coulomb/activity-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Keep Forgejo prune inventory outside replaceable checkouts
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 6s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
tegwick 2026-09-05 10:04:59 +02:00
parent 9d5eab5a87
commit 4083f3195a
4 changed files with 63 additions and 86 deletions
Download patch file Download diff file Expand all files Collapse all files

12
docs/runbook.md
View file

@ -602,7 +602,7 @@ Refresh protection list after cluster image rollouts:
# From workstation with both contexts, or merge scp'd exports on railiance01:
./scripts/refresh_live_images.sh
# railiance01 worker hostPath target:
OUT=~/railiance-platform/docs/evidence/live-images-all.txt \
OUT=~/.local/state/railiance-platform/live-images/all.txt \
EXTRA_LIVE_FILES=/path/to/coulombcore-export.txt \
./scripts/refresh_live_images.sh
```
@ -614,7 +614,7 @@ cd ~/railiance-platform
export VAULT_ADDR=https://bao.coulomb.social
# OIDC or platform token — never paste PAT into chat
export FORGEJO_TOKEN=$(bao kv get -field=API_TOKEN platform/workloads/forgejo/forgejo-admin)
./tools/cmd/forgejo-package-prune --apply --live-images-file docs/evidence/live-images-all.txt
./tools/cmd/forgejo-package-prune --apply --live-images-file ~/.local/state/railiance-platform/live-images/all.txt
```
`weekly-sbom-staleness` is emergency-paused in source and production. Its
@ -1025,3 +1025,11 @@ uv run alembic upgrade head
uv run python src/activity_core/seed.py
# Re-register search attributes (see Dev environment step 4)
```
Inventory durability (RPF-WP-0028): the worker mounts the host inventory directory
read-only at `/var/lib/railiance-platform/live-images`; the weekly definition uses
`all.txt` there. `make refresh-live-images` uses the platform publisher and keeps
prior cluster tags on export failure. Run the host hook
`~/.local/bin/railiance-live-images-refresh` after each cluster image rollout.
The helper installation is versioned outside both repository checkouts.