From 559ad9041a65a33efa2d3912ec9353f23daebcf4 Mon Sep 17 00:00:00 2001 From: Garrett Allen <98648590+Gerrrt@users.noreply.github.com> Date: Tue, 8 Sep 2026 15:22:48 +0000 Subject: [PATCH] docs: the spare ProDesk is ordered; the rehearsal is what is left (#92) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Ordered 2026-09-08: an HP ProDesk 600 G4 Micro with the same i5-8500T and 32 GB as morpheus, a 512 GB SSD where morpheus has 1 TB. Same model is the point — pfSense stores interface assignments by device name, so identical hardware restores straight through. It still needs its own USB NIC for the switch-management LAN. Roadmap and README stop saying "buy" and say "rehearse"; hardware.md gets its row when it is on the bench, not before. Co-Authored-By: Claude Fable 5.1 --- README.md | 7 ++++--- docs/roadmap.md | 10 +++++++--- 2 files changed, 11 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index bcaa542..7299a43 100644 --- a/README.md +++ b/README.md @@ -325,15 +325,16 @@ Open work is tracked in [`docs/roadmap.md`](docs/roadmap.md) is the narrative — what is outstanding and why it is in that order. -The current top items: rack the shelf switch, and buy the spare ProDesk that -turns the firewall's restore runbook from a hypothesis into something rehearsed. +The current top items: rack the shelf switch, and rehearse the firewall restore +on the spare ProDesk — ordered 2026-09-08 — which turns that runbook from a +hypothesis into something rehearsed. The UPS is finished — a pack went into `mjolnir` on 2026-08-28, passed its self-test, and the card is set to test itself every fortnight ([#93](https://github.com/Gerrrt/HomeLab/issues/93)) — but the switch between the monitoring host and the network still has no battery at all, so both laptops stay running and go deaf on a mains cut ([#110](https://github.com/Gerrrt/HomeLab/issues/110)); and the config export -itself now leaves the monitoring host nightly, so the spare is what is left +itself now leaves the monitoring host nightly, so the rehearsal is what is left ([#92](https://github.com/Gerrrt/HomeLab/issues/92)). ## License diff --git a/docs/roadmap.md b/docs/roadmap.md index cbc263c..1ddbbe1 100644 --- a/docs/roadmap.md +++ b/docs/roadmap.md @@ -318,11 +318,15 @@ what left this one unfireable for months. converge in one run from any divergence. The far side's login shell is zsh, where an unmatched glob is fatal rather than literal, so the prune deletes by explicit basename and sends no pattern over the wire at all. - What remains is the spare — the same ProDesk model, racked on the #110 - shelf, powered off — and the rehearsal, which is what turns + What remains is the rehearsal, which is what turns [`restore-the-firewall.md`](runbooks/restore-the-firewall.md) from a hypothesis into a runbook; it now carries the bench procedure to follow and - what to record. Writing that procedure found the runbook's own decrypt + what to record. **The spare is ordered**, 2026-09-08: the same ProDesk 600 G4 + model with the same i5-8500T and 32 GB, a 512 GB SSD where `morpheus` has + 1 TB (a pfSense config is kilobytes, so nothing turns on that), in transit. + It still needs a USB NIC of its own for the switch-management LAN, which the + runbook calls out. When it arrives: bench rehearsal first, then the #110 + shelf, powered off. Writing that procedure found the runbook's own decrypt command had never been run: it passed `--input-type binary`, which sops rejects on the first byte of a real export, so a restore following the runbook would have stopped at step one. Fixed, and it is the kind of thing