forked from heavy-duty/box
The 0.4.0 transition is zero-ceremony (install + setup-host = a dual-stack host). This script is the two things that path does not do: - --box <name> / --all-boxes: re-home a pre-rename box onto the new stack, PRESERVING its authed state (no re-login). Order is load-bearing — tag first (additive, reversible), profile-assign last (the network move), then verify the box actually resolves + reaches the internet on its 10.88 leg before declaring it migrated. A box never ends up tagless or profileless. - --retire-legacy: remove claudenet/claude-dev/claude-isolate and the old firewall unit + nft tables, but REFUSE while any legacy box still references them; assert their absence rather than trust exit codes. Drill phase M builds a faithful legacy stack (claudenet on 10.87, a claude-dev profile pinned to it, a box on the old tag), then proves: retire refuses with a legacy box present, re-home flips the tag + reassigns box-net + lands a 10.88 address + resolves, and retire then succeeds and leaves nothing. The transition is measured, not asserted. Closes #53 |
||
|---|---|---|
| .. | ||
| box-firewall.service | ||
| box-firewall.sh | ||
| migrate-host.sh | ||
| setup-host.sh | ||
| teardown-host.sh | ||