deytenit
c8d4d7568a
Apply platform SSH policies through a recoverable port handover
2026-11-07 17:32:40 +03:00
deytenit
e452c981aa
Split host setup into explicit entity actions
2026-11-07 17:15:49 +03:00
Codex
bbeeffcb24
Use Gitea repository guidance and retain Alloy security regression check [skip ci]
2026-11-05 23:48:51 +03:00
Codex
ed7689b9b0
Preserve golden-image provisioning cleanup [skip ci]
2026-11-05 23:45:25 +03:00
Codex
faefd15490
Merge deployed native Alloy and backup recovery changes [skip ci]
2026-11-05 23:44:46 +03:00
Codex
339b2b94d6
Deliver tested native Alloy and backup recovery sources
2026-11-05 02:14:18 +03:00
deytenit
7ad4473e93
refactor(provisioning): remove manual SSH bootstrap workflow
2026-11-04 23:20:47 +03:00
deytenit
0881013357
docs(apex): keep public guidance and examples deployment-neutral
2026-10-26 12:53:58 +03:00
deytenit
995ea9bdf9
fix(apex): preserve environments and restore secure standalone operations
2026-10-26 12:26:09 +03:00
deytenit
6463bad5ee
feat(engine): de-slop commons, harden security, add targeted compose and env bridge
...
- Purge misplaced RFCs, scratch tokens, and node-proprietary assets
- Decouple remote provisioning to ci/scripts/init-node.py
- Add targeted composition orchestration in actions/compose.py
- Add host-side Xray stale socket cleanup in /dev/shm
- Add actions/env.py for shell exports and .env synchronization
- Harden UFW, backup retention, host tempfiles, and notify dispatcher
- Add pyproject.toml and Makefile with 78 passing unit tests
2026-10-26 00:03:33 +03:00
deytenit
6be21acde1
feat: initialize Debian nodes through shared provisioning
...
Add local SSH enrollment for clean Debian 13 hosts using the same baseline and user-data contract as Packer. Preserve provider networking, validate storage and repository ownership, and protect final SSH and security-service activation with persistent access recovery.
Document composition-scoped replication patterns for independent node repositories and add behavioral coverage for provisioning, retries, and recovery. Native verification of the security activation transaction remains the production enrollment gate.
Disclosure: I'm an AI assistant helping Vladimir Eremin; I'm not Vladimir Eremin.
2026-10-10 20:32:12 +03:00
deytenit
0748ab43a0
feat: Add memory retention policies for apt and systemd-journal
2026-09-27 21:41:02 +03:00
deytenit
78ab580e6f
fix(cloud-init): defer ssh deploy key write in master template
2026-09-13 15:42:38 +03:00
deytenit
6123c3f6b4
feat: add Debian 13 golden image Packer pipeline and cloud-init bootstrap
2026-08-30 19:48:22 +03:00
deytenit
Codex