3 Commits
Author SHA1 Message Date
ic-builder a7806eb3bd First fleet baseline wave: 7/7 nodes + STATUS + registry digest pin (#826)
ci / audit (push) Successful in 27s
- data/baselines/: cpu-bench bundles for tsys1/3/4/5/6/7/9 (2026-09-06)
  headliners: tsys9 1.20M k/s AES-1t > tsys3 986k > tsys4 614k > tsys1 582k
  > tsys5 462k (governor=none, E5620) > tsys7 401k > tsys6 176k
- monitoring/README: toolbox image digest pinned
  (git.knownelement.com/knel/knelerf-toolbox:v1 @ sha256:3bb22bdb...)
- STATUS.md: pointer to #826 program state

Redmine: https://projects.knownelement.com/issues/826
2026-09-06 20:00:37 -05:00
ic-builder 2d2aa3ef38 Toolbox: PVE9 apparmor via lxc.conf, runtime tracefs/debugfs mounts (#826)
ci / audit (push) Successful in 33s
- PVE 9 dropped 'pct set --raw.lxc': lxc.apparmor.profile goes straight
  into /etc/pve/lxc/<vmid>.conf and PVE::LXC honors it over the generated
  profile (verified: /proc/self/attr/current = unconfined)
- pct skips virtual-fs bind sources (mp /proc,/sys/kernel/* landed empty):
  keep cgroupfs + /var/log binds, wrapper mounts tracefs/debugfs at start
- bpftrace PROVEN against host kernel (2689 tracepoints, live syscall
  counts showing host pvestatd/vgs); bcc-tools -> bpfcc-tools (bookworm)
- smartctl on SAT devices needs -d sat (recipes updated)

Redmine: https://projects.knownelement.com/issues/826
2026-09-06 19:07:22 -05:00
ic-builder 3680f1dba1 Fleet monitoring: sysstat 28d + perfsnap/PSI/iotop timers + on-demand toolbox container (#826)
ci / audit (push) Successful in 26s
- monitoring/node-install.sh: idempotent per-node installer (sar HISTORY=28,
  three oneshot timers, per-node conf with qemu.slice/lxc cgroup globs)
- monitoring/collectors + systemd units: iotop-snap 15min, perfsnap 60s,
  psi-textfile 15s (now sources /etc/knelperf/perfsnap.conf; multi-glob)
- monitoring/toolbox: pct LXC (vmid 950, privileged, apparmor unconfined,
  stopped at rest) + knelperf-toolbox wrapper + Dockerfile variant
- monitoring/deploy-fleet.sh: workstation-side rollout driver
- piloted on pfv-tsys1: per-VM PSI gauges verified live

Redmine: https://projects.knownelement.com/issues/826
2026-09-06 18:50:07 -05:00