Research-Stack/4-Infrastructure/infra/embedded_surface/profiles/racknerd-surface.json
Brandon Schneider a8a163650a fix(infra): resolve k3s services startup issues and update ingress configuration
- Revert builder image in embedded_surface Dockerfile to rust:bookworm for glibc compatibility with bookworm-slim runner.
- Replace racknerd-surface.json Git LFS pointer with the actual retrieved JSON config to resolve parse errors.
- Separated and imported regenerated docker images for stubs and credential-server on all cluster nodes.
- Fixed Ingress resources and middleware to target the correct authentik-server service name.
- Rewrote verification script checks to handle iptables-based ports and relative redirects robustly.
- Updated nixos-laptop IP in node topology documentation.

Build: 0 jobs, 0 errors
2026-05-27 17:39:00 -05:00

67 lines
1.7 KiB
JSON

{
"surface_version": "0.1",
"node_id": "racknerd-microvm-surface",
"role": "gcl-edge",
"mode_default": "normal",
"operational_model": "appliance",
"memory_budget_mb": 384,
"disk_budget_gb": 4,
"local_state_budget_mb": 128,
"api": {
"plain_health_port": 8444,
"websocket_port": 8444,
"bind": "public",
"tailscale_ip": "100.101.247.127"
},
"storage": {
"provider": "none",
"mount_point": "/mnt/topological-storage",
"remote": "",
"required_for_boot": false,
"write_mode": "outbox",
"spool_budget_mb": 64
},
"topological_substrate": {
"class": "racknerd-debian-carrier",
"carrier": "debian-systemd",
"kernel_exposes_primitives": true,
"vector_width_bits": 64,
"compute_slots": 1,
"memory_reserve_mb": 128,
"primitives": [
"health", "status", "metrics", "attest", "compress",
"rgflow", "route", "plan_route", "mount_status",
"snapshot", "receipt", "credentials"
],
"accelerators": []
},
"boot_strategy": {
"target_layer": "layer0",
"handoff": "none",
"linux_role": "host",
"destructive_handoff_allowed": false,
"rollback": {
"boot_entry": "rs-surface-last-good",
"provider_rescue": "rescue-mode"
},
"preserve": [
"serial_console",
"node_identity",
"last_good_receipt",
"rs_surface_profile"
],
"wipe": []
},
"capabilities": [
"health", "status", "metrics", "attest", "compress",
"rgflow", "route", "plan_route", "mount_status",
"snapshot", "recovery", "credentials", "primitives"
],
"disabled": [
"full_git_checkout",
"local_training",
"local_build",
"large_database",
"browser_session_state"
]
}