-nft.service

feat(configs): OOB static belt table + loader unit + felhom-op sudoers (H1 Part 5)

2026-07-05 22:33:47 +02:00

felhom-oob.nft

feat(configs): OOB static belt table + loader unit + felhom-op sudoers (H1 Part 5)

2026-07-05 22:33:47 +02:00

felhom-op.sudoers

R-861 (a) A1 + (b) B2: the image ref goes to a root verb that checks it; the agent's in-guest tee grant is gone; felhom-op's pct lines are exact (09 §3 decision 165)

2026-10-07 10:19:28 +02:00

felhom-os-apply

R-1285: after every bundle install the agent asks the wrapper now on disk for the appliance-only policy pass, so a BYO host upgraded from an older wrapper loses our SSH drop-in in one update. Red-proved. Commit only, not released.

2026-10-25 21:46:38 +01:00

felhom-pbs-apply

v0.91.0 — the DR tier can no longer be applied and dead at the same time (R-39 + R-50b(a))

2026-07-21 10:12:31 +02:00

felhom-priv-apply

R-1124 + R-1012: forget a decommissioned drive that is gone; name an orphan thin device in a backup failure

2026-10-17 15:20:34 +02:00

felhom-privsep.tmpfiles

feat(mgmtplane): break-glass privsep-dir watchdog + mgmt_plane health (TASK G1) — v0.71.0

2026-07-05 18:49:27 +02:00

felhom-root-ssh-key-only.conf

D4 (R-982): root SSH from the LAN by key only — the bundle's sshd drop-in, try-reload-or-restart, an sshd -T read-back reported when not in force, a reload in undo (the reviewed v2 patch); unreleased

2026-10-23 08:22:17 +02:00

felhom-selfupdate-guarded

R-861 review fixes: the signed update hands the A/B wrapper a root-owned copy of the hashed bytes; mount units accept no Wants/Requires/Before and no continuation lines; the escrow read walks the path without following any symlink

2026-10-05 12:13:42 +02:00

felhom-shared-parent.service

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

felhom-shared-parent.sh

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

2026-10-05 12:00:43 +02:00

felhom-sshd.service

feat(felhomsshd): dedicated OOB sshd instance + port-adaptive belt (H1 Parts 2-4 agent)

2026-07-05 22:27:02 +02:00

felhom-thin-check

R-1124 + R-1012: forget a decommissioned drive that is gone; name an orphan thin device in a backup failure

2026-10-17 15:20:34 +02:00

felhom-vzdump-partial-clean

After a power cut: remove the dead half-written backup (R-1006); a backup task from before the boot is not in flight (R-1008)

2026-10-14 11:29:41 +02:00

test_felhom_config_bundle.py

R-1285: after every bundle install the agent asks the wrapper now on disk for the appliance-only policy pass, so a BYO host upgraded from an older wrapper loses our SSH drop-in in one update. Red-proved. Commit only, not released.

2026-10-25 21:46:38 +01:00

test_felhom_crash_guard.py

R-836: the kernel lane — one-shot boot through the ESP flag, boot good / one self-revert, night step on a told night

2026-10-07 15:18:24 +02:00

test_felhom_internal_place.py

Security review of 912f7c1: the mkfs wrapper trusts no sibling claim; the internal-place helper fails closed

2026-10-16 04:02:00 +02:00

test_felhom_mkfs_guarded.py

Security review of 912f7c1: the mkfs wrapper trusts no sibling claim; the internal-place helper fails closed

2026-10-16 04:02:00 +02:00

test_felhom_os_apply.py

R-1280: a signed job's validity window is at most 24 h — the verifier, the root wrapper and felhom-opsign. Red-proved. Commit only, not released.

2026-10-25 21:42:18 +01:00

test_felhom_priv_apply.py

R-1124 + R-1012: forget a decommissioned drive that is gone; name an orphan thin device in a backup failure

2026-10-17 15:20:34 +02:00

test_felhom_thin_check.py

R-1124 + R-1012: forget a decommissioned drive that is gone; name an orphan thin device in a backup failure

2026-10-17 15:20:34 +02:00

test_felhom_vzdump_partial_clean.py

After a power cut: remove the dead half-written backup (R-1006); a backup task from before the boot is not in flight (R-1008)

2026-10-14 11:29:41 +02:00