vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(nh3-pve): AMT static on nh3-mgmt with KVM enabled and opt-in none; WS-Man helper

Browse Source 
- AMT re-IP'd over WS-Man to static 10.100.250.61/24 (gw/DNS .1): AMT keeps
  its old DHCP lease across a VLAN move, so it was unreachable until changed
  (reached via a temporary on-link /32 on vmbr0 + ssh tunnel, since removed).
- KVM redirection enabled, redirection listener on, IPS_OptInService
  OptInRequired=0; all read back. Password vaulted as nh3-pve/amt-admin.
- scripts/amt-wsman.py: stdlib WS-Man get/put/invoke client (digest auth,
  AMT 16 legacy-renegotiation TLS), password from $AMT_PW.
This commit is contained in:
vh
2026-09-25 23:08:53 -07:00
parent b3b75c16f4
commit 50f113cd7d
3 changed files with 107 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
persistent-memory.md
+9 -12
View File
@@ -132,18 +132,15 @@ hermes-gateway, Booth, ttyd, zellij-web and dev-backup are running.
`servers/nh3-ml1/README.md` exists.
- ⏳ **Prime's call: gateway routing.** Recommendation: load-share
`qwen3-embedding` + `reranker` across esh-ml1 and nh3-ml1.
- **AMT → nh3-mgmt at 2237 (Prime): `https://10.100.250.61:16993`**
(`nh3-pve-amt.nh3.internal`, Homepage *NH3-PVE-AMT*). UDM port 6 is native
mgmt with tags blocked, and the reservation is `.61`.
- ⏳ AMT is still sitting on its old `10.100.0.151` lease and is unreachable
until that lease rebinds or expires: ~1920 to ~2224 on 09-26. AMT does not
re-DHCP when its VLAN changes or its link drops.
- A background poll watches `.61`.
- Faster route: the AMT admin password (WS-Man).
- Earlier root cause: Linux had the port down (the `igc` PHY was off). Fixed
with `auto enp88s0` plus IPv6 off and `arp_ignore=8` via sysctl.d.
- **Open:** check KVM + Opt-in None; a dummy HDMI plug before the NanoKVM
moves.
- ✅ **AMT on nh3-mgmt, static `10.100.250.61` (2306),** `nh3-pve-amt.nh3.internal`,
Homepage *NH3-PVE-AMT*. Password in the vault as `nh3-pve/amt-admin`.
- UDM port 6 is native mgmt with tags blocked.
- KVM on, redirection listener on, Opt-in None; set through
`scripts/amt-wsman.py`.
- Root cause earlier tonight: Linux had the port down (the `igc` PHY was off).
Fixed with `auto enp88s0`, IPv6 off and `arp_ignore=8`.
- **Open:** Prime's first MeshCommander session, then a dummy HDMI plug, then
move the NanoKVM to the gx10.
- Found and fixed: **lxc-pve 6.0.0-1 broke Docker in the CT** (runc 1.5 sysctl
reopen denied). Upgraded that one package to 6.0.0-2 (Proxmox fix #7006), and
`gpu-lxc.yaml` now does this itself.