chrisfu abc458260c ansible: lock in docker_build_host role for the arm64 build lane (gandalf) ... Provisions the docker engine on [build_hosts] (gandalf) for the native arm64 daily knoe-db image build → registry.knoe.dev, run via a remote buildx builder. gandalf is also a k3s_agent, so the role holds iptables FORWARD=ACCEPT to protect k3s pod networking (docker's containerd coexists with k3s's on separate sockets). Verified idempotent: --check against gandalf = ok=5, changed=0. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-21 15:11:08 -07:00
..
group_vars	fix(samba_ad_dc): bind to LAN IP only so the DC stops registering junk DNS	2026-06-10 00:43:28 -07:00
host_vars	feat(winrm): wire Ansible WinRM for morgoth+fairyland Windows GPU hosts	2026-06-02 02:16:05 -07:00
hosts.ini	ansible: lock in docker_build_host role for the arm64 build lane (gandalf)	2026-06-21 15:11:08 -07:00