admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: F3 provisioning runbook (vmid from full host list) + campaign F1/F2 resolution banner

Browse Source 
Companion to felhom-agent v0.60.0 (proof-of-launch destroy gating + restore-
test band-advance). New documentation/runbooks/provisioning.md; campaign doc
updated with the resolution status and the operator manifest-bump follow-up.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
authentik Default Admin
2026-07-02 10:27:17 +02:00
parent e59e3c0ae2
commit 6dae9d7558
3 changed files with 65 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
documentation/audits/CAMPAIGN-pool-effects-2026-07-01.md
+12
View File
@@ -1,5 +1,17 @@
# CAMPAIGN — full effects of the `felhom` pool + scoped-token migration
> **Resolution update (2026-07-02, agent v0.60.0):** **F1 FIXED at root** — proof-of-launch gating: a
> compensating destroy (bring-up rollback, restore-test teardown, AND Recover) fires only when
> `RestoreLXC` returned a UPID; no UPID ⇒ the transaction created nothing ⇒ never destroy. Recover is
> now safe by DESIGN (a no-UPID Scratch/Rollback entry is abandoned fail-safe), no longer by the
> pool-blind "already gone" accident (§2 B1.4). **F2 FIXED** — the restore-test advances past an
> "already exists" band vmid (bounded by the band width); a fully-occupied band → Skipped, no false
> alert. **F3 DOCUMENTED** — `documentation/runbooks/provisioning.md`. Red-proof-tested + live-proven
> on felhom-pve (provision onto existing 9001 → no destroy armed; restore-test advanced past a 990000
> decoy and passed at 990001). F4/F5/F6 remain open as recorded. Operator follow-up: bump the hub
> Day-0 artifact manifest to agent **0.60.0** (binary published to Gitea, sha256
> `45d19b87…51725831`).
**Date run:** 2026-07-02 (runbook authored 2026-07-01) · **Host:** felhom-pve (`demo-felhom`, PVE 9.2.2)
**Agent live:** v0.59.0 (runbook table said v0.55.0 — v0.56–0.59 shipped between authoring and execution; the ListLXC/priv surface is unchanged)
**ACL:** host-install v1.7.0 3-role scoped layout, verified live: `FelhomAgentGuest` @`/pool/felhom` (12 privs incl. `Pool.Allocate`), `FelhomAgentStore` (`Datastore.Allocate,AllocateSpace`) @`local`/`local-lvm`/`felhom-pbs`, `FelhomAgentBase` (`Sys.Audit,SDN.Use,Datastore.Audit`) @`/`.