3 Commits

Include renames

Author	SHA1	Message	Date
ryan4yin | 二花	3acb5d4ee5	fix(nfs,libvirt): restrict the golden export and bind VNC to loopback (#400) ... * fix(nfs): restrict the golden export to its real clients * fix(libvirt): bind VNC consoles to loopback * fix(firewall): drop VNC ports on every host * docs(security): record the NFS and VNC boundaries	2026-10-07 15:10:52 +08:00
Ryan Yin	6180072646	chore: drop the KubeVirt guest bits ... The k3s-test workers never ran (they were stuck waiting for volume binding) and will be re-added as microVMs, so remove their KubeVirt configs and everything that only existed for KubeVirt guests: - hosts/k8s/k3s-test-1-worker-{1,2,3} and their outputs - lib/genKubeVirtGuestModule.nix and lib/genK3sAgentModule.nix (the latter was only used by the workers) - the KubeVirt image upload recipes (upload-vm, upload-idols, upload-k3s-test) and the kubevirt image package in the idols outputs - refresh the docs; keep only accurate historical mentions (e.g. the restic backup path must stay as it is)	2026-09-21 17:24:40 +08:00
ryan4yin | 二花	787b51df25	feat(vms): migrate the idol desktops from KubeVirt to libvirt (#287) ... * wip(kubevirt-shoryu): enable libvirt/qemu * feat(kubevirt-shoryu): enable libvirt/qemu with br0 + no NAT network * chore: lock the microvm flake input * feat(kubevirt-shoryu): define the libvirt domains declaratively * fix(kubevirt-shoryu): pin the kana domain UUID * feat(kubevirt-shoryu): migrate idols-ruby to libvirt	2026-09-21 15:12:37 +08:00