Worktree phase0 provision ordering fix #61

Merged

beatzaplenty merged 2 commits from worktree-phase0-provision-ordering-fix into main

2026-07-25 12:20:22 +00:00

Author	SHA1	Message	Date
beatzaplentyandClaude Sonnet 4.6	e9832d87c4	chore(vars): bulk clan vars SSH host keys for all remaining 20 flake targets Check NixOS configurations / eval-hosts (pull_request) Successful in 10m24s Details Adds vars/per-machine/<target>/openssh/ for every flake target except lxc-tor-relay and lxc-nix-cache (already committed). 18 targets recovered from pve1 host-keys/ backup; lxc-gui and proxmox-minimal have no prior live deployment and no backup key, so fresh ed25519 keys were generated — their .sops.yaml anchors were updated to match. All secrets are admin-only encrypted (matching clan_generate_ssh_key convention). Age fingerprints verified against .sops.yaml anchors. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01B2EJ4qTsM5KUqhS5c3GAwx	2026-07-25 21:54:37 +10:00
beatzaplentyandClaude Sonnet 4.6	08aac4261f	fix(secrets): correct corrupted sops fingerprints for proxmox-minimal and lxc-gui The previous Phase 4 commit had sed-mangled fingerprints for these two targets (old and new fingerprints concatenated into one line). The correct new fingerprints are: - proxmox-minimal: age19m0m7vdfg... (freshly generated, no prior key on pve1) - lxc-gui: age1rrxqea6q6... (freshly generated, no prior key on pve1) Re-run sops updatekeys on common.yaml and gui.yaml to match. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01B2EJ4qTsM5KUqhS5c3GAwx	2026-07-25 21:54:25 +10:00

Author

SHA1

Message

Date

beatzaplentyandClaude Sonnet 4.6

e9832d87c4

chore(vars): bulk clan vars SSH host keys for all remaining 20 flake targets

Check NixOS configurations / eval-hosts (pull_request) Successful in 10m24s

Details

Adds vars/per-machine/<target>/openssh/ for every flake target except
lxc-tor-relay and lxc-nix-cache (already committed). 18 targets recovered
from pve1 host-keys/ backup; lxc-gui and proxmox-minimal have no prior
live deployment and no backup key, so fresh ed25519 keys were generated —
their .sops.yaml anchors were updated to match.

All secrets are admin-only encrypted (matching clan_generate_ssh_key
convention). Age fingerprints verified against .sops.yaml anchors.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01B2EJ4qTsM5KUqhS5c3GAwx

2026-07-25 21:54:37 +10:00

beatzaplentyandClaude Sonnet 4.6

08aac4261f

fix(secrets): correct corrupted sops fingerprints for proxmox-minimal and lxc-gui

The previous Phase 4 commit had sed-mangled fingerprints for these two
targets (old and new fingerprints concatenated into one line). The correct
new fingerprints are:
  - proxmox-minimal: age19m0m7vdfg... (freshly generated, no prior key on pve1)
  - lxc-gui:        age1rrxqea6q6... (freshly generated, no prior key on pve1)

Re-run sops updatekeys on common.yaml and gui.yaml to match.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01B2EJ4qTsM5KUqhS5c3GAwx

2026-07-25 21:54:25 +10:00