65 lines
3.5 KiB
Plaintext
65 lines
3.5 KiB
Plaintext
|
|
[INFO] felhom-host-install v1.28.0 — mode=byo customer=drill-r50 vmid=120
|
|
|
|
[STEP] 1/8 pre-flight
|
|
perl: warning: Setting locale failed.
|
|
perl: warning: Please check that your locale settings:
|
|
LANGUAGE = (unset),
|
|
LC_ALL = (unset),
|
|
LC_CTYPE = "UTF-8",
|
|
LC_NUMERIC = (unset),
|
|
LC_COLLATE = (unset),
|
|
LC_TIME = (unset),
|
|
LC_MESSAGES = (unset),
|
|
LC_MONETARY = (unset),
|
|
LC_ADDRESS = (unset),
|
|
LC_IDENTIFICATION = (unset),
|
|
LC_MEASUREMENT = (unset),
|
|
LC_PAPER = (unset),
|
|
LC_TELEPHONE = (unset),
|
|
LC_NAME = (unset),
|
|
LANG = "en_US.UTF-8"
|
|
are supported and installed on your system.
|
|
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
|
[INFO] pve-manager/9.2.2/b9984c6d90a4bd80 (running kernel: 7.0.2-6-pve)
|
|
[INFO] node: drill-pve (auto)
|
|
[INFO] agent config: /etc/felhom-agent/agent.json
|
|
[INFO] agent: not installed yet — will be fetched + installed in step 5/8
|
|
[INFO] local-lvm free: ~75 GiB
|
|
[WARN] local-lvm free ~75 GiB < hard min 120 GiB
|
|
[INFO] free RAM: ~6245 MiB
|
|
[INFO] existing guests on this host: 0 (pct+qm)
|
|
[INFO] archive storage 'local' present
|
|
[INFO] acl storage 'felhom-pbs' not present yet — expected: the PBS-DR tier creates it; the grant is pre-positioned deliberately
|
|
[INFO] acl storages all present or pre-positioned: local local-lvm felhom-pbs
|
|
[INFO] dnsmasq: not present before Felhom — recorded; uninstall will remove it again if we install it
|
|
[INFO] host DNS (:53): free
|
|
[INFO] hub reachable (https://hub.felhom.eu)
|
|
[OK] customer 'drill-r50' exists + passphrase valid
|
|
[INFO] golden (local): local:backup/vzdump-lxc-9100-2026_08_13-07_43_44.tar.zst
|
|
|
|
[STEP] BYO disclosure — installing Felhom on a host the operator does NOT own will create:
|
|
pveum: roles FelhomAgentBase/FelhomAgentGuest/FelhomAgentStore + user felhom-agent@pve + token felhom-agent@pve!agent
|
|
+ scoped ACL grants (Base@/, Guest@/pool/felhom, Store@[local local-lvm felhom-pbs]) + the 'felhom' pool
|
|
agent: service user felhom-agent + /usr/local/bin/felhom-agent (+ .bak-* backups; A/B slots via the guarded self-update)
|
|
+ /etc/systemd/system/felhom-agent.service (+ felhom-agent-rollback.service + start-limit drop-in)
|
|
+ /etc/sudoers.d/felhom-agent + state dir /var/lib/felhom-agent + config /etc/felhom-agent/agent.json (0600)
|
|
host: /usr/local/sbin/felhom-mkfs-guarded + /usr/local/sbin/felhom-selfupdate-guarded
|
|
+ /usr/local/sbin/felhom-pbs-apply (PBS-DR apply wrapper — DR capability is baked
|
|
on every install; ACTIVATION stays a hub flag, off = zero effect on this host)
|
|
+ felhom-mgmt-watchdog service+timer+script + /etc/tmpfiles.d/felhom-privsep.conf
|
|
+ guest-hook snippet under /var/lib/vz/snippets/ (agent-installed at runtime)
|
|
+ the 'sudo' and 'age' packages if absent + install state dir /var/lib/felhom-install
|
|
wg: an OUTBOUND WireGuard tunnel to the Felhom hub (wg_tunnel.enabled=true — base
|
|
infrastructure like the cloudflared tunnel; hands-free peer registration; the
|
|
operator can disable it per-customer hub-side on request)
|
|
guest: the provisioned Felhom LXC (vmid 120, capped 2 cores / 4096 MiB) + its volumes
|
|
+ the golden vzdump imported onto storage 'local'
|
|
update: operator-signed self-update authority: felhom-op-1
|
|
NOT touched in byo mode: root@pam (no break-glass), host DNS (:53), OOB sshd.
|
|
|
|
[INFO] (--preflight-only: acknowledgement prompt skipped — nothing will be mutated)
|
|
[OK] pre-flight passed
|
|
|
|
[OK] PRE-FLIGHT PASS (mode=byo) — no state written, no install step executed
|