dank/command-center
1
0
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases Wiki Activity

docs: purge the retired workstation from the knowledge base

Browse Source 
Second half of the purge (the first covered the persona, AGENTS.md, README.md,
and the distillation of the per-host pages). Every remaining identifier is
gone: hostname, both LAN addresses, and the Wi-Fi SSID.

34 count-checked substitutions across 22 files — indexes, tool/research pages,
the inventory census, the changelog, one generated HTML report, and five
managed skills. Facts kept, names dropped: a history entry keeps its four-page
listing as a nameless summary, the syslog excerpts keep every timestamp and
line, and the census keeps the .zcompdump rows (the zsh version stamps are the
useful part, the hostname was not).

Deliberately unchanged: install.sh's --host case list and the
packages/<hostname>.pkgs filename, where the hostname is the lookup key.

Left out of scope by Frank's call: agent/memories/** — past-session records the
learn pipeline rewrites.

kb-lint: 0 violations. Residual grep for the hostname, its two IPs, and the
SSID across omp-docs/ and agent/managed-skills/: no hits.
This commit is contained in:
Frank
2026-09-28 16:37:38 -07:00
parent f1e0b6583d
commit 689228e60d
22 changed files with 100 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files
omp-docs/research/Alienware-M16a2-Linux-sleep-wake-issues.md
+1 -1
View File
@@ -21,7 +21,7 @@ The symptom — **screen stays black after waking from sleep (lid close)** — i
## 1. Known Issues with Alienware M16a2 + Linux Sleep States
### 1.1 Model Context
The Alienware m16 R2 (this system: dankware) is equipped with:
The Alienware m16 R2 (this system) is equipped with:
- **Intel Core Ultra 7 155H** (Meteor Lake, 6p+8e cores, 22 threads)
- **Intel Arc Graphics** (Meteor Lake-P iGPU)
- **NVIDIA GeForce RTX 4070 Laptop GPU** (AD106M, Max-Q/Mobile)
omp-docs/research/chezmoi-evaluation.md
+6 -6
View File
@@ -1,7 +1,7 @@
---
type: research
title: Chezmoi Evaluation for Dotfiles Management
description: Evaluation of chezmoi (v2.72.0) as a dotfiles management tool for the dankware fleet.
description: Evaluation of chezmoi (v2.72.0) as a dotfiles management tool for the workstation fleet.
resource: https://github.com/twpayne/chezmoi
timestamp: 2026-08-28
tags:
@@ -170,7 +170,7 @@ This allows plugging in any custom secrets backend.
— [Keychain and Windows Credentials Manager][keyring]
**This is relevant for dankware** — CachyOS uses GNOME Keyring (KDE uses kwallet, but the system has GNOME components). On the Strix Halo (Arch Linux) and RTX 3090 (FreeToken) boxes, GNOME Keyring or kwallet would be available depending on desktop environment.
**This is relevant for the workstation** — CachyOS uses GNOME Keyring (KDE uses kwallet, but the system has GNOME components). On the Strix Halo (Arch Linux) and RTX 3090 (FreeToken) boxes, GNOME Keyring or kwallet would be available depending on desktop environment.
---
@@ -272,7 +272,7 @@ The threat model is distinctive: **agents (Claude Code, OMP) can read any plaint
2. **In-memory secrets are acceptable.** If a secret flows through a password manager's API at apply time and lands only in the decrypted target file (not in git), the threat is reduced. The target file is only plaintext on the local machine where the agent runs — and the agent running there is the one that legitimately needs the secret.
3. **Keyring is the best Linux backend for this fleet.** GNOME Keyring stores secrets encrypted in-process; the agent process would need to invoke `chezmoi secret keyring get` to retrieve them, which means they transit through the CLI but never land in git. On dankware (CachyOS + niri), GNOME Keyring is the default. On the two ssh-able boxes, keyring support exists: *"chezmoi includes support for GNOME Keyring (on Linux and FreeBSD)."*
3. **Keyring is the best Linux backend for this fleet.** GNOME Keyring stores secrets encrypted in-process; the agent process would need to invoke `chezmoi secret keyring get` to retrieve them, which means they transit through the CLI but never land in git. On the workstation (CachyOS + niri), GNOME Keyring is the default. On the two ssh-able boxes, keyring support exists: *"chezmoi includes support for GNOME Keyring (on Linux and FreeBSD)."*
4. **gopass is a strong secondary option.** If gpg-agent is set up on all machines, gopass's git-backed encrypted store is well-suited. The template function `{{ gopass "$PASS_NAME" }}` retrieves secrets at apply time without ever storing them in the source repo.
@@ -336,7 +336,7 @@ Use symlinks for configs that external programs modify and must write back to (V
### Setup
- **Machine fleet:** dankware (Intel Ultra 7, CachyOS, niri), dankclaw (Strix Halo, llama.cpp frank-default-large on port 7770), dankserver (RTX 3090, FreeToken, frank-default-small)
- **Machine fleet:** the workstation (Intel Ultra 7, CachyOS, niri), dankclaw (Strix Halo, llama.cpp frank-default-large on port 7770), dankserver (RTX 3090, FreeToken, frank-default-small)
- **Central config repo:** `~/.omp` — already a git repo with agent config, model manifests, and the KB
- **OS mix:** All Linux, but different distros (CachyOS, Arch, custom FreeToken)
@@ -348,7 +348,7 @@ Use symlinks for configs that external programs modify and must write back to (V
2. **Builtin age encryption solves the agent-threat-model problem.** No external dependencies needed. SSH keys and config secrets in git are encrypted at rest.
3. **GNOME Keyring integration covers the Linux desktop path.** dankware runs CachyOS with GNOME Keyring available.
3. **GNOME Keyring integration covers the Linux desktop path.** The workstation runs CachyOS with GNOME Keyring available.
4. **Single binary distribution.** Go binary, no Python dependencies, no root install required — important for the ssh-able remote boxes.
@@ -385,7 +385,7 @@ encryption = "age"
5. `chezmoi add ~/.bashrc ~/.gitconfig ~/.config/ghostty` etc.
6. Use `chezmoi add --template` for machine-specific configs
7. Push source repo to GitHub (private repo)
8. On remote boxes: `chezmoi init --apply dankware/dotfiles`
8. On remote boxes: `chezmoi init --apply workstation/dotfiles`
### Risks and Mitigations
omp-docs/research/index.md
+1 -1
View File
@@ -13,6 +13,6 @@ Hardware-specific research and fix guides.
* [Sleep Fix Guide](Sleep-Fix-Guide.md) — Fix guide for Alienware M16a2 sleep/wake issues on CachyOS with NVIDIA RTX 40-series GPU.
* [Chezmoi Evaluation for Dotfiles Management](chezmoi-evaluation.md) — Evaluation of chezmoi (v2.72.0) as a dotfiles management tool for the dankware fleet.
* [Chezmoi Evaluation for Dotfiles Management](chezmoi-evaluation.md) — Evaluation of chezmoi (v2.72.0) as a dotfiles management tool for the workstation fleet.
* [Secrets Management for AI Agents in the Loop](secrets-for-agents.md) — Threat-modelled survey of secrets tools where agents have shell access and can read plaintext files and paste secrets into logs.