Jon Chery
b925fda3aa
7 research topics: nft SNAT masquerade syntax, pve-firewall coexistence (priority collision fix), podman-in-LXC (fuse=1 requirement), traefik v3.3 TLS model (certResolver does not exist — use dynamic tls.certificates), pct create floating-IP syntax, podman restart persistence (podman-restart.service), SELinux :Z omission. Key findings that change the plan: - nft postrouting: ip saddr 127.0.0.0/8 oifname != lo masquerade - nft first-apply: pre-create table before nft -f - pve-firewall: shift orca input/forward to priority -10 - LXC features: nesting=1,keyctl=1,fuse=1 (fuse=1 for fuse-overlayfs) - traefik TLS: drop certResolver: orca, use dynamic tls.certificates - podman: --restart=unless-stopped + enable podman-restart.service - volumes: omit :Z flag, use :ro on both mounts ---ci--- project: orca phase: 0 milestone: v0.14 status: research ---/ci---
17 lines
366 B
JSON
17 lines
366 B
JSON
{
|
|
"phase": 0,
|
|
"stage": "research",
|
|
"milestone": "v0.14",
|
|
"milestone_slug": "ingress-bootstrap",
|
|
"phase_role": "pre_execution",
|
|
"attempts": 0,
|
|
"updated_at": "2026-08-10T18:00:00Z",
|
|
"milestone_complete": false,
|
|
"previous_milestone": "v0.13",
|
|
"phases_shipped": [],
|
|
"tags_shipped": [],
|
|
"requirements": {
|
|
"covered": [],
|
|
"partial": []
|
|
}
|
|
} |