docs: relocate felhom build root to /mnt/5_hdd/felhom.eu (moved off DooPlex SSD 2026-07-18)

2026-07-18 09:51:29 +02:00
parent ee4e061d2b
commit 22d04967b4
7 changed files with 30 additions and 22 deletions
@@ -73,7 +73,7 @@ transient unit baking `felhom-controller:0.143.0`:
  sha **matches**.
 - **Teardown (GL-1):** build guest 9100 `--purge`d; in-VM token/script/log `shred`ded; VM powered off;
  qemu exited; qcow2 reverted to `virgin` (snapshot intact, exactly-as-found); staged token on 180
-  shredded. **Token-leak grep of the saved log (literal value) = 0.** Evidence: `180:~/drill/bake-0.143.0.log`.
+  shredded. **Token-leak grep of the saved log (literal value) = 0.** Evidence: `180:/mnt/5_hdd/felhom.eu/drill/bake-0.143.0.log`.

 ## Phase 3 — manifest vouch + floor ✅ DONE (Viktor 2026-07-18), CC-verified

@@ -109,19 +109,19 @@ all exactly the published values. No ordering issue (both persisted).

 Built on 180 from `~/git/felhom.eu` @ `cfdcb50` (scripts v1.20.0), assistant `felhom-iso-assistant:trixie`.
 **Input PVE ISO:** `proxmox-ve_9.2-1.iso`, sha256 `4e88fe416df9b527624a175f24c9aa07c714d3332afb1ee3dbf3879573ef2c6c`
-(the exact recorded July input, at `180:~/drill/`). Both builds: pairing mode, **build manifest
+(the exact recorded July input, at `180:/mnt/5_hdd/felhom.eu/drill/`). Both builds: pairing mode, **build manifest
 `secret-bearing: no`**, loader `mkimage`, script v1.20.0.

 **Build 1 — safety pre-flight ISO** (`profiles/n100.profile` AS-IS, `--pairing`):
- `180:~/felhom-iso/out/felhom-pve-9.2-1-v1.20.0-n100-generic-mkimage.iso`
+- `180:/mnt/5_hdd/felhom.eu/felhom-iso/out/felhom-pve-9.2-1-v1.20.0-n100-generic-mkimage.iso`
 - sha256 **`2e1107a15ea2abd892426661a853610dfb2ff49ec1d3e7561a876a393d4ea5c7`**, 1 704 417 280 bytes
 - embedded answer.toml: `filter.ID_SERIAL_SHORT = "REPLACE-WITH-TARGET-SSD-SERIAL"` (**match-nothing** →
  installer aborts fail-safe, touches no disk — S5c). Purpose: prove the mkimage loader boots the real
  board before anything destructive.

-**Build 2 — real install ISO** (uncommitted working profile `180:~/felhom-iso/n100-demo.profile`,
+**Build 2 — real install ISO** (uncommitted working profile `180:/mnt/5_hdd/felhom.eu/felhom-iso/n100-demo.profile`,
 `--pairing`; profile mirrors the prior v1.16.0 run + the two allowed v1.20.0 deltas):
- `180:~/felhom-iso/out/felhom-pve-9.2-1-v1.20.0-n100-demo-generic-mkimage.iso`
+- `180:/mnt/5_hdd/felhom.eu/felhom-iso/out/felhom-pve-9.2-1-v1.20.0-n100-demo-generic-mkimage.iso`
 - sha256 **`69cd7ba5872bb02c4977959bfe97312690f3a164937e71609bb987ac93e435dc`**, 1 704 417 280 bytes
 - embedded answer.toml verified: `fqdn = "demo-felhom.local"`, `filter.ID_SERIAL_SHORT =
  "QDF922W009654S30EX"` (internal SSD; **≠** external HDD `65NOP3HDT` → backup drive protected),
@@ -156,5 +156,5 @@ freemail.hu, confirm `dmarc=pass`) — the open half of R-4.
   console shows the Hungarian pairing-code banner → **bind** (prefer the self-bind flow to live-validate
   R-27 slice 1) → day-0.

-Both ISOs + sha256 + manifest are on `180:~/felhom-iso/out/`. This run unblocks the R-1 supervised
+Both ISOs + sha256 + manifest are on `180:/mnt/5_hdd/felhom.eu/felhom-iso/out/`. This run unblocks the R-1 supervised
 rehearsal and closes the DNS half of R-4 once B is applied.
@@ -30,16 +30,17 @@ acts immediately; save it LAST). Rules: `publish-train-rules.md`.
 ```bash
 SSH=/c/Windows/System32/OpenSSH/ssh.exe   # Git Bash's own ssh fails silently against the Windows agent
 export MSYS_NO_PATHCONV=1                 # before any felhom-pve command with absolute paths (pct etc.)
+FELHOM_ROOT=/mnt/5_hdd/felhom.eu          # build-server working root: ALL felhom repos/build/drill/iso moved HERE 2026-07-18
 ```

 | Host | Access | Role |
 |---|---|---|
-| Build server | `$SSH kisfenyo@192.168.0.180` | builds (`~/git/felhom-agent`, `~/build/felhom-controller`, `~/build/felhom-hub`), kubectl |
+| Build server | `$SSH kisfenyo@192.168.0.180` | builds (`$FELHOM_ROOT/git/felhom-agent`, `$FELHOM_ROOT/build/felhom-controller`, `$FELHOM_ROOT/build/felhom-hub`), kubectl |
 | Demo PVE host | `$SSH felhom-pve` (root@192.168.0.162) | agent install, `pct exec 9201` |
 | Hub UI | hub.felhom.eu → Configuration | manifest vouch, MinAgent, floor (operator password) |

-Housekeeping note: `~/build/felhom-agent` on 180 is a stale pre-June-23 leftover — agent builds live
-in `~/git/felhom-agent` now. Safe to remove the old dir.
+Housekeeping note: `$FELHOM_ROOT/build/felhom-agent` on 180 is a stale pre-June-23 leftover — agent
+builds live in `$FELHOM_ROOT/git/felhom-agent` now. Safe to remove the old dir.

 ## 2. Agent (felhom-agent binary → felhom-pve, then optionally publish)

@@ -47,7 +48,7 @@ Always commit+push to `main` first (an unpushed change does not exist).

 ```bash
 # BUILD on 180 (the explicit git pull is load-bearing)
-$SSH kisfenyo@192.168.0.180 "cd ~/git/felhom-agent && git pull && go build -ldflags '-X main.version=<VER>' -o /tmp/felhom-agent-<VER> ./cmd/felhom-agent"
+$SSH kisfenyo@192.168.0.180 "cd $FELHOM_ROOT/git/felhom-agent && git pull && go build -ldflags '-X main.version=<VER>' -o /tmp/felhom-agent-<VER> ./cmd/felhom-agent"

 # FETCH locally, PUSH to the PVE host (Windows scp needs cygpath for the local side)
 scp kisfenyo@192.168.0.180:/tmp/felhom-agent-<VER> "$(cygpath -w /tmp/felhom-agent-<VER>)"
@@ -82,7 +83,7 @@ artifact manifest**. (This save does NOT move the floor — that's a separate ca

 ```bash
 # BUILD+PUSH the image (build.sh does NOT pull — the explicit pull is load-bearing)
-$SSH kisfenyo@192.168.0.180 "cd ~/build/felhom-controller && git -C ~/git/felhom-controller pull && ./build.sh <VER> --push"
+$SSH kisfenyo@192.168.0.180 "cd $FELHOM_ROOT/build/felhom-controller && git -C $FELHOM_ROOT/git/felhom-controller pull && ./build.sh <VER> --push"

 # DEPLOY on the demo guest
 $SSH felhom-pve "pct exec 9201 -- bash -c 'docker pull gitea.dooplex.hu/admin/felhom-controller:<VER> && echo gitea.dooplex.hu/admin/felhom-controller:<VER> > /etc/felhom-controller-image && systemctl restart felhom-controller-bootstrap.service'"
@@ -119,7 +120,7 @@ tag changes in git and the ArgoCD app is deliberately synced (auto-sync is OFF;
 `kubectl set image`, never `:latest`).

 ```bash
-$SSH kisfenyo@192.168.0.180 "cd ~/build/felhom-hub && ./build.sh <VER> --push"
+$SSH kisfenyo@192.168.0.180 "cd $FELHOM_ROOT/build/felhom-hub && ./build.sh <VER> --push"
 # edit manifests/hub.yaml image tag → <VER>; commit; push
 $SSH kisfenyo@192.168.0.180 "sudo kubectl -n argocd annotate application felhom argocd.argoproj.io/refresh=hard --overwrite; sleep 8; sudo kubectl -n argocd get application felhom -o jsonpath='{.status.sync.status} {.status.sync.revision}{\"\n\"}'"
 $SSH kisfenyo@192.168.0.180 "sudo kubectl -n argocd patch application felhom --type merge -p '{\"operation\":{\"initiatedBy\":{\"username\":\"op\"},\"sync\":{\"syncStrategy\":{\"apply\":{}}}}}'"