spektr
69930f815a
- workload_accounts: gn-media (GID 970), gn-download (983), gn-dashboard (984); gn-media als primäre Gruppe der Pipeline-Konten — AUTH_SYS ueber NFSv4 wirkte serverseitig nicht mit Supplementary-Gruppen (Betriebsbefund 30.10.2026); Sudoers des Deploy-Kontos auf (ALL:ALL) verbreitert (become_user) - video_encoding: NFS-Client, Mount-Unit und Pipeline-Layout auf dem Export (10.0.0.2:/media/datenhdd3/Encoding -> /var/lib/ghostnet-pipeline, ausserhalb der Homes); Layout-Anlage als Dienstkonten wegen root_squash; Verifikation der Verzeichnisrechte als gn-encoding (2777/2770/0750/2750, Gruppe 970) - pve_media_cron: Legacy-Crontab (chown root:root + chmod -R 0777 auf allen Medienplatten, alle 10 min) entfernt — haette jedes echte Berechtigungsmodell plattgewalzt; Backup unter /var/backups/ghostnet/pve/; verify-production prueft das Fehlen ab - verify-pipeline-handover.yml: Handover-Simulation über alle Identitaeten (CT-101-.dlc-Drop -> gn-download -> queue -> gn-encoding -> output/state -> gn-dashboard); einmal vollstaendig bestanden (30.10.2026) - Doku: GNENC-000/001/002, GNAI-017 (6.10/6.11), GNMON-001 auf Stand gebracht Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
65 lines
2.6 KiB
YAML
65 lines
2.6 KiB
YAML
---
|
|
video_encoding_expected_hostname: ghostnet-ki
|
|
video_encoding_expected_distribution: Debian
|
|
video_encoding_expected_distribution_major_version: "13"
|
|
video_encoding_expected_ipv4_address: 10.0.0.90
|
|
|
|
video_encoding_account:
|
|
name: gn-encoding
|
|
uid: 982
|
|
gid: 982
|
|
# Primary login group is gn-media (GID 970): AUTH_SYS over NFSv4 did not
|
|
# honour the supplementary group membership server-side, so the pipeline
|
|
# identities carry gn-media as their primary group (verified 2026-10-30).
|
|
primary_gid: 970
|
|
home: /var/lib/ghostnet-encoding
|
|
config_directory: /etc/ghostnet-encoding
|
|
shell: /usr/sbin/nologin
|
|
subid_start: 493216
|
|
|
|
video_encoding_subid_count: 65536
|
|
|
|
# Pipeline storage on the PVE-host NFS export (GNENC-001/002, GNAI-017).
|
|
# The mount lives OUTSIDE the service homes (the gn-encoding home is 0750 and
|
|
# must stay traversable only for its owner; gn-download and gn-dashboard need
|
|
# to reach the pipeline root without touching any account home).
|
|
video_encoding_nfs_server: 10.0.0.2
|
|
video_encoding_nfs_export: /media/datenhdd3/Encoding
|
|
video_encoding_pipeline_mount: /var/lib/ghostnet-pipeline
|
|
video_encoding_pipeline_mount_unit: var-lib-ghostnet\x2dpipeline.mount
|
|
video_encoding_pipeline_mount_options: nfsvers=4.2,hard,_netdev,noatime
|
|
video_encoding_pipeline_nfs_client_package: nfs-common
|
|
|
|
# Export root ownership on the PVE host (GNAI-017 section 4.1):
|
|
# 100000 = CT-101 guest root (SMB share writes), 970 = gn-media (pipeline).
|
|
video_encoding_export_root_uid: 100000
|
|
video_encoding_export_root_gid: 970
|
|
video_encoding_export_root_mode: "2775"
|
|
|
|
# Shared pipeline group of gn-encoding (982), gn-download (983) and
|
|
# gn-dashboard (984); created by the workload_accounts role.
|
|
video_encoding_media_group: gn-media
|
|
video_encoding_media_gid: 970
|
|
|
|
# Declared HandBrake profiles (must match the preset files under
|
|
# llm-server/encoding/profiles/; verified by the role, one input/, queue/
|
|
# and output/ subdirectory per profile).
|
|
video_encoding_profile_names:
|
|
- "AV1 MKV 1080p30 Anime RF34"
|
|
- "AV1 MKV 1080p30 RF25"
|
|
- "AV1 MKV 2160p60 4K RF23"
|
|
|
|
# Superseded local directories of the pre-NFS baseline (GNENC-001 section 6);
|
|
# removed when empty.
|
|
video_encoding_legacy_local_directories:
|
|
- /var/lib/ghostnet-encoding/input
|
|
- /var/lib/ghostnet-encoding/output
|
|
- /var/lib/ghostnet-encoding/work
|
|
|
|
video_encoding_quadlet_user_directory: /etc/containers/systemd/users
|
|
|
|
# Open decisions from docs/platform/llm-server/encoding/GNENC-001 section 7
|
|
# stay unset on purpose. Until an encoder image, a schedule and resource limits
|
|
# are decided, the role additionally guards that no workload is defined.
|
|
video_encoding_image: ""
|