3 Commits (b65fe69088392b355d9c5ef27287c00a79b7f987)

Author	SHA1	Message	Date
nexxo	b65fe69088	fix(engine): drop wg peer on host removal; clear reboot state on deadline fail ... - Removing a host now removes its WireGuard hub peer so a freed wg_ip can't route to the removed server via a stale peer. - RebootIntoPveKernel clears reboot_issued/deadline when it times out, so the manual retry action actually re-issues a reboot instead of failing instantly. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 10:46:11 +02:00
nexxo	62c4412623	fix(engine): address Codex round 2 (poll budget, host error state, wg race) ... - StepResult::poll — polling steps (reboot) wait without consuming the retry budget; the step owns its deadline. Reboot maxDuration > deadline. - Failed runs move a Host subject to 'error' via ProvisioningSubject hook (no host stuck 'onboarding'). - ConfigureWireguard allocates + reserves the wg_ip under a global lock; unique index on hosts.wg_ip as a backstop against duplicate addresses. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 10:26:37 +02:00
nexxo	ac3d17cd6a	feat(engine): 11-step host onboarding pipeline (SSH -> WG -> Proxmox) ... Idempotent steps: validate, ssh-trust (deploy key + scrub password), prepare base, wireguard (hub peer), install proxmox-ve, reboot-into-pve (retry-poll), configure, automation token, verify api, register capacity, complete. StartHostOnboarding action. 22 tests incl. mocked end-to-end + crash idempotency. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 10:04:39 +02:00