ops(u13,fv-ml1): E2 in progress — nh3-dev app units, terminal origin via seat-host; fv-ml1 serial console + SOL logger staged

- configs/svos-apps/nh3-dev/: user units for svos-terminal (running), svos-postoffice, svos-miranda, svos-agent (installed, not yet started). - configs/svos-front/Caddyfile: svos-terminal.phasefinal.com upstreams to https://svos-seathost.nh3.phasefinal.com now that app-terminal runs on nh3-dev. - configs/fv-ml1-sol/: an nh3-dev user unit holding fv-ml1's BMC SOL session into the journal; fv-ml1's kernel console goes to ttyS1 (the SOL port, marker-tested) from its next boot (ZFSBootMenu commandline on zroot/ROOT).
2026-10-11 07:39:22 -07:00
parent 3c05ae8ba2
commit 6e026c510a
6 changed files with 112 additions and 1 deletions
@@ -0,0 +1,22 @@
+# eshpfi configs/svos-apps/nh3-dev/ (infra-ops, U13 2026-10-11): Miranda's agent connector (persona miranda), loopback
+# only; the gateway's svos plugin calls it at connector_url http://127.0.0.1:8407 with the shared Bifrost key.
+# FIRST start only: /etc/svos/env/agent-enroll.env carries SVOS_AGENT_ENROLL_SECRET; the connector enrolls, writes
+# /etc/svos/miranda/agent.credential (0600) and refuses to start while both exist, so delete the enroll file after.
+[Unit]
+Description=SVOS agent connector for Miranda (svos-agent)
+[Service]
+Type=simple
+UMask=0077
+Restart=on-failure
+RestartSec=3
+TimeoutStopSec=20
+WorkingDirectory=/etc/svos/miranda
+EnvironmentFile=-/etc/svos/env/agent-enroll.env
+Environment=SVOS_AGENT_CONFIG=/etc/svos/miranda/agent.toml
+Environment=SVOS_AGENT_LISTEN=127.0.0.1:8407
+Environment=SVOS_KERNEL_URL=https://svos-kernel.phasefinal.com
+Environment=SVOS_BIFROST_KEY_FILE=/etc/svos/miranda/bifrost.key
+Environment=SVOS_AGENT_CREDENTIAL_FILE=/etc/svos/miranda/agent.credential
+ExecStart=/opt/svos/current/apps-env/bin/svos-agent
+[Install]
+WantedBy=default.target
@@ -0,0 +1,21 @@
+# eshpfi configs/svos-apps/nh3-dev/ (infra-ops, U13 2026-10-11): app-miranda beside the Hermes gateway it calls on
+# loopback (:8765). Reached by the kernel through https://svos-miranda.nh3.phasefinal.com (fleet Caddy -> :8408).
+# Credential /etc/svos/env/miranda.env (vault nh3-svos/svos-miranda-credential, from enrolling app-miranda).
+[Unit]
+Description=SVOS Miranda (app-miranda, U9a/U11)
+ConditionPathExists=/etc/svos/env/miranda.env
+[Service]
+Type=simple
+UMask=0077
+Restart=on-failure
+RestartSec=3
+TimeoutStopSec=20
+WorkingDirectory=/var/lib/svos/apps/miranda
+EnvironmentFile=/etc/svos/env/miranda.env
+Environment=SVOS_MIRANDA_CONFIG=/etc/svos/miranda/miranda.toml
+Environment=SVOS_DATA_ROOT=/var/lib/svos/apps/miranda
+Environment=SVOS_APP_LISTEN=127.0.0.1:8408
+Environment=SVOS_KERNEL_URL=https://svos-kernel.phasefinal.com
+ExecStart=/opt/svos/current/apps-env/bin/svos-miranda
+[Install]
+WantedBy=default.target
@@ -0,0 +1,21 @@
+# eshpfi configs/svos-apps/nh3-dev/ (infra-ops, U13 2026-10-11): the althing bridge (app-postoffice) as lkraven, the
+# herald's user, because it owns the miranda handle's box-local push route. The kernel calls it over plain LAN HTTP.
+# Config /var/lib/svos/config/apps/postoffice.toml; credential /etc/svos/env/postoffice.env (vault nh3-svos/svos-postoffice-credential).
+[Unit]
+Description=SVOS Post office bridge (app-postoffice, U9a)
+ConditionPathExists=/etc/svos/env/postoffice.env
+[Service]
+Type=simple
+UMask=0077
+Restart=on-failure
+RestartSec=3
+TimeoutStopSec=20
+WorkingDirectory=/var/lib/svos
+EnvironmentFile=/etc/svos/env/postoffice.env
+Environment=SVOS_KERNEL_URL=https://svos-kernel.phasefinal.com
+Environment=SVOS_DATA_ROOT=/var/lib/svos
+Environment=SVOS_APP_LISTEN=10.100.10.50:8406
+Environment=ALTHING_POST_OFFICE=http://10.100.50.40:8390
+ExecStart=/opt/svos/current/apps-env/bin/svos-postoffice
+[Install]
+WantedBy=default.target
@@ -0,0 +1,21 @@
+# eshpfi configs/svos-apps/nh3-dev/ (infra-ops, U13 2026-10-11): app-terminal as a USER unit of lkraven on nh3-dev.
+# It must be a user unit: its seat launcher runs `systemctl --user start zellij-fleet@Claude` and never parents the
+# zellij server. The kernel reaches it through https://svos-seathost.nh3.phasefinal.com (fleet Caddy -> :8404).
+# Config /var/lib/svos/config/apps/terminal.toml; credential /etc/svos/env/terminal.env (vault nh3-svos/svos-terminal-credential).
+[Unit]
+Description=SVOS Terminal connector + seat host (app-terminal, U8/U5b)
+ConditionPathExists=/etc/svos/env/terminal.env
+[Service]
+Type=simple
+UMask=0077
+Restart=on-failure
+RestartSec=3
+TimeoutStopSec=20
+WorkingDirectory=/var/lib/svos
+EnvironmentFile=/etc/svos/env/terminal.env
+Environment=SVOS_KERNEL_URL=https://svos-kernel.phasefinal.com
+Environment=SVOS_DATA_ROOT=/var/lib/svos
+Environment=SVOS_APP_LISTEN=127.0.0.1:8404
+ExecStart=/opt/svos/current/apps-env/bin/svos-terminal
+[Install]
+WantedBy=default.target