skill(freebsd): add re-register-with-mother after upgrade (step 8)

The node OS version changed after the upgrade, but the mother hive_nodes
row still shows the old freebsd_version. Re-running the probe + node_register
makes the upgrade visible to the scheduler.

Renumbered: 8→9 (vulnerability audit).
This commit is contained in:
Sam & Claude 2026-06-25 11:55:28 +02:00
parent 524a3c3153
commit bcb769f2e0

View file

@ -122,7 +122,20 @@ pkg update -f && pkg upgrade # ports packages (separate from base here)
PostgreSQL bump needs no dump/restore (restart/reboot to load new binaries).
7. **Upgrade the jails** — the host upgrade does NOT touch them. Do this after
the host is on the new kernel. See *Jails* below.
8. **Vulnerability audit**: if `pkg audit` still flags packages (host or jails),
8. **Re-register with mother** — the node's OS version changed. Re-run the
hardware probe and push the updated profile so the mother's hive_nodes row
reflects the new `freebsd_version`. If COLIBRI_AUTOSPAWN is active, the
daemon will re-spawn zot on the next tick and the RPC prompt includes
node_register; otherwise run the probe + MCP call manually:
```sh
clawdie-hw-probe | jq .freebsd_version # confirm 15.1
# Re-run node_register via the MCP boundary (or let autospawn handle it)
```
This is what makes the upgrade visible to the scheduler — without it,
the mother still thinks the node is on the old release.
9. **Vulnerability audit**: if `pkg audit` still flags packages (host or jails),
do not imply the upgrade failed — the upgrade completed; unrelated packages
remain vulnerable until fixed versions land. (Wording in the reference.)