Hosts¶
Every physical and virtual host in the Dashecorp/Invotek infrastructure.
Active Hosts¶
| Host | Tailscale IP | OS | Location | Role | SSH Access |
|---|---|---|---|---|---|
| MacBook Air M4 24GB | 100.126.195.52 | macOS 15 (Darwin 25.1) | Oslo | Dev machine, Claude Code (workspaces 3-6) | Local |
| Dell Precision 5520 (dell-stig-1) | 100.95.212.93 | Ubuntu 24.04 LTS | Oslo | k3s cluster (legacy, scaled down) | ssh -i ~/.ssh/dell-stig-1 claude@100.95.212.93 |
| VPS srv1099021 (Volt-E) | 100.111.142.118 | Linux (x86_64) | Boston, USA | Volt-E (agent-runner, systemd) | ssh -i ~/.ssh/vps-srv1099021 root@100.111.142.118 |
| Pi4-02 8GB | 100.77.12.75 | Linux (ARM64) | Oslo | Spare/legacy node — former Review-E host (agent-runner retired; Review-E now runs in the GCP k3s cluster as rig-agent-runtime pods) | ssh -i ~/.ssh/rpi-pi4-02 claude@100.77.12.75 |
| Pi4-03 8GB (Pi-E) | 100.107.48.17 | Linux (ARM64) | Oslo | Pi-E agent (agent-runner, systemd) | ssh -i ~/.ssh/rpi-claude claude@100.107.48.17 |
| Mac Mini M4 | 100.92.170.124 | macOS (Apple Silicon) | Oslo | iBuild-E (agent-runner, LaunchAgent) + iClaw-E (agent-runner, LaunchAgent) — no CI runner (self-hosted macOS runner retired 2026-06-29; ios-sdk CI now runs on GitHub-hosted macos-26) |
ssh -i ~/.ssh/mac-executor claude@100.92.170.124 |
| DS412+ (NAS) | 100.95.36.122 | Linux | Oslo | Synology NAS (~9TB) — NFS volumes for k3s | — |
| Pi4-01 | 100.73.159.126 | Linux (ARM64) | Oslo | Tailscale exit node | ssh -i ~/.ssh/rpi-pi4-01 claude@100.73.159.126 |
Mobile Devices (Tailscale)¶
| Device | Tailscale IP | OS | Notes |
|---|---|---|---|
| Samsung Galaxy A17 | 100.90.74.87 | Android | Pushbullet SMS forwarding |
| iPhone 15 Pro Max | 100.110.193.124 | iOS | Primary phone |
| iPad (10th gen) | 100.75.46.53 | iOS | — |
Retired/Offline Nodes¶
| Node | Tailscale IP | Last seen | Notes |
|---|---|---|---|
| 9f71f0bfa6c6 | 100.93.47.98 | 131d ago | Unknown container |
| google-cloud-debian-1 | 100.95.117.82 | 42d ago | GCP instance |
| kubectl-jumpbox | 100.75.171.111 | 271d ago | Retired |
| win-pw0edb77-1 | 100.124.218.17 | — | Private machine (not part of infra) |
| iPad Pro 12.9 6th Gen | 100.74.168.115 | 20d ago | — |
VNC Access¶
| Host | Protocol | Address | Port | Client | When needed |
|---|---|---|---|---|---|
| Mac Mini M4 | VNC (macOS Screen Sharing) | 100.92.170.124 |
5900 | Screens app | Maintenance, claude login |
| Mac Mini M4 | noVNC (browser) | https://100.92.170.124:6080/vnc.html |
6080 | Browser (HTTPS required) | Fallback if Screens unavailable |
| Volt-E (VPS) | VNC (x11vnc) | 100.111.142.118 |
5900 | Screens app | claude login for OAuth refresh |
| Volt-E (VPS) | noVNC (websockify) | http://100.111.142.118:6080 |
6080 | Browser | Fallback |
| Pi4-02 (spare) | VNC (x11vnc) | 100.77.12.75 |
5900 | Screens app | Former Review-E host — Review-E now in GCP k3s; node is spare |
| Pi-E (Pi4-03) | VNC (x11vnc in Docker) | 100.107.48.17 |
5900 | Screens app | Normally not needed (token pushed) |
| Pi-E (Pi4-03) | noVNC (Docker) | http://100.107.48.17:6080 |
6080 | Browser | Fallback |
VNC Notes¶
- All connections require Tailscale — connect via 100.x.x.x addresses
- Mac Mini M4 noVNC: Must use HTTPS (self-signed cert) —
crypto.subtlerequires secure context for ARD auth - Mac Mini M4 Screen Recording: If VNC shows black screen, check System Settings → Privacy & Security → Screen Recording is enabled. Disabling Remote Management first may be needed to unlock the toggle (macOS Sequoia requirement).
- Volt-E: Runs LXDE desktop with x11vnc (systemd service
xvfb-vnc.service). Pi4-02 (the former Review-E host) has the same setup but is now a spare; Review-E runs in GCP k3s. - Pi-E: VNC runs inside Docker container (ports 5900 + 6080 exposed)
- Recommended client: Screens app (iOS/macOS) — works with all hosts
Troubleshooting: claude CLI hangs on the Mac Mini (keychain wedge)¶
Symptom: claude (interactive, -p, or --debug) hangs at startup with zero output; the debug log (~/.claude/debug/*.txt) stops at CA certs: Config fallback; security commands — even security list-keychains — hang and pile up /usr/bin/security procs (PPID 1).
Cause: the macOS keychain daemon (securityd) is wedged (observed at ~17-day uptime) and/or a stuck keychain-authorization dialog is sitting unanswered on the headless GUI — a claude CLI version bump re-signs the binary, so macOS re-prompts "allow access to keychain item 'Claude Code'?" and nobody can click it. claude reads its OAuth credential via security find-generic-password -a claude -s "Claude Code", which then blocks. Token/network/trust are fine (the OAuth token returns HTTP 200 via curl), and the hang is identical over Tailscale SSH and LAN SSH — so it is not a network or session-context issue.
Cannot be fixed from SSH: killall secd doesn't clear it, and securityd is SIP-protected — sudo killall securityd is a no-op (same PID), and sudo launchctl kickstart -k system/com.apple.securityd returns 150: Operation not permitted while System Integrity Protection is engaged.
Fix:
1. Preferred (no reboot): VNC to the Mac screen over Tailscale (Screens → 100.92.170.124:5900, or noVNC https://100.92.170.124:6080/vnc.html) and click Always Allow on the keychain dialog (enter the login password). Releases securityd; the ACL update stops future prompts.
2. Fallback: sudo reboot — auto-login (autoLoginUser=claude) unlocks the login keychain on boot, giving a fresh securityd.
Verify: cd /tmp/rtd-demo/cc-demo-repo && claude -p "Reply PONG" --strict-mcp-config returns a reply within seconds (instead of hanging).
SSH to the Mac Mini via the Pi-E LAN jump¶
Pi-E (LAN 192.168.1.105, also routed onto the 192.168.68.x segment) reaches the Mac Mini's native sshd on its LAN IP 192.168.68.131 (port 22). Useful as an alternate SSH path — note that VNC ports 5900/6080 are filtered on the Mac's LAN IP, so use the Tailscale IP for VNC:
ssh -i ~/.ssh/mac-executor \
-o ProxyCommand="ssh -i ~/.ssh/rpi-claude -W %h:%p claude@100.107.48.17" \
claude@192.168.68.131
(This is only an access path; the keychain wedge described above affects this session too.)
Physical Locations¶
Oslo (Home):
├── MacBook Air M4 (desk) — dev
├── Dell Precision 5520 (i7, 32GB, 233GB NVMe) — k3s cluster
├── Mac Mini M4 — iBuild-E + iClaw-E
├── Raspberry Pi 4-01 — exit node
├── Raspberry Pi 4-02 — spare/legacy (former Review-E host; Review-E now in GCP k3s)
├── Raspberry Pi 4-03 — Pi-E
├── Synology DS412+ (~9TB) — NFS for k3s
└── Mobile devices
Boston (Hostinger DC):
└── VPS srv1099021 — Volt-E