[INFO] felhom-host-install v1.25.0 — mode=byo customer=demo-hp vmid=9201



[STEP] 1/8 pre-flight

perl: warning: Setting locale failed.

perl: warning: Please check that your locale settings:

	LANGUAGE = (unset),

	LC_ALL = (unset),

	LC_CTYPE = "UTF-8",

	LC_NUMERIC = (unset),

	LC_COLLATE = (unset),

	LC_TIME = (unset),

	LC_MESSAGES = (unset),

	LC_MONETARY = (unset),

	LC_ADDRESS = (unset),

	LC_IDENTIFICATION = (unset),

	LC_MEASUREMENT = (unset),

	LC_PAPER = (unset),

	LC_TELEPHONE = (unset),

	LC_NAME = (unset),

	LANG = "en_US.UTF-8"

    are supported and installed on your system.

perl: warning: Falling back to a fallback locale ("en_US.UTF-8").

[INFO]   pve-manager/9.2.2/b9984c6d90a4bd80 (running kernel: 7.0.2-6-pve)

[INFO]   node: felhom-host (auto)

[INFO]   agent config: /etc/felhom-agent/agent.json

[INFO]   agent: not installed yet — will be fetched + installed in step 5/8

[INFO]   local-lvm free: ~42 GiB

[WARN] local-lvm free ~42 GiB < hard min 120 GiB

[INFO]   free RAM: ~26457 MiB

[INFO]   existing guests on this host: 1 (pct+qm)

[INFO]   archive storage 'local' present

[INFO]   acl storages all present or pre-positioned: local local-lvm felhom-pbs

[INFO]   host DNS (:53): free

[INFO]   hub reachable (https://hub.felhom.eu)

[OK]   customer 'demo-hp' exists + passphrase valid

[INFO]   golden (local): local:backup/vzdump-lxc-9100-2026_08_03-07_33_00.tar.zst



[STEP] BYO disclosure — installing Felhom on a host the operator does NOT own will create:

    pveum:  roles FelhomAgentBase/FelhomAgentGuest/FelhomAgentStore + user felhom-agent@pve + token felhom-agent@pve!agent

            + scoped ACL grants (Base@/, Guest@/pool/felhom, Store@[local local-lvm felhom-pbs]) + the 'felhom' pool

    agent:  service user felhom-agent + /usr/local/bin/felhom-agent (+ .bak-* backups; A/B slots via the guarded self-update)

            + /etc/systemd/system/felhom-agent.service (+ felhom-agent-rollback.service + start-limit drop-in)

            + /etc/sudoers.d/felhom-agent + state dir /var/lib/felhom-agent + config /etc/felhom-agent/agent.json (0600)

    host:   /usr/local/sbin/felhom-mkfs-guarded + /usr/local/sbin/felhom-selfupdate-guarded

            + /usr/local/sbin/felhom-pbs-apply (PBS-DR apply wrapper — DR capability is baked

              on every install; ACTIVATION stays a hub flag, off = zero effect on this host)

            + felhom-mgmt-watchdog service+timer+script + /etc/tmpfiles.d/felhom-privsep.conf

            + guest-hook snippet under /var/lib/vz/snippets/ (agent-installed at runtime)

            + the 'sudo' and 'age' packages if absent + install state dir /var/lib/felhom-install

    wg:     an OUTBOUND WireGuard tunnel to the Felhom hub (wg_tunnel.enabled=true — base

            infrastructure like the cloudflared tunnel; hands-free peer registration; the

            operator can disable it per-customer hub-side on request)

    guest:  the provisioned Felhom LXC (vmid 9201, capped 4 cores / 8192 MiB) + its volumes

            + the golden vzdump imported onto storage 'local'

    update: operator-signed self-update authority: felhom-op-1

    NOT touched in byo mode: root@pam (no break-glass), host DNS (:53), OOB sshd.



[INFO]   (--preflight-only: acknowledgement prompt skipped — nothing will be mutated)

[OK] pre-flight passed



[OK] PRE-FLIGHT PASS (mode=byo) — no state written, no install step executed

Connection to 100.76.96.79 closed.