Skip to content

v1.7.0 — Terraform route, student runbooks, desktop fixes

Choose a tag to compare

View all tags
@oriolrius oriolrius released this 30 Sep 11:25
· 64 commits to main since this release
v1.7.0
a753bc3

Highlights

Terraform, equivalent to CloudFormation

  • New terraform/ creates the same instance and security group as cloudformation.yaml: t3a.xlarge, 25 GB gp3, ports 22 and 8888-8889, key pair ec2-key.
  • It also creates a minimal public VPC, so it works in accounts without a default VPC, such as the course sandbox.
  • Provisioning is unchanged: the same Ansible playbook.

No more JUPYTER_IP

  • The inventory finds the host by itself through scripts/host-ip.sh: JUPYTER_IP if set, else the Terraform output, else the running instance of the ec2-console CloudFormation stack.

Step-by-step student runbooks

  • docs/RUNBOOK-terraform.md (recommended) and docs/RUNBOOK-cloudformation.md.
  • They cover tools, AWS login, SSH key, launch, Ansible, guided Chrome Remote Desktop setup, stop/start to save money, and teardown.
  • The README now links to them instead of duplicating the steps. It also has current eu-west-1 prices with a monthly cost column.

Desktop and tooling

  • Fix: the "Authentication is required to create a color managed device" prompt no longer appears in Chrome Remote Desktop sessions (polkit rule for colord).
  • Fix: the XFCE dock launchers (Kitty, Files, Chrome, VS Code) are now deployed. The panel config referenced them, but they were never shipped, so the icons showed as broken.
  • New: herdr (runtime for coding agents) installed with the terminal tag.

CI

  • Checkov: skip the CKV_AWS_260 false positive on the DBAI port-80 rule, which only opens to explicit CIDRs or the VM's own IP. This makes main green again.

Also included since v1.6.0 (DBAI course path, dbai/)

  • #11 adopt-student-root: S6 adoption after a zero-change plan
  • #12 verify the replacement host identity before reconnecting
  • #14 / #15 / #16 full S6 restore route, timed recovery evidence, and console.sh recover triage
  • #17 S2–S7 profiles qualified, S8 k3s transition, exam preflight
  • #18 the recovery chat ping uses the nan.builders course-chat
  • #19 / #20 / #21 operations capacity qualification and operations-0.3.0 (30 GB root, own-EIP port 80)

Full Changelog: v1.6.0...v1.7.0

Assets 2
Loading