vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity
Files
5ccb6c3118ad246e854baca69dcae38486bccd27
esh-pfi-infrastructure/servers/corviduo-dev/system-details.txt
T
vh 9523343d3a servers/corviduo-dev: add Worldtree-team dev VM to inventory 
Captures the access path + emergency-ops runbook surfaced during the
2026-05-12 demo outage (Z_AI_API_KEY / runtime validator / :latest tag
drift cascade).

- servers/corviduo-dev/{README.md,ssh-target,system-details.txt}
- CLAUDE.md servers table + placement-rules note

The "docker-as-root sudo bypass" pattern (vh's docker-group membership
→ effective root for any bind-mount-able operation) is the canonical
fix path when /opt/worldtree*/.env edits are needed and the deploy
user's sudo is out of reach. The README documents the pattern with
the appropriate "docker-group ≈ sudo" security warning so future
emergency-ops sessions don't have to re-derive it.

Ownership stance matches SF client hosts: PFI hosts + provides
emergency-ops backstop, Worldtree-team owns OS config / deploys /
backup decisions. Coordinate data-affecting work with the architect.
2026-05-12 23:36:11 -07:00

150 lines
11 KiB
Plaintext
Raw Blame History

===== HOST =====
Hostname: corviduo-dev.corviduo.com
Date: 2026-05-12T23:35:49-07:00
Uptime: up 8 hours, 2 minutes
OS: Debian GNU/Linux 13 (trixie)
Kernel: 6.12.86+deb13-amd64
Arch: x86_64
===== HARDWARE =====
CPU cores: 8
CPU model: QEMU Virtual CPU version 2.5+
MemTotal: 7.8 GB
MemAvailable: 4.7 GB
===== GPUS =====
nvidia-smi not present (no NVIDIA GPUs or driver not installed)
===== FILESYSTEMS (df) =====
Filesystem Size Used Avail Use% Mounted on
/dev/sda1 75G 6.3G 65G 9% /
===== PERSISTENT MOUNTS (/etc/fstab, non-comment) =====
UUID=9ca22423-981c-4ce2-a312-768ad50d7ecb / ext4 errors=remount-ro 0 1
UUID=f75418e9-b015-4cbb-9254-67ed08b5851a none swap sw 0 0
/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
===== TARGETED DATA PATHS =====
/opt (total: 48K)
total 24
drwxr-xr-x 6 root root 4096 2026-05-11 14:37 .
drwxr-xr-x 18 root root 4096 2026-05-08 10:46 ..
drwx--x--x 4 root root 4096 2026-05-08 12:32 containerd
drwxr-xr-x 2 deploy deploy 4096 2026-05-12 23:08 worldtree
drwxr-xr-x 2 deploy deploy 4096 2026-05-12 23:08 worldtree-personal
drwxr-xr-x 2 deploy deploy 4096 2026-05-12 23:08 worldtree-pinned
/var/lib/docker (total: 4.0K)
/srv (total: 4.0K)
total 8
drwxr-xr-x 2 root root 4096 2026-05-08 10:44 .
drwxr-xr-x 18 root root 4096 2026-05-08 10:46 ..
===== DOCKER =====
Server: 29.4.3 Client: 29.4.3
----- docker info -----
Containers: 6 (running 6, paused 0, stopped 0)
Images: 17
Runtimes: map[io.containerd.runc.v2:{{runc [] map[]} map[org.opencontainers.runtime-spec.features:{"ociVersionMin":"1.0.0","ociVersionMax":"1.2.1","hooks":["prestart","createRuntime","createContainer","startContainer","poststart","poststop"],"mountOptions":["async","atime","bind","defaults","dev","diratime","dirsync","exec","iversion","lazytime","loud","mand","noatime","nodev","nodiratime","noexec","noiversion","nolazytime","nomand","norelatime","nostrictatime","nosuid","nosymfollow","private","ratime","rbind","rdev","rdiratime","relatime","remount","rexec","rnoatime","rnodev","rnodiratime","rnoexec","rnorelatime","rnostrictatime","rnosuid","rnosymfollow","ro","rprivate","rrelatime","rro","rrw","rshared","rslave","rstrictatime","rsuid","rsymfollow","runbindable","rw","shared","silent","slave","strictatime","suid","symfollow","sync","tmpcopyup","unbindable"],"linux":{"namespaces":["cgroup","ipc","mount","network","pid","time","user","uts"],"capabilities":["CAP_CHOWN","CAP_DAC_OVERRIDE","CAP_DAC_READ_SEARCH","CAP_FOWNER","CAP_FSETID","CAP_KILL","CAP_SETGID","CAP_SETUID","CAP_SETPCAP","CAP_LINUX_IMMUTABLE","CAP_NET_BIND_SERVICE","CAP_NET_BROADCAST","CAP_NET_ADMIN","CAP_NET_RAW","CAP_IPC_LOCK","CAP_IPC_OWNER","CAP_SYS_MODULE","CAP_SYS_RAWIO","CAP_SYS_CHROOT","CAP_SYS_PTRACE","CAP_SYS_PACCT","CAP_SYS_ADMIN","CAP_SYS_BOOT","CAP_SYS_NICE","CAP_SYS_RESOURCE","CAP_SYS_TIME","CAP_SYS_TTY_CONFIG","CAP_MKNOD","CAP_LEASE","CAP_AUDIT_WRITE","CAP_AUDIT_CONTROL","CAP_SETFCAP","CAP_MAC_OVERRIDE","CAP_MAC_ADMIN","CAP_SYSLOG","CAP_WAKE_ALARM","CAP_BLOCK_SUSPEND","CAP_AUDIT_READ","CAP_PERFMON","CAP_BPF","CAP_CHECKPOINT_RESTORE"],"cgroup":{"v1":true,"v2":true,"systemd":true,"systemdUser":true,"rdma":true},"seccomp":{"enabled":true,"actions":["SCMP_ACT_ALLOW","SCMP_ACT_ERRNO","SCMP_ACT_KILL","SCMP_ACT_KILL_PROCESS","SCMP_ACT_KILL_THREAD","SCMP_ACT_LOG","SCMP_ACT_NOTIFY","SCMP_ACT_TRACE","SCMP_ACT_TRAP"],"operators":["SCMP_CMP_EQ","SCMP_CMP_GE","SCMP_CMP_GT","SCMP_CMP_LE","SCMP_CMP_LT","SCMP_CMP_MASKED_EQ","SCMP_CMP_NE"],"archs":["SCMP_ARCH_AARCH64","SCMP_ARCH_ARM","SCMP_ARCH_MIPS","SCMP_ARCH_MIPS64","SCMP_ARCH_MIPS64N32","SCMP_ARCH_MIPSEL","SCMP_ARCH_MIPSEL64","SCMP_ARCH_MIPSEL64N32","SCMP_ARCH_PPC","SCMP_ARCH_PPC64","SCMP_ARCH_PPC64LE","SCMP_ARCH_RISCV64","SCMP_ARCH_S390","SCMP_ARCH_S390X","SCMP_ARCH_X32","SCMP_ARCH_X86","SCMP_ARCH_X86_64"],"knownFlags":["SECCOMP_FILTER_FLAG_TSYNC","SECCOMP_FILTER_FLAG_SPEC_ALLOW","SECCOMP_FILTER_FLAG_LOG"],"supportedFlags":["SECCOMP_FILTER_FLAG_TSYNC","SECCOMP_FILTER_FLAG_SPEC_ALLOW","SECCOMP_FILTER_FLAG_LOG"]},"apparmor":{"enabled":true},"selinux":{"enabled":true},"intelRdt":{"enabled":true},"mountExtensions":{"idmap":{"enabled":true}}},"annotations":{"io.github.seccomp.libseccomp.version":"2.6.0","org.opencontainers.runc.checkpoint.enabled":"true","org.opencontainers.runc.commit":"v1.3.5-0-g488fc13e","org.opencontainers.runc.version":"1.3.5\n"},"potentiallyUnsafeConfigAnnotations":["bundle","org.systemd.property.","org.criu.config"]}]} runc:{{runc [] map[]} map[org.opencontainers.runtime-spec.features:{"ociVersionMin":"1.0.0","ociVersionMax":"1.2.1","hooks":["prestart","createRuntime","createContainer","startContainer","poststart","poststop"],"mountOptions":["async","atime","bind","defaults","dev","diratime","dirsync","exec","iversion","lazytime","loud","mand","noatime","nodev","nodiratime","noexec","noiversion","nolazytime","nomand","norelatime","nostrictatime","nosuid","nosymfollow","private","ratime","rbind","rdev","rdiratime","relatime","remount","rexec","rnoatime","rnodev","rnodiratime","rnoexec","rnorelatime","rnostrictatime","rnosuid","rnosymfollow","ro","rprivate","rrelatime","rro","rrw","rshared","rslave","rstrictatime","rsuid","rsymfollow","runbindable","rw","shared","silent","slave","strictatime","suid","symfollow","sync","tmpcopyup","unbindable"],"linux":{"namespaces":["cgroup","ipc","mount","network","pid","time","user","uts"],"capabilities":["CAP_CHOWN","CAP_DAC_OVERRIDE","CAP_DAC_READ_SEARCH","CAP_FOWNER","CAP_FSETID","CAP_KILL","CAP_SETGID","CAP_SETUID","CAP_SETPCAP","CAP_LINUX_IMMUTABLE","CAP_NET_BIND_SERVICE","CAP_NET_BROADCAST","CAP_NET_ADMIN","CAP_NET_RAW","CAP_IPC_LOCK","CAP_IPC_OWNER","CAP_SYS_MODULE","CAP_SYS_RAWIO","CAP_SYS_CHROOT","CAP_SYS_PTRACE","CAP_SYS_PACCT","CAP_SYS_ADMIN","CAP_SYS_BOOT","CAP_SYS_NICE","CAP_SYS_RESOURCE","CAP_SYS_TIME","CAP_SYS_TTY_CONFIG","CAP_MKNOD","CAP_LEASE","CAP_AUDIT_WRITE","CAP_AUDIT_CONTROL","CAP_SETFCAP","CAP_MAC_OVERRIDE","CAP_MAC_ADMIN","CAP_SYSLOG","CAP_WAKE_ALARM","CAP_BLOCK_SUSPEND","CAP_AUDIT_READ","CAP_PERFMON","CAP_BPF","CAP_CHECKPOINT_RESTORE"],"cgroup":{"v1":true,"v2":true,"systemd":true,"systemdUser":true,"rdma":true},"seccomp":{"enabled":true,"actions":["SCMP_ACT_ALLOW","SCMP_ACT_ERRNO","SCMP_ACT_KILL","SCMP_ACT_KILL_PROCESS","SCMP_ACT_KILL_THREAD","SCMP_ACT_LOG","SCMP_ACT_NOTIFY","SCMP_ACT_TRACE","SCMP_ACT_TRAP"],"operators":["SCMP_CMP_EQ","SCMP_CMP_GE","SCMP_CMP_GT","SCMP_CMP_LE","SCMP_CMP_LT","SCMP_CMP_MASKED_EQ","SCMP_CMP_NE"],"archs":["SCMP_ARCH_AARCH64","SCMP_ARCH_ARM","SCMP_ARCH_MIPS","SCMP_ARCH_MIPS64","SCMP_ARCH_MIPS64N32","SCMP_ARCH_MIPSEL","SCMP_ARCH_MIPSEL64","SCMP_ARCH_MIPSEL64N32","SCMP_ARCH_PPC","SCMP_ARCH_PPC64","SCMP_ARCH_PPC64LE","SCMP_ARCH_RISCV64","SCMP_ARCH_S390","SCMP_ARCH_S390X","SCMP_ARCH_X32","SCMP_ARCH_X86","SCMP_ARCH_X86_64"],"knownFlags":["SECCOMP_FILTER_FLAG_TSYNC","SECCOMP_FILTER_FLAG_SPEC_ALLOW","SECCOMP_FILTER_FLAG_LOG"],"supportedFlags":["SECCOMP_FILTER_FLAG_TSYNC","SECCOMP_FILTER_FLAG_SPEC_ALLOW","SECCOMP_FILTER_FLAG_LOG"]},"apparmor":{"enabled":true},"selinux":{"enabled":true},"intelRdt":{"enabled":true},"mountExtensions":{"idmap":{"enabled":true}}},"annotations":{"io.github.seccomp.libseccomp.version":"2.6.0","org.opencontainers.runc.checkpoint.enabled":"true","org.opencontainers.runc.commit":"v1.3.5-0-g488fc13e","org.opencontainers.runc.version":"1.3.5\n"},"potentiallyUnsafeConfigAnnotations":["bundle","org.systemd.property.","org.criu.config"]}]}]
Default runtime: runc
Storage driver: overlayfs
Root dir: /var/lib/docker
Server version: 29.4.3
----- running containers -----
NAMES IMAGE STATUS PORTS
worldtree-worldtree-api-1 gitea.phasefinal.com/vh/worldtree:8ef380170ed2 Up 11 minutes (healthy) 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp
worldtree-worldtree-matrix-1 gitea.phasefinal.com/vh/worldtree:8ef380170ed2 Up 11 minutes 0.0.0.0:8009->8009/tcp, [::]:8009->8009/tcp, 8080/tcp
worldtree-pinned-worldtree-matrix-1 gitea.phasefinal.com/vh/worldtree:latest Up 16 minutes 8080/tcp, 0.0.0.0:8011->8009/tcp, [::]:8011->8009/tcp
worldtree-pinned-worldtree-api-1 gitea.phasefinal.com/vh/worldtree:latest Up 16 minutes (healthy) 0.0.0.0:8082->8080/tcp, [::]:8082->8080/tcp
worldtree-personal-worldtree-api-1 c49fcffc380f Up 25 minutes (healthy) 0.0.0.0:8081->8080/tcp, [::]:8081->8080/tcp
worldtree-personal-worldtree-matrix-1 c49fcffc380f Up 25 minutes 8080/tcp, 0.0.0.0:8010->8009/tcp, [::]:8010->8009/tcp
----- all containers -----
NAMES IMAGE STATUS
worldtree-worldtree-api-1 gitea.phasefinal.com/vh/worldtree:8ef380170ed2 Up 11 minutes (healthy)
worldtree-worldtree-matrix-1 gitea.phasefinal.com/vh/worldtree:8ef380170ed2 Up 11 minutes
worldtree-pinned-worldtree-matrix-1 gitea.phasefinal.com/vh/worldtree:latest Up 16 minutes
worldtree-pinned-worldtree-api-1 gitea.phasefinal.com/vh/worldtree:latest Up 16 minutes (healthy)
worldtree-personal-worldtree-api-1 c49fcffc380f Up 25 minutes (healthy)
worldtree-personal-worldtree-matrix-1 c49fcffc380f Up 25 minutes
----- networks -----
NAME DRIVER SCOPE
bridge bridge local
host host local
none null local
worldtree-personal_default bridge local
worldtree-pinned_default bridge local
worldtree_default bridge local
----- networks (external, non-default — worth knowing for compose external: true) -----
worldtree-personal_default
worldtree-pinned_default
worldtree_default
----- named volumes -----
VOLUME NAME DRIVER
worldtree-personal_worldtree-kb local
worldtree-personal_worldtree-sessions local
worldtree-personal_worldtree-state local
worldtree-pinned_worldtree-kb local
worldtree-pinned_worldtree-sessions local
worldtree-pinned_worldtree-state local
worldtree_worldtree-kb local
worldtree_worldtree-sessions local
worldtree_worldtree-state local
----- compose projects currently running -----
worldtree
worldtree-personal
worldtree-pinned
===== COMPOSE FILES (/opt/docker/compose/) =====
/opt/docker/compose not present
===== CONFIG LAYOUT (/opt/docker/conf/ — top 200 entries) =====
/opt/docker/conf not present
===== LISTENING PORTS =====
0.0.0.0:22
0.0.0.0:8009
0.0.0.0:8010
0.0.0.0:8011
0.0.0.0:8080
0.0.0.0:8081
0.0.0.0:8082
[::]:22
[::]:8009
[::]:8010
[::]:8011
[::]:8080
[::]:8081
[::]:8082
===== MODEL / HUGGINGFACE CACHES =====
===== DOCKER-ADJACENT SYSTEMD SERVICES =====
containerd.service running
docker.service running
===== DONE =====
Paste the above back into the chat, or pass a path as argv[1] to save.
Reference in New Issue View Git Blame Copy Permalink