Nov 03 08:30:23 box1103 systemd[1]: Starting felhom-bootstrap.service - Felhom host bootstrap (fetch + run felhom-host-install.sh unattended, retry until success)...
Nov 03 08:30:23 box1103 felhom-bootstrap.sh[1217]: felhom-bootstrap: console: pvebanner.service masked (it would rewrite /etc/issue with the Proxmox admin URL on every boot)
Nov 03 08:30:23 box1103 felhom-bootstrap.sh[1217]: felhom-bootstrap: console: /etc/issue is the Felhom text (no admin URL)
Nov 03 08:30:24 box1103 felhom-bootstrap.sh[1217]: felhom-bootstrap: PAIRING mode (generic ISO, no baked customer/passphrase) — hub=https://hub.felhom.eu
Nov 03 08:30:24 box1103 felhom-bootstrap.sh[1217]: felhom-bootstrap: registering unclaimed appliance at the hub
Nov 03 08:30:24 box1103 felhom-bootstrap.sh[1217]: felhom-bootstrap: registered — appliance token stored (0600); waiting for the operator or a customer self-bind
Nov 03 08:30:24 box1103 felhom-bootstrap.sh[1217]: felhom-bootstrap: console font -> Lat2-Terminus16 (Latin-2, ő/ű capable)
Nov 03 08:30:24 box1103 felhom-bootstrap.sh[1217]: felhom-bootstrap: not bound yet — polling every 30s until the operator or a customer self-bind lands (this is the normal waiting state, not an error)
Nov 03 08:30:39 box1103 systemd[1]: felhom-bootstrap.service: Main process exited, code=killed, status=15/TERM
Nov 03 08:30:39 box1103 systemd[1]: felhom-bootstrap.service: Failed with result 'signal'.
Nov 03 08:30:39 box1103 systemd[1]: Stopped felhom-bootstrap.service - Felhom host bootstrap (fetch + run felhom-host-install.sh unattended, retry until success).
Nov 03 08:30:39 box1103 systemd[1]: Starting felhom-bootstrap.service - Felhom host bootstrap (fetch + run felhom-host-install.sh unattended, retry until success)...
Nov 03 08:30:40 box1103 felhom-bootstrap.sh[1498]: felhom-bootstrap: console: pvebanner.service masked (it would rewrite /etc/issue with the Proxmox admin URL on every boot)
Nov 03 08:30:40 box1103 felhom-bootstrap.sh[1498]: felhom-bootstrap: console: /etc/issue is the Felhom text (no admin URL)
Nov 03 08:30:40 box1103 felhom-bootstrap.sh[1498]: felhom-bootstrap: PAIRING mode (generic ISO, no baked customer/passphrase) — hub=https://hub.felhom.eu
Nov 03 08:30:40 box1103 felhom-bootstrap.sh[1498]: felhom-bootstrap: console font -> Lat2-Terminus16 (Latin-2, ő/ű capable)
Nov 03 08:30:40 box1103 felhom-bootstrap.sh[1498]: felhom-bootstrap: not bound yet — polling every 30s until the operator or a customer self-bind lands (this is the normal waiting state, not an error)
Nov 03 08:31:10 box1103 felhom-bootstrap.sh[1498]: felhom-bootstrap: bind DELIVERED — writing credentials to the env and switching to direct install
Nov 03 08:31:10 box1103 felhom-bootstrap.sh[1498]: felhom-bootstrap: fetching host-install: https://felhom.eu/scripts/felhom-host-install.sh
Nov 03 08:31:10 box1103 felhom-bootstrap.sh[1498]: felhom-bootstrap: running host-install (customer=Tester4 mode=appliance hub=https://hub.felhom.eu)
Nov 03 08:31:10 box1103 felhom-bootstrap.sh[1716]: [INFO]   auto-sized guest RAM: 5847 MiB (host 9943 MiB; clamp(host-4096, min 4096, max host-2048), ceiling host-1024)
Nov 03 08:31:10 box1103 felhom-bootstrap.sh[1716]: [INFO]   auto-sized guest cores: 5 (host 6 cores; host-1, min 2)
Nov 03 08:31:10 box1103 felhom-bootstrap.sh[1716]: [INFO] felhom-host-install v1.36.1 — mode=appliance customer=Tester4 vmid=9201
Nov 03 08:31:10 box1103 felhom-bootstrap.sh[1716]: [STEP] 1/8 pre-flight
Nov 03 08:31:11 box1103 felhom-bootstrap.sh[1716]: [INFO]   pve-manager/9.2.2/b9984c6d90a4bd80 (running kernel: 7.0.2-6-pve)
Nov 03 08:31:13 box1103 felhom-bootstrap.sh[1716]: [INFO]   node: box1103 (auto)
Nov 03 08:31:13 box1103 felhom-bootstrap.sh[1716]: [INFO]   agent config: /etc/felhom-agent/agent.json
Nov 03 08:31:13 box1103 felhom-bootstrap.sh[1716]: [INFO]   agent: not installed yet — will be fetched + installed in step 5/8
Nov 03 08:31:13 box1103 felhom-bootstrap.sh[1716]: [INFO]   local-lvm free: ~19 GiB
Nov 03 08:31:13 box1103 felhom-bootstrap.sh[1716]: [WARN] local-lvm free ~19 GiB is below the recommended 120 GiB — the install continues; proceed only if you sized the grows deliberately
Nov 03 08:31:13 box1103 felhom-bootstrap.sh[1716]: [INFO]   free RAM: ~8277 MiB
Nov 03 08:31:15 box1103 felhom-bootstrap.sh[1716]: [INFO]   existing guests on this host: 0 (pct+qm)
Nov 03 08:31:16 box1103 felhom-bootstrap.sh[1716]: [INFO]   archive storage 'local' present
Nov 03 08:31:19 box1103 felhom-bootstrap.sh[1716]: [INFO]   acl storage 'felhom-pbs' not present yet — expected: the PBS-DR tier creates it; the grant is pre-positioned deliberately
Nov 03 08:31:19 box1103 felhom-bootstrap.sh[1716]: [INFO]   dnsmasq: not present before Felhom — recorded; uninstall will remove it again if we install it
Nov 03 08:31:19 box1103 felhom-bootstrap.sh[1716]: [INFO]   hub reachable (https://hub.felhom.eu)
Nov 03 08:31:19 box1103 felhom-bootstrap.sh[1716]: [OK]   customer 'Tester4' exists + passphrase valid
Nov 03 08:31:20 box1103 felhom-bootstrap.sh[1716]: [INFO]   golden: none local — will fetch + verify from Gitea in step 7/8
Nov 03 08:31:23 box1103 felhom-bootstrap.sh[1716]: [OK] pre-flight passed
Nov 03 08:31:23 box1103 felhom-bootstrap.sh[1716]: [STEP] 2/8 Proxmox API token
Nov 03 08:31:28 box1103 felhom-bootstrap.sh[1716]: [OK]   token minted (secret captured, not logged)
Nov 03 08:31:57 box1103 felhom-bootstrap.sh[1716]: [OK]   scoped ACL applied (Base@/, Guest@/pool/felhom + /vms/990000..990009, Store@[local local-lvm felhom-pbs])
Nov 03 08:32:00 box1103 felhom-bootstrap.sh[1716]: [SKIP]   old broad role FelhomAgent already absent
Nov 03 08:32:01 box1103 felhom-bootstrap.sh[1716]: [STEP] 3/8 compute volume grows
Nov 03 08:32:01 box1103 felhom-bootstrap.sh[1716]: [INFO]   auto-computed from a 19 GiB thin pool (16 §7: 50/100/130 GiB)
Nov 03 08:32:01 box1103 felhom-bootstrap.sh[1716]: [INFO]   grows: rootfs +0G (->32G), data +26G (->50G, ONE volume)
Nov 03 08:32:01 box1103 felhom-bootstrap.sh[1716]: [STEP] 4/8 host enrollment (POST /host-enroll)
Nov 03 08:32:12 box1103 felhom-bootstrap.sh[1716]: [OK]   host MINTED (first enroll)
Nov 03 08:32:12 box1103 felhom-bootstrap.sh[1716]: [INFO]   host_id: Tester4-58b20b (api_key captured, not logged)
Nov 03 08:32:12 box1103 felhom-bootstrap.sh[1716]: [STEP] 4b/8 break-glass credential (root@pam console password → hub vault)
Nov 03 08:32:12 box1103 felhom-bootstrap.sh[1716]: [INFO]   recovery password vaulted at the hub (stored) — now setting it on root@pam
Nov 03 08:32:12 box1103 chpasswd[2217]: pam_unix(chpasswd:chauthtok): password changed for root
Nov 03 08:32:13 box1103 felhom-bootstrap.sh[1716]: [OK]   root@pam password vaulted, set, and the PVE login takes it (retrieve via the operator /admin path; never logged here)
Nov 03 08:32:13 box1103 felhom-bootstrap.sh[1716]: [WARN]   NOTE: the root@pam password just CHANGED — the old one now fails at the PVE web GUI (:8006).
Nov 03 08:32:13 box1103 felhom-bootstrap.sh[1716]: [WARN]         Retrieve the new one at hub → host page (vaulted recovery credential).
Nov 03 08:32:13 box1103 felhom-bootstrap.sh[1716]: [STEP] 5/8 agent install (fetch + verify + install)
Nov 03 08:32:13 box1103 felhom-bootstrap.sh[1716]: [INFO]   disabled pve-enterprise.sources (Enabled: no)
Nov 03 08:32:13 box1103 felhom-bootstrap.sh[1716]: [INFO]   disabled ceph.sources (Enabled: no)
Nov 03 08:32:13 box1103 felhom-bootstrap.sh[1716]: [INFO]   added pve-no-subscription.sources (suite=trixie)
Nov 03 08:32:14 box1103 felhom-bootstrap.sh[1716]: [OK]   apt repos aligned to no-subscription (changed; apt-get update OK)
Nov 03 08:32:15 box1103 felhom-bootstrap.sh[1716]: [WARN]   no git credential in controller.yaml — fetching artifacts ANONYMOUSLY (they are world-readable; sha256 verification unchanged)
Nov 03 08:32:15 box1103 felhom-bootstrap.sh[1716]: [INFO]   manifest: agent v0.171.0 (sha c888ca7ba22a1f68…), golden v0.344.0
Nov 03 08:32:15 box1103 felhom-bootstrap.sh[1716]: [INFO]   fetching agent binary v0.171.0 from Gitea …
Nov 03 08:32:15 box1103 felhom-bootstrap.sh[1716]: [OK]   verified sha256 c888ca7ba22a1f68… matches the hub manifest
Nov 03 08:32:15 box1103 felhom-bootstrap.sh[1716]: [OK]   installed /usr/local/bin/felhom-agent (felhom-agent 0.171.0)
Nov 03 08:32:15 box1103 felhom-bootstrap.sh[1716]: [INFO]   installing the 'sudo' package (required for the non-root agent model) …
Nov 03 08:32:20 box1103 felhom-bootstrap.sh[1716]: [OK]   sudo installed (Sudo version 1.9.16p2)
Nov 03 08:32:20 box1103 felhom-bootstrap.sh[1716]: [INFO]   installing the 'age' package (escrow ceremony identity-wrap dependency) …
Nov 03 08:32:24 box1103 felhom-bootstrap.sh[1716]: [OK]   age installed (1.2.1)
Nov 03 08:32:24 box1103 useradd[2507]: new group: name=felhom-agent, GID=990
Nov 03 08:32:24 box1103 useradd[2507]: new user: name=felhom-agent, UID=999, GID=990, home=/home/felhom-agent, shell=/usr/sbin/nologin, from=none
Nov 03 08:32:24 box1103 felhom-bootstrap.sh[1716]: [OK]   created service user felhom-agent
Nov 03 08:32:24 box1103 usermod[2515]: add 'felhom-agent' to group 'systemd-journal'
Nov 03 08:32:24 box1103 usermod[2515]: add 'felhom-agent' to shadow group 'systemd-journal'
Nov 03 08:32:24 box1103 felhom-bootstrap.sh[1716]: [OK]   added felhom-agent to systemd-journal (unprivileged journal read for NAS verify)
Nov 03 08:32:26 box1103 useradd[2532]: new group: name=felhom-op, GID=1000
Nov 03 08:32:26 box1103 useradd[2532]: new user: name=felhom-op, UID=1000, GID=1000, home=/home/felhom-op, shell=/bin/bash, from=none
Nov 03 08:32:26 box1103 felhom-bootstrap.sh[1716]: [OK]   verified sha256 95f977f6dc827185… matches the hub manifest
Nov 03 08:32:27 box1103 felhom-os-apply[2570]: os-apply: BUNDLE START agent=0.171.0 sha=95f977f6dc827185 authority=installer files=32 write=31 same=1 kept=0 skipped=0
Nov 03 08:32:27 box1103 felhom-os-apply[2571]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-mkfs-guarded (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2572]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-selfupdate-guarded (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2573]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-pbs-apply (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2574]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-backup-target-apply (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2575]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-vzdump-partial-clean (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2576]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-thin-check (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2577]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-internal-place (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2578]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-crash-guard (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2579]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-priv-apply (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2580]: os-apply: BUNDLE WROTE /var/lib/vz/snippets/felhom-guest-hook.sh (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2581]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-shared-parent.sh (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2582]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-shared-parent.service (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2583]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-crash-guard.service (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2584]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-crash-guard-check.service (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2585]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-crash-guard-check.timer (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2586]: os-apply: BUNDLE WROTE /etc/felhom/crash-guard.conf (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2587]: os-apply: BUNDLE WROTE /etc/grub.d/01_felhom_oneshot (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2588]: os-apply: BUNDLE WROTE /etc/grub.d/42_felhom_oneshot (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2589]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-agent.service (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2590]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-agent-rollback.service (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2591]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-agent.service.d/felhom-agent-limits.conf (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2592]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-mgmt-watchdog (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2593]: os-apply: BUNDLE WROTE /etc/tmpfiles.d/felhom-privsep.conf (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2594]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-mgmt-watchdog.service (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2595]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-mgmt-watchdog.timer (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2596]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-sshd.service (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2597]: os-apply: BUNDLE WROTE /etc/felhom-oob.nft (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2598]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-oob-nft.service (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2599]: os-apply: BUNDLE WROTE /etc/ssh/sshd_config.d/10-felhom-root-key-only.conf (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2600]: os-apply: BUNDLE WROTE /etc/sudoers.d/felhom-op (new)
Nov 03 08:32:27 box1103 felhom-os-apply[2601]: os-apply: BUNDLE WROTE /etc/sudoers.d/felhom-agent (new)
Nov 03 08:32:28 box1103 felhom-os-apply[2730]: os-apply: BUNDLE DONE agent=0.171.0 written=31 same=1 self-check=ok signers-created=False
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE START agent=0.171.0 sha=95f977f6dc827185 authority=installer files=32 write=31 same=1 kept=0 skipped=0
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-mkfs-guarded (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-selfupdate-guarded (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-pbs-apply (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-backup-target-apply (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-vzdump-partial-clean (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-thin-check (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-internal-place (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-crash-guard (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-priv-apply (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /var/lib/vz/snippets/felhom-guest-hook.sh (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-shared-parent.sh (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-shared-parent.service (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-crash-guard.service (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-crash-guard-check.service (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-crash-guard-check.timer (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/felhom/crash-guard.conf (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/grub.d/01_felhom_oneshot (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/grub.d/42_felhom_oneshot (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-agent.service (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-agent-rollback.service (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-agent.service.d/felhom-agent-limits.conf (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /usr/local/sbin/felhom-mgmt-watchdog (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/tmpfiles.d/felhom-privsep.conf (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-mgmt-watchdog.service (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-mgmt-watchdog.timer (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-sshd.service (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/felhom-oob.nft (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/systemd/system/felhom-oob-nft.service (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/ssh/sshd_config.d/10-felhom-root-key-only.conf (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/sudoers.d/felhom-op (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE WROTE /etc/sudoers.d/felhom-agent (new)
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[2733]:   os-apply: BUNDLE DONE agent=0.171.0 written=31 same=1 self-check=ok signers-created=False
Nov 03 08:32:28 box1103 felhom-bootstrap.sh[1716]: [OK]   installed every root-owned file from config bundle v0.171.0 (sha 95f977f6dc827185…; checked, previous copies kept)
Nov 03 08:32:29 box1103 felhom-bootstrap.sh[1716]: [OK]   OOB felhom-sshd instance + static belt from the bundle (agent renders config + fills sets once oob.enabled)
Nov 03 08:32:29 box1103 felhom-bootstrap.sh[1716]: [STEP] 5b/8 internal data place (Belső tárhely)
Nov 03 08:32:31 box1103 felhom-bootstrap.sh[1716]: [INFO]   no internal place: only -79 GiB free for it (pool 19, reserve 16, promised 0, planned 82; needs 20)
Nov 03 08:32:31 box1103 felhom-bootstrap.sh[1716]: [STEP] 6/8 agent config + service
Nov 03 08:32:32 box1103 felhom-bootstrap.sh[1716]: [WARN]   backup target: DEGRADED — no eligible second drive, so the whole-system backup stays on the SYSTEM drive.
Nov 03 08:32:32 box1103 felhom-bootstrap.sh[1716]: [WARN]   It protects against file corruption but NOT against a disk failure. Attach a second drive and assign it in the dashboard.
Nov 03 08:32:32 box1103 felhom-bootstrap.sh[1716]: [INFO]   creating island bridge vmbr9 (portless, 169.254.253.1/30)
Nov 03 08:32:32 box1103 felhom-bootstrap.sh[1716]: [OK]   vmbr9 up: 169.254.253.1/30
Nov 03 08:32:32 box1103 felhom-bootstrap.sh[1716]: [INFO]   R-50 island ON: local_api=169.254.253.1:8443 (vmbr9); guest net1=169.254.253.2/30; lan_resolver.host_ip=192.168.0.126
Nov 03 08:32:32 box1103 felhom-bootstrap.sh[1716]: [INFO]   node=box1103  local_api=169.254.253.1:8443  tls_fp=DE:30:AC:4C:D2:A4…
Nov 03 08:32:33 box1103 felhom-bootstrap.sh[1716]: [OK]   wrote /etc/felhom-agent/agent.json (0600 felhom-agent)
Nov 03 08:32:33 box1103 felhom-bootstrap.sh[1716]: [OK]   agent --selftest (read-only) passed
Nov 03 08:32:36 box1103 felhom-bootstrap.sh[1716]: [OK]   felhom-agent service active (non-root felhom-agent reads the config OK)
Nov 03 08:32:36 box1103 felhom-bootstrap.sh[1716]: [OK]   wrote /etc/felhom/os-trust.json + operator-signers (felhom-op-1) — the root-owned slow-lane anchors
Nov 03 08:32:36 box1103 felhom-bootstrap.sh[1716]: [STEP] 7/8 golden archive
Nov 03 08:32:36 box1103 felhom-bootstrap.sh[1716]: [WARN]   no git credential in controller.yaml — fetching artifacts ANONYMOUSLY (they are world-readable; sha256 verification unchanged)
Nov 03 08:32:37 box1103 felhom-bootstrap.sh[1716]: [INFO]   fetching golden v0.344.0 from Gitea → /var/lib/vz/dump/vzdump-lxc-9100-2026_11_03-08_32_37.tar.zst
Nov 03 08:32:47 box1103 felhom-bootstrap.sh[1716]: [OK]   verified sha256 767a90fe07ed47c8… matches the hub manifest
Nov 03 08:32:47 box1103 felhom-bootstrap.sh[1716]: [OK]   golden imported + verified: local:backup/vzdump-lxc-9100-2026_11_03-08_32_37.tar.zst
Nov 03 08:32:48 box1103 felhom-bootstrap.sh[1716]: [STEP] 8/8 provision guest 9201
Nov 03 08:32:49 box1103 felhom-bootstrap.sh[1716]: [SKIP]   pool felhom already exists
Nov 03 08:32:49 box1103 felhom-bootstrap.sh[4074]: === felhom-agent 0.171.0 selftest=provision (vmid=9201 customer=Tester4 hostname=tester4) ===
Nov 03 08:32:49 box1103 felhom-bootstrap.sh[4074]:   --- front half: bring-up (provision) local:backup/vzdump-lxc-9100-2026_11_03-08_32_37.tar.zst → vmid 9201 ---
Nov 03 08:34:03 box1103 felhom-bootstrap.sh[4074]: time=2026-11-03T08:34:03.294+01:00 level=INFO msg="bring-up: pool membership re-asserted" vmid=9201 pool=felhom
Nov 03 08:34:03 box1103 felhom-bootstrap.sh[4074]:   [OK] front half: vmid 9201 up (boot+running) in 1m14s; MAC=BC:24:11:B5:1C:21
Nov 03 08:34:03 box1103 felhom-bootstrap.sh[4074]:   --- back half: mint per-guest token + populate bootstrap config mount ---
Nov 03 08:34:03 box1103 sudo[5461]:     root : PWD=/ ; USER=root ; COMMAND=/usr/bin/chown --reference=/var/lib/felhom-agent /var/lib/felhom-agent/guests /var/lib/felhom-agent/guests/9201
Nov 03 08:34:03 box1103 sudo[5461]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Nov 03 08:34:03 box1103 sudo[5461]: pam_unix(sudo:session): session closed for user root
Nov 03 08:34:03 box1103 sudo[5464]:     root : PWD=/ ; USER=root ; COMMAND=/usr/bin/chown -R 100000:100000 /var/lib/felhom-agent/guests/9201/bootstrap
Nov 03 08:34:03 box1103 sudo[5464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Nov 03 08:34:03 box1103 sudo[5464]: pam_unix(sudo:session): session closed for user root
Nov 03 08:34:03 box1103 sudo[5467]:     root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct set 9201 -mp9 /var/lib/felhom-agent/guests/9201/bootstrap,mp=/etc/felhom-bootstrap,ro=1
Nov 03 08:34:03 box1103 sudo[5467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Nov 03 08:34:04 box1103 sudo[5467]: pam_unix(sudo:session): session closed for user root
Nov 03 08:34:04 box1103 sudo[5514]:     root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct set 9201 -onboot 1
Nov 03 08:34:04 box1103 sudo[5514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Nov 03 08:34:05 box1103 sudo[5514]: pam_unix(sudo:session): session closed for user root
Nov 03 08:34:05 box1103 sudo[5824]:     root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct set 9201 --hookscript local:snippets/felhom-guest-hook.sh
Nov 03 08:34:05 box1103 sudo[5824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Nov 03 08:34:06 box1103 sudo[5824]: pam_unix(sudo:session): session closed for user root
Nov 03 08:34:06 box1103 sudo[6230]:     root : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives
Nov 03 08:34:06 box1103 sudo[6230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Nov 03 08:34:06 box1103 sudo[6230]: pam_unix(sudo:session): session closed for user root
Nov 03 08:34:06 box1103 sudo[6233]:     root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct set 9201 -mp8 /mnt/felhom-drives,mp=/mnt/felhom-drives
Nov 03 08:34:06 box1103 sudo[6233]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0)
Nov 03 08:34:08 box1103 sudo[6233]: pam_unix(sudo:session): session closed for user root
Nov 03 08:34:08 box1103 felhom-bootstrap.sh[4074]: time=2026-11-03T08:34:08.121+01:00 level=INFO msg="provision: back-half complete" vmid=9201 mount=mp9 guest_path=/etc/felhom-bootstrap endpoint=169.254.253.1:8443
Nov 03 08:34:08 box1103 felhom-bootstrap.sh[4074]:   [OK] back half: bootstrap mount mp9 → /etc/felhom-bootstrap on vmid 9201 (host dir /var/lib/felhom-agent/guests/9201/bootstrap)
Nov 03 08:34:08 box1103 felhom-bootstrap.sh[4074]:   local-api endpoint 169.254.253.1:8443 · leaf fp <long> · token: minted (not printed)
Nov 03 08:34:08 box1103 felhom-bootstrap.sh[4074]: === selftest=provision OK — guest 9201 provisioned + bootstrap-mounted (KEPT) ===
Nov 03 08:34:08 box1103 felhom-bootstrap.sh[4074]:     next: reboot the guest → the golden's baked controller-bootstrap unit deploys the controller,
Nov 03 08:34:08 box1103 felhom-bootstrap.sh[4074]:     which PULLS its controller.yaml from the hub (retrieval passphrase) and merges in this local_api.
Nov 03 08:34:08 box1103 felhom-bootstrap.sh[1716]: [OK]   provision completed
Nov 03 08:34:08 box1103 felhom-bootstrap.sh[1716]: [INFO]   rebooting guest 9201 so the baked controller-bootstrap unit picks up the mount
Nov 03 08:34:09 box1103 pct[6392]: <root@pam> starting task UPID:box1103:000018FE:00005F56:6AE98E71:vzreboot:9201:root@pam:
Nov 03 08:34:09 box1103 pct[6398]: requesting reboot of CT 9201: UPID:box1103:000018FE:00005F56:6AE98E71:vzreboot:9201:root@pam:
Nov 03 08:34:19 box1103 pct[6392]: <root@pam> end task UPID:box1103:000018FE:00005F56:6AE98E71:vzreboot:9201:root@pam: OK
Nov 03 08:34:19 box1103 felhom-bootstrap.sh[1716]: [STEP] verify
Nov 03 08:34:20 box1103 felhom-bootstrap.sh[1716]: [OK]   pct status: running
Nov 03 08:34:22 box1103 felhom-bootstrap.sh[1716]: [OK]   onboot: 1
Nov 03 08:34:23 box1103 felhom-bootstrap.sh[7448]:     mp0: local-lvm:vm-9201-disk-1,mp=/var/lib/felhom,backup=1,size=50G
Nov 03 08:34:23 box1103 felhom-bootstrap.sh[7448]:     mp8: /mnt/felhom-drives,mp=/mnt/felhom-drives
Nov 03 08:34:23 box1103 felhom-bootstrap.sh[7448]:     rootfs: local-lvm:vm-9201-disk-0,size=32G
Nov 03 08:34:25 box1103 felhom-bootstrap.sh[1716]: [OK]   pool: guest 9201 is a member of felhom
Nov 03 08:34:26 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentBase@/ present (user+token)
Nov 03 08:34:27 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/pool/felhom present (user+token)
Nov 03 08:34:28 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentStore@/storage/local present (user+token)
Nov 03 08:34:30 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentStore@/storage/local-lvm present (user+token)
Nov 03 08:34:31 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentStore@/storage/felhom-pbs present (user+token)
Nov 03 08:34:33 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990000 present (user+token)
Nov 03 08:34:34 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990001 present (user+token)
Nov 03 08:34:35 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990002 present (user+token)
Nov 03 08:34:37 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990003 present (user+token)
Nov 03 08:34:40 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990004 present (user+token)
Nov 03 08:34:42 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990005 present (user+token)
Nov 03 08:34:43 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990006 present (user+token)
Nov 03 08:34:45 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990007 present (user+token)
Nov 03 08:34:46 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990008 present (user+token)
Nov 03 08:34:47 box1103 felhom-bootstrap.sh[1716]: [OK]   acl: FelhomAgentGuest@/vms/990009 present (user+token)
Nov 03 08:34:47 box1103 felhom-bootstrap.sh[1716]: [OK]   authz signers: 2 (operator-signed self-update armed)
Nov 03 08:34:48 box1103 felhom-bootstrap.sh[1716]: [OK]   controller: Up 8 seconds (healthy) (after ~0s)
Nov 03 08:34:50 box1103 felhom-bootstrap.sh[1716]: [INFO]   controller image: gitea.dooplex.hu/admin/felhom-controller:0.350.0
Nov 03 08:34:51 box1103 felhom-bootstrap.sh[1716]: [WARN]   cloudflared not visible yet
Nov 03 08:34:51 box1103 felhom-bootstrap.sh[1716]: [INFO]   (confirm in the hub UI that host Tester4-58b20b reports guest 9201)
Nov 03 08:34:51 box1103 felhom-bootstrap.sh[1716]: [OK] Day-0 provision SUCCESS — vmid=9201 host_id=Tester4-58b20b customer=Tester4 golden=local:backup/vzdump-lxc-9100-2026_11_03-08_32_37.tar.zst
Nov 03 08:34:51 box1103 felhom-bootstrap.sh[1716]: [INFO] root@pam was rotated + vaulted at step 4b — retrieve at hub → host page (the old GUI password no longer works).
Nov 03 08:34:51 box1103 felhom-bootstrap.sh[1498]: felhom-bootstrap: host-install SUCCESS — writing done-flag, disabling unit, scrubbing secrets
Nov 03 08:34:51 box1103 systemd[1]: felhom-bootstrap.service: Deactivated successfully.
Nov 03 08:34:51 box1103 systemd[1]: Finished felhom-bootstrap.service - Felhom host bootstrap (fetch + run felhom-host-install.sh unattended, retry until success).
Nov 03 08:34:51 box1103 systemd[1]: felhom-bootstrap.service: Consumed 1min 54.782s CPU time, 887.9M memory peak.
