deytenit
702857ec0a
Apply platform SSH policies through a recoverable port handover
2026-11-08 12:39:49 +03:00
deytenit
ba9ef92051
Split host setup into explicit entity actions
2026-11-08 12:39:49 +03:00
deytenit
c091cbfb80
Use Gitea repository guidance and retain Alloy security regression check [skip ci]
2026-11-08 12:39:48 +03:00
deytenit
7b68eadff7
Preserve golden-image provisioning cleanup [skip ci]
2026-11-08 12:39:48 +03:00
deytenit
325e7ae5fb
Merge deployed native Alloy and backup recovery changes [skip ci]
2026-11-08 12:39:48 +03:00
deytenit
dd9b4fb93b
Deliver tested native Alloy and backup recovery sources
2026-11-08 12:39:47 +03:00
deytenit
7ad4473e93
refactor(provisioning): remove manual SSH bootstrap workflow
2026-11-04 23:20:47 +03:00
deytenit
0881013357
docs(apex): keep public guidance and examples deployment-neutral
2026-10-26 12:53:58 +03:00
deytenit
995ea9bdf9
fix(apex): preserve environments and restore secure standalone operations
2026-10-26 12:26:09 +03:00
deytenit
6463bad5ee
feat(engine): de-slop commons, harden security, add targeted compose and env bridge
...
- Purge misplaced RFCs, scratch tokens, and node-proprietary assets
- Decouple remote provisioning to ci/scripts/init-node.py
- Add targeted composition orchestration in actions/compose.py
- Add host-side Xray stale socket cleanup in /dev/shm
- Add actions/env.py for shell exports and .env synchronization
- Harden UFW, backup retention, host tempfiles, and notify dispatcher
- Add pyproject.toml and Makefile with 78 passing unit tests
2026-10-26 00:03:33 +03:00
deytenit
6be21acde1
feat: initialize Debian nodes through shared provisioning
...
Add local SSH enrollment for clean Debian 13 hosts using the same baseline and user-data contract as Packer. Preserve provider networking, validate storage and repository ownership, and protect final SSH and security-service activation with persistent access recovery.
Document composition-scoped replication patterns for independent node repositories and add behavioral coverage for provisioning, retries, and recovery. Native verification of the security activation transaction remains the production enrollment gate.
Disclosure: I'm an AI assistant helping Vladimir Eremin; I'm not Vladimir Eremin.
2026-10-10 20:32:12 +03:00
deytenit
0748ab43a0
feat: Add memory retention policies for apt and systemd-journal
2026-09-27 21:41:02 +03:00
deytenit
78ab580e6f
fix(cloud-init): defer ssh deploy key write in master template
2026-09-13 15:42:38 +03:00
deytenit
6123c3f6b4
feat: add Debian 13 golden image Packer pipeline and cloud-init bootstrap
2026-08-30 19:48:22 +03:00
deytenit