activities
15 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
ece2db3 Prove the sandbox is a FAITHFUL replica, not just a count-matching one
b029e30 D-115 office carve IMPORTED into the Office1 NetBox; DC import blocked on ORG_ULA_48
bea5a89 NetBox sandbox seeded from the upstream draft (129 objects) + the two-phase tooling
...
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
b97d917 D-116 ADOPTED: no Office1-local GitBucket -- keep using git.baldurkeep.com
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
313c74b Tailscale: office1-tailscale joined the SELF-HOSTED tailnet as the Office1 subnet router
20 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
ffb4b53 Office1: edge route to the compose net + Tailscale subnet router + an as-built connection reference
21 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
dea1802 office1-netbox DEPLOYED: NetBox 4.6.4 live on the Office1 headend, three levels deep
22 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
03eca4e Ledger: pin Office1 LAN IPv6 as the next step after the NetBox deploy (D-115 q3)
22 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
44ddd23 D-115 ADOPTED: v4 stays role-based; Office = /22 per office; DC2 moves INSIDE the Cloud /16
23 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
a4468d0 D-115 PROPOSED: Office1 addressing -- the office carve, and the four v4 role gaps it exposed
23 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
df4c93e Office1 headend LIVE: MAAS 3.7.2 + LXD 5.21 on voffice1. D-114 PROVEN END TO END.
23 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
af1f409 D-114 follow-through: fix node-vm's nested-virt defect NOW; voffice1 pinned to a reserved address
23 hours ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
9171a97 D-114: voffice1 is LIVE. cloudinit-vm gains nested virt -- it was silently broken for the model
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
3a6ffd6 D-114 ADOPTED: VR1 site containment VMs + MAAS-composed LXD VMs for the non-stack machines
1 day ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
95f0634 temp file upload
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
4a32dde Fold the AppArmor/libvirt rule into scripts/prereqs -- it gated every VR1 VM boot
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
20e52e6 Ledger collapse: close the coverage gap in the carry-forward
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5dfd35c Collapse the three ledger streams into one; reconcile against repo ground truth
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
f81177a APPLIED + CORRECTION: "updated in-place" does NOT mean "no restart" -- the apply bounced the edge
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6852292 D-113(a2) COMPLETE: DELETE the config.xml path (template, renderer, ISO builder)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
80843cf D-113(a2): API-key bootstrap -- no GUI click, no re-implemented crypto
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
2d47a13 Correct the workflow doc's status: it was materially FALSE and would misdirect work
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5ea9d4c DOCFIX-194: the OpenTofu gate was GREEN over two BROKEN modules
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
d4401c2 SAFETY SWEEP: mark the config.xml push path as a LIVE HAZARD (no behaviour change)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6eb3385 CHECKPOINT 2026-07-13: session close (edge routing + serving DHCP; D-113(a2) proven)
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
047f657 D-113(a2) write path PROVEN on the live edge: API -> OPNsense -> Kea -> daemon
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
cdc31b3 D-113(a2) PROVEN: the OPNsense REST API round-trips the edge config
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
268eb03 D-113(a2) step 1: thin OPNsense REST API client + harness
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
49b3dc7 D-113 ADOPTED: option (a2) -- stay on OPNsense, move config to the REST API
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
0095197 D-113 (PROPOSED): is OPNsense the right edge platform? -- and a confound in D-112
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
792490d SEC-006/SEC-007: put the two known credential exposures on the ledger
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
6d2f69f SEC-005: store a GitBucket credential on the jumphost so pushes stop failing
1 day ago
@jesse.austin jesse.austin pushed to dc-dc-stage1-phase0-first-exec at OpenStack/openstack-caracal-dc-dc
5f878b8 D-112 (PROPOSED): OPNsense Config Importer cannot fire on a nano image -- by design
a5d952e DOCFIX-190: second boot bug -- libvirt domains had ACPI disabled (FreeBSD kernel panic)
c50bea8 DOCFIX-189: re-audit the max-context session's troubleshooting + docs
...
3 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
057c31b netbox uploads
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
4ec6bbe DOCFIX-177: make the skill and runbooks/README.md aware the VR1 DC-DC track exists
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
99a32d1 DOCFIX-175/176: OpenTofu state file security + VR1 teardown/rollback runbook
0819806 DOCFIX-174: fix self-inflicted false positive in ledger-scan.sh next-free scan
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
a3016bc DOCFIX-173: full-project sweep -- script logic bugs + security hardening
3403d7e DOCFIX-172: full-project sweep -- bundle.yaml fixes
f196084 DOCFIX-171: full-project sweep -- DC-DC runbook consistency fixes
...
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
4c8b2ea DOCFIX-169: fix stale bundle.yaml expectations in phase-01-bundle-deploy.md
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
7deea4a DOCFIX-166: $DC parameterization for reenroll-hosts/carve-host-interfaces/phase-00-maas-standup (gap #15, CLI half)
169703d DOCFIX-165: Ceph replication tooling scripts, radosgw multisite + rbd-mirror (gap #5)
e4a6ffe DOCFIX-164: D-101 IPv6 family-matrix overlay, researched against real charm source (gap #13)
...
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
a664d30 DOCFIX-161: final consolidation pass -- one more gap found, stale refs fixed
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
8d4cb7c DOCFIX-160: adversarial review pass finds and fixes 3 real issues
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
de0f23b DOCFIX-157/158/159: Stage 4/6/7 runbooks -- MAAS deploy, DR drill, Designate/COS/Magnum
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
650bf39 DOCFIX-154/155/156: Stage 2/3/5 runbooks -- Office1 standup, DC substrate, per-DC bundle
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
be5db3e DOCFIX-153: Stage 1 runbook -- Phase 0 vcloud host preparation
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
d9aebe5 DOCFIX-152: NetBox multi-DC/dual-stack import pipeline (gap #3 mechanism)
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
da84866 DOCFIX-151: $DC selector convention for lib-net.sh/lib-hosts.sh (gap #1 closed)
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
79879ce DOCFIX-150: Stage 0 ratification -- D-100..D-110 ADOPTED
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
3981a74 DOCFIX-149: OPNsense config.xml template + tested renderer
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
96ecbad DOCFIX-148: OpenTofu module audit pass + provider-docs skill reference
4 days ago
@jesse.austin jesse.austin pushed to main at OpenStack/openstack-caracal-dc-dc
ea276c5 DOCFIX-147: opentofu/modules/maas-vm-host + modules/netem-link