sync: auto-sync from HOWARD-HOME at 2026-07-06 16:48:18
Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-07-06 16:48:18
This commit is contained in:
@@ -19,6 +19,8 @@ Categories (the `[type]` tag): _(none)_ = skill/command execution failure ·
|
||||
|
||||
<!-- Append entries below this line -->
|
||||
|
||||
2026-07-06 | Howard-Home | ssh/gururmm-server | [friction] vault infrastructure/gururmm-server.sops.yaml lists username/password + 'Sudo password same as SSH', but 172.16.3.30 SSH is publickey-only (password auth disabled) and no fleet key authenticates guru/root/mike/howard from workstations. Watching build logs / running promote-dashboard.sh must be done on the box. Fix: add SSH pubkey to guru@.30 or correct the vault note. [ctx: ref=infrastructure/gururmm-server.sops.yaml host=172.16.3.30]
|
||||
|
||||
2026-07-06 | Howard-Home | gururmm-build/webhook | [friction] linux webhook build SKIPPED after merge: change-detector excludes agent/Cargo.toml, so a Cargo.toml-only agent change (BUG-024 rustls swap) never rebuilds; had to force build-linux.sh manually as root [ctx: commit=a73dcad ref=build-linux.sh:29]
|
||||
|
||||
2026-07-06 | GURU-5070 | remediation-tool/sharepoint | [correction] assumed SP REST app-only was blocked ('Unsupported app only token') and to use delegated/PnP; correct is the app suite has a CERT-based sharepoint tier — get-token.sh <tenant> sharepoint mints a cert token with Sites.FullControl.All. Secret is Graph/EXO only. [ctx: client=birth-biologic ref=reference_m365_app_sharepoint_rest_vs_graph]
|
||||
|
||||
@@ -171,3 +171,13 @@ BLOCKED pending Howard pointing to the exact source: (a) Headscale host + how it
|
||||
SaaS and he generates an API key / OAuth client (scopes `devices:core` + `auth_keys`) from the admin
|
||||
console. The `tailscale` skill itself is built, reviewed, committed (f88c7d1), and only needs the
|
||||
credential vaulted at `tailscale/api-access.sops.yaml` to run the live add/delete verification.
|
||||
|
||||
## Update: 16:48 PT — Task #4 ON HOLD (Howard)
|
||||
|
||||
Howard put the Tailscale live-verification on hold. No credential was located or provisioned this
|
||||
session. Nothing further to do until he points me at the source (Headscale host, a server/path with
|
||||
a stored SaaS token, or a console-generated OAuth client/API key with scopes `devices:core` +
|
||||
`auth_keys`). Resume path: vault the credential at `tailscale/api-access.sops.yaml`
|
||||
(`vault-helper.sh new ...` command is in Pending / Incomplete Tasks above), then run `status` ->
|
||||
`devices` -> `create-key`/`delete-key` -> gated `delete-device` preview. Windows upgrade + skill
|
||||
build are complete; this is the only open thread.
|
||||
|
||||
Reference in New Issue
Block a user