clawdie-ai/infra
Mevy Assistant 9da3a7f4a6 fix(git-jail): remove openssh-portable — base sshd works in thin jails
Thin jails share the host's /usr and /bin, so /usr/sbin/sshd is
already available. The openssh-portable ports package is unnecessary.

The Linux agent was right in 29439b2. My 4cc2f7d adding
openssh-portable was based on a wrong assumption. This corrects it.

Updated handoff doc to reflect the correction.

---
Build: pass | Tests: pass — 1530 passed (91 files)
2026-04-18 12:18:31 +00:00
..
packages fix(git-jail): remove openssh-portable — base sshd works in thin jails 2026-04-18 12:18:31 +00:00
jails.yaml feat: load pi extension for controlplane agents 2026-04-18 04:00:50 +00:00
pf-agent-jails.conf feat(phase7a): per-specialist agent jail isolation — registry, provisioner, exec runner 2026-04-14 08:23:51 +02:00
README.md refactor(infra): Phase 1 — jail registry, shared provisioner, eliminate 7x duplication (Sam & Claude) 2026-04-14 01:16:13 +02:00

Infrastructure Directory

This directory contains declarative infrastructure definitions for Clawdie.

Files

File Purpose
jails.yaml Single source of truth for all jail definitions (IPs, packages, services)
packages/ Per-role package lists consumed by the setup provisioner

Archived

  • infra/ansible/ moved to .archive/infra/ansible/. The TypeScript setup orchestrator (setup/install.ts) is the canonical provisioning path.