feat(infra): give new hosts a route out, and a non-interactive rehearsal - #47
Merged
Merged
Conversation
…he key from a file This VCN has an internet gateway and no NAT, so a host created without a public address cannot reach GHCR, R2 or apt. assign_public_ip defaults to true and stays per host. rehearse.yml can also take voltius_age_key_file, a path on the controller, so a run does not need a terminal. Under /dev/shm the key never reaches a disk on either machine. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Two things the first rehearsal needs.
A route out. The VCN has an internet gateway and no NAT gateway, so an instance created without a public address has no outbound path at all — it could not pull the server image, reach R2, or run
apt.assign_public_ipnow defaults to true and is settable per host.A rehearsal that does not need a terminal.
rehearse.ymlacceptsvoltius_age_key_file, a path on the controller, as an alternative to the interactive prompt. Pointed at/dev/shm, the key never touches a disk on either machine, and the play fails fast if what it read is too short to be a key.🤖 Generated with Claude Code