claude-hdb a5d54e4b70 fix(expose): it was pointing the proxy at docker0 — the drill's own oldest trap ... Incus finally said it, once the drill stopped swallowing the error: Connect IP "172.17.0.1" must be one of the instance's static IPv4 addresses 172.17.0.1 is DOCKER0. box_ipv4() returns whatever Incus lists first, and a box running docker lists docker0 first — so expose has been aiming the proxy at the wrong interface all along. This is drill trap 4, verbatim ('docker0 (172.17.x) is the decoy'), which the drill has known since run 4 and the CLI never learned. Now bin/box has its own box_net_ip(): the address ON boxnet, with the prefix derived from the network rather than hardcoded. And the connect address is now the wildcard 0.0.0.0: in NAT mode Incus resolves the instance's own current address off the bridge's neighbour table. Naming an address makes it demand a *static* one — the very demand that produced the error, for an address that was wrong anyway. Ask Incus for less and it finds the box itself.		2026-07-14 20:45:09 +00:00
..
box	fix(expose): it was pointing the proxy at docker0 — the drill's own oldest trap	2026-07-14 20:45:09 +00:00