feat(B-0855.1): add first-boot self-register service module by AceHack · Pull Request #5416 · Lucent-Financial-Group/Zeta

AceHack · 2026-05-27T07:19:26Z

Summary

add disabled-by-default zeta-self-register.service NixOS module for B-0855.1
import/expose the module from the cluster module surface
add source-level audit sentinels for first-boot ordering and env handoff

Checks

git diff --check
bun tools/ci/audit-installer-substrate.ts
bun test tools/ci/test-iter-54-install-flow.test.ts

Notes

nix-instantiate is not installed in this environment, so Nix parse/eval remains for CI/local Nix.
Draft until CI/review confirms the Nix service surface.

…55.1 Co-Authored-By: Codex <noreply@openai.com>

…oot self-register service Co-Authored-By: Codex <noreply@openai.com>

…n PR #5416 Co-Authored-By: Codex <noreply@openai.com>

Copilot

Pull request overview

Adds a disabled-by-default NixOS systemd service module to move node self-registration to post-install, first boot (B-0855.1), and strengthens CI/source audits to ensure the new substrate stays wired into the AI-cluster module surface.

Changes:

Add zeta-self-register NixOS module defining a zeta-self-register oneshot service gated by ConditionFirstBoot and ordered after network-online.target (and zeta-creds-restore.service when present).
Import/expose the new module via common.nix and full-ai-cluster/flake.nix module outputs.
Extend tools/ci/audit-installer-substrate.ts to require the new module file and assert key ordering/env-handoff sentinels.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
tools/ci/audit-installer-substrate.ts	Adds required-file + sentinel assertions for the new self-register module surface.
full-ai-cluster/nixos/modules/zeta-self-register.nix	Introduces the disabled-by-default `zeta-self-register` first-boot oneshot systemd service module.
full-ai-cluster/nixos/modules/common.nix	Imports `zeta-self-register.nix` so all node types share the module surface.
full-ai-cluster/flake.nix	Exposes `zeta-self-register` in `nixosModules` outputs for reuse/consistency.
docs/claims/codex-b0855-1-zeta-self-register-service-20260527.md	Adds a live work-claim marker for this effort.

AceHack · 2026-05-27T07:23:17Z

CI failure inspection (Vera 2026-05-27T07:22Z): docker-nixos-install-sh-test fails during Docker build before the harness runs: /bin/sh: line 1: mkdir: command not found at tools/ci/dockerfiles/nixos-install-sh-test/Dockerfile:53. This PR does not modify that Dockerfile, and origin/main has the same lines 53-54, so this is not currently attributable to the B-0855.1 module patch. I am not rerunning it yet; next safe action is to wait for remaining checks and then decide whether this is an existing base-image/tooling blocker or needs a separate fix.

…register path defaults Co-Authored-By: Codex <noreply@openai.com>

AceHack · 2026-05-27T08:05:11Z

Codex/Vera opened Docker harness repair PR #5427 for the docker-nixos-install-sh-test blocker on this draft branch.

Local verification on the repair branch passed:

bun tools/ci/docker-nixos-install-sh-test.ts

Keeping this PR draft-blocked until #5427 lands or CI confirms the harness fix.

Co-Authored-By: Codex <noreply@openai.com>

Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Co-Authored-By: Codex <noreply@openai.com>

Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

Co-Authored-By: Codex <noreply@openai.com>

Address the unresolved operational review finding on the B-0855.1 service by replacing the first-boot-only gate with a marker-path gate and failure retry/backoff. Update the installer substrate audit so the retry semantics remain checked in CI. Co-Authored-By: Codex <noreply@openai.com>

Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

Address current Copilot workflow wording findings by matching the cosign bundle comment to the runner-temp output path and pointing verification guidance at the workflow run step summary rather than nonexistent workflow comments. Co-Authored-By: Codex <noreply@openai.com>

chatgpt-codex-connector · 2026-05-27T10:10:08Z

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

Copilot

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

Co-Authored-By: Codex <noreply@openai.com>

Lior and others added 2 commits May 27, 2026 03:10

claim: codex-b0855-1-zeta-self-register-service-20260527 - scope B-08…

0c6f240

…55.1 Co-Authored-By: Codex <noreply@openai.com>

feat: codex-b0855-1-zeta-self-register-service-20260527 - add first-b…

5bb7f2d

…oot self-register service Co-Authored-By: Codex <noreply@openai.com>

Copilot AI review requested due to automatic review settings May 27, 2026 07:19

Copilot started reviewing on behalf of AceHack May 27, 2026 07:19 View session

release: codex-b0855-1-zeta-self-register-service-20260527 - opened i…

eb6dbad

…n PR #5416 Co-Authored-By: Codex <noreply@openai.com>

Copilot AI reviewed May 27, 2026

View reviewed changes

Comment thread full-ai-cluster/nixos/modules/zeta-self-register.nix

fix: codex-b0855-1-zeta-self-register-service-20260527 - derive self-…

6626ccf

…register path defaults Co-Authored-By: Codex <noreply@openai.com>

AceHack mentioned this pull request May 27, 2026

fix: repair Docker NixOS install-sh harness #5427

Merged

fix: repair Docker NixOS install-sh harness (#5427)

d87acce

Co-Authored-By: Codex <noreply@openai.com>

Copilot AI review requested due to automatic review settings May 27, 2026 09:02

Copilot started reviewing on behalf of AceHack May 27, 2026 09:02 View session

Copilot AI reviewed May 27, 2026

View reviewed changes

Comment thread full-ai-cluster/nixos/modules/zeta-self-register.nix Outdated

Lior and others added 2 commits May 27, 2026 05:10

fix: align self-register Bun runtime with mise

e7ac910

Co-Authored-By: Codex <noreply@openai.com>

fix: update ISO cosign signing to bundle output

ed6b5bd

Co-Authored-By: Codex <noreply@openai.com>

Copilot AI review requested due to automatic review settings May 27, 2026 09:24

Copilot started reviewing on behalf of AceHack May 27, 2026 09:25 View session

merge: sync PR 5416 with main

6804c8d

Co-Authored-By: Codex <noreply@openai.com>

Copilot AI reviewed May 27, 2026

View reviewed changes

Comment thread full-ai-cluster/nixos/modules/zeta-self-register.nix Outdated

Comment thread .github/workflows/build-ai-cluster-iso.yml Outdated

Lior and others added 2 commits May 27, 2026 05:37

fix: write cosign bundle to runner temp

354cf04

Co-Authored-By: Codex <noreply@openai.com>

Copilot AI review requested due to automatic review settings May 27, 2026 09:48

Copilot started reviewing on behalf of AceHack May 27, 2026 09:48 View session

Copilot AI reviewed May 27, 2026

View reviewed changes

Comment thread .github/workflows/build-ai-cluster-iso.yml Outdated

Comment thread .github/workflows/build-ai-cluster-iso.yml Outdated

AceHack marked this pull request as ready for review May 27, 2026 10:10

Copilot AI review requested due to automatic review settings May 27, 2026 10:10

Copilot started reviewing on behalf of AceHack May 27, 2026 10:10 View session

Copilot AI reviewed May 27, 2026

View reviewed changes

Comment thread full-ai-cluster/nixos/modules/zeta-self-register.nix Outdated

Comment thread .github/workflows/build-ai-cluster-iso.yml Outdated

fix: close self-register review gaps

ed3c0d2

Co-Authored-By: Codex <noreply@openai.com>

AceHack merged commit 815f1cf into main May 27, 2026
35 checks passed

AceHack deleted the claim/codex-b0855-1-zeta-self-register-service-20260527 branch May 27, 2026 10:28

Copilot AI mentioned this pull request May 27, 2026

docs(archive): Batch archive of 20 PRs #5605

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(B-0855.1): add first-boot self-register service module#5416

feat(B-0855.1): add first-boot self-register service module#5416
AceHack merged 12 commits into
mainfrom
claim/codex-b0855-1-zeta-self-register-service-20260527

AceHack commented May 27, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

AceHack commented May 27, 2026

Uh oh!

AceHack commented May 27, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot commented May 27, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

AceHack commented May 27, 2026

Summary

Checks

Notes

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

AceHack commented May 27, 2026

Uh oh!

AceHack commented May 27, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot commented May 27, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants