Capture kais-macbook-pro -> ser8 reachability baseline through step.py #9

New issue

Closed

opened 2026-06-07 03:42:45 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-06-07 03:42:45 +00:00

Owner

Capture a kais-macbook-pro -> ser8 reachability baseline through scripts/step.py (the only anonymizing path), establishing ser8 as a second tracked target alongside kai-server.

Battery (session o2r VU8Q, now closed), all kernel-data-path probes green:

ping - rc 0, 0% loss
dig - rc 0, magicDNS resolves ser8
nc-ssh - rc 0, TCP :22 succeeded
ssh-exec - rc 255, but NETWORK is healthy: host key added, sshd reached, rejected with tailscale: failed to look up local user "kai". ser8 has no local kai account, so Tailscale SSH closes after connect. Config fact, not a connectivity fault.

Skipped nc-api (:6443) - ser8 is not the k3s control-plane node, so a closed apiserver port there is meaningless.

This is a hand-run prototype of the fleet full-mesh healthcheck (infrastructure#255): a second source->target cell, kernel-path probes, captured green. Public tier hand-scrubbed for the opaque tailnet suffix the anonymizer still misses (#3).

Capture a `kais-macbook-pro -> ser8` reachability baseline through `scripts/step.py` (the only anonymizing path), establishing ser8 as a second tracked target alongside kai-server. Battery (session o2r VU8Q, now closed), all kernel-data-path probes green: * ping - rc 0, 0% loss * dig - rc 0, magicDNS resolves ser8 * nc-ssh - rc 0, TCP :22 succeeded * ssh-exec - rc 255, but NETWORK is healthy: host key added, sshd reached, rejected with `tailscale: failed to look up local user "kai"`. ser8 has no local `kai` account, so Tailscale SSH closes after connect. Config fact, not a connectivity fault. Skipped `nc-api` (:6443) - ser8 is not the k3s control-plane node, so a closed apiserver port there is meaningless. This is a hand-run prototype of the fleet full-mesh healthcheck (infrastructure#255): a second source->target cell, kernel-path probes, captured green. Public tier hand-scrubbed for the opaque tailnet suffix the anonymizer still misses (#3).

coilysiren referenced this issue from a commit

2026-06-07 03:43:05 +00:00

feat(probe): capture kais-macbook-pro -> ser8 reachability baseline

coilysiren closed this issue

2026-06-07 03:43:05 +00:00

coilysiren referenced this issue

2026-06-07 03:45:15 +00:00

ser8 ssh-exec baseline: probe as coilysiren (ser8 has no kai user), re-bless green #10

coilysiren referenced this issue from a commit

2026-06-07 03:45:21 +00:00

fix(probe): re-baseline ser8 ssh-exec as coilysiren (was kai)

Commenting is not possible because the repository is archived.