• Berlin
  • Joined on 2025-01-15
vinzenz pushed to main at vinzenz/nixos-configuration 2026-07-14 21:34:23 +02:00
bec143ee92 update hyperhive + trollshell
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 21:27:08 +02:00
91607f3896 refactor(#2442): split harness-state persistence out of events.rs
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 20:48:42 +02:00
bf657177d3 fix(#2438): link config approval commit by full sha, not abbreviated
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 20:38:18 +02:00
407965b6e1 fix(#2398): correct stale doc on handle_restart_scoped
901ab6a779 fix(#2398): graceful restart as one atomic DAG, not compose-and-await
4cfa040154 feat(#2398): dagify hivectl restart (RestartScoped)
Compare 3 commits »
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 20:29:43 +02:00
5853ce2c8d fix(#2417): hardcode external,gateway in forgejo webhook allowlist, drop option
60e4ea8bb8 fix(#2417): keep 'external' in webhook allow-list so public webhooks still deliver
00c9a15ae6 fix(#2417): make webhook allow-list additive via forge.webhookAllowedHosts option
cada704856 fix(#2417): allow gateway host in forgejo webhook ssrf list so config-pr webhook delivers
Compare 4 commits »
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 20:02:28 +02:00
e0461e1af6 refactor(#2431): extract hive-priv-sock crate from hive-sh4re
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 19:59:42 +02:00
ffde085c35 fix(#2433): mkforce container@hive-ci timeoutstartsec to resolve nixpkgs conflict
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 19:46:14 +02:00
46bdb78466 hive-forge: validate --forge <label> charset up front
8e58793f79 hive-forge: add -f/--forge <label> selector for external forge accounts
Compare 2 commits »
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 19:24:06 +02:00
60a253a2f6 fix(#1763): address argus review on PR #2430
90af0edab0 feat(#1763): local-file half of btrfs send/receive migration transport
Compare 2 commits »
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 19:20:32 +02:00
f5c8a6a8db fix(#2426): bash wake gives status + read() pointer, not inline stdout/stderr
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 19:00:09 +02:00
5869f34390 dashboard: fix stale nix/modules path in extra_forges.rs doc comment
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 18:54:36 +02:00
2c079afd65 fix(#2391): drop "." entirely from credential/snapshot name charset
720ac81235 fix(#2391): reject ".." in credential/snapshot names (path-traversal hardening)
8f8076b8ed fix(#2391): mandatory hive- prefixed snapshot label, nest subvol snapshot create/delete
7799e0762a feat(#2391): btrfs SnapshotAgentSubvolume/DeleteAgentSnapshot priv ops
Compare 4 commits »
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 18:52:20 +02:00
0bfe47458c fix(#2401): mirror config-pr deploy tag to forge via push_config
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 18:39:19 +02:00
15e56986ad fix(#2417): trust hive ca in forge container for self-signed webhook delivery
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 18:39:02 +02:00
ec24b96022 forge: drop stale TOKEN_SCOPES/extra.rs cross-reference
dbf880ac66 extra-forges: fully dashboard-provisioned, no host config
Compare 2 commits »
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 18:27:55 +02:00
f025f32ccb fix(#2417): cancel stale config-pr approvals when the pr is no longer open
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 17:39:32 +02:00
2bf6290aa0 fix(#2410): bump container@hive-ci TimeoutStartSec to survive slow runner registration
vinzenz pushed to main at vinzenz/nixos-configuration 2026-07-14 00:17:17 +02:00
7ebc86b4e6 nix flake update
83798edb8a make distributed builds fail faster
Compare 2 commits »
vinzenz pushed to main at vinzenz/hyperhive 2026-07-14 00:09:01 +02:00
0d416df1e8 fix: shared-netns infra containers must not run their own firewall
d97659c06a docs: add the network topology map to network.md
Compare 2 commits »
vinzenz pushed to main at vinzenz/hyperhive 2026-07-13 22:50:11 +02:00
68afbb01f7 fix: per-key mkDefault for hyperhive.packages so single-key overrides merge
eba3f206ab docs: reflect the new nix layout and removed options
79fec131d6 docs: sweep archaeology comments to present state
e0cfed7fe8 refactor: jq for tea-login, build-time avatar png, shared leaf-sign script
935e967718 feat: hive DNS always follows the host resolver
Compare 18 commits »