admin
7ad111cfb5
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6
46 lines
3.9 KiB
Markdown
46 lines
3.9 KiB
Markdown
# CONTEXT — felhom.eu working state
|
|
|
|
> Created with the REUSE.md rollout (2026-07-03). Authoritative history: `hub/CHANGELOG.md` (hub),
|
|
> `website/CHANGELOG.md`, `scripts/CHANGELOG.md`; end-of-task detail in `REPORT.md`.
|
|
|
|
- **2026-07-03 — GOLDEN 0.98.3 LIVE + VOUCHED; guide D.1b RETIRED (drill B1+B5 FIXED)** —
|
|
`build-golden.sh` v2.0.0 (mandatory controller tag + baked bootstrap `.path` unit); golden baked
|
|
with controller 0.98.3, clean-room validated (drill VM) through all four scenarios incl. the
|
|
published-artifact `--force-gitea-golden` path, published + operator-vouched (Day-0 manifest now:
|
|
agent 0.63.0 + golden 0.98.3). Fresh installs land CURRENT and self-manage — D.1b is a one-line
|
|
check; the prior "vouch agent 0.63.0" operator follow-up is DONE. Evidence:
|
|
`documentation/audits/DRILL-golden-098-2026-07-03.md`. NEW operator follow-ups: (1) SECURITY —
|
|
the customer-config `git.token` is a Gitea admin token with package-WRITE (proven during the
|
|
bake); scope down + rotate. (2) optionally raise the global controller floor to 0.98.3.
|
|
- **2026-07-03 — drill findings B2+B3 FIXED (agent v0.63.0, live on felhom-pve + published)** —
|
|
token reload-on-miss (no more fresh-install 401/manual restart) + guesthook snippets-dir mkdir.
|
|
Guide D.1b restart step narrowed to "agent < v0.63.0"; drill ledger updated. **OPERATOR: vouch
|
|
agent 0.63.0 in the Day-0 manifest UI** (until then fresh installs fetch 0.62.0).
|
|
- **2026-07-03 — GO-LIVE PACKAGE SHIPPED (host-install v1.9.1 + day0-install runbook + clean-room drill)** —
|
|
`documentation/runbooks/day0-install.md` is the operator Day-0 guide, **every command executed
|
|
verbatim** on a throwaway nested PVE 9.2.2 (build server): install → verify → app deploy →
|
|
uninstall → **zero-residue diff** → reinstall. v1.9.1 = residue-free uninstall (agent config w/
|
|
hub api_key, shared-parent unit/script/mount, mkfs wrapper, hook snippet, dnsmasq snippets) +
|
|
post-provision guest reboot (without it the controller never deploys on slower hardware) + header
|
|
sync. Evidence + go/no-go for Peti (**GO**, 3 install-day items):
|
|
`documentation/audits/DRILL-day0-cleanroom-2026-07-03.md`. Key OQ-2 finding: golden bakes a
|
|
pre-floor controller 0.85.1 → **fresh installs need the one-time D.1b update** (agent restart →
|
|
update button → 0.98.3); follow-ups recorded: rebuild golden ≥0.86.0 + re-vouch (operator), agent
|
|
`mkdir -p` for the guesthook snippet dir, fresh-install local-API 401 (pre-existing), hub has no
|
|
host-delete path. Drill VM parked virgin-snapshotted on 180 (`~/drill/`).
|
|
- **2026-07-03 — A1 CLOSED (host-install v1.9.0 + agent v0.62.0)** — `Pool.Audit` added to
|
|
`FelhomAgentGuest`; the agent's stale-lock reaper now intersects its scan with
|
|
`GET /pools/felhom` membership (fail-safe skip on read failure). Spike:
|
|
`documentation/audits/SPIKE-a1-pool-membership-read-2026-07-03.md`. Deploy order on any box:
|
|
rescope ACL first, then the agent. STILL PENDING (operator): rotate + de-git the 3 committed
|
|
secrets in `manifests/felhom.secret.yaml` (spike appendix; REUSE §2 errata added).
|
|
- **2026-07-03 — hub v0.31.0 LIVE** (critical-severity ingest fix + UI badges; ArgoCD Synced/Healthy;
|
|
live probe: critical event stored + operator email delivered).
|
|
- **2026-07-03 — Felhom skills exist**: `skills/{felhom-build-deploy,felhom-ui-design,felhom-testing}`,
|
|
installed via `scripts/install_skills.py` — **junction mode** (repo edits live immediately; no
|
|
re-install needed after editing). Fresh-session discovery verified.
|
|
- **2026-07-03 — CLAUDE.md refreshed** (all four repos): no version-pinned state in CLAUDE.md —
|
|
current state lives here / CHANGELOG / REUSE.md.
|
|
|
|
- **2026-07-03 — `REUSE.md` exists at the repo root** (hub helpers / website conventions / gate scripts / manifest patterns, code-verified); maintenance rule active: update it in the same commit that changes a shared helper. `scripts/reuse_refs_check.py` machine-checks its citations across all four felhom repos.
|