- remove hardcoded credentials, tokens, registration codes, and similar secret values from tracked ATVM and CDS MCP docs - replace those values with references to /home/aw/code/cds/.env.credentials.local and the corresponding environment variable names - update current operator guides to instruct sourcing .env.credentials.local before credential-dependent setup and automation workflows - update the ATVM setup scripts to consume ATVM_TARGET_PASSWORD from the environment instead of hardcoding the Ubuntu root SSH password - scrub the remaining tracked artifact log entry that still included the old CMC registration code - keep the local-only credential inventory in .env.credentials.local while leaving that file untracked
41 lines
1.7 KiB
Markdown
41 lines
1.7 KiB
Markdown
# ATVM Setup Script Runs
|
|
|
|
This file stores run-specific examples only when a run produced a new learning relevant to future tasks.
|
|
|
|
## Entry Rule
|
|
- Add an entry only when the run changed workflow behavior, exposed a new failure mode, or confirmed a new required check.
|
|
- Do not add routine runs with no new learning.
|
|
|
|
## Run Learning: 2026-03-03 (Ubuntu 24.04)
|
|
- Environment:
|
|
- Initial IP: `192.168.0.89`
|
|
- Final static IP: `192.168.3.191`
|
|
- Hostname: `atvm-codextest-vm-1`
|
|
- Learning:
|
|
- Root SSH password workflow backed by `ATVM_TARGET_PASSWORD` and the log copy/hash verification path are valid end-to-end.
|
|
- Wrapper must enforce identity arguments for run-and-collect mode.
|
|
- Action for future runs:
|
|
- Require `EXPECTED_IP_ARG` and `EXPECTED_HOSTNAME_ARG` for wrapper run-and-collect.
|
|
|
|
## Run Learning: 2026-03-05 (RHEL 9)
|
|
- Environment:
|
|
- Initial IP: `192.168.3.212`
|
|
- Final static IP: `192.168.3.191`
|
|
- Hostname: `atvm-codextest-vm-2`
|
|
- Learning:
|
|
- SELinux disable path with reboot + post-reboot verifier worked.
|
|
- Auto power-off can race controller-side log collection if done too early.
|
|
- Action for future runs:
|
|
- Keep client powered on until controller log copy + SHA256 verification completes.
|
|
- Only then perform controller-side power-off when no real error lines are present.
|
|
|
|
## Run Learning: 2026-03-06 (Oracle Linux 9)
|
|
- Environment:
|
|
- Initial IP: `192.168.0.121`
|
|
- Final static IP: `192.168.3.191`
|
|
- Hostname: `atvm-codextest-vm`
|
|
- Learning:
|
|
- Wrapper auto power-off was blocked by false-positive error detection from instructional text.
|
|
- Action for future runs:
|
|
- Match only real error log lines using `^\[ERROR\]` for power-off gating.
|