3 Commits

Include renames

Author	SHA1	Message	Date
Rob Thijssen	4a9b09f442	feat(deploy): update node service name to baba-gorchitsa ... This change updates the `--name` parameter in the quantus-node systemd service to use "baba-gorchitsa" instead of the hostname. This ensures a consistent node identifier across deployments.	2026-08-31 18:10:39 +03:00
Rob Thijssen	e936597806	fix: the inner_hash is public config, not a secret ... The node embeds the reward preimage verbatim in the PreRuntime digest of every block it authors (client/consensus/qpow/src/lib.rs:726), and the mining-rewards pallet reads that digest back to derive the payout address on-chain. It is public from the first mined block. So the Gitea secret, the 0640 handling and the ps-visibility caveat were all theatre over a value published on a blockchain. It moves to the workflow env: block with the rest of the infra truth, and infra-setup.sh loses --mint-reward-key entirely along with its pass and Gitea-API dependencies. This also answers why the node takes a preimage and not an address: the runtime does the derivation, which is what proves the payout target is a canonical wormhole address rather than an arbitrary account. An address would give it nothing to verify.	2026-08-31 17:37:31 +03:00
Rob Thijssen	e3dfd73f2f	feat: deploy a quantus planck node and external gpu miner ... Node on bob, external GPU miner on benjy, split because --miner-listen-port disables the node's built-in CPU mining. The PoW is Poseidon2 over Goldilocks: register-resident, no memory hardness, dominated by 64-bit modular multiplication. Measured on the fleet, GPU beats CPU by ~200x (RTX 5090 368 MH/s @ 600W, RTX 4090 183 MH/s @ 450W, Ryzen 9 9950X3D 4.15 MH/s), so CPU mining is disabled everywhere including on the GPU hosts. The workflow deploys or validates. Validate mode asserts the hash counter is advancing and the GPU is drawing power, because a miner that enumerated no adapter and a node authoring nothing both look healthy to systemctl is-active. infra-setup.sh provisions the scoped gitea_ci accounts, generates the node's libp2p key (the node refuses to start without one and it must never be rotated by a deploy), and derives the reward preimage from a seed phrase on stdin. It deliberately will not mint a fresh wallet: that phrase is escalation-grade and fails agent-credentials.md §1.	2026-08-31 16:55:05 +03:00