ic-builder
2d2aa3ef38
Toolbox: PVE9 apparmor via lxc.conf, runtime tracefs/debugfs mounts ( #826 )
...
ci / audit (push) Successful in 33s
- PVE 9 dropped 'pct set --raw.lxc': lxc.apparmor.profile goes straight
into /etc/pve/lxc/<vmid>.conf and PVE::LXC honors it over the generated
profile (verified: /proc/self/attr/current = unconfined)
- pct skips virtual-fs bind sources (mp /proc,/sys/kernel/* landed empty):
keep cgroupfs + /var/log binds, wrapper mounts tracefs/debugfs at start
- bpftrace PROVEN against host kernel (2689 tracepoints, live syscall
counts showing host pvestatd/vgs); bcc-tools -> bpfcc-tools (bookworm)
- smartctl on SAT devices needs -d sat (recipes updated)
Redmine: https://projects.knownelement.com/issues/826
2026-09-06 19:07:22 -05:00
ic-builder
3680f1dba1
Fleet monitoring: sysstat 28d + perfsnap/PSI/iotop timers + on-demand toolbox container ( #826 )
...
ci / audit (push) Successful in 26s
- monitoring/node-install.sh: idempotent per-node installer (sar HISTORY=28,
three oneshot timers, per-node conf with qemu.slice/lxc cgroup globs)
- monitoring/collectors + systemd units: iotop-snap 15min, perfsnap 60s,
psi-textfile 15s (now sources /etc/knelperf/perfsnap.conf; multi-glob)
- monitoring/toolbox: pct LXC (vmid 950, privileged, apparmor unconfined,
stopped at rest) + knelperf-toolbox wrapper + Dockerfile variant
- monitoring/deploy-fleet.sh: workstation-side rollout driver
- piloted on pfv-tsys1: per-VM PSI gauges verified live
Redmine: https://projects.knownelement.com/issues/826
2026-09-06 18:50:07 -05:00
ic-builder
f1729868fa
Transparency: site assumed 100% public; private reporting = Dolibarr dashboards (later phase) ( #826 )
...
ci / audit (push) Successful in 25s
https://projects.knownelement.com/issues/826#note-21
2026-09-06 16:31:41 -05:00
ic-builder
4fd18e0792
Transparency page: state the open-code/private-inputs principle verbatim ( #826 )
...
ci / audit (push) Successful in 45s
https://projects.knownelement.com/issues/826#note-20
2026-09-06 16:30:40 -05:00
ic-builder
90a9557f36
Publisher v3: full site IA (Home/Program/Fleet/Reports/Intel/Status/Transparency/About) + mechanical redaction ( #826 )
...
ci / audit (push) Successful in 46s
Financial literals redacted at render (LLC-private enforced by script);
reports as routable folder pages (Grav: bare .md in a folder is not
routable; git pathspec glob * crosses dirs - removed the git rm line
that unstaged its own output); sections visible:true; skeleton pages
dropped, home alias -> /performance. Site live public read-only.
https://projects.knownelement.com/issues/826#note-19
2026-09-06 16:28:50 -05:00
ic-builder
688810d474
Architecture section 11: capacity planning + margin tracking in Dolibarr ( #826 )
...
ci / audit (push) Successful in 23s
Fleet capacity ledger as virtual stock, reservations as consuming orders,
analytic-accounting margins per tenant class (private), KillBill = billing /
Dolibarr = financial brain. vpperf API identity live on erp.knownelement.com.
https://projects.knownelement.com/issues/826#note-16
2026-09-06 15:39:50 -05:00
ic-builder
c3562468c7
Publisher: whitelist comment codifying the public/private line ( #826 )
...
ci / audit (push) Successful in 23s
https://projects.knownelement.com/issues/826#note-15
2026-09-06 15:36:05 -05:00
ic-builder
537b434868
Publisher re-architecture: push-to-repo, site pulls (founder ruling) ( #826 )
...
ci / audit (push) Successful in 23s
grav-publish.sh now renders into KNEL/KNELPerfHub (AGPLv3) and pushes;
the Cloudron VPS ukrrs-hub-pull.timer git-pulls into the Grav pages dir
every 5 min (safe.directory fix); Grav cache.check=file auto-refreshes.
NO server-side tooling runs in the Grav container anymore. Verified
end-to-end live.
https://projects.knownelement.com/issues/826#note-13
2026-09-06 15:34:52 -05:00
ic-builder
7b48df3c7b
Grav publisher: perf intel to performance.knownelement.com ( #826 )
...
ci / audit (push) Successful in 23s
Grav (Cloudron app 8336f951, org-SSO-gated) installed at
performance.knownelement.com; tools/grav-publish.sh pushes the home
dashboard (ERCOT risk + arbitrage verdict + baseline index) and report
pages as markdown via ssh->docker exec, then clears cache. Idempotent,
cron-safe. First publish verified live.
https://projects.knownelement.com/issues/826#note-11
2026-09-06 15:26:31 -05:00
ic-builder
c1a5f67651
Docs beautify pass: README + ARCHITECTURE to PhysicalPlant standard ( #826 )
...
ci / audit (push) Successful in 22s
Emoji headers, shields, mermaid loop diagram, contents TOC, module table,
quick start, docs index, cross-links. Pattern: pfv-bms README.
https://projects.knownelement.com/issues/826#note-10
2026-09-06 15:05:30 -05:00
ic-builder
e62c19df43
Telemetry spine: add per-circuit monitoring (Emporia, #623 ) as load-side source ( #826 )
...
ci / audit (push) Successful in 23s
https://projects.knownelement.com/issues/826#note-9
2026-09-06 15:04:16 -05:00
ic-builder
140ff1ff83
tsys9 identified: OptiPlex 7080 / i5-10500 PVE node, RAPL live ( #826 )
...
ci / audit (push) Successful in 23s
https://projects.knownelement.com/issues/826#note-3
2026-09-06 14:55:18 -05:00
ic-builder
e83f7d446c
Merge pull request 'fix SC2015 for CI shellcheck 0.9' ( #1 ) from ic-builder/sc2015-v09 into main
ci / audit (push) Successful in 24s
2026-09-06 19:30:50 +00:00
ic-builder
1e6973a4b0
fix SC2015 for CI shellcheck 0.9 (unambiguous if-forms)
...
ci / audit (pull_request) Successful in 24s
CI red fix per the all-CI-green mandate; same pattern as the KNELCa/
KNELInventory fixes. No behavior change.
CI evidence: https://git.knownelement.com/KNEL/KNELPerf/actions
Ticket: https://projects.knownelement.com/issues/784
2026-09-06 14:29:45 -05:00
ic-builder