activities
1 hour ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
03eca4e Ledger: pin Office1 LAN IPv6 as the next step after the NetBox deploy (D-115 q3)
1 hour ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
44ddd23 D-115 ADOPTED: v4 stays role-based; Office = /22 per office; DC2 moves INSIDE the Cloud /16
1 hour ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
a4468d0 D-115 PROPOSED: Office1 addressing -- the office carve, and the four v4 role gaps it exposed
1 hour ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
df4c93e Office1 headend LIVE: MAAS 3.7.2 + LXD 5.21 on voffice1. D-114 PROVEN END TO END.
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
af1f409 D-114 follow-through: fix node-vm's nested-virt defect NOW; voffice1 pinned to a reserved address
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
9171a97 D-114: voffice1 is LIVE. cloudinit-vm gains nested virt -- it was silently broken for the model
2 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
3a6ffd6 D-114 ADOPTED: VR1 site containment VMs + MAAS-composed LXD VMs for the non-stack machines
2 hours ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
95f0634 temp file upload
3 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
4a32dde Fold the AppArmor/libvirt rule into scripts/prereqs -- it gated every VR1 VM boot
3 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
20e52e6 Ledger collapse: close the coverage gap in the carry-forward
3 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5dfd35c Collapse the three ledger streams into one; reconcile against repo ground truth
12 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
f81177a APPLIED + CORRECTION: "updated in-place" does NOT mean "no restart" -- the apply bounced the edge
12 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6852292 D-113(a2) COMPLETE: DELETE the config.xml path (template, renderer, ISO builder)
12 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
80843cf D-113(a2): API-key bootstrap -- no GUI click, no re-implemented crypto
12 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
2d47a13 Correct the workflow doc's status: it was materially FALSE and would misdirect work
12 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5ea9d4c DOCFIX-194: the OpenTofu gate was GREEN over two BROKEN modules
13 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
d4401c2 SAFETY SWEEP: mark the config.xml push path as a LIVE HAZARD (no behaviour change)
13 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6eb3385 CHECKPOINT 2026-07-13: session close (edge routing + serving DHCP; D-113(a2) proven)
14 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
047f657 D-113(a2) write path PROVEN on the live edge: API -> OPNsense -> Kea -> daemon
14 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
cdc31b3 D-113(a2) PROVEN: the OPNsense REST API round-trips the edge config
16 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
268eb03 D-113(a2) step 1: thin OPNsense REST API client + harness
18 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
49b3dc7 D-113 ADOPTED: option (a2) -- stay on OPNsense, move config to the REST API
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
0095197 D-113 (PROPOSED): is OPNsense the right edge platform? -- and a confound in D-112
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
792490d SEC-006/SEC-007: put the two known credential exposures on the ledger
19 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6d2f69f SEC-005: store a GitBucket credential on the jumphost so pushes stop failing
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5f878b8 D-112 (PROPOSED): OPNsense Config Importer cannot fire on a nano image -- by design
a5d952e DOCFIX-190: second boot bug -- libvirt domains had ACPI disabled (FreeBSD kernel panic)
c50bea8 DOCFIX-189: re-audit the max-context session's troubleshooting + docs
...
2 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
057c31b netbox uploads
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
4ec6bbe DOCFIX-177: make the skill and runbooks/README.md aware the VR1 DC-DC track exists
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
99a32d1 DOCFIX-175/176: OpenTofu state file security + VR1 teardown/rollback runbook
0819806 DOCFIX-174: fix self-inflicted false positive in ledger-scan.sh next-free scan
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
a3016bc DOCFIX-173: full-project sweep -- script logic bugs + security hardening
3403d7e DOCFIX-172: full-project sweep -- bundle.yaml fixes
f196084 DOCFIX-171: full-project sweep -- DC-DC runbook consistency fixes
...
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
4c8b2ea DOCFIX-169: fix stale bundle.yaml expectations in phase-01-bundle-deploy.md
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
7deea4a DOCFIX-166: $DC parameterization for reenroll-hosts/carve-host-interfaces/phase-00-maas-standup (gap #15, CLI half)
169703d DOCFIX-165: Ceph replication tooling scripts, radosgw multisite + rbd-mirror (gap #5)
e4a6ffe DOCFIX-164: D-101 IPv6 family-matrix overlay, researched against real charm source (gap #13)
...
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
a664d30 DOCFIX-161: final consolidation pass -- one more gap found, stale refs fixed
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
8d4cb7c DOCFIX-160: adversarial review pass finds and fixes 3 real issues
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
de0f23b DOCFIX-157/158/159: Stage 4/6/7 runbooks -- MAAS deploy, DR drill, Designate/COS/Magnum
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
650bf39 DOCFIX-154/155/156: Stage 2/3/5 runbooks -- Office1 standup, DC substrate, per-DC bundle
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
be5db3e DOCFIX-153: Stage 1 runbook -- Phase 0 vcloud host preparation
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
d9aebe5 DOCFIX-152: NetBox multi-DC/dual-stack import pipeline (gap #3 mechanism)
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
da84866 DOCFIX-151: $DC selector convention for lib-net.sh/lib-hosts.sh (gap #1 closed)
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
79879ce DOCFIX-150: Stage 0 ratification -- D-100..D-110 ADOPTED
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
3981a74 DOCFIX-149: OPNsense config.xml template + tested renderer
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
96ecbad DOCFIX-148: OpenTofu module audit pass + provider-docs skill reference
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
ea276c5 DOCFIX-147: opentofu/modules/maas-vm-host + modules/netem-link
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
a3ff07f DOCFIX-146: opnsense-edge module + nano-image/config-ISO prep scripts
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
75ca823 DOCFIX-145 + OPNsense deployment research
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
3324387 DOCFIX-144: opentofu/modules/node-vm + fix real syntax bug in DOCFIX-142
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
f93dd0d DOCFIX-143: repo_lint.py no longer relies on git to clean up its own CRLF
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
0bb6cff Fold OPNsense's four separable sub-gaps into the tooling gap register