6 Commits

Include renames

Author	SHA1	Message	Date
josh	a88e24bef4	live-image: real /init + verbose boot for first-boot diagnosis ... Host boots past kernel init and then stalls silently. ACPI DSDT error about TXHC.RHUB.SS01 is benign noise (Tiger Lake firmware bug) — the actual problem is that nothing between kernel handoff and (maybe) systemd is visible on the console. Two changes: 1. Replace the /init → sbin/init symlink with a real shell script (live-image/mkosi.extra/init) that mounts /proc /sys /dev /dev/pts /dev/shm /run before execing systemd. Systemd has fallback mount code for these, but when it fails the failure is silent. Doing it explicitly in /init keeps failures visible and avoids the fragile symlink-resolution trick. 2. Drop 'quiet' from the kernel cmdline and add loglevel=7 plus systemd.log_target=kmsg + journald.forward_to_console=1 so every early-boot message reaches both tty0 and ttyS0. Will be dialed back once boot is stable. Also: .gitattributes pins LF on live-image/, .gitea/, Makefile, and *.sh so Windows checkouts don't break shell scripts and Makefile recipes with CRLF. /init also gets chmod 0755 in repack-initrd as a belt-and-braces against mode loss on non-Linux checkouts.	2026-04-18 14:31:40 -04:00
josh	43ea845ac0	live-image: pack full rootfs as initrd so PXE actually boots userspace ... update-initramfs produces a boot stub (~50 MB) that expects to mount a separate rootfs over squashfs/disk/NFS. Our PXE channel only ships vmlinuz+initrd.img, so the stub had nothing to pivot to — kernel finished hand-off and the system wedged with firmware, modules, and userspace stranded in the 545 MB rootfs dir we never delivered. Replace with an everything-in-initramfs build: cpio.zst the full rootfs (minus /boot) as the initrd, add /init -> sbin/init for the kernel's runtime entrypoint, materialize the kernel symlink into a real file. Bump check-initrd floor to 200 MB and switch the firmware grep from unmkinitramfs (boot-stub-specific) to zstd | cpio -t. Also add cpio to the CI apt deps.	2026-04-18 14:14:08 -04:00
joshandClaude Opus 4.7	6c6d20710f	live-image: fix check-initrd size measurement; add zstd to image ... Previous run actually built the 518 MB rootfs with firmware-misc-nonfree et al. installed — the real payload is working. Two follow-ups: - check-initrd was reading stat on a symlink path and getting 30 bytes (the symlink's own size), not the 6.1.0-44-amd64 kernel initrd it points to. Switched to wc -c, which follows symlinks, and to du -hL for the OK message. - Add zstd to Packages= so COMPRESS=zstd in initramfs.conf can be honored; without it update-initramfs falls back to gzip with a "No zstd in PATH" warning. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-18 14:00:07 -04:00
joshandClaude Opus 4.7	28918bad15	live-image: fix firmware so i915 actually loads at boot ... Previous attempt (c962d6d) added firmware-linux-nonfree to mkosi.conf, but the CI bundle was still 63 MB and Tiger Lake wedged on tgl_guc. Two reasons: (1) firmware-linux-nonfree on bookworm is a thin metapackage that doesn't include firmware-misc-nonfree, which is where i915 GuC/HuC blobs actually live; (2) Ubuntu's apt-packaged mkosi is old enough that Repositories=non-free-firmware shorthand likely isn't wired through to the debootstrap invocation, so firmware packages silently miss the bootstrap step entirely. Changes: - Enumerate firmware packages explicitly in mkosi.conf (firmware- misc-nonfree, firmware-iwlwifi, firmware-realtek, firmware-amd- graphics, firmware-intel-sound, intel/amd64-microcode). - Ship mkosi.sources.d/debian.sources with explicit deb822 so the non-free-firmware component is unambiguously available. - Install mkosi 24.3 via pip in CI instead of apt's older build. - Pin MODULES=most and COMPRESS=zstd via a tracked initramfs-tools config under mkosi.extra/. - Narrow .gitignore so only the generated agent binary is ignored, not the whole mkosi.extra/ tree. - New check-initrd Makefile target asserts both size (>=150 MB) and actual presence of i915/tgl_guc_*.bin inside the built initrd, so a silent firmware-drop regression fails the build loudly. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-18 13:38:40 -04:00
joshandClaude Opus 4.7	a893b0d817	live-image: stage agent binary via mkosi.extra ... mkosi only mounts live-image/ as /work/src, so the postinst couldn't reach the repo-root bin/vetting-agent.linux-amd64 — the build failed in CI with `install: cannot stat '/work/src/bin/vetting-agent.linux-amd64'`. The Makefile now copies the prebuilt agent into mkosi.extra/, which mkosi merges into the image root automatically. The postinst is reduced to creating the multi-user.target.wants symlink. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-18 03:13:38 -04:00
josh	9bb4b09a04	Initial commit: full Phases 1-6 implementation ... Post-repair hardware validation pipeline for Proxmox cluster hosts. Go orchestrator + in-image agent + mkosi live image + bundled dnsmasq PXE + SQLite + HTMX/SSE UI + notify registry + janitor + full docs.	2026-04-17 21:32:10 -04:00