ks4/README: note the incus exec sudo grant

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Julien Lutran
2026-08-28 16:04:34 +02:00
co-authored by Claude Fable 5
parent a0e3a7dd86
commit 7d5d1d9b6b
+2 -1
View File
@@ -6,7 +6,8 @@ Incus host at OVH — public-facing self-hosted services.
ZFS pool `data` on `sda5`) — setup & rebuild: ZFS pool `data` on `sda5`) — setup & rebuild:
[install.md](install.md) [install.md](install.md)
- SSH: `ssh -i id_rsa_claude -p 2233 julien@193.70.35.17` - SSH: `ssh -i id_rsa_claude -p 2233 julien@193.70.35.17`
(`julien` has passwordless `sudo incus …`) (`julien` has passwordless `sudo incus …`, including
`sudo incus exec …`; the backup crons themselves run as root)
- Instances are on a NAT bridge `incusbr0` (192.168.1.0/24); public - Instances are on a NAT bridge `incusbr0` (192.168.1.0/24); public
ingress via Incus proxy devices. `gateway` (nginx) is the sole HTTP/S ingress via Incus proxy devices. `gateway` (nginx) is the sole HTTP/S
entry point and fans out to the app containers. entry point and fans out to the app containers.