sync: auto-sync from HOWARD-HOME at 2026-07-06 16:48:18

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-06 16:48:18
This commit is contained in:
2026-07-06 16:48:45 -07:00
parent e790d7c7e8
commit 43101f4597
2 changed files with 12 additions and 0 deletions

View File

@@ -19,6 +19,8 @@ Categories (the `[type]` tag): _(none)_ = skill/command execution failure ·
<!-- Append entries below this line -->
2026-07-06 | Howard-Home | ssh/gururmm-server | [friction] vault infrastructure/gururmm-server.sops.yaml lists username/password + 'Sudo password same as SSH', but 172.16.3.30 SSH is publickey-only (password auth disabled) and no fleet key authenticates guru/root/mike/howard from workstations. Watching build logs / running promote-dashboard.sh must be done on the box. Fix: add SSH pubkey to guru@.30 or correct the vault note. [ctx: ref=infrastructure/gururmm-server.sops.yaml host=172.16.3.30]
2026-07-06 | Howard-Home | gururmm-build/webhook | [friction] linux webhook build SKIPPED after merge: change-detector excludes agent/Cargo.toml, so a Cargo.toml-only agent change (BUG-024 rustls swap) never rebuilds; had to force build-linux.sh manually as root [ctx: commit=a73dcad ref=build-linux.sh:29]
2026-07-06 | GURU-5070 | remediation-tool/sharepoint | [correction] assumed SP REST app-only was blocked ('Unsupported app only token') and to use delegated/PnP; correct is the app suite has a CERT-based sharepoint tier — get-token.sh <tenant> sharepoint mints a cert token with Sites.FullControl.All. Secret is Graph/EXO only. [ctx: client=birth-biologic ref=reference_m365_app_sharepoint_rest_vs_graph]

View File

@@ -171,3 +171,13 @@ BLOCKED pending Howard pointing to the exact source: (a) Headscale host + how it
SaaS and he generates an API key / OAuth client (scopes `devices:core` + `auth_keys`) from the admin
console. The `tailscale` skill itself is built, reviewed, committed (f88c7d1), and only needs the
credential vaulted at `tailscale/api-access.sops.yaml` to run the live add/delete verification.
## Update: 16:48 PT — Task #4 ON HOLD (Howard)
Howard put the Tailscale live-verification on hold. No credential was located or provisioned this
session. Nothing further to do until he points me at the source (Headscale host, a server/path with
a stored SaaS token, or a console-generated OAuth client/API key with scopes `devices:core` +
`auth_keys`). Resume path: vault the credential at `tailscale/api-access.sops.yaml`
(`vault-helper.sh new ...` command is in Pending / Incomplete Tasks above), then run `status` ->
`devices` -> `create-key`/`delete-key` -> gated `delete-device` preview. Windows upgrade + skill
build are complete; this is the only open thread.