feat(deploy): reusable actor compose and proxmox promotion app #5

Merged
nsaspy merged 1 commit from actor-compose-promotion into master 2026-09-07 05:06:03 +00:00
Owner

deploy/compose.yml: env-driven reusable actor-service compose (staging eval). nix run .#promote-bbpd: gated promotion to the Proxmox ingest host CT114 (starintel) — builds prod image, ships+loads it, generates prod config on-host from host-local secrets, joins starintel_backend. Verified: nix flake check, compose config eval, config generator (0600, valid TOML), promotion gate refusal (exit 2 without --arm-real-recon).

deploy/compose.yml: env-driven reusable actor-service compose (staging eval). nix run .#promote-bbpd: gated promotion to the Proxmox ingest host CT114 (starintel) — builds prod image, ships+loads it, generates prod config on-host from host-local secrets, joins starintel_backend. Verified: nix flake check, compose config eval, config generator (0600, valid TOML), promotion gate refusal (exit 2 without --arm-real-recon).
feat(deploy): reusable actor compose and proxmox promotion app
Some checks failed
CI / Config safety (pull_request) Successful in 4s
CI / Nix build and flake check (pull_request) Failing after 7s
CI / Python 3.10 (pull_request) Failing after 39s
CI / Python 3.13 (pull_request) Failing after 42s
CI / Determinism Python 3.13 (pull_request) Failing after 43s
CI / Determinism Python 3.10 (pull_request) Failing after 44s
CI / Cross-version deterministic serialization (pull_request) Has been skipped
CI / RabbitMQ routing replay and settlement (pull_request) Failing after 59s
CI / Quality gate (pull_request) Failing after 2s
fba5e6ecd9
deploy/compose.yml runs any StarIntel actor container driven by env
(ACTOR_IMAGE, ACTOR_CONFIG, ACTOR_CONTAINER, STARINTEL_NETWORK), evaluated
in staging against the local starintel stack. nix run .#promote-bbpd
promotes the verified staging actor to the Proxmox ingest host (CT114
starintel): builds the prod image, ships it, generates the prod config
on that host from its own secrets (credentials never transported), and
joins the existing starintel_backend network. Refuses without
--arm-real-recon and a running staging eval.
nsaspy merged commit e22fc0dc04 into master 2026-09-07 05:06:03 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
nsaspy/star-bbpd!5
No description provided.