Repository navigation

feat: implement skillet configuration tool - #46

Open

gbagnoli wants to merge 250 commits into

masterfrom

skillet

Commits on Sep 22, 2026
Commits on Sep 25, 2026
- clamps: autorebase to ghcr.io/gbagnoli/ucore-clamps on first boot
  zuckkybot
  committed
  1fa4fd4
Commits on Sep 26, 2026
- clamps: add baseline convergence and VM bootstrap checks
  gbagnoli
  committed
  6ad2c0e
- skillet: restore integration test runner command
  gbagnoli
  committed
  d36a22e
- skillet: auto-select smoke test binaries
  gbagnoli
  committed
  13d1fc3
- skillet: manage disposable smoke VM lifecycle
  gbagnoli
  committed
  b1556e1
- butane: avoid oversized Ignition fw_cfg payload
  gbagnoli
  committed
  8019d66
- butane: execute clamps bootstrap and skillet from labeled bin path
  gbagnoli
  committed
  fa5904f
- skillet: preserve ignition SSH access across clamps rebase
  gbagnoli
  committed
  304dca3
- Share uCore bootstrap and disposable VM tooling
  gbagnoli
  committed
  832d784
- Use host and instance arguments for test VMs
  gbagnoli
  committed
  67852af
- Repair Skillet container integration runner
  gbagnoli
  committed
  918c9cb
- Skip unavailable Cookstyle in pre-push hook
  gbagnoli
  committed
  91ae212
Commits on Sep 27, 2026
- Support Flatpak libvirt for disposable test VMs
  gbagnoli
  committed
  c3ae98a
Commits on Sep 29, 2026
- Document secret delivery and VM lifecycle; organize migration plans
  gbagnoli
  committed
  426930c
- Provision clamps Pi-hole credentials from XDG vault
  gbagnoli
  committed
  a4b6c37
- Document clamps Btrfs data layout and migration steps
  gbagnoli
  committed
  c4f3b77
- Record fresh clamps VM smoke acceptance
  gbagnoli
  committed
  cbe8e38
- Share Btrfs data and Podman storage across uCore hosts
  gbagnoli
  committed
  970f846
- fix(butane): support native libvirt on Rocky Linux
  gbagnoli
  committed
  c7a356c
- feat(skillet): create and deliver KeePass host credentials
  gbagnoli
  committed
  db3e53c
- fix(skillet): cache vault unlock in expiring session keyring
  gbagnoli
  committed
  db58bf0
- docs(plan): record clamps rebase and recovery checks
  gbagnoli
  committed
  76f0f35
- fix(ci): run container checks with base phase
  gbagnoli
  committed
  2885014
- feat(pihole): add shared DNS network
  gbagnoli
  committed
  60fa0b5
- feat(syncthing): provision clamps service
  gbagnoli
  committed
  10a407d
- docs(access): choose private tailnet UI routing
  gbagnoli
  committed
  b35bb8d
- docs(plan): hand off clamps btrbk milestone
  gbagnoli
  committed
  802880a
- feat(btrbk): add host-configurable snapshot convergence
  gbagnoli
  committed
  3e3d9ed
- fix(systemd): avoid waiting for unit termination
  gbagnoli
  committed
  8a34887
- docs(btrbk): require leaf snapshot sources
  gbagnoli
  committed
  aba3f91
- docs(tailscale): document provisioning and split DNS
  gbagnoli
  committed
  58782e2
Commits on Sep 30, 2026
- feat(tailscale): provision and clean up host identities
  gbagnoli
  committed
  afb6f40
- docs(tailscale): document provisioning and DNS decisions
  gbagnoli
  committed
  86c7c2a
Commits on Oct 1, 2026
- fix(syncthing): keep the GUI on the private container network
  gbagnoli
  committed
  732634f
- feat(credentials): allow installation before service activation
  gbagnoli
  committed
  8ffaf39
- feat(caddy): add private UI configuration and credential delivery
  gbagnoli
  committed
  875deca
- docs(ublue): plan generic UI provisioning and record validation
  gbagnoli
  committed
  5d4e5d0
- feat(skillet): generalize private UI provisioning
  gbagnoli
  committed
  4391246
- test(caddy): verify idempotent generic apply
  gbagnoli
  committed
  a0fb991
- docs: record generic private UI provisioning
  gbagnoli
  committed
  eb2bc4e
- docs(ublue): define Cloudflare UI lifecycle and aliases
  gbagnoli
  committed
  bb35651
Commits on Oct 2, 2026
- feat(skillet): manage Cloudflare UI credentials and DNS
  gbagnoli
  committed
  3af993e
- docs(ublue): record Cloudflare UI lifecycle
  gbagnoli
  committed
  1f9f9f5
- docs(cloudflare): clarify token issuer permissions
  gbagnoli
  committed
  25244ff
- docs(skillet): record local musl compiler setup
  gbagnoli
  committed
  0d5dc72
- docs(acceptance): record musl build and vault unlock blocker
  gbagnoli
  committed
  4b9ef6a
- docs(storage): plan TPM encrypted root and acceptance tests
  gbagnoli
  committed
  67c81e8
- fix(cloudflare): explain zone preflight permission requirements
  gbagnoli
  committed
  0937807
- feat(caddy): derive relative UI namespace from Cloudflare zone
  gbagnoli
  committed
  b40b7ac
- feat(cloudflare): support account-owned token issuers
  gbagnoli
  committed
  8fcb583
- test(cloudflare): cover mutation retry recovery
  gbagnoli
  committed
  f91c63a
- test(caddy): probe non-tailnet UI denial in VM
  gbagnoli
  committed
  b6a26e6
- docs(pihole): record smoke DNS checks
  gbagnoli
  committed
  404c92c
- docs(plan): group deferred network acceptance checks
  gbagnoli
  committed
  d3a9657
- feat(unifi): add clamps controller container
  gbagnoli
  committed
  37fc526
Commits on Oct 3, 2026
- fix(unifi): support numeric container ownership
  gbagnoli
  committed
  6765ecb
- docs(unifi): record VM acceptance
  gbagnoli
  committed
  6f450ad
- docs(skillet): define architecture refactoring prerequisite
  gbagnoli
  committed
  471068f
- refactor(vm): add typed manifests and strict legacy import
  gbagnoli
  committed
  544b8e5
- fix(vm): centralize owned disposal and recover absent guests
  gbagnoli
  committed
  d799ace
- refactor(vm): share catalog and Cargo artifact discovery
  gbagnoli
  committed
  cbfa1c2
- fix(vm): preserve manifests through artifact cleanup failures
  gbagnoli
  committed
  67d8f54
- refactor(vm): add bounded shared SSH transport
  gbagnoli
  committed
  fc88433
- refactor(vm): migrate retained binary updates to Rust
  gbagnoli
  committed
  4c7092e
- refactor(vm): migrate guest readiness checks to Rust
  gbagnoli
  committed
  a9c00d3
- fix(vm): recover failed readiness retries safely
  gbagnoli
  committed
  0a0de81
- docs(vm): link readiness recovery evidence
  gbagnoli
  committed
  226c661
- feat(vm): persist recoverable creation intents
  gbagnoli
  committed
  fd9ec85
- refactor(vm): render native domain XML in Rust
  gbagnoli
  committed
  e4da712
- refactor(vm): move local artifact preparation to Rust
  gbagnoli
  committed
  45eec4b
- refactor(vm): move Butane staging to Rust
  gbagnoli
  committed
  cfe3872
- refactor(vm): move native define and start into Rust
  gbagnoli
  committed
  ea61803
- refactor(vm): move reboot and guest access into Rust
  gbagnoli
  committed
  ba1142e
- refactor(vm): add Rust Flatpak creation adapter
  gbagnoli
  committed
  b259119
- refactor(vm): move create orchestration into Rust
  gbagnoli
  committed
  d341498
- docs(vm): record Rust lifecycle migration
  gbagnoli
  committed
  7b8dd0a
- refactor(hosts): centralize host profiles
  gbagnoli
  committed
  c031aee
- refactor(core): inject host identity and credentials
  gbagnoli
  committed
  4144af4
- refactor(core): split file effect capabilities
  gbagnoli
  committed
  fe181f2
- refactor(core): split system effect capabilities
  gbagnoli
  committed
  0e6d7ab
- refactor(vm): share credential delivery transport
  gbagnoli
  committed
  6cf9d54
- refactor(tailscale): replace curl with Rust HTTP client
  gbagnoli
  committed
  d97b454
- refactor(workstation): extract vault and guest credentials
  gbagnoli
  committed
  e77c001
- refactor(workstation): extract Cloudflare provider
  gbagnoli
  committed
  f767151
- refactor(workstation): extract Tailscale provider
  gbagnoli
  committed
  798cca4
- refactor(workstation): model provisioning policy
  gbagnoli
  committed
  badc341
- refactor(podman): move DNS policy to host baseline
  gbagnoli
  committed
  4da7571
- refactor(podman): model process identity explicitly
  gbagnoli
  committed
  bb94318
- refactor(podman): type networks and port bindings
  gbagnoli
  committed
  d436803
Commits on Oct 4, 2026
- refactor(podman): share data mount dependencies
  gbagnoli
  committed
  3ef996b
- refactor(skillet): unify activation and recording
  gbagnoli
  committed
  9c54351
- test(skillet): isolate smoke fixture and verify artifacts
  gbagnoli
  committed
  25cf3a7
- refactor(skillet): share credential guest transport
  gbagnoli
  committed
  a597a54
- test(skillet-core): share file adapter contracts
  gbagnoli
  committed
  c24cc9d
- test(skillet-core): verify account lookup adapters
  gbagnoli
  committed
  6700e1b
- test(skillet-core): verify system effect contracts
  gbagnoli
  committed
  2fb6f64
- refactor(skillet-podman): type volume root ownership
  gbagnoli
  committed
  fd423f9
- refactor(workstation): own provider cleanup journals
  gbagnoli
  committed
  72397e2
- refactor(workstation): share private UI provisioning plan
  gbagnoli
  committed
  5bfbb1c
- refactor(tailscale): parse guest status in provider
  gbagnoli
  committed
  b442dfc
- refactor(tailscale): share enrollment retry policy
  gbagnoli
  committed
  9d00748
- fix(skillet): fail closed on Tailscale probe errors
  gbagnoli
  committed
  430f2f6
- refactor(vm): install deferred credentials as a set
  gbagnoli
  committed
  3fe5e1a
- refactor(workstation): own disposable Tailscale enrollment
  gbagnoli
  committed
  f74119b
- refactor(workstation): own disposable UI DNS provisioning
  gbagnoli
  committed
  0023a3c
- build(skillet): record workstation VM dependency
  gbagnoli
  committed
  dc987a3
- refactor(workstation): own disposable Cloudflare cleanup
  gbagnoli
  committed
  980af4a
- refactor(workstation): own disposable Tailscale cleanup
  gbagnoli
  committed
  ab7d5f3
- refactor(workstation): own persistent UI delivery
  gbagnoli
  committed
  7055abe
- refactor(workstation): own disposable Caddy delivery
  gbagnoli
  committed
  ed791d7
- refactor(workstation): own host credential delivery
  gbagnoli
  committed
  d93ca42
- docs(skillet): record remaining ownership boundary gap
  gbagnoli
  committed
  c516a4c
- refactor(vm): use owned manifests for provisioning
  gbagnoli
  committed
  9f1a79d
- docs(skillet): record provisioning ownership boundaries
  gbagnoli
  committed
  d3066b7
- refactor(core): unify file ownership inputs
  gbagnoli
  committed
  b4b4506
- docs(skillet): record unified ownership contract
  gbagnoli
  committed
  ccd5eba
- feat(cli): add standalone vault unlock command
  gbagnoli
  committed
  8b14b76
- docs(skillet): record clamps smoke acceptance
  gbagnoli
  committed
  6177483
- fix(vm): handle fresh host provisioning prerequisites
  gbagnoli
  committed
  103167b
- docs: record fresh VM acceptance and shared zone path
  gbagnoli
  committed
  5ab6e05
- fix(workstation): scope Cloudflare zone by environment
  gbagnoli
  committed
  43cfe66
- fix(workstation): use prod and test vault groups
  gbagnoli
  committed
  72f9d4c
- docs: record successful test ACME acceptance
  gbagnoli
  committed
  06f4989
- docs(skillet): reconcile refactor acceptance status
  gbagnoli
  committed
  5cd2e22
Commits on Oct 5, 2026
- fix(ci): install required tools
  gbagnoli
  committed
  3f750a3
- docs(skillet): complete refactor acceptance record
  gbagnoli
  committed
  511447b
- refactor(vm): move smoke lifecycle under Rust
  gbagnoli
  committed
  24c0d6c
- test(core): align resource fakes with runtime contracts
  gbagnoli
  committed
  4b92b58
- ci: run bootstrap state regression suite
  gbagnoli
  committed
  0985c1d
- docs: track refactor follow-up acceptance
  gbagnoli
  committed
  161ba63
- fix(workstation): probe Caddy through its bridge address
  gbagnoli
  committed
  fc62cdb
- fix(test): check the managed Btrfs timer unit
  gbagnoli
  committed
  b5d6716
- docs: record live application acceptance
  gbagnoli
  committed
  5f856ff
- test(vm): script interrupted reboot recovery
  gbagnoli
  committed
  9fb43fd
- fix(syncthing): map container identity to data owner
  gbagnoli
  committed
  43438e3
- fix(cli): improve application smoke diagnostics
  gbagnoli
  committed
  126004f
- docs(plan): park Syncthing VM acceptance
  gbagnoli
  committed
  71eb002
Commits on Oct 6, 2026
- docs(clamps): audit parity and plan Cloudflare DDNS port
  gbagnoli
  committed
  c8f5d7e
- fix(ci): satisfy Rust 1.99 and scoped ShellCheck checks
  gbagnoli
  committed
  0c6bed4
- feat(ddns): add optional updater and scoped credential delivery
  gbagnoli
  committed
  82465cc
- feat(ddns): add disposable ownership lifecycle
  gbagnoli
  committed
  c378ce6
- docs(ddns): record disposable acceptance status
  gbagnoli
  committed
  1f286d1
- feat(config): resolve vault references in service templates
  gbagnoli
  committed
  e3674fc
Commits on Oct 7, 2026
- feat(datadog): add optional rootful agent and service monitoring
  gbagnoli
  committed
  ce68783
- feat(secrets): audit vault requirements and unused entries
  gbagnoli
  committed
  bbfcae8
- fix(podman): preserve literal Quadlet directives
  gbagnoli
  committed
  28ed7a3
- fix(datadog): share API key and preserve Agent integrations
  gbagnoli
  committed
  511de06
- docs(acceptance): record DDNS and Datadog VM results
  gbagnoli
  committed
  869c438
Commits on Oct 8, 2026
- fix(datadog): order boot discovery after monitored workloads
  gbagnoli
  committed
  196ce80
- feat(datadog): separate lab telemetry from production regions
  gbagnoli
  committed
  59fea9d
- docs(datadog): record test monitor exclusions and setup key
  gbagnoli
  committed
  69e908d
- fix(datadog): enable perf events under Podman seccomp
  gbagnoli
  committed
  7b01e86
- feat(vm): forward local UI ports through owned SSH sessions
  gbagnoli
  committed
  db7ff94
- test(unifi): prepare fenced backup restore acceptance
  gbagnoli
  committed
  a1da068
Commits on Oct 9, 2026
- docs(unifi): record restored-data acceptance and email follow-up
  gbagnoli
  committed
  81f11c4
- docs(unifi): reconcile migration acceptance summary
  gbagnoli
  committed
  62fb216
- docs(unifi): close isolated restore acceptance
  gbagnoli
  committed
  b1945ac
- docs(smtp): plan shared Postfix relay provisioning
  gbagnoli
  committed
  0a3d8b7
- feat(secrets): validate structured SMTP vault fields
  gbagnoli
  committed
  556fb22
- feat(smtp): provision shared native fleet relay with isolated tests
  gbagnoli
  committed
  b145f49
- fix(smtp): initialize persistent Postfix state on ostree hosts
  gbagnoli
  committed
  9925265
- feat(smtp): opt in to live provider checks on owned VMs
  gbagnoli
  committed
  a792859
- fix(smtp): prepare trusted TLS and confined credential access
  gbagnoli
  committed
  1944f78
- docs(smtp): record Mailjet delivery and Gmail acceptance
  gbagnoli
  committed
  c784001
- docs(clamps): park UniFi email and identify exit-node milestone
  gbagnoli
  committed
  b5c9774
- feat(tailscale): configure caller-selected production exit nodes
  gbagnoli
  committed
  3d15abe
- docs(clamps): audit host access and baseline parity
  gbagnoli
  committed
  cdeb737
- feat(access): finalize sudo and first-login password policy
  gbagnoli
  committed
  eb38ba2
Commits on Oct 10, 2026
- docs(storage): audit TPM encryption and boot prerequisites
  gbagnoli
  committed
  3a5accc
- feat(vm): add native TPM-encrypted root profile
  gbagnoli
  committed
  de914bf
- feat(storage): archive verified root recovery keys in KeePassXC
  gbagnoli
  committed
  b65777d
- docs(storage): record live vault recovery acceptance
  gbagnoli
  committed
  bfc7ed7
- feat(storage): archive verified LUKS headers in KeePassXC
  gbagnoli
  committed
  3f0d75d
- feat(vm): add isolated TPM-loss recovery acceptance
  gbagnoli
  committed
  ec8ac14
- docs(storage): record TPM-loss recovery acceptance
  gbagnoli
  committed
  83725c2
- feat(installation): prepare guarded physical USB install media
  gbagnoli
  committed
  3b8028a
- docs(installation): record USB media and VM regression acceptance
  gbagnoli
  committed
  3ca517e
Commits on Oct 11, 2026

Commits

Commits on Sep 22, 2026

Commits on Sep 25, 2026

Commits on Sep 26, 2026

Commits on Sep 27, 2026

Commits on Sep 29, 2026

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 3, 2026