ymrtech/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Activity Actions

public: enrol the host in ymr.serviceSandbox (nix-config#933) #1967

Merged
hermes merged 1 commit from kb/NCFG-933-public-sandbox into main 2026-10-13 07:24:34 -06:00
Conversation 0 Commits 1 Files changed 1 +45
hermes commented 2026-10-13 07:20:01 -06:00
Collaborator
Copy link

Enrols public in ymr.serviceSandbox (nix-config#896 §9 step 2), mirroring the Done mail cutover (nix-config#932) and vpn-mx (nix-config#909).

Six observability units, each with its MEASURED state dir on public (systemctl show):

  • prometheus-node-exporter: extraConfig SystemCallFilter @system-service+@clock (adjtimex/timex)
  • prometheus-process-exporter, prometheus-systemd-exporter: no writes
  • vmagent: /var/cache/vmagent
  • vlagent: /var/lib/vlagent
  • systemd-journal-upload: /var/lib/systemd/journal-upload

postgres/caddy and the CI runner are out of scope (module exception register). Kanban nix-config#933.

Enrols public in ymr.serviceSandbox (nix-config#896 §9 step 2), mirroring the Done mail cutover (nix-config#932) and vpn-mx (nix-config#909). Six observability units, each with its MEASURED state dir on public (systemctl show): - prometheus-node-exporter: extraConfig SystemCallFilter @system-service+@clock (adjtimex/timex) - prometheus-process-exporter, prometheus-systemd-exporter: no writes - vmagent: /var/cache/vmagent - vlagent: /var/lib/vlagent - systemd-journal-upload: /var/lib/systemd/journal-upload postgres/caddy and the CI runner are out of scope (module exception register). Kanban nix-config#933.
public: enrol the host in ymr.serviceSandbox (nix-config#933)
All checks were successful
PR base guard / Base drift / conflict check (pull_request) Successful in 4s
Details
NixOS Build Check / Scope changed deployable hosts (pull_request) Successful in 8s
Details
NixOS Build Check / Flake input regression guard (pull_request) Successful in 11s
Details
NixOS Build Check / Hermes runtime gates (one eval of vpn's runtime) (pull_request) Has been skipped
Details
Secret Scan / gitleaks scan (pull_request) Successful in 10s
Details
NixOS Build Check / Worker-scope reaper worker signature (mutation-tested) (pull_request) Successful in 4s
Details
foremerge intent (advisory) all 1 changed path(s) covered by a live foremerge intent
Details
NixOS Build Check / Kanban pool capacity knob (runtime override + clamp, mutation-tested) (pull_request) Successful in 3s
Details
NixOS Build Check / Sentinel pass budget contract (prompt forbids the full board walk, mutation-tested) (pull_request) Successful in 3s
Details
NixOS Build Check / CI-scratch reaper class table (mutation-tested) (pull_request) Successful in 4s
Details
NixOS Build Check / foremerge accept-order contract (real binary) (pull_request) Has been skipped
Details
NixOS Build Check / .forgejo/tests python suites (hermetic) (pull_request) Successful in 39s
Details
NixOS Build Check / Build changed host closures (native, one eval) (pull_request) Successful in 2m10s
Details
NixOS Build Check / Repo gates (the folded selftest battery) (pull_request) Successful in 3m41s
Details
6a8596b8b6
hermes merged commit d476133057 into main 2026-10-13 07:24:34 -06:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
backlog

   
bug

   
enhancement

   
in-progress

   
review

   
todo
No labels
backlog
bug
enhancement
in-progress
review
todo
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ymrtech/nix-config!1967
No description provided.