Worktree phase0 provision ordering fix #61

2026-07-25T12:20:12Z

beatzaplenty commented

2026-07-25 12:20:12 +00:00

No description provided.

beatzaplenty added 2 commits 2026-07-25 12:20:13 +00:00

fix(secrets): correct corrupted sops fingerprints for proxmox-minimal and lxc-gui 08aac4261f

The previous Phase 4 commit had sed-mangled fingerprints for these two
targets (old and new fingerprints concatenated into one line). The correct
new fingerprints are:
  - proxmox-minimal: age19m0m7vdfg... (freshly generated, no prior key on pve1)
  - lxc-gui:        age1rrxqea6q6... (freshly generated, no prior key on pve1)

Re-run sops updatekeys on common.yaml and gui.yaml to match.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01B2EJ4qTsM5KUqhS5c3GAwx

chore(vars): bulk clan vars SSH host keys for all remaining 20 flake targets

Check NixOS configurations / eval-hosts (pull_request) Successful in 10m24s

Details

e9832d87c4

Adds vars/per-machine/<target>/openssh/ for every flake target except
lxc-tor-relay and lxc-nix-cache (already committed). 18 targets recovered
from pve1 host-keys/ backup; lxc-gui and proxmox-minimal have no prior
live deployment and no backup key, so fresh ed25519 keys were generated —
their .sops.yaml anchors were updated to match.

All secrets are admin-only encrypted (matching clan_generate_ssh_key
convention). Age fingerprints verified against .sops.yaml anchors.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01B2EJ4qTsM5KUqhS5c3GAwx

beatzaplenty merged commit 8f4c88347d into main

2026-07-25 12:20:22 +00:00

This repo is archived. You cannot comment on pull requests.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: beatzaplenty/nixos#61