PFVCluster

419 Commits 1 Branch 1 Tag

3 Commits

Include renames

Author	SHA1	Message	Date
mrcharles	0fa0692c37	chore: enforce shellcheck across the repo Establish shellcheck as a mandatory pre-commit quality gate and bring all 93 shell scripts to a clean state. - tests/shellcheck.sh: wrapper that runs koalaman/shellcheck:stable via Docker (no native binary needed), skips vendored + upstream librenms-agent scripts. - .shellcheckrc: documents intentional codebase-wide disables (dynamic source paths SC1090/SC1091, client-side ssh expansion SC2029). - AGENTS.md: new Git Policy rule mandating clean shellcheck for every shell script before commit. Fixes applied (real bugs + quality): missing quote in netinfra/gather-configs.sh (caused cascading parse errors), unquoted expansions, declare-and-assign masking, egrep -> grep -E, $FUNCNAME array indexing, unused variable removal, cd \|\| exit. Intentional patterns (sourced config, sysfs/ps diagnostics, ssh heredocs that expand local config) get justified targeted disables. 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-07-30 08:56:31 -05:00
mrcharles	1044224d02	feat: wire Pi-hole to forward knel.net to local Technitium + document setup Add a shared Docker network (dnsnet, 10.53.0.0/24) connecting Pi-hole and Technitium containers so Pi-hole can conditionally forward knel.net and Tailscale-reverse queries to the local authoritative Technitium instance (10.53.0.53) instead of netboot's upstream 192.168.3.16. Also adds end-to-end documentation for both the reference node (pfv-netboot) and the replicated nodes (pfv-netinfra-01/02). 💘 Generated with Crush Assisted-by: Crush:glm-5.2	2026-07-28 05:16:01 -05:00
mrcharles	291a7ebc27	feat: full re-audit of all 7 hosts with fresh ground truth Deployed check.sh to all 7 hosts at 21:50 CDT. Captures the live state after the user's PDM migrations: Cnode movements since last audit: - cnode1: tsys1 -> tsys9 - cnode2: tsys6 -> tsys7 - cnode5: tsys6 -> tsys7, storage D5(tsys4) -> S2(tsys5) Wnode changes: - wnode-tsys1 (102): new VM on S2, stopped - wnode-tsys3: RAM bumped 20 -> 28 GB - wnode-tsys6: now running (was stopped) - wnode-tsys9: storage moved S3 -> S2 Storage distribution improved from 90/10 to 73/27 (tsys4/tsys5). Still need 2 more cnode moves for etcd quorum survival. Updated executive summary, k8s distribution tables, storage utilization, and open items with the fresh data. Captured future k8s requirements: vcluster + Rancher, OIDC to Keycloak, workload isolation (RackRental/Suborbital ITAR/non-ITAR/SLP), and solar-aware scale-out with PowerEdge 19xx/2950 systems. Added tsys9 to deploy-check.sh host list.	2026-07-27 22:04:05 -05:00

Author

SHA1

Message

Date

mrcharles

0fa0692c37

chore: enforce shellcheck across the repo

Establish shellcheck as a mandatory pre-commit quality gate and bring all 93
shell scripts to a clean state.

- tests/shellcheck.sh: wrapper that runs koalaman/shellcheck:stable via Docker
  (no native binary needed), skips vendored + upstream librenms-agent scripts.
- .shellcheckrc: documents intentional codebase-wide disables (dynamic source
  paths SC1090/SC1091, client-side ssh expansion SC2029).
- AGENTS.md: new Git Policy rule mandating clean shellcheck for every shell
  script before commit.

Fixes applied (real bugs + quality): missing quote in netinfra/gather-configs.sh
(caused cascading parse errors), unquoted expansions, declare-and-assign masking,
egrep -> grep -E, $FUNCNAME array indexing, unused variable removal, cd || exit.
Intentional patterns (sourced config, sysfs/ps diagnostics, ssh heredocs that
expand local config) get justified targeted disables.

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-07-30 08:56:31 -05:00

mrcharles

1044224d02

feat: wire Pi-hole to forward knel.net to local Technitium + document setup

Add a shared Docker network (dnsnet, 10.53.0.0/24) connecting Pi-hole and
Technitium containers so Pi-hole can conditionally forward knel.net and
Tailscale-reverse queries to the local authoritative Technitium instance
(10.53.0.53) instead of netboot's upstream 192.168.3.16. Also adds
end-to-end documentation for both the reference node (pfv-netboot) and
the replicated nodes (pfv-netinfra-01/02).

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

2026-07-28 05:16:01 -05:00

mrcharles

291a7ebc27

feat: full re-audit of all 7 hosts with fresh ground truth

Deployed check.sh to all 7 hosts at 21:50 CDT. Captures the live state
after the user's PDM migrations:

Cnode movements since last audit:
- cnode1: tsys1 -> tsys9
- cnode2: tsys6 -> tsys7
- cnode5: tsys6 -> tsys7, storage D5(tsys4) -> S2(tsys5)

Wnode changes:
- wnode-tsys1 (102): new VM on S2, stopped
- wnode-tsys3: RAM bumped 20 -> 28 GB
- wnode-tsys6: now running (was stopped)
- wnode-tsys9: storage moved S3 -> S2

Storage distribution improved from 90/10 to 73/27 (tsys4/tsys5).
Still need 2 more cnode moves for etcd quorum survival.

Updated executive summary, k8s distribution tables, storage
utilization, and open items with the fresh data. Captured future k8s
requirements: vcluster + Rancher, OIDC to Keycloak, workload isolation
(RackRental/Suborbital ITAR/non-ITAR/SLP), and solar-aware scale-out
with PowerEdge 19xx/2950 systems.

Added tsys9 to deploy-check.sh host list.

2026-07-27 22:04:05 -05:00