activities
1 hour ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
16c42e9 Ledger: record LXD service-VM autostart verification (2026-07-17)
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
385b463 dc0-readiness: add BOOKEND vcloud host patch+reboot block
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
df819f1 Ledger: re-seed machine-derived block + record 2026-07-17 edge cold boot
11 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
eb3e480 D-127 IaC autostart matrix baked into deploy tooling + Office1 guest updates
13 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
021a806 Block B complete: d124-transit-seed tooling + full D-124 NetBox import
14 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
c13af48 NetBox apex recovery + restart policy + edge-WAN import (Block A)
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
c1a8035 DC0 prep COMPLETE (2026-07-17): lock deploy-ready state
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
e124aa8 D-127: VR1 host-VM autostart policy (foundational autostart, DC containment manual)
21 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
90639f1 DC0 deploy-readiness handoff: per-env-key ruling implemented + netem ruled + prep checklist
22 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
bc2be83 D-126: durable rootless agent access to VR1 site VMs (shell + forward) + DC creds prep
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
d21b6ad D-124 addressing pinned: transit supernet 172.31.0.0/24 (operator-ratified); importer CONTAINER + harness
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
922dd29 docs(D-125): tighten "already registered" -> "owned by importer, pending --commit"
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
e270325 D-125 correction: uplink /24 is the ruled 172.30.2.0/24, not a HELD tfvar (no new NetBox object)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
4d490cf docs(session-ledger): record D-125 push + the post-Model-B doc drift-reconciliation batch
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
788911c docs(teardown-rollback): Model B reconciliation banner (two-root DC teardown)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
87f9d75 docs(opentofu/README): reconcile to Model B two-root + neutralize deleted config-ISO path
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
8496c2e docs: reconcile workflow-doc Stage-3 section against repo (post D-121..D-125)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
d34ec94 D-125: Model B per-DC ISP egress (bridge-in, single-NAT) -- resolves OBS-3 design gap
5175365 Stage-3 review sweep C+D: Model B two-root reshape + SEC-010 hardening
114d392 Review sweep A+B + R-3 storage-04: coherent record, whole-host calculator, R-3-compliant Model A fallback
...
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
80502e9 stage-close discipline: add the operating-skill sweep as part of definition-of-done
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage3-phase2-dc-substrate at OpenStack/openstack-caracal-dc-dc
629c3f4 skill: add the standing merge-at-close discipline + the DOCFIX-195 apex pointer
2 days ago
@jesse.austin jesse.austin deleted branch dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
2 days ago
2 days ago
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
526e72f C2 sub-task (ii): extend sandbox loop to ip-ranges/ip-addresses; load + verify D-120 bands
e8d1d3b creds-audit: enforce per-site credential consolidation (SEC-009); prevents the DC0/DC1 spread
a178a7b C2 sub-task (i): sandbox re-verified faithful; fidelity-checker scope false-positive fixed
...
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6662526 D-120 ADOPTED + EXECUTED: re-IP Office1 services into the .2-.49 static band
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
a05f457 D-120 PROPOSED: static-services addressing for compose /24s; re-IP plan drafted
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
658f032 Consolidate credential/env sprawl into ~/vr1-office1-creds/ (SEC-009); seed memory
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
83e56a9 C4 DONE: document the NetBox sandbox loop; add the upstream-write guard it exposed
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
cb83f8e Fix the WAF User-Agent gap: the two pynetbox importers could never write upstream
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
585fb92 D-119 OpenTofu rename APPLIED -- repo/state back in sync (operator-gated)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b0fc6ed Add the missing preflight-failure test; reconcile the stale tofu-sync ledger line
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
be98bdd Ledger: write-path bugs 1-3 fixed; flag the sandbox re-verify owed before C2
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b945fd4 NetBox write-path hardening: the bugs that would have corrupted the apex at C2
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
c79ad63 D-119: region-qualify the VR1 DC namespace -- C3 / gap #19 CLOSED (Stage 3 unblocked)
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
da6c473 C1 follow-ups: verify the RDNSS we never set; correct a revert line that did not revert
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
bd927ba Office1 LAN IPv6 is LIVE and proven on the wire -- Stage 2 close-out C1 CLOSED
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
23af2f5 Consolidate to one session; close last night's two delivery gaps
2 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
522ba7d opnsense-set-interface-v6: script the LAN IPv6 the REST API cannot set (D-113 amendment)
3b01dd4 D-113 AMENDMENT: "interfaces: the REST API" is FALSE -- base-interface addressing has no API
6ed6b9a Pin Stage 2 as the branch merge point; reconcile the Stage 2 tracker; log the OpenTofu naming collision (gap #19)
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
ece2db3 Prove the sandbox is a FAITHFUL replica, not just a count-matching one
b029e30 D-115 office carve IMPORTED into the Office1 NetBox; DC import blocked on ORG_ULA_48
bea5a89 NetBox sandbox seeded from the upstream draft (129 objects) + the two-phase tooling
...
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b97d917 D-116 ADOPTED: no Office1-local GitBucket -- keep using git.baldurkeep.com
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
313c74b Tailscale: office1-tailscale joined the SELF-HOSTED tailnet as the Office1 subnet router
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
ffb4b53 Office1: edge route to the compose net + Tailscale subnet router + an as-built connection reference
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
dea1802 office1-netbox DEPLOYED: NetBox 4.6.4 live on the Office1 headend, three levels deep
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
03eca4e Ledger: pin Office1 LAN IPv6 as the next step after the NetBox deploy (D-115 q3)
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
44ddd23 D-115 ADOPTED: v4 stays role-based; Office = /22 per office; DC2 moves INSIDE the Cloud /16
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
a4468d0 D-115 PROPOSED: Office1 addressing -- the office carve, and the four v4 role gaps it exposed
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
df4c93e Office1 headend LIVE: MAAS 3.7.2 + LXD 5.21 on voffice1. D-114 PROVEN END TO END.
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
af1f409 D-114 follow-through: fix node-vm's nested-virt defect NOW; voffice1 pinned to a reserved address
3 days ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
9171a97 D-114: voffice1 is LIVE. cloudinit-vm gains nested virt -- it was silently broken for the model