scriptoriumadmin/hypertwist
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Tighten HyperTwist reverse-SSH doctrine links

Browse source
This commit is contained in:
axiomlogicnexus 2026-06-04 01:21:06 +00:00
parent e8e3633411
commit dfbf0b14ba
5 changed files with 10 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
docs/ops/FORGEJO_WOODPECKER_VPS_A_TO_Z_SENSITIVE_RUNBOOK_VPS_12_24_720_UBUNTU_24_04.md
View file

@ -4,12 +4,12 @@ Last updated: 2026-05-31 (UTC)
Scope: Canonical sensitive VPS runbook for the current Forgejo/Woodpecker control plane, extended for the IONOS `VPS 12-24-720` Ubuntu `24.04` Linux target, migration/cutover sequence, and remote-development setup.
Classification: **Highly Sensitive** (contains real credentials, keys/paths, and secrets).
## Reverse-sync execution pointer
## Reverse-SSH recovery pointer
For cross-repo reverse sync behavior, pre-sync gate outcomes, and latest forced
execution evidence, see:
For the current HyperTwist reverse-SSH auth-mode recovery and stale-listener
doctrine, see:
- [VECTORSHELL_REVERSE_SYNC_GATING_AND_EXECUTION_REPORT_2026-06-02.md](/home/dev/src/VectorShell/docs/ops/VECTORSHELL_REVERSE_SYNC_GATING_AND_EXECUTION_REPORT_2026-06-02.md)
- [HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md](/home/dev/src/HyperTwist/docs/ops/HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md)
Lineage note:
- archived predecessor copy: `C:\HyperTwist\docs\ops\archive\DEPRECATED_FORGEJO_WOODPECKER_VPS_A_TO_Z_SENSITIVE_RUNBOOK.md`

3
docs/ops/HYPERTWIST_DEFERRED_TAILSCALE_AND_OPENSSH_LOCAL_REACHABILITY_NOTE_2026-05-31.md
View file

@ -28,6 +28,7 @@ As of `2026-06-01`, the reverse-SSH Windows shell path is also verified live
for HyperTwist Unreal build validation. The current proof note is:
- `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_WINDOWS_BUILD_LANE_VERIFICATION_2026-06-01.md`
- `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md`
## Why reverse SSH fits the immediate need
@ -83,12 +84,14 @@ Current verified tunnel from Windows to VPS:
```powershell
ssh -NT -o ExitOnForwardFailure=yes -o ServerAliveInterval=30 -o ServerAliveCountMax=3 -R 22022:localhost:22 dev@212.227.13.220
ssh -NT -o ExitOnForwardFailure=yes -o ServerAliveInterval=30 -o ServerAliveCountMax=3 -R 22023:localhost:22 dev@212.227.13.220
```
Then from the VPS:
```bash
ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no -o StrictHostKeyChecking=accept-new -o ConnectTimeout=10 -p 22022 -l 'DESKTOP-KS3VGHU\\anthracite ace' localhost
ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no -o StrictHostKeyChecking=accept-new -o ConnectTimeout=10 -p 22023 -l 'DESKTOP-KS3VGHU\\anthracite ace' localhost
```
Credential details remain in the sensitive VPS runbook rather than being

2
docs/ops/HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md
View file

@ -8,7 +8,7 @@ execution look hung.
## Incident signature
- tunnel listener reachable (`localhost:22022`)
- tunnel listener reachable (`localhost:22022`, fallback `localhost:22023`)
- non-interactive command path fails or stalls at auth boundary
- interactive/password-backed path succeeds

2
docs/ops/HYPERTWIST_REVERSE_SSH_WINDOWS_BUILD_LANE_VERIFICATION_2026-06-01.md
View file

@ -18,8 +18,8 @@ This verification sits beneath these authoritative docs:
- `C:\HyperTwist\docs\ops\HYPERTWIST_UNREAL_BUILD_VALIDATION_REQUIREMENT_2026-06-01.md`
- `C:\HyperTwist\docs\ops\HYPERTWIST_DEFERRED_TAILSCALE_AND_OPENSSH_LOCAL_REACHABILITY_NOTE_2026-05-31.md`
- `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md`
- `C:\HyperTwist\docs\ops\FORGEJO_WOODPECKER_VPS_A_TO_Z_SENSITIVE_RUNBOOK_VPS_12_24_720_UBUNTU_24_04.md`
- [VECTORSHELL_REVERSE_SYNC_GATING_AND_EXECUTION_REPORT_2026-06-02.md](/home/dev/src/VectorShell/docs/ops/VECTORSHELL_REVERSE_SYNC_GATING_AND_EXECUTION_REPORT_2026-06-02.md)
Credential details stay in the sensitive runbook.

1
docs/ops/HYPERTWIST_UNREAL_BUILD_VALIDATION_REQUIREMENT_2026-06-01.md
View file

@ -85,6 +85,7 @@ Current related note:
- `C:\HyperTwist\docs\ops\HYPERTWIST_DEFERRED_TAILSCALE_AND_OPENSSH_LOCAL_REACHABILITY_NOTE_2026-05-31.md`
- `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_WINDOWS_BUILD_LANE_VERIFICATION_2026-06-01.md`
- `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md`
That reachability note records the current short-term preference to use reverse
SSH first and defer `Tailscale + OpenSSH` for a calmer setup window.