docs: purge the retired workstation from the knowledge base
Second half of the purge (the first covered the persona, AGENTS.md, README.md, and the distillation of the per-host pages). Every remaining identifier is gone: hostname, both LAN addresses, and the Wi-Fi SSID. 34 count-checked substitutions across 22 files — indexes, tool/research pages, the inventory census, the changelog, one generated HTML report, and five managed skills. Facts kept, names dropped: a history entry keeps its four-page listing as a nameless summary, the syslog excerpts keep every timestamp and line, and the census keeps the .zcompdump rows (the zsh version stamps are the useful part, the hostname was not). Deliberately unchanged: install.sh's --host case list and the packages/<hostname>.pkgs filename, where the hostname is the lookup key. Left out of scope by Frank's call: agent/memories/** — past-session records the learn pipeline rewrites. kb-lint: 0 violations. Residual grep for the hostname, its two IPs, and the SSID across omp-docs/ and agent/managed-skills/: no hits.
This commit is contained in:
Frank
@@ -1,6 +1,6 @@
|
||||
---
|
||||
name: freetoken-dankclaw-build
|
||||
description: "Build FreeToken on Dankclaw (Dankware) — installs CUDA toolkit, sets CUDA_HOME, handles nvcc/CUDA version mismatch"
|
||||
description: "Build FreeToken on Dankclaw — installs CUDA toolkit, sets CUDA_HOME, handles nvcc/CUDA version mismatch"
|
||||
---
|
||||
|
||||
## Build FreeToken on Dankclaw
|
||||
|
||||
@@ -29,6 +29,6 @@ Produce a self-contained HTML report of repo work in a time window and open it i
|
||||
- Literal `{}` in HTML text (e.g. `fallbackChains: {}`) inside an f-string is a SyntaxError — build that fragment by concatenation or double the braces.
|
||||
|
||||
## Delivery + verification
|
||||
- Write to `$HOME/Reports/<repo>-<window>-<date>.html` (outside repo, tree stays clean; create the dir — on Dankware that is /home/blank/Reports, on dank hosts /home/dank/Reports).
|
||||
- Write to `$HOME/Reports/<repo>-<window>-<date>.html` (outside repo, tree stays clean; create the dir — on a workstation account that is /home/blank/Reports, on dank hosts /home/dank/Reports).
|
||||
- Validate: python HTMLParser feed (parse errors) + open in headless browser (`write` JSON to xd://browser: open → run with `document.querySelectorAll` counts) → close tab. Element counts are sufficient proof; a fullPage screenshot of a long report returns a multi-MB raw pixel buffer dump — only screenshot short pages.
|
||||
- Open for Frank: `nohup firefox --new-tab file:///<path> >/dev/null 2>&1 & disown`.
|
||||
|
||||
@@ -6,7 +6,7 @@ description: "Edit live Noctalia v5 shell config on a fleet host over SSH: which
|
||||
# Noctalia config edit over SSH (v5 native, both fleet hosts)
|
||||
|
||||
## Current architecture (since 2026-09-10 unification)
|
||||
Both dankware and blankpad run the bare `noctalia` v5 binary as the desktop shell (launch: niri `spawn-at-startup "noctalia"`). The old Quickshell-hosted v4 architecture (`qs -c noctalia-shell`, JSON config) is retired on both hosts. Live config layer = TOML only:
|
||||
Both the workstation and blankpad run the bare `noctalia` v5 binary as the desktop shell (launch: niri `spawn-at-startup "noctalia"`). The old Quickshell-hosted v4 architecture (`qs -c noctalia-shell`, JSON config) is retired on both hosts. Live config layer = TOML only:
|
||||
- Hand-edit declarative layer: `~/.config/noctalia/<name>.toml` (e.g. `config.toml`).
|
||||
- Runtime state file `~/.local/state/noctalia/settings.toml` loads LAST and overrides declarative values for the same keys — never hand-edit it; UI/IPC writes land there.
|
||||
|
||||
|
||||
@@ -4,7 +4,7 @@ description: "Runbook for password-auth SSH exec/file-ship to fleet hosts whose
|
||||
---
|
||||
|
||||
## When
|
||||
Running remote commands or shipping files over SSH to a host whose login shell is **fish** (blankpad: user `blank`, reachable only as mDNS FQDN `blankpad.local` / 192.168.0.83 — bare hostname does not resolve from Dankware).
|
||||
Running remote commands or shipping files over SSH to a host whose login shell is **fish** (blankpad: user `blank`, reachable only as mDNS FQDN `blankpad.local` / 192.168.0.83 — bare hostname does not resolve from the workstation).
|
||||
|
||||
## Procedure
|
||||
1. **Auth**: `SSHPASS='<pw>' sshpass -e ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no user@host '...'` — password via env, never argv (ps-visible).
|
||||
|
||||
@@ -0,0 +1,46 @@
|
||||
---
|
||||
name: wol-wake-sleeping-fleet-host
|
||||
description: "Wake a sleeping fleet host (e.g. the FrankBook-Pro Mac mini) over the network with a Wake-on-LAN magic packet, and diagnose why it silently fails."
|
||||
---
|
||||
|
||||
Wake a sleeping fleet host over the network with a Wake-on-LAN (WoL) magic packet.
|
||||
|
||||
## When
|
||||
A fleet host is asleep (100% ping loss; `ip neigh show <ip>` shows STALE or FAILED) and you need it up — e.g. the Playwright e2e `11-admin` spec needs the Mac mini, or a service on it is down. Recurring on the FrankBook-Pro Mac mini, which sleeps and breaks the e2e suite.
|
||||
|
||||
## 1. Find the MAC (the host is asleep, so you can't ask it)
|
||||
- `ip neigh show <ip>` — even a **STALE** entry carries the MAC. Fastest source.
|
||||
- Fallback: Pi-hole / dnsmasq leases, the DHCP server, or fleet docs.
|
||||
- Known: **FrankBook-Pro Mac mini = 192.168.0.112, MAC `de:6b:6d:c1:52:23`.**
|
||||
|
||||
## 2. Send the magic packet
|
||||
- Format: `6×0xFF + 16×MAC` = 102 bytes, UDP to port **9** (and 7), broadcast.
|
||||
- **The workstation has TWO interfaces on 192.168.0.0/24:** a Wi-Fi link and a wired USB-Ethernet link (the default route, metric 100). A plain `sendto("255.255.255.255", 9)` leaves only the default-route interface. **Bind explicitly to each interface's local IP** and target the **subnet broadcast `192.168.0.255`** as well as `255.255.255.255`.
|
||||
- `wakeonlan` is not installed; use a raw UDP socket with `SO_BROADCAST=1`.
|
||||
- Send a burst (~15 packets per interface, ~0.2s apart).
|
||||
|
||||
## 3. Poll for the wake
|
||||
A Mac mini takes **30–90 s** to boot after a WoL wake. Poll `ping -c 1 -W 1 <ip>` every 5 s for ~2–3 min before concluding failure.
|
||||
|
||||
## 4. If it does NOT wake (the common case) — diagnose the setting
|
||||
macOS honors a WoL packet **only when BOTH are enabled on the mini**:
|
||||
- **System Settings → Battery → Options → "Wake for network access"** = ON, and
|
||||
- the active network port's **"Enable Wake for LAN"** (Network → [interface] → Details).
|
||||
|
||||
If either is off, **no packet from any source wakes it**, and you cannot change it while the host is asleep. A full power-off (smart plug cycled) also ignores WoL entirely. In that case: ask the user to toggle the setting (the durable fix so future wakes work), then re-fire the packet.
|
||||
|
||||
## Reference sender (raw socket, per-interface)
|
||||
```python
|
||||
import socket, time
|
||||
MAC = "de:6b:6d:c1:52:23"
|
||||
mac = bytes(int(x,16) for x in MAC.split(":"))
|
||||
pkt = b"\xff"*6 + mac*16 # 102 bytes
|
||||
for local, dest in [("192.168.0.83","192.168.0.255"),("192.168.0.104","192.168.0.255"),
|
||||
("192.168.0.83","255.255.255.255"),("192.168.0.104","255.255.255.255")]:
|
||||
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
||||
s.setsockopt(socket.SOL_SOCKET, socket.SO_BROADCAST, 1)
|
||||
s.bind((local, 0))
|
||||
for _ in range(15):
|
||||
s.sendto(pkt,(dest,9)); s.sendto(pkt,(dest,7)); time.sleep(0.2)
|
||||
s.close()
|
||||
```
|
||||
+2
-2
@@ -1,7 +1,7 @@
|
||||
# Command Center Knowledge Base
|
||||
|
||||
System configuration knowledge base for Frank's fleet (Dankware, Dankclaw,
|
||||
Dankserver) and the agent tooling that runs on it. Every concept has its own
|
||||
System configuration knowledge base for Frank's fleet (Dankclaw, Dankserver,
|
||||
and the client workstations) and the agent tooling that runs on it. Every concept has its own
|
||||
file; every directory index links its complete contents. Format: OKF v0.1 —
|
||||
a directory of markdown files with YAML frontmatter (see
|
||||
[references/okf-spec.md](references/okf-spec.md)).
|
||||
|
||||
@@ -1,11 +1,11 @@
|
||||
---
|
||||
type: reference
|
||||
title: Home Directory Configuration Census
|
||||
description: Complete inventory of userspace program configurations on Dankware — top-level dotfiles, ~/.config, ~/.local/share state, and special directories (~/.pi, ~/.omp).
|
||||
description: Complete inventory of userspace program configurations on the workstation — top-level dotfiles, ~/.config, ~/.local/share state, and special directories (~/.pi, ~/.omp).
|
||||
tags: [inventory, unverified, census, dotfiles, config]
|
||||
created: 2026-08-28
|
||||
census-date: 2026-08-28
|
||||
source: Dankware CachyOS laptop
|
||||
source: Workstation CachyOS laptop
|
||||
---
|
||||
|
||||
## Scope & Methodology
|
||||
@@ -52,11 +52,11 @@ All measurements are live — no invented numbers.
|
||||
| `.tmux-resurrect` | Tmux resurrect state | yes (tmux) | 0 | 2026-08-25 | — |
|
||||
| `.tmux.conf` | Tmux configuration | yes (tmux) | 4.0K | 2026-07-18 | — |
|
||||
| `.wget-hsts` | Wget HSTS database | yes (wget) | 4.0K | 2026-07-06 | — |
|
||||
| `.zcompdump-dankware-5.9.1` | Zsh completions v5.9.1 | yes (zsh) | 56K | 2026-07-12 | — |
|
||||
| `.zcompdump-dankware-5.9.1.zwc` | Zsh compiled completions v5.9.1 | yes (zsh) | 120K | 2026-07-12 | — |
|
||||
| `.zcompdump-dankware-5.9.2` | Zsh completions v5.9.2 | yes (zsh) | 56K | 2026-08-19 | — |
|
||||
| `.zcompdump-dankware-5.9.2.lock` | Zsh completions lock | yes (zsh) | 0 | 2026-08-25 | — |
|
||||
| `.zcompdump-dankware-5.9.2.zwc` | Zsh compiled completions v5.9.2 | yes (zsh) | 120K | 2026-08-19 | — |
|
||||
| `.zcompdump-<host>-5.9.1` | Zsh completions v5.9.1 | yes (zsh) | 56K | 2026-07-12 | — |
|
||||
| `.zcompdump-<host>-5.9.1.zwc` | Zsh compiled completions v5.9.1 | yes (zsh) | 120K | 2026-07-12 | — |
|
||||
| `.zcompdump-<host>-5.9.2` | Zsh completions v5.9.2 | yes (zsh) | 56K | 2026-08-19 | — |
|
||||
| `.zcompdump-<host>-5.9.2.lock` | Zsh completions lock | yes (zsh) | 0 | 2026-08-25 | — |
|
||||
| `.zcompdump-<host>-5.9.2.zwc` | Zsh compiled completions v5.9.2 | yes (zsh) | 120K | 2026-08-19 | — |
|
||||
| `.zsh_history` | Zsh command history | yes (zsh) | 68K | 2026-08-28 | — |
|
||||
| `.zshrc` | Zsh configuration | yes (zsh) | 4.0K | 2026-08-25 | — |
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
# Inventory Index
|
||||
|
||||
Census of all userspace program configuration on Dankware.
|
||||
Census of all userspace program configuration on the workstation.
|
||||
|
||||
- [home-config-census.md](home-config-census.md) — Complete inventory of top-level dotfiles, ~/.config, ~/.local/share state, and special directories (~/.pi, ~/.omp)
|
||||
|
||||
+16
-7
@@ -11,6 +11,18 @@ timestamp: 2026-08-28
|
||||
|
||||
# Bundle Change Log
|
||||
|
||||
## 2026-09-28 — Retired workstation purged from the knowledge base
|
||||
|
||||
Frank sold the client workstation. Every identifier for it is gone from this bundle: hostname, both of its LAN addresses, and its Wi-Fi SSID. The knowledge outlives the box; the machine does not.
|
||||
|
||||
* **Distilled, not deleted.** The four per-host system pages carried two pieces of knowledge worth keeping and one that was not:
|
||||
* `/system/network.md` (new) — LAN topology, plus the multi-link resolver law: a client with two `+DefaultRoute` links flaps its DNS, and the fix is a static resolver pinned on each *connection* (a `resolved.conf` `DNS=` line is only a per-link fallback). Keeps the flush-caches verification loop, because one successful `dig` proves nothing on a flapping resolver.
|
||||
* `/tools/niri/displays.md` (new) — the multi-monitor rig: portrait transforms, absolute positions, the auto-placed third panel, the iGPU render-node pin, and the three ways it breaks (duplicate output blocks, positions that do not reflow, a mode the panel cannot drive).
|
||||
* Dropped: the machine's own spec sheet and quick-facts table. The OS and userspace facts they repeated already live in `tools/cachyos.md`.
|
||||
* **Mechanical scrub** across the rest of the bundle: indexes, tool and research pages, the inventory census, the changelog, one generated HTML report, and four managed skills. Facts kept, names dropped — `install.sh`'s `--host` case list and the `packages/<hostname>.pkgs` filename stay, because the hostname is the lookup key there.
|
||||
* `AGENTS.md` and `README.md` keep a nameless "workstation" row so the fleet tables still describe the class of box without advertising a machine that is no longer Frank's.
|
||||
* Out of scope by decision: `agent/memories/**` (past-session records the learn pipeline rewrites) and the retired pages' history — they are recoverable from `.AGENTTRASH/20260928-retired-workstation/` and from git.
|
||||
|
||||
## 2026-09-01 — Retry backoff and thinking default
|
||||
|
||||
* **Retry backoff**: configured Pi's automatic agent-level retries in `settings.json` with a 10-second base delay, producing 10s, 20s, and 40s delays across three retries.
|
||||
@@ -53,15 +65,15 @@ timestamp: 2026-08-28
|
||||
## 2026-08-21 — Fleet ops: passwordless sudo, Hermes SSH keys, sibling KB links
|
||||
|
||||
* **Passwordless sudo**: added `/etc/sudoers.d/dank-nopasswd` (`dank ALL=(ALL) NOPASSWD: ALL`) on both Dankserver and Dankclaw. Verified `sudo -n true` on both. The pre-existing drop-ins (`frank-small` on Dankserver; `frank-large` + `frank-ling` on Dankclaw) grant per-command NOPASSWD for the frank restart scripts and remain in place.
|
||||
* **Hermes SSH keys**: the Hermes Agent (podman container `hermes`, project `dankclaw` in `serverAppConfigs`, gateway drops to container uid 10000 = host uid 109999, HOME `/opt/data` on a podman volume) now has a dedicated ed25519 key at `/opt/data/.ssh/id_ed25519` (`hermes-agent@dankclaw`) plus an SSH config for `dankclaw` (192.168.0.143), `dankserver` (192.168.0.235), and `dankware` (192.168.0.226). The public key is in `dank`'s `authorized_keys` on all three machines. Verified from inside the container as the hermes user: all three `ssh <host> hostname` calls succeed.
|
||||
* **Sibling KB links**: `system/index.md`, `system/dankserver.md`, `system/dankclaw.md`, and the root `index.md` now link the two sibling knowledge bases on dankware: `~/Projects/vllmScripts/` (inference fleet scripts + runbook, index `docs/index.md`) and `~/Projects/serverAppConfigs/` (Podman deploy configs for both servers, index `docs/index.md`).
|
||||
* **Hermes SSH keys**: the Hermes Agent (podman container `hermes`, project `dankclaw` in `serverAppConfigs`, gateway drops to container uid 10000 = host uid 109999, HOME `/opt/data` on a podman volume) now has a dedicated ed25519 key at `/opt/data/.ssh/id_ed25519` (`hermes-agent@dankclaw`) plus an SSH config for `dankclaw` (192.168.0.143), `dankserver` (192.168.0.235), and the workstation. The public key is in `dank`'s `authorized_keys` on all three machines. Verified from inside the container as the hermes user: all three `ssh <host> hostname` calls succeed.
|
||||
* **Sibling KB links**: `system/index.md`, `system/dankserver.md`, `system/dankclaw.md`, and the root `index.md` now link the two sibling knowledge bases on the workstation: `~/Projects/vllmScripts/` (inference fleet scripts + runbook, index `docs/index.md`) and `~/Projects/serverAppConfigs/` (Podman deploy configs for both servers, index `docs/index.md`).
|
||||
|
||||
## 2026-08-19 — pi-web-access: SearXNG endpoint re-pointed to dankclaw
|
||||
|
||||
* **Config**: `~/.pi/web-search.json` — `searxngBaseUrl` moved from the dead `192.168.0.235:8081` (dankserver, connection refused) to `192.168.0.143:8081` (dankclaw; verified live: HTTP 200, 25 JSON results, 0.8 s). Deleted the redundant `provider: "all"` (the `searchProvider: "searxng"` pin already wins in v0.22). Added `maxInlineContentChars: 50000`. Kept `workflow: "none"` and `ssrf.allowRanges: ["192.168.0.0/24"]`.
|
||||
* **Docs**: `pi/packages/pi-web-access.md` bumped 0.14.0 → 0.22.0 (18-provider chain, config block, active-setup note, GitHub-clone section, yt-dlp present). `agentic-web-research/` SearXNG endpoint references repointed `.235` → `.143` (index, searxng-tuning, vpn-routing).
|
||||
* **Note**: pi-web-access caches `web-search.json` in memory per process — the new endpoint takes effect on the next Pi session, not the running one.
|
||||
* **Packages**: `yt-dlp` installed on dankware (2026.07.04) — YouTube frame extraction now works; `ffmpeg` (n9.0.1) was already present.
|
||||
* **Packages**: `yt-dlp` installed on the workstation (2026.07.04) — YouTube frame extraction now works; `ffmpeg` (n9.0.1) was already present.
|
||||
|
||||
## 2026-08-19 — SearXNG + Gluetun bring-up on dankclaw
|
||||
|
||||
@@ -176,10 +188,7 @@ Field notes from standing up the search stack (gluetun + searxng + valkey) and c
|
||||
**Created — System Documentation**
|
||||
|
||||
* `system/index.md` — System documentation index with infrastructure diagram
|
||||
* `system/dankware/index.md` — System overview for dankware (Alienware m16 R2)
|
||||
* `system/dankware/hardware.md` — Complete hardware specifications
|
||||
* `system/dankware/displays.md` — Three-monitor display configuration
|
||||
* `system/dankware/network.md` — Network interfaces and topology
|
||||
* Per-host system pages (overview, hardware specifications, display configuration, network interfaces) for the workstation — retired later; see `/system/network.md` and `/tools/niri/displays.md`
|
||||
* `system/dankserver.md` — Primary llama.cpp server documentation
|
||||
* `system/dankclaw.md` — Secondary llama.cpp server documentation
|
||||
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
# Pi Configuration
|
||||
|
||||
Documentation for the pi coding agent installation on ](../system/index.md).
|
||||
Everything here is configured locally on `dankware`; the LLM providers are the
|
||||
Everything here is configured locally on the workstation; the LLM providers are the
|
||||
two llama.cpp servers (Dankserver, Dankclaw).
|
||||
|
||||
## Configuration Files
|
||||
|
||||
@@ -131,7 +131,7 @@ fetch_content({ url: "https://example.com/paper.pdf" })
|
||||
sudo pacman -S ffmpeg yt-dlp
|
||||
```
|
||||
|
||||
Without these, video analysis (transcripts, visual descriptions via Gemini) still works. Frame extraction requires ffmpeg and yt-dlp. Both are installed on dankware (verified 2026-08-28: ffmpeg n9.0.1, yt-dlp 2026.08.19).
|
||||
Without these, video analysis (transcripts, visual descriptions via Gemini) still works. Frame extraction requires ffmpeg and yt-dlp. Both are installed on the workstation (verified 2026-08-28: ffmpeg n9.0.1, yt-dlp 2026.08.19).
|
||||
|
||||
GitHub URLs get special handling: `fetch_content` clones the repo locally instead of scraping HTML (root URL returns tree + README, `/blob/` returns file contents). Repos over 350 MB get an API-based view; `forceClone: true` overrides. Clones cache per session under `/tmp/pi-github-repos` and wipe on session change. Private repos need the `gh` CLI. Disable with `githubClone.enabled: false`.
|
||||
|
||||
|
||||
@@ -529,11 +529,11 @@ UseKernelSuspendNotifiers: 1 ← Enabled</code></pre>
|
||||
</ul>
|
||||
|
||||
<h3>Kernel Error Logs</h3>
|
||||
<pre><code>Jul 22 19:43:43 dankware kernel: NVRM: RmHandleDNotifierEvent: Failed to handle ACPI D-Notifier event, status=0x11
|
||||
Jul 22 19:43:43 dankware kernel: spd5118 18-0050: PM: dpm_run_callback(): spd5118_resume [spd5118] returns -6
|
||||
Jul 22 19:43:43 dankware kernel: spd5118 18-0050: PM: failed to resume async: error -6
|
||||
<pre><code>Jul 22 19:43:43 workstation kernel: NVRM: RmHandleDNotifierEvent: Failed to handle ACPI D-Notifier event, status=0x11
|
||||
Jul 22 19:43:43 workstation kernel: spd5118 18-0050: PM: dpm_run_callback(): spd5118_resume [spd5118] returns -6
|
||||
Jul 22 19:43:43 workstation kernel: spd5118 18-0050: PM: failed to resume async: error -6
|
||||
Jul 22 19:49:48 cachyos kernel: ACPI BIOS Error (bug): Could not resolve symbol [\_SB.PC00.XHCI.RHUB.SS03], AE_NOT_FOUND
|
||||
Jul 22 19:50:08 dankware kernel: i915 0000:00:02.0: [drm] *ERROR* GT1: GSC proxy component didn't bind within expected timeout</code></pre>
|
||||
Jul 22 19:50:08 workstation kernel: i915 0000:00:02.0: [drm] *ERROR* GT1: GSC proxy component didn't bind within expected timeout</code></pre>
|
||||
</section>
|
||||
|
||||
<!-- Previous Work -->
|
||||
|
||||
@@ -21,7 +21,7 @@ The symptom — **screen stays black after waking from sleep (lid close)** — i
|
||||
## 1. Known Issues with Alienware M16a2 + Linux Sleep States
|
||||
|
||||
### 1.1 Model Context
|
||||
The Alienware m16 R2 (this system: dankware) is equipped with:
|
||||
The Alienware m16 R2 (this system) is equipped with:
|
||||
- **Intel Core Ultra 7 155H** (Meteor Lake, 6p+8e cores, 22 threads)
|
||||
- **Intel Arc Graphics** (Meteor Lake-P iGPU)
|
||||
- **NVIDIA GeForce RTX 4070 Laptop GPU** (AD106M, Max-Q/Mobile)
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
---
|
||||
type: research
|
||||
title: Chezmoi Evaluation for Dotfiles Management
|
||||
description: Evaluation of chezmoi (v2.72.0) as a dotfiles management tool for the dankware fleet.
|
||||
description: Evaluation of chezmoi (v2.72.0) as a dotfiles management tool for the workstation fleet.
|
||||
resource: https://github.com/twpayne/chezmoi
|
||||
timestamp: 2026-08-28
|
||||
tags:
|
||||
@@ -170,7 +170,7 @@ This allows plugging in any custom secrets backend.
|
||||
|
||||
— [Keychain and Windows Credentials Manager][keyring]
|
||||
|
||||
**This is relevant for dankware** — CachyOS uses GNOME Keyring (KDE uses kwallet, but the system has GNOME components). On the Strix Halo (Arch Linux) and RTX 3090 (FreeToken) boxes, GNOME Keyring or kwallet would be available depending on desktop environment.
|
||||
**This is relevant for the workstation** — CachyOS uses GNOME Keyring (KDE uses kwallet, but the system has GNOME components). On the Strix Halo (Arch Linux) and RTX 3090 (FreeToken) boxes, GNOME Keyring or kwallet would be available depending on desktop environment.
|
||||
|
||||
---
|
||||
|
||||
@@ -272,7 +272,7 @@ The threat model is distinctive: **agents (Claude Code, OMP) can read any plaint
|
||||
|
||||
2. **In-memory secrets are acceptable.** If a secret flows through a password manager's API at apply time and lands only in the decrypted target file (not in git), the threat is reduced. The target file is only plaintext on the local machine where the agent runs — and the agent running there is the one that legitimately needs the secret.
|
||||
|
||||
3. **Keyring is the best Linux backend for this fleet.** GNOME Keyring stores secrets encrypted in-process; the agent process would need to invoke `chezmoi secret keyring get` to retrieve them, which means they transit through the CLI but never land in git. On dankware (CachyOS + niri), GNOME Keyring is the default. On the two ssh-able boxes, keyring support exists: *"chezmoi includes support for GNOME Keyring (on Linux and FreeBSD)."*
|
||||
3. **Keyring is the best Linux backend for this fleet.** GNOME Keyring stores secrets encrypted in-process; the agent process would need to invoke `chezmoi secret keyring get` to retrieve them, which means they transit through the CLI but never land in git. On the workstation (CachyOS + niri), GNOME Keyring is the default. On the two ssh-able boxes, keyring support exists: *"chezmoi includes support for GNOME Keyring (on Linux and FreeBSD)."*
|
||||
|
||||
4. **gopass is a strong secondary option.** If gpg-agent is set up on all machines, gopass's git-backed encrypted store is well-suited. The template function `{{ gopass "$PASS_NAME" }}` retrieves secrets at apply time without ever storing them in the source repo.
|
||||
|
||||
@@ -336,7 +336,7 @@ Use symlinks for configs that external programs modify and must write back to (V
|
||||
|
||||
### Setup
|
||||
|
||||
- **Machine fleet:** dankware (Intel Ultra 7, CachyOS, niri), dankclaw (Strix Halo, llama.cpp frank-default-large on port 7770), dankserver (RTX 3090, FreeToken, frank-default-small)
|
||||
- **Machine fleet:** the workstation (Intel Ultra 7, CachyOS, niri), dankclaw (Strix Halo, llama.cpp frank-default-large on port 7770), dankserver (RTX 3090, FreeToken, frank-default-small)
|
||||
- **Central config repo:** `~/.omp` — already a git repo with agent config, model manifests, and the KB
|
||||
- **OS mix:** All Linux, but different distros (CachyOS, Arch, custom FreeToken)
|
||||
|
||||
@@ -348,7 +348,7 @@ Use symlinks for configs that external programs modify and must write back to (V
|
||||
|
||||
2. **Builtin age encryption solves the agent-threat-model problem.** No external dependencies needed. SSH keys and config secrets in git are encrypted at rest.
|
||||
|
||||
3. **GNOME Keyring integration covers the Linux desktop path.** dankware runs CachyOS with GNOME Keyring available.
|
||||
3. **GNOME Keyring integration covers the Linux desktop path.** The workstation runs CachyOS with GNOME Keyring available.
|
||||
|
||||
4. **Single binary distribution.** Go binary, no Python dependencies, no root install required — important for the ssh-able remote boxes.
|
||||
|
||||
@@ -385,7 +385,7 @@ encryption = "age"
|
||||
5. `chezmoi add ~/.bashrc ~/.gitconfig ~/.config/ghostty` etc.
|
||||
6. Use `chezmoi add --template` for machine-specific configs
|
||||
7. Push source repo to GitHub (private repo)
|
||||
8. On remote boxes: `chezmoi init --apply dankware/dotfiles`
|
||||
8. On remote boxes: `chezmoi init --apply workstation/dotfiles`
|
||||
|
||||
### Risks and Mitigations
|
||||
|
||||
|
||||
@@ -13,6 +13,6 @@ Hardware-specific research and fix guides.
|
||||
|
||||
* [Sleep Fix Guide](Sleep-Fix-Guide.md) — Fix guide for Alienware M16a2 sleep/wake issues on CachyOS with NVIDIA RTX 40-series GPU.
|
||||
|
||||
* [Chezmoi Evaluation for Dotfiles Management](chezmoi-evaluation.md) — Evaluation of chezmoi (v2.72.0) as a dotfiles management tool for the dankware fleet.
|
||||
* [Chezmoi Evaluation for Dotfiles Management](chezmoi-evaluation.md) — Evaluation of chezmoi (v2.72.0) as a dotfiles management tool for the workstation fleet.
|
||||
|
||||
* [Secrets Management for AI Agents in the Loop](secrets-for-agents.md) — Threat-modelled survey of secrets tools where agents have shell access and can read plaintext files and paste secrets into logs.
|
||||
|
||||
@@ -72,7 +72,7 @@ curl http://192.168.0.143:7770/v1/chat/completions \
|
||||
-d '{"model":"frank-default-large","messages":[{"role":"user","content":"Hello"}],"max_tokens":32}'
|
||||
```
|
||||
|
||||
## Related Knowledge Bases (sibling project on dankware)
|
||||
## Related Knowledge Bases (sibling project on the workstation)
|
||||
|
||||
- **serverAppConfigs** — `/home/dank/Projects/serverAppConfigs/` — Podman deployment config for this host (AI, search, development, observability stack, incl. the Hermes compose service) **plus the LLM inference fleet** (frank-default-large, CIRU ROCmFPX llama.cpp, :7770). The former `vllmScripts` repo merged into it on 2026-08-22 (history preserved). Start at `/home/dank/Projects/serverAppConfigs/docs/index.md` (see `dankclaw/compose.yaml` + `docs/Dankclaw/`; LLM fleet at `docs/LLM/index.md`, deploy runbook at `docs/LLM/deployment.md`).
|
||||
|
||||
|
||||
@@ -64,7 +64,7 @@ curl http://192.168.0.235:7770/v1/chat/completions \
|
||||
| **OS** | Ubuntu 26.04 LTS, kernel 7.0.0-30-generic |
|
||||
| **NVIDIA Driver** | 595.84 |
|
||||
|
||||
## Related Knowledge Bases (sibling project on dankware)
|
||||
## Related Knowledge Bases (sibling project on the workstation)
|
||||
|
||||
- **serverAppConfigs** — `/home/dank/Projects/serverAppConfigs/` — Podman deployment config for this host (media and library stack: RomM, Copyparty, Calibre-Web) **plus the LLM inference fleet** (frank-default-small, llama.cpp, :7770). The former `vllmScripts` repo merged into it on 2026-08-22 (history preserved). Start at `/home/dank/Projects/serverAppConfigs/docs/index.md` (see `dankserver/compose.yaml` + `docs/Dankserver/`; LLM fleet at `docs/LLM/index.md`, deploy runbook at `docs/LLM/deployment.md`).
|
||||
|
||||
|
||||
@@ -13,7 +13,7 @@ timestamp: 2026-08-06
|
||||
|
||||
# Default Applications
|
||||
|
||||
Applications that ship with or are configured on CachyOS with Niri on dankware.
|
||||
Applications that ship with or are configured on CachyOS with Niri on the workstation.
|
||||
|
||||
## Core Applications
|
||||
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
---
|
||||
type: reference
|
||||
title: CachyOS
|
||||
description: Arch-based rolling release with performance-optimized kernels, repositories, and gaming stack. Running on dankware.
|
||||
description: Arch-based rolling release with performance-optimized kernels, repositories, and gaming stack. Running on the workstation.
|
||||
tags:
|
||||
- cachyos
|
||||
- arch
|
||||
@@ -106,7 +106,7 @@ CachyOS with Niri ships with a curated set of applications:
|
||||
|
||||
## See Also
|
||||
|
||||
- ](../system/index.md) — dankware overview
|
||||
- ](../system/index.md) — system overview
|
||||
- [niri](niri/index.md) — Compositor documentation
|
||||
- [[noctalia-shell|noctalia-shell]] — Desktop shell documentation
|
||||
- [[applications|applications]] — Application reference
|
||||
|
||||
@@ -83,7 +83,7 @@ ssh dank@dankclaw 'systemctl --user restart comfyui'
|
||||
|
||||
## Cannot Reach the Web UI
|
||||
|
||||
Test connectivity from dankware.
|
||||
Test connectivity from the workstation.
|
||||
|
||||
```bash
|
||||
curl -s -o /dev/null -w "%{http_code}" http://dankclaw:8188
|
||||
|
||||
@@ -6,7 +6,7 @@ Configuration guides and reference material for installed software. Each tool ha
|
||||
|
||||
## Available Tools
|
||||
|
||||
* [[cachyos|cachyos]] — Arch-based rolling release with performance-optimized kernels, repositories, and gaming stack. Running on dankware.
|
||||
* [[cachyos|cachyos]] — Arch-based rolling release with performance-optimized kernels, repositories, and gaming stack. Running on the workstation.
|
||||
* [comfyui](comfyui/index.md) — Node-based AI image generation engine on dankclaw. FLUX.2 klein 4B, CPU backend, systemd managed.
|
||||
* [[applications|applications]] — Default userspace applications on CachyOS with Niri — browsers, editor, terminal, file manager, audio, screenshots, gaming.
|
||||
* ](ghostty/index.md) — GPU-accelerated terminal emulator with extensive configuration, keybindings, and shaders.
|
||||
@@ -14,7 +14,7 @@ Configuration guides and reference material for installed software. Each tool ha
|
||||
* ](llama-cpp/index.md) — Local LLM inference server supporting GGUF models with OpenAI-compatible API.
|
||||
* [[linux-power-management|linux-power-management]] — Sleep/wake troubleshooting, NVIDIA GPU power management, and diagnostics for Linux systems.
|
||||
* [[noctalia-shell|noctalia-shell]] — Desktop shell for Wayland built with Quickshell — launcher, wallpaper, session menu, lock screen, hotkey overlay, and media controls.
|
||||
* [niri](niri/index.md) — Scrollable-tiling Wayland compositor — configuration, keybindings, and architecture for dankware.
|
||||
* [niri](niri/index.md) — Scrollable-tiling Wayland compositor — configuration, keybindings, and architecture for the workstation.
|
||||
* [npx Skills](npx-skills/index.md) — Distribution and installation tips for pi skill packages on npm, ecosystem overview, and skill specification.
|
||||
* [ornith-llama-cpp-setup](ornith-llama-cpp-setup/index.md) — Setup and reference for running Ornith MoE models with llama.cpp server for local inference.
|
||||
* [[tmux|tmux]] — Terminal multiplexer configuration, extended-keys setup, keyboard input best practices, and reload/restart procedures.
|
||||
@@ -30,7 +30,7 @@ Configuration guides and reference material for installed software. Each tool ha
|
||||
|
||||
* [Default Applications](applications.md) — Default userspace applications on CachyOS with Niri — browsers, editor, terminal, file manager, audio, screenshots, gaming.
|
||||
|
||||
* [CachyOS](cachyos.md) — Arch-based rolling release with performance-optimized kernels, repositories, and gaming stack. Running on dankware.
|
||||
* [CachyOS](cachyos.md) — Arch-based rolling release with performance-optimized kernels, repositories, and gaming stack. Running on the workstation.
|
||||
|
||||
* [Linux Power Management](linux-power-management.md) — Sleep/wake troubleshooting, NVIDIA GPU power management, and diagnostics for Linux systems.
|
||||
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
# Ornith llama.cpp Setup
|
||||
|
||||
Complete reference for running Ornith-9B/35B MoE models with llama.cpp server on dankware.
|
||||
Complete reference for running Ornith-9B/35B MoE models with llama.cpp server on the workstation.
|
||||
|
||||
## Concept Files
|
||||
|
||||
|
||||
Reference in New Issue
Block a user