Repository navigation
Add the always-on control plane note and the tunnel keep design - #87
Merged
Merged
Conversation
docs/vps-control-plane.org records the decision to move the launcher and the canonical repositories off the laptop to an always-on host, the evidence behind it (what kills a ControlMaster mux, the pre-certificate history, the canonical inventory), and the build of that host on 2026-10-30: an EC2 Graviton instance named vantage in the ligon-research account, its disk and snapshot layout, the minimal-secrets posture (the BRC certificate covers every hop, including the login nodes and DTN, which accept it when offered), the clone of the canonicals, the mux-lifetime measurement, and the procedure that moved five live carleton-htc sessions by copying their session records. docs/tunnel-keep.org is the design, not implemented, of a per-target supervisor that re-warms the gateway mux, asks for an OTP only when the certificate cannot mint, keeps the TOTP seed off the box, and logs mux lifetimes. It cites the existing machinery it builds on (SshControl, _warm_free_tunnels, renew's failed-probe rule, timer_lifecycle's owner record, CredentialConfig) with line references, and notes that attach needs a classified exit before attach --keep can exist. One finding for the code, recorded in both notes and left for a separate change: the generated login and DTN ssh blocks name no identity, so a launcher without an ssh-agent cannot reach those hops even with a valid certificate; offering cert_file on every hop behind the gateway fixes it. docs/index.org links both notes under Architecture. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Both sides added entries under Architecture in docs/index.org; keep upstream's LLM-usage notes where they are and place the control-plane and tunnel-keep entries before Persistent Presence. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
The note's status header and its index entry still described a proposal; the host exists since 2026-10-30 and the measurement week is running. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Two docs notes and their index links; no code.
docs/vps-control-plane.org: the decision to move the launcher and the canonical repositories off the laptop to an always-on host, the evidence (what kills a ControlMaster mux, the pre-certificate history, the canonical inventory), and the record of building that host on 2026-10-30: an EC2 Graviton instance named vantage, disk and snapshot layout, the minimal-secrets posture (the BRC certificate covers every hop, including login nodes and DTN, which accept it when offered), the canonical clones, the mux-lifetime measurement, and the procedure that moved five live carleton-htc sessions by copying their session records.docs/tunnel-keep.org: design only, not implemented, of a per-target supervisor that re-warms the gateway mux, asks for an OTP only when the certificate cannot mint, keeps the TOTP seed off the box, and logs mux lifetimes. Cites the existing machinery it builds on with line references.One finding for the code, recorded in both notes and left for a separate change: the generated login and DTN ssh blocks name no identity, so a launcher without an ssh-agent cannot reach those hops even with a valid certificate; offering
cert_fileon every hop behind the gateway fixes it.🤖 Generated with Claude Code