admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: relocate felhom build root to /mnt/5_hdd/felhom.eu (moved off DooPlex SSD 2026-07-18)

Browse Source
This commit is contained in:
authentik Default Admin
2026-07-18 09:51:29 +02:00
parent ee4e061d2b
commit 22d04967b4
7 changed files with 30 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
documentation/pilot/RUNBOOK-publish-0.90-0.143-2026-07-18.md
+6 -6
View File
@@ -73,7 +73,7 @@ transient unit baking `felhom-controller:0.143.0`:
sha **matches**.
- **Teardown (GL-1):** build guest 9100 `--purge`d; in-VM token/script/log `shred`ded; VM powered off;
qemu exited; qcow2 reverted to `virgin` (snapshot intact, exactly-as-found); staged token on 180
shredded. **Token-leak grep of the saved log (literal value) = 0.** Evidence: `180:~/drill/bake-0.143.0.log`.
shredded. **Token-leak grep of the saved log (literal value) = 0.** Evidence: `180:/mnt/5_hdd/felhom.eu/drill/bake-0.143.0.log`.
## Phase 3 — manifest vouch + floor ✅ DONE (Viktor 2026-07-18), CC-verified
@@ -109,19 +109,19 @@ all exactly the published values. No ordering issue (both persisted).
Built on 180 from `~/git/felhom.eu` @ `cfdcb50` (scripts v1.20.0), assistant `felhom-iso-assistant:trixie`.
**Input PVE ISO:** `proxmox-ve_9.2-1.iso`, sha256 `4e88fe416df9b527624a175f24c9aa07c714d3332afb1ee3dbf3879573ef2c6c`
(the exact recorded July input, at `180:~/drill/`). Both builds: pairing mode, **build manifest
(the exact recorded July input, at `180:/mnt/5_hdd/felhom.eu/drill/`). Both builds: pairing mode, **build manifest
`secret-bearing: no`**, loader `mkimage`, script v1.20.0.
**Build 1 — safety pre-flight ISO** (`profiles/n100.profile` AS-IS, `--pairing`):
- `180:~/felhom-iso/out/felhom-pve-9.2-1-v1.20.0-n100-generic-mkimage.iso`
- `180:/mnt/5_hdd/felhom.eu/felhom-iso/out/felhom-pve-9.2-1-v1.20.0-n100-generic-mkimage.iso`
- sha256 **`2e1107a15ea2abd892426661a853610dfb2ff49ec1d3e7561a876a393d4ea5c7`**, 1 704 417 280 bytes
- embedded answer.toml: `filter.ID_SERIAL_SHORT = "REPLACE-WITH-TARGET-SSD-SERIAL"` (**match-nothing** →
installer aborts fail-safe, touches no disk — S5c). Purpose: prove the mkimage loader boots the real
board before anything destructive.
**Build 2 — real install ISO** (uncommitted working profile `180:~/felhom-iso/n100-demo.profile`,
**Build 2 — real install ISO** (uncommitted working profile `180:/mnt/5_hdd/felhom.eu/felhom-iso/n100-demo.profile`,
`--pairing`; profile mirrors the prior v1.16.0 run + the two allowed v1.20.0 deltas):
- `180:~/felhom-iso/out/felhom-pve-9.2-1-v1.20.0-n100-demo-generic-mkimage.iso`
- `180:/mnt/5_hdd/felhom.eu/felhom-iso/out/felhom-pve-9.2-1-v1.20.0-n100-demo-generic-mkimage.iso`
- sha256 **`69cd7ba5872bb02c4977959bfe97312690f3a164937e71609bb987ac93e435dc`**, 1 704 417 280 bytes
- embedded answer.toml verified: `fqdn = "demo-felhom.local"`, `filter.ID_SERIAL_SHORT =
"QDF922W009654S30EX"` (internal SSD; **≠** external HDD `65NOP3HDT` → backup drive protected),
@@ -156,5 +156,5 @@ freemail.hu, confirm `dmarc=pass`) — the open half of R-4.
console shows the Hungarian pairing-code banner → **bind** (prefer the self-bind flow to live-validate
R-27 slice 1) → day-0.
Both ISOs + sha256 + manifest are on `180:~/felhom-iso/out/`. This run unblocks the R-1 supervised
Both ISOs + sha256 + manifest are on `180:/mnt/5_hdd/felhom.eu/felhom-iso/out/`. This run unblocks the R-1 supervised
rehearsal and closes the DNS half of R-4 once B is applied.