Support immutable hosts: install under /opt/unbounded and Ignition provisioning - #815

Open

Philip Lombardi (plombardi89) wants to merge 47 commits into

mainfrom

acl-extract/immutable-host-paths

Commits on Sep 23, 2026

agent: add the host installation prefix and resolve paths from it
Philip Lombardi (plombardi89)
committed
a6194c9
agent: resolve the daemon binaries under the installation prefix
Philip Lombardi (plombardi89)
committed
74ec9f8
agent: record the installation prefix before the first host mutation
Philip Lombardi (plombardi89)
committed
9d64c92
agent: make the installation prefix part of bootstrap identity
Philip Lombardi (plombardi89)
committed
b6a5156
kubectl-unbounded: add the Ignition config encoder
Philip Lombardi (plombardi89)
committed
a13ec36
kubectl-unbounded: emit an Ignition bootstrap config
Philip Lombardi (plombardi89)
committed
37d49c9
agent: remove the first-boot bootstrap unit on reset
Philip Lombardi (plombardi89)
committed
60d715e
agent: write the ownership record only when a repair changed something
Philip Lombardi (plombardi89)
committed
42d90af
agent: resolve the host prefix from the record, and fix the tests that missed it
Philip Lombardi (plombardi89)
committed
10c4153
agent: install and render the daemon assets under the configured prefix
Philip Lombardi (plombardi89)
committed
374309a
agent: resolve the nspawn lifecycle helper from the installation prefix
Philip Lombardi (plombardi89)
committed
4746672
agent: resolve the LocalDNS network helper from the installation prefix
Philip Lombardi (plombardi89)
committed
7d10fe3
agent: sync the filesystem the agent wrote to, not a fixed /usr/local
Philip Lombardi (plombardi89)
committed
4200219
agent: sweep and detect the agent's files under every known prefix
Philip Lombardi (plombardi89)
committed
ec71303
agent: stage the install script's binary under the configured prefix
Philip Lombardi (plombardi89)
committed
58a23f0
kubectl-unbounded: make a failed Ignition bootstrap visible and back off its retries
Philip Lombardi (plombardi89)
committed
9f0eb11
kubectl-unbounded: validate Ignition input before cluster contact, and document the prefix
Philip Lombardi (plombardi89)
committed
4027d4c
e2e: add a UKI boot helper for Ignition-provisioned images
Philip Lombardi (plombardi89)
committed
1ff44ec
e2e: add an Azure Container Linux host image resolved from its manifest
Philip Lombardi (plombardi89)
committed
15a3606
e2e: boot and bootstrap the Azure Container Linux host through Ignition
Philip Lombardi (plombardi89)
committed
4693ee1
e2e: run the Azure Container Linux host in CI, and check what reset removed
Philip Lombardi (plombardi89)
committed
ca963c9
e2e: tolerate a refused reset-failed on a SELinux-enforcing host
Philip Lombardi (plombardi89)
committed
e5e7195
agent: pin the nftables flush ordering that keeps kubelet reachable
Philip Lombardi (plombardi89)
committed
5f40e81
e2e: stop the previous VM before provisioning an Ignition host
Philip Lombardi (plombardi89)
committed
cb929f3
agent: do not unlink an artifact that is not there
Philip Lombardi (plombardi89)
committed
eb858d7
e2e: leave Azure Container Linux out of the matrix until its login exists
Philip Lombardi (plombardi89)
committed
3b5671a
e2e: fetch the Azure Container Linux manifest over REST
Philip Lombardi (plombardi89)
committed
56a543e
agent: probe the configured prefix in the install directory preflight
Philip Lombardi (plombardi89)
committed
ee9126c
e2e: reinstall an Ignition host on the disk it already has
Philip Lombardi (plombardi89)
committed
c04fa36
e2e: resolve the image location only when the image is needed
Philip Lombardi (plombardi89)
committed
7bc0382
e2e: restore the Ignition boundaries dropped while narrowing the suite
Philip Lombardi (plombardi89)
committed
f6f2fb8
agent: stop the first-boot bootstrap unit on reset, not just disable it
Philip Lombardi (plombardi89)
committed
00e40d2
agent: check for a path before removing it in the shared reset helpers
Philip Lombardi (plombardi89)
committed
331a73f
agent: keep the pre-prefix preflight and lifecycle entry points
Philip Lombardi (plombardi89)
committed
1c17c1e

Commits on Sep 24, 2026

Commits on Sep 25, 2026

agent: install under /opt/unbounded and link older hosts to /usr/local
Philip Lombardi (plombardi89)
committed
d01744c