skic-v1-playground/knowledge-wiki
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

wiki: sync 2026-08-12 00:38 UTC — 6 file(s) updated

Browse Source
This commit is contained in:
jarvis-at-skic
2026-08-12 00:38:36 +00:00
parent 6c8ffdf1b0
commit 4ebe08daae
6 changed files with 72 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta/infrastructure.md
+2
View File
@@ -29,3 +29,5 @@
- **Hermes multi-day outage (2026-08-04–11):** read-only analysis separated two failures. Codex quota exhaustion is the confirmed cause of failed model responses while Discord/cron still ran. After the final preserved event at 2026-08-04 14:00:42 UTC, gateway, cron, logs, and health activity all ceased until the physical host restart at 2026-08-11 00:11:40 UTC; restart restored service without a Hermes repair. A host/container-runtime availability failure is most likely, but the exact TrueNAS Apps, kernel, ZFS/storage, hardware, watchdog, thermal, or power trigger is **UNKNOWN** because previous-boot host telemetry is unavailable inside the container. Current SQLite integrity and capacity checks are healthy.
- **Gitea Git-transport incident resolved (2026-08-11):** Gitea `1.27.0-rootless` served web/API but crashed its Git-serving process during Go runtime module verification over both SSH and Smart HTTP. Upgrade to `1.27.1` restored API and both Git transports. The queued VSSA commit `6fc42ab` was then pushed and remotely verified.
- **Gitea Pages publication contract (verified 2026-08-11):** Gitea Actions job containers receive `/mnt/lego-cloud-v1-2025-11-28/gondor-v1-gitea-pages` at `/gondor-v1-gitea-pages`; workflows publish to `/gondor-v1-gitea-pages/<organization>/<repository>/`, served at `https://pages.apps.lego-cloud.eu/<organization>/<repository>/`. The runner source path must be listed under `container.valid_volumes`. `skic-v1-playground/documentation` run 2326 and its public site were verified successful/HTTP 200.
- **Gitea Actions Docker contract (verified 2026-08-11):** ordinary jobs have Docker CLI `29.6.2-1` and reach Engine `29.0.4` through the mounted `/var/run/docker.sock`. Use that daemon directly for builds. A `docker:dind` service is unnecessary and currently unsupported because the runner ignored requested privileged mode (`Privileged:false`); probe run 2328 captured both results.
- **LEGO Cloud Pages authentication (observed 2026-08-11):** public Pages is now protected by Keycloak and unauthenticated requests correctly return `302` to `/oauth2/start`. A redirect is not by itself a deployment failure; verify the Pages backend directly from an authorized Gondor node when validating publication.