atlas
e8190a4972
pin the container units in the hive collector's journal allow-list
2026-10-29 13:03:54 +01:00
atlas
c9096484d7
fold the container units into the one journalUnits definition
2026-10-29 12:52:54 +01:00
atlas
e316e683c3
ship container unit journals through the hive collector
2026-10-29 12:49:03 +01:00
atlas
37d5fad0b3
re-read the declaration before a mint, and mint for a current certificate whose role is missing
2026-10-29 11:42:32 +01:00
atlas
fa5293e90a
read the squid options at their new path in the otel fixture; pin the env on a host with a store identity
2026-10-29 09:53:20 +01:00
atlas
da16487800
move the squid host options to deploy.hive-controller.squid
2026-10-29 09:53:20 +01:00
atlas
c9b5705ad8
share one hive-priv request helper across the vm tests
2026-10-29 08:51:31 +01:00
atlas
525de62b06
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
flake-bot
400fdd7f0e
nix flake update
2026-10-29 08:27:47 +01:00
atlas
51b0a02e95
wait for the wg-hive peers before pinging in the vm test
2026-10-29 08:27:38 +01:00
atlas
ce14c9b001
wait for hive-priv's reply to a daemon-reload in the link-refusal subtest
2026-10-29 08:27:29 +01:00
atlas
8126e0fffa
mint a live agent's missing store identity from the renewal pass, and log the step a mint stopped at
2026-10-29 08:27:11 +01:00
atlas
0ad1dad8b5
derive backend hosts only from the operator's save; the backfill only drops
2026-10-29 08:25:22 +01:00
atlas
7e2f4ce7c8
always include a hive's own allowedDomains in the rendered swarm-wide list
2026-10-29 08:25:22 +01:00
atlas
c5a876b845
derive an agent's backend hosts into the egress allow list at the controller
2026-10-29 08:25:22 +01:00
atlas
4f32948a97
warn when the in-swarm cache runs under another domain
2026-10-29 08:24:44 +01:00
atlas
74f463c40e
move the c0re host options to deploy.hive-controller
2026-10-29 01:08:41 +01:00
atlas
525cbe0355
count readers, not writers, of the pull token in the cache's roster pin
2026-10-29 00:09:12 +01:00
atlas
7d78869104
name the ui path for replacing the cache's leaves
2026-10-29 00:09:12 +01:00
atlas
f22f4ee6ac
let the operator's oidc login write the cache's tokens and facts
2026-10-29 00:09:12 +01:00
atlas
e0d2350902
ignore a failed warn-only root check: prefix its ExecStartPre with a dash
2026-10-28 23:52:37 +01:00
atlas
24afc89ab3
run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template
2026-10-28 23:50:58 +01:00
atlas
c191975aab
check every container's root before its start, through the container@ template
2026-10-28 23:50:58 +01:00
atlas
1c3118e9cd
add two-vm wg-hive mesh test to vmTests
2026-10-28 23:44:58 +01:00
atlas
ad06ce04a8
pin the security headers in the swarm api 401 location property
2026-10-28 23:37:22 +01:00
atlas
ec14977949
build the single-host fixture's nginx config in a check so gixy runs in ci
2026-10-28 23:37:22 +01:00
atlas
46693b3c25
repeat the security headers in the swarm api 401 location
2026-10-28 23:37:22 +01:00
atlas
c209e49ee7
fix stale vale mentions in ci job comments
2026-10-28 23:08:48 +01:00
atlas
d5547725cf
drop the vale step added to pre-push
2026-10-28 23:08:48 +01:00
atlas
9ed7ebab91
fetch vale styles in nix, pinned, and drop vale sync
2026-10-28 23:08:48 +01:00
damocles
1971c6773a
fix the vale errors in the retired-matrix docs note
2026-10-28 23:04:55 +01:00
damocles
442311f748
drop apiUrl from the matrix options list in the docs
2026-10-28 23:04:55 +01:00
damocles
bdda69a080
drop the leftover matrix sweep references in docs and comments
2026-10-28 23:04:55 +01:00
damocles
6dbb18b6d4
drop the hive-side matrix code: sweep, hivectl matrix and the apiUrl option
2026-10-28 23:04:55 +01:00
atlas
a00bcb8c05
merge the self-scrape into each collector's settings instead of defining them twice
2026-10-28 23:02:18 +01:00
atlas
73c966a7eb
container collectors scrape their own telemetry and push it up their hop
2026-10-28 23:02:18 +01:00
atlas
2095bb2d0f
compare the seed file in the unit environment as a path string
2026-10-28 23:01:43 +01:00
atlas
c9abc2a42b
make squid's allowed domains editable at runtime in the swarm ui
2026-10-28 23:01:43 +01:00
atlas
86e80250bb
remove the partial salvage dir when a salvage fails
...
- a failure between creating the dir and the rename removes that dir only
- give the ephemeral-rootfs vm test a 4 GiB disk so the space check passes
2026-10-28 23:01:04 +01:00
atlas
836b15a46e
harden the ephemeral-root salvage: clone, check space, lock
...
- clone each file with FICLONE, copy the data only where that fails
- skip the salvage when the copy would leave too little free space
- hold a per-container flock and one copy at a time across containers
- run WriteNspawnFlags on the blocking pool
2026-10-28 23:01:04 +01:00
iris
1ee481c0b1
swarm-ui: the setup assistant shows when ruth is declared destroyed
2026-10-28 22:14:52 +01:00
atlas
bbc2a83771
print the vm test's priv response and journal only on failure
2026-10-28 22:04:09 +01:00
atlas
2b4fd52b0a
make the vm test's priv request wait for the salvage reply
2026-10-28 22:04:09 +01:00
atlas
b4ce4e0d90
put hello and tree in the agent-ephemeral-rootfs vm closure
2026-10-28 22:04:09 +01:00
atlas
6708ef804f
root the build the pre-start check names
2026-10-28 21:59:43 +01:00
atlas
a44a7256a7
check the container root before each start
2026-10-28 21:59:43 +01:00
iris
0999cffdaf
subagent headers: leave out a model or effort a header cannot hold
...
The values come from the agent's start request. One with a line break made
async-nats panic inside the publish task, which would have stopped every
subagent's rows. They are now trimmed, and skipped when empty, over 64
characters, or not a valid header value.
2026-10-28 21:55:02 +01:00
iris
da5fcbfd9b
subagents publish their model and effort as headers on every row, and the swarm shows them
...
The subagent daemon stamps Swarm-Model and Swarm-Effort on each row it
publishes. The list endpoint reads them off the newest row it already fetches,
so a long-running subagent keeps them past the stream's 24 hour window, and the
terminal page's menu and the agent panel's list show them beside the name.
2026-10-28 21:55:02 +01:00
damocles
ae9c3444bc
test the invite room check and the no-homeserver sweep, drop the last space wording
2026-10-28 21:07:32 +01:00
damocles
fd01848d4d
also stop provisioning the hive space and make hivectl matrix invite take a room
2026-10-28 20:57:41 +01:00
