admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • f8b8730c53 deploy: hub 0.27.0 (Hosts page) admin 2026-07-01 06:11:25 +02:00
  • 2289fc907c hub v0.27.0: Hosts page — read-only fleet view (audit F-M1) admin 2026-07-01 06:10:02 +02:00
  • 73b3f6ac71 docs: hub REPORT for v0.26.0 (config delivery + inbound retire, live-validated) admin 2026-06-30 22:17:40 +02:00
  • d88b43a6e6 deploy: hub 0.26.0 (manifest bump) admin 2026-06-30 21:53:03 +02:00
  • a3ac6c9488 hub v0.26.0: pull-based config delivery + retire inbound GUI controls admin 2026-06-30 21:49:33 +02:00
  • e51e03bd7b docs(audit): hub GUI vs current architecture findings (2026-06-30) admin 2026-06-30 20:13:48 +02:00
  • fdcbc04d82 host-install: seed agent backup.local_backup_retention=3 (vzdump keep-last default) admin 2026-06-30 19:44:08 +02:00
  • 34364b47c6 docs: REPORT for hub v0.25.0 (per-storage fill alerting, live-validated) admin 2026-06-30 19:08:36 +02:00
  • e1dd06e77a test(temp): restore storage_fill threshold to default after live validation admin 2026-06-30 19:07:07 +02:00
  • 5a3747f6ab test(temp): lower storage_fill_warn_percent to 20 for live alert validation admin 2026-06-30 19:04:50 +02:00
  • 063fb0cfd4 deploy: hub image 0.24.0 -> 0.25.0 (per-storage fill alerting) admin 2026-06-30 19:02:31 +02:00
  • 88073ac464 hub v0.25.0: per-storage worst-fill alerting (StorageFillChecker) admin 2026-06-30 19:01:20 +02:00
  • cac745ee04 docs: REPORT for hub v0.24.0 (dispatcher critical routing, Part 0) admin 2026-06-30 14:53:53 +02:00
  • 87f0794938 deploy: hub image 0.23.0 -> 0.24.0 (dispatcher critical routing) admin 2026-06-30 14:19:52 +02:00
  • 0ff1d3c883 hub v0.24.0: dispatcher routes critical severity (+ nil-prefs crash guard) admin 2026-06-30 14:18:45 +02:00
  • 6882d853ed docs: REPORT for hub v0.23.0 (host disk monitoring, live alert proven) admin 2026-06-30 13:55:58 +02:00
  • 77c61ff494 deploy: hub image 0.22.1 -> 0.23.0 (host disk monitoring) admin 2026-06-30 13:51:13 +02:00
  • 897997c164 hub v0.23.0: host root-disk pressure monitoring + alert admin 2026-06-30 13:48:55 +02:00
  • f133355e34 audit: §D supervised reboot done — F2-a + F2-b red-proofs PASS (findings closed) admin 2026-06-30 10:04:59 +02:00
  • 06727e3228 docs+config: operator email enabled (Part A, proven) + TESTRUN findings closed admin 2026-06-30 09:21:17 +02:00
  • 83ed127d53 hub-config: enable operator email alerts (operator_email + operator_enabled) admin 2026-06-30 09:10:10 +02:00
  • c978ea1951 testrun: coverage gaps RESOLVED — capability->hub alert fired live; 2 reboot findings (doubling NOT self-corrected, backup-lock) admin 2026-06-29 23:56:54 +02:00
  • f4d88c1ff4 docs: felhom.eu REPORT (HostLeafChecker) + hub README + self-health arc complete (spike doc) admin 2026-06-29 23:32:12 +02:00
  • c37658ebb0 hub: CHANGELOG v0.22.1 (HostLeafChecker wiring fix) admin 2026-06-29 23:27:31 +02:00
  • 8f3b247e6e manifest: hub 0.22.0 -> 0.22.1 (HostLeafChecker wiring) admin 2026-06-29 23:26:37 +02:00
  • 253117b292 hub: WIRE HostLeafChecker into the monitor loop (the wiring was missed in v0.22.0) admin 2026-06-29 23:25:20 +02:00
  • 27aa15fb93 manifest: hub 0.21.0 -> 0.22.0 (HostLeafChecker) admin 2026-06-29 23:16:54 +02:00
  • 9c5cf2975f hub: HostLeafChecker — proactive agent re-key detection (host_leaf_changed) v0.22.0 admin 2026-06-29 23:15:22 +02:00
  • dd2bb5fc01 audit(testrun): F1 RESOLVED — swap verify RestartCount+dwell (agent v0.47.0), live rollback confirmed admin 2026-06-29 22:50:17 +02:00
  • cbba20aa73 docs: felhom.eu REPORT (hub F2 + install-script preservation) + TESTRUN F2-closed admin 2026-06-29 22:01:57 +02:00
  • 575f62ab7f manifest: hub 0.20.0 -> 0.21.0 (F2 born-degraded alert) admin 2026-06-29 21:49:48 +02:00
  • a69e06354e host-install: --preserve-state-from + populated-host leaf guard (prevention B.2) admin 2026-06-29 21:46:45 +02:00
  • 12f038618e hub: F2 — alert on host already degraded/stale at (re)start (seed only healthy) v0.21.0 admin 2026-06-29 21:46:25 +02:00
  • a297639c58 testrun: full-stack no-mercy campaign — capstone pin-mismatch detection PASS (~25s), swap happy PASS + rollback finding, multi-drive reboot PASS admin 2026-06-29 21:10:33 +02:00
  • 26a6dde2fb audit(channel-health): IMPLEMENTED — controller v0.90.0 + hub v0.20.0 allowlist; live-validated admin 2026-06-29 20:42:38 +02:00
  • d3661319c8 manifest: hub 0.19.0 → 0.20.0 (accept agent_channel_* events) admin 2026-06-29 20:38:28 +02:00
  • 121405772f hub: accept controller agent_channel_* events (channel-health relay) v0.20.0 admin 2026-06-29 20:37:24 +02:00
  • 0d470b1e05 spike: controller-agent channel health — GO (Q1 classify map; Q2 memoized client self-heals, fresh probe faithful) admin 2026-06-29 20:06:06 +02:00
  • 6b1c2892d6 docs: controller-swap narrow-grant Option A IMPLEMENTED (agent v0.45.0) — spike + multidrive pointers resolved admin 2026-06-29 19:46:17 +02:00
  • 1141d74532 spike: narrow-grant controller-swap mechanics — GO (stdin tee + sudoers * spans spaces, grants stay scoped) admin 2026-06-29 19:27:15 +02:00
  • eea3cd4040 docs: hub REPORT (v0.19.0 capability alert) + multidrive audit countermeasure pointer admin 2026-06-29 18:57:23 +02:00
  • 2312572411 manifest: hub 0.18.0 → 0.19.0 (agent capability-degraded alert) admin 2026-06-29 18:53:22 +02:00
  • b7b165bff5 hub: HostCapabilityChecker — operator alert on agent capability-degraded (v0.19.0) admin 2026-06-29 18:50:50 +02:00
  • c6bae9515a audit(multidrive): §8 Outcome — FIXED via sudoers completeness pass; controller-swap surfaced admin 2026-06-29 16:06:41 +02:00
  • 66a001de0b spike: multi-drive mutual-exclusion — root cause is bound_under_parent detection bug (lxc-info denied under non-root agent), not propagation/gate admin 2026-06-29 15:33:44 +02:00
  • 1777c89fb9 spike(pin-mismatch): §9 Outcome — R1 executed, controller↔agent service restored admin 2026-06-29 15:08:58 +02:00
  • 8254b8823e spike(pin-mismatch): follow-up — aside-var-lib holds matching token store; R1 = one-copy fix for pin+token admin 2026-06-29 14:44:10 +02:00
  • 2de9659592 spike: controller↔agent TLS leaf-pin mismatch — root→non-root migration regenerated agent leaf (findings) admin 2026-06-29 14:38:43 +02:00
  • 0719db0d53 spike: NAS network storage (media automount + restic backup target) — findings admin 2026-06-29 11:44:40 +02:00
  • b4ce6c10b5 docs: FINDING — app-email rollout mechanism gaps (calcom/nextcloud/immich) admin 2026-06-29 10:32:56 +02:00
  • 576f4ca88b docs: REPORT — hub v0.18.0 deployed + live relay validated admin 2026-06-29 08:58:06 +02:00
  • 2e749741b8 deploy: hub 0.18.0 (app-email passthrough) admin 2026-06-29 08:48:08 +02:00
  • fa3c4f2657 hub v0.18.0: app-email passthrough POST /api/v1/mail → Resend SMTP admin 2026-06-29 08:45:22 +02:00
  • 4b97855cdd report: hub /notify verified end-to-end on new key; Gmail (S4) done; only S7 (delete old key) remains admin 2026-06-29 08:03:31 +02:00
  • 3044965a9b docs: REPORT + already-committed secrets runbook for Resend rotation admin 2026-06-29 07:56:21 +02:00
  • feea06062a secrets: rotate + de-git Resend key; source from out-of-band Secret/resend-api admin 2026-06-29 07:50:30 +02:00
  • 35c6632a64 docs(audit): SPIKE findings — on-box SMTP app-relay (apps → shim → hub → Resend) admin 2026-06-28 19:27:07 +02:00
  • 808d0e8756 REPORT: website Proxmox-platform refresh (Option 3) — live-verified admin 2026-06-28 10:01:31 +02:00
  • aa3d7c762d website: reflect Proxmox-based platform (foundation framing, stack diagram, FAQ) admin 2026-06-28 09:58:38 +02:00
  • 6c285ba033 REPORT + Day-0 doc: BUNDLE slice (hub v0.16.0 artifact manifest + host-install v1.1.0 self-install) admin 2026-06-28 09:03:34 +02:00
  • 30ecf738c2 host-install: install the sudo package for the non-root agent model (visudo+sudo) admin 2026-06-28 08:54:35 +02:00
  • cc6052ca55 host-install: add --skip-provision (agent-only install/verify path) admin 2026-06-28 08:51:18 +02:00
  • d5266ca009 hub v0.16.0: seed artifact manifest from env; manifests image -> 0.16.0 admin 2026-06-28 08:46:17 +02:00
  • 39ef64e128 hub v0.16.0 + host-install v1.1.0: Day-0 artifact manifest + self-install the agent (BUNDLE slice) admin 2026-06-28 08:38:26 +02:00
  • d65b2f74ea manifests: hub global controller-version floor → 0.87.0 (Phase 2 live) admin 2026-06-27 12:20:29 +02:00
  • e6c8ddcf7f manifests: hub image → 0.15.0 (Phase 2 managed updates) admin 2026-06-27 12:03:04 +02:00
  • 30380a59f4 hub v0.15.0: Phase 2 managed updates — per-customer controller-version floor admin 2026-06-27 11:59:30 +02:00
  • ea09ead806 docs: controller updates — Phase 1 shipped (agentic), Phase 2 next admin 2026-06-26 21:43:25 +02:00
  • 89a2e508a7 scripts: felhom-host-install.sh v1.0.0 — Day-0 host bootstrap (live-validated) admin 2026-06-26 20:04:25 +02:00
  • 15397468df REPORT: hub v0.14.0 host-enroll — shipped + live-verified admin 2026-06-26 15:39:28 +02:00
  • 8098237ce1 hub v0.14.0: passphrase-authed host enrollment (Day-0 option C) admin 2026-06-26 15:35:24 +02:00
  • 230980f7a8 spike(day0): findings — first-boot trust handshake (operator-deploy) admin 2026-06-26 15:12:27 +02:00
  • 347546e597 test(nomercy): Phase 5 + deliverable summary — campaign complete admin 2026-06-23 20:20:50 +02:00
  • 2c1441f5dd test(nomercy): Phase 4 complete — 4.4 mountpoint-gate, 4.6 concurrency; 4.7 deferred admin 2026-06-23 20:16:38 +02:00
  • cd6715d592 test(nomercy): 4.3 intent-gate PASS (ejected drive not auto-rebound) admin 2026-06-23 20:12:53 +02:00
  • de4ff8b39b test(nomercy): Phase 4 part 1 — host reboot (4.1/4.2/4.5); F3 onboot=0, F4 double-bind admin 2026-06-23 20:09:16 +02:00
  • 14e2ac98f4 test(nomercy): pre-4.1 host-reboot marker (committing before host reboot, guardrail 8) admin 2026-06-23 20:04:55 +02:00
  • e7517c4185 test(nomercy): Phase 3 complete — server restart PASS; F2 FileBrowser bounce admin 2026-06-23 20:03:35 +02:00
  • c50bd55392 test(nomercy): Phase 3 partial — 3.1 banner gone, 3.2 routes; pre-3.3-reboot commit admin 2026-06-23 19:58:13 +02:00
  • c6cb8a51e7 test(nomercy): Phase 2 complete — sys_drive split holds (2.1/2.2/2.3/2.4 PASS) admin 2026-06-23 19:56:38 +02:00
  • 4baed17e89 test(nomercy): Phase 1 complete — stable-path model holds; F1 restic dead-weight admin 2026-06-23 19:52:38 +02:00
  • 8746c0fb7b test(nomercy): Phase 1 partial — 1.1/1.2/1.5/1.12 PASS, 1.3/1.4/1.8 by-design block admin 2026-06-23 19:41:05 +02:00
  • 234e827b21 test(nomercy): Phase 0 floor + baseline captured admin 2026-06-23 19:29:47 +02:00
  • e8a5bdc492 docs(audit): DIAGNOSE re-enrolled drives not binding after 9201 re-provision admin 2026-06-23 17:15:30 +02:00
  • add5be5bd5 docs(tests): test campaign #3 'NO MERCY' findings (brutal chaos/edge, demo 9201) admin 2026-06-22 22:06:00 +02:00
  • 445db9a625 docs(controller): storage doc — v0.75.0 drive-absent userdata MkdirAll gate (1c) admin 2026-06-22 20:55:10 +02:00
  • e4f49491a3 docs(tests): Finding #1 re-diagnosis — TEST ARTIFACT (docker kill != crash); controller auto-recovers admin 2026-06-22 19:35:08 +02:00
  • 58fe93034f docs(tests): test campaign #2 findings (chaos/edge-cases, demo 9201) admin 2026-06-22 19:10:51 +02:00
  • a9ca5b4e68 docs(tests): 8443 unreachability ROOT CAUSE — controller http.Transport leak (read-only diagnosis) admin 2026-06-22 17:00:24 +02:00
  • f70c011749 docs(tests): unattended test campaign findings (2026-06-22, demo 9201) admin 2026-06-22 16:29:10 +02:00
  • 4a2d72e238 REPORT: hub v0.13.1 DR-recipe v1 drive-shape sync — live-validated assembly, zero secrets admin 2026-06-16 20:34:44 +02:00
  • 149a3b092e hub v0.13.1 — DR recipe v1 drive-shape sync (test-data + regression guard only) admin 2026-06-16 20:25:51 +02:00
  • 5f5e3c54a1 hub v0.13.0: DR recipe — assemble + store + view the secret-free reconstruction recipe admin 2026-06-16 18:49:45 +02:00
  • 228dac4c06 docs(audit): SPIKE — Phase 2 DR recipe + storage diagnosis (report-only) admin 2026-06-16 14:18:39 +02:00
  • 691c0208c5 docs: REPORT.md for hub v0.12.0 infra-backup retirement admin 2026-06-16 11:16:11 +02:00
  • 0635640848 hub v0.12.0: retire Infra Backup, purge its plaintext secrets, fix backup-deadline email admin 2026-06-16 11:08:06 +02:00
  • 2f7acb7d07 docs(audit): SPIKE — characterize Infra Backup (revive vs retire) admin 2026-06-16 10:04:55 +02:00
  • d105657355 docs: M3 live re-verification addendum (closes E14/E15 residual) + two controller UI fixes admin 2026-06-15 21:53:10 +02:00
  • 9ee929ba6d docs(audit): storage lifecycle completion + acceptance sweep (incl. live host reboot) admin 2026-06-15 20:42:21 +02:00
  • f1df01b5c5 docs(spike): stable intermediary mount — swap drive underneath (C1-immune, no-restart) admin 2026-06-15 15:26:37 +02:00