loco/images-qubes-incus
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
65 commits 1 branch 0 tags 8.6 MiB
  • HCL 53.2%
  • Shell 46.8%
Find a file
Exact
statevault 1ed2f5c968 chore(state): migrate keyspace infra/qubes-incus -> images/qubes-incus 
The infra/* state keyspace predates the canonical <group>/<project>
convention from the umbrella migration (2026-05-01). Catch up to the
group prefix.

Migration steps (per ~/aienv/docs/runbooks/tofu-state-ops.md F):
1. GET infra/qubes-incus -> snapshot.json (7706 bytes).
2. POST snapshot.json -> images/qubes-incus.
3. Verify byte-identical.
4. Update versions.tf address/lock_address/unlock_address.
5. tofu init -reconfigure (no -migrate-state — state already moved).
6. tofu plan: "No changes." Zero-diff confirmed.
7. DELETE infra/qubes-incus.
8. bao.yml states: + states/images/qubes-incus.
9. CLAUDE.md state-path bullet updated.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-10 07:34:24 +02:00
docs docs: AppVM architecture + service container layout 2026-05-09 18:33:48 +02:00
images fix(scan): drop *.mesh targets + dedup zap findings by (template,host) 2026-05-07 19:33:31 +02:00
scripts feat(scan): zap iter 2.1 passive-only AF plan + build-images.sh refactor 2026-05-07 18:29:41 +02:00
.gitignore feat!: distrobuilder rewrite — drop cloud-init + Podman, native systemd in baked LXCs 2026-04-25 23:38:26 +02:00
.terraform.lock.hcl feat(qubes-incus): initial tofu project — Incus AppVM base resources 2026-04-19 21:21:52 +02:00
bao.yml chore(state): migrate keyspace infra/qubes-incus -> images/qubes-incus 2026-05-10 07:34:24 +02:00
CLAUDE.md chore(state): migrate keyspace infra/qubes-incus -> images/qubes-incus 2026-05-10 07:34:24 +02:00
devpi.tf feat!: distrobuilder rewrite — drop cloud-init + Podman, native systemd in baked LXCs 2026-04-25 23:38:26 +02:00
images.tf feat(zap): qi-zap LXC base — phase 5 iter 1 2026-05-07 16:48:58 +02:00
incus.tf feat(qubes-incus): initial tofu project — Incus AppVM base resources 2026-04-19 21:21:52 +02:00
odoo.tf feat(odoo): floating :17.0-latest tag — no LXC rebuild on image churn 2026-04-28 11:07:55 +02:00
scan.tf feat(scan): zap iter 3 — cross-LXC reconcile of qi-zap findings 2026-05-07 18:47:56 +02:00
services.tf feat(odoo): floating :17.0-latest tag — no LXC rebuild on image churn 2026-04-28 11:07:55 +02:00
squid.tf feat(qubes-incus): squid LXC + qi-trivy v2 (auto-refresh, forgejo auth, stale-cleanup) 2026-05-03 18:44:09 +02:00
trivy.tf feat(qubes-incus): track trivy.tf (was untracked locally) 2026-05-03 18:47:58 +02:00
variables.tf feat(qubes-incus): add mesh/bao variables + proxy-bao/proxy-svc service pattern 2026-04-19 23:26:46 +02:00
versions.tf chore(state): migrate keyspace infra/qubes-incus -> images/qubes-incus 2026-05-10 07:34:24 +02:00
zap.tf feat(zap): qi-zap LXC base — phase 5 iter 1 2026-05-07 16:48:58 +02:00
zot.tf fix(zot): shift=true on host-disk mount — needed for unprivileged LXC 2026-04-28 12:16:12 +02:00