An ordered first-run checklist for deploying on osa (or any new mother), covering the things that can only be validated against a live PostgreSQL + FreeBSD host: - build 0.12 on FreeBSD from current main + ci-checks (Linux binaries won't run) - record any pre-existing node-register before install - post-install integrity: installed node-register is the hardened hive_nodes version (grep -c "E'" == 0; grep hive_nodes > 0) — not the injectable copy - schema migrated in place (usb_nodes renamed, not duplicated; node_type present) - peer auth works; pg_hba peer rule present AND precedes generic local rules - external-mcp has all three servers (jq-merge preserved existing) - SSH forced-command wrapper rejects non-allowlisted commands - daemon env + service live; key hygiene (private key → seed only) Captures the operational risks flagged during the mother-infra review. |
||
|---|---|---|
| .. | ||
| freebsd | ||
| mother | ||