3662b0f2bf
fix: correct KUBECONFIG variable to KUBECONFIG_PATH in security_runtime
Homelab Main / validate (push) Failing after 13s
Details
Homelab Main / deploy (push) Has been skipped
Details
2026-09-19 00:58:18 -05:00
d189428faf
chore: update jeannie toolchain and add ai-model-check utility
Homelab Main / validate (push) Failing after 12s
Details
Homelab Main / deploy (push) Has been skipped
Details
2026-09-19 00:54:47 -05:00
88536c5721
refactor: properly modularize jeannie script by stripping duplicated functions
Homelab Main / validate (push) Successful in 17s
Details
Homelab Main / deploy (push) Successful in 14s
Details
2026-09-18 22:39:36 -05:00
85b5e948b9
ci: add graphiphy repo mapping to up pipeline
Homelab Main / validate (push) Successful in 19s
Details
Homelab Main / deploy (push) Successful in 12s
Details
2026-09-18 22:12:48 -05:00
fe661f9b24
Add Matrix/Hermes/Omniroute to jeannie pipeline (SOPS-encrypted secrets)
...
Codify the full Matrix homeserver stack, OmniRoute LLM gateway, and
Hermes agent into the Jeannie deploy pipeline so the repo reproduces
the running homelab from scratch.
New files:
infra/matrix-server/ — Synapse + Postgres + Element docker-compose,
homeserver.yaml.tpl, log_config, element config, bootstrap.sh
infra/omniroute/ — diegosouzapw/omniroute:latest on port 20128
infra/hermes.secret.yaml — SOPS-encrypted bot password + API key
infra/matrix-server/matrix.secret.yaml — SOPS-encrypted Synapse secrets
.sops.yaml — age recipient + encrypted_regex: '.*'
jeannie additions:
deploy_matrix() — renders homeserver.yaml from template, creates
signing key via 'generate' on first boot, delegates to bootstrap.sh
deploy_omniroute() — docker compose up with env-file support
deploy_hermes() — git clone + venv + 'hermes gateway install',
writes ~/.hermes/.env (mode 600), registers non-admin bot via
shared-secret CLI, idempotent
sops_load_secrets() — decrypts *.secret.yaml via age key at deploy
time; fails loudly if the age key is missing
ensure_sops_age_tools() — installs sops from getsops GitHub release
when apt has no sops package (Debian trixie)
DAG: hermes-deploy depends on matrix-deploy + omniroute-deploy.
Root cause: deploy_hermes previously used wrong entrypoint (python
module instead of ./hermes launcher); generate was called with
--generate-config (invalid subcommand); .sops.yaml encrypted_regex
'^password$' left prefixed keys as plaintext — all fixed in this
commit.
2026-09-16 11:37:13 -05:00
d6e33250f4
Gates for pimoc workers with less than 2 cpus
2026-07-23 13:16:11 -06:00
6277dfb5d2
Confir what argo is watching
2026-07-22 23:31:10 -06:00
101668fbc9
Fixes stale state in tofu
2026-07-22 22:35:23 -06:00
a47f4b56e9
Using dedicated known host file for ephemeral pimox workers
2026-07-22 21:43:36 -06:00
7c0936d889
Fixing pimox template ip
2026-07-22 20:42:19 -06:00
58af55e7e0
Fixing pimox worker seen one cpu instead of two
2026-07-22 19:09:55 -06:00
de990cdfb3
adding platform agument
2026-07-02 21:38:48 -06:00
8c07e3f27b
wait on iptables lock
2026-07-02 21:02:49 -06:00
12cde3acac
Fixing k8s api timing
2026-07-02 17:40:50 -06:00
140fc63a5f
Moving heimdall outside k8s
2026-07-02 15:49:00 -06:00
ddc971f6df
Adding tailscaed route for debian host
2026-07-02 13:13:37 -06:00
6cf5abe8bd
fixig ailscaled routes
2026-07-02 13:04:11 -06:00
8865ab9d18
Adding haproxy pass as secret managed in pipeline
2026-07-02 12:42:46 -06:00
d278355d68
exportin inventory vars
2026-07-02 12:38:47 -06:00
f041cf2aba
Updating preflights
2026-07-02 11:42:31 -06:00
db6035e75f
fix kubeconfig missing
2026-07-02 11:33:57 -06:00
77e31bba0b
fixing PATH in pimox worker
2026-07-02 11:12:57 -06:00
cfcfc39f1f
Install iptables if missing
2026-07-02 10:59:58 -06:00
540ae7e486
Fixing pimox worker having 2 ips
2026-07-02 10:26:19 -06:00
04d5b259c0
Update docker root dir in rpi
2026-07-02 09:02:52 -06:00
06941a8454
Repair Pimox worker SSH readiness
2026-07-01 19:33:23 -06:00
349ffd006e
Default cluster workers to Pimox only
2026-07-01 19:12:37 -06:00
21adbd5628
Rebuild cluster worker vars for static Pimox workers
2026-07-01 18:57:40 -06:00
86ac132629
Fix Pimox worker static networking
2026-07-01 18:41:29 -06:00
e8b9b57d77
Restore known-good Pimox worker defaults
2026-07-01 14:49:25 -06:00
d80960fce0
Reduce duplicate Jeannie progress repaints
2026-07-01 14:27:42 -06:00
0cda6573ad
Let Pimox generate worker NIC MACs by default
2026-07-01 14:05:11 -06:00
ed0983d09a
Run independent Jeannie up tasks in parallel
2026-07-01 14:01:58 -06:00
ea4576c707
Stream Jeannie step output to logs
2026-07-01 13:49:02 -06:00
1bdde9c128
Default Pimox workers back to DHCP networking
2026-07-01 13:14:06 -06:00
9b9afc1c4e
Respect Pimox guest exec failures
2026-07-01 11:02:45 -06:00
5a14e2d409
Fail Pimox worker network issues faster
2026-07-01 10:49:48 -06:00
1b97cc1404
Apply Pimox worker static IP at runtime
2026-07-01 09:28:18 -06:00
dca90ad3aa
Fail Pimox worker creation faster
2026-07-01 09:09:39 -06:00
e062de2413
Configure Pimox worker static networking
2026-07-01 09:04:06 -06:00
d63e402012
Start Jeannie Go core migration
2026-07-01 08:49:43 -06:00
44d43f2b42
Show compact progress for long Jeannie steps
2026-07-01 08:34:36 -06:00
8e19df1c71
Restart NotReady Pimox worker during heal
2026-06-30 14:10:27 -06:00
0d887acd24
Add guarded Jeannie self healing
2026-06-30 13:46:47 -06:00
f49b8b9673
Add model behavior observatory
2026-06-30 13:24:54 -06:00
ed3402bb71
Add canary promotion gates
2026-06-30 13:22:50 -06:00
7f537c4025
Add red blue security loop
2026-06-30 13:21:15 -06:00
0af1257d86
Add Jeannie memory provenance checks
2026-06-30 13:19:49 -06:00
edb36592a7
Add AI workload scheduler simulator
2026-06-30 13:17:57 -06:00
0b886295c8
Add local agent sandbox policy
2026-06-30 13:16:27 -06:00
jv
juvenal.diaz