Update the provisioning design/tracking doc for the Phase 1 converge
automation: push-to-main fanout serialized via `needs:` (mirrors
otelcollector), currently dry-run-only with the apply gated/disabled
until the dry runs are proven green. Resolve the "Existing hosts"
open question.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Changed header structure from generic sections to ID-prefixed sections:
- Before: ## ID / ### Description / ### Symptoms / ### How to confirm / ### Ways to fix
- After: ## ID / ### IDXXXX Description / ### IDXXXX Symptoms / ### IDXXXX How to confirm / ### IDXXXX Ways to fix
Updated files:
- permissions.md: PRM0001 Description → PRM0001 Description (headers prefixed)
- calendarsync.md: CAL0001-CAL0003 with prefixed headers (new file)
- toc.md: Updated anchor links to point to 'How to confirm' sections
Benefits:
- No duplicate header text when viewing file with multiple issues
- Unique anchors across the file
- Clearer hierarchy and navigation
- Consistent pattern for future TSG entries
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
DOCKER_BUILDKIT=1 in the build workflow only works if the host has
the buildx CLI plugin installed. Bare docker-ce sometimes ships
without it (Debian/Ubuntu separate packaging). Document the install
so future hosts onboarding to be build targets don't hit the same
'BuildKit is enabled but the buildx component is missing' error.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Invidious (and likely future repos) use `RUN --mount=type=cache` to
keep compiler caches across builds. The legacy docker builder doesn't
support that syntax. Setting DOCKER_BUILDKIT=1 inline is scoped to
this one invocation, doesn't affect the host daemon's default, and is
backwards-compatible with simpler Dockerfiles already in the fleet.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Alexandru Macocian
amacocian