Skip to content

docs(adr): run PBS on Saruman with its datastore on smaug over NFS (#… - #659

Merged
Gerrrt merged 3 commits into
mainfrom
gerrrt/pbs-decision-485
Sep 23, 2026
Merged

Gerrrt merged 3 commits into
mainfrom
gerrrt/pbs-decision-485

Conversation

@Gerrrt

@Gerrrt Gerrrt commented Sep 23, 2026

Copy link
Copy Markdown
Owner

…485)

ADR-0027's trigger fired (smaug answers, erebor online), but its sync job needs a second PBS instance, and on TrueNAS that is a VM on smaug's 8 GB (#599). ADR-0053 runs one PBS guest, golem at 10.0.30.80, on Saruman's 128 GB. Its only datastore is erebor/pbs over NFSv4 (atime on, for garbage collection; owned by uid 34; shared to .80 alone), and daily TrueNAS snapshots kept fourteen days are the copy PBS cannot prune, standing in for the second instance. Backups are encrypted on Saruman; the key is kept in secrets/lab.sops.yaml. One more CasaBonita pass: 10.0.30.80 to 10.0.40.30:2049. ADR-0027's table of what is backed up is unchanged.

Numbered 0053 because #652 holds 0052. ADR-0027 gets a note (text left as written, per ADR-0001). roadmap.md, build-the-nas.md §8 and build-the-soc-guest.md point at the decision. README counts 52 ADRs. Nothing is built; #485 stays open for the build.

What changed

Why

Blast radius

  • No change to network segmentation or firewall rules
  • No new port published to a VLAN that could not already reach the service
  • No credential added outside secrets/*.sops.yaml

Verification

  • make validate passes
  • Deployed to the lab and confirmed working
  • Docs updated (docs/, service README, or docs/roadmap.md)

Gerrrt and others added 3 commits September 23, 2026 20:25
)

ADR-0027's trigger fired (smaug answers, erebor online), but its sync job
needs a second PBS instance, and on TrueNAS that is a VM on smaug's 8 GB
(#599). ADR-0053 runs one PBS guest, golem at 10.0.30.80, on Saruman's
128 GB. Its only datastore is erebor/pbs over NFSv4 (atime on, for garbage
collection; owned by uid 34; shared to .80 alone), and daily TrueNAS
snapshots kept fourteen days are the copy PBS cannot prune, standing in for
the second instance. Backups are encrypted on Saruman; the key is kept in
secrets/lab.sops.yaml. One more CasaBonita pass: 10.0.30.80 to
10.0.40.30:2049. ADR-0027's table of what is backed up is unchanged.

Numbered 0053 because #652 holds 0052. ADR-0027 gets a note (text left as
written, per ADR-0001). roadmap.md, build-the-nas.md §8 and
build-the-soc-guest.md point at the decision. README counts 52 ADRs.
Nothing is built; #485 stays open for the build.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
#652 landed ADR-0052, so with this branch's ADR-0053 the repository has 53.
The changelog conflict keeps both entries.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@Gerrrt
Gerrrt merged commit 61a23c9 into main Sep 23, 2026
4 checks passed
@Gerrrt
Gerrrt deleted the gerrrt/pbs-decision-485 branch September 23, 2026 21:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant