Files
cds-ai/atvm/docs/setup/run-learnings.md
anthony.wen 86b1a0e4a9 Scrub tracked secrets and switch ATVM docs to local credential references
- remove hardcoded credentials, tokens, registration codes, and similar secret values from tracked ATVM and CDS MCP docs
- replace those values with references to /home/aw/code/cds/.env.credentials.local and the corresponding environment variable names
- update current operator guides to instruct sourcing .env.credentials.local before credential-dependent setup and automation workflows
- update the ATVM setup scripts to consume ATVM_TARGET_PASSWORD from the environment instead of hardcoding the Ubuntu root SSH password
- scrub the remaining tracked artifact log entry that still included the old CMC registration code
- keep the local-only credential inventory in .env.credentials.local while leaving that file untracked
2026-03-24 17:32:44 -04:00

1.7 KiB

ATVM Setup Script Runs

This file stores run-specific examples only when a run produced a new learning relevant to future tasks.

Entry Rule

  • Add an entry only when the run changed workflow behavior, exposed a new failure mode, or confirmed a new required check.
  • Do not add routine runs with no new learning.

Run Learning: 2026-03-03 (Ubuntu 24.04)

  • Environment:
    • Initial IP: 192.168.0.89
    • Final static IP: 192.168.3.191
    • Hostname: atvm-codextest-vm-1
  • Learning:
    • Root SSH password workflow backed by ATVM_TARGET_PASSWORD and the log copy/hash verification path are valid end-to-end.
    • Wrapper must enforce identity arguments for run-and-collect mode.
  • Action for future runs:
    • Require EXPECTED_IP_ARG and EXPECTED_HOSTNAME_ARG for wrapper run-and-collect.

Run Learning: 2026-03-05 (RHEL 9)

  • Environment:
    • Initial IP: 192.168.3.212
    • Final static IP: 192.168.3.191
    • Hostname: atvm-codextest-vm-2
  • Learning:
    • SELinux disable path with reboot + post-reboot verifier worked.
    • Auto power-off can race controller-side log collection if done too early.
  • Action for future runs:
    • Keep client powered on until controller log copy + SHA256 verification completes.
    • Only then perform controller-side power-off when no real error lines are present.

Run Learning: 2026-03-06 (Oracle Linux 9)

  • Environment:
    • Initial IP: 192.168.0.121
    • Final static IP: 192.168.3.191
    • Hostname: atvm-codextest-vm
  • Learning:
    • Wrapper auto power-off was blocked by false-positive error detection from instructional text.
  • Action for future runs:
    • Match only real error log lines using ^\[ERROR\] for power-off gating.