1589 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
autonomic-bot	d569e6528f	Merge pull request 'fix: unblock stale La Suite Docs canonical' (#50) from fix/lasuite-docs-stale-base into main	2026-11-02 18:35:59 +00:00
notplants	870f00d3e3	fix: avoid stale OIDC secret during canonical promotion	2026-11-02 18:32:11 +00:00
notplants	53f204fc8c	fix: provision v6 keys before a v5 to v6 upgrade	2026-11-02 18:29:12 +00:00
notplants	c7545505f2	fix: prepare secrets from pinned La Suite Docs base	2026-11-02 18:25:10 +00:00
autonomic-bot	a47c1caa8c	Merge pull request 'fix: reclaim unused images during critical disk pressure' (#49) from fix/docker-disk-pressure into main	2026-11-02 17:58:52 +00:00
notplants	eb675e6e10	fix: reclaim unused images during critical disk pressure	2026-11-02 17:56:11 +00:00
autonomic-bot	a8b836ed1d	Merge pull request 'enroll(rustdesk-server): test suite + bridge poll' (#48) from test/rustdesk-server-enroll-20261030 into main ... Merge pull request enroll(rustdesk-server): test suite + bridge poll rustdesk-server enrolled: status-key health overlay (sidecar serving the real hbbs public key), rendezvous ports + ws handshake + identity-key + punch-hole-amplification tests. Cold full-suite green on recipe main (punch-hole correctly skipped on 1.1.12) and on the upgrade head upgrade-2e65135 (passed actively on 1.1.16). Bridge polls recipe-maintainers/rustdesk-server.	2026-10-30 21:15:58 +00:00
autonomic-bot	f5f11cd769	chore(rustdesk): drop unused import	2026-10-30 19:03:11 +00:00
autonomic-bot	1653582764	fix(rustdesk): punch-hole version gate via deployed_identity (loud on unparsable, skip <1.1.16)	2026-10-30 19:02:58 +00:00
autonomic-bot	d71a53cb62	enroll(rustdesk-server): test suite + bridge poll (status-key overlay, ws + punch-hole-amplification tests)	2026-10-30 18:58:43 +00:00
autonomic-bot	16ee27affd	review(ghost): independently reverify done state	2026-10-27 03:15:58 +00:00
autonomic-bot	9f721a27e6	status(ghost): complete fresh verified revalidation	2026-10-27 03:09:06 +00:00
autonomic-bot	501d9e0974	review(ghost): pass current head build	2026-10-27 03:06:50 +00:00
autonomic-bot	a50fdd81a1	claim(ghost): revalidate current upgrade run	2026-10-27 03:06:33 +00:00
autonomic-bot	8356c4aee7	Merge pull request 'Restore MinIO for LaSuite upgrade baselines' (#47) from fix/lasuite-base-minio into main ... Merge LaSuite baseline image and convergence repairs	2026-10-26 17:46:39 +00:00
autonomic-bot	efe0b3bf12	style: sort serving retry test imports	2026-10-26 17:42:05 +00:00
autonomic-bot	ccc29d5acc	fix(runner): retry convergence confirmation after restore	2026-10-26 17:41:57 +00:00
autonomic-bot	b944eca41d	fix(runner): allow version-guarded base repair overlays	2026-10-26 17:34:56 +00:00
autonomic-bot	5c23fb7d78	fix(lasuite): restore MinIO for published upgrade bases	2026-10-26 17:33:19 +00:00
autonomic-bot	d944ccac02	review(ghost): reverify claimed gate	2026-10-20 03:23:31 +00:00
autonomic-bot	c90c2e84c8	status(ghost): complete verified phase	2026-10-20 03:23:02 +00:00
autonomic-bot	5ba6bf230f	claim(ghost): revalidate current upgrade result	2026-10-20 03:22:30 +00:00
autonomic-bot	13d1b33014	review(ghost): pass fresh level-five retry	2026-10-20 03:22:11 +00:00
autonomic-bot	2977495851	claim(ghost): revalidate level-five upgrade run	2026-10-20 03:16:08 +00:00
autonomic-bot	eeec9b006f	review(ghost): fail stale level-4 result	2026-10-20 03:10:22 +00:00
autonomic-bot	6d592b9417	status(ghost): record fresh PR8 pass	2026-10-13 03:16:42 +00:00
autonomic-bot	820ded47ef	review(ghost): revalidate current upgrade PR PASS	2026-10-13 03:14:41 +00:00
autonomic-bot	35ba99768c	runner: never embed a fossil screenshot from a collided run dir (#45)	2026-10-05 17:46:25 +00:00
autonomic-bot	5cec3e0e31	gitea: fix LFS round-trip post-restart wait (stale on 28.0.0) (#44)	2026-10-05 17:37:27 +00:00
autonomic-bot	f675941c34	Merge pull request 'nix: sync root authorizedKeys with live cc-ci keys' (#43) from fix/root-authorized-keys-sync into main	2026-09-28 19:43:59 +00:00
autonomic-bot	69a64572fe	nix: sync root authorizedKeys with live cc-ci keys ... The live /root/.ssh/authorized_keys on cc-ci had drifted from this declarative list: several keys were added manually over time and would have been wiped by the next nixos-rebuild switch. - sync the declared list to the live file (10 keys, verified blob-for-blob) - add the new notplants-orchestrator and nptest keys (added live first) - drop claude-sandbox keys at operator request (incl. one unnamed live key identified as a sandbox key, fingerprint SHA256:Wlhj5g4IjCId1wvR HnxEiwVVu2N+aYa4gRsY1XfOkts) and the never-live claude@claude-vm key - live file updated in the same change, so state is converged now	2026-09-28 19:43:45 +00:00
autonomic-bot	2f6787f043	Merge pull request 'drone: escape nix interpolation in have_secret' (#42) from fix-drone-secret-scope2 into main	2026-09-21 17:00:51 +00:00
autonomic-bot	0bf49537b8	drone: escape nix interpolation in have_secret	2026-09-21 17:00:49 +00:00
autonomic-bot	46ad39145a	Merge pull request 'drone: scope have_secret to the stack' (#41) from fix-drone-secret-scope into main	2026-09-21 17:00:30 +00:00
autonomic-bot	afe7a10758	drone: scope have_secret to the new stack — old stack's secrets satisfied the check post-rename	2026-09-21 17:00:29 +00:00
autonomic-bot	c5106bc1eb	Merge pull request 'acme-dns: fix storage-seed unit nesting' (#40) from fix-seed-nesting into main	2026-09-21 16:56:02 +00:00
autonomic-bot	8366843d89	acme-dns: fix storage-seed nesting (services. inside the module's systemd wrapper)	2026-09-21 16:56:00 +00:00
autonomic-bot	93b86e0cc1	Merge pull request 'domain cutover: ci.autonomic.zone — cert, front doors, drone, harness naming' (#39) from domain-cutover into main	2026-09-21 16:53:34 +00:00
autonomic-bot	542e8cfb11	domain cutover: front doors + drone + per-run naming to ci.autonomic.zone ... - acme-dns.nix: ONE dual-zone SAN cert (ci+*.ci.autonomic.zone AND ci+*.ci.commoninternet.net) via the same acmedns account — storage re-keyed by cc-ci-acme-storage-seed.service; handoff reads the new cert dir. Single secret pair => zero changes to the traefik reconciler. - dashboard/bridge/reports: dual Host rules during the bake window (bridge gets explicit parentheses so && does not shadow the dashboard on the new host). - drone abra app renamed to drone.ci.autonomic.zone (fresh DB supported: DRONE_USER_CREATE re-injects the sops bridge token); runner RPC + bootstrap-drone-oauth.sh follow. - harness: app_domain() issues *.ci.autonomic.zone run domains; RUN_APP_RE / stack-name regexes / docker-prune accept BOTH zones during the bake. Warm stacks deliberately stay on the legacy zone (data-warm volumes; post-bake migration). - URLs in bridge/dashboard defaults + recipe-report.py follow the new names.	2026-09-21 16:52:53 +00:00
autonomic-bot	eb5fb82611	Merge pull request 'reports.nix: pin non-browser UA on /pr/ proxy' (#38) from fix/anubis-ua-reports-proxy into main	2026-09-14 16:45:37 +00:00
autonomic-bot	c1835c40f0	reports.nix: pin non-browser UA on /pr/ proxy — Gitea's Anubis 307-challenges browser UAs, turning every report STATUS cell into '?'	2026-09-14 16:43:27 +00:00
autonomic-bot	0d8c6fba79	Merge pull request 'subagent model: opencode-go/deepseek-v4-flash' (#37) from config/subagents-flash into main ... subagent model: opencode-go/deepseek-v4-flash (#37)	2026-09-08 17:28:04 +00:00
notplantsandClaude Opus 5	3acf6a86f6	subagent model: opencode-go/deepseek-v4-flash ... The operator enabled China-hosted models on the workspace, so deepseek-v4-flash is available on the Go tier again (it was the model the weekly run used before the host moved off ZEN, and it is the cheap/fast one for the per-recipe subagents). Verified on the host: `opencode run --model opencode-go/deepseek-v4-flash` answers. The weekly run's MAIN agent moves to opencode-go/glm-5.3-flash separately, in upgrader.env on the host. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz	2026-09-08 17:28:02 +00:00
autonomic-bot	d5acc945a2	journal(ghost): record current-state recheck	2026-09-08 16:53:18 +00:00
autonomic-bot	8d29ed10d1	Merge pull request 'subagent model: opencode-go/glm-5.2 (the cc-ci host is on the Go subscription)' (#36) from config/opencode-go into main ... subagent model: opencode-go/glm-5.2 (#36)	2026-09-08 16:50:42 +00:00
notplantsandClaude Opus 5	39897a6409	subagent model: opencode-go/glm-5.2 (the cc-ci host is on the Go subscription) ... The host's opencode credential is an OpenCode Go subscription key, so ZEN models (`opencode/…`) fail there with "Insufficient balance". The weekly run's recipe subagents read this file, so they move to the Go provider. glm-5.2 rather than deepseek-v4-flash because the latter is China-hosted on Go and needs a per-workspace opt-in. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01FqkQq3CDmFWcQ7u1LzoyRz	2026-09-08 16:50:40 +00:00
autonomic-bot	b11cc0b738	review(ghost): renew M1 and M2 PASS	2026-09-07 22:27:14 +00:00
autonomic-bot	b18da1e4bf	status(ghost): record fresh green revalidation	2026-09-07 21:37:07 +00:00
autonomic-bot	124a1f8585	Merge pull request 'sops: the combined cc-ci host ssh host key is a recipient (secrets submodule bumped)' (#35) from chore/sops-recipient-cc-ci-host into main ... sops: the combined cc-ci host ssh host key is a recipient (#35)	2026-09-07 21:31:34 +00:00
autonomic-bot	ff42e28232	status(ghost): reopen current upgrade verification	2026-09-07 21:31:10 +00:00