atlas
c0c031a5e4
swarm-bao: let the journald receiver read the host-linked journal ...
The container's collector has never shipped a line. `journalctl --follow`
— which the journald receiver passes unconditionally — scopes itself to
the current boot unless `--merge` is given too, and `--link-journal=host`
makes /var/log/journal the HOST's journal tree, where this container's
current boot has no entry. journalctl exited 1 with "No journal boot
entry found for the specified boot (+0)" and the receiver respawned it
every ~2s, so nothing was ever read and nothing was ever exported.
`merge = true` is the receiver's key for `--merge` (buildArgs() in
pkg/stanza/operator/input/journald/config_linux.go at tag
receiver/journaldreceiver/v0.151.0, the deployed collector's version),
and --merge is what clears the implicit boot scope in journalctl.c
(systemd v260.4, the version on the host).
The module-eval arm pins both halves: the boot filter is gone AND the
directory is still the host-linked one — either alone is satisfiable by
the broken config.
2026-09-23 23:19:31 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
docs(gateway): describe nginx as per-host, not a deployment-wide singleton
2026-09-19 13:58:10 +02:00
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
swarm-grafana /dashboards
swarm-grafana: replace busiest-agents bargauges with an actual table
2026-09-20 23:40:21 +02:00
nix: issue the swarm-services leaf from bao's pki mount
2026-09-23 21:00:02 +02:00
swarm-controller: make socketPath readOnly instead of asserting it
2026-09-17 19:27:30 +02:00
nix: unbreak the swarm-services leaf the gateway waits on
2026-09-23 21:36:46 +02:00
swarm-controller: hand the daemon the authority hives are issued from
2026-09-10 00:25:07 +02:00
swarm-grafana: deliver the OIDC client secret through the secret store
2026-09-13 19:57:28 +02:00
swarm-bao: refuse a remote reader that named seven of the eight leaves
2026-09-23 10:11:42 +02:00
swarm-matrix-ctl: one control binary for the matrix container, not one per job
2026-09-20 22:07:16 +02:00
swarm-bao: refuse a remote reader that named seven of the eight leaves
2026-09-23 10:11:42 +02:00
swarm: publish minted OIDC client secrets into the swarm store
2026-09-12 11:22:33 +02:00
nix: issue the swarm-services leaf from bao's pki mount
2026-09-23 21:00:02 +02:00
nix: the store's own collector scrapes its metrics listener
2026-09-21 17:19:52 +02:00
swarm-otel: deliver the OIDC client secret through the secret store
2026-09-14 00:58:58 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
hive-tls: give swarm-services-cert the cmp it tests the root with
2026-09-23 22:18:32 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
bao: write the swarm controller's policy from inside the store
2026-09-07 18:43:09 +02:00
otel.nix: trim the StartLimit comment block to the load-bearing points
2026-09-23 17:22:51 +02:00
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
swarm-bao: let the journald receiver read the host-linked journal
2026-09-23 23:19:31 +02:00
nix: issue the swarm-services leaf from bao's pki mount
2026-09-23 21:00:02 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
swarm-bao: give each hive-cert consumer its own bao identity
2026-09-23 10:11:42 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
swarm-otel: persist the journald cursor across collector restarts
2026-09-23 12:52:32 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: the store's own collector scrapes its metrics listener
2026-09-21 17:19:52 +02:00
deploy: move the wireguard mesh out of the namespace hives read
2026-09-07 14:24:52 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
deploy: move the wireguard mesh out of the namespace hives read
2026-09-07 14:24:52 +02:00
nix: issue the swarm-services leaf from bao's pki mount
2026-09-23 21:00:02 +02:00
c0c031a5e4