37 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
autonomic-bot	2a7cdcdee4	gitea: fix LFS round-trip post-restart wait (stale on 28.0.0) ... test_lfs_roundtrip's post-restart poll timed out on gitea 28.0.0 (PR #10 run #31): _api() caught only HTTPError, so a single urlopen(timeout=20) socket timeout inside the poll raised and aborted the poll itself instead of being retried; the poll also hard-coded a 120s deadline + a 20s request timeout, contradicting the recipe's declared HTTP_TIMEOUT=600 (tests/STYLE.md §5-sized for the warm custom tier; the 28.0.0 boot runs a longer migration window than 1.27.3). Fix, assertion untouched (§3): - _api() is never-raising like lifecycle.http_fetch: transient URLError/socket timeout/OSError -> (0, {}) so the bounded poll simply retries (each request still bounded at 20s; the poll's deadline is what bounds the wait). - poll deadline derives from recipe_meta.HTTP_TIMEOUT (600) instead of a hard-coded 120, probing the same /api/v1/version path recipe_meta.READY_PROBE declares. Evidence: gitea 28.0.0 dev deploy converged + served /api/healthz and /version (gitea-upgrade-2026-10-02.md 2b); the RED run #31 failed only in this poll while install/upgrade/backup/restore and every other custom test passed.	2026-10-05 16:45:10 +00:00
autonomic-bot	f675941c34	Merge pull request 'nix: sync root authorizedKeys with live cc-ci keys' (#43) from fix/root-authorized-keys-sync into main	2026-09-28 19:43:59 +00:00
autonomic-bot	2f6787f043	Merge pull request 'drone: escape nix interpolation in have_secret' (#42) from fix-drone-secret-scope2 into main	2026-09-21 17:00:51 +00:00
autonomic-bot	0bf49537b8	drone: escape nix interpolation in have_secret	2026-09-21 17:00:49 +00:00
autonomic-bot	46ad39145a	Merge pull request 'drone: scope have_secret to the stack' (#41) from fix-drone-secret-scope into main	2026-09-21 17:00:30 +00:00
autonomic-bot	afe7a10758	drone: scope have_secret to the new stack — old stack's secrets satisfied the check post-rename	2026-09-21 17:00:29 +00:00
autonomic-bot	c5106bc1eb	Merge pull request 'acme-dns: fix storage-seed unit nesting' (#40) from fix-seed-nesting into main	2026-09-21 16:56:02 +00:00
autonomic-bot	8366843d89	acme-dns: fix storage-seed nesting (services. inside the module's systemd wrapper)	2026-09-21 16:56:00 +00:00
autonomic-bot	93b86e0cc1	Merge pull request 'domain cutover: ci.autonomic.zone — cert, front doors, drone, harness naming' (#39) from domain-cutover into main	2026-09-21 16:53:34 +00:00
autonomic-bot	542e8cfb11	domain cutover: front doors + drone + per-run naming to ci.autonomic.zone ... - acme-dns.nix: ONE dual-zone SAN cert (ci+*.ci.autonomic.zone AND ci+*.ci.commoninternet.net) via the same acmedns account — storage re-keyed by cc-ci-acme-storage-seed.service; handoff reads the new cert dir. Single secret pair => zero changes to the traefik reconciler. - dashboard/bridge/reports: dual Host rules during the bake window (bridge gets explicit parentheses so && does not shadow the dashboard on the new host). - drone abra app renamed to drone.ci.autonomic.zone (fresh DB supported: DRONE_USER_CREATE re-injects the sops bridge token); runner RPC + bootstrap-drone-oauth.sh follow. - harness: app_domain() issues *.ci.autonomic.zone run domains; RUN_APP_RE / stack-name regexes / docker-prune accept BOTH zones during the bake. Warm stacks deliberately stay on the legacy zone (data-warm volumes; post-bake migration). - URLs in bridge/dashboard defaults + recipe-report.py follow the new names.	2026-09-21 16:52:53 +00:00
autonomic-bot	eb5fb82611	Merge pull request 'reports.nix: pin non-browser UA on /pr/ proxy' (#38) from fix/anubis-ua-reports-proxy into main	2026-09-14 16:45:37 +00:00
autonomic-bot	c1835c40f0	reports.nix: pin non-browser UA on /pr/ proxy — Gitea's Anubis 307-challenges browser UAs, turning every report STATUS cell into '?'	2026-09-14 16:43:27 +00:00
autonomic-bot	0d8c6fba79	Merge pull request 'subagent model: opencode-go/deepseek-v4-flash' (#37) from config/subagents-flash into main ... subagent model: opencode-go/deepseek-v4-flash (#37)	2026-09-08 17:28:04 +00:00
autonomic-bot	d5acc945a2	journal(ghost): record current-state recheck	2026-09-08 16:53:18 +00:00
autonomic-bot	8d29ed10d1	Merge pull request 'subagent model: opencode-go/glm-5.2 (the cc-ci host is on the Go subscription)' (#36) from config/opencode-go into main ... subagent model: opencode-go/glm-5.2 (#36)	2026-09-08 16:50:42 +00:00
autonomic-bot	b11cc0b738	review(ghost): renew M1 and M2 PASS	2026-09-07 22:27:14 +00:00
autonomic-bot	b18da1e4bf	status(ghost): record fresh green revalidation	2026-09-07 21:37:07 +00:00
autonomic-bot	124a1f8585	Merge pull request 'sops: the combined cc-ci host ssh host key is a recipient (secrets submodule bumped)' (#35) from chore/sops-recipient-cc-ci-host into main ... sops: the combined cc-ci host ssh host key is a recipient (#35)	2026-09-07 21:31:34 +00:00
autonomic-bot	ff42e28232	status(ghost): reopen current upgrade verification	2026-09-07 21:31:10 +00:00
autonomic-bot	04372109bc	Merge pull request 'acme-dns.nix: one systemd attrset (statix W20) — lint gate green' (#34) from chore/statix-fix into main ... acme-dns.nix: one systemd attrset (statix W20) — lint gate green (#34)	2026-09-07 21:17:52 +00:00
autonomic-bot	6d1e2b903d	Merge pull request 'lint: ruff format + one auto-fix so the push self-test is green again' (#33) from chore/lint-fix into main ... lint: ruff format + one auto-fix so the push self-test is green again (#33)	2026-09-07 21:15:07 +00:00
autonomic-bot	f6dbfa3689	Merge pull request 'nix: export the CI server as nixosModules.cc-ci-server' (#32) from feat/nixos-module-export into main ... nix: export the CI server as nixosModules.cc-ci-server (#32)	2026-09-07 20:13:24 +00:00
autonomic-bot	769fd29dcf	fix: publish Gitea URL configuration ... Verified during the successful weekly run.	2026-08-31 20:46:32 +00:00
autonomic-bot	7147d777ee	fix: let acme own wildcard certificate files	2026-08-31 18:59:26 +00:00
autonomic-bot	04e50c7c17	fix: roll out rotated traefik certificate secrets	2026-08-31 18:57:22 +00:00
autonomic-bot	f42dbc3f82	feat: promote acme-dns renewal to production	2026-08-31 18:54:09 +00:00
autonomic-bot	12dee8bf75	fix: serve acme-dns nameserver address	2026-08-31 17:15:33 +00:00
autonomic-bot	1c70b9e61a	harden: disable acme-dns registration	2026-08-31 17:14:15 +00:00
autonomic-bot	1c2d5e9f7f	fix: use acme-dns sqlite backend	2026-08-31 17:11:52 +00:00
autonomic-bot	0db8194dd5	feat: prepare restricted acme-dns renewal	2026-08-31 17:09:17 +00:00
autonomic-bot	cb315f8ab4	Merge pull request 'plan: add restricted acme-dns renewal design' (#23) from plan/acme-dns-renewal into main	2026-08-31 17:00:39 +00:00
autonomic-bot	5380997543	Merge pull request 'config: track public cc-ci runtime environment' (#22) from chore/public-runtime-config into main	2026-08-31 16:49:51 +00:00
autonomic-bot	c0b473328d	Merge pull request 'config: subagents -> opencode/deepseek-v4-flash (zen, not tinfoil)' (#21) from config/deepseek-flash-zen into main	2026-08-16 02:40:17 +00:00
autonomic-bot	5083c51430	Merge pull request 'config: subagents -> tinfoil/deepseek-v4-flash (cheaper, pay-per-use)' (#20) from config/deepseek-flash-subagents into main	2026-08-16 02:34:32 +00:00
autonomic-bot	a3e63660f3	Merge pull request 'AGENTS.md: ship work as PRs, self-merge, operator reviews retrospectively' (#19) from policy/pr-then-merge into main	2026-08-11 19:09:26 +00:00
autonomic-bot	92ac9a4a4a	Merge pull request 'style(plausible): ruff format the rewritten event-tracking fixture' (#18) from fix/plausible-format into main	2026-08-11 14:59:05 +00:00
autonomic-bot	8aa21356af	Merge pull request 'fix(plausible): register a team so v3 ingests events; widen post-restore health wait' (#17) from fix/plausible-v3-custom-tests into main ... Verified GREEN (level 5/5) on cc-ci against plausible PR head 867ebfaf, twice: once with the SQL fixture, once with the app-native rewrite. Regression sample green.	2026-08-11 14:52:06 +00:00