activities
28 minutes ago
b2d4317 Session bookend: Stage 3 closed + merged; ledger re-seeded (DOCFIX=198, D-131 surfaced)
29 minutes ago
@jesse.austin jesse.austin deleted branch dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
30 minutes ago
8d0d155 Merge Stage 3 (dc-dc-stage3-phase2-dc-substrate): vr1-dc0 substrate COMPLETE
30 minutes ago
8775a90 STAGE 3 CLOSE (operator-ruled): GA-R2 consolidation + skill sweep; gauntlet 76 ALL GREEN
38 minutes ago
cd614b8 G16 CLOSED: office1 channels residual reconciled by operator-ruled state surgery; outer plan ZERO DIFF
45 minutes ago
025940a Recovery COMPLETE: 9/9 Ready again (shapes exact, power=virsh); retire-fully fully executed; SEC-013 narrowed
59 minutes ago
57836b1 Ruling 1: vr1-dc0-maas RETIRED (repo removed); INCIDENT: pod delete cascaded to 9 machine records
1 hour ago
9453e7f Stage-close batch: ledger-scan PARTIAL fix; DOCFIX-197; D-103/D-123 pod-refutation amendments; GA-R7 memory review
1 hour ago
ae65045 Step E netem DONE -- G10 CLOSED; netem-link local mode; G16 opened (office1 channels residual)
1 hour ago
46489aa Disconnect collapse: predecessor bookend landed; netem-tc install VERIFIED (step E unblocked)
2 hours ago
8a9c04c Step-E netem sudo: scoped NOPASSWD fragment shipped (operator-ruled)
2 hours ago
7a372f7 Incident docs: 2 appendix-A entries, platform-traps MAC-regen corollary, LP draft
2 hours ago
cd65c73 dc-rack-net installed on the rack: EXIT 0, check 10/10, SOA probe answers
2 hours ago
9d8b3ef dc-rack-net.sh: D-131 sub-1 delivery -- rack legs + node-DNS forwarder, repo-carried
2 hours ago
fad3007 D-131 sub-1 RULED: rack node-DNS forwarder is the STANDING per-DC pattern
3 hours ago
aefcf90 MAC-pin apply executed on voffice1: exact 0/9/0, convergence zero diff
3 hours ago
a77a455 node-vm: MAAS owns node power -- ignore_changes on running (operator-ruled)
3 hours ago
3989679 node-vm: pin NIC MACs (54 measured) -- in-place applies can no longer drift them
3 hours ago
8b3adb3 Session close 2026-07-21: commissioning RESOLVED 9/9 Ready; D-131 proposed; SEC-014 opened
21 hours ago
74a7679 Fix committee doc: ASCII byte (em-dash in title) + CURRENT-STATE pointer (L10)
21 hours ago
34c8770 Diagnostic committee (4 reviewers) refutes marginal-timeout 4/4; MTU exonerated by measurement
23 hours ago
d30dd39 Clean commissioning experiment: contention refuted; leading hypothesis = marginal 30-min timeout over slow nested I/O
23 hours ago
e52e476 appendix-A: new incident class -- MAAS says dhcp_on=True but no dhcpd runs (Temporal wedged)
23 hours ago
68f26e7 opentofu-validate: cover EXTRA roots (vr1-dc0-substrate, vr1-dc0-maas) -- second blind spot closed
23 hours ago
b7815aa SEC-012 + SEC-013: ledger rows for the two credentials this deploy created (obligation was outstanding)
1 day ago
2380ac1 node-vm console shipped (0/9/0 in-place); commissioning narrowed, UNRESOLVED; two of my own experiments disclosed as INVALID
1 day ago
88aa600 modules/node-vm: add serial console + boot log (parameterized dir)
1 day ago
48c687d OPEN: 6/9 nodes fail commissioning; contention refuted; blocked on node-vm having no console
1 day ago
3b7c69b STEP D COMPLETE: per-machine power tooling shipped; commissioning works, nodes reaching Ready
1 day ago
2bada32 NEW: maas-node-power.sh (+harness 24/24) -- per-machine virsh power, MAC-matched
1 day ago
d4b4766 CURRENT-STATE: record step-D pod findings + pending ruling (clears L10 on prior commit)
1 day ago
0abad6e Pod path chased to root cause: MAAS virsh pods incompatible with node-vm volume-ref disks; per-machine power PROVEN working
1 day ago
1616975 Step D part 2: MAAS root shipped; apply refutes D-123's local qemu:///system pod mechanism
1 day ago
4af78b3 NEW root opentofu/vr1-dc0-maas: MAAS VM-host registration, isolated from substrate roots
1 day ago
9ecfe34 INCIDENT RESOLVED + G10 depth-4 boot gate PASS: all 9 DC0 nodes enlisted in MAAS
1 day ago
dea9290 Step D part 1 done (metal-admin DHCP configured); INCIDENT: MAAS DHCP down region-wide (Temporal wedged)
1 day ago
417e2d2 D-129 edge profile APPLIED on 26.7: qga channel shipped, plugins installed, agent ANSWERS guest-ping
1 day ago
24c6be1 FIX false-success: opnsense-plugins.sh apply ALWAYS dry-ran (DRY_RUN:+ expands on 0)
1 day ago
f5510c7 modules/opnsense-edge: opt-in qga virtio channel (D-129); dc0 edge sets it true
1 day ago
1c710cc DC edge ADDRESSED: WAN 172.30.2.2/24 + default gw, LAN -> 10.12.4.1/22; edge egresses 0% loss
1 day ago
571c517 NEW: opnsense-set-interface-v4 pair (+harness 53/53) -- IPv4 + WAN gateway via the vendor config model
1 day ago
fa0c5c8 D-125 egress isolation gate: PASS / CLOSED -- bridge-in proven end to end (2 identical runs)
1 day ago
792ca48 CORRECTION (GA-R1/C2): D-125 rack-bridge follow-up was CONFOUNDED, not evidence
1 day ago
4a0a25e D-125 egress gate executed (throwaway VM, as ruled): bridge-in PROVEN, upstream NAT egress fails -- gate OPEN pending one sudo measurement
1 day ago
d6697f2 DC edge bootstrap: D-112(c) console chain complete + API key minted; D-113(a2) PROVEN on 26.7
1 day ago
5c78180 Permissions: targeted ask rules for scp / pipe-to-ssh / ssh-virsh (classifier walls -> gates, per 2026-07-19 ruling)
1 day ago
51853db Stage-close queue: operator-directed OPNsense 26.7 changelog/docs review (findings->proposals->rulings; D-129 anchor)
1 day ago
1561719 Deploy step C COMPLETE: inner apply 28/28 from voffice1, converged zero diff; 9 nodes + 26.7 edge RUNNING at depth-4; three first-real-apply fixes
1 day ago
8120e48 wan-bridge: drop illegal <mtu> on bridge-mode network (measured at first real apply; MTU is the host bridge's)
1 day ago
b0f9310 Inner root: provider keyfile+sshauth URI params (measured: provider ssh ignores ssh config/default identities); known_hosts multi-type note