admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 10e07f5747 docs(spike): immediate-sync transport — poke-relay vs long-poll, both GO/complementary admin 2026-07-16 20:00:01 +02:00
  • a50822af44 docs(report): hub v0.57.0 deploy + Scenario-E green + agent-reload observation admin 2026-07-16 18:08:07 +02:00
  • dd563a0273 deploy(hub): bump manifest to felhom-hub:0.57.0 (reinstall arc) admin 2026-07-16 18:02:14 +02:00
  • 7747a16ff1 feat(hub): v0.57.0 reinstall-of-existing-customer arc — claim/offsite/escrow continuity admin 2026-07-16 18:00:13 +02:00
  • dd961a66bb docs(tests): N100 bare-metal physical validation run (R-21) — findings + current state admin 2026-07-16 16:47:54 +02:00
  • 1fa3250aa3 feat(iso): R-21 slice A — bare-metal Felhom ISO pipeline + first-boot bootstrap admin 2026-07-16 13:47:08 +02:00
  • 914d51aa5f docs(spike): bare-metal Felhom ISO — R-21 spiked (all mechanisms GREEN on nested virt) admin 2026-07-16 11:29:03 +02:00
  • d202b43b95 docs(map): capability-map evidence audit — verify every status claim against source admin 2026-07-16 09:19:51 +02:00
  • 4b18cc5208 docs(roadmap): kill P1 R-2 — foreign-WIP was committed concurrent-session work, not orphaned admin 2026-07-16 08:14:11 +02:00
  • 95853e3dff docs admin 2026-07-16 08:10:33 +02:00
  • c2b7145cbd docs(audit): CAMPAIGN-6E — P-TIER2 deep-4 + P4-DEEP timing (all 8 legs PASS) admin 2026-07-15 21:11:39 +02:00
  • dee72cd0de docs: 6D audit — tag campaign6 autofs finding as track-only (operator reboot) admin 2026-07-15 19:48:43 +02:00
  • de5d8ef9b1 widen the reconciler fleet-wide (remove PBSDRHEAL_ONLY_HOST from the manifest) admin 2026-07-15 19:17:27 +02:00
  • 65544ae689 docs: record PBS-DR self-heal drill live-leg result (auto-healed hands-free) admin 2026-07-15 19:12:03 +02:00
  • dc7bcedb42 manifests: hub 0.56.0 + PBSDRHEAL_ONLY_HOST=demo-vm-felhom-2f4b00 (supervised rollout) admin 2026-07-15 18:29:22 +02:00
  • 6218e7919d hub v0.56.0: PBS-DR self-heal reconciler (re-stage a consumable secret) admin 2026-07-15 18:27:39 +02:00
  • e8f8c441fa docs: SPIKE PBS-DR self-heal — root cause = consumed secret, not missing descriptor admin 2026-07-15 17:53:42 +02:00
  • aff272c4be docs: CAMPAIGN-6D — P-DAY0-DEEP BLOCKED + MED/HIGH PBS-DR self-heal finding admin 2026-07-15 17:15:11 +02:00
  • 12a2eee9eb docs: CAMPAIGN-6D — P-DAY0 CORE PASS (golden 0.136.0 provision drill) admin 2026-07-15 15:33:02 +02:00
  • 13eb450d9f docs: CAMPAIGN-6D — P3-BROWSER PASS (escrow typed-back ceremony, hub 8-tab ring) admin 2026-07-15 14:46:10 +02:00
  • a17d863d3d docs: CAMPAIGN-6D — P3-DELIVERY PASS (enlarge-block + customer email), G4 restored admin 2026-07-15 14:04:07 +02:00
  • 6acd96debd docs: CAMPAIGN-6D audit — headline GREEN (Accept #1 + SQ3 immich), P-REG/P-PLACE/P5-REST/P4-coherence PASS admin 2026-07-15 13:43:32 +02:00
  • 08fef4872b hub v0.55.0: accept offbox_enlarge_blocked event (Task 3a-fix delivery chain) admin 2026-07-15 07:50:29 +02:00
  • 8d85da73af architecture §3: align capture-set API sketch to Task 3-core as-built admin 2026-07-14 21:42:10 +02:00
  • b27931216c architecture updated admin 2026-07-14 21:30:40 +02:00
  • d5012c64cd SPIKE restic snapshot shape: record findings-doc commit hash 0771d58 admin 2026-07-14 21:18:36 +02:00
  • 0771d58b58 SPIKE restic snapshot shape (SP-1/SP-2/SP-3): stats mode, forget grouping, restore shape admin 2026-07-14 21:18:11 +02:00
  • eff107d324 confirmations admin 2026-07-14 21:00:06 +02:00
  • 82280b1f57 added backup architecture admin 2026-07-14 20:57:47 +02:00
  • deacee1164 CAMPAIGN-6C: v0.131.0 F-S2/F-S3 live acceptance (4P-1..4P-5 all PASS) + F-6C-1 admin 2026-07-14 20:01:13 +02:00
  • 790ec845f7 docs(audit): backup-classification spike — coupling model VALIDATED (Immich DB-only restore broken-not-empty); offsite=unit-only live-proven; NEW F-S1 (tier-2 copies no userdata) + F-S2 (paperless-ngx appdata skipped); round-trip verdict: exclusion scoping admin 2026-07-14 16:39:55 +02:00
  • 671bd3fd91 CAMPAIGN-6B: note credential fully reverted at cleanup admin 2026-07-14 13:32:14 +02:00
  • 3335f2c02d CAMPAIGN-6B: .fab circle + edge + backup/regression (unattended); CRITICAL C6B-F1 admin 2026-07-14 13:29:13 +02:00
  • eb6b3bba56 @ CAMPAIGN-6A (Phase 1: reboot-driven NAS re-arm matrix) + 6B unattended continuation prompt admin 2026-07-14 12:17:26 +02:00
  • ffba9eb395 @ CAMPAIGN-5 findings doc (2026-07-14): NAS re-arm ring core + v0.129.0 fix live-proof admin 2026-07-14 10:12:21 +02:00
  • 0d1b0494b7 @ CAMPAIGN-4: demo host reboot + drive cycle (operator-authorized risky steps) admin 2026-07-14 00:45:20 +02:00
  • d306d2a5aa @ CAMPAIGN-4 findings doc (2026-07-13 night run, active block) admin 2026-07-13 23:52:48 +02:00
  • 962273ba8e @ hub: bump manifest image tag to 0.54.0 (change-password from Configuration UI) admin 2026-07-13 22:48:34 +02:00
  • a1d045079f @ hub v0.54.0: change operator login password from the Configuration UI admin 2026-07-13 22:46:49 +02:00
  • ed271fadb2 docs: escrow-wizard felhom.eu leg REPORT + CONTEXT (ruling F1 recorded; operator follow-ups: supervised wizard pass drill+demo, agent 0.88.0 publish/vouch) admin 2026-07-13 19:24:20 +02:00
  • 375cb082e2 host-install v1.16.0 (FELHOM_ESCROW via canonical sudoers fetch; hub hostInstallVersion synced, no deploy) + RUNBOOK-escrow-ceremony rewrite: controller wizard PRIMARY, CLI operator fallback, F1 threat-model paragraph (R over CF tunnel accepted 2026-07-13), stale-blob/supersede/void semantics admin 2026-07-13 19:01:46 +02:00
  • ac305fe57f audits: SPIKE controller-driven escrow ceremony — daemon-context mechanics ALL GO (drill VM, agent 0.87.0): PTY re-key no-TTY 3/3, sudoers refusal matrix 5/5, R pipe round-trip proven, env_reset clean, --upload hub-verified ~2.4s; premise correction: capability probes are list-mode admin 2026-07-13 17:15:52 +02:00
  • fa0ecb2cd7 RUNBOOK-peti-return: Phase 0a/1 execution record — STOPPED at Gate P1 (controller not converging; cluster split: guest not on the agent's node) admin 2026-07-13 16:24:33 +02:00
  • 39144a5844 docs: REPORT overwrite - hub v0.53.0 closing bundle (step-0 citation, four red-proofs, scenario E live legs, s13.2 roll-up before/after/recovery evidence, consumer list, operator STOP points) admin 2026-07-13 15:48:43 +02:00
  • 8e69e5edda docs: scripts CHANGELOG - manifest_bearer_gate.py entry (incl. the .gitignore *secret* un-tracking gotcha) admin 2026-07-13 15:11:46 +02:00
  • 3616dcbb7c manifest: hub 0.53.0 (closing bundle GitOps bump; rides with the report-api secretKeyRef - Secret created out-of-band 2026-07-13 before this sync) admin 2026-07-13 15:05:06 +02:00
  • 3efb1b1af1 docs: hub v0.53.0 closing bundle - CHANGELOG + CONTEXT (both operator rulings verbatim) + take-two F-14 disposition (SHIPPED, gated on escrow-acked deletion provenance) admin 2026-07-13 15:02:44 +02:00
  • 3682303131 scripts: manifest bearer gate lands as manifest_bearer_gate.py (the .gitignore *secret* pattern silently un-tracks any 'secret'-named gate file - the previous commit's gate never made it into git); references updated admin 2026-07-13 14:59:31 +02:00
  • 80aca3a3a1 hub + manifests: operator bearer out of git (secretKeyRef report-api) admin 2026-07-13 14:57:09 +02:00
  • 36c72138f1 hub: dead-host roll-up honesty - customer status folds worst expected host admin 2026-07-13 14:52:04 +02:00
  • 04861a7ed3 hub: F-14 part 2 — gated auto-Reissue on the PBS-DR enable dead-end admin 2026-07-13 14:44:42 +02:00
  • 2321077800 hub: F-14 part 1 — host-deletion provenance (host_deletions, in-tx) admin 2026-07-13 14:44:42 +02:00
  • 74fa61c7bc audits: disposition — backups-IA finding 2 (legacy-boot SystemDisks dead wizard) RESOLVED by felhom-agent v0.87.0 (slaves-walk, operator ruling 2026-07-13); live evidence drill replay + felhom-pve byte-identical regression; remaining: supervised wizard leg + Day-0 manifest vouch admin 2026-07-13 13:21:14 +02:00
  • a92e18b21f docs: hub v0.52.0 polish batch — CHANGELOG + REPORT + CONTEXT + REUSE (inline_confirm partial); take-two §4 dispositions: F-15/F-16/zero-toggle SHIPPED admin 2026-07-13 08:48:17 +02:00
  • 0e05c6966d manifest: hub 0.52.0 (polish batch GitOps bump) admin 2026-07-13 08:30:34 +02:00
  • 5d66c62bd6 hub: F-16 — inline two-step confirm partial replaces every native confirm() (offsite/PBS re-issue, freeze, telemetry reset, dismiss-all, regen-password, claim-resend, block/delete, geo-disable); hub_confirm_gate.py enforces zero admin 2026-07-13 08:19:54 +02:00
  • bad9203daa hub: F-15 instant reset codes — reset-request response carries the rotated {code_hash, generation, issued_at} (same shape/guarantee as the report ACK); claim-resent flash now states the operator-resend ACK lag admin 2026-07-13 08:04:33 +02:00
  • 11d0f55303 take-two re-drill record: zero-stop Day-0 on v1.15.0/0.86.0/0.51.0 — 1h22m, hands-free DR cascade, floor-update first proof, offsite round-trip; new findings F-14/F-15/F-16 admin 2026-07-12 23:13:29 +02:00
  • ccf89c0a67 manifest: hub 0.51.0 (DR-tier-by-default GitOps bump) admin 2026-07-12 20:48:20 +02:00
  • fda783bdaf docs: DR-tier-by-default batch — decisions 1-5 in CONTEXT, day0 ACL advice reversed, ceremony decision-4 policy block, WG disclosure (tester agreement + GO-LIVE D3), drill F-disposition table, REPORT admin 2026-07-12 20:43:25 +02:00
  • 448a68237a hub v0.51.0: DR-tier-by-default — per-customer dr_tier flag (default ON, legacy backfill from reality), cascade stages, WG-registration auto-provision hook, offsite-requires-DR guard (F-6 policy), host-page capability chips (inactive=neutral) admin 2026-07-12 20:37:00 +02:00
  • 007946faf4 installer v1.15.0: DR-tier-by-default sweep (F-7 pbs-apply, F-10 age, F-9 wg default-on, F-1 single version + hub const, F-2 dry-run auth, F-8 rotation pointer, ACL felhom-pbs kept) + hostinstall_gates.py admin 2026-07-12 19:52:56 +02:00
  • e205a2d6a1 test: claim engine — reset requests never alter claimed state (Scenario C non-DoS; leftover from the claim-arc session) admin 2026-07-12 19:38:42 +02:00
  • 6040c7b93d drill report: customer-claim arc resolution + post-claim-arc snapshot + follow-up observations admin 2026-07-12 19:20:39 +02:00
  • 8ded485a58 docs: customer-claim arc — REPORT/CONTEXT, G9 supersede, tester-agreement claim step, day0 D.3/D.4 gate, drill F-4/F-5 RESOLVED admin 2026-07-12 18:56:46 +02:00
  • 9a14f04819 manifest: hub 0.50.0 (customer-claim arc GitOps bump) admin 2026-07-12 18:47:03 +02:00
  • 3ded6cf7c1 hub v0.50.0: customer-claim arc docs (CHANGELOG, default template claim_code_* fields, REUSE rows) admin 2026-07-12 18:45:43 +02:00
  • 6b40eb8619 hub: customer-claim password arc parts 1+2 — code engine, emails, ACK, configgen bake, UI (v0.50.0) admin 2026-07-12 18:12:48 +02:00
  • b904477ed9 REPORT: hub v0.49.0 live validation complete — all 7 browser probes green admin 2026-07-12 17:54:51 +02:00
  • e96e2b2361 REPORT: hub v0.49.0 edit-a train — results, red-proofs, deploy verification, operator follow-ups admin 2026-07-12 17:43:46 +02:00
  • b1ab0ea0e5 docs+manifest: hub v0.49.0 — Edit tab merge train (CHANGELOG, REUSE rows, CONTEXT, GitOps bump) admin 2026-07-12 17:39:09 +02:00
  • 1d94b1a9e9 hub: scoped auto-refresh + style.css cache-bust + staging rule (v0.48.0 parts 3-4) admin 2026-07-12 17:37:04 +02:00
  • 2e03de1e0c hub: merge the customer edit page into the Edit tab (v0.48.0 edit-a, part 2) admin 2026-07-12 17:33:07 +02:00
  • e74014730a hub: extract config_form_body sub-template + configFormData builder (v0.48.0 part 1) admin 2026-07-12 17:24:59 +02:00
  • 3e949bc513 DRILL-day0-vm 2026-07-12: full report + runbook corrections (F-4/F-6 headline findings) admin 2026-07-12 17:16:25 +02:00
  • 0ed87f5dc4 docs(pilot): finalize 0.85/0.120 train — DB floor saved, Peti deferred no-ETA admin 2026-07-12 12:00:41 +02:00
  • 168e86b77d docs(pilot): publish-train 0.85/0.120 results (fleet half complete; Peti parked) admin 2026-07-12 11:15:27 +02:00
  • c322bac21a docs(break-glass): document operator-set FIXED root@pam credential (demo-felhom-01) admin 2026-07-12 11:15:07 +02:00
  • 0eb9dc2e9b manifests: raise global controller floor 0.113.0 → 0.120.0 (publish train) admin 2026-07-12 11:12:42 +02:00
  • d02a216d0f hub v0.48.0 CHANGELOG + logging-conventions: TRACE level + ring sizing/spill (controller fix-3/fix-6, CAMPAIGN-3 closed) admin 2026-07-12 10:31:26 +02:00
  • 9095981d0c hub: bump manifest to v0.48.0 (app_start_failed event acceptance — controller fix-3) admin 2026-07-12 10:13:14 +02:00
  • d7b3c82144 hub: accept app_start_failed event (controller fix-3, CAMPAIGN-3) — allowlist + customer message admin 2026-07-12 10:09:54 +02:00
  • f875ac913d docs: network-storage-nas — F8 one-classification-two-surfaces + F4 mapped_uid range (Task C) admin 2026-07-12 09:44:35 +02:00
  • 45bff0184f docs: backup-architecture — F7 atomic volume dumps + F6 no-single-copy + F5 stale sweep + NAS locality (Task B) admin 2026-07-12 09:18:21 +02:00
  • 0d73ca579b CAMPAIGN-3 Task A: agent v0.85.0 boot/recovery plane docs + host-install deployment_mode (--mode gates node self-heal) admin 2026-07-12 08:26:55 +02:00
  • f97f7803c7 CAMPAIGN-3: morning RCA — host loss = F12 CRITICAL automount ordering cycle (hardware exonerated); box recovered to defined state admin 2026-07-12 06:55:40 +02:00
  • bed9bd2c5a CAMPAIGN-3 audit: unattended night run — data plane solid; NAS automount re-arm plane broken (F10 CRITICAL, F9/F11/F7 HIGH); demo host DOWN after 4e reboot (HUMAN) admin 2026-07-12 04:29:48 +02:00
  • ff7a5d1c56 REPORT: hub v0.47.0 live validation ALL PASS (contrast + tabs + dr-drill deletions + offsite probe) admin 2026-07-11 21:59:09 +02:00
  • 658401c36d REPORT: fix self-referencing commit hash (77247f9) admin 2026-07-11 21:44:59 +02:00
  • 77247f9710 REPORT: hub v0.47.0 UI reorganization — implementation + deploy complete; live validation pending operator login admin 2026-07-11 21:44:19 +02:00
  • 10a7bf09f7 build runbook admin 2026-07-11 21:43:09 +02:00
  • 95d71fef2e hub v0.47.0: CHANGELOG + README tab/host-lifecycle/offsite docs + REUSE map + manifest bump to 0.47.0 admin 2026-07-11 21:39:44 +02:00
  • 0daddcd1c4 hub: offsite multi-endpoint management UI (v0.47.0 part 5) admin 2026-07-11 21:35:24 +02:00
  • 068427a729 hub: restore the host-delete escrow-ack gate (red-proof mutation swept by 146d165) admin 2026-07-11 21:28:04 +02:00
  • bca529be43 docs: flag hub v0.47.0 WIP swept into 146d165 (green gate passes; not deployed; needs author review) admin 2026-07-11 21:27:16 +02:00
  • 146d165c26 docs: Q1c GREEN — reboot survival automatic since agent 0.84.0 (feature doc + audit §7 + CONTEXT + REPORT) admin 2026-07-11 21:25:14 +02:00
  • ae950e5933 hub: shared host_detail_body sub-template + customer Host tab (v0.47.0 part 3) admin 2026-07-11 21:17:44 +02:00
  • 9f29bf34c0 hub: fix .data-table btn contrast + customer page hash tabs (v0.47.0 part 1-2) admin 2026-07-11 21:13:23 +02:00
  • 8e1a3f0d82 AUDIT §6: remediation PERFORMED — automount restart heals running guest (fix-1 pre-test PASS), CWA healthy, health ok admin 2026-07-11 20:19:37 +02:00
  • 0f37e647e3 AUDIT: NAS/CWA RCA 2026-07-11 — stub after 2nd reboot; deploy correct; display bug; hub WARN correct admin 2026-07-11 19:55:46 +02:00