TSYS Group » Chief Operations Officer » Known Element Enterprises - Technology & Facility Services

Naming convergence complete 2026-08-26. Convention confirmed fleet-wide: sectestbed-|preprod- + bare/tsys-/pfv- (prod). Resolved: VM 51012 guest renamed to sectestbed-hfnoc-uisp (UISP lineage now fully consistent at all 3 tiers); duplicate DNS ultixfield.knel.net deleted (canonical ultix-field; stale netinfra-01 cache entry expires by TTL ~1h — zone store + netinfra-02 clean). Scope: tsys-cloudron-new/tsys-cloudron excluded from all audits (prod revenue VPS); homeassistant + umbrel by-design no-SSH. Final audit v2: 54 OK / 16 SSH fail (key deploys + appliance access decision) / 2 by-design / 1 offline (stlp-3dscanner). Script updated + committed (07ad445). HFNOC GIS/app lineage (zero footprint) proposed in #448. Audit log: Discourse #298; report + resolution: #312; inventory correction: #307.

Root-access probe on all former localuser-fails: 13/16 accept root (Proxmox appliances, stlpc via labuser-era model, jetson, ultix-field). pfvsvrpi confirmed localuser+sudo (it is a localuser fleet box, not subodev). Score now 65 OK / 5 fail / 2 by-design / 1 offline. Remaining fails are interactive-only: sectestbed-sandbox (localuser key), tsys-ucs-01/02 (no agent-accessible user), pfv-jetson-nano-1 (subodev key deploy, root already works). Script corrected + committed (8a6a985). Report thread: https://community.turnsys.com/t/312

Scope final: stlp-3dscanner and sectestbed-sandbox removed from audit (sandbox is a disposable break-fix VM rolled back via Proxmox; 3dscanner long-offline, user pulled it). Remaining known failures: tsys-ucs-01/02 (root key push — user pushing via ZOC now) and pfv-jetson-nano-1 (subodev key). Effective score with final scope: 65 OK / 3 fail / 2 by-design.

Verified post-ZOC: tsys-ucs-01 and tsys-ucs-02 both accept root key auth (USER=root confirmed). Fleet score: 67 OK / 1 fail (pfv-jetson-nano-1 subodev key only) / 2 by-design.

Naming convergence COMPLETE. User applied Tailscale admin renames (pfv-bms, tsys-umbrel); MagicDNS serves canonical names; audit keys on MagicDNS name (a01c916). Final: 67 OK / 2 by-design / 1 transient (kali-tsys TS presence flap, SSH verified). Four-way alignment (VM/DNS/Tailscale/OS hostname) holds across entire in-scope fleet — zero mismatches. Out of scope: tsys-cloudron + netbird (Reston VPSes), stlp-3dscanner, sectestbed-sandbox. Full narrative: https://community.turnsys.com/t/312