Commit Graph

Select branches

Hide Pull Requests

branding-and-triggers

dhcp-rules

disclaimer-and-badge

dnsmasq-restart

docker-cli

docs-restructure

github-mirror

install-and-preflight

ipv6-boundary

main

parity

per-project-sets

privileged-upgrade-tool

readme-clone-url

repos-usability

resolver-docs

revoke-takes-effect

runbook-order

runner-generator

runtime-packages

sacrificial-vm

security-policy

self-contained

snapshot-rollback

strip-comments-once

sudo-note

tools-only

upgrade-path-privileged

verify-arrangement

verify-resolution

versioning

#1

#10

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#4

#5

#6

#7

#8

#9

Mono Color

• 5c0c6edcf4 Merge pull request 'Describe how the GitHub mirror shows the wordmark' (#30) from github-mirror into main main branderson 2026-10-14 17:33:37 -07:00
• 5a11097873 Say how the GitHub mirror shows the wordmark github-mirror branderson 2026-10-14 16:24:58 -07:00
• 26ec9f8b1e Merge pull request 'Restart dnsmasq after a render, since a reload never applied one' (#29) from dnsmasq-restart into main branderson 2026-10-10 21:49:21 -07:00
• b115fb977a Restart dnsmasq after a render, since a reload never applied one dnsmasq-restart branderson 2026-10-10 21:34:22 -07:00
• b953973626 Merge pull request 'Deploy new programs without going through setup' (#28) from tools-only into main branderson 2026-09-02 16:16:05 -07:00
• aa1487ff64 Stop the heading calling the shared bridge a leftover tools-only branderson 2026-09-02 14:35:02 -07:00
• e3a89f0abc Treat the shared network as expected, and catch a bridge with no rules branderson 2026-09-02 14:27:23 -07:00
• c255a51b40 Stop advising the removal of the network the resolver lives on branderson 2026-09-02 14:19:16 -07:00
• 894dcb8c8b Let the shared bridge be retired, since the pools supply their own branderson 2026-09-02 14:08:46 -07:00
• aae09ebdf1 Deploy new programs without going through setup, and tidy a retired bridge branderson 2026-09-02 13:45:28 -07:00
• ae88b7767f Merge pull request 'Have the tool check the arrangement, rather than the operator' (#27) from verify-arrangement into main branderson 2026-09-02 00:43:03 -07:00
• 9fc87ec90e Have the tool check the arrangement, rather than the operator verify-arrangement branderson 2026-09-02 00:15:12 -07:00
• 992b371d1c Merge pull request 'Give each runner pool the allowlist it could actually run' (#26) from per-project-sets into main branderson 2026-09-01 23:39:21 -07:00
• 045f8d817f Write down what this migration taught, where the next agent will read it per-project-sets branderson 2026-09-01 23:23:50 -07:00
• 931938d9b9 Recreate the runners when a file they mount was rewritten branderson 2026-09-01 23:10:45 -07:00
• 062fe95db4 Read the project before asking the questions it answers branderson 2026-09-01 22:42:38 -07:00
• 09b6ea4dce Let --pool say which tier, since only one tier has pools branderson 2026-09-01 22:33:32 -07:00
• 8cfa423e20 Name the pool, rather than a network and a path that must agree branderson 2026-09-01 22:14:08 -07:00
• ed288c7dcd Stop the migration from costing an operator their runner config branderson 2026-09-01 18:48:50 -07:00
• e4e0816f6f Give each runner pool the allowlist it could actually run branderson 2026-09-01 13:18:12 -07:00
• 8cb4fb0447 Scope a project's names to that project's jobs branderson 2026-09-01 03:07:47 -07:00
• 7df4f6ef35 Merge pull request 'Make removing a name actually revoke it' (#25) from revoke-takes-effect into main branderson 2026-09-01 02:51:16 -07:00
• f8366eccb5 Make removing a name actually revoke it revoke-takes-effect branderson 2026-09-01 02:20:29 -07:00
• 3489b5f167 Merge pull request 'Strip comments where every name arrives, not at one source' (#24) from strip-comments-once into main branderson 2026-08-31 23:31:14 -07:00
• c539c82796 Strip comments where every name arrives, not at one source strip-comments-once branderson 2026-08-31 23:13:26 -07:00
• 55777f2c61 Strip comments where every name arrives, not at one source repos-usability branderson 2026-08-31 23:13:26 -07:00
• 9ae7bb982a Merge pull request 'Make trusting a repository something you can do in one command' (#23) from repos-usability into main branderson 2026-08-31 23:04:29 -07:00
• 11b841500e Make trusting a repository something you can do in one command branderson 2026-08-31 22:58:28 -07:00
• 665113be51 Merge pull request 'Give the privileged tier a working v1 to v2 path, and link the upgrade docs' (#22) from upgrade-path-privileged into main branderson 2026-08-27 21:00:16 -07:00
• 5d61050f87 Do not assume /usr/local/sbin is on the PATH sudo hands you upgrade-path-privileged branderson 2026-08-27 20:47:52 -07:00
• f6316e6c0e Give the privileged tier a working v1 -> v2 path, and link the upgrade docs branderson 2026-08-27 20:26:22 -07:00
• 88cff35e0e Give the privileged tier a working v1 -> v2 path, and link the upgrade docs privileged-upgrade-tool branderson 2026-08-27 20:26:22 -07:00
• a76f38bcc4 Merge pull request 'Install the upgrade tool on the privileged tier, which never got it' (#21) from privileged-upgrade-tool into main branderson 2026-08-27 20:13:41 -07:00
• e5e5a307b3 Install the upgrade tool on the privileged tier, which never got it branderson 2026-08-27 17:56:59 -07:00
• 58162126f0 Install the upgrade tool on the privileged tier, which never got it verify-resolution branderson 2026-08-27 17:56:59 -07:00
• 26f96e8e2b Merge pull request 'Fix a tool that could not find itself, and a note that told you not to' (#20) from verify-resolution into main branderson 2026-08-27 17:44:35 -07:00
• d879b6d5b3 Fix a tool that could not find itself, and a note that told you not to branderson 2026-08-27 17:32:48 -07:00
• 022c5f6ce2 Merge pull request 'Version the deployed state, so an existing runner can be brought forward' (#19) from versioning into main branderson 2026-08-27 17:14:03 -07:00
• 8748ee550b Check that every fenced sh block in the docs parses versioning branderson 2026-08-27 03:15:57 -07:00
• 67f1028975 Give the runbook a map, and put the reasoning after the doing branderson 2026-08-27 03:06:33 -07:00
• fe1953b456 Front-load the prose, and stop restating the same arguments branderson 2026-08-27 02:53:25 -07:00
• 49562a1c47 Fix commands the upgrade notes gave that cannot run on the host they target branderson 2026-08-25 17:16:21 -07:00
• 7816bb7834 Version the deployed state, so an existing runner can be brought forward branderson 2026-08-25 15:43:18 -07:00
• 6796ff1cd1 Name both halves of the reason an SSH push has no transport ipv6-boundary branderson 2026-08-26 02:54:10 -07:00
• 7a0a3becbf Merge pull request 'Bound the LAN over IPv6, and over the range a tailnet uses' (#18) from ipv6-boundary into main branderson 2026-08-25 16:55:17 -07:00
• afbe827e0f Describe the boundary as it is, not as it changed branderson 2026-08-25 16:38:49 -07:00
• ec521afd84 Bound the LAN over IPv6, and over the range a tailnet uses branderson 2026-08-25 14:50:52 -07:00
• d3f3219d5b Merge pull request 'Send the reader between the two halves, in the order that works' (#17) from runbook-order into main branderson 2026-08-11 20:39:46 -07:00
• 7f107f267c Send the reader between the two halves, in the order that works runbook-order branderson 2026-08-11 19:12:41 -07:00
• b6a6151512 Merge pull request 'Bring across what the sister project grew, and write down the threat model' (#15) from parity into main branderson 2026-08-10 22:36:40 -07:00
• 4cb86b4bdd Merge pull request 'Add the badge and the maturity disclaimer' (#16) from disclaimer-and-badge into main branderson 2026-08-10 21:04:19 -07:00
• e7360de7ad Restate how the push block is enforced, not just that it exists parity branderson 2026-08-10 20:39:03 -07:00
• 1faf85be5c Point at dejima's push reasoning, and pin the maturity disclaimer branderson 2026-08-10 20:28:02 -07:00
• 2af7b15fe6 Give push-blocking its own reason rather than borrowing this one branderson 2026-08-10 19:09:15 -07:00
• e7bffbcbbc State that reviewing main is a dependency, not an aside branderson 2026-08-10 18:56:54 -07:00
• 9e3367b927 Give the real reason there is no approval gate branderson 2026-08-10 18:53:56 -07:00
• 04430b9a95 Add the Developed in dejima badge branderson 2026-08-10 18:35:02 -07:00
• 9656b8c6ea Bring across what the sister project grew, and write down the threat model branderson 2026-08-10 15:58:57 -07:00
• c61eebb5b5 Pin the maturity disclaimer on every entry point disclaimer-and-badge branderson 2026-08-10 20:46:08 -07:00
• 3b95ff7a30 Add the Developed in dejima badge branderson 2026-08-10 20:46:08 -07:00
• a34ad1cf27 Merge pull request 'Give a DHCP runner the two rules its lease actually needs' (#14) from dhcp-rules into main branderson 2026-08-09 22:06:58 -07:00
• 41a98120c3 Give a DHCP runner the two rules its lease actually needs dhcp-rules branderson 2026-08-09 22:05:27 -07:00
• d5f9bf9030 Update README.md branderson 2026-08-09 12:18:15 -07:00
• 2b4c18f59e Merge pull request 'Pin the workflow to main, and put the wordmark on the README' (#12) from branding-and-triggers into main branderson 2026-08-09 03:13:56 -07:00
• 3af05cb943 Merge pull request 'State plainly that there is no support, and where to send a vulnerability' (#13) from security-policy into main branderson 2026-08-09 03:13:39 -07:00
• 9c49451529 Put the wordmark on the README, and point at the canonical terms branding-and-triggers branderson 2026-08-08 22:16:47 -07:00
• b34b1a016c State plainly that there is no support, and where to send a vulnerability security-policy branderson 2026-08-08 22:48:59 -07:00
• 702871732e Read the workflow only from main branderson 2026-08-08 22:16:47 -07:00
• 372b8ae16d Merge pull request 'Name the tiers after what a job gets, and put the reader first' (#10) from docs-restructure into main branderson 2026-08-08 20:06:57 -07:00
• 5d038b811a Merge pull request 'Build the runners, rather than listing what to type' (#11) from runner-generator into docs-restructure docs-restructure branderson 2026-08-08 20:03:57 -07:00
• 18fa177049 Point the units at the directory the installer actually uses runner-generator Brad Anderson 2026-08-08 19:54:22 -07:00
• 63869c04d3 Say sudo everywhere a command needs it Brad Anderson 2026-08-08 19:44:53 -07:00
• 9339d03636 Do not tell someone to re-run install.sh when what is missing is sudo Brad Anderson 2026-08-08 19:35:22 -07:00
• 2ceeea6682 Say what a first install would install, rather than letting diff complain Brad Anderson 2026-08-08 19:32:02 -07:00
• e426d11cd5 Suggest the compose project directory again, once the group name is known Brad Anderson 2026-08-08 19:26:32 -07:00
• be3fd944b4 Do not turn off password authentication with no key to replace it Brad Anderson 2026-08-08 19:16:47 -07:00
• 08a45ecc14 Let a mistyped list entry be taken back, and name a redirect for what it is Brad Anderson 2026-08-08 19:10:28 -07:00
• d3d75d16bf Install qemu-guest-agent, and say what it does and does not expose Brad Anderson 2026-08-08 18:55:35 -07:00
• 57b970290b Prove the network boots before freezing the state that gets restored forever Brad Anderson 2026-08-08 18:49:15 -07:00
• d88b172da1 Let one host carry runners for more than one registration token Brad Anderson 2026-08-08 18:29:10 -07:00
• 239651d5a6 Follow both repositories to the dejima organization Brad Anderson 2026-08-08 18:24:15 -07:00
• dfc9b5fafc Do not install the host egress policy on the privileged tier, and fill it in automatically on the confined one Brad Anderson 2026-08-08 18:14:24 -07:00
• df136a62e9 Keep the blank line between the first two closing items Brad Anderson 2026-08-08 18:08:57 -07:00
• b7e9ed156d Put a blank line between a prompt and the text explaining it Brad Anderson 2026-08-08 17:41:50 -07:00
• d850719043 Repeat the pinning follow-ups where they will still be on screen Brad Anderson 2026-08-08 17:35:20 -07:00
• 3d02565897 Say what the confined tier buys, not only what the privileged one gives up Brad Anderson 2026-08-08 17:16:10 -07:00
• 776a40e760 Split the build by hypervisor and guest, not by tier Brad Anderson 2026-08-08 17:00:09 -07:00
• 52b8b3701e Link dejima's docs/ci.md, and stop overstating what the tier choice changes Brad Anderson 2026-08-08 16:09:34 -07:00
• df773d17fa Take the operator's LAN back out of the test fixtures Brad Anderson 2026-08-08 15:36:05 -07:00
• 48b8a3b90a Build the node rules once, as a security group, and apply them to both tiers Brad Anderson 2026-08-08 15:30:42 -07:00
• 626a30ce9d Pin the address with a program instead of a procedure Brad Anderson 2026-08-08 14:36:00 -07:00
• e87ebba610 Snapshot before the bootstrap runs, not only after it registers Brad Anderson 2026-08-08 14:29:14 -07:00
• 5f7ebc74b7 Keep the runbook to instructions Brad Anderson 2026-08-08 14:23:40 -07:00
• 775fdfb3ca Say what the standard utilities task actually costs when it is cleared Brad Anderson 2026-08-08 14:19:26 -07:00
• 7776e59291 Install dbus, and stop before managing units without it Brad Anderson 2026-08-08 14:13:29 -07:00
• 5bec86e29a Do not assume a dhcpcd unit, and refuse to write a placeholder Brad Anderson 2026-08-08 13:32:48 -07:00
• 8e397737e3 Say who owns resolv.conf, and stop before apt when nothing can be resolved Brad Anderson 2026-08-08 13:22:47 -07:00
• 3d60c5f4d8 Say so when the egress policy finds no resolver to allow Brad Anderson 2026-08-08 13:13:02 -07:00
• 9bcc0c4f62 Do not let the host egress policy cut the host off from its own resolver Brad Anderson 2026-08-07 19:55:34 -07:00
• 9be475f072 Name the registration token where the operator is looking Brad Anderson 2026-08-07 19:42:05 -07:00