From e4b529b71b0296b59dad72484e833f867fb71c12 Mon Sep 17 00:00:00 2001 From: dtoro Date: Wed, 1 Jul 2026 12:30:05 +0200 Subject: [PATCH] docs(strong): record homelab-context client enrollment bootstrap.sh --no-secrets ran clean: sync timer, homelab CLI, and AGENTS.md are live on strong. Noted two follow-ups: secrets issuance is reachable over plain LAN (mesh: lan) so age-key enrollment doesn't actually need Netbird, and bootstrap's pipx/mcp-CLI step silently no-ops when run as root over SSH (missing `sudo` binary). Co-Authored-By: Claude Sonnet 5 --- hosts/strong.md | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/hosts/strong.md b/hosts/strong.md index 8a491f9..12186d1 100644 --- a/hosts/strong.md +++ b/hosts/strong.md @@ -46,9 +46,14 @@ Proxmox VE on 2026-07-01. No LXCs/VMs deployed on it yet. `*.hubris.network` already resolves correctly here via `192.168.8.2`). Add to Netbird if off-LAN access to this host itself (distinct from any future guests) is needed. -- **Homelab-context client enrollment:** not done yet — no - `/opt/homelab-context`, no age key, no `homelab` CLI. Separate from the - Proxmox cluster join. See [agent-enrollment.md](../operations/agent-enrollment.md). +- **Homelab-context client enrollment:** done 2026-07-01 via + `bootstrap.sh --no-secrets` (reused the operator's existing Gitea PAT for + the initial clone). `/opt/homelab-context`, the `homelab` CLI, and the + 5-min sync timer are live; `homelab whoami` resolves correctly. No age + key / secrets access yet (skipped along with Netbird — but bootstrap's + own mesh check reported `mesh: lan`, meaning secrets issuance would + actually work over plain LAN if re-run without `--no-secrets`, no mesh + join required). See [agent-enrollment.md](../operations/agent-enrollment.md). ## Cluster membership @@ -75,6 +80,9 @@ needed going forward. ## Changelog +### 2026-07-01 — enrolled as a homelab-context client +Ran `bootstrap.sh --no-secrets` (reused the operator's existing personal Gitea PAT for the initial clone rather than minting a fresh read-only one). Installed git, cloned `/opt/homelab-context`, installed the 5-min systemd sync timer, symlinked `homelab` CLI and `AGENTS.md`. Skipped age-key/secrets issuance and Netbird per operator choice — but bootstrap's own connectivity check reported `mesh: lan`, i.e. the secrets-issuance endpoint is already reachable over plain LAN, so re-running without `--no-secrets` later wouldn't require a Netbird join. Known gap: the `mcp` pipx CLI install step silently failed (`sudo: command not found` — bootstrap.sh's pipx step assumes a `sudo` binary even when already root; harmless, only affects the `homelab mcp ` shell subcommand). + ### 2026-07-01 — inventory identity renamed ludo-mini → strong Discovered while starting client enrollment: `bootstrap.sh` looks up `hosts/$(hostname).yaml`, and the OS hostname here is `strong`, not