atlas
fd2861c097
reset the failed container unit before stopping it in the link-refusal vm subtest
2026-10-30 08:52:50 +01:00
atlas
e46ad07226
add a per-agent egress log mode
2026-10-30 08:52:22 +01:00
atlas
9140d063d7
offer the log mode in the swarm ui
2026-10-30 08:52:22 +01:00
iris
b74011bb54
the builds list keeps the swarm's deploy builds too
...
build_meta, the build of each agent from internal/meta before a deploy, now
writes its result into the same list as the config PR builds: the agent, the
internal/meta commit, how it ended and what nix printed. The builds card titles
them by agent and shows them with the PR builds.
2026-10-30 02:06:07 +01:00
atlas
221c3f35a1
remove the hive-c0re forge-credential chain nothing reads any more
...
With no nix build on the hive, the boot publish of the forge token for nix has no reader. Removes the ForgeSweep node, the token file, the git credential helper and hive-c0re's forge gitconfig sections.
2026-10-29 22:55:31 +01:00
atlas
6b800600e2
bind a container apply to the closure realised for the agent, and record the deployed pins on drift
...
hive-priv applies only the path its last RealiseClosure returned for that agent. On drift the swap and create record the pins of the commit the closure was built from.
2026-10-29 22:36:58 +01:00
atlas
4590b04cac
remove the hive's local build of agent closures
...
A rebuild or create downloads the closure the swarm built and applies it; with none to deploy it fails and changes nothing. hive-priv takes a store path instead of an internal/meta commit and builds nothing.
2026-10-29 22:17:07 +01:00
atlas
70538fb209
move c0re.hyperhiveFlake to deploy.hyperhiveFlake
2026-10-29 14:31:20 +01:00
atlas
76de27fc97
bring existing agent cert roles to the 1h token ttl on controller start
2026-10-29 14:22:23 +01:00
atlas
e8190a4972
pin the container units in the hive collector's journal allow-list
2026-10-29 13:03:54 +01:00
atlas
c9096484d7
fold the container units into the one journalUnits definition
2026-10-29 12:52:54 +01:00
atlas
e316e683c3
ship container unit journals through the hive collector
2026-10-29 12:49:03 +01:00
atlas
37d5fad0b3
re-read the declaration before a mint, and mint for a current certificate whose role is missing
2026-10-29 11:42:32 +01:00
atlas
fa5293e90a
read the squid options at their new path in the otel fixture; pin the env on a host with a store identity
2026-10-29 09:53:20 +01:00
atlas
da16487800
move the squid host options to deploy.hive-controller.squid
2026-10-29 09:53:20 +01:00
atlas
c9b5705ad8
share one hive-priv request helper across the vm tests
2026-10-29 08:51:31 +01:00
atlas
525de62b06
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
flake-bot
400fdd7f0e
nix flake update
2026-10-29 08:27:47 +01:00
atlas
51b0a02e95
wait for the wg-hive peers before pinging in the vm test
2026-10-29 08:27:38 +01:00
atlas
ce14c9b001
wait for hive-priv's reply to a daemon-reload in the link-refusal subtest
2026-10-29 08:27:29 +01:00
atlas
8126e0fffa
mint a live agent's missing store identity from the renewal pass, and log the step a mint stopped at
2026-10-29 08:27:11 +01:00
atlas
0ad1dad8b5
derive backend hosts only from the operator's save; the backfill only drops
2026-10-29 08:25:22 +01:00
atlas
7e2f4ce7c8
always include a hive's own allowedDomains in the rendered swarm-wide list
2026-10-29 08:25:22 +01:00
atlas
c5a876b845
derive an agent's backend hosts into the egress allow list at the controller
2026-10-29 08:25:22 +01:00
atlas
4f32948a97
warn when the in-swarm cache runs under another domain
2026-10-29 08:24:44 +01:00
atlas
74f463c40e
move the c0re host options to deploy.hive-controller
2026-10-29 01:08:41 +01:00
atlas
525cbe0355
count readers, not writers, of the pull token in the cache's roster pin
2026-10-29 00:09:12 +01:00
atlas
7d78869104
name the ui path for replacing the cache's leaves
2026-10-29 00:09:12 +01:00
atlas
f22f4ee6ac
let the operator's oidc login write the cache's tokens and facts
2026-10-29 00:09:12 +01:00
atlas
e0d2350902
ignore a failed warn-only root check: prefix its ExecStartPre with a dash
2026-10-28 23:52:37 +01:00
atlas
24afc89ab3
run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template
2026-10-28 23:50:58 +01:00
atlas
c191975aab
check every container's root before its start, through the container@ template
2026-10-28 23:50:58 +01:00
atlas
1c3118e9cd
add two-vm wg-hive mesh test to vmTests
2026-10-28 23:44:58 +01:00
atlas
ad06ce04a8
pin the security headers in the swarm api 401 location property
2026-10-28 23:37:22 +01:00
atlas
ec14977949
build the single-host fixture's nginx config in a check so gixy runs in ci
2026-10-28 23:37:22 +01:00
atlas
46693b3c25
repeat the security headers in the swarm api 401 location
2026-10-28 23:37:22 +01:00
atlas
c209e49ee7
fix stale vale mentions in ci job comments
2026-10-28 23:08:48 +01:00
atlas
d5547725cf
drop the vale step added to pre-push
2026-10-28 23:08:48 +01:00
atlas
9ed7ebab91
fetch vale styles in nix, pinned, and drop vale sync
2026-10-28 23:08:48 +01:00
damocles
1971c6773a
fix the vale errors in the retired-matrix docs note
2026-10-28 23:04:55 +01:00
damocles
442311f748
drop apiUrl from the matrix options list in the docs
2026-10-28 23:04:55 +01:00
damocles
bdda69a080
drop the leftover matrix sweep references in docs and comments
2026-10-28 23:04:55 +01:00
damocles
6dbb18b6d4
drop the hive-side matrix code: sweep, hivectl matrix and the apiUrl option
2026-10-28 23:04:55 +01:00
atlas
a00bcb8c05
merge the self-scrape into each collector's settings instead of defining them twice
2026-10-28 23:02:18 +01:00
atlas
73c966a7eb
container collectors scrape their own telemetry and push it up their hop
2026-10-28 23:02:18 +01:00
atlas
2095bb2d0f
compare the seed file in the unit environment as a path string
2026-10-28 23:01:43 +01:00
atlas
c9abc2a42b
make squid's allowed domains editable at runtime in the swarm ui
2026-10-28 23:01:43 +01:00
atlas
86e80250bb
remove the partial salvage dir when a salvage fails
...
- a failure between creating the dir and the rename removes that dir only
- give the ephemeral-rootfs vm test a 4 GiB disk so the space check passes
2026-10-28 23:01:04 +01:00
atlas
836b15a46e
harden the ephemeral-root salvage: clone, check space, lock
...
- clone each file with FICLONE, copy the data only where that fails
- skip the salvage when the copy would leave too little free space
- hold a per-container flock and one copy at a time across containers
- run WriteNspawnFlags on the blocking pool
2026-10-28 23:01:04 +01:00
iris
1ee481c0b1
swarm-ui: the setup assistant shows when ruth is declared destroyed
2026-10-28 22:14:52 +01:00
