box/fleet/tasks/done/211-container-ssh-perms-dark-node-recovery-unbloc.md

211-container-ssh-perms-dark-node-recovery-unbloc: Container SSH Perms & Dark Node Recovery (unblock def, dev, pip)

Goal: ### Goal Restore container reverse tunnels and SSH dial-in permissions across fleet nodes (def, dev, pip, muse).

Background

SSHD requires non-group-writable authorized_keys (chmod 600 ~/.ssh/authorized_keys). Stale /run/nologin or missing id_frontdoor keys on dark nodes prevent connection.

Implementation Steps

1. In ~/workspace/box, checkout branch dev/opm/211-container-ssh-recovery.
2. Inspect recovery scripts and verify port connectivity (2225, 2226, 2227, 2229).
3. Commit with "Fixes #211" and push to origin/master to verify automatic ticket closure via the Gitea hook.

Steps:

1. Claim task on feature branch builder/container-ssh-perms-dark-node-recovery-unbloc.
2. Implement solution adhering to test coverage.
3. Commit with "Fixes #211" and push to master/PR.

Done criteria: result notes appended below; file moved to done/.

Result notes (append below before moving to done/):

2026-10-09 22:43:10Z: Closed via Gitea issue #211