build-status: production server v0.2.0 live on the fmr VM
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Opus 5
parent
43e1ba778a
commit
507a8bfc1f
@@ -214,3 +214,13 @@ Two collection-loop gotchas found while driving the phone over USB:
|
|||||||
3. Start the Go server skeleton (enrollment + profile + sessions + UDP echo with observation
|
3. Start the Go server skeleton (enrollment + profile + sessions + UDP echo with observation
|
||||||
blocks + canary-DNS reference records) per probe-protocol.md.
|
blocks + canary-DNS reference records) per probe-protocol.md.
|
||||||
4. Fold confirmed capabilities into the production `core-probe` / `core-shizuku` modules.
|
4. Fold confirmed capabilities into the production `core-probe` / `core-shizuku` modules.
|
||||||
|
|
||||||
|
## Production probe server — LIVE on dedicated VM "fmr" (2026-07-31)
|
||||||
|
`echolot-server v0.2.0` runs natively (systemd, no docker) on a dedicated VM: 2×IPv4 + 2×IPv6
|
||||||
|
service addresses (fmr-1/fmr-2.echo-lot.app, dual-stack DNS), a third IPv6 (`::2`) reserved for
|
||||||
|
SSH only — verified untouched by the daemon (explicit multi-address binds, no wildcard).
|
||||||
|
Control: fmr-1:8443 (SPKI pin `zRV9qkiLnRexAeh4RrSfJzbPWO+U/2Oj2/NVM/KfXlg=`, verified
|
||||||
|
externally over v4+v6). UDP data plane on all four service addresses :8442 — the second IP is
|
||||||
|
the stun-5780 substrate. Daily randomized self-update timer installed (checksum-verified
|
||||||
|
against SHA256SUMS; signature verification still TODO before treating the source as untrusted).
|
||||||
|
Host config in `/etc/echolot-server.env`. SSH access for sessions: `ssh claude-echolot`.
|
||||||
|
|||||||
Reference in New Issue
Block a user