homelab-codex-ws/hosts/solaria/runtime/node-agent/docker-compose.override.yml

services:
  node-agent:
    # Docker GID on SOLARIA is 996 (not the Debian default 999 the base compose
    # assumes). Without this the agent starts with "Docker unavailable:
    # Permission denied" on /var/run/docker.sock and reports no containers
    # (recon RECON-multiagent-2026-07-27.md, A2/E19). Compose concatenates
    # group_add lists, so the base 999 stays alongside; 996 is what grants
    # socket access here. Same per-host pattern as piha (123) and lustro (991).
    group_add:
      - "996"  # host docker gid, verified 2026-07-30 (getent group docker → 996)
    environment:
      - NODE_NAME=solaria
      - NODE_TYPE=ai_node
      - VPS_EVENTS_HOST=100.95.58.48
      - VPS_EVENTS_USER=oskar
      - VPS_EVENTS_PATH=/opt/homelab/events
      - CHECK_INTERVAL=60
    volumes:
      - /home/oskar/.ssh:/home/homelab/.ssh:ro
feat(node-agent): add runtime overrides for piha, solaria, chelsty-infra - piha: NODE_TYPE=sd_card (rate-limited docker prune, once per day) - solaria: NODE_TYPE=ai_node (dangling+containers+build cache; never -a to preserve Ollama images) - chelsty-infra: NODE_TYPE=lte_node (NO cleanup, events-only) - All three: VPS_EVENTS_HOST set for event shipping via rsync+SSH Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-05-27 13:34:23 +02:00			`services:`
			`node-agent:`
fix(solaria): node-agent group_add for host docker gid 996 Base compose assumes Debian-default docker gid 999; on SOLARIA the docker group is 996, so node-agent hit 'Docker unavailable: Permission denied' on the socket and reported no containers (recon A2/E19). Same per-host override pattern as piha (123) and lustro (991). Verified read-only on the host: getent group docker -> docker:x:996:oskar. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> 2026-07-29 19:20:08 +02:00			`# Docker GID on SOLARIA is 996 (not the Debian default 999 the base compose`
			`# assumes). Without this the agent starts with "Docker unavailable:`
			`# Permission denied" on /var/run/docker.sock and reports no containers`
			`# (recon RECON-multiagent-2026-07-27.md, A2/E19). Compose concatenates`
			`# group_add lists, so the base 999 stays alongside; 996 is what grants`
			`# socket access here. Same per-host pattern as piha (123) and lustro (991).`
			`group_add:`
docs(solaria): note verified docker gid 996; recon appendix on undeployed fix The group_add fix itself already landed on master (ddae57c) but the running container still has GroupAdd=[999] — deploy pending from main checkout. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> 2026-07-30 15:44:17 +02:00			`- "996" # host docker gid, verified 2026-07-30 (getent group docker → 996)`
feat(node-agent): add runtime overrides for piha, solaria, chelsty-infra - piha: NODE_TYPE=sd_card (rate-limited docker prune, once per day) - solaria: NODE_TYPE=ai_node (dangling+containers+build cache; never -a to preserve Ollama images) - chelsty-infra: NODE_TYPE=lte_node (NO cleanup, events-only) - All three: VPS_EVENTS_HOST set for event shipping via rsync+SSH Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-05-27 13:34:23 +02:00			`environment:`
			`- NODE_NAME=solaria`
			`- NODE_TYPE=ai_node`
fix(node-agent): correct VPS_EVENTS_HOST to actual VPS Tailscale IP 100.108.208.3 is piha's Tailscale IP (piha hosts Forgejo+Redis). VPS's actual Tailscale IP is 100.95.58.48. All three node-agent overrides were pointing at piha itself, causing containers to SSH to their own host and fail auth. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-05-27 14:07:27 +02:00			`- VPS_EVENTS_HOST=100.95.58.48`
feat(node-agent): add runtime overrides for piha, solaria, chelsty-infra - piha: NODE_TYPE=sd_card (rate-limited docker prune, once per day) - solaria: NODE_TYPE=ai_node (dangling+containers+build cache; never -a to preserve Ollama images) - chelsty-infra: NODE_TYPE=lte_node (NO cleanup, events-only) - All three: VPS_EVENTS_HOST set for event shipping via rsync+SSH Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-05-27 13:34:23 +02:00			`- VPS_EVENTS_USER=oskar`
			`- VPS_EVENTS_PATH=/opt/homelab/events`
			`- CHECK_INTERVAL=60`
fix(node-agent): mount host SSH key into container for event shipping Nodes ship events to VPS via rsync+SSH. The container runs as root and uses the default SSH identity, which must be at /root/.ssh/. Mount /home/oskar/.ssh from the host read-only so the existing authorized key is available inside the container. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-05-27 13:59:28 +02:00			`volumes:`
fix(node-agent): mount SSH key to /home/homelab/.ssh on piha/solaria/chelsty-infra Container runs as uid 1000 (homelab), HOME=/home/homelab. ssh without -i looks for $HOME/.ssh — mounting to /root/.ssh was never visible to the process user and caused silent Permission denied on event shipping. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-06-12 14:32:12 +02:00			`- /home/oskar/.ssh:/home/homelab/.ssh:ro`