This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

beatzaplentyandClaude Sonnet 4.6 f6f30c675f fix(ipa): stream keytab via sudo cat instead of scp ...

ipa-getkeytab runs as root via sudo so the temp file is root-owned;
scp as wayne gets Permission denied. Pipe through `sudo cat` over SSH
instead, which reads as root but writes locally as the invoking user.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-28 09:08:19 +10:00

..

ha

feat(ha): promote HA file server to production flake targets

2026-07-27 11:26:37 +10:00

installer

Unmount everything under /mnt before zpool export, not just the chroot dirs

2026-07-22 04:23:42 +00:00

ipa

fix(ipa): stream keytab via sudo cat instead of scp

2026-07-28 09:08:19 +10:00

lib

feat(provision): Phase 2 — migrate SSH host keys to clan vars

2026-07-25 18:22:33 +10:00

proxmox

fix(lxc): auto-derive privileged from NFS fileSystems, not hostname list

2026-07-27 05:27:56 +10:00

secrets

fix(sops): hard-fail on missing admin key and expand literal ~ in key path

2026-07-27 05:42:32 +10:00

bump-nixpkgs-release.sh

Rewrite codex-maintenance.sh to scope CI checks to changed files

2026-07-20 17:25:22 +00:00

codex-maintenance.sh

Run per-host/per-package nix eval and dry-run build concurrently

2026-07-22 02:04:21 +00:00

codex-setup.sh

fix: reinstall nix as SSH user, not root, on Proxmox nodes

2026-07-23 10:25:43 +10:00

env.sh

feat(ipa): add create-nixos-ipa-host-account script

2026-07-28 08:57:55 +10:00

recover-hosts.sh

feat(secrets): add push-host-keys.sh; integrate into sync/recover scripts

2026-07-25 15:29:16 +10:00