admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 0daddcd1c4 hub: offsite multi-endpoint management UI (v0.47.0 part 5) admin 2026-07-11 21:35:24 +02:00
  • 068427a729 hub: restore the host-delete escrow-ack gate (red-proof mutation swept by 146d165) admin 2026-07-11 21:28:04 +02:00
  • bca529be43 docs: flag hub v0.47.0 WIP swept into 146d165 (green gate passes; not deployed; needs author review) admin 2026-07-11 21:27:16 +02:00
  • 146d165c26 docs: Q1c GREEN — reboot survival automatic since agent 0.84.0 (feature doc + audit §7 + CONTEXT + REPORT) admin 2026-07-11 21:25:14 +02:00
  • ae950e5933 hub: shared host_detail_body sub-template + customer Host tab (v0.47.0 part 3) admin 2026-07-11 21:17:44 +02:00
  • 9f29bf34c0 hub: fix .data-table btn contrast + customer page hash tabs (v0.47.0 part 1-2) admin 2026-07-11 21:13:23 +02:00
  • 8e1a3f0d82 AUDIT §6: remediation PERFORMED — automount restart heals running guest (fix-1 pre-test PASS), CWA healthy, health ok admin 2026-07-11 20:19:37 +02:00
  • 0f37e647e3 AUDIT: NAS/CWA RCA 2026-07-11 — stub after 2nd reboot; deploy correct; display bug; hub WARN correct admin 2026-07-11 19:55:46 +02:00
  • 78d16b37a1 docs: REPORT + CONTEXT for hub v0.46.0 (deployed, Synced/Healthy) admin 2026-07-11 17:18:57 +02:00
  • 7c038df63c hub 0.46.0 manifest bump + logging-conventions runbook + CLAUDE logging rule admin 2026-07-11 17:02:54 +02:00
  • e35b1ae0e6 hub v0.46.0: observability pass — per-box log pulls, bundle custody, 72h TTL + secret gate admin 2026-07-11 16:57:47 +02:00
  • 1ee5559772 docs: REPORT + CONTEXT for the NAS/coupling backlog-clear (hub v0.45.0, DSM spike, Q1c FAIL) admin 2026-07-11 15:49:02 +02:00
  • c358a361d0 docs: network-storage — DSM validated recipe + Q1c CLOSED (FAIL, restart reassert gap) admin 2026-07-11 15:47:23 +02:00
  • 9b95f88e8c audit(Q1c): NAS automount trigger does NOT survive a guest reboot (empty-dir FAIL) + follow-up admin 2026-07-11 15:43:26 +02:00
  • 37222d3e1d manifest: hub image 0.44.0 -> 0.45.0 (floor-UI + MinAgent conditional floor) admin 2026-07-11 15:35:59 +02:00
  • bbecf0592e hub v0.45.0: floor-UI separation + effective-floor source + per-box MinAgent conditional floor admin 2026-07-11 15:33:14 +02:00
  • 37e60b46d2 docs(audit): DSM spike — consumer recipes validated on real DSM 7.2, hardlink caveat closed, taxonomy identical admin 2026-07-11 14:47:48 +02:00
  • 4eaabb21d4 docs: publish-train rules — coupled-release gates codified (option-2) admin 2026-07-11 13:55:37 +02:00
  • a487ab2fc4 pilot: publish-train 0.81/0.113 results — Peti live, floor auto-confirm proof captured admin 2026-07-11 13:00:02 +02:00
  • 16390d02be floor: DEFAULT_MIN_CONTROLLER_VERSION 0.87.0 -> 0.113.0 (publish train 0.81/0.113; manifest vouches both — order rule honored) admin 2026-07-11 12:53:57 +02:00
  • 789bbd1c8f docs: REPORT + CONTEXT for the NAS verify-before-commit share (host-install v1.13.0) admin 2026-07-11 10:33:24 +02:00
  • 27e2fb05c0 host-install v1.13.0: systemd-journal group for the agent user + NAS feature doc admin 2026-07-11 10:10:16 +02:00
  • e80e14d674 docs(audit): record SPIKE-nas-verify findings-doc commit hash (b57f6c1) admin 2026-07-11 08:20:22 +02:00
  • b57f6c1509 docs(audit): SPIKE NAS verify mechanisms + squash matrix — Q1-Q5 answered, Route A accepted-with-caveats admin 2026-07-11 08:20:00 +02:00
  • 8ca1272db6 CONTEXT: agent v0.80.0 slice-2 shipped, demo adoption-proven, Peti phase pending admin 2026-07-11 07:27:09 +02:00
  • 2440d52e1e runbook: Peti PBS DR enable (supervised phase) — box prep, signed 0.80.0 update, tier enable, ceremony admin 2026-07-11 07:21:19 +02:00
  • 3ea2b481da docs: PBS DR slice-1 runbook §10 addendum + REPORT/CONTEXT (hub v0.44.0 live) admin 2026-07-10 21:03:51 +02:00
  • 32ca1f60a7 tenantsync v1.0.0 live fix (client json is {data:[...]}-wrapped) + hub image bump 0.44.0 admin 2026-07-10 20:59:55 +02:00
  • ce6a56691e hub v0.44.0: PBS DR tier SLICE 1 — felhom-tenantsync surface (script+client) + hub provisioning flow (consume-once host secret, pbs_dr desired-state descriptor, fail-closed + idempotent, re-issue) admin 2026-07-10 20:49:48 +02:00
  • 00afadc1fe spike: PBS DR tier provisioning SLICE 0 — all 3 mechanisms settled (token-create impossible -> pinned sudoers; ep0 tenancy op-set + stdout secret transport proven; encryption-key autogen births K, pvesm remove deletes it) admin 2026-07-10 20:12:26 +02:00
  • 4703b9ec4e added runbooks admin 2026-07-10 19:41:04 +02:00
  • cc2b50bc72 REPORT: hub v0.43.1 deployed (Git Sync optional hint; pairs with controller v0.112.0) admin 2026-07-10 18:02:22 +02:00
  • 8a3afa75b3 deploy: hub 0.43.1 (Git Sync optional hint) admin 2026-07-10 17:57:13 +02:00
  • 3e0c327f16 hub v0.43.1: Git Sync form hint — credentials optional, private catalog only (pairs with controller v0.112.0) admin 2026-07-10 17:53:52 +02:00
  • 6eabbcd7ce REPORT: live tail round-trip COMPLETED end-to-end via the hub UI (request->ACK->tail->viewer, consume-once live) admin 2026-07-10 16:54:50 +02:00
  • ba762f6d60 REPORT: hub v0.43.0 deployed + live-validated (context leg proven live incl. redaction; tail click = 1-step operator follow-up) admin 2026-07-10 16:25:54 +02:00
  • efdf683ac7 deploy: hub 0.43.0 (remote app-log diagnostics) admin 2026-07-10 16:08:10 +02:00
  • 865a4a6afb docs: hub v0.43.0 CHANGELOG + REUSE entries (log-tail pull pattern, upsert guards) admin 2026-07-10 16:05:49 +02:00
  • c084046af0 hub v0.43.0: remote app-log diagnostics — copyable issues + context + on-demand log tails + range/dismissal fixes admin 2026-07-10 16:03:32 +02:00
  • 0cc70a7a5a REPORT: record v0.42.0 deploy + live-validation outcome admin 2026-07-10 15:22:23 +02:00
  • 9f1759132d hub: configgen test pinning logging.level=debug propagation (v0.42.0 e2e leg) admin 2026-07-10 15:21:55 +02:00
  • 0f28add0bf deploy: hub 0.42.0 (remote debug-mode toggle) admin 2026-07-10 15:16:34 +02:00
  • c918baa656 hub v0.42.0: remote "Debug mód" toggle on the customer config editor admin 2026-07-10 15:14:43 +02:00
  • f835203bc9 runbook: publish train A/B/C DONE — golden 0.110.0 baked+published (drill reconstruct deviation) admin 2026-07-10 10:11:49 +02:00
  • a848bd6a83 runbook: publish train PARTIAL — agent 0.79.0 published (Phase B done); Phase C blocked on drill-VM launch cmd admin 2026-07-10 09:57:17 +02:00
  • c8d36b07e4 validation: new-box restore round-trip PASS (9/9 sha-identical) + old-archive retirement decision admin 2026-07-10 09:29:22 +02:00
  • 004dabb7ca context: offsite overnight soak result + C2 stale-lock finding admin 2026-07-10 04:33:18 +02:00
  • 292a23bf39 campaign: offsite overnight soak 2026-07-10 — PASS + 1 HIGH finding (crash-mid-prune stale lock) admin 2026-07-10 04:32:32 +02:00
  • 09bd7191e0 docs: SLICE 4 — hub README, REPORT, CONTEXT (offsite arc build-complete) admin 2026-07-10 00:25:57 +02:00
  • 04826c922e manifests/hub: 0.40.0 -> 0.41.0 (SLICE 4 OffsiteChecker + freeze lever) admin 2026-07-10 00:00:49 +02:00
  • fad5573dd3 hub v0.41.0: OffsiteChecker (fill 90/95 + staleness >48h) + operator freeze lever (SLICE 4) admin 2026-07-09 23:57:12 +02:00
  • cb26dc7e83 docs: SLICE 3 — hub README, REPORT, CONTEXT admin 2026-07-09 23:26:16 +02:00
  • c24d4afeee manifests/hub: 0.39.0 -> 0.40.0 (SLICE 3 escrow status in ACK) admin 2026-07-09 23:21:37 +02:00
  • 49d1233391 hub v0.40.0: store escrow restic_pw_sha256 + serve escrow status in the report ACK (SLICE 3) admin 2026-07-09 23:10:29 +02:00
  • e0d1733b85 docs: offsite hardening bundle — hub README, REPORT, CONTEXT admin 2026-07-09 22:48:41 +02:00
  • 17d9af5c13 manifests/hub: 0.38.1 -> 0.39.0 (offsite hardening F4/F2/F5) admin 2026-07-09 22:40:41 +02:00
  • 17cc67f7cd hub v0.39.0: offsite hardening — F4 credential re-issue, F2 scan retry, F5 save UX admin 2026-07-09 22:39:08 +02:00
  • ecf9185605 validation record: offsite provisioning live e2e PASS (2026-07-09) + CONTEXT/REPORT admin 2026-07-09 22:04:44 +02:00
  • 6d5b3c1c38 manifests/hub: 0.38.0 -> 0.38.1 (offsite provisioning detached from client ctx) admin 2026-07-09 21:02:44 +02:00
  • 7c70c545d9 hub v0.38.1: offsite provisioning must survive a client disconnect (live F1) admin 2026-07-09 21:00:27 +02:00
  • 0a65f2be5f manifests/hub: wire HETZNER_TOKEN + HETZNER_POOL_BOX_ID from Secret/storagebox (offsite provisioning) admin 2026-07-09 20:39:55 +02:00
  • 6e86eb6d51 added secret admin 2026-07-09 20:36:22 +02:00
  • 8cf42f22d7 updated gitignore admin 2026-07-09 20:13:01 +02:00
  • b0bf500967 deploy(hub): bump hub image to 0.38.0 (offsite SLICE 2 host-key fingerprint) admin 2026-07-09 19:16:12 +02:00
  • 229650b4ee hub v0.38.0: offsite SLICE 2 — capture the box host-key fingerprint admin 2026-07-09 19:14:36 +02:00
  • cff3a30996 deploy(hub): bump hub image to 0.37.0 (offsite provisioning SLICE 1) admin 2026-07-09 18:40:21 +02:00
  • 44ec06b50f hub v0.37.0: offsite provisioning SLICE 1 — Cloud-API client + provisioning core admin 2026-07-09 18:38:24 +02:00
  • 996d403248 docs(audit): Hetzner API provisioning spike — both offsite models FIT admin 2026-07-09 17:46:43 +02:00
  • c1cfbe817b docs(audit): fork-4 custody VALIDATED end-to-end live (supervised) admin 2026-07-09 16:31:58 +02:00
  • febdc560f4 docs(audit): fork-4 restic-password custody spike — VALIDATED (escrow-under-R) admin 2026-07-09 14:15:01 +02:00
  • 463ea369c4 docs(audit): offbox v0.104.0 VALIDATED live against the Storage Box (supervised) admin 2026-07-09 13:17:52 +02:00
  • 9b250b97c9 docs(audit): restic→Storage Box direct-from-residential spike (FIT/IPv4) admin 2026-07-09 11:05:36 +02:00
  • 3472b90368 docs(audit): ep0 Hetzner Storage Box SSHFS + PBS-datastore feasibility spike admin 2026-07-09 09:48:57 +02:00
  • 0efdc78d75 docs: GL-7 closeout — tester agreement + hub 0.36.0 CHANGELOG/REPORT/CONTEXT + GO-LIVE G7 done admin 2026-07-09 08:44:21 +02:00
  • 02c748eb2a deploy: hub 0.36.0 (GL-7 install-command generator + passphrase hardening) admin 2026-07-09 08:34:38 +02:00
  • 844fbfa749 GL-7 Part 2: install-command generator on the customer page admin 2026-07-09 08:29:15 +02:00
  • b93dd03f0a GL-7 Part 1: passphrase hardening on the customer page (security) admin 2026-07-09 08:23:41 +02:00
  • fb8e5111cf docs: GL-8 wrap — runbook F3/F6 notes, findings FIXED, REPORT, decision log admin 2026-07-08 19:40:57 +02:00
  • 18a556a514 GL-8: BYO coexistence hardening (host-install v1.12.0) — F3/F6/F1 admin 2026-07-08 19:37:49 +02:00
  • 1dc86523b5 docs(pilot): GL-6 wrap-up — gates LIVE-VALIDATED, REPORT, decision log admin 2026-07-08 16:07:51 +02:00
  • 87ba30ae91 docs(pilot): GL-6 COMPLETE — Gate 6 GO, summary, findings ledger, deviations admin 2026-07-08 16:04:54 +02:00
  • 3d91ce8fe3 docs(pilot): GL-6 Phase 6 — appliance reinstall + drive re-enroll + backup green admin 2026-07-08 16:01:55 +02:00
  • 089fa70bbe docs(pilot): GL-6 Phase 5 PASS — clean byo exit, data intact 2nd time admin 2026-07-08 15:33:23 +02:00
  • f29b8ab9cb docs(pilot): GL-6 Phase 4 PASS — C7 live-validated; F7 (R2 heal bring-up-only) admin 2026-07-08 15:27:21 +02:00
  • 37fafd04f0 docs(pilot): GL-6 Phase 3 PASS — armed-key update round-trip (real op key) admin 2026-07-08 15:19:36 +02:00
  • 9dfa247e04 docs(pilot): GL-6 2b — drive re-enroll+data-visible PASS; F6 dnsmasq; G10 open-dashboard admin 2026-07-08 13:59:05 +02:00
  • 6d7061d9f4 docs(pilot): GL-6 F5 (dashboard public DNS absent post-reinstall); bridge OK admin 2026-07-08 13:27:59 +02:00
  • 7d7f33b488 docs(pilot): GL-6 — F4 fixed (v1.11.3) + live-proven; drill record admin 2026-07-08 13:03:30 +02:00
  • 98bf5a434f GL-6 F4 fix: v1.11.3 — --resume repopulates producer-step outputs admin 2026-07-08 13:01:33 +02:00
  • 4cb70ff88b docs(pilot): GL-6 Phases 0-2 evidence + findings F1-F4 admin 2026-07-08 12:52:07 +02:00
  • 0640aa06ea GL-6 Gate-0 ruling (G3): v1.11.2 — anonymous artifact fetch supported admin 2026-07-08 12:28:51 +02:00
  • bd97bc3474 pin operator public keys (key ceremony) admin 2026-07-08 11:27:50 +02:00
  • e5617969ae docs(pilot): GL-5b shipped — new G12 (restore-test full-fidelity), bump target 0.76.0 admin 2026-07-08 09:55:18 +02:00
  • 5debe02031 docs(pilot): GL-5 shipped — G8 flip + GL-4 status housekeeping + decision log admin 2026-07-08 09:24:12 +02:00
  • bd4f735e98 added GL-1 admin 2026-07-08 08:21:48 +02:00
  • f7cc6a720e GL-4: uninstaller gap-closure + operator-key day-0 fold (host-install v1.11.0) admin 2026-07-08 08:14:07 +02:00
  • a63cc7151b docs(pilot): RUNBOOK GL-1 executed — agent 0.74.0 + golden 0.103.0 published admin 2026-07-07 21:07:15 +02:00
  • 02d63ed070 GL-2: --mode appliance|byo install profile (host-install v1.10.0) + harness admin 2026-07-07 20:26:32 +02:00
  • 1a1e42addb docs: campaign-2 R1/R2 root-cause correction + DR bind-mount source spike admin 2026-07-07 19:08:03 +02:00
  • 7714f1f6e4 docs(tests): Campaign 2 report + evidence — DR primitives, self-update, storage, faults, endurance admin 2026-07-07 14:26:52 +02:00