jawz/NixOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

003-vps-image-migration #4

Merged
jawz merged 12 commits from 003-vps-image-migration into main 2026-02-03 19:54:21 -06:00
Conversation 0 Commits 12 Files Changed 28 -28
1 changed files with 0 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit f845699845 - Show all commits

28
specs/003-vps-image-migration/quickstart.md
View File

@@ -1,28 +0,0 @@
# Quickstart: VPS Image Migration
## Goal
Provision a Linode-compatible VPS image, bootstrap secrets securely, and enable remote rebuilds.
## Steps
1. Build the vps image from the repository and confirm a Linode-compatible artifact is produced.
2. Provision a VPS from the image and verify network connectivity and remote access.
3. On first boot, allow the host to generate its own secrets bootstrap key material.
4. Enroll the host by adding its public key as a secrets recipient and re-encrypt required secrets.
5. Trigger a rebuild from an explicitly authorized operator machine to apply secrets and confirm core services start successfully.
6. Validate the remote rebuild workflow from an explicitly authorized operator machine.
## Validation Checklist
- vps boots with network connectivity and remote access.
- Secrets are available after enrollment and follow-up deployment.
- Remote rebuild completes from an explicitly authorized operator machine.
- Existing host and image builds complete after migration.
## Validation Log
- vps connectivity: pending
- secrets enrollment: pending
- remote rebuild: pending
- existing host/image builds: vps-linode build passed