From 43101f4597094b62b433677c259c2287bf3c0a52 Mon Sep 17 00:00:00 2001 From: Howard Enos Date: Mon, 6 Jul 2026 16:48:45 -0700 Subject: [PATCH] sync: auto-sync from HOWARD-HOME at 2026-07-06 16:48:18 Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-07-06 16:48:18 --- errorlog.md | 2 ++ ...07-06-howard-tech03l-pro-upgrade-tailscale-skill.md | 10 ++++++++++ 2 files changed, 12 insertions(+) diff --git a/errorlog.md b/errorlog.md index 1bcae9b1..0e0c2a53 100644 --- a/errorlog.md +++ b/errorlog.md @@ -19,6 +19,8 @@ Categories (the `[type]` tag): _(none)_ = skill/command execution failure · +2026-07-06 | Howard-Home | ssh/gururmm-server | [friction] vault infrastructure/gururmm-server.sops.yaml lists username/password + 'Sudo password same as SSH', but 172.16.3.30 SSH is publickey-only (password auth disabled) and no fleet key authenticates guru/root/mike/howard from workstations. Watching build logs / running promote-dashboard.sh must be done on the box. Fix: add SSH pubkey to guru@.30 or correct the vault note. [ctx: ref=infrastructure/gururmm-server.sops.yaml host=172.16.3.30] + 2026-07-06 | Howard-Home | gururmm-build/webhook | [friction] linux webhook build SKIPPED after merge: change-detector excludes agent/Cargo.toml, so a Cargo.toml-only agent change (BUG-024 rustls swap) never rebuilds; had to force build-linux.sh manually as root [ctx: commit=a73dcad ref=build-linux.sh:29] 2026-07-06 | GURU-5070 | remediation-tool/sharepoint | [correction] assumed SP REST app-only was blocked ('Unsupported app only token') and to use delegated/PnP; correct is the app suite has a CERT-based sharepoint tier — get-token.sh sharepoint mints a cert token with Sites.FullControl.All. Secret is Graph/EXO only. [ctx: client=birth-biologic ref=reference_m365_app_sharepoint_rest_vs_graph] diff --git a/session-logs/2026-07/2026-07-06-howard-tech03l-pro-upgrade-tailscale-skill.md b/session-logs/2026-07/2026-07-06-howard-tech03l-pro-upgrade-tailscale-skill.md index c13d5c5b..936c4bb7 100644 --- a/session-logs/2026-07/2026-07-06-howard-tech03l-pro-upgrade-tailscale-skill.md +++ b/session-logs/2026-07/2026-07-06-howard-tech03l-pro-upgrade-tailscale-skill.md @@ -171,3 +171,13 @@ BLOCKED pending Howard pointing to the exact source: (a) Headscale host + how it SaaS and he generates an API key / OAuth client (scopes `devices:core` + `auth_keys`) from the admin console. The `tailscale` skill itself is built, reviewed, committed (f88c7d1), and only needs the credential vaulted at `tailscale/api-access.sops.yaml` to run the live add/delete verification. + +## Update: 16:48 PT — Task #4 ON HOLD (Howard) + +Howard put the Tailscale live-verification on hold. No credential was located or provisioned this +session. Nothing further to do until he points me at the source (Headscale host, a server/path with +a stored SaaS token, or a console-generated OAuth client/API key with scopes `devices:core` + +`auth_keys`). Resume path: vault the credential at `tailscale/api-access.sops.yaml` +(`vault-helper.sh new ...` command is in Pending / Incomplete Tasks above), then run `status` -> +`devices` -> `create-key`/`delete-key` -> gated `delete-device` preview. Windows upgrade + skill +build are complete; this is the only open thread.