Archived

This repository has been archived on 2026-07-08. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

codex af49c053f1 finish(CUST-WP-0054): workstation independence engineering closeout

Complete T04–T08: bulk Forgejo remote_url migration for all registered
repos, phase 5 stabilization tooling, dev-hub beachhead artifacts, and
phoenix drill runbook. Archive workplan with T09/T10 as operator gates.

2026-07-08 11:42:49 +02:00

2.1 KiB

Raw Blame History

Phoenix Machine Drill Runbook (CUST-WP-0054-T08)

Date: 2026-07-08

Composes existing bootstrap pieces into one rehearsable machine-scale phoenix path. Live wipe/rebuild proof requires an operator-approved disposable target.

Entry Points

# Non-destructive prerequisite check
/home/worsch/the-custodian/tools/phoenix-drill.sh check

# Ordered drill plan (no execution)
/home/worsch/the-custodian/tools/phoenix-drill.sh plan

Composed Pieces

Layer	Source	Command / artifact
Node bootstrap	`railiance-cluster`	`make bootstrap` → `ansible/bootstrap.yml`
Secret custody	`railiance-platform` / NET-WP-0020	`make openbao-init-unseal`
Workload promotion	RAIL-BS-WP-0006	staged-promotion overlay + `railiance/app.toml`
Data restore	`railiance-infra`	`tools/forgejo-restore-drill.sh`
Ops evidence	`core-hub`	`make operator-cli CLI_ARGS="deployed-smoke ..."`
Hub coordination	`state-hub`	`make dev-hub` for local rebuild from files

Drill Sequence

Custody gate — operator holds unseal/init tokens; no secrets in Git.
Greenfield OS — ansible bootstrap on disposable target.
OpenBao + identity — NET-WP-0020 greenfield proof chain.
k3s join — cluster membership per railiance-cluster inventory.
Staged promotion — one non-critical workload overlay first (glas-harness probe).
Restore drill — CNPG backup/restore for one database workload.
Fleet mesh — atm- tunnels; verify no workstation relay in path.
Evidence — readiness-summary JSON, non-secret smoke ids, rollback commands.

Rollback

Each step records the inverse command before proceeding. Machine phoenix for coulombcore → railiance02 (T09) uses this same drill after Waves 1–7 complete.

References

docs/workstation-independence-fleet-architecture.md
docs/coulombcore-drain-placement-plan.md
history/2026-07-02-openbao-greenfield-init-unseal-proof.md (railiance-platform)
workplans/CUST-WP-0054-workstation-independence-and-fleet-realignment.md T08/T09

2.1 KiB Raw Blame History Unescape Escape