sjat
349d10d65c
Move ubongo to 'Built (partial)' in STATUS; fill real M70q hardware specs (i3-10100T, 16 GB, 256 GB SanDisk X600 SATA, no disk encryption). Record in ADR-015 the dedicated claude AI-worker identity, LAN-SSH-only operational reality, and the no-encryption decision; close the rbw offline-cache recovery-verification item (ADR-015 + rotate-secrets). Add accepted-risk R5 (control-node disk unencrypted at rest) with its compensating controls. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
73 lines
3.6 KiB
Markdown
73 lines
3.6 KiB
Markdown
# Hardware reference — boma
|
||
|
||
> Hand-maintained source of truth for **physical** compute + network gear and
|
||
> **workload placement intent**. The two machine-readable tables (Node capacity,
|
||
> Workload placement) are parsed by `scripts/capacity-scan.py` — keep their
|
||
> headers intact. Evaluated by `/capacity-review`. See ADR-012.
|
||
>
|
||
> _Status: skeleton. Replace example rows with real hardware once the cluster is
|
||
> stood up (STATUS.md tracks real-vs-planned)._
|
||
|
||
## 1. Physical compute
|
||
|
||
### pve0
|
||
- **Model / form factor:** _TBD (e.g. Minisforum MS-01, mini-PC)_
|
||
- **CPU:** _TBD (e.g. i9-13900H, 14C/20T)_
|
||
- **RAM:** _TBD total; max _; free DIMM slots _
|
||
- **Storage:** _TBD (disks → pools, e.g. 2× 2 TB NVMe → `local-zfs`)_
|
||
- **NICs:** _eno1 trunk (vmbr0), eno2 corosync (vmbr1)_
|
||
- **Notes:** _warranty, quirks_
|
||
|
||
### ubongo (control node — outside the cluster)
|
||
- **Model / form factor:** Lenovo ThinkCentre M70q Tiny (machine type 11DUS7XP00); 1-litre tiny/USFF
|
||
- **CPU:** Intel Core i3-10100T — 4 cores / 8 threads, 35 W TDP
|
||
- **RAM:** 16 GB DDR4-3200 (2×8 GB SODIMM)
|
||
- **Storage:** 256 GB SanDisk X600 SATA 2.5" SSD (model SD9TB8W256G1001; TCG Opal-capable, Opal unused — no disk encryption)
|
||
- **NICs:** wired GbE, interface eno1, MAC 88:a4:c2:e0:ee:da
|
||
- **BIOS:** Lenovo M2WKT5AA (2023-06-20)
|
||
- **Notes:** always-on; control plane + AI-worker (dedicated `claude` user) + local test runner (Molecule/Docker) per ADR-015; not a Proxmox guest; remote access currently LAN SSH only (mesh deferred)
|
||
|
||
### fisi (backup node — outside the cluster; provisional)
|
||
- **Model / form factor:** HP Elite 600 G9 (tower)
|
||
- **CPU:** i-series (12th-gen), x86-64 — featherweight for a data-only restic node
|
||
- **RAM:** 16 GB+ (TBD exact)
|
||
- **Storage:** OS NVMe + **2× 8 TB HDD in a mirror** (ZFS/mdraid → 8 TB usable, survives one disk)
|
||
- **NICs:** wired GbE
|
||
- **Notes:** off-cluster pull backup node (ADR-022); owns the restic repo, runs rclone→pCloud,
|
||
docks the rotated USB air-gap drives. **Pending:** SATA power cable to the HDDs.
|
||
Crown-jewel host → full `base` hardening. Assignment provisional (revisit when all hardware on hand).
|
||
|
||
_(repeat for pve1, pve2, askari)_
|
||
|
||
## 2. Network gear
|
||
|
||
| device | model | ports | poe | throughput | uplinks | notes |
|
||
|----------|-------|-------|-----|------------|---------|-------|
|
||
| opnsense | _TBD_ | _TBD_ | n/a | _TBD_ | WAN+LAN | dedicated hardware |
|
||
| switch | _TBD_ | _TBD_ | _TBD_ | _TBD_ | trunk | managed, 802.1q |
|
||
| ap1 | _TBD_ | _TBD_ | _TBD_ | _TBD_ | trunk | multi-SSID per VLAN |
|
||
|
||
## 3. Workload placement & intent
|
||
|
||
The numeric columns (`cores, ram_mb, disk_gb`) feed `capacity-scan.py`; the
|
||
free-text columns feed `/capacity-review`'s judgement.
|
||
|
||
| workload | node | cores | ram_mb | disk_gb | criticality | ha_intent | profile | constraints | growth |
|
||
|----------|------|-------|--------|---------|-------------|-----------|---------|-------------|--------|
|
||
| dns1 | pve0 | 1 | 512 | 10 | high | pair/dns2 | tiny/steady | anti-affinity: dns2 on a different node | flat |
|
||
| dns2 | pve1 | 1 | 512 | 10 | high | pair/dns1 | tiny/steady | anti-affinity: dns1 on a different node | flat |
|
||
|
||
## 4. Node capacity (machine-readable)
|
||
|
||
Physical totals per node. Integers; `ram_gb` and `disk_gb` may be decimals.
|
||
|
||
| node | cores | ram_gb | disk_gb |
|
||
|------|-------|--------|---------|
|
||
| pve0 | 20 | 64 | 4000 |
|
||
| pve1 | 20 | 64 | 4000 |
|
||
| ubongo | 4 | 16 | 250 |
|
||
| fisi | 4 | 16 | 8000 |
|
||
|
||
## 5. Capacity notes
|
||
|
||
Free-text running notes for the evaluator (trends, planned moves, upgrade ideas).
|