felhom.eu

Files

T

admin c322bac21a docs(break-glass): document operator-set FIXED root@pam credential (demo-felhom-01)

§5: add the standing note that a host's root@pam may be pinned to a known
operator-chosen password instead of the random day-0 one — set via chpasswd +
re-vault (PUT /hosts/<id>/recovery-credential, host api_key), guarded by the
break_glass state marker so plain installer re-runs skip it. Caveats: never
--rotate-recovery such a host; a full from-scratch reinstall wipes state.json
and re-randomizes (re-run the set-and-vault). Captures why demo-felhom-01's
root@pam "kept changing" until it was pinned 2026-07-12.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017CDMFpFx84pfviCTVuGGhf

2026-07-12 11:15:07 +02:00

break-glass.md

docs(break-glass): document operator-set FIXED root@pam credential (demo-felhom-01)

2026-07-12 11:15:07 +02:00

day0-install.md

docs: GL-8 wrap — runbook F3/F6 notes, findings FIXED, REPORT, decision log

2026-07-08 19:40:57 +02:00

logging-conventions.md

hub v0.48.0 CHANGELOG + logging-conventions: TRACE level + ring sizing/spill (controller fix-3/fix-6, CAMPAIGN-3 closed)

2026-07-12 10:31:26 +02:00

offsite-endpoint.md

docs: PBS DR slice-1 runbook §10 addendum + REPORT/CONTEXT (hub v0.44.0 live)