[EMACS] Fix daemon socket + per-user identity and audit trail on Bezalel #429

Open
opened 2026-04-08 22:50:30 +00:00 by Timmy · 0 comments
Owner

Problem

Emacs daemon starts on Bezalel VPS but socket file is never created. server-start says "Restarting server" but the socket in /root/.emacs.d/server/ never appears. Process runs, socket doesnt.

What exists (Bezalels work)

  • init.el with server-start, audit hooks, TRAMP
  • bezalel-fleet.el with agent registry, IRC dispatch
  • alexander-home.el with full Emacs config
  • ngircd on port 6667 (IRC server works)
  • sacred_bridge.sh for Telegram mining

What needs fixing

  1. Socket creation — daemon starts but server-start doesnt create the socket. May be a race condition or package-install blocking.
  2. Per-user access — created Unix users (timmy, ezra, allegro, alexander) with fleet group. Socket needs to be accessible by group.
  3. Audit trail — fleet-audit function written but untested because socket doesnt work.
  4. Alexander wants identity — every edit must show WHO made it. No unilateral root access.

Users created

  • timmy (uid 1000), ezra (uid 1001), allegro (uid 1002), alexander (uid 1003)
  • Group: fleet (all agents)
  • Shared workspace: /srv/fleet/
  • Audit log: /srv/fleet/logs/emacs-audit.log

Acceptance Criteria

  • emacsclient -s bezalel -e "(+ 1 1)" returns 2
  • Different users show different identity in audit log
  • /srv/fleet/logs/emacs-audit.log shows user=timmy vs user=alexander
  • No agent has unilateral ability to edit without leaving a trace
## Problem Emacs daemon starts on Bezalel VPS but socket file is never created. server-start says "Restarting server" but the socket in /root/.emacs.d/server/ never appears. Process runs, socket doesnt. ## What exists (Bezalels work) - init.el with server-start, audit hooks, TRAMP - bezalel-fleet.el with agent registry, IRC dispatch - alexander-home.el with full Emacs config - ngircd on port 6667 (IRC server works) - sacred_bridge.sh for Telegram mining ## What needs fixing 1. **Socket creation** — daemon starts but server-start doesnt create the socket. May be a race condition or package-install blocking. 2. **Per-user access** — created Unix users (timmy, ezra, allegro, alexander) with fleet group. Socket needs to be accessible by group. 3. **Audit trail** — fleet-audit function written but untested because socket doesnt work. 4. **Alexander wants identity** — every edit must show WHO made it. No unilateral root access. ## Users created - timmy (uid 1000), ezra (uid 1001), allegro (uid 1002), alexander (uid 1003) - Group: fleet (all agents) - Shared workspace: /srv/fleet/ - Audit log: /srv/fleet/logs/emacs-audit.log ## Acceptance Criteria - [ ] emacsclient -s bezalel -e "(+ 1 1)" returns 2 - [ ] Different users show different identity in audit log - [ ] /srv/fleet/logs/emacs-audit.log shows user=timmy vs user=alexander - [ ] No agent has unilateral ability to edit without leaving a trace
Timmy self-assigned this 2026-04-08 22:50:31 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Timmy_Foundation/timmy-config#429