- scripts/onboard/onboard.sh: orchestrator with --node/--step/--from/--dry-run flags, deploy_autonomy + git_control gates, lexicographic step ordering - scripts/onboard/lib/common.sh: log/warn/die/step helpers, yaml_get (yq+grep/sed fallback), ensure_line, git() wrapper enforcing --no-pager - scripts/onboard/lib/remote.sh: rrun/rcopy/rsync_dir/rcheck SSH wrappers, dry-run aware - scripts/onboard/steps/00-preflight.sh: read-only fact collection (arch, RAM, disk, docker, tailscale, MagicMirror runtime, swap), human report + machine YAML snippet - scripts/onboard/steps/10-50: stub files with TODO headers, no mutations - hosts/lustro/node.yaml: LUSTRO edge node draft (KEN, role=edge, deploy_autonomy=true, git_control=false); hardware fields marked TODO for preflight population Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
17 lines
740 B
Bash
Executable file
17 lines
740 B
Bash
Executable file
#!/usr/bin/env bash
|
|
# scripts/onboard/steps/30-install-tailscale.sh — install and join Tailscale on remote node
|
|
#
|
|
# TODO: skip if tailscale already installed and connected
|
|
# TODO: install via https://tailscale.com/install.sh (or distro pkg)
|
|
# TODO: gate on operator-provided auth key (TAILSCALE_AUTH_KEY env var; never hardcode)
|
|
# TODO: tailscale up --auth-key=$TAILSCALE_AUTH_KEY --hostname=<node.yaml name>
|
|
# TODO: verify node appears in tailscale status within timeout
|
|
# TODO: gate on deploy_autonomy=true in node.yaml
|
|
|
|
set -euo pipefail
|
|
: "${REPO_ROOT:?REPO_ROOT is not set — run via onboard.sh}"
|
|
source "${REPO_ROOT}/scripts/onboard/lib/remote.sh"
|
|
|
|
STEP_NAME="30-install-tailscale"
|
|
step "[$STEP_NAME] TODO — not yet implemented"
|