- Rewrite AGENTS.md: DB as source of truth, MCP knowledge tools, archive refs - Fix OIKOS.md: seeds/ paths, remove Python-era notes, update deployment status - Fix commands.md, agent-enrollment.md: archive/knowledge/ links - Fix all SKILL.md files: remove hosts/*.yaml refs, point to inventory.yaml - Fix HERMES.md, schema.md, page-templates.md, llm-wiki.md: update paths - Fix bootstrap.sh: identity check reads inventory.yaml - Fix README.md, cutover-checklist.md: stale wiki references - Move convert-wiki.py to archive/ (one-shot done)
2.0 KiB
2.0 KiB
name, risk_class, inputs, verification, docs_update_checklist, transition
| name | risk_class | inputs | verification | docs_update_checklist | transition | |||
|---|---|---|---|---|---|---|---|---|
| lifecycle-destroy-node | destructive |
|
homelab node <name> relations returns unknown-entity; pct list on the backend no longer shows it |
|
deprecated -> destroyed |
Lifecycle: destroy a node
Destructive. Requires operator approval + typed confirmation phrase
per seeds/policy.yaml. Requires (ontology): backups verified, secrets
recipients removed + re-keyed, ingress/DNS removed, archaeology entry,
ledger entry.
- Confirm the node is
deprecatedwith zeroaffected_byedges (homelab node <name> relations) — do not skip this even if the deprecation runbook was followed recently; state can drift. - If it's an enrolled client:
homelab client remove <name>— revokes the age key, re-keys SOPS, removes the inventory entry. This is already destructive-class and confirmed in the CLI. - Remove any ingress route (Caddy config repo) and DNS record still pointing at it.
- Verify backups of anything on it are retained per policy before the
disk goes away (see
backs-up-to). - Destroy the LXC/VM (
pct destroy/qm destroy). - Move the
hosts.<name>:block (if any inventory remnant survivesclient remove, e.g. infra-only LXCs with no age key) into inventory.yaml'sarchaeology:section:pve_id,destroyeddate,reason. Add a row tocontainers/index.md"Recently destroyed" table (kept for human-readable browsing alongside the structured data). oikos/ledger.py append host:<name> destroy destructive --result ok.- Regenerate:
python3 mcp/build_host_files.py && python3 inventory.yaml— the node drops out ofinventory.yamland appears in the topology doc's archaeology table.
If the destroy fails partway (e.g. secrets revoked but pct destroy
errors), do not re-run step 2 — client remove is not idempotent
against a second revocation attempt on the issuance server. Finish the
remaining steps manually and note the partial state in an investigation.