01874821f2
The orchestrator Pi is retired (2026-05-31). All agents now run on the cc-ci-orchestrator VM (NixOS, loops user, /srv/cc-ci). The VM is a direct tailnet peer to cc-ci — no SOCKS proxy, no userspace tailscaled, no ProxyCommand. Updated across all affected files: AGENTS.md - Remove Pi from reboot description; migration complete (not "parked") - cc-ci access: direct ssh, not via proxy kickoff.md - Prerequisites: direct tailnet peer, not proxy - Host deps: NixOS (not apt) - Fallback/Incus: b1 reachable directly, no --proxy curl flag plan.md §1 + §1.5 - §1 bootstrap: direct SSH, check tailscale status (not restart proxy) - §1.5 intro: "VM" not "sandbox host"; no proxy - Credentials table: remove TS_AUTH_KEY row; update cc-ci SSH row - Replace "Tailscale connection (proxy)" subsection with direct-peer description plan-orchestrator-migration.md - Mark COMPLETE (2026-05-31); historical record only plan-phase1c-full-reproducibility.md - Incus access: direct, not via SOCKS proxy prompts/builder.md + prompts/adversary.md - cc-ci access language only: direct ssh, no proxy restart instructions - adversary: *.ci.commoninternet.net via plain curl, no proxy flag REBOOTS.md - Retitle for VM; note Pi retired; Pi entries marked historical systemd/cc-ci-loops.service - User/Group/HOME/PATH: notplants → loops - Remove cc-ci-tailscaled.service dependency (no proxy on VM) - Add note about nix/configuration.nix as the authoritative VM declaration test-e2e-testme-acceptance.md - tailscale status: no --socket flag - ssh to throwaway: no ProxyCommand Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
34 lines
1.7 KiB
Desktop File
34 lines
1.7 KiB
Desktop File
[Unit]
|
|
# Canonical, version-controlled copy of the unit for the cc-ci-orchestrator VM.
|
|
# Install: sudo install -m0644 cc-ci-plan/systemd/cc-ci-loops.service /etc/systemd/system/ \
|
|
# && sudo systemctl daemon-reload && sudo systemctl enable cc-ci-loops.service
|
|
# NOTE: the VM's actual reboot-resilience service is declared in nix/configuration.nix (systemd.services.cc-ci-loops).
|
|
# This file is the repo reference copy — keep both in sync when making changes.
|
|
# Brings the WHOLE rig back after a reboot of the cc-ci-orchestrator VM: loops + watchdog (launch.sh) AND
|
|
# the orchestrator supervisory session (launch-orchestrator.sh), plus a reboot record (reboot-log.sh).
|
|
Description=cc-ci autonomous loops + watchdog + orchestrator (reboot-resilient)
|
|
Documentation=file:///srv/cc-ci/cc-ci-plan/plan.md
|
|
After=network-online.target tailscaled.service
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
RemainAfterExit=yes
|
|
User=loops
|
|
Group=loops
|
|
Environment=HOME=/home/loops
|
|
Environment=PATH=/home/loops/.local/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin
|
|
# RESUME_PHASE=1 so a reboot resumes the SAVED phase (e.g. phase 2), never restarts from phase 0/1c.
|
|
Environment=RESUME_PHASE=1
|
|
# 1) record the reboot (boot_id-gated); 2) start loops + watchdog; 3) resume the orchestrator session.
|
|
ExecStartPre=/srv/cc-ci/cc-ci-plan/reboot-log.sh
|
|
ExecStart=/srv/cc-ci/cc-ci-plan/launch.sh start
|
|
ExecStartPost=/srv/cc-ci/cc-ci-plan/launch-orchestrator.sh start
|
|
# Stop only the loops + watchdog. The orchestrator session is intentionally LEFT running on a manual
|
|
# `systemctl stop` (stopping the loops shouldn't kill your steering session; it resumes from disk).
|
|
ExecStop=/srv/cc-ci/cc-ci-plan/launch.sh stop
|
|
TimeoutStartSec=180
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|