Repository navigation
Complete managed executor renewal and package deployment - #437
Merged
Merged
Conversation
added 5 commits
October 15, 2026 10:23
ctfbruce
marked this pull request as ready for review
October 15, 2026 08:42
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Managed executors can renew their enrollment certificate with
dbl executor join --renewafter a clean, disabled shutdown. Renewal retains the node ID, key, configuration, native trust and database, validates the new certificate, and gives retry instructions when a one-time token may have been consumed.Fresh Ansible deployments initialize missing databases using the installed release, eliminating separate unsigned seed files. Existing state is preserved. Linux installation instructions select exact compatible packages, and development packages require explicit local installation.
Validation: all 16 CI jobs plus guest-language checks passed on the candidate. Focused join/service race, bootstrap and packaging checks passed. Installed-package rehearsals covered actual systemd enrollment, restart, renewal, used-token refusal/fresh-token retry and new TEST output; browser HTTPS, custom WASM and two-executor HTTP comparison; and 251 deployment checks, including byte-for-byte preservation of populated databases. Sui Testnet checks confirmed successful paid execution, payout, automatic failed-run refund and duplicate receipt handling.
Relates to #168. Renewal remains manual. The HTTP comparison groups results without synchronized start. Testnet payment is per intent; no prepaid balance or browser-wallet acceptance is claimed. No release publication or hosted deployment.