4 Commits

Include renames

Author	SHA1	Message	Date
josh	d24207427f	Fix quick-register broadcast detection on Proxmox bridges ... Two bugs compounded on Proxmox hosts: primary_iface walked `ip link show` and picked the physical NIC (e.g. enp1s0), which has no IPv4 on Proxmox because the address lives on vmbr0. Even if vmbr0 had been picked, the kernel reports its broadcast as 0.0.0.0, so the script fell all the way back to 255.255.255.255. Now we prefer the default-route interface (vmbr0 on Proxmox, eno1 on bare metal) and, when `ip` doesn't surface a usable `brd`, compute the broadcast from the inet CIDR instead of giving up.	2026-04-17 22:57:49 -04:00
josh	8b3d9a312e	Add quick-register one-liner for target-host registration ... Operator pastes `curl -fsSL $ORCH/register/quick.sh | sudo bash` on the target host (pre-wipe). The script probes MAC + CPU/RAM/disks/NICs/GPUs, emits an expected-spec YAML, and POSTs to a new LAN-trusted JSON endpoint /api/v1/hosts. The register page shows the command prefilled with the orchestrator URL; the manual form moves into a collapsible "Register manually" disclosure.	2026-04-17 22:50:54 -04:00
josh	42da48864f	Remove operator auth — trust the LAN ... Can't log in from a fresh LXC deploy, and the service is LAN-only by design. Rip out the whole bcrypt-password / signed-cookie session layer: internal/auth, login templates, gen-admin-password binary + Makefile targets, auth config block, login/logout routes and the RequireSession middleware wrap. Agent bearer-token auth on /api/v1/runs/{id}/* is untouched. Operators who want a password can front the service with a reverse proxy — noted in README and docs/operations.md.	2026-04-17 22:31:49 -04:00
josh	9bb4b09a04	Initial commit: full Phases 1-6 implementation ... Post-repair hardware validation pipeline for Proxmox cluster hosts. Go orchestrator + in-image agent + mkosi live image + bundled dnsmasq PXE + SQLite + HTMX/SSE UI + notify registry + janitor + full docs.	2026-04-17 21:32:10 -04:00