
[INFO] felhom-host-install v1.28.0 — mode=byo customer=drill-r50 vmid=120

[STEP] 1/8 pre-flight
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
	LANGUAGE = (unset),
	LC_ALL = (unset),
	LC_CTYPE = "UTF-8",
	LC_NUMERIC = (unset),
	LC_COLLATE = (unset),
	LC_TIME = (unset),
	LC_MESSAGES = (unset),
	LC_MONETARY = (unset),
	LC_ADDRESS = (unset),
	LC_IDENTIFICATION = (unset),
	LC_MEASUREMENT = (unset),
	LC_PAPER = (unset),
	LC_TELEPHONE = (unset),
	LC_NAME = (unset),
	LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
[INFO]   pve-manager/9.2.2/b9984c6d90a4bd80 (running kernel: 7.0.2-6-pve)
[INFO]   node: drill-pve (auto)
[INFO]   agent config: /etc/felhom-agent/agent.json
[INFO]   agent: not installed yet — will be fetched + installed in step 5/8
[INFO]   local-lvm free: ~75 GiB
[WARN] local-lvm free ~75 GiB < hard min 120 GiB
[INFO]   free RAM: ~6245 MiB
[INFO]   existing guests on this host: 0 (pct+qm)
[INFO]   archive storage 'local' present
[INFO]   acl storage 'felhom-pbs' not present yet — expected: the PBS-DR tier creates it; the grant is pre-positioned deliberately
[INFO]   acl storages all present or pre-positioned: local local-lvm felhom-pbs
[INFO]   dnsmasq: not present before Felhom — recorded; uninstall will remove it again if we install it
[INFO]   host DNS (:53): free
[INFO]   hub reachable (https://hub.felhom.eu)
[OK]   customer 'drill-r50' exists + passphrase valid
[INFO]   golden (local): local:backup/vzdump-lxc-9100-2026_08_13-07_43_44.tar.zst

[STEP] BYO disclosure — installing Felhom on a host the operator does NOT own will create:
    pveum:  roles FelhomAgentBase/FelhomAgentGuest/FelhomAgentStore + user felhom-agent@pve + token felhom-agent@pve!agent
            + scoped ACL grants (Base@/, Guest@/pool/felhom, Store@[local local-lvm felhom-pbs]) + the 'felhom' pool
    agent:  service user felhom-agent + /usr/local/bin/felhom-agent (+ .bak-* backups; A/B slots via the guarded self-update)
            + /etc/systemd/system/felhom-agent.service (+ felhom-agent-rollback.service + start-limit drop-in)
            + /etc/sudoers.d/felhom-agent + state dir /var/lib/felhom-agent + config /etc/felhom-agent/agent.json (0600)
    host:   /usr/local/sbin/felhom-mkfs-guarded + /usr/local/sbin/felhom-selfupdate-guarded
            + /usr/local/sbin/felhom-pbs-apply (PBS-DR apply wrapper — DR capability is baked
              on every install; ACTIVATION stays a hub flag, off = zero effect on this host)
            + felhom-mgmt-watchdog service+timer+script + /etc/tmpfiles.d/felhom-privsep.conf
            + guest-hook snippet under /var/lib/vz/snippets/ (agent-installed at runtime)
            + the 'sudo' and 'age' packages if absent + install state dir /var/lib/felhom-install
    wg:     an OUTBOUND WireGuard tunnel to the Felhom hub (wg_tunnel.enabled=true — base
            infrastructure like the cloudflared tunnel; hands-free peer registration; the
            operator can disable it per-customer hub-side on request)
    guest:  the provisioned Felhom LXC (vmid 120, capped 2 cores / 4096 MiB) + its volumes
            + the golden vzdump imported onto storage 'local'
    update: operator-signed self-update authority: felhom-op-1
    NOT touched in byo mode: root@pam (no break-glass), host DNS (:53), OOB sshd.

[INFO]   (--preflight-only: acknowledgement prompt skipped — nothing will be mutated)
[OK] pre-flight passed

[OK] PRE-FLIGHT PASS (mode=byo) — no state written, no install step executed
