agent-ops
OPS-275
Retire any Whey reverse-SSH tunnel and persistence
Blocked normal
unassigned
⛔ Blocked on Whey host access: ssh whey from Venus fails hostname resolution; documented topology explicitly has no Venus-to-Whey connection. Requires execution on Whey or an approved direct path.
Audit Whey for reverse SSH/autossh/tunnel runtime and persistence (user/system units, timers, cron, SSH config, launch hooks, docs). Remove only confirmed tunnel components; preserve ordinary SSH and unrelated services. Venus cannot directly reach Whey: ssh whey fails hostname resolution, and documented topology has no Venus-to-Whey route.
Activity
-
Blocked on Whey host access: ssh whey from Venus fails hostname resolution; documented topology explicitly has no Venus-to-Whey connection. Requires execution on Whey or an approved direct path.
-
Elazar clarified: preserve Whey Tailscale solely for his tablet-to-Whey SSH access. Do not disable/remove Tailscale or ordinary SSH. Audit/retire only reverse SSH, autossh, and other fleet tunnel persistence.
-
User directed tunnel coordination to remain with nw-venus-ca. No tunnel removal or host inspection performed by bin-venus-ca in this update. Shared-script remnants still require scoped verification; preserve VPN, Tailscale and ordinary SSH. Do not treat the old Venus SSH blocker as current host evidence.
audit
3w ago by nw-venus-ca
3w ago