- remove hardcoded credentials, tokens, registration codes, and similar secret values from tracked ATVM and CDS MCP docs - replace those values with references to /home/aw/code/cds/.env.credentials.local and the corresponding environment variable names - update current operator guides to instruct sourcing .env.credentials.local before credential-dependent setup and automation workflows - update the ATVM setup scripts to consume ATVM_TARGET_PASSWORD from the environment instead of hardcoding the Ubuntu root SSH password - scrub the remaining tracked artifact log entry that still included the old CMC registration code - keep the local-only credential inventory in .env.credentials.local while leaving that file untracked
1.7 KiB
1.7 KiB
ATVM Setup Script Runs
This file stores run-specific examples only when a run produced a new learning relevant to future tasks.
Entry Rule
- Add an entry only when the run changed workflow behavior, exposed a new failure mode, or confirmed a new required check.
- Do not add routine runs with no new learning.
Run Learning: 2026-03-03 (Ubuntu 24.04)
- Environment:
- Initial IP:
192.168.0.89 - Final static IP:
192.168.3.191 - Hostname:
atvm-codextest-vm-1
- Initial IP:
- Learning:
- Root SSH password workflow backed by
ATVM_TARGET_PASSWORDand the log copy/hash verification path are valid end-to-end. - Wrapper must enforce identity arguments for run-and-collect mode.
- Root SSH password workflow backed by
- Action for future runs:
- Require
EXPECTED_IP_ARGandEXPECTED_HOSTNAME_ARGfor wrapper run-and-collect.
- Require
Run Learning: 2026-03-05 (RHEL 9)
- Environment:
- Initial IP:
192.168.3.212 - Final static IP:
192.168.3.191 - Hostname:
atvm-codextest-vm-2
- Initial IP:
- Learning:
- SELinux disable path with reboot + post-reboot verifier worked.
- Auto power-off can race controller-side log collection if done too early.
- Action for future runs:
- Keep client powered on until controller log copy + SHA256 verification completes.
- Only then perform controller-side power-off when no real error lines are present.
Run Learning: 2026-03-06 (Oracle Linux 9)
- Environment:
- Initial IP:
192.168.0.121 - Final static IP:
192.168.3.191 - Hostname:
atvm-codextest-vm
- Initial IP:
- Learning:
- Wrapper auto power-off was blocked by false-positive error detection from instructional text.
- Action for future runs:
- Match only real error log lines using
^\[ERROR\]for power-off gating.
- Match only real error log lines using