michal

michal pushed to main at michal/lab

2026-09-06 21:58:43 +00:00

7c2cbfaf31 ROOT CAUSE found: EUI-64 vs stable-privacy link-local, not arch or DUID

michal pushed to main at michal/lab

2026-09-06 21:51:34 +00:00

3e43385639 window 2026-09-06: final state + handoff note

michal pushed to main at michal/lab

2026-09-06 21:50:01 +00:00

d9f74aa294 CORRECTION: MAC reservations DO work -- I measured too early and said otherwise

michal pushed to main at michal/lab

2026-09-06 21:37:25 +00:00

c392bb9233 window: option (b) mac-sources has no VyOS knob; noted for the attended decision

michal pushed to main at michal/lab

2026-09-06 21:36:48 +00:00

3c933b96e0 VLAN 2 IPv6 applied to production: RA proven, MAC reservations do NOT match

michal pushed to main at michal/lab

2026-09-06 16:11:35 +00:00

5c9f004759 labsim: rehearse VLAN 2 IPv6, RA and DHCPv6 reservations before production sees it

michal pushed to main at michal/lab

2026-09-06 16:00:32 +00:00

914135c47d labctl: refuse to write a k3s config naming an IPv6 the node does not have

michal pushed to main at michal/lab

2026-09-06 15:31:54 +00:00

a9ff182bd6 Ubuntu autoinstall emitted invalid YAML for every role -- and now asks for IPv6

michal pushed to main at michal/lab

2026-09-06 15:24:30 +00:00

51bf300474 labctl: k3s config can carry both address families

michal pushed to main at michal/lab

2026-09-06 14:22:11 +00:00

cb03987c33 The drill evidence was silently gitignored by *.log

michal pushed to main at michal/lab

2026-09-06 14:15:54 +00:00

8a0ef52909 The drill measured IPv6 through a failover: zero HE calls, and it followed

michal pushed to main at michal/lab

2026-09-06 14:07:42 +00:00

da86b60dce IPv6 model merged: mark the staging record, and what the merge caught

michal pushed to main at michal/lab

2026-09-06 13:46:45 +00:00

d0b733f831 IPv6 follows master, deployed: vyos002 has a tunnel and a gate that holds it shut

michal pushed to main at michal/lab

2026-09-06 13:30:46 +00:00

395577850c IPv6 was never HA, and the WAN becoming HA is what exposed it

michal pushed to main at michal/lab

2026-09-06 09:40:00 +00:00

061b9e3d7e Close the last two items: config.boot pinned, and an upgrade runbook

michal pushed to main at michal/lab

2026-09-06 09:31:58 +00:00

bda5854563 vif53-pin-boot-disable: get disable into config.boot without losing the WAN

michal pushed to main at michal/lab

2026-09-06 08:42:14 +00:00

d08f68e28b PPPOE-HA: step 8 done -- model merged, zero drift

michal pushed to main at michal/lab

2026-09-06 08:38:22 +00:00

e1c571d004 PPPOE-HA: the drill closed the two biggest unknowns

michal pushed to main at michal/lab

2026-09-06 08:35:06 +00:00

47ce0c1aea wan-drill: run the failover drill unattended, because the operator goes offline

michal pushed to main at michal/lab

2026-09-06 08:34:07 +00:00

85819e40c1 wan-drill-watchdog: bound the blast radius of a failover drill