From 77e719183a324a011da3e46c6a6f8b016e0e21cb Mon Sep 17 00:00:00 2001 From: Lotus CI Date: Tue, 13 Oct 2026 01:34:10 -0400 Subject: [PATCH] draupnir: enable Rust crypto so it can read commands in the encrypted management room MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The management room is end-to-end encrypted, but Draupnir ran with experimentalRustCrypto: false and Pantalaimon off, so it could post there (its own messages are unencrypted) but never saw commands: its last reply to a command was ~57 days ago, and `!draupnir rooms add …` sent from Lotus on 2026-10-13 was ignored. The same command sent unencrypted worked at once (✅, joined dco-memes-minecraft). Merging deploys via lxc110-draupnir.sh, which restarts draupnir. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5 --- draupnir/production.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/draupnir/production.yaml b/draupnir/production.yaml index d4899e5..77d0d1a 100644 --- a/draupnir/production.yaml +++ b/draupnir/production.yaml @@ -7,7 +7,11 @@ pantalaimon: username: draupnir password: "" -experimentalRustCrypto: false +# The management room (and most Lotus rooms) are end-to-end encrypted. Without +# crypto Draupnir can post there but can't read commands, so `!draupnir …` was +# silently ignored (LotusGuild/cinny audit, 2026-10-13). Rust crypto stores its +# keys under dataPath. +experimentalRustCrypto: true dataPath: "/data/storage"