diff --git a/docs/current-work.md b/docs/current-work.md index 16c5db4..65bba30 100644 --- a/docs/current-work.md +++ b/docs/current-work.md @@ -36,6 +36,10 @@ The unedited `~/sync/notes/setup-todo.md` remains an idea inbox, not authorizati - Focused source/configuration review only. No tests, host evaluation/build, `just validate`, activation or remote changes. No existing secrets were decrypted or read for discovery. +- A user-run Orion build failed compiling Contour's SIMD code, pulled in by + `enableAllTerminfo`. Orion now selects Kitty terminfo for workstation SSH clients + instead of the complete terminal set. The pinned NixOS module was inspected; + formatting and focused diff review only. No rebuild was run after this fix. ## Implemented, reviewed and validated; awaiting user checkpoint diff --git a/docs/design.md b/docs/design.md index e1f4557..af37dff 100644 --- a/docs/design.md +++ b/docs/design.md @@ -22,6 +22,7 @@ a provisional ownership boundary, not a different workstation variant. Steam and LAN SSH on Polaris, and laptop power/firmware management on Zenith, are deliberate. Orion owns shared services. Tailnet administration supplements existing access; public Orion SSH closes only after private access is verified. Web services stay public. +Orion installs Kitty terminfo for SSH sessions from the workstations. Wardrowbe uses a password gateway for trusted household access, followed by profile selection inside the app; verified individual identity is deferred. Its internal AI diff --git a/modules/hosts/orion/default.nix b/modules/hosts/orion/default.nix index 22511b6..6e8cc5a 100644 --- a/modules/hosts/orion/default.nix +++ b/modules/hosts/orion/default.nix @@ -10,7 +10,7 @@ in stateVersion = "24.05"; }; - flake.modules.nixos.orion = { + flake.modules.nixos.orion = { pkgs, ... }: { imports = [ nixosModules.host-base @@ -29,7 +29,8 @@ in ./_disk.nix ]; - environment.enableAllTerminfo = true; + # SSH clients on both workstations use Kitty. + environment.systemPackages = [ pkgs.kitty.terminfo ]; users.users.${config.facts.account.name}.linger = true; };