Files
computer-playbook/cli/administration/deploy
kevinveenbirkenbach abc5cd5754 fix(coredns): render the Corefile readable to the container user
mkstemp creates its file 0600 and Path.replace carries that mode into the target, so every freshly rendered Corefile was owner-only while coredns runs as nonroot. The container exits with 'open /Corefile: permission denied', name resolution dies for the whole stack, and deploys then fail at whatever they try to fetch first.

Long-running stacks hid it: coredns reads its config once at startup, so a container created before a re-render keeps working. Only new worktree stacks broke.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
(cherry picked from commit efc281e327)
2026-08-09 13:30:57 +02:00
..

Deploy 🚀

Run Ansible deploys against a dedicated inventory, a CI container image, or the development matrix that iterates per-role variants.

  • development/: matrix deploy, include resolution, disable and orphan pruning (with diagrams).
  • ci/: CI container image deploy.