From a895bd3e3eebb50cbaaaa4a739bb567ef998d7b8 Mon Sep 17 00:00:00 2001 From: autonomic-bot Date: Mon, 7 Sep 2026 20:28:50 +0000 Subject: [PATCH] plan-cc-ci-combined-host: steps 1-5 done, host up, waiting on tailscale key + DNS Co-Authored-By: Claude Fable 5.1 Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz --- cc-ci-plan/plan-cc-ci-combined-host.md | 16 ++++++++++------ 1 file changed, 10 insertions(+), 6 deletions(-) diff --git a/cc-ci-plan/plan-cc-ci-combined-host.md b/cc-ci-plan/plan-cc-ci-combined-host.md index dd84bc0..ee35ee2 100644 --- a/cc-ci-plan/plan-cc-ci-combined-host.md +++ b/cc-ci-plan/plan-cc-ci-combined-host.md @@ -68,17 +68,17 @@ notplants-side uses it), tailscale hostname → `notplants-orchestrator`. ## Steps -1. [ ] nixos-infect the new box (`NIX_CHANNEL=nixos-26.05 PROVIDER=hetzner`); capture +1. [x] nixos-infect the new box (`NIX_CHANNEL=nixos-26.05 PROVIDER=hetzner`); capture `hardware-configuration.nix` + `networking.nix`. -2. [ ] cc-ci: module export + options; verify `#cc-ci` still evaluates; PR. -3. [ ] cc-ci-orchestrator: input + host + modules + archive/ + README + terraform refresh; verify +2. [x] cc-ci: module export + options; verify `#cc-ci` still evaluates; PR. +3. [x] cc-ci-orchestrator: input + host + modules + archive/ + README + terraform refresh; verify `#cc-ci` evaluates; PR. -4. [ ] Stage secrets + clones on the new host; `nixos-rebuild test` → verify → `switch`. +4. [x] Stage secrets + clones on the new host; `nixos-rebuild test` → verify → `switch`. Immediately after: scale the new `ccci-bridge_app` to 0 and mask the two cc-ci timers so the new host does not double-process `!testme` or run a second weekly upgrade before cutover. -5. [ ] Copy data (rsync over tailscale): reports, runs, ci-warm, acme, acme-dns, ci-certs, +5. [x] Copy data (rsync over tailscale): reports, runs, ci-warm, acme, acme-dns, ci-certs, /root/.abra, /etc/cc-ci; Drone volume with Drone scaled to 0 during the copy. -6. [ ] Pre-cutover verification on the new IP (`curl --resolve`, port 53, dashboard, reports, +6. [~] Pre-cutover verification on the new IP (`curl --resolve`, port 53, dashboard, reports, drone, one direct `cc-ci-run` on custom-html-tiny). 7. [ ] Operator: Gandi A records `ci`, `*.ci`, `ns-acme` → 195.201.88.249. Then: old bridge + drone + timers off, new bridge up, one real `!testme` end-to-end, a `!testme`-driven report page. @@ -100,3 +100,7 @@ notplants-side uses it), tailscale hostname → `notplants-orchestrator`. `#cc-ci` drv is byte-identical before/after. Orchestrator branch `feat/combined-cc-ci-host`: `#cc-ci` evaluates (gcnwq4fy…-nixos-system-cc-ci-26.05.20260803.531670d.drv) with PROVISIONAL hardware/networking copied from the old CI server — to be replaced by the infect output. +- 2026-09-07 20:30 UTC — rescue-mode diagnosis + fixes (README §2a); `#cc-ci` test → switch → + reboot OK on the new box; data restored incl. Drone volume; PRs cc-ci #32 + cc-ci-orchestrator + #19 merged. Quarantine on (bridge 0, timers runtime-masked, orchestrator units stopped). + Waiting on operator: new tailscale auth key; Gandi DNS cutover.