reachableceo/ultix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rebuild runbook + state capture + docs sync to current reality (#615)

Browse Source 
REBUILD.md maps a full rebuild (PVE qm spec incl. nested-virt flag,
guest OS/accounts/dotfiles bootstrap, script order, package baseline,
verification checklist). 14-capture-state.sh regenerates docs/state
snapshots (guest apt/units/sysctl/fstab/docker + PVE 5111 config).
Docs sync: stale multiqueue-owed text removed from NEXT/REPORT/RUNBOOK;
README script list + open-work list current.

Details: https://projects.knownelement.com/issues/615
This commit is contained in:
mrcharles
2026-09-01 13:31:38 -05:00
parent eeeca9bde9
commit 46fe0cb6a5
15 changed files with 1014 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/state/guest-system.txt
+273
View File
@@ -0,0 +1,273 @@
72 unit files listed.
accounts-daemon.service enabled enabled
anacron.service enabled enabled
anacron.timer enabled enabled
apparmor.service enabled enabled
apt-daily.timer enabled enabled
apt-daily-upgrade.timer enabled enabled
avahi-daemon.service enabled enabled
avahi-daemon.socket enabled enabled
beszel-agent.service enabled enabled
beszel-agent-update.timer enabled enabled
bluetooth.service enabled enabled
boinc-client.service enabled enabled
conman.service enabled enabled
console-setup.service enabled enabled
containerd.service enabled enabled
cron.service enabled enabled
cups-browsed.service enabled enabled
cups.path enabled enabled
cups.service enabled enabled
cups.socket enabled enabled
docker.service enabled enabled
docker.socket enabled enabled
dpkg-db-backup.timer enabled enabled
drkonqi-coredump-processor@.service enabled enabled
e2scrub_all.timer enabled enabled
e2scrub_reap.service enabled enabled
fstrim.timer enabled enabled
fwupd-refresh.timer enabled enabled
getty@.service enabled enabled
glances.service enabled enabled
grub-common.service enabled enabled
keyboard-setup.service enabled enabled
libvirtd-admin.socket enabled enabled
libvirtd-ro.socket enabled enabled
libvirtd.service enabled enabled
libvirtd.socket enabled enabled
libvirt-guests.service enabled enabled
lm-sensors.service enabled enabled
logrotate.timer enabled enabled
machines.target enabled enabled
man-db.timer enabled enabled
microvm-net.service enabled enabled
ModemManager.service enabled enabled
networking.service enabled enabled
NetworkManager-dispatcher.service enabled enabled
NetworkManager.service enabled enabled
NetworkManager-wait-online.service enabled enabled
power-profiles-daemon.service enabled enabled
remote-fs.target enabled enabled
sddm.service enabled enabled
smartmontools.service enabled enabled
sshd-keygen.service enabled enabled
ssh.service enabled enabled
switcheroo-control.service enabled enabled
systemd-pstore.service enabled enabled
systemd-timesyncd.service enabled enabled
tailscaled.service enabled enabled
udisks2.service enabled enabled
ukrrs-builder-prune.timer enabled enabled
ukrrs-dayprofile.timer enabled enabled
ukrrs-gateway-ensure.service enabled enabled
ukrrs-net-multiqueue.service enabled enabled
ukrrs-nightprofile.timer enabled enabled
ukrrs-psi-textfile.timer enabled enabled
ukrrs-thp-madvise.service enabled enabled
UNIT FILE STATE PRESET
virtlogd-admin.socket enabled enabled
virtlogd.service enabled enabled
virtlogd.socket enabled enabled
wpa_supplicant.service enabled enabled
wtmpdb-update-boot.service enabled enabled
xrdp.service enabled enabled
xrdp-sesman.service enabled enabled
===CUSTOM-UNITS
/etc/systemd/system/beszel-agent.service
/etc/systemd/system/beszel-agent-update.service
/etc/systemd/system/beszel-agent-update.timer
/etc/systemd/system/bluetooth.target.wants/bluetooth.service
/etc/systemd/system/dbus-fi.w1.wpa_supplicant1.service
/etc/systemd/system/dbus-org.bluez.service
/etc/systemd/system/dbus-org.freedesktop.Avahi.service
/etc/systemd/system/dbus-org.freedesktop.ModemManager1.service
/etc/systemd/system/dbus-org.freedesktop.nm-dispatcher.service
/etc/systemd/system/dbus-org.freedesktop.timesync1.service
/etc/systemd/system/default.target.wants/wtmpdb-update-boot.service
/etc/systemd/system/display-manager.service
/etc/systemd/system/getty.target.wants/getty@tty1.service
/etc/systemd/system/graphical.target.wants/accounts-daemon.service
/etc/systemd/system/graphical.target.wants/power-profiles-daemon.service
/etc/systemd/system/graphical.target.wants/switcheroo-control.service
/etc/systemd/system/graphical.target.wants/udisks2.service
/etc/systemd/system/hibernate.target.wants/grub-common.service
/etc/systemd/system/hybrid-sleep.target.wants/grub-common.service
/etc/systemd/system/microvm-net.service
/etc/systemd/system/multi-user.target.wants/anacron.service
/etc/systemd/system/multi-user.target.wants/avahi-daemon.service
/etc/systemd/system/multi-user.target.wants/beszel-agent.service
/etc/systemd/system/multi-user.target.wants/boinc-client.service
/etc/systemd/system/multi-user.target.wants/conman.service
/etc/systemd/system/multi-user.target.wants/console-setup.service
/etc/systemd/system/multi-user.target.wants/containerd.service
/etc/systemd/system/multi-user.target.wants/cron.service
/etc/systemd/system/multi-user.target.wants/cups-browsed.service
/etc/systemd/system/multi-user.target.wants/cups.path
/etc/systemd/system/multi-user.target.wants/cups.service
/etc/systemd/system/multi-user.target.wants/docker.service
/etc/systemd/system/multi-user.target.wants/e2scrub_reap.service
/etc/systemd/system/multi-user.target.wants/glances.service
/etc/systemd/system/multi-user.target.wants/grub-common.service
/etc/systemd/system/multi-user.target.wants/libvirtd.service
/etc/systemd/system/multi-user.target.wants/libvirt-guests.service
/etc/systemd/system/multi-user.target.wants/lm-sensors.service
/etc/systemd/system/multi-user.target.wants/machines.target
/etc/systemd/system/multi-user.target.wants/microvm-net.service
/etc/systemd/system/multi-user.target.wants/ModemManager.service
/etc/systemd/system/multi-user.target.wants/networking.service
/etc/systemd/system/multi-user.target.wants/NetworkManager.service
/etc/systemd/system/multi-user.target.wants/open-terminal@COS-RCEO.service
/etc/systemd/system/multi-user.target.wants/open-terminal@COS-TSG.service
/etc/systemd/system/multi-user.target.wants/open-terminal@COS-WFO.service
/etc/systemd/system/multi-user.target.wants/open-terminal@reachableceo-offstage.service
/etc/systemd/system/multi-user.target.wants/open-terminal@reachableceo.service
/etc/systemd/system/multi-user.target.wants/open-terminal@TSGBOD.service
/etc/systemd/system/multi-user.target.wants/open-terminal@TSGCCO.service
/etc/systemd/system/multi-user.target.wants/open-terminal@TSGCOO.service
/etc/systemd/system/multi-user.target.wants/open-terminal@TSGCTO.service
/etc/systemd/system/multi-user.target.wants/remote-fs.target
/etc/systemd/system/multi-user.target.wants/smartmontools.service
/etc/systemd/system/multi-user.target.wants/ssh.service
/etc/systemd/system/multi-user.target.wants/tailscaled.service
/etc/systemd/system/multi-user.target.wants/ukrrs-gateway-ensure.service
/etc/systemd/system/multi-user.target.wants/ukrrs-net-multiqueue.service
/etc/systemd/system/multi-user.target.wants/ukrrs-thp-madvise.service
/etc/systemd/system/multi-user.target.wants/virtlogd.service
/etc/systemd/system/multi-user.target.wants/wpa_supplicant.service
/etc/systemd/system/multi-user.target.wants/xrdp.service
/etc/systemd/system/multi-user.target.wants/xrdp-sesman.service
/etc/systemd/system/network-online.target.wants/networking.service
/etc/systemd/system/network-online.target.wants/NetworkManager-wait-online.service
/etc/systemd/system/open-terminal@.service
/etc/systemd/system/printer.target.wants/cups.service
/etc/systemd/system/smartd.service
/etc/systemd/system/sockets.target.wants/avahi-daemon.socket
/etc/systemd/system/sockets.target.wants/cups.socket
/etc/systemd/system/sockets.target.wants/docker.socket
/etc/systemd/system/sockets.target.wants/libvirtd-admin.socket
/etc/systemd/system/sockets.target.wants/libvirtd-ro.socket
/etc/systemd/system/sockets.target.wants/libvirtd.socket
/etc/systemd/system/sockets.target.wants/virtlogd-admin.socket
/etc/systemd/system/sockets.target.wants/virtlogd.socket
/etc/systemd/system/sshd.service
/etc/systemd/system/sshd.service.wants/sshd-keygen.service
/etc/systemd/system/sshd@.service.wants/sshd-keygen.service
/etc/systemd/system/ssh.service.wants/sshd-keygen.service
/etc/systemd/system/ssh.socket.wants/sshd-keygen.service
/etc/systemd/system/suspend.target.wants/grub-common.service
/etc/systemd/system/suspend-then-hibernate.target.wants/grub-common.service
/etc/systemd/system/sysinit.target.wants/apparmor.service
/etc/systemd/system/sysinit.target.wants/keyboard-setup.service
/etc/systemd/system/sysinit.target.wants/systemd-pstore.service
/etc/systemd/system/sysinit.target.wants/systemd-timesyncd.service
/etc/systemd/system/systemd-coredump@.service.wants/drkonqi-coredump-processor@.service
/etc/systemd/system/timers.target.wants/anacron.timer
/etc/systemd/system/timers.target.wants/apt-daily.timer
/etc/systemd/system/timers.target.wants/apt-daily-upgrade.timer
/etc/systemd/system/timers.target.wants/beszel-agent-update.timer
/etc/systemd/system/timers.target.wants/dpkg-db-backup.timer
/etc/systemd/system/timers.target.wants/e2scrub_all.timer
/etc/systemd/system/timers.target.wants/fstrim.timer
/etc/systemd/system/timers.target.wants/fwupd-refresh.timer
/etc/systemd/system/timers.target.wants/logrotate.timer
/etc/systemd/system/timers.target.wants/man-db.timer
/etc/systemd/system/timers.target.wants/ukrrs-builder-prune.timer
/etc/systemd/system/timers.target.wants/ukrrs-dayprofile.timer
/etc/systemd/system/timers.target.wants/ukrrs-nightprofile.timer
/etc/systemd/system/timers.target.wants/ukrrs-psi-textfile.timer
/etc/systemd/system/ukrrs-acct-reachableceo-offstage.slice
/etc/systemd/system/ukrrs-acct-reachableceo.slice
/etc/systemd/system/ukrrs-batch.slice
/etc/systemd/system/ukrrs-builder-prune.service
/etc/systemd/system/ukrrs-builder-prune.timer
/etc/systemd/system/ukrrs-dayprofile.service
/etc/systemd/system/ukrrs-dayprofile.timer
/etc/systemd/system/ukrrs-gateway-ensure.service
/etc/systemd/system/ukrrs-gateway.slice
/etc/systemd/system/ukrrs-lsp.slice
/etc/systemd/system/ukrrs-net-multiqueue.service
/etc/systemd/system/ukrrs-nightprofile.service
/etc/systemd/system/ukrrs-nightprofile.timer
/etc/systemd/system/ukrrs-pmo.slice
/etc/systemd/system/ukrrs-psi-textfile.service
/etc/systemd/system/ukrrs-psi-textfile.timer
/etc/systemd/system/ukrrs-rt.slice
/etc/systemd/system/ukrrs-thp-madvise.service
/etc/systemd/system/user-1001.slice.d/50-ukrrs.conf
/etc/systemd/system/user-1010.slice.d/50-ukrrs.conf
/etc/systemd/system/xrdp.service.d/bigres.conf
===SYSCONTROL
-- /etc/sysctl.d/60-ukrrs-vm.conf
# /etc/sysctl.d/60-ukrrs-vm.conf — ultix-streaming mixed-workload profile
# Measured-before values and rationale: ~/optimize/REPORT.md §4.1.
# Deliberately NOT touched: swappiness(60), overcommit(0), vfs_cache_pressure,
# pid_max, somaxconn(4096), conntrack(262144), autogroup(1), page-cluster(3).
# Predictable writeback under ETL bursts (bytes-based, RAM-size independent).
# Night profile (ukrrs-daynight.sh) raises these to 2G/512M.
vm.dirty_background_bytes = 268435456
vm.dirty_bytes = 1073741824
# Survive bursty reclaim when compiles+ETL hit at once. 768M post-upgrade.
vm.min_free_kbytes = 393216
# Postgres AIO / io_uring era; 9 harness daemons + LSPs watching many repos.
fs.aio-max-nr = 1048576
fs.inotify.max_user_watches = 1048576
fs.inotify.max_user_instances = 512
# 9 accounts x long-lived provider streams + tailscale + docker NAT.
net.ipv4.ip_local_port_range = 10240 65535
net.ipv4.tcp_tw_reuse = 1
# LLM turns idle minutes between bursts on live sockets; large SSE/JSON.
net.ipv4.tcp_slow_start_after_idle = 0
net.core.rmem_max = 16777216
net.core.wmem_max = 16777216
net.ipv4.tcp_rmem = 4096 131072 16777216
net.ipv4.tcp_wmem = 4096 65536 16777216
net.core.netdev_max_backlog = 8192
# BBR requires the module: staged modules-load.d/tcp_bbr.conf loads it.
# If bbr is unavailable, comment the last two lines out (cubic is fine).
net.ipv4.tcp_congestion_control = bbr
net.core.default_qdisc = fq
===FSTAB
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# systemd generates mount units based on this file, see systemd.mount(5).
# Please run 'systemctl daemon-reload' after making changes here.
#
# <file system> <mount point> <type> <options> <dump> <pass>
# / was on /dev/sda1 during installation
UUID=db07b391-d983-4a40-8752-bf1a7daf5d42 / ext4 errors=remount-ro,noatime 0 1
# swap was on /dev/sda5 during installation
UUID=611d6da8-3fd6-40f0-9239-d8825a6d256c none swap sw 0 0
/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
#data dirs
#root@ultix-streaming:~# blkid /dev/sdc1
#/dev/sdc1: UUID="f6ce5e0d-8045-41d0-be0e-612d8b2abc02" BLOCK_SIZE="4096" TYPE="ext4" PARTUUID="5365d54a-c661-4446-a732-c0d420ef298b"
UUID=f6ce5e0d-8045-41d0-be0e-612d8b2abc02 /data1 ext4 errors=remount-ro,noatime 0 1
#root@ultix-streaming:~# blkid /dev/sdb1
#/dev/sdb1: UUID="b23e6be0-2a1c-41b7-8742-5dab39066f2e" BLOCK_SIZE="4096" TYPE="ext4" PARTUUID="b0fab633-36db-4658-9ca4-35aca7b9cb29"
UUID=b23e6be0-2a1c-41b7-8742-5dab39066f2e /data2 ext4 errors=remount-ro,noatime 0 1
===SUDOERS
total 32
drwxr-xr-x 2 root root 4096 Sep 1 11:47 .
drwxr-xr-x 156 root root 12288 Sep 1 13:20 ..
-rw-rw-r-- 1 root root 30 Jul 28 12:01 localuser
-rw-rw-r-- 1 root root 33 Jul 28 19:47 reachableceo-streaming
-r--r----- 1 root root 55 Sep 1 11:47 reachableceo-to-offstage
-r--r----- 1 root root 1068 Apr 11 07:21 README
===XRDP-DROPIN
[Service]
Environment=XRDP_GFX_MAX_COMPRESSED_BYTES=33554432
Environment=XRDP_GFX_FRAMES_IN_FLIGHT=2