HydraIssues

Issues / #479
Onboard Cyborn (Gallo-Romeins Museum) to Perforce — new depot + user koen@cyborn.be
closed unclassified Project: hydraperforce Reporter: 10 Aug 2026 19:25

Description

Set up Perforce access for Cyborn to deliver the Gallo-Romeins Museum Tongeren Unreal build directly, mirroring the Rupelmonde/Tommaso onboarding (#434).

Server: ssl:perforce.visitflanders.experiencenet.com:1666 (admin hydra_admin, super). Watcher: hydraperforcewatcher on node 'perforce' (visitflanders-perforce, 88.198.195.179).

Steps:

  1. Create stream depot 'galloromeinsmuseum' with mainline //galloromeinsmuseum/main.
  2. Create least-privilege group 'CybornContrib'.
  3. Create user 'koen' (koen@cyborn.be, Cyborn) in that group; set a strong temp password; require reset on first login.
  4. Protections: write group CybornContrib * //galloromeinsmuseum/... only (verify no access to soulmade/hydra/rupelmondecastleviewer).
  5. Add a watch to hydraperforcewatcher config for //galloromeinsmuseum/main so builds auto-publish to hydramirror + report to the dashboard.
  6. Send onboarding email (server/user, depot layout, P4V steps) + separate password email to koen@cyborn.be.

BLOCKERS:

  • License: free tier is 5 users / 20 workspaces and the server is currently at 5/5 standard users (Andries, DavyHoskens, hydra_admin, hydraperforce_svc, tommaso). Adding koen needs a seat freed. DavyHoskens (create.eu) has been idle since 2025-10-17 and is the candidate to delete, OR upgrade the license. Needs a decision.
  • hydra_admin ticket on the box is expired; the super password is required to perform any of the above. Someone logged in as hydra_admin on 2026-08-07, so it is known to the team.

Related: gallo-romeins venue/experience is already live (pico-native, node fluffy-dumpling-87). This issue is only the build-delivery Perforce pipeline.

Comments (3)

claude-ops 10 Aug 2026 19:44

DONE 2026-08-10 — set up as a NEW dedicated Perforce server (not a depot on visit.flanders, which was at the 5/5 free-license cap and 94% disk).

Server: perforce.galloromeins.experiencenet.com (195.201.88.170, Hetzner cx43 nbg1 'galloromeins-perforce', hydraexperiencenet ctx). Helix Core 2026.1, instance p4hydra, Security Level 3. Depot: stream depot 'galloromeinsmuseum', mainline //galloromeinsmuseum/main.

Accounts: hydra_admin (super); koen (koen@cyborn.be, group CybornContrib, write //galloromeinsmuseum/... ONLY, temp password with forced reset on first login); hydraperforce_svc (read-only, unlimited ticket). Verified koen has no access outside the depot.

Watcher: hydraperforcewatcher running on the box (agent_id galloromeins), watching //galloromeinsmuseum/main/Builds/..., uploads to nbg1.hydramirror, reports to hydraperforce dashboard (agent_count 1->2, confirmed). Binary built from source — release server has no published binary (see #114).

Runbook: hydraperforcewatcher/docs/runbooks/galloromeins-perforce.md.

REMAINING: send Koen the onboarding + password emails (password delivered to cederik out-of-band, NOT in this tracker). Cyborn must submit with a stream-bound client and place packaged builds under //galloromeinsmuseum/main/Builds/ for auto-publish.

--- ONBOARDING EMAIL TEMPLATE (no password) ---
Subject: Perforce access — Gallo-Romeins Museum (Cyborn)

Hi Koen,

You now have Perforce (Helix Core) access to deliver the Gallo-Romeins Museum Unreal build.

Server (P4PORT): ssl:perforce.galloromeins.experiencenet.com:1666
User: koen
Depot: //galloromeinsmuseum/main (stream depot, mainline)

Getting started (P4V or p4 CLI):

  1. Add the connection with the P4PORT above; accept the SSL fingerprint when prompted (p4 trust).
  2. Log in with the temporary password sent separately. You will be forced to set your own password on first login (p4 passwd).
  3. Create a workspace bound to the stream //galloromeinsmuseum/main (Stream field set — a classic View workspace cannot submit to a stream depot).
  4. Put packaged builds under //galloromeinsmuseum/main/Builds/ — those are picked up automatically and published to the render fleet.

Unreal + Perforce tips: enable Source Control = Perforce in-editor; keep Binaries/Build/Intermediate out of source (add to your typemap/ignore) but do NOT strip Binaries/ThirdParty (redistributables).

Cheers

claude-ops 11 Aug 2026 17:48

Update: the server is cx33, not cx43. It was first built on cx43 (160 GB), then rebuilt on cx33 (4 vCPU / 8 GB / 80 GB, ~EUR 8.49/mo) to cut cost. Hetzner cannot downgrade a server to a type with a smaller disk, so an in-place change failed; the rebuild was safe because nothing was onboarded yet. Same IP (195.201.88.170), same hostname, same passwords. Depot, users, protections and the watcher were recreated and re-verified (dashboard agent_count 2, port 1666 reachable). #480 (Koen onboarding email) is unchanged and still valid. Runbook updated.

claude-ops 15 Aug 2026 22:25

Closed — superseded by the migration to a per-org scale and completed end to end: Cyborn is onboarded (koen), delivering builds via Jenkins to //galloromeinsmuseum/main, and their build is live on the venue body. Ongoing/related work tracked in #484 (automation), #490 (creator dashboard), #491 (done, service account).