atlas
a20596fa59
swarmctl: add bao init and bao grant-bootstrap ...
init prints the store's keys and root token once and keeps none; with
--and-grant it goes on to the granter bootstrap in the same process.
grant-bootstrap does that step alone, reading the root token from a
hidden prompt or stdin. The token reaches bao only as BAO_TOKEN in the
child's environment.
2026-11-08 09:09:13 +01:00
start the forge and github pollers when their token lands late
2026-11-07 08:40:05 +01:00
start the forge and github pollers when their token lands late
2026-11-07 08:40:05 +01:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
back off the matrix daemon's restarts so a homeserver outage can't flood the store with logins
2026-11-01 11:36:55 +01:00
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
container collectors scrape their own telemetry and push it up their hop
2026-10-28 23:02:18 +01:00
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
containers reach network-online only with a dhcp lease, and bao users wait for it
2026-11-01 11:06:41 +01:00
add rea agent module and reverse-engineer archetype
2026-10-27 11:33:04 +01:00
agent: pull in and allow claude-code only for the claude runtime
2026-11-04 20:52:49 +01:00
move nixBuilds into its own agent module, and have the vm test's agent import it
2026-11-06 09:18:42 +01:00
outlast openbao's cold restart in the agent ca unit's start limit
2026-11-01 15:09:13 +01:00
move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace
2026-11-01 20:47:23 +01:00
attic-init: replace the stored public key with the one the cache reports
2026-11-07 10:40:07 +01:00
containers reach network-online only with a dhcp lease, and bao users wait for it
2026-11-01 11:06:41 +01:00
name the mint, not the publisher, as the writer of the client secrets
2026-10-30 16:57:58 +01:00
sum the boot-wait budgets of units that start one after another in a container, and check it
2026-11-02 17:22:37 +01:00
read the running rev and the hyperhive flake from /etc files, not the unit
2026-11-06 11:35:48 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
swarmctl: add bao init and bao grant-bootstrap
2026-11-08 09:09:13 +01:00
module-eval: pin ProcSubset all and ProtectProc invisible on forgejo and openbao
2026-11-07 21:27:21 +01:00
swarm-grafana: a host dashboard for the collector's system metrics
2026-11-08 09:01:21 +01:00
squid blocks a runtime deny list from the controller in every egress mode, ahead of the allow list
2026-11-04 22:16:35 +01:00
scope the cache access to hive-core: client-side nix copy, daemon trusts only the key
2026-11-08 01:56:55 +01:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
module-eval: give the Grafana stand-in a mainProgram, so upstream's getExe stops warning
2026-11-05 09:55:53 +01:00
report the btrfs-subvolume root in host filesystem metrics
2026-11-08 03:03:49 +01:00
swarm: drop the -agent client suffix refusal from authelia and the queue responder
2026-10-24 15:02:32 +02:00
move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace
2026-11-01 20:47:23 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
module-eval: give the Grafana stand-in a mainProgram, so upstream's getExe stops warning
2026-11-05 09:55:53 +01:00
move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace
2026-11-01 20:47:23 +01:00
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace
2026-11-01 20:47:23 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
a20596fa59