Go to file

Maarten 088baf6807 Fix IncusOS deploy: eliminate crontab bug and TPM corruption Root cause #1: force_reboot triggers SysRq-B intermediate boot that races with IncusOS state initialization, causing ~50% crontab bug rate. Fix: omit force_reboot from seed — VM sits at "please remove media" after install, blockstat detects idle cleanly, no intermediate boot. Validated: 15/15 PASS (100%) on 4-core VMs. Root cause #2: 90s boot timeout was too short for first-boot sysext download under load. Premature retry hard-stops the VM during first boot, corrupting the TPM encryption key permanently. Fix: increase boot timeout to 180s (60s sleep + 120s polling). Changes: - incusos-proxmox: remove --force-reboot from seed generation, increase boot timeout from 90s to 180s, update retry comments - incusos-seed: add --ip/--gateway/--dns flags for static IP seeds, add network.yaml generation - observe-deploy: add --no-force-reboot flag, --runs N mode, VLAN support, scrub_schedule health check, 1s screenshot interval - lab configs: add static IPs for VLAN 69 (192.168.102.x/22) - proxmox.yaml.example: add vlan, gateway, dns fields - CLAUDE.md: document findings, boot timeout, TPM corruption risk Tested: single VM, 3-node cluster, OC + 3 nodes — all 100% success. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-02-22 21:50:02 +01:00
incusos	Fix IncusOS deploy: eliminate crontab bug and TPM corruption	2026-02-22 21:50:02 +01:00
notes	Add VLAN 69 support, OVN networking guide, and lab-networking config	2026-02-22 13:28:03 +01:00
.gitignore	Add observe-deploy diagnostics, boot failure analysis, and deploy reliability fixes	2026-02-21 13:42:51 +01:00
CLAUDE.md	Fix IncusOS deploy: eliminate crontab bug and TPM corruption	2026-02-22 21:50:02 +01:00
README.md	Add macOS support, multi-lab lifecycle, extended testing, and migration docs	2026-02-20 23:41:06 +01:00

README.md

incu-contrib

Peripheral tools, snippets, and scripts for working with Incus, IncusOS, and the broader ecosystem.

Primarily aimed at home lab environments but useful in production as well.

`incusos/`

Scripts for building IncusOS installation media and seed configurations:

incusos-iso -- Build customized IncusOS ISO/IMG images using the official flasher-tool. Supports both architectures (x86_64, aarch64), multiple applications (Incus, Operations Center), automatic client certificate injection, and batch generation.
incusos-seed -- Generate IncusOS seed archives (tar or FAT image) for installation customization. Covers all seed file types: install, applications, Incus preseed, Operations Center, network, and update configuration.
incusos-proxmox -- Declarative IncusOS deployment on Proxmox VE. Define VMs in YAML, and the script handles seed generation, ISO upload, VM creation with correct settings (UEFI, TPM 2.0, VirtIO-SCSI), and automated installation.

See incusos/README.md for full documentation.

`notes/`

Research notes and reference material:

incus-version-compatibility.md -- Incus package versions across platforms (macOS, Debian/Ubuntu, Arch), install instructions, and certificate management notes.
iso-download-methods.md -- Original research on ISO download/customization approaches.
clustering-guide.md -- Detailed Incus clustering walkthrough (manual cluster formation via remotes).
operations-center-guide.md -- Operations Center provisioning, cluster management, and tested limitations.
migration-guide.md -- Migration paths into Incus from Proxmox, UTM, VMware Fusion, and Docker.
utm-support.md -- Design document for future UTM support on macOS.

Quick Start

# Install the flasher-tool (requires Go 1.22+)
go install github.com/lxc/incus-os/incus-osd/cmd/flasher-tool@latest

# Build a default IncusOS ISO with your client cert injected
./incusos/incusos-iso

# Build for a specific architecture and application
./incusos/incusos-iso --arch aarch64 --app operations-center --defaults

# Generate all common ISO variants at once
./incusos/incusos-iso --batch

# Generate a standalone seed archive
./incusos/incusos-seed --app incus --defaults --output my-seed.tar

# Generate a SEED_DATA FAT image for external boot media
./incusos/incusos-seed --format fat --app incus --defaults --output seed.img

Requirements

Go 1.22+ -- for installing the flasher-tool
curl -- for downloading images from the CDN
tar, gzip -- for seed archive creation and image decompression
Incus client (recommended) -- for automatic client certificate detection. Works with any version; certificates are read directly from disk. See version compatibility notes for install instructions per platform (macOS, Debian/Ubuntu, Arch).
mtools (optional) -- for creating FAT seed images

License

MIT