From 080c3e1f0e9ddf030e52a50adae133f15f43db6d Mon Sep 17 00:00:00 2001
From: forgejo-actions <forgejo-actions@git.g3e.fr>
Date: Mon, 5 Oct 2026 19:15:15 +0000
Subject: [PATCH] docs: build de e3b95cdfa4975f3a517795cd21829c0ed0936ccb

---
 main/_images/architecture-cluster-dark.svg    |  155 ++
 main/_images/architecture-cluster.svg         |  155 ++
 main/_images/topologie-cluster-dark.svg       |   52 -
 main/_images/topologie-cluster.svg            |   52 -
 main/architecture/contraintes.html            |    7 +
 main/architecture/index.html                  |    7 +
 main/architecture/stockage.html               |    7 +
 main/architecture/vue-densemble.html          |    7 +
 main/concepts/cycle-de-vie.html               |    7 +
 main/concepts/index.html                      |   13 +-
 main/concepts/metadata-cloud-init.html        |    7 +
 main/concepts/modes-reseau.html               |    7 +
 main/concepts/vpc-subnet-vm.html              |    7 +
 main/demarrage/index.html                     |    7 +
 main/demarrage/installation.html              |    7 +
 main/demarrage/premier-vpc.html               |    7 +
 main/deploiement/architecture-cluster.html    |   17 +-
 main/deploiement/image-qcow2.html             |   25 +-
 main/deploiement/index.html                   |    7 +
 main/deploiement/premier-hyperviseur.html     |   83 +-
 main/deploiement/route-reflector.html         |  147 +-
 main/deploiement/routeurs.html                |  114 +-
 main/developpement/index.html                 |  443 +++++
 main/developpement/lab.html                   | 1472 +++++++++++++++++
 .../exploitation/api-agent/asynchronisme.html |    7 +
 main/exploitation/api-agent/index.html        |    7 +
 main/exploitation/api-agent/reference.html    |    7 +
 main/exploitation/configuration.html          |    7 +
 main/exploitation/diagnostic.html             |   13 +-
 main/exploitation/index.html                  |    7 +
 main/exploitation/observabilite.html          |    7 +
 main/exploitation/services.html               |    7 +
 main/genindex.html                            |    7 +
 main/http-routingtable.html                   |    7 +
 main/index.html                               |   11 +
 main/objects.inv                              |  Bin 1021 -> 1066 bytes
 main/search.html                              |    7 +
 main/searchindex.js                           |    2 +-
 main/versions/0.1.0.html                      |    7 +
 main/versions/0.2.0.html                      |    7 +
 main/versions/index.html                      |    7 +
 41 files changed, 2779 insertions(+), 150 deletions(-)
 create mode 100644 main/_images/architecture-cluster-dark.svg
 create mode 100644 main/_images/architecture-cluster.svg
 delete mode 100644 main/_images/topologie-cluster-dark.svg
 delete mode 100644 main/_images/topologie-cluster.svg
 create mode 100644 main/developpement/index.html
 create mode 100644 main/developpement/lab.html

diff --git a/main/_images/architecture-cluster-dark.svg b/main/_images/architecture-cluster-dark.svg
new file mode 100644
index 0000000..483d0f0
--- /dev/null
+++ b/main/_images/architecture-cluster-dark.svg
@@ -0,0 +1,155 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 736" width="1000" height="736" role="img" aria-label="Architecture du cluster : routeurs, route reflector, hyperviseurs, plans de données et de contrôle">
+  <style>
+    .lbl { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 14px; fill: #e6edf3; }
+    .sub { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 11px; fill: #9198a1; }
+    .grp { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 12px; font-weight: 600; fill: #9198a1; letter-spacing: .04em; }
+    .ctrlt { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 11px; fill: #c297ff; }
+    .datat { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 11px; font-weight: 600; fill: #4493f8; }
+    .box { fill: #22272e; stroke: #6e7781; stroke-width: 1.5; }
+    .group { fill: #1c2128; stroke: #444c56; stroke-width: 1.5; }
+    .pill { fill: #22272e; stroke: #9198a1; stroke-width: 1.5; }
+    .bus { stroke: #9198a1; stroke-width: 4; fill: none; stroke-linecap: round; }
+    .link { stroke: #9198a1; stroke-width: 1.8; fill: none; }
+    .ctrl { stroke: #c297ff; stroke-width: 1.6; fill: none; stroke-dasharray: 5 4; }
+    .data { stroke: #4493f8; stroke-width: 3; fill: none; }
+    .made { stroke: #6e7781; stroke-width: 1.5; fill: none; stroke-dasharray: 2 3; }
+    .head-ctrl { fill: #c297ff; }
+    .head-data { fill: #4493f8; }
+    .head-made { fill: #6e7781; }
+  </style>
+  <defs>
+    <marker id="a-ctrl" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path class="head-ctrl" d="M0 0 L10 5 L0 10 z"/></marker>
+    <marker id="a-data" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="5" markerHeight="5" orient="auto-start-reverse"><path class="head-data" d="M0 0 L10 5 L0 10 z"/></marker>
+    <marker id="a-made" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path class="head-made" d="M0 0 L10 5 L0 10 z"/></marker>
+  </defs>
+
+  <rect class="group" x="40" y="20" width="400" height="144" rx="8"/>
+  <text class="grp" x="60" y="44">ROUTEURS DE CLUSTER · AS 65100</text>
+  <rect class="box" x="60" y="66" width="170" height="60" rx="6"/>
+  <text class="lbl" x="145" y="92" text-anchor="middle">routeur 1</text>
+  <text class="sub" x="145" y="111" text-anchor="middle">169.254.0.1/28</text>
+  <rect class="box" x="250" y="66" width="170" height="60" rx="6"/>
+  <text class="lbl" x="335" y="92" text-anchor="middle">routeur 2</text>
+  <text class="sub" x="335" y="111" text-anchor="middle">169.254.0.2/28</text>
+  <text class="sub" x="240" y="150" text-anchor="middle">passerelle 192.168.14.1/24</text>
+
+  <rect class="group" x="560" y="20" width="400" height="144" rx="8"/>
+  <text class="grp" x="580" y="44">VM ROUTE REFLECTOR · AS 65000</text>
+  <text class="lbl" x="580" y="70">lo1 · 10.255.255.1/32</text>
+  <text class="sub" x="580" y="87">router-id, cluster-id, source des sessions EVPN</text>
+  <text class="lbl" x="580" y="111">192.168.14.2/24 · 169.254.0.3/28</text>
+  <text class="sub" x="580" y="128">principale, et secondaire pour le lien avec les routeurs</text>
+  <text class="sub" x="580" y="150">hébergée par le cluster lui-même</text>
+
+  <path class="ctrl" d="M440 92 L560 92"/>
+  <text class="ctrlt" x="500" y="84" text-anchor="middle">eBGP · BFD (×2)</text>
+  <text class="ctrlt" x="500" y="108" text-anchor="middle">annonce lo1 seule</text>
+  <text class="ctrlt" x="500" y="122" text-anchor="middle">n'accepte rien</text>
+
+  <path class="link" d="M145 126 L145 196"/>
+  <path class="link" d="M335 126 L335 196"/>
+  <path class="link" d="M760 164 L760 196"/>
+
+  <path class="bus" d="M40 196 L960 196"/>
+  <rect class="pill" x="376" y="177" width="216" height="38" rx="19"/>
+  <text class="lbl" x="484" y="194" text-anchor="middle">segment underlay · L2</text>
+  <text class="sub" x="484" y="209" text-anchor="middle">192.168.14.0/24 · 169.254.0.0/28</text>
+
+  <rect class="group" x="40" y="262" width="430" height="306" rx="8"/>
+  <text class="grp" x="60" y="284">HYPERVISEUR 1</text>
+
+  <rect class="box" x="274" y="298" width="180" height="46" rx="6"/>
+  <text class="lbl" x="364" y="317" text-anchor="middle">br-000000</text>
+  <text class="sub" x="364" y="334" text-anchor="middle">uplink · 192.168.14.11</text>
+  <rect class="box" x="274" y="366" width="180" height="46" rx="6"/>
+  <text class="lbl" x="364" y="385" text-anchor="middle">vxlan-&lt;vni&gt;</text>
+  <text class="sub" x="364" y="402" text-anchor="middle">dans br-&lt;subnet&gt;, sans learning</text>
+  <rect class="box" x="274" y="434" width="180" height="46" rx="6"/>
+  <text class="lbl" x="364" y="453" text-anchor="middle">netns du VPC</text>
+  <text class="sub" x="364" y="470" text-anchor="middle">passerelle, DHCP</text>
+  <rect class="box" x="274" y="502" width="180" height="46" rx="6"/>
+  <text class="lbl" x="364" y="521" text-anchor="middle">VM</text>
+  <text class="sub" x="364" y="538" text-anchor="middle">QEMU / KVM</text>
+  <path class="link" d="M364 344 L364 366"/>
+  <text class="sub" x="372" y="359">VTEP</text>
+  <path class="link" d="M364 412 L364 434"/>
+  <text class="sub" x="372" y="427">veth</text>
+  <path class="link" d="M364 480 L364 502"/>
+  <text class="sub" x="372" y="495">tap</text>
+
+  <rect class="box" x="56" y="298" width="180" height="70" rx="6"/>
+  <text class="lbl" x="146" y="321" text-anchor="middle">FRR</text>
+  <text class="sub" x="146" y="340" text-anchor="middle">bgpd · AS 64600</text>
+  <text class="sub" x="146" y="356" text-anchor="middle">advertise-all-vni</text>
+  <rect class="box" x="56" y="434" width="180" height="46" rx="6"/>
+  <text class="lbl" x="146" y="453" text-anchor="middle">agent</text>
+  <text class="sub" x="146" y="470" text-anchor="middle">API REST · Badger</text>
+
+  <path class="ctrl" d="M236 352 L255 352 L255 389 L272 389" marker-end="url(#a-ctrl)"/>
+  <text class="ctrlt" x="255" y="345" text-anchor="middle">FDB</text>
+  <path class="made" d="M236 457 L272 457" marker-end="url(#a-made)"/>
+  <text class="sub" x="255" y="450" text-anchor="middle">crée</text>
+
+  <rect class="group" x="530" y="262" width="430" height="306" rx="8"/>
+  <text class="grp" x="656" y="284">HYPERVISEUR 2</text>
+
+  <rect class="box" x="546" y="298" width="180" height="46" rx="6"/>
+  <text class="lbl" x="636" y="317" text-anchor="middle">br-000000</text>
+  <text class="sub" x="636" y="334" text-anchor="middle">uplink · 192.168.14.12</text>
+  <rect class="box" x="546" y="366" width="180" height="46" rx="6"/>
+  <text class="lbl" x="636" y="385" text-anchor="middle">vxlan-&lt;vni&gt;</text>
+  <text class="sub" x="636" y="402" text-anchor="middle">dans br-&lt;subnet&gt;, sans learning</text>
+  <rect class="box" x="546" y="434" width="180" height="46" rx="6"/>
+  <text class="lbl" x="636" y="453" text-anchor="middle">netns du VPC</text>
+  <text class="sub" x="636" y="470" text-anchor="middle">passerelle, DHCP</text>
+  <rect class="box" x="546" y="502" width="180" height="46" rx="6"/>
+  <text class="lbl" x="636" y="521" text-anchor="middle">VM</text>
+  <text class="sub" x="636" y="538" text-anchor="middle">QEMU / KVM</text>
+  <path class="link" d="M636 344 L636 366"/>
+  <text class="sub" x="628" y="359" text-anchor="end">VTEP</text>
+  <path class="link" d="M636 412 L636 434"/>
+  <text class="sub" x="628" y="427" text-anchor="end">veth</text>
+  <path class="link" d="M636 480 L636 502"/>
+  <text class="sub" x="628" y="495" text-anchor="end">tap</text>
+
+  <rect class="box" x="764" y="298" width="180" height="70" rx="6"/>
+  <text class="lbl" x="854" y="321" text-anchor="middle">FRR</text>
+  <text class="sub" x="854" y="340" text-anchor="middle">bgpd · AS 64600</text>
+  <text class="sub" x="854" y="356" text-anchor="middle">advertise-all-vni</text>
+  <rect class="box" x="764" y="434" width="180" height="46" rx="6"/>
+  <text class="lbl" x="854" y="453" text-anchor="middle">agent</text>
+  <text class="sub" x="854" y="470" text-anchor="middle">API REST · Badger</text>
+
+  <path class="ctrl" d="M764 352 L745 352 L745 389 L728 389" marker-end="url(#a-ctrl)"/>
+  <text class="ctrlt" x="745" y="345" text-anchor="middle">FDB</text>
+  <path class="made" d="M764 457 L728 457" marker-end="url(#a-made)"/>
+  <text class="sub" x="745" y="450" text-anchor="middle">crée</text>
+
+  <path class="link" d="M364 298 L364 196"/>
+  <path class="link" d="M636 298 L636 196"/>
+
+  <path class="ctrl" d="M210 298 L210 246 L357 246"/>
+  <path class="ctrl" d="M371 246 L612 246 L612 164"/>
+  <path class="ctrl" d="M854 298 L854 164"/>
+  <text class="ctrlt" x="384" y="240">iBGP l2vpn evpn · AS 64600</text>
+  <text class="ctrlt" x="862" y="240">iBGP</text>
+
+  <path class="data" d="M458 389 L542 389" marker-start="url(#a-data)" marker-end="url(#a-data)"/>
+  <text class="datat" x="500" y="378" text-anchor="middle">VXLAN</text>
+  <text class="datat" x="500" y="406" text-anchor="middle">UDP 4789</text>
+
+  <path class="link" d="M40 604 L76 604"/>
+  <text class="sub" x="84" y="608">lien L2 / interface</text>
+  <path class="data" d="M220 604 L256 604"/>
+  <text class="sub" x="264" y="608">plan de données : tunnels VXLAN</text>
+  <path class="ctrl" d="M470 604 L506 604"/>
+  <text class="sub" x="514" y="608">plan de contrôle : sessions BGP</text>
+  <path class="made" d="M716 604 L752 604"/>
+  <text class="sub" x="760" y="608">créé par l'agent</text>
+
+  <text class="sub" x="40" y="640">Les hyperviseurs joignent 10.255.255.1 par leur passerelle 192.168.14.1 : les routeurs l'ont apprise du route reflector en eBGP, sans rien lui renvoyer.</text>
+  <text class="sub" x="40" y="658">Le route reflector accepte toute session venant de 192.168.14.0/24 (bgp listen range) et réfléchit les routes EVPN entre hyperviseurs.</text>
+  <text class="sub" x="40" y="676">Chaque FRR en peuple la FDB des VXLAN locaux — intégration de FRR avec les interfaces créées par two : à qualifier (#50, E5).</text>
+  <text class="sub" x="40" y="694">MTU du segment : 1550 au moins (VXLAN figé à 1500 par l'agent, + 50 octets d'encapsulation) ; 9000 dans le lab.</text>
+  <text class="sub" x="40" y="712">ASN, loopback et plages : valeurs de production (#50). Adresses en 192.168.14.0/24 : celles du lab. Placement de la VM route reflector : à rédiger.</text>
+</svg>
diff --git a/main/_images/architecture-cluster.svg b/main/_images/architecture-cluster.svg
new file mode 100644
index 0000000..25028d6
--- /dev/null
+++ b/main/_images/architecture-cluster.svg
@@ -0,0 +1,155 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1000 736" width="1000" height="736" role="img" aria-label="Architecture du cluster : routeurs, route reflector, hyperviseurs, plans de données et de contrôle">
+  <style>
+    .lbl { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 14px; fill: #1f2328; }
+    .sub { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 11px; fill: #57606a; }
+    .grp { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 12px; font-weight: 600; fill: #57606a; letter-spacing: .04em; }
+    .ctrlt { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 11px; fill: #8250df; }
+    .datat { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 11px; font-weight: 600; fill: #0969da; }
+    .box { fill: #ffffff; stroke: #8c959f; stroke-width: 1.5; }
+    .group { fill: #f6f8fa; stroke: #d0d7de; stroke-width: 1.5; }
+    .pill { fill: #ffffff; stroke: #57606a; stroke-width: 1.5; }
+    .bus { stroke: #57606a; stroke-width: 4; fill: none; stroke-linecap: round; }
+    .link { stroke: #57606a; stroke-width: 1.8; fill: none; }
+    .ctrl { stroke: #8250df; stroke-width: 1.6; fill: none; stroke-dasharray: 5 4; }
+    .data { stroke: #0969da; stroke-width: 3; fill: none; }
+    .made { stroke: #8c959f; stroke-width: 1.5; fill: none; stroke-dasharray: 2 3; }
+    .head-ctrl { fill: #8250df; }
+    .head-data { fill: #0969da; }
+    .head-made { fill: #8c959f; }
+  </style>
+  <defs>
+    <marker id="a-ctrl" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path class="head-ctrl" d="M0 0 L10 5 L0 10 z"/></marker>
+    <marker id="a-data" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="5" markerHeight="5" orient="auto-start-reverse"><path class="head-data" d="M0 0 L10 5 L0 10 z"/></marker>
+    <marker id="a-made" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path class="head-made" d="M0 0 L10 5 L0 10 z"/></marker>
+  </defs>
+
+  <rect class="group" x="40" y="20" width="400" height="144" rx="8"/>
+  <text class="grp" x="60" y="44">ROUTEURS DE CLUSTER · AS 65100</text>
+  <rect class="box" x="60" y="66" width="170" height="60" rx="6"/>
+  <text class="lbl" x="145" y="92" text-anchor="middle">routeur 1</text>
+  <text class="sub" x="145" y="111" text-anchor="middle">169.254.0.1/28</text>
+  <rect class="box" x="250" y="66" width="170" height="60" rx="6"/>
+  <text class="lbl" x="335" y="92" text-anchor="middle">routeur 2</text>
+  <text class="sub" x="335" y="111" text-anchor="middle">169.254.0.2/28</text>
+  <text class="sub" x="240" y="150" text-anchor="middle">passerelle 192.168.14.1/24</text>
+
+  <rect class="group" x="560" y="20" width="400" height="144" rx="8"/>
+  <text class="grp" x="580" y="44">VM ROUTE REFLECTOR · AS 65000</text>
+  <text class="lbl" x="580" y="70">lo1 · 10.255.255.1/32</text>
+  <text class="sub" x="580" y="87">router-id, cluster-id, source des sessions EVPN</text>
+  <text class="lbl" x="580" y="111">192.168.14.2/24 · 169.254.0.3/28</text>
+  <text class="sub" x="580" y="128">principale, et secondaire pour le lien avec les routeurs</text>
+  <text class="sub" x="580" y="150">hébergée par le cluster lui-même</text>
+
+  <path class="ctrl" d="M440 92 L560 92"/>
+  <text class="ctrlt" x="500" y="84" text-anchor="middle">eBGP · BFD (×2)</text>
+  <text class="ctrlt" x="500" y="108" text-anchor="middle">annonce lo1 seule</text>
+  <text class="ctrlt" x="500" y="122" text-anchor="middle">n'accepte rien</text>
+
+  <path class="link" d="M145 126 L145 196"/>
+  <path class="link" d="M335 126 L335 196"/>
+  <path class="link" d="M760 164 L760 196"/>
+
+  <path class="bus" d="M40 196 L960 196"/>
+  <rect class="pill" x="376" y="177" width="216" height="38" rx="19"/>
+  <text class="lbl" x="484" y="194" text-anchor="middle">segment underlay · L2</text>
+  <text class="sub" x="484" y="209" text-anchor="middle">192.168.14.0/24 · 169.254.0.0/28</text>
+
+  <rect class="group" x="40" y="262" width="430" height="306" rx="8"/>
+  <text class="grp" x="60" y="284">HYPERVISEUR 1</text>
+
+  <rect class="box" x="274" y="298" width="180" height="46" rx="6"/>
+  <text class="lbl" x="364" y="317" text-anchor="middle">br-000000</text>
+  <text class="sub" x="364" y="334" text-anchor="middle">uplink · 192.168.14.11</text>
+  <rect class="box" x="274" y="366" width="180" height="46" rx="6"/>
+  <text class="lbl" x="364" y="385" text-anchor="middle">vxlan-&lt;vni&gt;</text>
+  <text class="sub" x="364" y="402" text-anchor="middle">dans br-&lt;subnet&gt;, sans learning</text>
+  <rect class="box" x="274" y="434" width="180" height="46" rx="6"/>
+  <text class="lbl" x="364" y="453" text-anchor="middle">netns du VPC</text>
+  <text class="sub" x="364" y="470" text-anchor="middle">passerelle, DHCP</text>
+  <rect class="box" x="274" y="502" width="180" height="46" rx="6"/>
+  <text class="lbl" x="364" y="521" text-anchor="middle">VM</text>
+  <text class="sub" x="364" y="538" text-anchor="middle">QEMU / KVM</text>
+  <path class="link" d="M364 344 L364 366"/>
+  <text class="sub" x="372" y="359">VTEP</text>
+  <path class="link" d="M364 412 L364 434"/>
+  <text class="sub" x="372" y="427">veth</text>
+  <path class="link" d="M364 480 L364 502"/>
+  <text class="sub" x="372" y="495">tap</text>
+
+  <rect class="box" x="56" y="298" width="180" height="70" rx="6"/>
+  <text class="lbl" x="146" y="321" text-anchor="middle">FRR</text>
+  <text class="sub" x="146" y="340" text-anchor="middle">bgpd · AS 64600</text>
+  <text class="sub" x="146" y="356" text-anchor="middle">advertise-all-vni</text>
+  <rect class="box" x="56" y="434" width="180" height="46" rx="6"/>
+  <text class="lbl" x="146" y="453" text-anchor="middle">agent</text>
+  <text class="sub" x="146" y="470" text-anchor="middle">API REST · Badger</text>
+
+  <path class="ctrl" d="M236 352 L255 352 L255 389 L272 389" marker-end="url(#a-ctrl)"/>
+  <text class="ctrlt" x="255" y="345" text-anchor="middle">FDB</text>
+  <path class="made" d="M236 457 L272 457" marker-end="url(#a-made)"/>
+  <text class="sub" x="255" y="450" text-anchor="middle">crée</text>
+
+  <rect class="group" x="530" y="262" width="430" height="306" rx="8"/>
+  <text class="grp" x="656" y="284">HYPERVISEUR 2</text>
+
+  <rect class="box" x="546" y="298" width="180" height="46" rx="6"/>
+  <text class="lbl" x="636" y="317" text-anchor="middle">br-000000</text>
+  <text class="sub" x="636" y="334" text-anchor="middle">uplink · 192.168.14.12</text>
+  <rect class="box" x="546" y="366" width="180" height="46" rx="6"/>
+  <text class="lbl" x="636" y="385" text-anchor="middle">vxlan-&lt;vni&gt;</text>
+  <text class="sub" x="636" y="402" text-anchor="middle">dans br-&lt;subnet&gt;, sans learning</text>
+  <rect class="box" x="546" y="434" width="180" height="46" rx="6"/>
+  <text class="lbl" x="636" y="453" text-anchor="middle">netns du VPC</text>
+  <text class="sub" x="636" y="470" text-anchor="middle">passerelle, DHCP</text>
+  <rect class="box" x="546" y="502" width="180" height="46" rx="6"/>
+  <text class="lbl" x="636" y="521" text-anchor="middle">VM</text>
+  <text class="sub" x="636" y="538" text-anchor="middle">QEMU / KVM</text>
+  <path class="link" d="M636 344 L636 366"/>
+  <text class="sub" x="628" y="359" text-anchor="end">VTEP</text>
+  <path class="link" d="M636 412 L636 434"/>
+  <text class="sub" x="628" y="427" text-anchor="end">veth</text>
+  <path class="link" d="M636 480 L636 502"/>
+  <text class="sub" x="628" y="495" text-anchor="end">tap</text>
+
+  <rect class="box" x="764" y="298" width="180" height="70" rx="6"/>
+  <text class="lbl" x="854" y="321" text-anchor="middle">FRR</text>
+  <text class="sub" x="854" y="340" text-anchor="middle">bgpd · AS 64600</text>
+  <text class="sub" x="854" y="356" text-anchor="middle">advertise-all-vni</text>
+  <rect class="box" x="764" y="434" width="180" height="46" rx="6"/>
+  <text class="lbl" x="854" y="453" text-anchor="middle">agent</text>
+  <text class="sub" x="854" y="470" text-anchor="middle">API REST · Badger</text>
+
+  <path class="ctrl" d="M764 352 L745 352 L745 389 L728 389" marker-end="url(#a-ctrl)"/>
+  <text class="ctrlt" x="745" y="345" text-anchor="middle">FDB</text>
+  <path class="made" d="M764 457 L728 457" marker-end="url(#a-made)"/>
+  <text class="sub" x="745" y="450" text-anchor="middle">crée</text>
+
+  <path class="link" d="M364 298 L364 196"/>
+  <path class="link" d="M636 298 L636 196"/>
+
+  <path class="ctrl" d="M210 298 L210 246 L357 246"/>
+  <path class="ctrl" d="M371 246 L612 246 L612 164"/>
+  <path class="ctrl" d="M854 298 L854 164"/>
+  <text class="ctrlt" x="384" y="240">iBGP l2vpn evpn · AS 64600</text>
+  <text class="ctrlt" x="862" y="240">iBGP</text>
+
+  <path class="data" d="M458 389 L542 389" marker-start="url(#a-data)" marker-end="url(#a-data)"/>
+  <text class="datat" x="500" y="378" text-anchor="middle">VXLAN</text>
+  <text class="datat" x="500" y="406" text-anchor="middle">UDP 4789</text>
+
+  <path class="link" d="M40 604 L76 604"/>
+  <text class="sub" x="84" y="608">lien L2 / interface</text>
+  <path class="data" d="M220 604 L256 604"/>
+  <text class="sub" x="264" y="608">plan de données : tunnels VXLAN</text>
+  <path class="ctrl" d="M470 604 L506 604"/>
+  <text class="sub" x="514" y="608">plan de contrôle : sessions BGP</text>
+  <path class="made" d="M716 604 L752 604"/>
+  <text class="sub" x="760" y="608">créé par l'agent</text>
+
+  <text class="sub" x="40" y="640">Les hyperviseurs joignent 10.255.255.1 par leur passerelle 192.168.14.1 : les routeurs l'ont apprise du route reflector en eBGP, sans rien lui renvoyer.</text>
+  <text class="sub" x="40" y="658">Le route reflector accepte toute session venant de 192.168.14.0/24 (bgp listen range) et réfléchit les routes EVPN entre hyperviseurs.</text>
+  <text class="sub" x="40" y="676">Chaque FRR en peuple la FDB des VXLAN locaux — intégration de FRR avec les interfaces créées par two : à qualifier (#50, E5).</text>
+  <text class="sub" x="40" y="694">MTU du segment : 1550 au moins (VXLAN figé à 1500 par l'agent, + 50 octets d'encapsulation) ; 9000 dans le lab.</text>
+  <text class="sub" x="40" y="712">ASN, loopback et plages : valeurs de production (#50). Adresses en 192.168.14.0/24 : celles du lab. Placement de la VM route reflector : à rédiger.</text>
+</svg>
diff --git a/main/_images/topologie-cluster-dark.svg b/main/_images/topologie-cluster-dark.svg
deleted file mode 100644
index 48a3916..0000000
--- a/main/_images/topologie-cluster-dark.svg
+++ /dev/null
@@ -1,52 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 900 500" width="900" height="500" role="img" aria-label="Topologie du cluster">
-  <style>
-    .lbl { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 14px; fill: #e6edf3; }
-    .sub { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 11px; fill: #9198a1; }
-    .grp { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 12px; font-weight: 600; fill: #9198a1; letter-spacing: .04em; }
-    .box { fill: #22272e; stroke: #6e7781; stroke-width: 1.5; }
-    .group { fill: #1c2128; stroke: #444c56; stroke-width: 1.5; stroke-dasharray: 0; }
-    .link { stroke: #9198a1; stroke-width: 1.8; fill: none; }
-    .ctrl { stroke: #c297ff; stroke-width: 1.6; fill: none; stroke-dasharray: 5 4; }
-  </style>
-
-  <rect class="group" x="250" y="24" width="400" height="96" rx="8"/>
-  <text class="grp" x="270" y="46">ROUTEURS DE CLUSTER</text>
-  <rect class="box" x="275" y="58" width="160" height="42" rx="6"/>
-  <text class="lbl" x="355" y="84" text-anchor="middle">routeur A</text>
-  <rect class="box" x="465" y="58" width="160" height="42" rx="6"/>
-  <text class="lbl" x="545" y="84" text-anchor="middle">routeur B</text>
-
-  <rect class="box" x="350" y="168" width="200" height="56" rx="6"/>
-  <text class="lbl" x="450" y="191" text-anchor="middle">VM route reflector</text>
-  <text class="sub" x="450" y="210" text-anchor="middle">plan de contrôle</text>
-
-  <rect class="group" x="40" y="278" width="370" height="196" rx="8"/>
-  <text class="grp" x="60" y="300">HYPERVISEUR 1</text>
-  <rect class="box" x="145" y="312" width="160" height="40" rx="6"/>
-  <text class="lbl" x="225" y="337" text-anchor="middle">br-000000</text>
-  <rect class="box" x="145" y="372" width="160" height="40" rx="6"/>
-  <text class="lbl" x="225" y="397" text-anchor="middle">FRR</text>
-  <rect class="box" x="145" y="424" width="160" height="40" rx="6"/>
-  <text class="lbl" x="225" y="449" text-anchor="middle">agent</text>
-  <path class="link" d="M225 352 L225 372"/>
-  <path class="link" d="M225 412 L225 424"/>
-
-  <rect class="group" x="490" y="278" width="370" height="196" rx="8"/>
-  <text class="grp" x="510" y="300">HYPERVISEUR 2</text>
-  <rect class="box" x="595" y="312" width="160" height="40" rx="6"/>
-  <text class="lbl" x="675" y="337" text-anchor="middle">br-000000</text>
-  <rect class="box" x="595" y="372" width="160" height="40" rx="6"/>
-  <text class="lbl" x="675" y="397" text-anchor="middle">FRR</text>
-  <rect class="box" x="595" y="424" width="160" height="40" rx="6"/>
-  <text class="lbl" x="675" y="449" text-anchor="middle">agent</text>
-  <path class="link" d="M675 352 L675 372"/>
-  <path class="link" d="M675 412 L675 424"/>
-
-  <path class="link" d="M225 312 L225 148 L330 148 L330 120"/>
-  <path class="link" d="M675 312 L675 148 L570 148 L570 120"/>
-  <text class="sub" x="232" y="266">uplink</text>
-  <text class="sub" x="682" y="266">uplink</text>
-
-  <path class="ctrl" d="M350 196 L322 196 L322 392 L305 392"/>
-  <path class="ctrl" d="M550 196 L578 196 L578 392 L595 392"/>
-</svg>
diff --git a/main/_images/topologie-cluster.svg b/main/_images/topologie-cluster.svg
deleted file mode 100644
index 858d18a..0000000
--- a/main/_images/topologie-cluster.svg
+++ /dev/null
@@ -1,52 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 900 500" width="900" height="500" role="img" aria-label="Topologie du cluster">
-  <style>
-    .lbl { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 14px; fill: #1f2328; }
-    .sub { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 11px; fill: #57606a; }
-    .grp { font-family: -apple-system, "Segoe UI", Roboto, sans-serif; font-size: 12px; font-weight: 600; fill: #57606a; letter-spacing: .04em; }
-    .box { fill: #ffffff; stroke: #8c959f; stroke-width: 1.5; }
-    .group { fill: #f6f8fa; stroke: #d0d7de; stroke-width: 1.5; stroke-dasharray: 0; }
-    .link { stroke: #57606a; stroke-width: 1.8; fill: none; }
-    .ctrl { stroke: #8250df; stroke-width: 1.6; fill: none; stroke-dasharray: 5 4; }
-  </style>
-
-  <rect class="group" x="250" y="24" width="400" height="96" rx="8"/>
-  <text class="grp" x="270" y="46">ROUTEURS DE CLUSTER</text>
-  <rect class="box" x="275" y="58" width="160" height="42" rx="6"/>
-  <text class="lbl" x="355" y="84" text-anchor="middle">routeur A</text>
-  <rect class="box" x="465" y="58" width="160" height="42" rx="6"/>
-  <text class="lbl" x="545" y="84" text-anchor="middle">routeur B</text>
-
-  <rect class="box" x="350" y="168" width="200" height="56" rx="6"/>
-  <text class="lbl" x="450" y="191" text-anchor="middle">VM route reflector</text>
-  <text class="sub" x="450" y="210" text-anchor="middle">plan de contrôle</text>
-
-  <rect class="group" x="40" y="278" width="370" height="196" rx="8"/>
-  <text class="grp" x="60" y="300">HYPERVISEUR 1</text>
-  <rect class="box" x="145" y="312" width="160" height="40" rx="6"/>
-  <text class="lbl" x="225" y="337" text-anchor="middle">br-000000</text>
-  <rect class="box" x="145" y="372" width="160" height="40" rx="6"/>
-  <text class="lbl" x="225" y="397" text-anchor="middle">FRR</text>
-  <rect class="box" x="145" y="424" width="160" height="40" rx="6"/>
-  <text class="lbl" x="225" y="449" text-anchor="middle">agent</text>
-  <path class="link" d="M225 352 L225 372"/>
-  <path class="link" d="M225 412 L225 424"/>
-
-  <rect class="group" x="490" y="278" width="370" height="196" rx="8"/>
-  <text class="grp" x="510" y="300">HYPERVISEUR 2</text>
-  <rect class="box" x="595" y="312" width="160" height="40" rx="6"/>
-  <text class="lbl" x="675" y="337" text-anchor="middle">br-000000</text>
-  <rect class="box" x="595" y="372" width="160" height="40" rx="6"/>
-  <text class="lbl" x="675" y="397" text-anchor="middle">FRR</text>
-  <rect class="box" x="595" y="424" width="160" height="40" rx="6"/>
-  <text class="lbl" x="675" y="449" text-anchor="middle">agent</text>
-  <path class="link" d="M675 352 L675 372"/>
-  <path class="link" d="M675 412 L675 424"/>
-
-  <path class="link" d="M225 312 L225 148 L330 148 L330 120"/>
-  <path class="link" d="M675 312 L675 148 L570 148 L570 120"/>
-  <text class="sub" x="232" y="266">uplink</text>
-  <text class="sub" x="682" y="266">uplink</text>
-
-  <path class="ctrl" d="M350 196 L322 196 L322 392 L305 392"/>
-  <path class="ctrl" d="M550 196 L578 196 L578 392 L595 392"/>
-</svg>
diff --git a/main/architecture/contraintes.html b/main/architecture/contraintes.html
index 6106adf..2c9e2db 100644
--- a/main/architecture/contraintes.html
+++ b/main/architecture/contraintes.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/architecture/index.html b/main/architecture/index.html
index e1e5874..edbd7d5 100644
--- a/main/architecture/index.html
+++ b/main/architecture/index.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/architecture/stockage.html b/main/architecture/stockage.html
index 6cf3721..cb188f0 100644
--- a/main/architecture/stockage.html
+++ b/main/architecture/stockage.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/architecture/vue-densemble.html b/main/architecture/vue-densemble.html
index 4bb183b..968f64d 100644
--- a/main/architecture/vue-densemble.html
+++ b/main/architecture/vue-densemble.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/concepts/cycle-de-vie.html b/main/concepts/cycle-de-vie.html
index 763ed89..341c1a0 100644
--- a/main/concepts/cycle-de-vie.html
+++ b/main/concepts/cycle-de-vie.html
@@ -654,6 +654,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 current active has-children"><a class="reference internal" href="index.html">Concepts</a><details open="open"><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul class="current">
diff --git a/main/concepts/index.html b/main/concepts/index.html
index fb3b1ed..df40988 100644
--- a/main/concepts/index.html
+++ b/main/concepts/index.html
@@ -55,7 +55,7 @@
     <link rel="index" title="Index" href="../genindex.html" />
     <link rel="search" title="Recherche" href="../search.html" />
     <link rel="next" title="VPC, subnet et VM" href="vpc-subnet-vm.html" />
-    <link rel="prev" title="Diagnostic" href="../exploitation/diagnostic.html" />
+    <link rel="prev" title="Lab de test multi-nœud" href="../developpement/lab.html" />
   <meta name="viewport" content="width=device-width, initial-scale=1"/>
   <meta name="docsearch:language" content="fr"/>
   <meta name="docsearch:version" content="0.1" />
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 current active has-children"><a class="current reference internal" href="#">Concepts</a><details open="open"><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
@@ -364,12 +371,12 @@ fonctionnent entre eux. Le contrat HTTP correspondant est dans
                   
 <div class="prev-next-area">
     <a class="left-prev"
-       href="../exploitation/diagnostic.html"
+       href="../developpement/lab.html"
        title="page précédente">
       <i class="fa-solid fa-angle-left"></i>
       <div class="prev-next-info">
         <p class="prev-next-subtitle">précédent</p>
-        <p class="prev-next-title">Diagnostic</p>
+        <p class="prev-next-title">Lab de test multi-nœud</p>
       </div>
     </a>
     <a class="right-next"
diff --git a/main/concepts/metadata-cloud-init.html b/main/concepts/metadata-cloud-init.html
index 5749f4c..7d6d296 100644
--- a/main/concepts/metadata-cloud-init.html
+++ b/main/concepts/metadata-cloud-init.html
@@ -654,6 +654,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 current active has-children"><a class="reference internal" href="index.html">Concepts</a><details open="open"><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul class="current">
diff --git a/main/concepts/modes-reseau.html b/main/concepts/modes-reseau.html
index 1afca1b..f6895fb 100644
--- a/main/concepts/modes-reseau.html
+++ b/main/concepts/modes-reseau.html
@@ -654,6 +654,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 current active has-children"><a class="reference internal" href="index.html">Concepts</a><details open="open"><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul class="current">
diff --git a/main/concepts/vpc-subnet-vm.html b/main/concepts/vpc-subnet-vm.html
index 568e05c..b5741e0 100644
--- a/main/concepts/vpc-subnet-vm.html
+++ b/main/concepts/vpc-subnet-vm.html
@@ -654,6 +654,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 current active has-children"><a class="reference internal" href="index.html">Concepts</a><details open="open"><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul class="current">
diff --git a/main/demarrage/index.html b/main/demarrage/index.html
index 653712f..b3954e6 100644
--- a/main/demarrage/index.html
+++ b/main/demarrage/index.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/demarrage/installation.html b/main/demarrage/installation.html
index 6045a52..9ba50f1 100644
--- a/main/demarrage/installation.html
+++ b/main/demarrage/installation.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/demarrage/premier-vpc.html b/main/demarrage/premier-vpc.html
index 8d25c0c..fd6fe9c 100644
--- a/main/demarrage/premier-vpc.html
+++ b/main/demarrage/premier-vpc.html
@@ -654,6 +654,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/deploiement/architecture-cluster.html b/main/deploiement/architecture-cluster.html
index bc6eda9..4d393a3 100644
--- a/main/deploiement/architecture-cluster.html
+++ b/main/deploiement/architecture-cluster.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
@@ -357,17 +364,19 @@
 <section id="topologie">
 <h2>Topologie<a class="headerlink" href="#topologie" title="Lien vers cette rubrique">#</a></h2>
 <figure class="align-center" id="id1">
-<a class="only-light reference internal image-reference" href="../_images/topologie-cluster.svg"><img alt="Topologie du cluster : routeurs, route reflector et hyperviseurs" class="only-light" src="../_images/topologie-cluster.svg" style="width: 100%;" />
+<a class="only-light reference internal image-reference" href="../_images/architecture-cluster.svg"><img alt="Architecture du cluster : routeurs, route reflector, hyperviseurs, plans de données et de contrôle" class="only-light" src="../_images/architecture-cluster.svg" style="width: 100%;" />
 </a>
 <figcaption>
-<p><span class="caption-text">Topologie cible. Trait plein : plan de données. Trait pointillé : plan de contrôle.</span><a class="headerlink" href="#id1" title="Lien vers cette image">#</a></p>
+<p><span class="caption-text">Architecture cible. Trait bleu : plan de données (VXLAN). Tirets violets : plan de contrôle
+(sessions BGP). Pointillé gris : interfaces créées par l’agent.</span><a class="headerlink" href="#id1" title="Lien vers cette image">#</a></p>
 </figcaption>
 </figure>
 <figure class="align-center" id="id2">
-<a class="only-dark reference internal image-reference" href="../_images/topologie-cluster-dark.svg"><img alt="Topologie du cluster : routeurs, route reflector et hyperviseurs" class="only-dark" src="../_images/topologie-cluster-dark.svg" style="width: 100%;" />
+<a class="only-dark reference internal image-reference" href="../_images/architecture-cluster-dark.svg"><img alt="Architecture du cluster : routeurs, route reflector, hyperviseurs, plans de données et de contrôle" class="only-dark" src="../_images/architecture-cluster-dark.svg" style="width: 100%;" />
 </a>
 <figcaption>
-<p><span class="caption-text">Topologie cible. Trait plein : plan de données. Trait pointillé : plan de contrôle.</span><a class="headerlink" href="#id2" title="Lien vers cette image">#</a></p>
+<p><span class="caption-text">Architecture cible. Trait bleu : plan de données (VXLAN). Tirets violets : plan de contrôle
+(sessions BGP). Pointillé gris : interfaces créées par l’agent.</span><a class="headerlink" href="#id2" title="Lien vers cette image">#</a></p>
 </figcaption>
 </figure>
 <p>Deux plans distincts, à ne pas confondre au moment du diagnostic :</p>
diff --git a/main/deploiement/image-qcow2.html b/main/deploiement/image-qcow2.html
index 256e6d7..786b304 100644
--- a/main/deploiement/image-qcow2.html
+++ b/main/deploiement/image-qcow2.html
@@ -654,6 +654,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
@@ -1027,7 +1034,7 @@ cat<span class="w"> </span><span class="s">&lt;&lt; 'ENDFILE' &gt; /mnt/etc/clou
 <span class="s">datasource_list: [ NoCloud ]</span>
 <span class="s">datasource:</span>
 <span class="s">  NoCloud:</span>
-<span class="s">    seedfrom: 'http://169.254.169.254:80'</span>
+<span class="s">    seedfrom: 'http://169.254.169.254:80/'</span>
 <span class="s">    timeout: 5</span>
 <span class="s">    max_wait: 10</span>
 <span class="s">ENDFILE</span>
@@ -1087,12 +1094,16 @@ ni <code class="docutils literal notranslate"><span class="pre">detect-zeroes=un
 aucun espace à l’host : les qcow2 ne se rétractent pas. L’activation reste utile pour le jour
 où l’option sera ajoutée côté agent, mais ne pas compter dessus pour la place disque.</p>
 </div>
-<div class="admonition note">
-<p class="admonition-title">Note</p>
-<p><strong>À vérifier</strong> — <code class="docutils literal notranslate"><span class="pre">seedfrom</span></code> sans barre oblique finale. cloud-init construit l’URL des
-documents en concaténant <code class="docutils literal notranslate"><span class="pre">seedfrom</span></code> avec <code class="docutils literal notranslate"><span class="pre">meta-data</span></code> et <code class="docutils literal notranslate"><span class="pre">user-data</span></code>. Confirmer sur une
-VM réelle que les deux documents sont bien récupérés, et corriger en
-<code class="docutils literal notranslate"><span class="pre">http://169.254.169.254:80/</span></code> si ce n’est pas le cas.</p>
+<div class="admonition warning">
+<p class="admonition-title">Avertissement</p>
+<p><strong>La barre oblique finale de</strong> <code class="docutils literal notranslate"><span class="pre">seedfrom</span></code> <strong>est indispensable avant cloud-init 23.1.</strong>
+cloud-init construit l’URL des documents en concaténant <code class="docutils literal notranslate"><span class="pre">seedfrom</span></code> avec <code class="docutils literal notranslate"><span class="pre">meta-data</span></code>,
+<code class="docutils literal notranslate"><span class="pre">user-data</span></code> et <code class="docutils literal notranslate"><span class="pre">vendor-data</span></code> (<code class="docutils literal notranslate"><span class="pre">util.read_seeded</span></code>). Jusqu’à la 22.4 — celle de Debian 12,
+22.4.2 —, sans barre oblique finale il demande <code class="docutils literal notranslate"><span class="pre">http://169.254.169.254:80meta-data</span></code> : la
+source échoue, la VM démarre en <code class="docutils literal notranslate"><span class="pre">DataSourceNone</span></code>, sans nom d’hôte ni user-data. À partir de
+23.1, un drapeau actif par défaut (<code class="docutils literal notranslate"><span class="pre">NOCLOUD_SEED_URL_APPEND_FORWARD_SLASH</span></code>) ajoute la barre
+oblique manquante, ce qui explique qu’une image récente fonctionne sans elle. Avec la barre
+oblique, la configuration fonctionne quelle que soit la version de cloud-init.</p>
 </div>
 <div class="admonition note">
 <p class="admonition-title">Note</p>
diff --git a/main/deploiement/index.html b/main/deploiement/index.html
index 83034bc..8d2cbd5 100644
--- a/main/deploiement/index.html
+++ b/main/deploiement/index.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/deploiement/premier-hyperviseur.html b/main/deploiement/premier-hyperviseur.html
index 1d4cd7e..e4f58fe 100644
--- a/main/deploiement/premier-hyperviseur.html
+++ b/main/deploiement/premier-hyperviseur.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
@@ -336,7 +343,11 @@
             <nav aria-label="Page">
                 <ul class="visible nav section-nav flex-column">
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#installation">Installation</a></li>
-<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#plan-de-controle-frr">Plan de contrôle — FRR</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#plan-de-controle-frr">Plan de contrôle — FRR</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#configuration-de-frr">Configuration de FRR</a></li>
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#articulation-avec-l-agent">Articulation avec l’agent</a></li>
+</ul>
+</li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#verifier-le-plan-de-donnees">Vérifier le plan de données</a></li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#valider-le-noeud">Valider le nœud</a></li>
 </ul>
@@ -370,24 +381,68 @@ tout ce qui est posé doit l’être par un mécanisme rejoué à chaque démarr
 créées par l’agent. C’est ce qui rend un subnet utilisable au-delà d’un seul nœud, puisque
 l’agent désactive l’apprentissage et ne configure aucun voisin — cf.
 <a class="reference internal" href="architecture-cluster.html"><span class="doc">Architecture du cluster</span></a>.</p>
+<section id="configuration-de-frr">
+<h3>Configuration de FRR<a class="headerlink" href="#configuration-de-frr" title="Lien vers cette rubrique">#</a></h3>
+<p>Seul <code class="docutils literal notranslate"><span class="pre">bgpd</span></code> est activé dans <code class="docutils literal notranslate"><span class="pre">/etc/frr/daemons</span></code>. D’un hyperviseur à l’autre ne changent que
+<code class="docutils literal notranslate"><span class="pre">hostname</span></code> et <code class="docutils literal notranslate"><span class="pre">router-id</span></code>, l’adresse de l’hyperviseur sur son segment.</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>frr defaults traditional
+hostname hv1
+log syslog informational
+!
+router bgp 64600
+ bgp router-id 192.168.14.11
+ no bgp default ipv4-unicast
+ neighbor fabric peer-group
+ neighbor fabric remote-as 64600
+ neighbor fabric capability extended-nexthop
+ neighbor 10.255.255.1 peer-group fabric
+ !
+ address-family l2vpn evpn
+  neighbor fabric activate
+  advertise-all-vni
+ exit-address-family
+ !
+exit
+!
+</pre></div>
+</div>
+<p>Ce qu’elle établit :</p>
+<ul class="simple">
+<li><p><strong>Une seule session</strong>, en iBGP dans l’AS 64600, vers la loopback du route reflector
+(<code class="docutils literal notranslate"><span class="pre">10.255.255.1</span></code>), jointe par la passerelle par défaut — le routeur de cluster l’a apprise du
+route reflector (<a class="reference internal" href="routeurs.html"><span class="doc">Routeurs</span></a>). Aucune adresse d’un autre hyperviseur n’est écrite : ajouter
+un nœud ne touche pas la configuration des autres.</p></li>
+<li><p><strong>EVPN seulement</strong> : l’IPv4 unicast n’est pas activé (<code class="docutils literal notranslate"><span class="pre">no</span> <span class="pre">bgp</span> <span class="pre">default</span> <span class="pre">ipv4-unicast</span></code>).
+<code class="docutils literal notranslate"><span class="pre">advertise-all-vni</span></code> annonce les VNI de toutes les interfaces VXLAN que FRR voit, et donc
+celles que l’agent crée.</p></li>
+<li><p><strong>Pas de BFD</strong> sur cette session, contrairement à la session entre route reflector et routeur.</p></li>
+</ul>
+</section>
+<section id="articulation-avec-l-agent">
+<h3>Articulation avec l’agent<a class="headerlink" href="#articulation-avec-l-agent" title="Lien vers cette rubrique">#</a></h3>
+<p>Rien à configurer à la création d’un subnet : la VXLAN apparaît, FRR la voit et l’annonce, sans
+action ni redémarrage. Il faut en revanche que la VXLAN porte une <strong>adresse VTEP locale</strong> : sans
+elle, FRR voit la VNI mais n’annonce rien, et deux hyperviseurs gérés par two ne se joignent pas.
+L’agent la pose à partir de la release <code class="docutils literal notranslate"><span class="pre">0.2.0rc003</span></code>
+(<a class="reference external" href="https://git.g3e.fr/syonad/two/issues/51">#51</a>) : l’adresse IPv4 primaire du <code class="docutils literal notranslate"><span class="pre">local_iface</span></code>
+du subnet.</p>
 <div class="admonition note">
 <p class="admonition-title">Note</p>
-<p><strong>À rédiger.</strong> À documenter :</p>
+<p><strong>À rédiger.</strong> Reste à documenter :</p>
 <ul class="simple">
-<li><p>la version de FRR de référence et son mode d’installation, sachant que l’hyperviseur est
-sans état : le paquet et la configuration doivent être posés à chaque démarrage, par le
-bootstrap ou par un mécanisme équivalent ;</p></li>
-<li><p>les démons activés dans <code class="docutils literal notranslate"><span class="pre">/etc/frr/daemons</span></code> ;</p></li>
-<li><p>la configuration de référence : numéro d’AS, session vers le route reflector, famille
-d’adresses utilisée pour annoncer les MAC et les VNI ;</p></li>
-<li><p>l’articulation avec les interfaces créées par l’agent : comment FRR découvre une interface
-VXLAN qui apparaît à la création d’un subnet, et si une action est nécessaire ensuite ;</p></li>
-<li><p>ce qui se passe au démarrage à froid, quand FRR démarre avant ou après l’agent ;</p></li>
+<li><p>la version de FRR de référence et son installation sur l’hyperviseur <strong>sans état</strong> : paquet
+et configuration doivent être posés à chaque démarrage, par le bootstrap ou un mécanisme
+équivalent (<a class="reference external" href="https://git.g3e.fr/syonad/two/issues/52">#52</a>) ;</p></li>
+<li><p>le démarrage à froid, selon que FRR démarre avant ou après l’agent ;</p></li>
+<li><p>les subnets <code class="docutils literal notranslate"><span class="pre">vxlan</span></code> créés avant <code class="docutils literal notranslate"><span class="pre">0.2.0rc003</span></code>, dont la VXLAN n’a pas d’adresse VTEP
+locale : les recréer ou poser l’adresse à chaud, à trancher dans
+<a class="reference external" href="https://git.g3e.fr/syonad/two/issues/51">#51</a> ;</p></li>
 <li><p>le cas particulier du <strong>premier</strong> hyperviseur, dont la session ne peut pas s’établir tant
 que le route reflector n’existe pas.</p></li>
 </ul>
 </div>
 </section>
+</section>
 <section id="verifier-le-plan-de-donnees">
 <h2>Vérifier le plan de données<a class="headerlink" href="#verifier-le-plan-de-donnees" title="Lien vers cette rubrique">#</a></h2>
 <p>Ces deux vérifications restent valables quelle que soit la configuration retenue, et méritent
@@ -467,7 +522,11 @@ l’agent, le DHCP, la route vers le serveur de metadata et l’image. C’est l
   <nav id="pst-page-toc-nav" class="page-toc" aria-labelledby="pst-page-navigation-heading-2">
     <ul class="visible nav section-nav flex-column">
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#installation">Installation</a></li>
-<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#plan-de-controle-frr">Plan de contrôle — FRR</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#plan-de-controle-frr">Plan de contrôle — FRR</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#configuration-de-frr">Configuration de FRR</a></li>
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#articulation-avec-l-agent">Articulation avec l’agent</a></li>
+</ul>
+</li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#verifier-le-plan-de-donnees">Vérifier le plan de données</a></li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#valider-le-noeud">Valider le nœud</a></li>
 </ul>
diff --git a/main/deploiement/route-reflector.html b/main/deploiement/route-reflector.html
index cd5ebda..8a9ac57 100644
--- a/main/deploiement/route-reflector.html
+++ b/main/deploiement/route-reflector.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
@@ -335,6 +342,8 @@
             </div>
             <nav aria-label="Page">
                 <ul class="visible nav section-nav flex-column">
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#adressage">Adressage</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#configuration-de-frr">Configuration de FRR</a></li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#points-de-vigilance">Points de vigilance</a></li>
 </ul>
             </nav>
@@ -354,24 +363,142 @@ session entre chaque paire d’hyperviseurs, chaque hyperviseur ouvre une sessio
 reflector, qui redistribue.</p>
 <p>Il tourne lui-même en machine virtuelle, ce qui crée une dépendance circulaire à traiter
 explicitement : la VM qui porte le plan de contrôle du cluster est hébergée par le cluster.</p>
+<section id="adressage">
+<h2>Adressage<a class="headerlink" href="#adressage" title="Lien vers cette rubrique">#</a></h2>
+<p>Le route reflector est <strong>sur le même segment L2 que les hyperviseurs</strong>, avec trois adresses :</p>
+<div class="pst-scrollable-table-container"><table class="table">
+<colgroup>
+<col style="width: 30.0%" />
+<col style="width: 25.0%" />
+<col style="width: 45.0%" />
+</colgroup>
+<thead>
+<tr class="row-odd"><th class="head"><p>Adresse</p></th>
+<th class="head"><p>Interface</p></th>
+<th class="head"><p>Rôle</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><p>une adresse de <code class="docutils literal notranslate"><span class="pre">192.168.14.0/24</span></code></p></td>
+<td><p>interface principale</p></td>
+<td><p>celle de n’importe quelle machine du segment ; les réponses aux hyperviseurs en partent</p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">169.254.0.3/28</span></code></p></td>
+<td><p>interface principale, <strong>adresse secondaire</strong></p></td>
+<td><p>le lien avec les routeurs de cluster (<code class="docutils literal notranslate"><span class="pre">169.254.0.1</span></code> et <code class="docutils literal notranslate"><span class="pre">.2</span></code>), sur le même L2</p></td>
+</tr>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">10.255.255.1/32</span></code></p></td>
+<td><p><code class="docutils literal notranslate"><span class="pre">lo1</span></code>, interface <code class="docutils literal notranslate"><span class="pre">dummy</span></code></p></td>
+<td><p><code class="docutils literal notranslate"><span class="pre">router-id</span></code>, <code class="docutils literal notranslate"><span class="pre">cluster-id</span></code> et source des sessions EVPN ; seule route annoncée aux routeurs</p></td>
+</tr>
+</tbody>
+</table>
+</div>
+<p>Les hyperviseurs ne connaissent que la loopback : ils ouvrent leur session vers <code class="docutils literal notranslate"><span class="pre">10.255.255.1</span></code>
+par leur passerelle (<code class="docutils literal notranslate"><span class="pre">192.168.14.1</span></code>), les routeurs l’ayant apprise du route reflector en eBGP.
+Aucune adresse d’hyperviseur n’est déclarée côté route reflector : il accepte toute session venant
+du segment (<code class="docutils literal notranslate"><span class="pre">bgp</span> <span class="pre">listen</span> <span class="pre">range</span></code>).</p>
+<p>L’adresse du lien est une <strong>adresse secondaire</strong> de l’interface principale, pas une interface à
+part : même L2, même MAC sur le fil, une interface de moins qu’avec un <code class="docutils literal notranslate"><span class="pre">ipvlan</span></code>. Elle doit
+survivre aux renouvellements DHCP de l’adresse principale : la déclarer dans la configuration
+réseau du système, pas la poser à la main.</p>
 <div class="admonition note">
 <p class="admonition-title">Note</p>
-<p><strong>À rédiger.</strong> À documenter :</p>
+<p><strong>Non vérifié sur l’image de production.</strong> Avec NetworkManager, la forme attendue est :</p>
+<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span>nmcli<span class="w"> </span>connection<span class="w"> </span>modify<span class="w"> </span>&lt;connexion&gt;<span class="w"> </span>+ipv4.addresses<span class="w"> </span><span class="m">169</span>.254.0.3/28
+nmcli<span class="w"> </span>connection<span class="w"> </span>add<span class="w"> </span><span class="nb">type</span><span class="w"> </span>dummy<span class="w"> </span>ifname<span class="w"> </span>lo1<span class="w"> </span>con-name<span class="w"> </span>lo1<span class="w"> </span><span class="se">\</span>
+<span class="w">    </span>ipv4.method<span class="w"> </span>manual<span class="w"> </span>ipv4.addresses<span class="w"> </span><span class="m">10</span>.255.255.1/32<span class="w"> </span>ipv6.method<span class="w"> </span>disabled
+</pre></div>
+</div>
+<p>Ces commandes restent à valider sur l’image golden.</p>
+</div>
+</section>
+<section id="configuration-de-frr">
+<h2>Configuration de FRR<a class="headerlink" href="#configuration-de-frr" title="Lien vers cette rubrique">#</a></h2>
+<p><code class="docutils literal notranslate"><span class="pre">bgpd</span></code> et <code class="docutils literal notranslate"><span class="pre">bfdd</span></code> activés dans <code class="docutils literal notranslate"><span class="pre">/etc/frr/daemons</span></code>.</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>frr defaults traditional
+hostname rr1
+log syslog informational
+!
+ip prefix-list RR-LOOPBACK-OUT seq 10 permit 10.255.255.1/32
+!
+route-map NO-IN deny 999
+ description deny
+exit
+!
+router bgp 65000
+ no bgp default ipv4-unicast
+ bgp router-id 10.255.255.1
+ bgp cluster-id 10.255.255.1
+ neighbor CLUSTER peer-group
+ neighbor CLUSTER remote-as 65100
+ neighbor CLUSTER bfd
+ neighbor 169.254.0.1 peer-group CLUSTER
+ neighbor 169.254.0.1 description router-1
+ neighbor 169.254.0.2 peer-group CLUSTER
+ neighbor 169.254.0.2 description router-2
+ neighbor fabric peer-group
+ neighbor fabric remote-as 64600
+ neighbor fabric local-as 64600 no-prepend replace-as
+ neighbor fabric capability extended-nexthop
+ neighbor fabric update-source 10.255.255.1
+ bgp listen range 192.168.14.0/24 peer-group fabric
+ bgp listen limit 200
+ !
+ address-family ipv4 unicast
+  network 10.255.255.1/32
+  neighbor CLUSTER activate
+  neighbor CLUSTER prefix-list RR-LOOPBACK-OUT out
+  neighbor CLUSTER route-map NO-IN in
+ exit-address-family
+ !
+ address-family l2vpn evpn
+  neighbor fabric activate
+  neighbor fabric route-reflector-client
+ exit-address-family
+ !
+exit
+!
+</pre></div>
+</div>
+<p>Ce qu’elle établit :</p>
 <ul class="simple">
-<li><p>la création de la VM : ressources, subnet et mode utilisés, et s’il s’agit d’une VM créée
-par l’agent comme les autres ou d’un cas particulier — l’image, elle, est l’image golden de
-<a class="reference internal" href="image-qcow2.html"><span class="doc">Construction de l’image qcow2</span></a> ;</p></li>
-<li><p>son adressage, et comment les hyperviseurs le connaissent ;</p></li>
-<li><p>la configuration du démon de routage qu’elle héberge ;</p></li>
+<li><p><strong>Routeurs de cluster</strong> (groupe <code class="docutils literal notranslate"><span class="pre">CLUSTER</span></code>) : eBGP vers l’AS 65100, avec BFD, en IPv4
+unicast. Le route reflector n’annonce que sa loopback (<code class="docutils literal notranslate"><span class="pre">RR-LOOPBACK-OUT</span></code>) et <strong>n’accepte
+rien</strong> (<code class="docutils literal notranslate"><span class="pre">NO-IN</span></code>) : il ne reçoit aucune route des routeurs.</p></li>
+<li><p><strong>Hyperviseurs</strong> (groupe <code class="docutils literal notranslate"><span class="pre">fabric</span></code>) : voisins dynamiques, toute session venant de
+<code class="docutils literal notranslate"><span class="pre">192.168.14.0/24</span></code> étant acceptée, jusqu’à 200. <code class="docutils literal notranslate"><span class="pre">local-as</span> <span class="pre">64600</span> <span class="pre">no-prepend</span> <span class="pre">replace-as</span></code> fait
+que, du point de vue des hyperviseurs, la session est en iBGP dans l’AS 64600 — celui de leur
+configuration — alors que le route reflector est en AS 65000 face aux routeurs.</p></li>
+<li><p><strong>EVPN</strong> : seule famille activée vers les hyperviseurs, qui sont ses clients
+(<code class="docutils literal notranslate"><span class="pre">route-reflector-client</span></code>) : il réfléchit les routes EVPN de chacun vers tous les autres.</p></li>
+</ul>
+<div class="admonition warning">
+<p class="admonition-title">Avertissement</p>
+<p><strong>Les tunnels ne survivent pas à la perte du route reflector.</strong> Avec un seul route reflector
+et sans <code class="docutils literal notranslate"><span class="pre">graceful-restart</span></code>, à l’arrêt de FRR sur le route reflector, la session EVPN des
+hyperviseurs tombe aussitôt, FRR retire les routes apprises et, avec elles, le VTEP distant et l’entrée d’inondation du VXLAN — <strong>plus
+aucun paquet ne passe</strong> entre hyperviseurs, à 30 s comme à 90 s. Au redémarrage de FRR sur le
+route reflector, VTEP distant et trafic reviennent <strong>31 s</strong> plus tard. Le trafic entre VM d’un
+même hyperviseur n’est pas concerné. La redondance (deux route reflectors) ou
+<code class="docutils literal notranslate"><span class="pre">graceful-restart</span></code> sont les deux leviers ; ni l’un ni l’autre n’est encore qualifié.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p><strong>À rédiger.</strong> Reste à documenter :</p>
+<ul class="simple">
+<li><p>la création de la VM : ressources, subnet et mode utilisés (<code class="docutils literal notranslate"><span class="pre">bridge</span></code>, pour pouvoir la
+lancer sur n’importe quel hyperviseur), et s’il s’agit d’une VM créée par l’agent comme les
+autres ou d’un cas particulier — l’image, elle, est l’image golden de <a class="reference internal" href="image-qcow2.html"><span class="doc">Construction de l’image qcow2</span></a> ;</p></li>
 <li><p>la redondance : une seule VM route reflector, ou deux, et sur quels hyperviseurs ;</p></li>
-<li><p>la procédure de reconstruction, et l’état du cluster pendant que le route reflector est
-absent — les tunnels déjà établis continuent-ils de fonctionner, et pendant combien de
-temps ;</p></li>
+<li><p>la procédure de reconstruction — l’état du cluster pendant l’absence du route reflector est
+décrit ci-dessus : plus de trafic entre hyperviseurs ;</p></li>
 <li><p>la procédure d’amorçage : ce qui fonctionne, et dans quel ordre, quand on démarre un cluster
 entier depuis zéro — le premier hyperviseur n’a pas de session FRR établie tant que cette VM
 n’existe pas, cf. <a class="reference internal" href="premier-hyperviseur.html"><span class="doc">Premier hyperviseur</span></a>.</p></li>
 </ul>
 </div>
+</section>
 <section id="points-de-vigilance">
 <h2>Points de vigilance<a class="headerlink" href="#points-de-vigilance" title="Lien vers cette rubrique">#</a></h2>
 <div class="admonition warning">
@@ -437,6 +564,8 @@ même disque fait que cloud-init <strong>ne rejoue pas</strong> le user-data. Cf
   </div>
   <nav id="pst-page-toc-nav" class="page-toc" aria-labelledby="pst-page-navigation-heading-2">
     <ul class="visible nav section-nav flex-column">
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#adressage">Adressage</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#configuration-de-frr">Configuration de FRR</a></li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#points-de-vigilance">Points de vigilance</a></li>
 </ul>
   </nav></div>
diff --git a/main/deploiement/routeurs.html b/main/deploiement/routeurs.html
index af1341c..b375fbf 100644
--- a/main/deploiement/routeurs.html
+++ b/main/deploiement/routeurs.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
@@ -335,6 +342,11 @@
             </div>
             <nav aria-label="Page">
                 <ul class="visible nav section-nav flex-column">
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#routeur-de-cluster">Routeur de cluster</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#adressage">Adressage</a></li>
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#configuration-de-frr">Configuration de FRR</a></li>
+</ul>
+</li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#contraintes-imposees-par-le-reste-du-cluster">Contraintes imposées par le reste du cluster</a></li>
 </ul>
             </nav>
@@ -361,20 +373,103 @@ données VXLAN.</p>
 <dt>Routeurs de bordure</dt><dd><p>terminent le routage vers l’extérieur.</p>
 </dd>
 </dl>
+<section id="routeur-de-cluster">
+<h2>Routeur de cluster<a class="headerlink" href="#routeur-de-cluster" title="Lien vers cette rubrique">#</a></h2>
+<p>Le routeur de cluster est la passerelle des hyperviseurs et le voisin eBGP du route reflector, dont
+il apprend la loopback : c’est par lui que chaque hyperviseur joint <code class="docutils literal notranslate"><span class="pre">10.255.255.1</span></code> pour ouvrir sa
+session EVPN (<a class="reference internal" href="route-reflector.html"><span class="doc">VM route reflector</span></a>).</p>
+<section id="adressage">
+<h3>Adressage<a class="headerlink" href="#adressage" title="Lien vers cette rubrique">#</a></h3>
+<div class="pst-scrollable-table-container"><table class="table">
+<colgroup>
+<col style="width: 30.0%" />
+<col style="width: 25.0%" />
+<col style="width: 45.0%" />
+</colgroup>
+<thead>
+<tr class="row-odd"><th class="head"><p>Adresse</p></th>
+<th class="head"><p>Interface</p></th>
+<th class="head"><p>Rôle</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">192.168.14.1/24</span></code></p></td>
+<td><p>interface du segment des hyperviseurs</p></td>
+<td><p>passerelle par défaut des hyperviseurs et du route reflector</p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">169.254.0.1/28</span></code></p></td>
+<td><p>même interface, <strong>adresse secondaire</strong></p></td>
+<td><p>lien avec le route reflector (<code class="docutils literal notranslate"><span class="pre">169.254.0.3</span></code>) ; <code class="docutils literal notranslate"><span class="pre">router-id</span></code> ; le second routeur prend
+<code class="docutils literal notranslate"><span class="pre">169.254.0.2</span></code></p></td>
+</tr>
+</tbody>
+</table>
+</div>
+<p>Le MTU minimal du segment, imposé par VXLAN, est donné plus bas.</p>
+</section>
+<section id="configuration-de-frr">
+<h3>Configuration de FRR<a class="headerlink" href="#configuration-de-frr" title="Lien vers cette rubrique">#</a></h3>
+<p><code class="docutils literal notranslate"><span class="pre">bgpd</span></code> et <code class="docutils literal notranslate"><span class="pre">bfdd</span></code> activés dans <code class="docutils literal notranslate"><span class="pre">/etc/frr/daemons</span></code>.</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>frr defaults traditional
+hostname sw1
+log syslog informational
+!
+ip prefix-list RR-LOOPBACK-IN seq 10 permit 10.255.255.1/32
+!
+route-map RR-IN permit 10
+ match ip address prefix-list RR-LOOPBACK-IN
+exit
+!
+route-map NO-OUT deny 999
+exit
+!
+router bgp 65100
+ no bgp default ipv4-unicast
+ bgp router-id 169.254.0.1
+ neighbor 169.254.0.3 remote-as 65000
+ neighbor 169.254.0.3 description rr1
+ neighbor 169.254.0.3 bfd
+ !
+ address-family ipv4 unicast
+  neighbor 169.254.0.3 activate
+  neighbor 169.254.0.3 route-map RR-IN in
+  neighbor 169.254.0.3 route-map NO-OUT out
+ exit-address-family
+ !
+exit
+!
+</pre></div>
+</div>
+<p>Ce qu’elle établit :</p>
+<ul class="simple">
+<li><p><strong>Route reflector</strong> : eBGP de l’AS 65100 vers l’AS 65000, avec BFD, en IPv4 unicast.</p></li>
+<li><p><strong>En entrée</strong>, seule la loopback du route reflector est acceptée (<code class="docutils literal notranslate"><span class="pre">RR-IN</span></code>) ; <strong>en sortie</strong>,
+rien n’est annoncé (<code class="docutils literal notranslate"><span class="pre">NO-OUT</span></code>). Symétrique de <code class="docutils literal notranslate"><span class="pre">RR-LOOPBACK-OUT</span></code> et <code class="docutils literal notranslate"><span class="pre">NO-IN</span></code> côté route
+reflector : chaque côté filtre, aucun ne dépend du filtre de l’autre.</p></li>
+<li><p><strong>Aucune session avec les hyperviseurs</strong> : le routeur leur sert de passerelle, pas de voisin BGP.</p></li>
+</ul>
+<p>Le route reflector déclare aussi le second routeur (<code class="docutils literal notranslate"><span class="pre">169.254.0.2</span></code>). La redondance est l’objet de
+<a class="reference external" href="https://git.g3e.fr/syonad/two/issues/54">#54</a>.</p>
 <div class="admonition note">
 <p class="admonition-title">Note</p>
-<p><strong>À rédiger.</strong> Cette page attend les éléments de terrain. Pour chacun des trois niveaux :</p>
+<p>Ce qui précède est le contrat du routeur de cluster : adresses, ASN, session, filtres. Sa
+traduction dans la configuration d’un constructeur n’a pas sa place ici.</p>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p><strong>À rédiger.</strong> Reste à documenter, faute d’éléments de terrain :</p>
 <ul class="simple">
-<li><p>le matériel ou le logiciel employé, et la version de référence ;</p></li>
-<li><p>la configuration de référence : interfaces, adressage, protocole de routage et numéros
-d’AS ;</p></li>
-<li><p>la redondance : combien d’équipements, quel mécanisme de bascule, quel comportement attendu
-pendant une bascule ;</p></li>
-<li><p>ce qui est annoncé et ce qui est filtré à chaque niveau ;</p></li>
+<li><p>pour le routeur de cluster : le matériel employé et sa version de référence ; la redondance
+— deux routeurs, mécanisme de bascule, comportement attendu pendant une bascule
+(<a class="reference external" href="https://git.g3e.fr/syonad/two/issues/54">#54</a>) ;</p></li>
+<li><p>pour les routeurs de datacentre et de bordure : tout — équipement, configuration de
+référence, ce qui est annoncé et filtré à chaque niveau, redondance ;</p></li>
 <li><p>l’ordre de mise en service, et ce qui doit être opérationnel avant de préparer le premier
 hyperviseur.</p></li>
 </ul>
 </div>
+</section>
+</section>
 <section id="contraintes-imposees-par-le-reste-du-cluster">
 <h2>Contraintes imposées par le reste du cluster<a class="headerlink" href="#contraintes-imposees-par-le-reste-du-cluster" title="Lien vers cette rubrique">#</a></h2>
 <p>Indépendamment des choix d’équipement, deux contraintes viennent de ce que fait l’agent.</p>
@@ -445,6 +540,11 @@ joignable que depuis le réseau d’administration. Cf. <a class="reference inte
   </div>
   <nav id="pst-page-toc-nav" class="page-toc" aria-labelledby="pst-page-navigation-heading-2">
     <ul class="visible nav section-nav flex-column">
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#routeur-de-cluster">Routeur de cluster</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#adressage">Adressage</a></li>
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#configuration-de-frr">Configuration de FRR</a></li>
+</ul>
+</li>
 <li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#contraintes-imposees-par-le-reste-du-cluster">Contraintes imposées par le reste du cluster</a></li>
 </ul>
   </nav></div>
diff --git a/main/developpement/index.html b/main/developpement/index.html
new file mode 100644
index 0000000..83a4ced
--- /dev/null
+++ b/main/developpement/index.html
@@ -0,0 +1,443 @@
+
+<!DOCTYPE html>
+
+
+<html lang="fr" data-content_root="../" >
+
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />
+
+    <title>Développement &#8212; Documentation two 0.1.0</title>
+  
+  
+  
+  <script data-cfasync="false">
+    document.documentElement.dataset.mode = localStorage.getItem("mode") || "";
+    document.documentElement.dataset.theme = localStorage.getItem("theme") || "";
+  </script>
+  <!--
+    this give us a css class that will be invisible only if js is disabled
+  -->
+  <noscript>
+    <style>
+      .pst-js-only { display: none !important; }
+
+    </style>
+  </noscript>
+  
+  <!-- Loaded before other Sphinx assets -->
+  <link href="../_static/styles/theme.css?digest=8878045cc6db502f8baf" rel="stylesheet" />
+<link href="../_static/styles/pydata-sphinx-theme.css?digest=8878045cc6db502f8baf" rel="stylesheet" />
+
+    <link rel="stylesheet" type="text/css" href="../_static/pygments.css?v=8f2a1f02" />
+    <link rel="stylesheet" type="text/css" href="../_static/styles/sphinx-book-theme.css?v=3c74b3bc" />
+  
+  <!-- So that users can add custom icons -->
+  <script src="../_static/scripts/fontawesome.js?digest=8878045cc6db502f8baf"></script>
+  <!-- Pre-loaded scripts that we'll load fully later -->
+  <link rel="preload" as="script" href="../_static/scripts/bootstrap.js?digest=8878045cc6db502f8baf" />
+<link rel="preload" as="script" href="../_static/scripts/pydata-sphinx-theme.js?digest=8878045cc6db502f8baf" />
+
+    <script src="../_static/documentation_options.js?v=57395fb6"></script>
+    <script src="../_static/doctools.js?v=fd6eb6e6"></script>
+    <script src="../_static/sphinx_highlight.js?v=6ffebe34"></script>
+    <script src="../_static/scripts/sphinx-book-theme.js?v=fab101a9"></script>
+    <script src="../_static/translations.js?v=e6b791cb"></script>
+    <script>DOCUMENTATION_OPTIONS.pagename = 'developpement/index';</script>
+    <script>
+        DOCUMENTATION_OPTIONS.theme_version = '0.16.1';
+        DOCUMENTATION_OPTIONS.theme_switcher_json_url = '../switcher.json';
+        DOCUMENTATION_OPTIONS.theme_switcher_version_match = 'main';
+        DOCUMENTATION_OPTIONS.show_version_warning_banner =
+            false;
+        </script>
+    <link rel="index" title="Index" href="../genindex.html" />
+    <link rel="search" title="Recherche" href="../search.html" />
+    <link rel="next" title="Lab de test multi-nœud" href="lab.html" />
+    <link rel="prev" title="Diagnostic" href="../exploitation/diagnostic.html" />
+  <meta name="viewport" content="width=device-width, initial-scale=1"/>
+  <meta name="docsearch:language" content="fr"/>
+  <meta name="docsearch:version" content="0.1" />
+  </head>
+  
+  
+  <body data-bs-spy="scroll" data-bs-target=".bd-toc-nav" data-offset="180" data-bs-root-margin="0px 0px -60%" data-default-mode="">
+
+  
+  
+  <div id="pst-skip-link" class="skip-link d-print-none"><a href="#main-content">Passer au contenu principal</a></div>
+  
+  <div id="pst-scroll-pixel-helper"></div>
+  
+  <button type="button" class="btn rounded-pill" id="pst-back-to-top">
+    <i class="fa-solid fa-arrow-up"></i>Haut de page</button>
+
+  
+  <dialog id="pst-search-dialog">
+    
+<form class="bd-search d-flex align-items-center"
+      action="../search.html"
+      method="get">
+  <i class="fa-solid fa-magnifying-glass"></i>
+  <input type="search"
+         class="form-control"
+         name="q"
+         placeholder="Search..."
+         aria-label="Search..."
+         autocomplete="off"
+         autocorrect="off"
+         autocapitalize="off"
+         spellcheck="false"/>
+  <span class="search-button__kbd-shortcut"><kbd class="kbd-shortcut__modifier">Ctrl</kbd>+<kbd>K</kbd></span>
+</form>
+  </dialog>
+
+  <div class="pst-async-banner-revealer d-none">
+  <aside id="bd-header-version-warning" class="d-none d-print-none" aria-label="Alerte de version"></aside>
+</div>
+
+  
+    <header class="bd-header navbar navbar-expand-lg bd-navbar d-print-none">
+    </header>
+  
+
+  <div class="bd-container">
+    <div class="bd-container__inner bd-page-width">
+      
+      
+      
+      <dialog id="pst-primary-sidebar-modal"></dialog>
+      <div id="pst-primary-sidebar" class="bd-sidebar-primary bd-sidebar">
+        
+
+  
+  <div class="sidebar-header-items sidebar-primary__section">
+    
+    
+    
+    
+  </div>
+  
+    <div class="sidebar-primary-items__start sidebar-primary__section">
+        <div class="sidebar-primary-item">
+
+  
+    
+  
+
+<a class="navbar-brand logo" href="../index.html">
+  
+  
+  
+  
+  
+  
+    <p class="title logo__title">Documentation two 0.1.0</p>
+  
+</a></div>
+        <div class="sidebar-primary-item"><ul class="navbar-icon-links"
+    aria-label="Icon Links">
+        <li class="nav-item">
+          
+          
+          
+          
+          
+          
+          
+          
+          <a href="https://git.g3e.fr/syonad/two" title="Dépôt" class="nav-link pst-navbar-icon" rel="noopener" target="_blank" data-bs-toggle="tooltip" data-bs-placement="bottom"><i class="fa-solid fa-code-branch fa-lg" aria-hidden="true"></i>
+            <span class="sr-only">Dépôt</span></a>
+        </li>
+</ul></div>
+        <div class="sidebar-primary-item">
+<div class="version-switcher__container dropdown pst-js-only">
+  <button id="pst-version-switcher-button-2"
+    type="button"
+    class="version-switcher__button btn btn-sm dropdown-toggle"
+    data-bs-toggle="dropdown"
+    aria-haspopup="listbox"
+    aria-controls="pst-version-switcher-list-2"
+    aria-label="Version switcher list"
+  >
+    Choose version  <!-- this text may get changed later by javascript -->
+    <span class="caret"></span>
+  </button>
+  <div id="pst-version-switcher-list-2"
+    class="version-switcher__menu dropdown-menu list-group-flush py-0"
+    role="listbox" aria-labelledby="pst-version-switcher-button-2">
+    <!-- dropdown will be populated by javascript on page load -->
+  </div>
+</div></div>
+        <div class="sidebar-primary-item">
+
+<button class="btn search-button-field search-button__button pst-js-only" title="Recherche" aria-label="Recherche" data-bs-placement="bottom" data-bs-toggle="tooltip">
+ <i class="fa-solid fa-magnifying-glass"></i>
+ <span class="search-button__default-text">Recherche</span>
+ <span class="search-button__kbd-shortcut"><kbd class="kbd-shortcut__modifier">Ctrl</kbd>+<kbd class="kbd-shortcut__modifier">K</kbd></span>
+</button></div>
+        <div class="sidebar-primary-item"><nav class="bd-links bd-docs-nav" aria-label="Main">
+    <div class="bd-toc-item navbar-nav active">
+        
+        <ul class="nav bd-sidenav bd-sidenav__home-link">
+            <li class="toctree-l1">
+                <a class="reference internal" href="../index.html">
+                    two
+                </a>
+            </li>
+        </ul>
+        <p aria-level="2" class="caption" role="heading"><span class="caption-text">Mise en œuvre</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../demarrage/index.html">Démarrage</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../demarrage/installation.html">Installation d’un hyperviseur</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../demarrage/premier-vpc.html">Premier VPC, premier subnet, première VM</a></li>
+</ul>
+</details></li>
+<li class="toctree-l1 has-children"><a class="reference internal" href="../deploiement/index.html">Déploiement d’un cluster</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/architecture-cluster.html">Architecture du cluster</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/image-qcow2.html">Construction de l’image qcow2</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/routeurs.html">Routeurs</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/premier-hyperviseur.html">Premier hyperviseur</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/route-reflector.html">VM route reflector</a></li>
+</ul>
+</details></li>
+</ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Exploitation</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../exploitation/index.html">Exploitation</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../exploitation/configuration.html">Configuration</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../exploitation/services.html">Services systemd</a></li>
+<li class="toctree-l2 has-children"><a class="reference internal" href="../exploitation/api-agent/index.html">API de l’agent</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l3"><a class="reference internal" href="../exploitation/api-agent/asynchronisme.html">Modèle asynchrone et codes de retour</a></li>
+<li class="toctree-l3"><a class="reference internal" href="../exploitation/api-agent/reference.html">Référence</a></li>
+</ul>
+</details></li>
+<li class="toctree-l2"><a class="reference internal" href="../exploitation/observabilite.html">Observabilité</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../exploitation/diagnostic.html">Diagnostic</a></li>
+</ul>
+</details></li>
+</ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="current nav bd-sidenav">
+<li class="toctree-l1 current active has-children"><a class="current reference internal" href="#">Développement</a><details open="open"><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../concepts/vpc-subnet-vm.html">VPC, subnet et VM</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../concepts/modes-reseau.html">Modes réseau</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../concepts/cycle-de-vie.html">Cycle de vie des ressources</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../concepts/metadata-cloud-init.html">Metadata et cloud-init</a></li>
+</ul>
+</details></li>
+<li class="toctree-l1 has-children"><a class="reference internal" href="../architecture/index.html">Architecture</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../architecture/vue-densemble.html">Vue d’ensemble</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../architecture/stockage.html">Schéma des clés</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../architecture/contraintes.html">Invariants et pièges</a></li>
+</ul>
+</details></li>
+<li class="toctree-l1 has-children"><a class="reference internal" href="../versions/index.html">Versions</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../versions/0.2.0.html">Bael</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../versions/0.1.0.html">Michael</a></li>
+</ul>
+</details></li>
+</ul>
+
+    </div>
+</nav></div>
+    </div>
+  
+  
+  <div class="sidebar-primary-items__end sidebar-primary__section">
+      <div class="sidebar-primary-item">
+<div id="ethical-ad-placement"
+      class="flat"
+      data-ea-publisher="readthedocs"
+      data-ea-type="readthedocs-sidebar"
+      data-ea-manual="true">
+</div></div>
+  </div>
+
+
+      </div>
+      
+      <main id="main-content" class="bd-main" role="main">
+        
+        
+
+<div class="sbt-scroll-pixel-helper"></div>
+
+          <div class="bd-content">
+            <div class="bd-article-container">
+              
+              <div class="bd-header-article d-print-none">
+<div class="header-article-items header-article__inner">
+  
+    <div class="header-article-items__start">
+      
+        <div class="header-article-item"><button class="sidebar-toggle primary-toggle btn btn-sm" title="Toggle primary sidebar" data-bs-placement="bottom" data-bs-toggle="tooltip">
+  <span class="fa-solid fa-bars"></span>
+</button></div>
+      
+    </div>
+  
+  
+    <div class="header-article-items__end">
+      
+        <div class="header-article-item">
+
+<div class="article-header-buttons">
+
+
+
+<button onclick="toggleFullScreen()"
+  class="btn btn-sm btn-fullscreen-button pst-navbar-icon"
+  title="Mode plein écran"
+  data-bs-placement="bottom" data-bs-toggle="tooltip"
+>
+  
+
+<span class="btn__icon-container">
+  <i class="fas fa-expand"></i>
+  </span>
+
+</button>
+
+
+
+<button class="btn btn-sm nav-link pst-navbar-icon theme-switch-button pst-js-only" aria-label="Thème" data-bs-title="Thème"  data-bs-placement="bottom" data-bs-toggle="tooltip">
+  <i class="theme-switch fa-solid fa-sun                fa-lg" data-mode="light" title="Clair"></i>
+  <i class="theme-switch fa-solid fa-moon               fa-lg" data-mode="dark"  title="Sombre"></i>
+  <i class="theme-switch fa-solid fa-circle-half-stroke fa-lg" data-mode="auto"  title="Paramètres système"></i>
+</button>
+
+
+<button class="btn btn-sm pst-navbar-icon search-button search-button__button pst-js-only" title="Recherche" aria-label="Recherche" data-bs-placement="bottom" data-bs-toggle="tooltip">
+    <i class="fa-solid fa-magnifying-glass fa-lg"></i>
+</button>
+
+</div></div>
+      
+    </div>
+  
+</div>
+</div>
+              
+              
+
+<div id="jb-print-docs-body" class="onlyprint">
+    <h1>Développement</h1>
+    <!-- Table of contents -->
+    <div id="print-main-content">
+        <div id="jb-print-toc">
+            
+        </div>
+    </div>
+</div>
+
+              
+                
+<div id="searchbox"></div>
+                <article class="bd-article">
+                  
+  <section id="developpement">
+<h1>Développement<a class="headerlink" href="#developpement" title="Lien vers cette rubrique">#</a></h1>
+<p>Outillage réservé au développement de two : il ne s’installe sur aucun hyperviseur et ne sert
+pas à exploiter un cluster.</p>
+<div class="toctree-wrapper compound">
+<ul>
+<li class="toctree-l1"><a class="reference internal" href="lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</div>
+</section>
+
+
+                </article>
+              
+
+              
+              
+              
+              
+                <footer class="prev-next-footer d-print-none">
+                  
+<div class="prev-next-area">
+    <a class="left-prev"
+       href="../exploitation/diagnostic.html"
+       title="page précédente">
+      <i class="fa-solid fa-angle-left"></i>
+      <div class="prev-next-info">
+        <p class="prev-next-subtitle">précédent</p>
+        <p class="prev-next-title">Diagnostic</p>
+      </div>
+    </a>
+    <a class="right-next"
+       href="lab.html"
+       title="page suivante">
+      <div class="prev-next-info">
+        <p class="prev-next-subtitle">suivant</p>
+        <p class="prev-next-title">Lab de test multi-nœud</p>
+      </div>
+      <i class="fa-solid fa-angle-right"></i>
+    </a>
+</div>
+                </footer>
+              
+            </div>
+            
+            
+              
+            
+          </div>
+          <footer class="bd-footer-content">
+            
+<div class="bd-footer-content__inner container">
+  
+  <div class="footer-item">
+    
+<p class="component-author">
+Par Nicolas Boufidjeline
+</p>
+
+  </div>
+  
+  <div class="footer-item">
+    
+
+  <p class="copyright">
+    
+      © Copyright 2026, Nicolas Boufidjeline.
+      <br/>
+    
+  </p>
+
+  </div>
+  
+  <div class="footer-item">
+    
+  </div>
+  
+  <div class="footer-item">
+    
+  </div>
+  
+</div>
+          </footer>
+        
+
+      </main>
+    </div>
+  </div>
+  
+  <!-- Scripts loaded after <body> so the DOM is not blocked -->
+  <script defer src="../_static/scripts/bootstrap.js?digest=8878045cc6db502f8baf"></script>
+<script defer src="../_static/scripts/pydata-sphinx-theme.js?digest=8878045cc6db502f8baf"></script>
+
+  <footer class="bd-footer">
+  </footer>
+  </body>
+</html>
\ No newline at end of file
diff --git a/main/developpement/lab.html b/main/developpement/lab.html
new file mode 100644
index 0000000..0a1590d
--- /dev/null
+++ b/main/developpement/lab.html
@@ -0,0 +1,1472 @@
+
+<!DOCTYPE html>
+
+
+<html lang="fr" data-content_root="../" >
+
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="viewport" content="width=device-width, initial-scale=1" />
+
+    <title>Lab de test multi-nœud &#8212; Documentation two 0.1.0</title>
+  
+  
+  
+  <script data-cfasync="false">
+    document.documentElement.dataset.mode = localStorage.getItem("mode") || "";
+    document.documentElement.dataset.theme = localStorage.getItem("theme") || "";
+  </script>
+  <!--
+    this give us a css class that will be invisible only if js is disabled
+  -->
+  <noscript>
+    <style>
+      .pst-js-only { display: none !important; }
+
+    </style>
+  </noscript>
+  
+  <!-- Loaded before other Sphinx assets -->
+  <link href="../_static/styles/theme.css?digest=8878045cc6db502f8baf" rel="stylesheet" />
+<link href="../_static/styles/pydata-sphinx-theme.css?digest=8878045cc6db502f8baf" rel="stylesheet" />
+
+    <link rel="stylesheet" type="text/css" href="../_static/pygments.css?v=8f2a1f02" />
+    <link rel="stylesheet" type="text/css" href="../_static/styles/sphinx-book-theme.css?v=3c74b3bc" />
+  
+  <!-- So that users can add custom icons -->
+  <script src="../_static/scripts/fontawesome.js?digest=8878045cc6db502f8baf"></script>
+  <!-- Pre-loaded scripts that we'll load fully later -->
+  <link rel="preload" as="script" href="../_static/scripts/bootstrap.js?digest=8878045cc6db502f8baf" />
+<link rel="preload" as="script" href="../_static/scripts/pydata-sphinx-theme.js?digest=8878045cc6db502f8baf" />
+
+    <script src="../_static/documentation_options.js?v=57395fb6"></script>
+    <script src="../_static/doctools.js?v=fd6eb6e6"></script>
+    <script src="../_static/sphinx_highlight.js?v=6ffebe34"></script>
+    <script src="../_static/scripts/sphinx-book-theme.js?v=fab101a9"></script>
+    <script src="../_static/translations.js?v=e6b791cb"></script>
+    <script>DOCUMENTATION_OPTIONS.pagename = 'developpement/lab';</script>
+    <script>
+        DOCUMENTATION_OPTIONS.theme_version = '0.16.1';
+        DOCUMENTATION_OPTIONS.theme_switcher_json_url = '../switcher.json';
+        DOCUMENTATION_OPTIONS.theme_switcher_version_match = 'main';
+        DOCUMENTATION_OPTIONS.show_version_warning_banner =
+            false;
+        </script>
+    <link rel="index" title="Index" href="../genindex.html" />
+    <link rel="search" title="Recherche" href="../search.html" />
+    <link rel="next" title="Concepts" href="../concepts/index.html" />
+    <link rel="prev" title="Développement" href="index.html" />
+  <meta name="viewport" content="width=device-width, initial-scale=1"/>
+  <meta name="docsearch:language" content="fr"/>
+  <meta name="docsearch:version" content="0.1" />
+  </head>
+  
+  
+  <body data-bs-spy="scroll" data-bs-target=".bd-toc-nav" data-offset="180" data-bs-root-margin="0px 0px -60%" data-default-mode="">
+
+  
+  
+  <div id="pst-skip-link" class="skip-link d-print-none"><a href="#main-content">Passer au contenu principal</a></div>
+  
+  <div id="pst-scroll-pixel-helper"></div>
+  
+  <button type="button" class="btn rounded-pill" id="pst-back-to-top">
+    <i class="fa-solid fa-arrow-up"></i>Haut de page</button>
+
+  
+  <dialog id="pst-search-dialog">
+    
+<form class="bd-search d-flex align-items-center"
+      action="../search.html"
+      method="get">
+  <i class="fa-solid fa-magnifying-glass"></i>
+  <input type="search"
+         class="form-control"
+         name="q"
+         placeholder="Search..."
+         aria-label="Search..."
+         autocomplete="off"
+         autocorrect="off"
+         autocapitalize="off"
+         spellcheck="false"/>
+  <span class="search-button__kbd-shortcut"><kbd class="kbd-shortcut__modifier">Ctrl</kbd>+<kbd>K</kbd></span>
+</form>
+  </dialog>
+
+  <div class="pst-async-banner-revealer d-none">
+  <aside id="bd-header-version-warning" class="d-none d-print-none" aria-label="Alerte de version"></aside>
+</div>
+
+  
+    <header class="bd-header navbar navbar-expand-lg bd-navbar d-print-none">
+    </header>
+  
+
+  <div class="bd-container">
+    <div class="bd-container__inner bd-page-width">
+      
+      
+      
+      <dialog id="pst-primary-sidebar-modal"></dialog>
+      <div id="pst-primary-sidebar" class="bd-sidebar-primary bd-sidebar">
+        
+
+  
+  <div class="sidebar-header-items sidebar-primary__section">
+    
+    
+    
+    
+  </div>
+  
+    <div class="sidebar-primary-items__start sidebar-primary__section">
+        <div class="sidebar-primary-item">
+
+  
+    
+  
+
+<a class="navbar-brand logo" href="../index.html">
+  
+  
+  
+  
+  
+  
+    <p class="title logo__title">Documentation two 0.1.0</p>
+  
+</a></div>
+        <div class="sidebar-primary-item"><ul class="navbar-icon-links"
+    aria-label="Icon Links">
+        <li class="nav-item">
+          
+          
+          
+          
+          
+          
+          
+          
+          <a href="https://git.g3e.fr/syonad/two" title="Dépôt" class="nav-link pst-navbar-icon" rel="noopener" target="_blank" data-bs-toggle="tooltip" data-bs-placement="bottom"><i class="fa-solid fa-code-branch fa-lg" aria-hidden="true"></i>
+            <span class="sr-only">Dépôt</span></a>
+        </li>
+</ul></div>
+        <div class="sidebar-primary-item">
+<div class="version-switcher__container dropdown pst-js-only">
+  <button id="pst-version-switcher-button-2"
+    type="button"
+    class="version-switcher__button btn btn-sm dropdown-toggle"
+    data-bs-toggle="dropdown"
+    aria-haspopup="listbox"
+    aria-controls="pst-version-switcher-list-2"
+    aria-label="Version switcher list"
+  >
+    Choose version  <!-- this text may get changed later by javascript -->
+    <span class="caret"></span>
+  </button>
+  <div id="pst-version-switcher-list-2"
+    class="version-switcher__menu dropdown-menu list-group-flush py-0"
+    role="listbox" aria-labelledby="pst-version-switcher-button-2">
+    <!-- dropdown will be populated by javascript on page load -->
+  </div>
+</div></div>
+        <div class="sidebar-primary-item">
+
+<button class="btn search-button-field search-button__button pst-js-only" title="Recherche" aria-label="Recherche" data-bs-placement="bottom" data-bs-toggle="tooltip">
+ <i class="fa-solid fa-magnifying-glass"></i>
+ <span class="search-button__default-text">Recherche</span>
+ <span class="search-button__kbd-shortcut"><kbd class="kbd-shortcut__modifier">Ctrl</kbd>+<kbd class="kbd-shortcut__modifier">K</kbd></span>
+</button></div>
+        <div class="sidebar-primary-item"><nav class="bd-links bd-docs-nav" aria-label="Main">
+    <div class="bd-toc-item navbar-nav active">
+        
+        <ul class="nav bd-sidenav bd-sidenav__home-link">
+            <li class="toctree-l1">
+                <a class="reference internal" href="../index.html">
+                    two
+                </a>
+            </li>
+        </ul>
+        <p aria-level="2" class="caption" role="heading"><span class="caption-text">Mise en œuvre</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../demarrage/index.html">Démarrage</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../demarrage/installation.html">Installation d’un hyperviseur</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../demarrage/premier-vpc.html">Premier VPC, premier subnet, première VM</a></li>
+</ul>
+</details></li>
+<li class="toctree-l1 has-children"><a class="reference internal" href="../deploiement/index.html">Déploiement d’un cluster</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/architecture-cluster.html">Architecture du cluster</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/image-qcow2.html">Construction de l’image qcow2</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/routeurs.html">Routeurs</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/premier-hyperviseur.html">Premier hyperviseur</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../deploiement/route-reflector.html">VM route reflector</a></li>
+</ul>
+</details></li>
+</ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Exploitation</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../exploitation/index.html">Exploitation</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../exploitation/configuration.html">Configuration</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../exploitation/services.html">Services systemd</a></li>
+<li class="toctree-l2 has-children"><a class="reference internal" href="../exploitation/api-agent/index.html">API de l’agent</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l3"><a class="reference internal" href="../exploitation/api-agent/asynchronisme.html">Modèle asynchrone et codes de retour</a></li>
+<li class="toctree-l3"><a class="reference internal" href="../exploitation/api-agent/reference.html">Référence</a></li>
+</ul>
+</details></li>
+<li class="toctree-l2"><a class="reference internal" href="../exploitation/observabilite.html">Observabilité</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../exploitation/diagnostic.html">Diagnostic</a></li>
+</ul>
+</details></li>
+</ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="current nav bd-sidenav">
+<li class="toctree-l1 current active has-children"><a class="reference internal" href="index.html">Développement</a><details open="open"><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul class="current">
+<li class="toctree-l2 current active"><a class="current reference internal" href="#">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../concepts/vpc-subnet-vm.html">VPC, subnet et VM</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../concepts/modes-reseau.html">Modes réseau</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../concepts/cycle-de-vie.html">Cycle de vie des ressources</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../concepts/metadata-cloud-init.html">Metadata et cloud-init</a></li>
+</ul>
+</details></li>
+<li class="toctree-l1 has-children"><a class="reference internal" href="../architecture/index.html">Architecture</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../architecture/vue-densemble.html">Vue d’ensemble</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../architecture/stockage.html">Schéma des clés</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../architecture/contraintes.html">Invariants et pièges</a></li>
+</ul>
+</details></li>
+<li class="toctree-l1 has-children"><a class="reference internal" href="../versions/index.html">Versions</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../versions/0.2.0.html">Bael</a></li>
+<li class="toctree-l2"><a class="reference internal" href="../versions/0.1.0.html">Michael</a></li>
+</ul>
+</details></li>
+</ul>
+
+    </div>
+</nav></div>
+    </div>
+  
+  
+  <div class="sidebar-primary-items__end sidebar-primary__section">
+      <div class="sidebar-primary-item">
+<div id="ethical-ad-placement"
+      class="flat"
+      data-ea-publisher="readthedocs"
+      data-ea-type="readthedocs-sidebar"
+      data-ea-manual="true">
+</div></div>
+  </div>
+
+
+      </div>
+      
+      <main id="main-content" class="bd-main" role="main">
+        
+        
+
+<div class="sbt-scroll-pixel-helper"></div>
+
+          <div class="bd-content">
+            <div class="bd-article-container">
+              
+              <div class="bd-header-article d-print-none">
+<div class="header-article-items header-article__inner">
+  
+    <div class="header-article-items__start">
+      
+        <div class="header-article-item"><button class="sidebar-toggle primary-toggle btn btn-sm" title="Toggle primary sidebar" data-bs-placement="bottom" data-bs-toggle="tooltip">
+  <span class="fa-solid fa-bars"></span>
+</button></div>
+      
+    </div>
+  
+  
+    <div class="header-article-items__end">
+      
+        <div class="header-article-item">
+
+<div class="article-header-buttons">
+
+
+
+<button onclick="toggleFullScreen()"
+  class="btn btn-sm btn-fullscreen-button pst-navbar-icon"
+  title="Mode plein écran"
+  data-bs-placement="bottom" data-bs-toggle="tooltip"
+>
+  
+
+<span class="btn__icon-container">
+  <i class="fas fa-expand"></i>
+  </span>
+
+</button>
+
+
+
+<button class="btn btn-sm nav-link pst-navbar-icon theme-switch-button pst-js-only" aria-label="Thème" data-bs-title="Thème"  data-bs-placement="bottom" data-bs-toggle="tooltip">
+  <i class="theme-switch fa-solid fa-sun                fa-lg" data-mode="light" title="Clair"></i>
+  <i class="theme-switch fa-solid fa-moon               fa-lg" data-mode="dark"  title="Sombre"></i>
+  <i class="theme-switch fa-solid fa-circle-half-stroke fa-lg" data-mode="auto"  title="Paramètres système"></i>
+</button>
+
+
+<button class="btn btn-sm pst-navbar-icon search-button search-button__button pst-js-only" title="Recherche" aria-label="Recherche" data-bs-placement="bottom" data-bs-toggle="tooltip">
+    <i class="fa-solid fa-magnifying-glass fa-lg"></i>
+</button>
+<button class="sidebar-toggle secondary-toggle btn btn-sm pst-navbar-icon" title="Toggle secondary sidebar" data-bs-placement="bottom" data-bs-toggle="tooltip">
+    <span class="fa-solid fa-list"></span>
+</button>
+</div></div>
+      
+    </div>
+  
+</div>
+</div>
+              
+              
+
+<div id="jb-print-docs-body" class="onlyprint">
+    <h1>Lab de test multi-nœud</h1>
+    <!-- Table of contents -->
+    <div id="print-main-content">
+        <div id="jb-print-toc">
+            
+            <div>
+                <h2> Contenu </h2>
+            </div>
+            <nav aria-label="Page">
+                <ul class="visible nav section-nav flex-column">
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#le-serveur-de-lab">Le serveur de lab</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#prerequis-cote-scaleway">Prérequis côté Scaleway</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#fichiers-locaux">Fichiers locaux</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#commandes">Commandes</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#topologie">Topologie</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#roles">Rôles</a></li>
+</ul>
+</li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#rendu-des-vm">Rendu des VM</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#verifie-sur-de-vraies-vm">Vérifié sur de vraies VM</a></li>
+</ul>
+</li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#lancement-des-vm">Lancement des VM</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#verifie-sur-le-serveur-de-lab">Vérifié sur le serveur de lab</a></li>
+</ul>
+</li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#scenarios">Scénarios</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#ecrire-un-scenario">Écrire un scénario</a></li>
+</ul>
+</li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#facturation">Facturation</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#diagnostic">Diagnostic</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#securite">Sécurité</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#tests">Tests</a></li>
+</ul>
+            </nav>
+        </div>
+    </div>
+</div>
+
+              
+                
+<div id="searchbox"></div>
+                <article class="bd-article">
+                  
+  <section id="lab-de-test-multi-noeud">
+<h1>Lab de test multi-nœud<a class="headerlink" href="#lab-de-test-multi-noeud" title="Lien vers cette rubrique">#</a></h1>
+<p>Ce qui fait l’intérêt de two ne se voit qu’à partir de <strong>deux hyperviseurs</strong> : sur un nœud isolé,
+le trafic reste sur le bridge local et l’absence de plan de contrôle passe inaperçue (voir
+<a class="reference internal" href="../deploiement/architecture-cluster.html"><span class="doc">Architecture du cluster</span></a>). Le lab reproduit la topologie du cluster —
+hyperviseurs, route reflector, switch L3 — sous forme de VM, sur un serveur physique loué à
+l’heure.</p>
+<p>Le pourquoi des choix (serveur physique plutôt que VM cloud, câbles QEMU, MTU 9000, versions) est
+consigné sur le ticket <a class="reference external" href="https://git.g3e.fr/syonad/two/issues/50">#50</a>. Cette page décrit
+comment s’en servir.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>État actuel : le lab de #50 est livré — serveur loué à l’heure (<code class="docutils literal notranslate"><span class="pre">scripts/lab-host.sh</span></code>),
+topologie déclarative et plan déterministe (<code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">plan</span></code>), VM rendues et lancées sur le
+serveur (<code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">render</span></code>, <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">up</span></code> / <code class="docutils literal notranslate"><span class="pre">status</span></code> / <code class="docutils literal notranslate"><span class="pre">down</span></code> / <code class="docutils literal notranslate"><span class="pre">ssh</span></code>), rôles installés au
+démarrage (FRR sur le switch et le route reflector, two par <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> sur les
+hyperviseurs) et scénarios versionnés (<code class="docutils literal notranslate"><span class="pre">test/e2e/run.sh</span></code>). La redondance du plan de
+contrôle — deux route reflectors, deux switchs — est l’objet de
+<a class="reference external" href="https://git.g3e.fr/syonad/two/issues/54">#54</a>.</p>
+</div>
+<section id="le-serveur-de-lab">
+<h2>Le serveur de lab<a class="headerlink" href="#le-serveur-de-lab" title="Lien vers cette rubrique">#</a></h2>
+<p>Un serveur <strong>Scaleway Elastic Metal</strong>, créé pour une campagne de tests puis supprimé.</p>
+<div class="pst-scrollable-table-container"><table class="table">
+<colgroup>
+<col style="width: 25.0%" />
+<col style="width: 75.0%" />
+</colgroup>
+<tbody>
+<tr class="row-odd"><td><p>Offre</p></td>
+<td><p><code class="docutils literal notranslate"><span class="pre">EM-B212X-SSD</span></code>, zone <code class="docutils literal notranslate"><span class="pre">fr-par-1</span></code>, <strong>facturation horaire</strong> : 0,321 € HT de l’heure, sans
+frais de mise en service</p></td>
+</tr>
+<tr class="row-even"><td><p>Matériel</p></td>
+<td><p>2 × Xeon E5-2620 v4 <em>or equivalent</em>, 256 Go, 2 × 1 To SSD</p></td>
+</tr>
+<tr class="row-odd"><td><p>Système</p></td>
+<td><p>Debian 12, installé par Scaleway à la création</p></td>
+</tr>
+<tr class="row-even"><td><p>Pourquoi Intel</p></td>
+<td><p>lab3 est en Intel : two lance ses VM en <code class="docutils literal notranslate"><span class="pre">-cpu</span> <span class="pre">host</span></code>, et KVM a deux implémentations
+distinctes (<code class="docutils literal notranslate"><span class="pre">kvm_intel</span></code>, <code class="docutils literal notranslate"><span class="pre">kvm_amd</span></code>)</p></td>
+</tr>
+</tbody>
+</table>
+</div>
+<p><em>Or equivalent</em> n’est pas une clause de style : le premier serveur livré était un
+<strong>Xeon E5-2640 v3</strong> (Haswell, la génération de lab3), pas le E5-2620 v4 annoncé. Relever
+<code class="docutils literal notranslate"><span class="pre">lscpu</span></code> au début de chaque campagne.</p>
+</section>
+<section id="prerequis-cote-scaleway">
+<h2>Prérequis côté Scaleway<a class="headerlink" href="#prerequis-cote-scaleway" title="Lien vers cette rubrique">#</a></h2>
+<ol class="arabic simple">
+<li><p><strong>Un projet dédié au lab</strong>, séparé de toute autre ressource. <code class="docutils literal notranslate"><span class="pre">lab-host.sh</span> <span class="pre">down</span></code> supprime
+tout serveur de lab du projet : il ne doit rien y avoir d’autre.</p></li>
+<li><p><strong>Une clé d’API limitée à ce projet</strong>, avec les droits Elastic Metal et la lecture des clés SSH
+du projet. Rien d’autre.</p></li>
+<li><p><strong>Les clés SSH publiques enregistrées dans le projet</strong>, injectées à l’installation : sans elle,
+le serveur serait facturé sans que personne puisse s’y connecter, et <code class="docutils literal notranslate"><span class="pre">plan</span></code> refuse de
+continuer.</p></li>
+<li><p><strong>Le quota Elastic Metal.</strong> L”<code class="docutils literal notranslate"><span class="pre">EM-B212X-SSD</span></code> exige un compte dont le moyen de paiement <em>et</em>
+l’identité sont validés ; le quota est alors de 2. Vérifier dans la console : Organisation →
+Quotas → Elastic Metal. Voir <a class="reference external" href="https://www.scaleway.com/en/docs/organizations-and-projects/organization/organization-quotas/">les quotas Scaleway</a>.</p></li>
+</ol>
+</section>
+<section id="fichiers-locaux">
+<h2>Fichiers locaux<a class="headerlink" href="#fichiers-locaux" title="Lien vers cette rubrique">#</a></h2>
+<p>Tout ce dont le script a besoin vit sous <code class="docutils literal notranslate"><span class="pre">~/.config/two-lab/</span></code>, hors du dépôt.</p>
+<dl>
+<dt><code class="docutils literal notranslate"><span class="pre">~/.config/two-lab/scaleway.env</span></code></dt><dd><p>Identifiants Scaleway, une ligne <code class="docutils literal notranslate"><span class="pre">CLÉ=valeur</span></code> chacun :</p>
+<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span><span class="nv">SCW_SECRET_KEY</span><span class="o">=</span>&lt;clé<span class="w"> </span>secrète&gt;
+<span class="nv">SCW_DEFAULT_PROJECT_ID</span><span class="o">=</span>&lt;identifiant<span class="w"> </span>du<span class="w"> </span>projet<span class="w"> </span>de<span class="w"> </span>lab&gt;
+<span class="nv">SCW_DEFAULT_ZONE</span><span class="o">=</span>fr-par-1
+</pre></div>
+</div>
+<ul class="simple">
+<li><p>le fichier doit être en <code class="docutils literal notranslate"><span class="pre">0600</span></code> : le script refuse de s’en servir s’il est lisible par
+d’autres que son propriétaire ;</p></li>
+<li><p>il est <strong>lu, jamais exécuté</strong> — pas de <code class="docutils literal notranslate"><span class="pre">source</span></code> ; seules ces trois clés sont reconnues ;</p></li>
+<li><p>une variable d’environnement du même nom l’emporte sur le fichier ;</p></li>
+<li><p>la clé d’accès (<code class="docutils literal notranslate"><span class="pre">SCW…</span></code>) n’est pas nécessaire : l’API REST n’authentifie que par la clé
+secrète, dans l’en-tête <code class="docutils literal notranslate"><span class="pre">X-Auth-Token</span></code>.</p></li>
+</ul>
+<p>Pour changer de clé, remplacer la ligne <code class="docutils literal notranslate"><span class="pre">SCW_SECRET_KEY=</span></code> ; rien d’autre à modifier.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">~/.config/two-lab/ssh/lab_ed25519</span></code></dt><dd><p>Clé SSH dédiée au lab, <strong>sans phrase de passe</strong>, pour que les sessions tournent sans
+intervention. Sa partie publique doit être enregistrée dans le projet. Quand elle existe, le
+script l’utilise <strong>seule</strong> (<code class="docutils literal notranslate"><span class="pre">IdentitiesOnly</span></code>, agent désactivé) ; sinon il retombe sur
+l’agent SSH.</p>
+<p>Elle ne doit ouvrir que les serveurs éphémères du projet de lab : <strong>ne jamais l’installer sur
+lab3 ni sur une machine durable</strong>. En cas de doute, la retirer du projet et en générer une
+autre :</p>
+<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span>mkdir<span class="w"> </span>-p<span class="w"> </span>~/.config/two-lab/ssh<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span>chmod<span class="w"> </span><span class="m">700</span><span class="w"> </span>~/.config/two-lab<span class="w"> </span>~/.config/two-lab/ssh
+ssh-keygen<span class="w"> </span>-t<span class="w"> </span>ed25519<span class="w"> </span>-N<span class="w"> </span><span class="s1">''</span><span class="w"> </span>-C<span class="w"> </span>two-lab-automation<span class="w"> </span>-f<span class="w"> </span>~/.config/two-lab/ssh/lab_ed25519
+</pre></div>
+</div>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">~/.cache/two-lab/</span></code></dt><dd><p>État de la session en cours : adresse et utilisateur du serveur, <code class="docutils literal notranslate"><span class="pre">known_hosts</span></code> dédié. Vidé
+par <code class="docutils literal notranslate"><span class="pre">down</span></code>.</p>
+</dd>
+</dl>
+</section>
+<section id="commandes">
+<h2>Commandes<a class="headerlink" href="#commandes" title="Lien vers cette rubrique">#</a></h2>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>usage: lab-host.sh &lt;commande&gt; [arguments]
+
+  plan              résout l'offre horaire, l'OS et les clés SSH, affiche la requête de création
+                    et le prix ; ne crée rien
+  up                crée le serveur de lab, attend la fin de son installation et son SSH,
+                    puis le prépare (voir prepare)
+  status            liste les serveurs de lab du projet
+  ssh [commande]    se connecte au serveur de lab ; avec une commande, un terminal n'est demandé
+                    que si l'entrée standard en est un
+  prepare           installe sur le serveur ce dont lab a besoin (qemu, genisoimage), vérifie
+                    /dev/kvm et la virtualisation imbriquée ; lancé aussi par up
+  push &lt;topologie&gt;  compile cmd/lab pour linux/amd64 et dépose sur le serveur ~/lab et le
+                    répertoire de la topologie dans ~/topology/ (avec les fichiers qu'elle
+                    référence) ; ensuite : ssh './lab up topology/&lt;topologie&gt;'
+  down              supprime tous les serveurs de lab du projet et attend leur disparition
+  session [cmd]     up, puis la commande distante (ou un shell), puis down quoi qu'il arrive
+</pre></div>
+</div>
+<p><code class="docutils literal notranslate"><span class="pre">plan</span></code> et <code class="docutils literal notranslate"><span class="pre">status</span></code> sont <strong>gratuits</strong> ; <code class="docutils literal notranslate"><span class="pre">up</span></code> et <code class="docutils literal notranslate"><span class="pre">session</span></code> <strong>créent un serveur facturé</strong>.</p>
+<p>Toujours commencer par <code class="docutils literal notranslate"><span class="pre">plan</span></code>. Il valide la clé d’API, le quota d’offre, l’OS et les clés SSH,
+et montre exactement ce qui serait commandé :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>$ scripts/lab-host.sh plan
+== offre   : EM-B212X-SSD (ddaf8ba6-b2b2-4279-8af3-51930fb602f8), facturation hourly, stock available
+== prix    : 0.321 EUR HT par heure, frais de mise en service 0 EUR
+== os      : Debian 12 (Bookworm) (83640d93-a0b8-45ad-9c9f-30cae48380a4), utilisateur root
+== clés    : 2 clé(s) SSH du projet
+== requête : POST /baremetal/v1/zones/fr-par-1/servers
+</pre></div>
+</div>
+<p><code class="docutils literal notranslate"><span class="pre">session</span></code> est la forme normale d’usage : le serveur est supprimé à la fin, que la commande
+réussisse, échoue, ou que la session soit interrompue (Ctrl-C, <code class="docutils literal notranslate"><span class="pre">TERM</span></code>, fermeture du terminal).</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>$ scripts/lab-host.sh session 'uname -a; lscpu | grep -E "Model name|^CPU\(s\)|Virtualization"; free -g | head -2; echo "nested=$(cat /sys/module/kvm_intel/parameters/nested)"; ls -l /dev/kvm'
+== création de two-lab (EM-B212X-SSD, 0.321 EUR/h HT)
+== serveur 2ecc1e6a-0de8-48c0-a198-93857eee5957 créé, facturé jusqu'à 'lab-host.sh down'
+== serveur 2ecc1e6a-0de8-48c0-a198-93857eee5957 : ordered, installation to_install
+== serveur 2ecc1e6a-0de8-48c0-a198-93857eee5957 : ready, installation installing
+…
+== serveur 2ecc1e6a-0de8-48c0-a198-93857eee5957 : ready, installation completed
+== SSH pas encore joignable, nouvel essai dans 20s
+…
+== prêt : root@&lt;adresse&gt;
+Linux two-lab 6.1.0-53-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.187-1 (2026-09-07) x86_64 GNU/Linux
+CPU(s):                                  32
+Model name:                              Intel(R) Xeon(R) CPU E5-2640 v3 @ 2.60GHz
+…
+Virtualization:                          VT-x
+               total        used        free      shared  buff/cache   available
+Mem:             251           1         250           0           0         249
+nested=Y
+crw-rw---- 1 root kvm 10, 232 Oct  3 17:23 /dev/kvm
+== session terminée (code 0), suppression du serveur
+== suppression de 2ecc1e6a-0de8-48c0-a198-93857eee5957
+== aucun serveur de lab ne reste dans le projet
+</pre></div>
+</div>
+<p>Extrait de la première campagne (lignes répétées remplacées par <code class="docutils literal notranslate"><span class="pre">…</span></code>). Compter <strong>environ 15 minutes</strong> entre la création et le SSH disponible : 13 min 30 à la première
+campagne, suppression comprise. SSH ne répond pas tout de suite après la fin de l’installation —
+environ 100 secondes la première fois — d’où l’attente intégrée à <code class="docutils literal notranslate"><span class="pre">up</span></code>. Le code de sortie de
+<code class="docutils literal notranslate"><span class="pre">session</span></code> est celui de la commande distante.</p>
+<p><code class="docutils literal notranslate"><span class="pre">up</span></code>, <code class="docutils literal notranslate"><span class="pre">ssh</span></code> et <code class="docutils literal notranslate"><span class="pre">down</span></code> séparément servent au debug interactif — et laissent la suppression
+à la charge de l’utilisateur.</p>
+<p>Une campagne sur le lab enchaîne ces commandes depuis le Mac ; <code class="docutils literal notranslate"><span class="pre">lab</span></code> s’exécute sur le serveur
+(voir <a class="reference internal" href="#lancement-des-vm">Lancement des VM</a>) :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>scripts/lab-host.sh up
+scripts/lab-host.sh push test/e2e/topologies/evpn-2hv.yml
+scripts/lab-host.sh ssh './lab up topology/evpn-2hv.yml'
+scripts/lab-host.sh ssh './lab ssh hv1'          # shell interactif sur hv1
+scripts/lab-host.sh ssh './lab ssh hv1 ip -br a' # commande, code de retour propagé
+scripts/lab-host.sh down
+</pre></div>
+</div>
+<p><code class="docutils literal notranslate"><span class="pre">push</span></code> transfère par la connexion SSH du script — mêmes options, même clé, même
+<code class="docutils literal notranslate"><span class="pre">known_hosts</span></code> que <code class="docutils literal notranslate"><span class="pre">ssh</span></code> : le binaire par <code class="docutils literal notranslate"><span class="pre">cat</span></code>, le répertoire de la topologie par <code class="docutils literal notranslate"><span class="pre">tar</span></code>
+(sans les métadonnées macOS), chacun renommé une fois complet. Tout le répertoire part, pour que
+les fichiers que la topologie référence (<code class="docutils literal notranslate"><span class="pre">frr/*.conf</span></code>) arrivent avec elle.</p>
+</section>
+<section id="topologie">
+<h2>Topologie<a class="headerlink" href="#topologie" title="Lien vers cette rubrique">#</a></h2>
+<p>Un lab est décrit par un fichier YAML : des <strong>nœuds</strong> (les VM) et des <strong>segments</strong> (des réseaux L2
+portés par un switch). Exemple livré, <code class="docutils literal notranslate"><span class="pre">test/e2e/topologies/evpn-2hv.yml</span></code> :</p>
+<div class="highlight-yaml notranslate"><div class="highlight"><pre><span></span><span class="nt">name</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">evpn-2hv</span>
+
+<span class="nt">images</span><span class="p">:</span>
+<span class="w">  </span><span class="nt">debian12</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">url</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-generic-amd64.qcow2</span>
+<span class="w">    </span><span class="nt">sums</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">https://cloud.debian.org/images/cloud/bookworm/latest/SHA512SUMS</span>
+
+<span class="nt">segments</span><span class="p">:</span>
+<span class="w">  </span><span class="nt">underlay</span><span class="p">:</span>
+<span class="w">    </span><span class="nt">switch</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">sw1</span>
+<span class="w">    </span><span class="nt">cidr</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">192.168.14.0/24</span>
+<span class="w">    </span><span class="nt">mtu</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">9000</span>
+
+<span class="nt">nodes</span><span class="p">:</span>
+<span class="w">  </span><span class="nt">sw1</span><span class="p">:</span>
+<span class="w">    </span><span class="p p-Indicator">{</span><span class="nt"> role</span><span class="p">:</span><span class="w"> </span><span class="nv">switch</span><span class="p p-Indicator">,</span><span class="nt"> image</span><span class="p">:</span><span class="w"> </span><span class="nv">debian12</span><span class="p p-Indicator">,</span><span class="nt"> cpus</span><span class="p">:</span><span class="w"> </span><span class="nv">2</span><span class="p p-Indicator">,</span><span class="nt"> memory</span><span class="p">:</span><span class="w"> </span><span class="nv">1024</span><span class="p p-Indicator">,</span>
+<span class="nt">      secondary</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">{</span><span class="nt"> underlay</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">[</span><span class="nv">169.254.0.1/28</span><span class="p p-Indicator">]</span><span class="w"> </span><span class="p p-Indicator">},</span><span class="nt"> frr</span><span class="p">:</span><span class="w"> </span><span class="nv">frr/sw1.conf</span><span class="w"> </span><span class="p p-Indicator">}</span>
+<span class="w">  </span><span class="nt">rr1</span><span class="p">:</span>
+<span class="w">    </span><span class="p p-Indicator">{</span><span class="nt"> role</span><span class="p">:</span><span class="w"> </span><span class="nv">rr</span><span class="p p-Indicator">,</span><span class="nt"> image</span><span class="p">:</span><span class="w"> </span><span class="nv">debian12</span><span class="p p-Indicator">,</span><span class="nt"> cpus</span><span class="p">:</span><span class="w"> </span><span class="nv">1</span><span class="p p-Indicator">,</span><span class="nt"> memory</span><span class="p">:</span><span class="w"> </span><span class="nv">1024</span><span class="p p-Indicator">,</span><span class="nt"> segments</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">[</span><span class="nv">underlay</span><span class="p p-Indicator">],</span>
+<span class="nt">      addresses</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">{</span><span class="nt"> underlay</span><span class="p">:</span><span class="w"> </span><span class="nv">192.168.14.2</span><span class="w"> </span><span class="p p-Indicator">},</span><span class="nt"> secondary</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">{</span><span class="nt"> underlay</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">[</span><span class="nv">169.254.0.3/28</span><span class="p p-Indicator">]</span><span class="w"> </span><span class="p p-Indicator">},</span>
+<span class="nt">      loopback</span><span class="p">:</span><span class="w"> </span><span class="nv">10.255.255.1/32</span><span class="p p-Indicator">,</span><span class="nt"> frr</span><span class="p">:</span><span class="w"> </span><span class="nv">frr/rr1.conf</span><span class="w"> </span><span class="p p-Indicator">}</span>
+<span class="w">  </span><span class="nt">hv1</span><span class="p">:</span>
+<span class="w">    </span><span class="p p-Indicator">{</span><span class="nt"> role</span><span class="p">:</span><span class="w"> </span><span class="nv">hypervisor</span><span class="p p-Indicator">,</span><span class="nt"> image</span><span class="p">:</span><span class="w"> </span><span class="nv">debian12</span><span class="p p-Indicator">,</span><span class="nt"> cpus</span><span class="p">:</span><span class="w"> </span><span class="nv">4</span><span class="p p-Indicator">,</span><span class="nt"> memory</span><span class="p">:</span><span class="w"> </span><span class="nv">16384</span><span class="p p-Indicator">,</span><span class="nt"> segments</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">[</span><span class="nv">underlay</span><span class="p p-Indicator">],</span>
+<span class="nt">      addresses</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">{</span><span class="nt"> underlay</span><span class="p">:</span><span class="w"> </span><span class="nv">192.168.14.11</span><span class="w"> </span><span class="p p-Indicator">},</span><span class="nt"> frr</span><span class="p">:</span><span class="w"> </span><span class="nv">frr/hv1.conf</span><span class="p p-Indicator">,</span><span class="nt"> release</span><span class="p">:</span><span class="w"> </span><span class="nv">0.2.0rc003</span><span class="p p-Indicator">,</span>
+<span class="nt">      agent</span><span class="p">:</span><span class="w"> </span><span class="nv">agent/two.yml</span><span class="w"> </span><span class="p p-Indicator">}</span>
+<span class="w">  </span><span class="nt">hv2</span><span class="p">:</span>
+<span class="w">    </span><span class="p p-Indicator">{</span><span class="nt"> role</span><span class="p">:</span><span class="w"> </span><span class="nv">hypervisor</span><span class="p p-Indicator">,</span><span class="nt"> image</span><span class="p">:</span><span class="w"> </span><span class="nv">debian12</span><span class="p p-Indicator">,</span><span class="nt"> cpus</span><span class="p">:</span><span class="w"> </span><span class="nv">4</span><span class="p p-Indicator">,</span><span class="nt"> memory</span><span class="p">:</span><span class="w"> </span><span class="nv">16384</span><span class="p p-Indicator">,</span><span class="nt"> segments</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">[</span><span class="nv">underlay</span><span class="p p-Indicator">],</span>
+<span class="nt">      addresses</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">{</span><span class="nt"> underlay</span><span class="p">:</span><span class="w"> </span><span class="nv">192.168.14.12</span><span class="w"> </span><span class="p p-Indicator">},</span><span class="nt"> frr</span><span class="p">:</span><span class="w"> </span><span class="nv">frr/hv2.conf</span><span class="p p-Indicator">,</span><span class="nt"> release</span><span class="p">:</span><span class="w"> </span><span class="nv">0.2.0rc003</span><span class="w"> </span><span class="p p-Indicator">}</span>
+</pre></div>
+</div>
+<p>Chaque nœud non-switch est relié au switch de chacun de ses segments par un câble virtuel QEMU ;
+le switch met ces câbles dans un bridge et porte la passerelle du segment.</p>
+<p>Ce que le fichier déclare :</p>
+<dl>
+<dt><code class="docutils literal notranslate"><span class="pre">images</span></code></dt><dd><p><code class="docutils literal notranslate"><span class="pre">url</span></code> de l’image qcow2 et <code class="docutils literal notranslate"><span class="pre">sums</span></code> du fichier de sommes à vérifier, tous deux en <code class="docutils literal notranslate"><span class="pre">https://</span></code>.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">segments</span></code></dt><dd><p><code class="docutils literal notranslate"><span class="pre">switch</span></code> (un nœud de rôle <code class="docutils literal notranslate"><span class="pre">switch</span></code>), <code class="docutils literal notranslate"><span class="pre">cidr</span></code> IPv4 entre <code class="docutils literal notranslate"><span class="pre">/8</span></code> et <code class="docutils literal notranslate"><span class="pre">/30</span></code>, <code class="docutils literal notranslate"><span class="pre">mtu</span></code>
+facultatif — 9000 par défaut, entre 1280 et 9000. Nom : 12 caractères au plus, minuscules et
+chiffres, parce qu’il devient le nom d’interface dans les VM et, préfixé de <code class="docutils literal notranslate"><span class="pre">br-</span></code>, celui du
+bridge (15 caractères au plus sous Linux).</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">nodes</span></code></dt><dd><p><code class="docutils literal notranslate"><span class="pre">role</span></code> (<code class="docutils literal notranslate"><span class="pre">switch</span></code>, <code class="docutils literal notranslate"><span class="pre">rr</span></code> ou <code class="docutils literal notranslate"><span class="pre">hypervisor</span></code>), <code class="docutils literal notranslate"><span class="pre">image</span></code>, <code class="docutils literal notranslate"><span class="pre">cpus</span></code>, <code class="docutils literal notranslate"><span class="pre">memory</span></code> en Mio
+(256 au moins), <code class="docutils literal notranslate"><span class="pre">segments</span></code> auxquels le nœud est relié, et <code class="docutils literal notranslate"><span class="pre">addresses</span></code> pour fixer
+l’adresse d’un nœud sur un segment (<code class="docutils literal notranslate"><span class="pre">addresses:</span> <span class="pre">{underlay:</span> <span class="pre">192.168.14.50}</span></code>). Un switch ne
+déclare ni <code class="docutils literal notranslate"><span class="pre">segments</span></code> ni <code class="docutils literal notranslate"><span class="pre">addresses</span></code> : il porte ceux dont il est le <code class="docutils literal notranslate"><span class="pre">switch</span></code>.</p>
+<p>Champs de rôle, facultatifs :</p>
+<ul class="simple">
+<li><p><code class="docutils literal notranslate"><span class="pre">secondary</span></code> — des adresses supplémentaires par segment, avec leur longueur de préfixe
+(<code class="docutils literal notranslate"><span class="pre">secondary:</span> <span class="pre">{underlay:</span> <span class="pre">[169.254.0.3/28]}</span></code>), posées sur la même interface que l’adresse
+principale : même L2, même MAC. Elles doivent être <strong>hors</strong> du CIDR du segment, pour ne
+jamais croiser l’attribution automatique. Sur un switch, elles vont sur le bridge du
+segment ;</p></li>
+<li><p><code class="docutils literal notranslate"><span class="pre">loopback</span></code> — une adresse sur une interface <code class="docutils literal notranslate"><span class="pre">dummy</span></code> nommée <code class="docutils literal notranslate"><span class="pre">lo1</span></code>
+(<code class="docutils literal notranslate"><span class="pre">loopback:</span> <span class="pre">10.255.255.1/32</span></code>) ;</p></li>
+<li><p><code class="docutils literal notranslate"><span class="pre">frr</span></code> — le chemin d’un <code class="docutils literal notranslate"><span class="pre">frr.conf</span></code>, relatif au fichier de topologie : FRR est installé
+au démarrage et la configuration déposée <strong>telle quelle</strong> (voir <a class="reference internal" href="#roles">Rôles</a>).</p></li>
+<li><p><code class="docutils literal notranslate"><span class="pre">release</span></code> — <strong>obligatoire pour un hyperviseur</strong>, refusé ailleurs : le tag de la release de
+two que <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> installe (<code class="docutils literal notranslate"><span class="pre">release:</span> <span class="pre">0.2.0rc003</span></code>). Sans lui, <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> prendrait la
+dernière release, et le lab ne serait plus reproductible.</p></li>
+<li><p><code class="docutils literal notranslate"><span class="pre">agent</span></code> — pour un hyperviseur seulement : le chemin d’un <code class="docutils literal notranslate"><span class="pre">agent.yml</span></code>, relatif au fichier
+de topologie, déposé dans <code class="docutils literal notranslate"><span class="pre">/etc/two/agent.yml</span></code> avant <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code>. Sans lui, l’agent tourne
+avec sa configuration par défaut. L’exemple met hv1 sur le serveur DHCP intégré
+(<code class="docutils literal notranslate"><span class="pre">test/e2e/topologies/agent/two.yml</span></code> : <code class="docutils literal notranslate"><span class="pre">dhcp.backend:</span> <span class="pre">two</span></code>) et laisse hv2 sur dnsmasq.</p></li>
+</ul>
+<p><code class="docutils literal notranslate"><span class="pre">mgmt0</span></code> et <code class="docutils literal notranslate"><span class="pre">lo1</span></code> sont réservés : aucun segment ne peut porter ces noms.</p>
+</dd>
+</dl>
+<p>Ce que l’outil en déduit, de façon déterministe — même fichier, même plan :</p>
+<div class="pst-scrollable-table-container"><table class="table">
+<colgroup>
+<col style="width: 30.0%" />
+<col style="width: 70.0%" />
+</colgroup>
+<tbody>
+<tr class="row-odd"><td><p>Passerelle d’un segment</p></td>
+<td><p>la première adresse du CIDR, portée par le switch sur <code class="docutils literal notranslate"><span class="pre">br-&lt;segment&gt;</span></code></p></td>
+</tr>
+<tr class="row-even"><td><p>Adresse d’un nœud</p></td>
+<td><p>les suivantes, <strong>dans l’ordre de déclaration des nœuds</strong> ; une adresse fixée par
+<code class="docutils literal notranslate"><span class="pre">addresses</span></code> est réservée d’abord et sautée par l’attribution automatique</p></td>
+</tr>
+<tr class="row-odd"><td><p>Câbles</p></td>
+<td><p>un par couple (segment, nœud), segments puis nœuds dans l’ordre de déclaration ; le
+câble <em>i</em> utilise les ports UDP <code class="docutils literal notranslate"><span class="pre">20000</span> <span class="pre">+</span> <span class="pre">2i</span></code> (côté nœud) et <code class="docutils literal notranslate"><span class="pre">20001</span> <span class="pre">+</span> <span class="pre">2i</span></code> (côté switch)</p></td>
+</tr>
+<tr class="row-even"><td><p>MAC</p></td>
+<td><p><code class="docutils literal notranslate"><span class="pre">02:4c:&lt;nœud&gt;:&lt;nœud&gt;:&lt;segment&gt;:&lt;côté&gt;</span></code> — préfixe localement administré, rang du nœud
+sur deux octets, rang du segment, <code class="docutils literal notranslate"><span class="pre">00</span></code> côté nœud et <code class="docutils literal notranslate"><span class="pre">01</span></code> côté switch</p></td>
+</tr>
+<tr class="row-odd"><td><p>Interfaces</p></td>
+<td><p>côté nœud, le nom du segment ; côté switch, <code class="docutils literal notranslate"><span class="pre">p&lt;i&gt;</span></code>, du rang du câble</p></td>
+</tr>
+<tr class="row-even"><td><p>SSH d’administration</p></td>
+<td><p><code class="docutils literal notranslate"><span class="pre">127.0.0.1:&lt;2200</span> <span class="pre">+</span> <span class="pre">rang</span> <span class="pre">du</span> <span class="pre">nœud&gt;</span></code> sur l’hôte du lab</p></td>
+</tr>
+</tbody>
+</table>
+</div>
+<div class="admonition warning">
+<p class="admonition-title">Avertissement</p>
+<p>Réordonner les nœuds ou les segments dans le fichier <strong>change les adresses, les MAC et les
+ports</strong>. C’est assumé pour un lab ; <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">plan</span></code> montre le résultat avant tout lancement.</p>
+</div>
+<p>Limites : 1000 nœuds, 256 segments, et autant de câbles que la plage UDP le permet (22 768).</p>
+<p><code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">plan</span></code> valide le fichier et affiche le plan, sans rien lancer :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>$ go run ./cmd/lab plan test/e2e/topologies/evpn-2hv.yml
+lab evpn-2hv: nodes 4, segments 1, cables 3
+
+nodes
+  name  role        image     cpus  memory     ssh
+  sw1   switch      debian12  2     1024 MiB   127.0.0.1:2200
+  rr1   rr          debian12  1     1024 MiB   127.0.0.1:2201
+  hv1   hypervisor  debian12  4     16384 MiB  127.0.0.1:2202
+  hv2   hypervisor  debian12  4     16384 MiB  127.0.0.1:2203
+
+roles
+  name  loopback             secondary                frr       release     agent
+  sw1   -                    underlay 169.254.0.1/28  sw1.conf  -           -
+  rr1   lo1 10.255.255.1/32  underlay 169.254.0.3/28  rr1.conf  -           -
+  hv1   -                    -                        hv1.conf  0.2.0rc003  two.yml
+  hv2   -                    -                        hv2.conf  0.2.0rc003  -
+
+segment underlay: 192.168.14.0/24, mtu 9000, switch sw1, bridge br-underlay, gateway 192.168.14.1
+  node  interface  address           mac                udp         switch port  mac                udp
+  rr1   underlay   192.168.14.2/24   02:4c:00:01:00:00  20000  &lt;-&gt;  sw1 p0       02:4c:00:01:00:01  20001
+  hv1   underlay   192.168.14.11/24  02:4c:00:02:00:00  20002  &lt;-&gt;  sw1 p1       02:4c:00:02:00:01  20003
+  hv2   underlay   192.168.14.12/24  02:4c:00:03:00:00  20004  &lt;-&gt;  sw1 p2       02:4c:00:03:00:01  20005
+</pre></div>
+</div>
+<p>Un fichier invalide est refusé avec <strong>toutes</strong> ses erreurs à la fois, et un code de sortie 1. Les
+champs inconnus et les clés en double sont refusés aussi :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>$ lab plan cassee.yml
+lab: cassee.yml:
+segment underlay: rr1 is a rr, not a switch
+segment underlay: cidr 10.250.0.0/31 prefix length out of range [/8, /30]
+node sw1: switch carries no segment
+</pre></div>
+</div>
+<p>Les ASN, la loopback du route reflector, le lien <code class="docutils literal notranslate"><span class="pre">169.254.0.0/28</span></code> et le subnet des hyperviseurs
+de l’exemple sont <strong>ceux de la production</strong> (décision du 2026-10-04, #50) : les fichiers de
+<code class="docutils literal notranslate"><span class="pre">test/e2e/topologies/</span></code> restent ainsi au plus près de ce qui tourne réellement. Toutes les adresses y sont
+<strong>fixées</strong> par <code class="docutils literal notranslate"><span class="pre">addresses</span></code> — le route reflector en <code class="docutils literal notranslate"><span class="pre">.2</span></code>, les hyperviseurs à partir de <code class="docutils literal notranslate"><span class="pre">.11</span></code> —
+pour que le modèle se lise sans le plan et ne dépende pas de l’ordre de déclaration : le
+<code class="docutils literal notranslate"><span class="pre">frr.conf</span></code> d’un hyperviseur, écrit à la main, porte son adresse en <code class="docutils literal notranslate"><span class="pre">router-id</span></code>. Seul le switch
+n’en déclare pas : il porte toujours la passerelle, la première adresse du segment.</p>
+<section id="roles">
+<h3>Rôles<a class="headerlink" href="#roles" title="Lien vers cette rubrique">#</a></h3>
+<p>Les configurations FRR du lab vivent dans <code class="docutils literal notranslate"><span class="pre">test/e2e/topologies/frr/</span></code>, une par nœud, <strong>écrites à la main</strong> :
+ce sont les mêmes fichiers que la documentation de déploiement inclut, pour que le lab qualifie
+exactement ce qu’elle prescrit. Celle du route reflector :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>frr defaults traditional
+hostname rr1
+log syslog informational
+!
+ip prefix-list RR-LOOPBACK-OUT seq 10 permit 10.255.255.1/32
+!
+route-map NO-IN deny 999
+ description deny
+exit
+!
+router bgp 65000
+ no bgp default ipv4-unicast
+ bgp router-id 10.255.255.1
+ bgp cluster-id 10.255.255.1
+ neighbor CLUSTER peer-group
+ neighbor CLUSTER remote-as 65100
+ neighbor CLUSTER bfd
+ neighbor 169.254.0.1 peer-group CLUSTER
+ neighbor 169.254.0.1 description router-1
+ neighbor 169.254.0.2 peer-group CLUSTER
+ neighbor 169.254.0.2 description router-2
+ neighbor fabric peer-group
+ neighbor fabric remote-as 64600
+ neighbor fabric local-as 64600 no-prepend replace-as
+ neighbor fabric capability extended-nexthop
+ neighbor fabric update-source 10.255.255.1
+ bgp listen range 192.168.14.0/24 peer-group fabric
+ bgp listen limit 200
+ !
+ address-family ipv4 unicast
+  network 10.255.255.1/32
+  neighbor CLUSTER activate
+  neighbor CLUSTER prefix-list RR-LOOPBACK-OUT out
+  neighbor CLUSTER route-map NO-IN in
+ exit-address-family
+ !
+ address-family l2vpn evpn
+  neighbor fabric activate
+  neighbor fabric route-reflector-client
+ exit-address-family
+ !
+exit
+!
+</pre></div>
+</div>
+<p>Au premier démarrage, cloud-init installe FRR (<code class="docutils literal notranslate"><span class="pre">frr-stable</span></code> de <code class="docutils literal notranslate"><span class="pre">deb.frrouting.org</span></code>, sans les
+paquets recommandés), active <code class="docutils literal notranslate"><span class="pre">bgpd</span></code> — et <code class="docutils literal notranslate"><span class="pre">bfdd</span></code> sur le switch et le route reflector —, puis
+dépose le <code class="docutils literal notranslate"><span class="pre">frr.conf</span></code> du nœud et redémarre FRR. La mise à jour des index de paquets est réessayée
+pendant cinq minutes : un nœud peut démarrer avant que le switch, par lequel il sort, n’ait posé
+son NAT.</p>
+<p>La <strong>clé du dépôt FRR</strong> n’est pas téléchargée au démarrage : elle est enregistrée dans <code class="docutils literal notranslate"><span class="pre">lab</span></code>
+(<code class="docutils literal notranslate"><span class="pre">internal/lab/render/frrouting.gpg</span></code>) et déposée par cloud-init. Elle a été récupérée le
+2026-10-04 sur <code class="docutils literal notranslate"><span class="pre">deb.frrouting.org</span></code> ; les empreintes de ses clés primaires sont publiées sous la
+même valeur sur <code class="docutils literal notranslate"><span class="pre">keys.openpgp.org</span></code> et <code class="docutils literal notranslate"><span class="pre">keyserver.ubuntu.com</span></code> :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>3D99 68AC 9AE7 BE11 6928  8DDB 1FD5 8398 95F5 7FDA   David Lamparter
+4A56 C773 8BB3 F815 95A8  05D2 A832 7699 08F1 3ED1   FRRouting Debian Repository
+A90F C36D 9429 4097 98E9  C2D8 74DE ED43 AB19 4DBF   Jafar Al-Gharaibeh
+</pre></div>
+</div>
+<p>Une clé renouvelée par FRR fera échouer l’installation (signature inconnue) : remplacer le fichier
+après avoir vérifié les nouvelles empreintes.</p>
+<p><strong>Hyperviseurs.</strong> Ils se déploient comme en production, par <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> — celui <strong>du dépôt</strong>,
+embarqué dans <code class="docutils literal notranslate"><span class="pre">lab</span></code> avec <code class="docutils literal notranslate"><span class="pre">bootstrap_kvm.sh</span></code> (paquet <code class="docutils literal notranslate"><span class="pre">scripts</span></code>) et déposé dans
+<code class="docutils literal notranslate"><span class="pre">/opt/two/scripts/</span></code>, où <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> cherche d’abord <code class="docutils literal notranslate"><span class="pre">bootstrap_kvm.sh</span></code> :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>deploy.sh --noup_script -i -u &lt;segment&gt; -t &lt;release&gt;
+</pre></div>
+</div>
+<p><code class="docutils literal notranslate"><span class="pre">--noup_script</span></code> empêche l’auto-mise à jour de remplacer le script par celui de <code class="docutils literal notranslate"><span class="pre">main</span></code> : le lab
+teste les scripts de sa branche. L’uplink <code class="docutils literal notranslate"><span class="pre">-u</span></code> est l’interface qui porte la route par défaut —
+celle du premier segment de l’hyperviseur dans l’ordre de déclaration des segments — parce que
+<code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> y lit l’adresse et la passerelle qu’il déplace sur <code class="docutils literal notranslate"><span class="pre">br-000000</span></code>. <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code>
+télécharge la release sur <code class="docutils literal notranslate"><span class="pre">git.g3e.fr</span></code> sans réessayer : le lancement attend d’abord que le serveur
+réponde, à travers le switch. FRR est installé <strong>après</strong> : il démarre sur le réseau final.</p>
+<p><strong>Un seul script de provisionnement par nœud.</strong> cloud-init exécute <code class="docutils literal notranslate"><span class="pre">runcmd</span></code> comme un script
+<code class="docutils literal notranslate"><span class="pre">sh</span></code> sans <code class="docutils literal notranslate"><span class="pre">set</span> <span class="pre">-e</span></code> : seule la dernière commande compte, et un <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> en échec suivi d’un
+FRR installé avec succès passerait pour un démarrage réussi. Chaque nœud reçoit donc
+<code class="docutils literal notranslate"><span class="pre">/usr/local/sbin/lab-provision</span></code>, en <code class="docutils literal notranslate"><span class="pre">set</span> <span class="pre">-eu</span></code>, qui enchaîne ses étapes ; <code class="docutils literal notranslate"><span class="pre">runcmd</span></code> n’appelle
+que lui, et la première étape en échec met cloud-init en erreur.</p>
+<p><strong>Ce que vérifie</strong> <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">up</span></code>, une fois cloud-init terminé sans erreur : <code class="docutils literal notranslate"><span class="pre">agent.service</span></code> actif
+sur chaque hyperviseur, <code class="docutils literal notranslate"><span class="pre">frr</span></code> actif sur chaque nœud qui en a un. Ce contrôle couvre ce que
+cloud-init ne voit pas — si la migration réseau échoue, <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> arme un redémarrage de
+secours, et la VM redémarrée ne rejoue pas <code class="docutils literal notranslate"><span class="pre">runcmd</span></code>.</p>
+<div class="admonition warning">
+<p class="admonition-title">Avertissement</p>
+<p><strong>Un hyperviseur du lab ne survit pas à un redémarrage.</strong> En production, la racine est en
+tmpfs et <code class="docutils literal notranslate"><span class="pre">deploy.sh</span> <span class="pre">--bootstrap</span></code> est rejoué à chaque démarrage ; dans le lab, <code class="docutils literal notranslate"><span class="pre">-i</span></code> n’est
+exécuté qu’au premier, et la migration réseau, qui n’est pas persistée, est perdue. Recréer le
+lab : <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">down</span></code> puis <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">up</span></code>.</p>
+</div>
+<p>Vérifié le 2026-10-04 sur le serveur de lab, topologie <code class="docutils literal notranslate"><span class="pre">evpn-2hv</span></code>, release <code class="docutils literal notranslate"><span class="pre">0.2.0rc002</span></code> :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>$ scripts/lab-host.sh ssh './lab up -timeout 25m topology/evpn-2hv.yml'
+sw1: started
+rr1: started
+hv1: started
+hv2: started
+sw1: ready
+rr1: ready
+hv1: ready
+hv2: ready
+</pre></div>
+</div>
+<div class="pst-scrollable-table-container"><table class="table">
+<colgroup>
+<col style="width: 55.0%" />
+<col style="width: 45.0%" />
+</colgroup>
+<thead>
+<tr class="row-odd"><th class="head"><p>Vérification</p></th>
+<th class="head"><p>Résultat</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">up</span></code> complet : FRR, <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> et vérification des services de chaque rôle</p></td>
+<td><p>6 min 15</p></td>
+</tr>
+<tr class="row-odd"><td><p>session switch ↔ route reflector, IPv4 unicast, BFD</p></td>
+<td><p>Established, BFD up ; le switch reçoit la seule loopback du route reflector</p></td>
+</tr>
+<tr class="row-even"><td><p>sessions EVPN des deux hyperviseurs vers la loopback du route reflector</p></td>
+<td><p>Established, voisins dynamiques, stables</p></td>
+</tr>
+<tr class="row-odd"><td><p>réseau d’un hyperviseur après <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code></p></td>
+<td><p>adresse sur <code class="docutils literal notranslate"><span class="pre">br-000000</span></code>, MTU 9000, API de l’agent qui répond</p></td>
+</tr>
+<tr class="row-even"><td><p>VPC, subnet <code class="docutils literal notranslate"><span class="pre">vxlan</span></code> et VM Debian <code class="docutils literal notranslate"><span class="pre">genericcloud</span></code> créés par l’API de hv1</p></td>
+<td><p><code class="docutils literal notranslate"><span class="pre">login:</span></code> en 20 s, en KVM imbriqué</p></td>
+</tr>
+<tr class="row-odd"><td><p>DHCP et routes (option 121) servis par two à la VM</p></td>
+<td><p>conformes, route <code class="docutils literal notranslate"><span class="pre">/32</span></code> vers <code class="docutils literal notranslate"><span class="pre">169.254.169.254</span></code> comprise</p></td>
+</tr>
+<tr class="row-even"><td><p>métadonnées, image configurée selon <a class="reference internal" href="../deploiement/image-qcow2.html"><span class="doc">Construction de l’image qcow2</span></a></p></td>
+<td><p><code class="docutils literal notranslate"><span class="pre">DataSourceNoCloudNet</span></code>, nom d’hôte appliqué — avec la barre oblique finale de
+<code class="docutils literal notranslate"><span class="pre">seedfrom</span></code> (voir cette page)</p></td>
+</tr>
+<tr class="row-odd"><td><p>VM ↔ VM entre les deux hyperviseurs, même subnet <code class="docutils literal notranslate"><span class="pre">vxlan</span></code></p></td>
+<td><p><strong>échec</strong> : les VXLAN de two n’ont pas d’adresse VTEP locale, rien n’est annoncé en EVPN —
+<a class="reference external" href="https://git.g3e.fr/syonad/two/issues/51">#51</a> ; avec l’adresse posée, ping et MTU 1500
+passent</p></td>
+</tr>
+</tbody>
+</table>
+</div>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p><strong>Le switch du lab est un routeur Linux avec FRR, par choix.</strong> Il joue le rôle générique de
+routeur de cluster : passerelle des hyperviseurs, session eBGP avec BFD vers le route reflector,
+dont il n’accepte que la loopback (<code class="docutils literal notranslate"><span class="pre">test/e2e/topologies/frr/sw1.conf</span></code>). L’équipement réel dépend de qui
+déploie l’infrastructure (MikroTik aujourd’hui ; Cisco, Juniper, Arista… demain) : il n’a besoin
+que de BGP et d’EVPN, et sa configuration propre au constructeur n’a pas sa place dans le lab.</p>
+</div>
+</section>
+</section>
+<section id="rendu-des-vm">
+<h2>Rendu des VM<a class="headerlink" href="#rendu-des-vm" title="Lien vers cette rubrique">#</a></h2>
+<p><code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">render</span></code> produit, pour chaque nœud, ce qu’il faut pour démarrer sa VM — sans rien lancer :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>$ go run ./cmd/lab render -key ~/.config/two-lab/ssh/lab_ed25519.pub test/e2e/topologies/evpn-2hv.yml &lt;répertoire&gt;
+</pre></div>
+</div>
+<p><code class="docutils literal notranslate"><span class="pre">&lt;répertoire&gt;/&lt;nœud&gt;/</span></code> reçoit :</p>
+<dl class="simple">
+<dt><code class="docutils literal notranslate"><span class="pre">qemu.args</span></code></dt><dd><p>Les arguments de <code class="docutils literal notranslate"><span class="pre">qemu-system-x86_64</span></code>, <strong>un par ligne</strong> : rien à échapper, rien à
+interpréter par un shell.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">meta-data</span></code>, <code class="docutils literal notranslate"><span class="pre">user-data</span></code>, <code class="docutils literal notranslate"><span class="pre">network-config</span></code></dt><dd><p>Les trois fichiers NoCloud de cloud-init, à mettre dans une image de volume <code class="docutils literal notranslate"><span class="pre">cidata</span></code>.</p>
+</dd>
+</dl>
+<p>Les chemins de la VM (<code class="docutils literal notranslate"><span class="pre">disk.qcow2</span></code>, <code class="docutils literal notranslate"><span class="pre">seed.iso</span></code>, <code class="docutils literal notranslate"><span class="pre">console.log</span></code>, <code class="docutils literal notranslate"><span class="pre">qmp.sock</span></code>, <code class="docutils literal notranslate"><span class="pre">qemu.pid</span></code>)
+sont ceux du répertoire du nœud ; <code class="docutils literal notranslate"><span class="pre">-key</span></code> peut être répété, et accepte un fichier
+<code class="docutils literal notranslate"><span class="pre">authorized_keys</span></code> (lignes vides et commentaires ignorés). Les fichiers sont créés en <code class="docutils literal notranslate"><span class="pre">0600</span></code>.</p>
+<p>Ce que contiennent les arguments QEMU d’un hyperviseur — extrait réel, côté réseau :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>-netdev
+user,id=mgmt0,restrict=on,ipv6=off,hostfwd=tcp:127.0.0.1:2202-:22
+-device
+virtio-net-pci,netdev=mgmt0,mac=02:4d:00:02:00:00,romfile=
+-netdev
+dgram,id=underlay,local.type=inet,local.host=127.0.0.1,local.port=20002,remote.type=inet,remote.host=127.0.0.1,remote.port=20003
+-device
+virtio-net-pci,netdev=underlay,mac=02:4c:00:02:00:00,host_mtu=9000,romfile=
+</pre></div>
+</div>
+<p>Les choix qui s’y lisent :</p>
+<ul class="simple">
+<li><p><strong>machine</strong> <code class="docutils literal notranslate"><span class="pre">q35</span></code>, <code class="docutils literal notranslate"><span class="pre">-accel</span> <span class="pre">kvm</span> <span class="pre">-cpu</span> <span class="pre">host</span></code> — le KVM imbriqué des hyperviseurs du lab en
+dépend ; <code class="docutils literal notranslate"><span class="pre">-nodefaults</span></code> pour qu’aucun périphérique implicite ne s’ajoute ;</p></li>
+<li><p><strong>administration</strong> (<code class="docutils literal notranslate"><span class="pre">mgmt0</span></code>) : le NAT de QEMU, MAC <code class="docutils literal notranslate"><span class="pre">02:4d:&lt;nœud&gt;:&lt;nœud&gt;:00:00</span></code>, SSH redirigé
+sur la boucle locale de l’hôte. <code class="docutils literal notranslate"><span class="pre">restrict=on</span></code> pour tous les nœuds <strong>sauf le switch</strong> : un
+nœud isolé ne joint ni l’hôte ni l’extérieur par là, seule la redirection SSH passe.
+<code class="docutils literal notranslate"><span class="pre">ipv6=off</span></code> partout (voir plus bas) ;</p></li>
+<li><p><strong>câbles</strong> : <code class="docutils literal notranslate"><span class="pre">dgram</span></code> sur <code class="docutils literal notranslate"><span class="pre">127.0.0.1</span></code>, les deux extrémités d’un câble se répondent
+(port local de l’une = port distant de l’autre), <code class="docutils literal notranslate"><span class="pre">host_mtu</span></code> annonce le MTU du segment au
+guest ;</p></li>
+<li><p><code class="docutils literal notranslate"><span class="pre">romfile=</span></code> vide sur toutes les cartes : pas de ROM de démarrage réseau, donc pas de repli
+sur un démarrage PXE si le firmware ne trouve pas le disque. Pendant les essais de #50, une VM
+restée bloquée sans rien écrire sur sa console, CPU au repos, avait toutes les apparences de
+ce repli ; la cause n’a pas été isolée, l’option est une précaution.</p></li>
+</ul>
+<p>Ce que fait cloud-init :</p>
+<ul class="simple">
+<li><p><strong>toutes les VM</strong> : interfaces nommées d’après leur MAC (<code class="docutils literal notranslate"><span class="pre">mgmt0</span></code>, nom du segment, <code class="docutils literal notranslate"><span class="pre">p&lt;i&gt;</span></code>),
+<code class="docutils literal notranslate"><span class="pre">dhcp4:</span> <span class="pre">false</span></code> partout, <code class="docutils literal notranslate"><span class="pre">mgmt0</span></code> en <code class="docutils literal notranslate"><span class="pre">10.0.2.15/24</span></code> <strong>sans passerelle</strong> ; connexion SSH par
+clé seulement, utilisateur <code class="docutils literal notranslate"><span class="pre">debian</span></code>, <code class="docutils literal notranslate"><span class="pre">root</span></code> désactivé, mot de passe refusé ;</p></li>
+<li><p><strong>un nœud</strong> : adresse sur chaque segment, MTU du segment, route par défaut et DNS
+(<code class="docutils literal notranslate"><span class="pre">1.1.1.1</span></code>, <code class="docutils literal notranslate"><span class="pre">8.8.8.8</span></code>) sur son <strong>premier</strong> segment — la sortie Internet passe par le
+switch ;</p></li>
+<li><p><strong>le switch</strong> : route par défaut par <code class="docutils literal notranslate"><span class="pre">mgmt0</span></code> ; un service <code class="docutils literal notranslate"><span class="pre">lab-switch</span></code> crée un bridge
+<code class="docutils literal notranslate"><span class="pre">br-&lt;segment&gt;</span></code> par segment (STP désactivé, MTU du segment), y branche ses ports, porte la
+passerelle, active le routage et masque (NAT nftables) les segments vers <code class="docutils literal notranslate"><span class="pre">mgmt0</span></code>. Le
+service est rejoué à chaque démarrage.</p></li>
+</ul>
+<section id="verifie-sur-de-vraies-vm">
+<h3>Vérifié sur de vraies VM<a class="headerlink" href="#verifie-sur-de-vraies-vm" title="Lien vers cette rubrique">#</a></h3>
+<p>Le switch et le route reflector n’ont pas besoin de KVM imbriqué : <code class="docutils literal notranslate"><span class="pre">sw1</span></code> et <code class="docutils literal notranslate"><span class="pre">rr1</span></code> de
+l’exemple ont été démarrés <strong>sur un Mac</strong>, en émulation (TCG), avec Debian 12 <code class="docutils literal notranslate"><span class="pre">generic</span></code> et
+les fichiers produits par <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">render</span></code>.</p>
+<div class="pst-scrollable-table-container"><table class="table">
+<colgroup>
+<col style="width: 60.0%" />
+<col style="width: 40.0%" />
+</colgroup>
+<thead>
+<tr class="row-odd"><th class="head"><p>Vérification</p></th>
+<th class="head"><p>Résultat</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><p>interfaces nommées et adressées, bridge <code class="docutils literal notranslate"><span class="pre">br-underlay</span></code> en <code class="docutils literal notranslate"><span class="pre">10.250.0.1/24</span></code></p></td>
+<td><p>conforme</p></td>
+</tr>
+<tr class="row-odd"><td><p>service <code class="docutils literal notranslate"><span class="pre">lab-switch</span></code> actif, y compris après redémarrage</p></td>
+<td><p>conforme</p></td>
+</tr>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">ping</span> <span class="pre">-M</span> <span class="pre">do</span> <span class="pre">-s</span> <span class="pre">8972</span></code> de <code class="docutils literal notranslate"><span class="pre">rr1</span></code> vers le switch (MTU 9000, sans fragmentation)</p></td>
+<td><p>passe</p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">ping</span> <span class="pre">-M</span> <span class="pre">do</span> <span class="pre">-s</span> <span class="pre">8973</span></code> (MTU 9001)</p></td>
+<td><p>refusé : <code class="docutils literal notranslate"><span class="pre">message</span> <span class="pre">too</span> <span class="pre">long,</span> <span class="pre">mtu=9000</span></code></p></td>
+</tr>
+<tr class="row-even"><td><p>Internet depuis <code class="docutils literal notranslate"><span class="pre">rr1</span></code> en IPv4</p></td>
+<td><p>passe, par <code class="docutils literal notranslate"><span class="pre">10.250.0.1</span></code></p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">rr1</span></code> vers un service TCP de l’hôte par <code class="docutils literal notranslate"><span class="pre">mgmt0</span></code> — le switch, témoin, y parvient</p></td>
+<td><p>bloqué</p></td>
+</tr>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">rr1</span></code> vers Internet par <code class="docutils literal notranslate"><span class="pre">mgmt0</span></code></p></td>
+<td><p>bloqué</p></td>
+</tr>
+</tbody>
+</table>
+</div>
+<p>Un défaut trouvé par cet essai, et corrigé : sans <code class="docutils literal notranslate"><span class="pre">ipv6=off</span></code>, le NAT de QEMU annonce un
+préfixe IPv6 et <code class="docutils literal notranslate"><span class="pre">mgmt0</span></code> reçoit une <strong>route IPv6 par défaut</strong> — vers une impasse, puisque
+<code class="docutils literal notranslate"><span class="pre">restrict=on</span></code> bloque tout. Pas de fuite, mais chaque programme qui tente l’IPv6 d’abord (le DNS
+renvoie d’abord des adresses IPv6) attend un délai avant de se rabattre sur l’IPv4.</p>
+<div class="admonition note">
+<p class="admonition-title">Note</p>
+<p>Un <code class="docutils literal notranslate"><span class="pre">ping</span></code> vers <code class="docutils literal notranslate"><span class="pre">10.0.2.2</span></code> n’est pas un test d’isolation : c’est la passerelle virtuelle de
+QEMU qui répond elle-même, <code class="docutils literal notranslate"><span class="pre">restrict=on</span></code> ou non. Seule une connexion vers un vrai service de
+l’hôte, avec un témoin qui y parvient, le prouve.</p>
+</div>
+<p>Reste à vérifier sur le serveur de lab : les hyperviseurs, qui exigent KVM imbriqué.</p>
+</section>
+</section>
+<section id="lancement-des-vm">
+<h2>Lancement des VM<a class="headerlink" href="#lancement-des-vm" title="Lien vers cette rubrique">#</a></h2>
+<p><code class="docutils literal notranslate"><span class="pre">lab</span></code> s’exécute <strong>sur le serveur de lab</strong>. Il garde l’état du lab dans un répertoire
+(<code class="docutils literal notranslate"><span class="pre">-run</span></code>, par défaut <code class="docutils literal notranslate"><span class="pre">~/lab-run</span></code>) : <code class="docutils literal notranslate"><span class="pre">status</span></code>, <code class="docutils literal notranslate"><span class="pre">down</span></code> et <code class="docutils literal notranslate"><span class="pre">ssh</span></code> n’ont donc pas besoin de la
+topologie.</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>lab up [-run dir] [-cache dir] [-timeout 20m] &lt;topologie.yml&gt;
+lab status [-run dir]
+lab down [-run dir]
+lab ssh [-run dir] &lt;nœud&gt; [commande…]
+</pre></div>
+</div>
+<dl>
+<dt><code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">up</span></code></dt><dd><ol class="arabic simple">
+<li><p>refuse de continuer si un lab tourne déjà dans le répertoire ;</p></li>
+<li><p>télécharge chaque image dans le cache (<code class="docutils literal notranslate"><span class="pre">-cache</span></code>, par défaut <code class="docutils literal notranslate"><span class="pre">~/.cache/two-lab</span></code>) et la
+vérifie contre <code class="docutils literal notranslate"><span class="pre">SHA512SUMS</span></code> ; une image déjà présente et toujours conforme n’est pas
+retéléchargée, la liste des sommes est relue à chaque fois ;</p></li>
+<li><p>génère une paire de clés SSH dans le répertoire du lab, si elle n’existe pas encore ;</p></li>
+<li><p>pour chaque nœud : fichiers de <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">render</span></code>, disque <strong>neuf</strong> en overlay qcow2 sur
+l’image (<code class="docutils literal notranslate"><span class="pre">qemu-img</span> <span class="pre">create</span> <span class="pre">-b</span></code>, 20 Gio annoncés), image <code class="docutils literal notranslate"><span class="pre">cidata</span></code> (<code class="docutils literal notranslate"><span class="pre">genisoimage</span></code>) ;</p></li>
+<li><p>démarre les QEMU, <strong>switchs d’abord</strong>, détachés (<code class="docutils literal notranslate"><span class="pre">-daemonize</span></code>) : ils survivent à la
+session SSH qui les a lancés ;</p></li>
+<li><p>attend sur chaque nœud la fin de cloud-init (<code class="docutils literal notranslate"><span class="pre">cloud-init</span> <span class="pre">status</span> <span class="pre">--wait</span></code> par SSH),
+jusqu’au délai <code class="docutils literal notranslate"><span class="pre">-timeout</span></code>.</p></li>
+</ol>
+<p>La topologie est copiée dans <code class="docutils literal notranslate"><span class="pre">&lt;run&gt;/topology.yml</span></code>. Un échec laisse les nœuds démarrés en
+place : <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">status</span></code>, puis <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">down</span></code>.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">status</span></code></dt><dd><p>Pour chaque nœud : rôle, état du processus QEMU, PID, port SSH sur la boucle locale.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">down</span></code></dt><dd><p>Arrête chaque QEMU par <code class="docutils literal notranslate"><span class="pre">SIGTERM</span></code>, puis <code class="docutils literal notranslate"><span class="pre">SIGKILL</span></code> au bout de 30 s. Les disques sont
+conservés jusqu’au prochain <code class="docutils literal notranslate"><span class="pre">up</span></code>, qui les recrée.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">ssh</span></code></dt><dd><p>Ouvre un shell sur un nœud, ou y exécute une commande, avec la clé générée par <code class="docutils literal notranslate"><span class="pre">up</span></code>. <code class="docutils literal notranslate"><span class="pre">lab</span></code>
+cède la place à <code class="docutils literal notranslate"><span class="pre">ssh</span></code>, dont le code de retour est donc celui de la commande. Un terminal
+n’est demandé (<code class="docutils literal notranslate"><span class="pre">-t</span></code>) que si l’entrée de <code class="docutils literal notranslate"><span class="pre">lab</span></code> en est un : depuis un script, ni
+pseudo-terminal ni <code class="docutils literal notranslate"><span class="pre">\r\n</span></code> dans la sortie.</p>
+<p>Comme <code class="docutils literal notranslate"><span class="pre">ssh</span></code>, <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">ssh</span></code> recolle ses arguments par des espaces et les confie à un shell
+distant — et depuis le Mac, il y en a <strong>deux</strong> : celui du serveur, puis celui de la VM.
+Une commande qui contient elle-même des guillemets se passe en une seule chaîne :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>$ echo | scripts/lab-host.sh ssh './lab ssh hv1 sh -c "exit 42"'; echo "rc 42=$?"
+rc 42=0
+$ echo | scripts/lab-host.sh ssh "./lab ssh hv1 'sh -c \"exit 42\"'"; echo "rc 42=$?"
+rc 42=42
+</pre></div>
+</div>
+<p>Dans le premier cas, la VM reçoit <code class="docutils literal notranslate"><span class="pre">sh</span> <span class="pre">-c</span> <span class="pre">exit</span> <span class="pre">42</span></code> : <code class="docutils literal notranslate"><span class="pre">exit</span></code> sans argument, <code class="docutils literal notranslate"><span class="pre">42</span></code> en
+<code class="docutils literal notranslate"><span class="pre">$0</span></code>. Pour plus d’une commande, passer un script sur l’entrée standard :
+<code class="docutils literal notranslate"><span class="pre">scripts/lab-host.sh</span> <span class="pre">ssh</span> <span class="pre">&quot;./lab</span> <span class="pre">ssh</span> <span class="pre">hv1</span> <span class="pre">'sudo</span> <span class="pre">bash</span> <span class="pre">-s'&quot;</span> <span class="pre">&lt;</span> <span class="pre">script.sh</span></code>.</p>
+</dd>
+</dl>
+<p>Un processus n’est tenu pour celui d’un nœud que si son PID, lu dans <code class="docutils literal notranslate"><span class="pre">qemu.pid</span></code>, désigne un
+processus vivant dont la ligne de commande (<code class="docutils literal notranslate"><span class="pre">/proc/&lt;pid&gt;/cmdline</span></code>) contient <code class="docutils literal notranslate"><span class="pre">-name</span> <span class="pre">&lt;nœud&gt;</span></code>.
+Un PID réutilisé par un autre programme n’est donc jamais signalé.</p>
+<div class="admonition warning">
+<p class="admonition-title">Avertissement</p>
+<p>Le cache range une image sous son nom de fichier, et l’URL de Debian est <code class="docutils literal notranslate"><span class="pre">latest</span></code> : une
+nouvelle publication remplace le fichier, et les overlays existants pointeraient sur une
+base différente. <code class="docutils literal notranslate"><span class="pre">up</span></code> recrée toujours les disques, ce qui suffit avec un lab par serveur ;
+<strong>ne pas relancer un QEMU à la main</strong> à partir d’un <code class="docutils literal notranslate"><span class="pre">qemu.args</span></code> après un <code class="docutils literal notranslate"><span class="pre">up</span></code> ultérieur.</p>
+</div>
+<p>Une campagne réelle, de la création du serveur à la première commande sur une VM — sorties du
+2026-10-04 :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>$ scripts/lab-host.sh up
+== création de two-lab (EM-B212X-SSD, 0.321 EUR/h HT)
+…
+== préparation du serveur : qemu, genisoimage, KVM imbriqué
+…
+qemu QEMU emulator version 7.2.22 (Debian 1:7.2+dfsg-7+deb12u18+b3), nested=Y
+== prêt : root@&lt;adresse&gt;
+$ scripts/lab-host.sh push test/e2e/topologies/evpn-2hv.yml
+== compilation de lab (linux/amd64)
+== déposés sur le serveur : ~/lab, ~/evpn-2hv.yml — ensuite : lab-host.sh ssh './lab up evpn-2hv.yml'
+$ scripts/lab-host.sh ssh './lab up evpn-2hv.yml'
+sw1: started
+rr1: started
+hv1: started
+hv2: started
+sw1: ready
+rr1: ready
+hv1: ready
+hv2: ready
+$ scripts/lab-host.sh ssh './lab status'
+node  role        state    pid   ssh
+sw1   switch      running  5158  127.0.0.1:2200
+rr1   rr          running  5171  127.0.0.1:2201
+hv1   hypervisor  running  5182  127.0.0.1:2202
+hv2   hypervisor  running  5196  127.0.0.1:2203
+</pre></div>
+</div>
+<p><code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">up</span></code> a pris <strong>49 secondes</strong>, téléchargement et vérification de l’image (427 Mio) compris ;
+l’essentiel du temps d’une campagne est la livraison du serveur (environ 25 minutes avec
+<code class="docutils literal notranslate"><span class="pre">prepare</span></code>).</p>
+<section id="verifie-sur-le-serveur-de-lab">
+<h3>Vérifié sur le serveur de lab<a class="headerlink" href="#verifie-sur-le-serveur-de-lab" title="Lien vers cette rubrique">#</a></h3>
+<p>Le 2026-10-04, sur un Xeon E5-2640 v3, Debian 12 et QEMU 7.2 sur le serveur, topologie
+<code class="docutils literal notranslate"><span class="pre">evpn-2hv</span></code> :</p>
+<div class="pst-scrollable-table-container"><table class="table">
+<colgroup>
+<col style="width: 60.0%" />
+<col style="width: 40.0%" />
+</colgroup>
+<thead>
+<tr class="row-odd"><th class="head"><p>Vérification</p></th>
+<th class="head"><p>Résultat</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">ping</span> <span class="pre">-M</span> <span class="pre">do</span> <span class="pre">-s</span> <span class="pre">8972</span></code> de hv1 à hv2 à travers le switch</p></td>
+<td><p>passe</p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">ping</span> <span class="pre">-M</span> <span class="pre">do</span> <span class="pre">-s</span> <span class="pre">8973</span></code></p></td>
+<td><p>refusé : <code class="docutils literal notranslate"><span class="pre">message</span> <span class="pre">too</span> <span class="pre">long,</span> <span class="pre">mtu=9000</span></code></p></td>
+</tr>
+<tr class="row-even"><td><p>sortie Internet de hv1</p></td>
+<td><p>par <code class="docutils literal notranslate"><span class="pre">10.250.0.1</span></code> (le switch), HTTPS 200 ; aucune route IPv6 globale</p></td>
+</tr>
+<tr class="row-odd"><td><p>hv1 vers un service TCP du serveur par <code class="docutils literal notranslate"><span class="pre">mgmt0</span></code> — sw1, témoin, y parvient (200)</p></td>
+<td><p>refusé</p></td>
+</tr>
+<tr class="row-even"><td><p>hv1 vers Internet par <code class="docutils literal notranslate"><span class="pre">mgmt0</span></code>, route forcée via <code class="docutils literal notranslate"><span class="pre">10.0.2.2</span></code> — sw1 y parvient</p></td>
+<td><p>refusé</p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">/dev/kvm</span></code> et <code class="docutils literal notranslate"><span class="pre">nested</span></code> dans hv1</p></td>
+<td><p>présent, <code class="docutils literal notranslate"><span class="pre">Y</span></code></p></td>
+</tr>
+<tr class="row-even"><td><p>racine de hv1 (overlay de 20 Gio)</p></td>
+<td><p>20 Go : <code class="docutils literal notranslate"><span class="pre">growpart</span></code> agrandit la partition au premier démarrage</p></td>
+</tr>
+<tr class="row-odd"><td><p>code de retour à travers <code class="docutils literal notranslate"><span class="pre">lab-host.sh</span> <span class="pre">ssh</span></code> et <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">ssh</span></code>, sans terminal</p></td>
+<td><p>propagé jusqu’au Mac</p></td>
+</tr>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">scripts/lab-host.sh</span> <span class="pre">ssh</span> <span class="pre">'./lab</span> <span class="pre">ssh</span> <span class="pre">hv1'</span></code> depuis un terminal</p></td>
+<td><p>shell interactif</p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">down</span></code> puis <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">up</span></code> d’une autre topologie</p></td>
+<td><p>conforme</p></td>
+</tr>
+</tbody>
+</table>
+</div>
+</section>
+</section>
+<section id="scenarios">
+<h2>Scénarios<a class="headerlink" href="#scenarios" title="Lien vers cette rubrique">#</a></h2>
+<p>Les scénarios se lancent <strong>depuis le Mac</strong>, sur un lab démarré (<code class="docutils literal notranslate"><span class="pre">up</span></code>, <code class="docutils literal notranslate"><span class="pre">push</span></code>, <code class="docutils literal notranslate"><span class="pre">./lab</span> <span class="pre">up</span></code>) :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>test/e2e/run.sh s1          # un scénario
+test/e2e/run.sh s1 s3       # plusieurs
+test/e2e/run.sh all         # tous, dans l'ordre
+</pre></div>
+</div>
+<p>Chacun affiche une ligne <code class="docutils literal notranslate"><span class="pre">RÉUSSI</span></code> ou <code class="docutils literal notranslate"><span class="pre">ÉCHOUÉ</span></code> par vérification — un échec porte la dernière
+ligne de la commande en cause —, des lignes <code class="docutils literal notranslate"><span class="pre">INFO</span></code> pour les mesures, puis son bilan. Le code de
+sortie vaut 1 si une vérification échoue <strong>ou si aucune n’a été faite</strong>.</p>
+<div class="pst-scrollable-table-container"><table class="table">
+<colgroup>
+<col style="width: 22.0%" />
+<col style="width: 58.0%" />
+<col style="width: 20.0%" />
+</colgroup>
+<thead>
+<tr class="row-odd"><th class="head"><p>Scénario</p></th>
+<th class="head"><p>Ce qui doit être vrai</p></th>
+<th class="head"><p>Hyperviseurs</p></th>
+</tr>
+</thead>
+<tbody>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">s1-dhcp-two</span></code></p></td>
+<td><p>backend DHCP <code class="docutils literal notranslate"><span class="pre">two</span></code>, une VPC et deux subnets : chaque VM reçoit l’adresse de <strong>son</strong>
+subnet, démarrée seule ou en même temps qu’une autre ; le bail est tenu par
+systemd-networkd ; route par défaut, route vers la VPC et <code class="docutils literal notranslate"><span class="pre">/32</span></code> vers les métadonnées
+via <code class="docutils literal notranslate"><span class="pre">interface_ip</span></code> ; l’état de chaque serveur DHCP ne connaît que les MAC de son subnet
+(#46)</p></td>
+<td><p>hv1</p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">s2-gateway</span></code></p></td>
+<td><p>route par défaut via <code class="docutils literal notranslate"><span class="pre">interface_ip</span></code>, ou via <code class="docutils literal notranslate"><span class="pre">gateway</span></code> avec <code class="docutils literal notranslate"><span class="pre">default_route</span></code> ; route
+vers la VPC toujours via <code class="docutils literal notranslate"><span class="pre">interface_ip</span></code> ; même résultat après recréation du subnet (#31)</p></td>
+<td><p>hv1</p></td>
+</tr>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">s3-isolation-local</span></code></p></td>
+<td><p>deux VPC sur le même hyperviseur ne se joignent pas, en ICMP comme en TCP ; chaque VM
+joint sa passerelle (témoin)</p></td>
+<td><p>hv1</p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">s4-evpn</span></code></p></td>
+<td><p>adresse VTEP locale sur les VXLAN (#51), VTEP distant appris par EVPN, ping VM ↔ VM
+entre hyperviseurs, trame de 1472 octets en <code class="docutils literal notranslate"><span class="pre">-M</span> <span class="pre">do</span></code>, 1473 refusés</p></td>
+<td><p>hv1, hv2</p></td>
+</tr>
+<tr class="row-even"><td><p><code class="docutils literal notranslate"><span class="pre">s5-isolation-evpn</span></code></p></td>
+<td><p>deux VPC de même plage, VNI différentes, sur deux hyperviseurs : la VM joint celle de sa
+VPC sur l’autre hyperviseur (témoin) et pas celle de l’autre VPC — aucune résolution ARP</p></td>
+<td><p>hv1, hv2</p></td>
+</tr>
+<tr class="row-odd"><td><p><code class="docutils literal notranslate"><span class="pre">s6-rr-loss</span></code></p></td>
+<td><p>FRR arrêté sur le route reflector, ping continu entre les VM de <code class="docutils literal notranslate"><span class="pre">s4</span></code> : la session tombe,
+le trafic restant est <strong>mesuré</strong> (<code class="docutils literal notranslate"><span class="pre">INFO</span></code>) à 30 et 90 s ; au retour du route reflector, le
+VTEP distant est réappris et le trafic repasse — délai mesuré</p></td>
+<td><p>hv1, hv2, rr1</p></td>
+</tr>
+</tbody>
+</table>
+</div>
+<p><code class="docutils literal notranslate"><span class="pre">s6</span></code> réutilise les VM de <code class="docutils literal notranslate"><span class="pre">s4</span></code> : le lancer après.</p>
+<p><strong>Comment c’est fait.</strong> <code class="docutils literal notranslate"><span class="pre">test/e2e/run.sh</span></code> exécute chaque scénario sur le Mac ; un
+scénario envoie des blocs de shell aux nœuds par <code class="docutils literal notranslate"><span class="pre">on</span> <span class="pre">&lt;nœud&gt;</span> <span class="pre">[VAR=valeur…]</span> <span class="pre">&lt;&lt;'NODE'</span></code>, précédés de
+<code class="docutils literal notranslate"><span class="pre">test/e2e/lib/node.sh</span></code> — appels à l’API de l’agent, attente des états, image Debian compatible two
+(préparée une fois par hyperviseur, <code class="docutils literal notranslate"><span class="pre">seedfrom</span></code> avec barre oblique finale), clé SSH des VM,
+<code class="docutils literal notranslate"><span class="pre">check</span></code> et <code class="docutils literal notranslate"><span class="pre">vm_fails</span></code>. Une vérification négative (« ne joint pas ») passe par <code class="docutils literal notranslate"><span class="pre">vm_fails</span></code> :
+elle n’est réussie que si le SSH vers la VM a fonctionné <strong>et</strong> que la commande y a échoué — un
+SSH en panne ne passe jamais pour une isolation.</p>
+<p>Résultats du 2026-10-04 sur le serveur de lab, release <code class="docutils literal notranslate"><span class="pre">0.2.0rc003</span></code>, hv1 sur le DHCP intégré et
+hv2 sur dnsmasq — toute la série en 8 minutes :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>$ test/e2e/run.sh all | grep -E '^(=== s[0-9].* : |INFO)'
+INFO: MAC de sn-s1a : 00:22:33:00:00:0a 00:22:33:00:00:0b ; de sn-s1b : 00:22:33:00:00:0a 00:22:33:00:00:0b
+=== s1-dhcp-two : 37 réussi(s), 0 échoué(s)
+=== s2-gateway : 22 réussi(s), 0 échoué(s)
+=== s3-isolation-local : 12 réussi(s), 0 échoué(s)
+=== s4-evpn : 14 réussi(s), 0 échoué(s)
+=== s5-isolation-evpn : 13 réussi(s), 0 échoué(s)
+INFO: 30 s après l'arrêt du route reflector : 0 réponses dans les 10 dernières secondes (50 si le trafic passe intégralement)
+INFO: VTEP distant encore connu : 0 ; entrée d'inondation : 0
+INFO: 90 s après l'arrêt : 0 réponses dans les 10 dernières secondes
+INFO: retour du VTEP distant et du trafic 31 s après le redémarrage de FRR
+=== s6-rr-loss : 8 réussi(s), 0 échoué(s)
+</pre></div>
+</div>
+<p>Dans ce run, le contrôle « uniquement les MAC de son subnet » de <code class="docutils literal notranslate"><span class="pre">s1</span></code> ne prouvait rien : two
+dérive la MAC du rang de l’IP, et les VM <code class="docutils literal notranslate"><span class="pre">.10</span></code>/<code class="docutils literal notranslate"><span class="pre">.11</span></code> des deux subnets avaient les mêmes MAC.
+Vérifié à la main sur le lab, chaque serveur DHCP ne connaissait que les couples MAC/IP de son
+subnet ; le scénario compare désormais ces couples.</p>
+<p>Les VM sont accessibles depuis le netns de leur VPC, sur l’hyperviseur, avec l’utilisateur
+<code class="docutils literal notranslate"><span class="pre">syonad</span></code> créé par les métadonnées de two :</p>
+<div class="highlight-text notranslate"><div class="highlight"><pre><span></span>scripts/lab-host.sh ssh "./lab ssh hv1 'sudo ip netns exec vp-s4 ssh -i /root/.ssh/lab-vm syonad@10.240.1.10'"
+</pre></div>
+</div>
+<section id="ecrire-un-scenario">
+<h3>Écrire un scénario<a class="headerlink" href="#ecrire-un-scenario" title="Lien vers cette rubrique">#</a></h3>
+<p>Le lab sert à qualifier des comportements qui ne se voient qu’à plusieurs hyperviseurs — la
+campagne L3VNI de <a class="reference external" href="https://git.g3e.fr/syonad/two/issues/41">#41</a> en est le prochain exemple. Un
+scénario est un fichier <code class="docutils literal notranslate"><span class="pre">test/e2e/scenarios/&lt;n&gt;-&lt;nom&gt;.sh</span></code>, exécuté par <code class="docutils literal notranslate"><span class="pre">scenario.sh</span></code> sur le
+Mac ; il envoie des blocs aux nœuds :</p>
+<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span>on<span class="w"> </span>hv1<span class="w"> </span><span class="s">&lt;&lt;'NODE'</span>
+<span class="s">two_image || { echo "ÉCHOUÉ: image compatible two"; exit 0; }</span>
+<span class="s">KEY=$(vm_key)</span>
+<span class="s">check "VPC vp-x" vpc_create vp-x 10.250.0.0/16</span>
+<span class="s">check "subnet sn-x" subnet_create sn-x vp-x 2601 10.250.1.1 10.250.1.0/24</span>
+<span class="s">check "VM x1" vm_create x1 sn-x 10.250.1.10 "${KEY}"</span>
+<span class="s">check "x1 joignable" vm_wait vp-x 10.250.1.10</span>
+<span class="s">check "x1 joint sa passerelle" vm_ssh vp-x 10.250.1.10 'ping -c 2 -W 2 10.250.1.1'</span>
+<span class="s">check "x1 ne joint pas 10.251.1.10" vm_fails vp-x 10.250.1.10 'ping -c 2 -W 2 10.251.1.10'</span>
+<span class="s">info "mesure : $(vtysh -c 'show evpn vni 2601' | grep -c 'flood')"</span>
+<span class="s">NODE</span>
+</pre></div>
+</div>
+<p>Les règles qui ont fait leurs preuves en E5 :</p>
+<ul class="simple">
+<li><p><strong>une vérification par ligne</strong>, avec <code class="docutils literal notranslate"><span class="pre">check</span></code> — jamais un <code class="docutils literal notranslate"><span class="pre">echo</span> <span class="pre">RÉUSSI</span></code> écrit à la main ;</p></li>
+<li><p><strong>toute vérification négative a son témoin</strong> : avant « ne joint pas », une ligne qui prouve que
+la cible est vivante et que le chemin du test fonctionne ;</p></li>
+<li><p><strong>``vm_fails`` pour le négatif</strong>, jamais <code class="docutils literal notranslate"><span class="pre">!</span></code> devant un <code class="docutils literal notranslate"><span class="pre">vm_ssh</span></code> : un SSH en panne doit
+échouer, pas passer pour une isolation ;</p></li>
+<li><p><strong>une donnée qui distingue réellement les cas</strong> : two dérivant la MAC du rang de l’IP, deux
+subnets ont les mêmes MAC — comparer des couples MAC/IP, pas des MAC ;</p></li>
+<li><p><strong>les mesures en ``INFO``</strong>, les attentes en <code class="docutils literal notranslate"><span class="pre">check</span></code> : un temps de reconvergence se mesure,
+il ne se décrète pas ;</p></li>
+<li><p>chaque scénario crée ses propres VPC, plages et VNI, distinctes de celles des autres, pour que
+<code class="docutils literal notranslate"><span class="pre">all</span></code> les enchaîne sur le même lab ; un scénario qui dépend d’un autre le vérifie en tête
+(<code class="docutils literal notranslate"><span class="pre">check</span> <span class="pre">&quot;prérequis</span> <span class="pre">:</span> <span class="pre">…&quot;</span></code>) ;</p></li>
+<li><p>variables vers un nœud : <code class="docutils literal notranslate"><span class="pre">on</span> <span class="pre">hv1</span> <span class="pre">NOM=valeur</span> <span class="pre">&lt;&lt;'NODE'</span></code> (valeurs échappées par
+<code class="docutils literal notranslate"><span class="pre">scenario.sh</span></code>) ;</p></li>
+<li><p><code class="docutils literal notranslate"><span class="pre">bash</span> <span class="pre">test/e2e/run_test.sh</span></code> vérifie la syntaxe de chaque bloc réellement envoyé — à
+lancer avant toute session.</p></li>
+</ul>
+</section>
+</section>
+<section id="facturation">
+<h2>Facturation<a class="headerlink" href="#facturation" title="Lien vers cette rubrique">#</a></h2>
+<div class="admonition warning">
+<p class="admonition-title">Avertissement</p>
+<p>Un serveur Elastic Metal est facturé <strong>de sa création à sa suppression, éteint compris</strong>.
+Éteindre ne suffit pas : il faut supprimer. La granularité n’est pas documentée par Scaleway —
+compter chaque heure entamée comme une heure pleine.</p>
+</div>
+<p>Ce que le script garantit :</p>
+<ul class="simple">
+<li><p>il ne commande <strong>jamais</strong> d’offre mensuelle : il exige une seule offre au nom demandé, en
+facturation horaire, en stock et sans frais de mise en service, sinon il refuse avant toute
+création. La CLI <code class="docutils literal notranslate"><span class="pre">scw</span></code> n’est pas utilisée pour cette raison : son <code class="docutils literal notranslate"><span class="pre">server</span> <span class="pre">create</span> <span class="pre">type=…</span></code>
+choisit l’offre par son seul nom et peut tomber sur la mensuelle, qui engage un mois ;</p></li>
+<li><p>il refuse de créer un second serveur si un serveur de lab existe déjà ;</p></li>
+<li><p><code class="docutils literal notranslate"><span class="pre">down</span></code> agit sur <strong>tous</strong> les serveurs portant le tag <code class="docutils literal notranslate"><span class="pre">two-lab</span></code> dans le projet, et
+<code class="docutils literal notranslate"><span class="pre">session</span></code> y ajoute l’identifiant reçu à la création : un serveur créé juste avant une
+interruption est rattrapé ;</p></li>
+<li><p>une suppression refusée pendant la livraison ou l’installation est réessayée tant qu’elle dure,
+dans la limite du délai d’installation augmenté du délai de suppression ;</p></li>
+<li><p>le serveur n’est déclaré supprimé qu’au 404 de l’API, jamais sur une erreur passagère ;</p></li>
+<li><p>un échec de suppression se termine par <code class="docutils literal notranslate"><span class="pre">SERVEUR(S)</span> <span class="pre">DE</span> <span class="pre">LAB</span> <span class="pre">TOUJOURS</span> <span class="pre">FACTURÉ(S)</span></code> et un code
+d’erreur.</p></li>
+</ul>
+<p>Ce qu’il ne peut pas garantir : un <code class="docutils literal notranslate"><span class="pre">SIGKILL</span></code>, une coupure de courant ou une mise en veille du
+poste qui lance la session. En cas de doute, toujours :</p>
+<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span>scripts/lab-host.sh<span class="w"> </span>status
+scripts/lab-host.sh<span class="w"> </span>down
+</pre></div>
+</div>
+</section>
+<section id="diagnostic">
+<h2>Diagnostic<a class="headerlink" href="#diagnostic" title="Lien vers cette rubrique">#</a></h2>
+<dl class="simple">
+<dt><code class="docutils literal notranslate"><span class="pre">aucune</span> <span class="pre">clé</span> <span class="pre">SSH</span> <span class="pre">active</span> <span class="pre">dans</span> <span class="pre">le</span> <span class="pre">projet</span></code></dt><dd><p>Aucune clé SSH n’est enregistrée dans le projet de lab. En ajouter une dans la console (projet
+→ Clés SSH).</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">offre</span> <span class="pre">horaire</span> <span class="pre">EM-B212X-SSD</span> <span class="pre">:</span> <span class="pre">0</span> <span class="pre">correspondance(s)</span></code></dt><dd><p>L’offre n’existe pas dans la zone en facturation horaire. Vérifier <code class="docutils literal notranslate"><span class="pre">SCW_DEFAULT_ZONE</span></code>.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">création</span> <span class="pre">incertaine</span></code></dt><dd><p>La création a échoué ou n’a pas rendu d’identifiant. Le serveur a pu être créé malgré tout —
+cas typique : le quota (identité non validée), ou une réponse perdue. Le script indique s’il
+voit un serveur de lab ; dans tous les cas, lancer <code class="docutils literal notranslate"><span class="pre">status</span></code> puis <code class="docutils literal notranslate"><span class="pre">down</span></code>.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">SSH</span> <span class="pre">injoignable</span></code></dt><dd><p>L’installation est terminée mais SSH ne répond pas après 10 minutes. Avec une clé matérielle
+(Yubikey), chaque connexion demande un PIN ou un toucher : utiliser la clé dédiée du lab. Le
+serveur est toujours facturé : <code class="docutils literal notranslate"><span class="pre">down</span></code>.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">SERVEUR(S)</span> <span class="pre">DE</span> <span class="pre">LAB</span> <span class="pre">TOUJOURS</span> <span class="pre">FACTURÉ(S)</span></code></dt><dd><p>La suppression n’a pas abouti dans les délais. Relancer <code class="docutils literal notranslate"><span class="pre">down</span></code> ; si l’erreur persiste,
+supprimer depuis la console Scaleway.</p>
+</dd>
+<dt><code class="docutils literal notranslate"><span class="pre">HTTP</span> <span class="pre">403</span> <span class="pre">insufficient</span> <span class="pre">permissions</span></code></dt><dd><p>La clé d’API est authentifiée mais n’a pas le droit demandé — en général la lecture des clés
+SSH du projet. Compléter la politique de la clé, limitée au projet.</p>
+</dd>
+</dl>
+</section>
+<section id="securite">
+<h2>Sécurité<a class="headerlink" href="#securite" title="Lien vers cette rubrique">#</a></h2>
+<ul class="simple">
+<li><p>La clé secrète n’apparaît ni dans les arguments des processus (elle est passée à <code class="docutils literal notranslate"><span class="pre">curl</span></code> par
+un descripteur de fichier), ni dans les journaux, ni dans l’environnement de <code class="docutils literal notranslate"><span class="pre">ssh</span></code>.</p></li>
+<li><p><strong>Ne jamais lancer le script sous</strong> <code class="docutils literal notranslate"><span class="pre">bash</span> <span class="pre">-x</span></code> : la trace afficherait la clé.</p></li>
+<li><p>Le serveur n’expose que SSH, par clé. Le lab n’a aucune donnée personnelle ni secret de
+production.</p></li>
+<li><p>Une clé secrète qui a circulé ailleurs que dans <code class="docutils literal notranslate"><span class="pre">scaleway.env</span></code> (conversation, terminal
+partagé, capture d’écran) se régénère.</p></li>
+<li><p><strong>Clé SSH des VM</strong> : générée par <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">up</span></code> sur le serveur, c’est la seule clé autorisée dans
+les VM. Elle ne quitte jamais le serveur, n’ouvre que les VM du lab — qui n’écoutent qu’en
+boucle locale — et disparaît avec lui. La clé publique du Mac n’est jamais envoyée aux VM.</p></li>
+<li><p><strong>Clés d’hôte des VM non vérifiées</strong> par <code class="docutils literal notranslate"><span class="pre">lab</span> <span class="pre">ssh</span></code> (<code class="docutils literal notranslate"><span class="pre">known_hosts</span></code> jetable) : elles changent
+à chaque <code class="docutils literal notranslate"><span class="pre">up</span></code>. Acceptable uniquement parce que la connexion reste sur la boucle locale d’un
+serveur auquel on s’est authentifié.</p></li>
+<li><p><strong>Code exécuté sans épinglage par</strong> <code class="docutils literal notranslate"><span class="pre">deploy.sh</span></code> : la bibliothèque <code class="docutils literal notranslate"><span class="pre">shflags</span></code> est récupérée
+par <code class="docutils literal notranslate"><span class="pre">curl</span></code> sur la branche <code class="docutils literal notranslate"><span class="pre">main</span></code> d’un autre dépôt (<code class="docutils literal notranslate"><span class="pre">H6N/tools</span></code>) et exécutée par <code class="docutils literal notranslate"><span class="pre">eval</span></code>,
+sans vérification d’intégrité — dans le lab comme en production. Les artefacts de la release
+sont, eux, vérifiés contre <code class="docutils literal notranslate"><span class="pre">SHA256SUMS</span></code>.</p></li>
+<li><p><strong>Image</strong> : <code class="docutils literal notranslate"><span class="pre">SHA512SUMS</span></code> vient de la même origine que l’image, en HTTPS. La vérification
+protège contre la corruption, pas contre une origine compromise ; la signature GPG de Debian
+(<code class="docutils literal notranslate"><span class="pre">SHA512SUMS.sign</span></code>) n’est pas encore vérifiée.</p></li>
+</ul>
+</section>
+<section id="tests">
+<h2>Tests<a class="headerlink" href="#tests" title="Lien vers cette rubrique">#</a></h2>
+<div class="highlight-bash notranslate"><div class="highlight"><pre><span></span>bash<span class="w"> </span>scripts/lab-host_test.sh
+bash<span class="w"> </span>test/e2e/run_test.sh
+go<span class="w"> </span><span class="nb">test</span><span class="w"> </span>./internal/lab/...<span class="w"> </span>./cmd/lab/
+</pre></div>
+</div>
+<p>Environ une minute et demie, sans réseau : la suite remplace <code class="docutils literal notranslate"><span class="pre">curl</span></code> par une fausse API Scaleway
+qui se place dans le pire cas (offre mensuelle listée avant l’horaire, serveurs d’autres projets,
+suppressions refusées, erreurs 503, serveur qui tarde à disparaître) et <code class="docutils literal notranslate"><span class="pre">ssh</span></code> par un faux client.
+Elle tourne sous bash 5 comme sous le bash 3.2 de macOS.</p>
+</section>
+</section>
+
+
+                </article>
+              
+
+              
+              
+              
+              
+                <footer class="prev-next-footer d-print-none">
+                  
+<div class="prev-next-area">
+    <a class="left-prev"
+       href="index.html"
+       title="page précédente">
+      <i class="fa-solid fa-angle-left"></i>
+      <div class="prev-next-info">
+        <p class="prev-next-subtitle">précédent</p>
+        <p class="prev-next-title">Développement</p>
+      </div>
+    </a>
+    <a class="right-next"
+       href="../concepts/index.html"
+       title="page suivante">
+      <div class="prev-next-info">
+        <p class="prev-next-subtitle">suivant</p>
+        <p class="prev-next-title">Concepts</p>
+      </div>
+      <i class="fa-solid fa-angle-right"></i>
+    </a>
+</div>
+                </footer>
+              
+            </div>
+            
+            
+              
+                <dialog id="pst-secondary-sidebar-modal"></dialog>
+                <div id="pst-secondary-sidebar" class="bd-sidebar-secondary bd-toc"><div class="sidebar-secondary-items sidebar-secondary__inner">
+
+
+  <div class="sidebar-secondary-item"><div
+    id="pst-page-navigation-heading-2"
+    class="page-toc tocsection onthispage">
+    <i class="fa-solid fa-list"></i> Contenu
+  </div>
+  <nav id="pst-page-toc-nav" class="page-toc" aria-labelledby="pst-page-navigation-heading-2">
+    <ul class="visible nav section-nav flex-column">
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#le-serveur-de-lab">Le serveur de lab</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#prerequis-cote-scaleway">Prérequis côté Scaleway</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#fichiers-locaux">Fichiers locaux</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#commandes">Commandes</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#topologie">Topologie</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#roles">Rôles</a></li>
+</ul>
+</li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#rendu-des-vm">Rendu des VM</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#verifie-sur-de-vraies-vm">Vérifié sur de vraies VM</a></li>
+</ul>
+</li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#lancement-des-vm">Lancement des VM</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#verifie-sur-le-serveur-de-lab">Vérifié sur le serveur de lab</a></li>
+</ul>
+</li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#scenarios">Scénarios</a><ul class="nav section-nav flex-column">
+<li class="toc-h3 nav-item toc-entry"><a class="reference internal nav-link" href="#ecrire-un-scenario">Écrire un scénario</a></li>
+</ul>
+</li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#facturation">Facturation</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#diagnostic">Diagnostic</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#securite">Sécurité</a></li>
+<li class="toc-h2 nav-item toc-entry"><a class="reference internal nav-link" href="#tests">Tests</a></li>
+</ul>
+  </nav></div>
+
+</div></div>
+              
+            
+          </div>
+          <footer class="bd-footer-content">
+            
+<div class="bd-footer-content__inner container">
+  
+  <div class="footer-item">
+    
+<p class="component-author">
+Par Nicolas Boufidjeline
+</p>
+
+  </div>
+  
+  <div class="footer-item">
+    
+
+  <p class="copyright">
+    
+      © Copyright 2026, Nicolas Boufidjeline.
+      <br/>
+    
+  </p>
+
+  </div>
+  
+  <div class="footer-item">
+    
+  </div>
+  
+  <div class="footer-item">
+    
+  </div>
+  
+</div>
+          </footer>
+        
+
+      </main>
+    </div>
+  </div>
+  
+  <!-- Scripts loaded after <body> so the DOM is not blocked -->
+  <script defer src="../_static/scripts/bootstrap.js?digest=8878045cc6db502f8baf"></script>
+<script defer src="../_static/scripts/pydata-sphinx-theme.js?digest=8878045cc6db502f8baf"></script>
+
+  <footer class="bd-footer">
+  </footer>
+  </body>
+</html>
\ No newline at end of file
diff --git a/main/exploitation/api-agent/asynchronisme.html b/main/exploitation/api-agent/asynchronisme.html
index ff243a9..53f082e 100644
--- a/main/exploitation/api-agent/asynchronisme.html
+++ b/main/exploitation/api-agent/asynchronisme.html
@@ -654,6 +654,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/exploitation/api-agent/index.html b/main/exploitation/api-agent/index.html
index 495d5f0..3d88fa9 100644
--- a/main/exploitation/api-agent/index.html
+++ b/main/exploitation/api-agent/index.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/exploitation/api-agent/reference.html b/main/exploitation/api-agent/reference.html
index 1e05e60..182125e 100644
--- a/main/exploitation/api-agent/reference.html
+++ b/main/exploitation/api-agent/reference.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/exploitation/configuration.html b/main/exploitation/configuration.html
index 0db9580..12f5bda 100644
--- a/main/exploitation/configuration.html
+++ b/main/exploitation/configuration.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/exploitation/diagnostic.html b/main/exploitation/diagnostic.html
index 5b54894..13c21fc 100644
--- a/main/exploitation/diagnostic.html
+++ b/main/exploitation/diagnostic.html
@@ -54,7 +54,7 @@
         </script>
     <link rel="index" title="Index" href="../genindex.html" />
     <link rel="search" title="Recherche" href="../search.html" />
-    <link rel="next" title="Concepts" href="../concepts/index.html" />
+    <link rel="next" title="Développement" href="../developpement/index.html" />
     <link rel="prev" title="Observabilité" href="observabilite.html" />
   <meta name="viewport" content="width=device-width, initial-scale=1"/>
   <meta name="docsearch:language" content="fr"/>
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
@@ -496,11 +503,11 @@ l’agent n’est plus piloté par lui.</p>
       </div>
     </a>
     <a class="right-next"
-       href="../concepts/index.html"
+       href="../developpement/index.html"
        title="page suivante">
       <div class="prev-next-info">
         <p class="prev-next-subtitle">suivant</p>
-        <p class="prev-next-title">Concepts</p>
+        <p class="prev-next-title">Développement</p>
       </div>
       <i class="fa-solid fa-angle-right"></i>
     </a>
diff --git a/main/exploitation/index.html b/main/exploitation/index.html
index f7b3585..0beb4c0 100644
--- a/main/exploitation/index.html
+++ b/main/exploitation/index.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/exploitation/observabilite.html b/main/exploitation/observabilite.html
index f877110..29ff460 100644
--- a/main/exploitation/observabilite.html
+++ b/main/exploitation/observabilite.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/exploitation/services.html b/main/exploitation/services.html
index bfc6a15..fbb0f2e 100644
--- a/main/exploitation/services.html
+++ b/main/exploitation/services.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/genindex.html b/main/genindex.html
index 2fa44b1..22c05fa 100644
--- a/main/genindex.html
+++ b/main/genindex.html
@@ -653,6 +653,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/http-routingtable.html b/main/http-routingtable.html
index 1725173..f30e752 100644
--- a/main/http-routingtable.html
+++ b/main/http-routingtable.html
@@ -660,6 +660,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/index.html b/main/index.html
index d5317e6..05c98fc 100644
--- a/main/index.html
+++ b/main/index.html
@@ -219,6 +219,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
@@ -395,6 +402,8 @@ qu’un parc d’hyperviseurs fonctionne ensemble.</p>
 </dd>
 <dt><a class="reference internal" href="exploitation/index.html"><span class="doc">Exploitation</span></a></dt><dd><p>Configuration, services, API de l’agent, métriques et diagnostic sur un nœud en service.</p>
 </dd>
+<dt><a class="reference internal" href="developpement/index.html"><span class="doc">Développement</span></a></dt><dd><p>Outillage de développement de two, dont le lab de test multi-nœud sur serveur loué à l’heure.</p>
+</dd>
 <dt><a class="reference internal" href="concepts/index.html"><span class="doc">Concepts</span></a></dt><dd><p>Comment les éléments fonctionnent entre eux : modèle de données, modes réseau, cycle de vie,
 metadata. À lire avant de diagnostiquer un comportement inattendu.</p>
 </dd>
@@ -405,6 +414,8 @@ metadata. À lire avant de diagnostiquer un comportement inattendu.</p>
 </div>
 <div class="toctree-wrapper compound">
 </div>
+<div class="toctree-wrapper compound">
+</div>
 </section>
 </section>
 
diff --git a/main/objects.inv b/main/objects.inv
index 5bbf5be565421e008773f603ba7baece4361786c..8ae095903b5a66f5296270f4be3aee49737ccc8f 100644
GIT binary patch
delta 962
zcmV;z13mox2dW5=c7M%|+cpr#?|KRXxkl^k9&>Ax01c2ujbxFYX=>IYN>K_wyfK0R
zeTSa<2J7cA`XYUj4n;~LEpcNwd$VW$^AkD48FHoVMuO3#Hl};M1w*b0eC<Tb4K=)#
zE86jrZb6!rf_qRP8C=z-5id|%mP2$|tP)Vy>hnoXyo6ePlYg{<@19tJ00U<;y?msW
zj+8@Ry6X|TYc9>7i;Mvm<ZVJcN4^jfZ|mpsl)yT6agtnUg19725#(7Cg`8w_Kbfis
zM-{8N0cNa%6>FtYluHAeXj8qeT1LuilGF4^@?P$!;#6Wg;X*ooeB6Rgxm;H8HB0Qh
zp7l#)PZ8R*?0-+(QkF6ZJm?dvkB5em3U|W9@o=)BorSUjsiE13JTg&v?q>_6`tPrQ
z25W)oV9;Tcvpo||Uha58ToicN8)v~K5*OlDszB@3Du($R!)CclJ%JQ#Q&<CrR@Bgv
ziPlynm)tBu7IYqY8yv2vlP~%}iz_a1#X#*cIT8e9+kbBotAVD8gvT*VIc(xZRH6ul
zSigBmyv?of^KDT<LzTi4Fi+Wu%M;$Z1JYZQP;ICXeHY~jlVWIqD8?NQD@ncYK<&5&
zt0H=*py8lg11`fOfoHG1!EZNs!?wf!<D&w<eb@icxTcR!F&5Tp<D%jZKCPWMBdIJ2
z&g4tH!GC3!Us(Hallwp<84s&A$}*oXAOcg?i%2g@`SVhqILBg+_Mrw#>m3pt)h9<^
zkft?BYdi(2*5c5{!7DI#ZI*u`3&;AF^ma1Z=V+_+lT7q`*vIe>5jzlV*JX1$bB|e#
zJSP}IH+cv;J>mnZu*P^>7}8i_cq#w=+g3&9x__d2FIlZx$#s*A(R1|UlsP`)TpeA|
zkFb9BR4%awM{Mr<v)nwT3vIG~Kb+#;SN!NEJ_DcL+T`Q$aDP1XhLnyI@}6(4n$4@c
zYV5(ulrk$$w-TQ*oMnNNB%G7+e~NlKn^6wmMfMcYZZtL--Ee`UD2qx|9{GD@Iv!G}
z^M7!bK5`ZX;W07F_c&0Rs=yjeTf?Ic!Vw1Ra4X=?!adMR*Ogpu4ILgEW5~?yWAA#U
zJFMt(gYmb!yLB<kX7n}l&=z>%F088CmxCi(n49Nlw)ldH1m{I!B7CSO>%FP5V$ZZe
zd=}u9lLEXg3|^<~TbR{=Rw#C$G}cS6UOQb~U%iTRlX}8r;H;(~;;5T!)Xfm}YZ5Xm
kLh1=qJlKi{*l2u~;=3iEqGe4cPk+GXQ!g(52O!w3BV)JKDgXcg

delta 917
zcmV;G18V%L2>l0;c7MTc+b|4<?|upayUtD9V{cnGU_BHI+M+uvG8+rCWlxgR2E%~8
z#@?WL4!_BsWRxY_QfzfW+FL^Y{49|orG;u%0<<Ez*7e02G&v*iR2LQ3RP#zKXw6f)
z2B8-c9zcR%aFXk?c!%0F?W5CV5rFDS9ZoXhIn?5(pe6jW#D5G5&~Px*$_Hv{NHO%W
zyB?sM^4R>DNFQ)S-bTb*<O?zWwqBQ~09Lc3lVm~z#4%~|Aa9Z=<OG|0WvV<Jl`Q8P
zm~JF2SS7TiTxd{4>Fgq_7)j4aOw%FBmDo_pslax^h19%#UV{p`Tx9SRC3arR`rz3^
zgwhrJj$4XSdVhfh-Lkyhm6T+-6IQgly#;L=NHY)$%2g3Z1}e+FZ-8WffB)&N38sTV
zjZMzBtT6I)!vo^1z``z#1(!%nh*_xwrK(0U%-;|;$zAAiBxf7LO3*Z;nx?F%nk?ml
z>siQ*&LXd!!xVM&c^{~7#VM{BXfsdt1P)nso5X6MX@4Z)adcA-n|Kx#C|n_ym+y(S
znHAn&CmEDfN<0D6l<m1J;gdNaoizwmnifUZMKQvt=o`R`F^8iOB;VE`H(Ws@J$fyn
z<RDE0&ci){WiPG4Zr6F;w%z~sS%TfZ>3=9q)BC3w3)?7dqWllOterL^$r|FE!IyZ6
z%T9l=>VNS(_5n{a99E@e!)(5Q6qvG3L^@H(pO$jZITUlS_cfSXZ=YbVJ~8@?G^|Nj
z<1tWH4GwJ_yand2it_hl?pR-w&Q1pV6x~SmA`|@<cH{mfk-LGatzfyV1XpD+vkuV@
zE!{rj5F1?3&5N$lGqVeg^DOrLNpWA&xih)E>VJ<+=S%)~?Hzy*uSjy!?jG7*X9(#y
zjvn~Bk(1#NR}BY#G=<EJ)3v}i17}g-C~-%9_#dKP&Zd{c&z?O*R4auinyz?(eIG>y
zDvSK;nc7_lH6G5w7saf=-Q0tGi``ph3D#)bT0vJ(7(#FDM=<_O%xfq$Ex^TE)Ba{3
zLVqT18++F&&0$5CnL=Og?v}|Uo8H&-W0m0THnXaFoAwTGVP<%uxxwdxCpat;6JbLY
zS#EWX6?>x%;vJ0hJp@>rn{r0kwJ^&8t&nU$Dy)}UoSvMWocg&5J#I2^mQyJFsPkyl
rc^~yL2$>Wi^th4fY{?_66utrRkq}SOybdOkr*E*j?ZnAH(KvOVS&F`{

diff --git a/main/search.html b/main/search.html
index b71101a..8704715 100644
--- a/main/search.html
+++ b/main/search.html
@@ -655,6 +655,13 @@ window.runMermaid = runMermaid;</script>
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/searchindex.js b/main/searchindex.js
index 86a6637..453642a 100644
--- a/main/searchindex.js
+++ b/main/searchindex.js
@@ -1 +1 @@
-Search.setIndex({"alltitles":{"1. Le VPC":[[11,"le-vpc"]],"2. Le subnet":[[11,"le-subnet"]],"3. La VM":[[11,"la-vm"]],"4. V\u00e9rifier":[[11,"verifier"]],"5. Supprimer":[[11,"supprimer"]],"API de l\u2019agent":[[19,null]],"Adressage":[[12,"adressage"]],"Ajouter un type de ressource":[[3,"ajouter-un-type-de-ressource"]],"Architecture":[[1,null]],"Architecture du cluster":[[12,null]],"Arr\u00eat de l\u2019agent":[[0,"arret-de-l-agent"],[25,"arret-de-l-agent"]],"Attendre correctement":[[18,"attendre-correctement"]],"Backend DHCP":[[21,"backend-dhcp"]],"Bael":[[28,null]],"Bascule d\u2019un backend \u00e0 l\u2019autre":[[21,"bascule-d-un-backend-a-l-autre"]],"Base de donn\u00e9es":[[21,"base-de-donnees"]],"Binaires install\u00e9s":[[10,"binaires-installes"]],"Ce que fait -i":[[10,"ce-que-fait-i"]],"Ce que l\u2019agent suppose d\u00e9j\u00e0 en place":[[12,"ce-que-l-agent-suppose-deja-en-place"]],"Ce que l\u2019on construit":[[11,"ce-que-l-on-construit"]],"Ce qui est stock\u00e9, et o\u00f9":[[8,"ce-qui-est-stocke-et-ou"]],"Champs de metadata":[[6,"champs-de-metadata"]],"Changements internes":[[28,"changements-internes"]],"Cha\u00eene de production":[[6,"chaine-de-production"]],"Codes de retour":[[18,"codes-de-retour"]],"Concepts":[[5,null]],"Configuration":[[0,"configuration"],[21,null]],"Configuration r\u00e9seau":[[6,"configuration-reseau"]],"Construction de l\u2019image qcow2":[[13,null]],"Contraintes impos\u00e9es par le reste du cluster":[[17,"contraintes-imposees-par-le-reste-du-cluster"]],"Correctifs":[[28,"correctifs"]],"Correspondance des interfaces":[[21,"correspondance-des-interfaces"]],"Cycle de vie des ressources":[[4,null]],"Cycle d\u2019une requ\u00eate":[[3,"cycle-d-une-requete"]],"Diagnostic":[[22,null]],"Documents servis":[[6,"documents-servis"]],"D\u00e9marrage":[[9,null]],"D\u00e9ploiement":[[10,"deploiement"]],"D\u00e9ploiement d\u2019un cluster":[[14,null]],"Exploitation":[[23,null]],"Ex\u00e9cution des commandes":[[21,"execution-des-commandes"]],"Fonctionnalit\u00e9s":[[27,"fonctionnalites"],[28,"fonctionnalites"]],"Host sans \u00e9tat":[[10,"host-sans-etat"]],"Hyperviseurs sans \u00e9tat":[[12,"hyperviseurs-sans-etat"]],"Idempotence":[[18,"idempotence"]],"Inspection de la base":[[24,"inspection-de-la-base"]],"Installation":[[15,"installation"],[27,"installation"]],"Installation d\u2019un hyperviseur":[[10,null]],"Invariants et pi\u00e8ges":[[0,null]],"Journalisation":[[21,"journalisation"]],"Journaux":[[24,"journaux"]],"La VM a une adresse mais cloud-init n\u2019applique rien":[[22,"la-vm-a-une-adresse-mais-cloud-init-n-applique-rien"]],"La VM d\u00e9marre mais n\u2019a pas d\u2019adresse":[[22,"la-vm-demarre-mais-n-a-pas-d-adresse"]],"La VM ne d\u00e9marre pas (UEFI)":[[22,"la-vm-ne-demarre-pas-uefi"]],"La base et le syst\u00e8me ont diverg\u00e9":[[22,"la-base-et-le-systeme-ont-diverge"]],"La ressource part en error juste apr\u00e8s le 202":[[22,"la-ressource-part-en-error-juste-apres-le-202"]],"Le DELETE renvoie 409":[[22,"le-delete-renvoie-409"]],"Le user-data est servi vide":[[22,"le-user-data-est-servi-vide"]],"Les deux temps d\u2019une requ\u00eate":[[18,"les-deux-temps-d-une-requete"]],"L\u2019agent ne red\u00e9marre pas apr\u00e8s un arr\u00eat brutal":[[22,"l-agent-ne-redemarre-pas-apres-un-arret-brutal"]],"MTU":[[12,"mtu"]],"Metadata et QEMU":[[21,"metadata-et-qemu"]],"Metadata et cloud-init":[[6,null]],"Michael":[[27,null]],"Mise \u00e0 jour":[[10,"mise-a-jour"],[25,"mise-a-jour"]],"Mise \u00e0 jour depuis la 0.1.0":[[28,"mise-a-jour-depuis-la-0-1-0"]],"Modes r\u00e9seau":[[7,null]],"Mod\u00e8le asynchrone et codes de retour":[[18,null]],"M\u00e9triques Prometheus":[[24,"metriques-prometheus"]],"Nommage":[[8,"nommage"]],"Noms de version":[[29,"noms-de-version"]],"Observabilit\u00e9":[[24,null]],"Paquets":[[3,"paquets"]],"Par o\u00f9 commencer":[[26,"par-ou-commencer"]],"Pas de rollback":[[4,"pas-de-rollback"]],"Plan de contr\u00f4le \u2014 FRR":[[15,"plan-de-controle-frr"]],"Points de vigilance":[[13,"points-de-vigilance"],[16,"points-de-vigilance"]],"Pourquoi la route /32 vers le serveur de metadata est indispensable":[[7,"pourquoi-la-route-32-vers-le-serveur-de-metadata-est-indispensable"]],"Pourquoi un plan de contr\u00f4le est n\u00e9cessaire":[[12,"pourquoi-un-plan-de-controle-est-necessaire"]],"Premier VPC, premier subnet, premi\u00e8re VM":[[11,null]],"Premier hyperviseur":[[15,null]],"Principe":[[13,"principe"]],"Pr\u00e9requis":[[10,"prerequis"]],"P\u00e9rim\u00e8tre et limites connues":[[27,"perimetre-et-limites-connues"],[28,"perimetre-et-limites-connues"]],"QEMU et VM":[[0,"qemu-et-vm"]],"QEMU n\u2019est pas une unit":[[25,"qemu-n-est-pas-une-unit"]],"Renseignement des colonnes":[[29,"renseignement-des-colonnes"]],"Route par d\u00e9faut : default_route et gateway":[[7,"route-par-defaut-default-route-et-gateway"]],"Routes annonc\u00e9es aux VM":[[7,"routes-annoncees-aux-vm"]],"Routeurs":[[17,null]],"R\u00e8gles":[[2,"regles"]],"R\u00e9f\u00e9rence":[[20,null]],"R\u00e9seau":[[0,"reseau"]],"Sch\u00e9ma des cl\u00e9s":[[2,null]],"Serveur DHCP int\u00e9gr\u00e9":[[25,"serveur-dhcp-integre"]],"Serveurs":[[21,"serveurs"]],"Services systemd":[[25,null]],"Sockets par VM":[[25,"sockets-par-vm"]],"Stubs de plateforme":[[3,"stubs-de-plateforme"]],"Subnet":[[8,"subnet"]],"Suppression":[[4,"suppression"]],"S\u00e9curit\u00e9":[[6,"securite"]],"S\u00e9curit\u00e9 connue et accept\u00e9e":[[0,"securite-connue-et-acceptee"]],"Topologie":[[12,"topologie"]],"VM":[[8,"vm"]],"VM route reflector":[[16,null]],"VPC":[[8,"vpc"]],"VPC, subnet et VM":[[8,null]],"Valider le n\u0153ud":[[15,"valider-le-noeud"]],"Variables":[[13,"variables"]],"Versions":[[29,null]],"Vue d\u2019ensemble":[[3,null]],"V\u00e9rifier le plan de donn\u00e9es":[[15,"verifier-le-plan-de-donnees"]],"V\u00e9rifier l\u2019installation":[[10,"verifier-l-installation"]],"Watchdog":[[21,"watchdog"],[24,"watchdog"]],"bridge":[[7,"bridge"]],"cloud-init":[[0,"cloud-init"]],"dnsmasq":[[25,"dnsmasq"]],"instance-id":[[6,"instance-id"]],"two":[[26,null]],"vxlan":[[7,"vxlan"]],"\u00c9tape 1 \u2014 Le seed cloud-init de la VM de construction":[[13,"etape-1-le-seed-cloud-init-de-la-vm-de-construction"]],"\u00c9tape 2 \u2014 Les disques":[[13,"etape-2-les-disques"]],"\u00c9tape 3 \u2014 Lancer la VM de construction":[[13,"etape-3-lancer-la-vm-de-construction"]],"\u00c9tape 4 \u2014 \u00c9crire l\u2019image du fournisseur sur le disque cible":[[13,"etape-4-ecrire-l-image-du-fournisseur-sur-le-disque-cible"]],"\u00c9tape 5 \u2014 Personnaliser l\u2019image":[[13,"etape-5-personnaliser-l-image"]],"\u00c9tape 6 \u2014 Nettoyer, puis \u00e9teindre":[[13,"etape-6-nettoyer-puis-eteindre"]],"\u00c9tapes":[[14,"etapes"]],"\u00c9tats transitoires au red\u00e9marrage de l\u2019agent":[[4,"etats-transitoires-au-redemarrage-de-l-agent"]]},"docnames":["architecture/contraintes","architecture/index","architecture/stockage","architecture/vue-densemble","concepts/cycle-de-vie","concepts/index","concepts/metadata-cloud-init","concepts/modes-reseau","concepts/vpc-subnet-vm","demarrage/index","demarrage/installation","demarrage/premier-vpc","deploiement/architecture-cluster","deploiement/image-qcow2","deploiement/index","deploiement/premier-hyperviseur","deploiement/route-reflector","deploiement/routeurs","exploitation/api-agent/asynchronisme","exploitation/api-agent/index","exploitation/api-agent/reference","exploitation/configuration","exploitation/diagnostic","exploitation/index","exploitation/observabilite","exploitation/services","index","versions/0.1.0","versions/0.2.0","versions/index"],"envversion":{"sphinx":66,"sphinx.domains.c":3,"sphinx.domains.changeset":1,"sphinx.domains.citation":1,"sphinx.domains.cpp":9,"sphinx.domains.index":1,"sphinx.domains.javascript":3,"sphinx.domains.math":2,"sphinx.domains.python":4,"sphinx.domains.rst":2,"sphinx.domains.std":2},"filenames":["architecture/contraintes.rst","architecture/index.rst","architecture/stockage.rst","architecture/vue-densemble.rst","concepts/cycle-de-vie.rst","concepts/index.rst","concepts/metadata-cloud-init.rst","concepts/modes-reseau.rst","concepts/vpc-subnet-vm.rst","demarrage/index.rst","demarrage/installation.rst","demarrage/premier-vpc.rst","deploiement/architecture-cluster.rst","deploiement/image-qcow2.rst","deploiement/index.rst","deploiement/premier-hyperviseur.rst","deploiement/route-reflector.rst","deploiement/routeurs.rst","exploitation/api-agent/asynchronisme.rst","exploitation/api-agent/index.rst","exploitation/api-agent/reference.rst","exploitation/configuration.rst","exploitation/diagnostic.rst","exploitation/index.rst","exploitation/observabilite.rst","exploitation/services.rst","index.rst","versions/0.1.0.md","versions/0.2.0.md","versions/index.rst"],"indexentries":{},"objects":{"":[[20,0,1,"get--subnets","/subnets"],[20,1,1,"post--subnets","/subnets"],[20,2,1,"delete--subnets-name","/subnets/{name}"],[20,0,1,"get--subnets-name","/subnets/{name}"],[20,0,1,"get--vms","/vms"],[20,1,1,"post--vms","/vms"],[20,2,1,"delete--vms-name","/vms/{name}"],[20,0,1,"get--vms-name","/vms/{name}"],[20,0,1,"get--vpcs","/vpcs"],[20,1,1,"post--vpcs","/vpcs"],[20,2,1,"delete--vpcs-name","/vpcs/{name}"],[20,0,1,"get--vpcs-name","/vpcs/{name}"]]},"objnames":{"0":["http","get","HTTP get"],"1":["http","post","HTTP post"],"2":["http","delete","HTTP delete"]},"objtypes":{"0":"http:get","1":"http:post","2":"http:delete"},"terms":{"0a":22,"0x03":[0,8,11],"0x1e":0,"0x1f":0,"10g":13,"20_us":13,"50g":13,"99_metadat":13,"AS":[15,17],"Au":4,"Avec":[0,7],"C":[3,4,6,8,12,13,15,17,18,19,20,21,26,29],"Ce":[13,21,22],"Ces":[0,1,15],"Cet":14,"Cette":[0,8,10,13,14,17,19,20],"D":[0,3,14],"Elle":[4,7,11,19,21,24],"Elles":13,"En":[0,4,11,24],"Il":[0,8,10,11,12,13,16,18,21,22,24,25,26,28],"Ils":0,"J":13,"L":[0,1,2,6,8,10,11,12,13,14,15,16,17,19,21,24,25,26,27,28],"La":[0,4,7,10,13,15,19,21,27,28,29],"Le":[0,2,5,6,7,8,9,10,12,14,15,16,17,18,21,24,25,27,28,29],"Les":[0,2,3,6,7,8,10,11,17,21,22,24,25,27],"Ne":[0,6,7,10,18,21,24],"Pas":[2,7,27,28],"Pour":[6,9,11,17,21,22,28],"Quelle":22,"S":28,"Son":13,"Sur":[12,21,22],"Un":[0,2,4,6,7,8,10,11,18,21,22,24,25,27,28],"Une":[0,2,4,7,8,10,13,15,21,22,24,29],"_":[21,22,25,28],"_linux":3,"_oth":3,"_seed":13,"a":[0,4,10,12,13,14,15,16,17,18,19,20,21,25,27,28,29],"aaa":[11,29],"abord":[13,22],"about":[4,24],"absenc":12,"absent":[0,2,6,8,16,18,21,22,27],"accept":[4,6,7,11,12,17,18,27],"accepted":20,"acces":[10,13],"achaiah":29,"action":[10,15,24,28],"activ":[10,13,15,21,24,25,27],"actuel":13,"additionnel":0,"address":21,"admin":[0,8,11,21],"admin_br":[24,25],"administr":[0,17,21,24,26,27],"adress":[3,8,10,11,12,13,15,21,25,28],"adressag":[3,8,11,16,17],"adressent":1,"affich":10,"agar":29,"agent":[1,2,3,5,6,7,8,10,11,13,14,15,16,17,18,20,21,23,24,26,27,28],"agit":16,"agreg":24,"agr\u00e8gent":17,"ailleur":[3,22,29],"aim":29,"ajout":[6,12,13,17],"ajoutent":28,"aladiah":29,"alert":24,"align":28,"aliment":24,"all":[13,20],"alloc":[12,29],"alor":[0,6,15,21,28],"already":20,"altern":29,"ambigu":29,"amdusi":29,"amon":29,"amont":[12,21,22],"amorc":13,"amor\u00e7ag":[16,27],"amy":29,"ananel":29,"ancien":4,"and":20,"andras":29,"andrealphus":29,"andromalius":29,"ange":29,"aniel":29,"annonc":[8,11,15,17,21,28],"anomal":[24,25],"anti":28,"api":[0,3,5,7,8,10,11,13,17,20,21,23,24,25,26,27],"apparaissent":25,"appara\u00eet":[12,15],"apparent":7,"apparten":[8,11,27],"appartient":[8,25,28],"appel":[0,3,4,6,7,8,18,19,25,27,28],"appliqu":[0,6,11,13,15,20],"appliquent":21,"apport":21,"apprentissag":[12,15],"appui":7,"apres":[4,10,15,18,25,28],"ar":29,"arakiel":29,"archang":29,"architectur":[11,14,15,17,21,26,28],"armaros":29,"arm\u00e9":10,"arrier":[10,21,28],"arr\u00eat":[4,10,21,27,28],"artefact":[10,13],"articul":15,"asmoday":29,"asset":27,"associ":24,"assum":[0,10,13],"astaroth":29,"asynchron":[3,11,19,27],"atom":28,"atteint":[0,10,21,22],"attend":[11,12,13,17],"attendent":[18,21],"attendr":22,"attendu":[6,17,22],"attent":[4,11,18,21],"aucun":[0,6,10,11,13,15,17,19,21,22,25,27,28,29],"aug":13,"augtool":13,"aujourd":[13,17,19],"auquel":10,"aur":22,"auss":8,"authentif":[0,10,17,19,21,27,28],"auto":[10,28],"automat":[4,27],"autoris":[4,6,18,22,27],"autr":[0,7,11,12,14,15,16,19,28],"avant":[0,4,6,7,10,11,13,14,15,17,19,21,22,25,26,28],"avert":10,"avoir":[4,18,25,28],"b":[10,13],"backend":[3,8,10,22,24,25,28],"backing":13,"bad":20,"badg":[0,2,3,6,21,22,24,25,28],"bael":29,"bail":27,"balam":29,"bann":13,"barachiel":29,"baraqiel":29,"barbatos":29,"barr":13,"barri":17,"bas":[0,2,3,6,8,10,13,18,25,27,28],"bascul":[4,10,17,22,27,28],"base64":[6,11,18,22,27],"bash":[10,27,28],"bash_history":13,"batariel":29,"bathin":29,"baux":[25,27,28],"be":20,"beleth":29,"belial":29,"berith":29,"besoin":[13,14],"best":[4,18],"bibliothequ":28,"bien":13,"bifron":29,"bin":[24,25],"binair":[3,6,21,25,27,28],"bind":13,"blk":[0,8,13],"block":13,"bloqu":[13,21],"body":20,"bool\u00e9en":10,"bootindex":13,"bootstrap":[10,12,15],"bootstrap_kvm":27,"bord":[22,28],"bordur":[14,17],"born":[13,18,21,28],"bot":29,"boucl":[0,10,19,21,27],"bout":[11,15],"br":[2,10,12,21,25],"br_netfilt":10,"branch":[10,21,27,28],"bridg":[0,2,3,8,10,11,12,15,17,21,22,25,26,27,28],"brut":[2,13],"brutal":[0,21,28],"bu":29,"budget":[0,22,25,27],"buffer_siz":21,"bufferis":3,"bug":0,"build":[13,28],"bun":29,"bus":[0,3,13],"but":4,"c3ryaw5n":20,"cach":13,"cahetel":29,"caim":29,"caliel":29,"call":[0,3,10],"camael":29,"can":20,"canal":3,"candelet":3,"canon":[2,8,29],"cart":[0,8,11],"cas":[0,1,4,6,13,15,16,20,22,27],"cass":[0,10],"cassiel":29,"cat":[13,22],"caus":22,"cd":13,"cdrom":13,"cel":[13,15,21,22,24,25,27,28],"celui":[13,17,28],"centos":13,"centralis":0,"ceux":24,"cf":[11,13,15,16,17,24],"cfg":13,"cgl":25,"cgroup":27,"chacun":17,"challengeresponseauthent":13,"champ":[7,11,13,18,28],"chang":[3,6,11,21],"chaqu":[6,10,12,13,14,15,16,17,21,22,24,25,27,28,29],"charg":[0,3,6,10,19,21,27],"chaud":21,"chavakiah":29,"cha\u00een":[2,3],"chemin":[0,3,10,21,25,28],"chois":[7,21,27,28,29],"choix":[4,17],"chos":[0,22],"chroot":13,"ci":[12,17,21,27,28],"cibl":[0,6,12,14,22],"cidat":13,"cidr":[0,2,7,8,11,19,20,21,27],"circulair":16,"clair":[0,6,27],"class":7,"classless":[22,28],"claud":[0,1],"clean":6,"client":[0,3,7,12,27],"cloud":[3,5,7,10,11,16,21,25,26,27],"clust":[9,10,11,13,15,16,26],"cluster":17,"cl\u00e9":[1,6,8,10,11,13,21,27,28],"cmd":2,"cockp":13,"cod":[1,11,19,20,21,29],"coexistent":28,"coh\u00e9rent":[7,13,19,27],"collector":3,"collis":12,"com":[20,28],"combien":[16,17],"comm":[0,6,7,11,13,15,16,18,21,22,27,28],"command":[3,10,13,24],"comment":[5,12,13,15,16,21,25,26],"commod":13,"common":10,"commut":[0,7,22],"compact":28,"compar":[21,22,28],"comparaison":28,"compil":3,"compilent":3,"complet":[8,13,14,26],"comport":[8,17,21,26,28],"compos":[12,14,19,26,28],"compr":[12,13,24,28],"compt":[0,6,11,13,24,27],"compteur":29,"concaten":13,"concept":[26,28],"concern":[0,13],"concret":[3,12],"concurrent":[0,10,25,27],"condit":13,"condition":21,"conf":[10,13,21,22,24,25],"config":[0,3,6,10,11,13,21,27],"configur":[3,7,8,10,11,12,13,15,16,17,19,22,23,24,25,26,27,28],"confirm":13,"confl":18,"conflict":20,"confondr":12,"confondus":13,"confort":21,"connaiss":17,"connaissent":16,"conna\u00eetr":[3,7],"connect":[11,12,22,25],"connu":[6,22],"consider":[13,22],"consol":[10,11,25],"consomm":19,"construct":[14,15,16,21],"construir":13,"construit":13,"cons\u00e9quent":[0,4,11,12,18,25],"conten":15,"content":[11,20],"contenu":[0,2,11,21,22],"contient":[0,6,13,27],"continu":21,"continuent":[16,21],"contr":[10,27],"contraint":[0,1,8],"contrair":28,"contrat":[5,20],"contrepart":10,"contr\u00f4l":[3,10,11,13,14,16,21,24,25,28],"contr\u00f4leur":[0,8],"convent":[8,19],"converg":12,"convers":[2,13],"convert":13,"cop":[15,21],"copi":13,"corp":18,"correct":22,"correspond":[3,5,22],"corrig":[0,6,13,27],"corrompu":2,"couch":13,"count":21,"coup":[10,15],"coupur":10,"cour":[4,10],"cours":0,"court":[9,26],"couvert":28,"couvr":14,"co\u00fbt":28,"co\u00fbtent":11,"cp":13,"cpu":13,"cpus":[2,11,20],"creat":[3,13,20],"creating":[2,3,4,18,20,22,24,27],"creation":20,"crocel":29,"cr\u00e9":[0,4,6,10,11,12,15,16,17,18,21,22,25,26,27,28],"cr\u00e9ation":[0,3,4,7,10,11,15,16,18,22,25,27,28],"curl":[10,11,13,18,22,24,27,28],"cut":13,"cycl":[5,18,24,26,27],"c\u00e2bl":7,"c\u00f4t":[7,13,18],"daemon":15,"dan":[0,2,3,5,6,7,8,10,11,12,13,14,15,16,17,18,21,22,25,27,28,29],"danel":29,"dantalion":29,"dat":[0,2,6,11,13,15,16,21,29],"databas":21,"datacentr":[14,17],"datasourc":13,"datasource_list":13,"davantag":28,"db":[0,3,10,21,24,28],"debian":[13,21,22],"debug":[21,24],"decarabi":29,"decr":[11,12,13],"def":0,"default":13,"default_interfac":[8,11,21,22],"default_rout":[2,20,27],"default_us":13,"del":[10,21],"delet":[0,3,4,11,20,24],"deleted":[2,3,4,20,27],"deleting":[2,3,4,22,24,27],"del\u00e0":[10,15,19,21],"demand":[4,10,18,28],"deploy":[10,12,15,25,27,28],"depuis":[2,4,7,8,10,11,12,13,16,17,18,20,22,27],"derni":[6,10,21,28],"descript":24,"dessous":[12,21],"dessus":[7,13,28],"destin":27,"detect":13,"deux":[3,6,8,10,12,13,15,16,17,22,24,25,28],"deuxiem":12,"dev":[2,11,13,15,20],"devic":[0,13],"devient":[7,21],"devoir":15,"dhcp":[0,2,3,6,7,8,10,11,13,15,22,24,26,27,28],"dhcp4":13,"dhcpbackend":28,"dhcpnak":28,"dhcpv6":28,"diagnostic":[12,15,21,23,25,26],"diagnostiqu":[10,26],"dialogu":28,"differ":[8,10],"dir":[21,24,28],"direct":[7,11,12,13,17,18,24,28],"disabl":13,"disabled":13,"discard":13,"disk":2,"disk_d":13,"dispatch":[0,2,3,10,18,21,25],"disponibl":[7,11,29],"dispos":6,"disqu":[0,2,6,8,10,11,16,22,27],"disqualif":6,"distanc":10,"distinct":[0,6,12,22,27],"distribu":[13,27],"dit":[12,13,18,21],"diverg":28,"divergent":[24,28],"dn":[13,22,28],"dnat":[0,7,10,22],"dnf":13,"dnsmasq":[3,8,10,21,22,24,27,28],"do":[18,20],"docu":[0,2,13,22,27],"document":[0,8,12,13,15,16,19,20,26,28],"doit":[0,7,8,12,13,14,15,16,17,18,21,22,24,27],"doivent":[0,6,8,11,13,15,17,22,24,27],"domain":29,"don":[5,10,12,13,17,18,22,24,26,27,28],"donc":[0,3,4,6,7,8,10,11,12,13,14,16,17,18,24,25,26,27,29],"dont":[3,7,8,11,14,15,17,18,21,28,29],"downscript":13,"drainag":[0,25,27],"drapeau":10,"driv":13,"dry":10,"dupliqu":2,"duquel":21,"dur":[0,21,24],"durabl":24,"durc":13,"dynam":28,"d\u00e8s":12,"d\u00e9cid":[21,28],"d\u00e9cis":[13,21],"d\u00e9clar":22,"d\u00e9clench":4,"d\u00e9cor":13,"d\u00e9coupag":1,"d\u00e9couvert":0,"d\u00e9couvr":[9,11,15],"d\u00e9di":[3,21,22,27],"d\u00e9duit":[25,27,29],"d\u00e9dupl":24,"d\u00e9faut":[0,6,8,10,11,12,13,15,18,21,24,27,28],"d\u00e9fin":3,"d\u00e9j\u00e0":[4,6,8,11,13,16,18,21,22,27,28],"d\u00e9liber":[4,6,15],"d\u00e9l\u00e9gu":[27,28],"d\u00e9marr":[0,6,9,10,11,13,14,15,16,18,21,25,27],"d\u00e9marrag":[0,3,4,10,12,13,14,15,16,21,22,25,26,27,28],"d\u00e9mon":[15,16,29],"d\u00e9part":22,"d\u00e9pass":[0,22,25,27],"d\u00e9pend":[0,8,11,16,17,18,25,28],"d\u00e9plac":10,"d\u00e9ploi":[9,15,21,26,27,28],"d\u00e9pourvu":28,"d\u00e9p\u00f4t":[1,20,21],"d\u00e9riv":[13,29],"d\u00e9rivent":[13,14],"d\u00e9roul":11,"d\u00e9sact":[10,15],"d\u00e9sactiv":[10,12,13,21,27],"d\u00e9sactivent":10,"d\u00e9sarm":10,"d\u00e9sir":25,"d\u00e9sorm":28,"d\u00e9taill":11,"d\u00e9termin":[7,8,11,27],"d\u00e9truir":21,"d\u00e9velopp":[0,1],"e":13,"ebtabl":[3,10,27,28],"ec2":13,"echo":[11,13,22,25],"ed25519":11,"effectu":3,"effet":[10,22,27,28],"effort":[4,18],"efi":[21,22],"elemiah":29,"eligos":29,"elles":[22,25,29],"embarqu":13,"emploi":17,"enabl":13,"enabled":[0,21,24],"encapsul":[12,17],"encha\u00een":18,"encod":[6,11],"encodag":[6,27,28],"encor":[4,7,11,12,13,18,27],"endfil":13,"endroit":[21,25],"enfreindr":[0,1],"eno1":10,"enregistr":[4,18],"enrobag":[10,21],"ens3":[0,6],"ensembl":[1,26],"ensuit":[10,15,25],"enter":3,"enti":[2,16],"entier":[16,21,28],"entity":20,"entour":26,"entourent":17,"entre":[5,10,12,16,17,24,25,26,27,28],"entr\u00e9":[7,15,19,27],"enverr":22,"environ":28,"envoi":[0,28],"eof":13,"erreur":[2,3,18,21,28],"error":[2,3,4,7,18,20,21,24,27],"esclav":12,"espac":[8,11,13],"etc":[10,12,13,15,21,22,24,25,28],"eth0":[0,6,13],"ethernet":13,"exact":[8,11,12,15,21,27,28],"exampl":20,"except":[3,8],"excluent":25,"exec":[13,15],"execut":[3,4,7,18,22],"exempl":[0,8,21,27],"exig":[22,28],"exigent":13,"exist":[4,7,13,14,15,16,18,20,21,25,27],"existent":[13,18,24,27,29],"exit":0,"expir":[0,21],"explicit":[0,4,6,7,11,13,16,22,24,27,28],"exploit":[26,27,28],"export":13,"expos":[0,19,21,24,26],"exposit":[0,6,27],"extern":[7,12],"extinct":[6,21],"ext\u00e9rieur":17,"ex\u00e9cu":[7,10,25,27],"ex\u00e9cut":[0,6,10,25],"ex\u00e9cutent":[3,13,21],"ezeqeel":29,"f":[13,24],"f1":13,"faibl":6,"fair":[8,9,23],"fait":[0,1,6,11,12,13,16,17,18,20,21,25,28],"fals":[0,2,7,12,13,21,22,28],"famill":15,"fatal":0,"faut":[4,14,26],"faux":28,"fa\u00e7on":[6,7,10,25],"fd":[21,22],"fdb":[12,15],"fdisk":13,"fer":[0,6],"ferm":[0,22,25,27],"fermetur":[0,25,27],"feu":21,"fichi":[0,2,3,6,10,11,12,13,21,22,25,27,28],"field":20,"fig":[0,8,12,13,17],"figur":[0,7],"figurent":[7,13],"fil":[4,13,25,27],"filtr":[17,21],"filtrag":17,"fin":13,"final":[13,18],"find":13,"first":20,"flauros":29,"fn":3,"focalor":29,"foi":[0,1,20],"fois":[4,11,13],"fonction":[0,8,9,13,14,15,16,25,26,29],"fonctionnent":[5,10,26,27],"font":14,"for":[13,29],"forc":[4,21,22,24],"fork":[0,25],"form":[6,10],"format":[13,19,27,29],"forneus":29,"found":[0,20],"fourn":[0,3,6,7,8,13,22,27],"fous":10,"fr":[10,27,28],"froid":15,"frr":[12,16],"fr\u00e9quent":22,"fstrim":13,"fu":24,"fur":26,"furc":29,"furfur":29,"futur":13,"g3e":[10,27,28],"gaap":29,"gabriel":29,"garant":12,"gard":[0,2,7,10],"gateway":[0,2,8,11,20,27],"gener":13,"get":[2,18,20,22,28],"gio":13,"git":[10,27,28],"github":28,"glasi":29,"global":11,"go":[3,28],"goeti":29,"golden":[13,14,15,16],"goroutin":[0,3,21,24,28],"gracieux":27,"grand":13,"gremory":29,"grep":13,"group":[12,15],"gssapiauthent":13,"guest":[0,6,8,11,13,22,27],"gusion":29,"gzip":[6,27],"g\u00e9ner":[20,25,28],"h":11,"haagent":29,"haaiah":29,"haamiah":29,"hahaiah":29,"haheuiah":29,"hakamiah":29,"halph":29,"hamephorash":29,"handl":[3,18],"handler":3,"haniel":29,"hariel":29,"hash":[0,2,6,11,13,21,24,27],"haziel":29,"hd":13,"hd0":13,"hd1":13,"head":13,"helper":3,"heur":27,"histor":[3,25],"hi\u00e9rarch":8,"hop":[0,7,22,27],"hor":[2,3,13,21,27],"host":[0,6,7,8,11,13,15,20,21,22,24,25,27,28],"hostnam":13,"http":[0,3,5,10,11,13,18,19,20,22,24,25,26,27,28],"hui":[13,17,19],"humain":19,"hyperviseur":[9,11,13,14,16,17,19,21,23,26,27,28],"h\u00e9berg":[15,16],"h\u00e9noch":29,"h\u00e9rit":[0,13,25],"i":[8,11,15,24,25,27],"id":[0,2,11,13,16,19,22,27],"ide":13,"idempotent":[3,4,28],"ident":[13,15],"identifi":13,"iem":29,"iezalel":29,"if":13,"ifac":10,"iface_typ":[7,8,11,18,20,21,22],"ifnam":13,"ignor":[0,2,7,21,25,28],"iid":13,"illisibl":2,"imag":[0,6,11,14,15,16,21],"img":13,"impact":27,"impliqu":28,"impl\u00e9ment":[3,7,22,28],"impl\u00e9mentent":[0,7,27],"import":13,"impos":[0,13,25,27],"in":[20,25],"inattendu":26,"inchang":28,"inclut":21,"incoh\u00e9rent":21,"inconnu":[8,11,18,21,22,25,28],"indent":[21,28],"index":[8,11],"indiff\u00e9rent":14,"indirect":8,"indispens":13,"indistingu":28,"ind\u00e9pend":17,"ind\u00e9tect":28,"inexist":[18,22],"info":[20,21,24],"init":[3,5,7,10,11,16,21,25,26,27],"initial":[3,18],"injoign":[7,22],"inond":12,"inscriptibl":21,"insomniacslk":28,"inspect":[10,21,27],"install":[9,11,12,13,25,26,28],"instanc":[0,10,11,13,16,22,24,25,27,28],"int":2,"integr":[8,10,18,28],"intel":13,"inter":10,"interfac":[3,8,10,11,12,15,17,20,25,26,27,28],"interface_ip":[0,2,7,8,11,20,22,27],"intern":[0,1,7,11,18],"internal":[3,20,27,28],"internet":[8,21],"interpret":[6,11],"interrog":[18,21,25,28],"interromp":10,"interrompu":[4,22],"interval_second":[21,24],"int\u00e9gral":[13,24,28],"invalid":[6,11,18,20,21,22,27,28],"invari":[1,8,11,13],"invers":[0,11],"invit":21,"ip":[0,2,3,7,11,12,15,20,22,27],"ip_forward":10,"ipos":29,"iptabl":[3,10,27],"ipv4":10,"is":[13,20],"iso":13,"isol":[8,12,14,15,26,27,28],"israfel":29,"istransient":3,"it":20,"jam":[0,2,3,6,7,10,11,12,22,24,25,27,28,29],"jehudiel":29,"jeliel":29,"jet":13,"jetabl":13,"jeu":4,"jj":29,"joignabl":[7,11,17,27],"jophiel":29,"jou":3,"jour":13,"journal":[0,22,25],"journalctl":[22,24,25],"journalis":3,"jq":[10,18,22],"json":[6,10,11,20,28],"jusqu":[0,18,21,24,27,28],"just":4,"kernel":27,"key":[2,3],"kilo":28,"kimar":29,"kokabiel":29,"kv":3,"kvm":[0,8,10,13,21,26,27],"l2":[0,7,22],"l3":[0,7],"label":13,"laiss":[0,15,21,28],"lanc":[0,3,10,15,25,27,28],"latest":22,"lauviah":29,"learning":[12,15],"leas":[22,25],"lecabel":29,"lectur":[3,18,21,24,27,28],"lehahiah":29,"lelahel":29,"lent":21,"lequel":[10,25,28],"leraj":29,"lesquel":[10,25],"leuviah":29,"level":[21,24],"lib":[11,13,21,22],"lien":[2,8,17,24,29],"lieu":[10,28],"lign":[6,10,24,28,29],"link":15,"linux":[3,10,27,28],"lir":[0,6,14,26],"lis":10,"lisibl":[21,28],"list":[10,20,21,22,25],"lit":[0,2,6,7,18],"livr":[14,21,26,29],"livraison":26,"lo":13,"local":[0,6,10,12,13,19,21,27,29],"local01":13,"local_ifac":[2,20],"locatair":28,"lock_passwd":13,"log":[0,6,13,22,24,25],"logg":[3,21,24],"logiciel":[17,19,27],"logiqu":[3,8,11,21],"loin":13,"long":18,"longu":10,"lorsqu":29,"ls":[21,22],"lsblk":13,"lu":[2,7,8,21,24],"lus":2,"l\u00e0":11,"mac":[2,3,12,13,15,22,25,27,28],"machin":[0,8,16,19,26,27],"macos":3,"magasin":27,"mahasiah":29,"main":[10,12,22,25,27,28],"mainten":16,"malph":29,"manifest":[10,27],"manqu":18,"manuel":[12,21,28],"mapstructur":[0,3],"marax":29,"marb":29,"marchosi":29,"marqu":[3,24],"masqu":[10,22,28],"match":13,"mat\u00e9riel":[14,17],"mauvais":[21,22],"max_w":13,"md":[0,1],"mebahel":29,"medi":13,"melahel":29,"memory":[2,11,20],"memtabl":28,"menadel":29,"mensong":21,"mention":28,"messag":[22,25],"mesur":[14,26,27],"met":[3,10,13,22],"metadat":[0,2,3,5,8,10,11,13,15,16,20,22,24,25,26,27],"metadata_port":[2,20],"metatron":29,"mettr":26,"mi":[10,15],"michael":29,"microsoft":28,"mieux":27,"migr":[21,28],"migrat":[3,4,10,15,22,27],"minimum":13,"mio":28,"mis":[7,14,17,22,27],"missing":[20,22],"mkdir":13,"mkf":13,"mkisof":13,"mm":29,"mnt":13,"mo":2,"mod":[0,2,5,8,11,13,15,16,20,22,26,27],"model":[5,9,11,19,26,27],"modif":[1,12,27],"modifi":[21,27,28],"modul":28,"moin":[12,13,17],"moment":[4,12,25,28,29],"monitor":[13,21,25],"monitor_d":21,"mono":27,"mont":13,"montag":13,"montr":[22,25,28],"mot":[0,2,6,11,13,21,24,27],"motif":8,"mount":13,"mtu":17,"mult":[6,21,28],"multicast":[12,15],"multipl":27,"murmur":29,"must":20,"my":13,"m\u00e9can":[10,12,13,15,17],"m\u00e9moir":[4,22,27],"m\u00e9ritent":15,"m\u00e9triqu":[3,26,27],"m\u00eam":[0,4,6,8,9,10,11,12,13,14,16,17,21,22,24,27,28],"n1":13,"naberius":29,"nam":[0,2,3,8,11,13,18,20,21,27],"namespac":[3,8,10,11,24,25,26,27],"nat":10,"natur":29,"nelchael":29,"net":[10,13],"net0":13,"netdev":13,"netif":[3,27],"netlink":[3,10],"netn":[0,3,6,7,8,10,11,15,21,22,25,27,28],"nettoi":[4,27],"nettoyag":[4,13],"network":[0,3,6,8,10,11,13,24,25,26,27],"networkd":13,"neuf":[6,11],"neutralis":6,"neuv":13,"new":0,"next":[0,7,22,27],"nf":10,"ni":[0,3,6,8,11,12,13,15,18,21,25,27],"nic":0,"nithaiah":29,"niveau":[3,8,17,19,21,24,26],"no":13,"nocloud":[6,13],"nographic":13,"nom":[0,6,8,11,13,16,22,25,27],"nom_du_fichier_qcow2":13,"nom_os":13,"nombr":[21,24,27],"nomm":[13,28],"nommag":19,"non":[2,6,7,13,21,22,24,27,28],"nonetwork":10,"nopackag":10,"nopasswd":13,"normal":[10,22,25],"not":[0,3,20,22,24,29],"notif":[22,24],"noup_script":10,"nouuid":13,"nouveau":[3,21,28],"nouvel":[21,28],"noverify":10,"now":13,"noyau":[10,13],"null":24,"num\u00e9ro":[15,29],"num\u00e9ros":17,"n\u00e9cessair":[3,4,10,13,15,21],"n\u00e9gat":10,"n\u0153ud":[9,10,11,12,14,26,27],"o":[10,13,27,28],"objet":[0,4,22,27],"obligatoir":[13,18],"obliqu":13,"observ":[11,21,23],"obtenu":13,"obtiennent":21,"obtient":[15,25,28],"octet":[12,17,28],"of":20,"off":15,"ok":20,"omael":29,"omettr":28,"omis":[6,21],"only":20,"openssl":13,"oper":[0,6,10,18,21,24,28],"opt":[13,24,25],"option":[0,7,10,13,15,21,27,28],"optionnel":[2,27],"op\u00e9rationnel":17,"or":20,"orchestr":[14,19,26,27],"ordonnanc":26,"ordonnanceur":27,"ordre":[0,8,11,13,14,16,17,22,25,27,28,29],"organis":1,"ori":29,"origin":10,"orob":29,"orphelin":[0,4,27],"os":[0,13],"os_dir":13,"os_disk":13,"os_fil":13,"os_link":13,"ose":29,"outil":[7,21],"outr":21,"ouvert":12,"ouvertur":21,"ouvr":[2,6,10,13,16,21,24],"ouvreur":2,"overlay":13,"ovmf":[10,21,22,27],"ovmf_cod":[21,22],"ovmf_code_path":21,"ovmf_var":[21,22],"ovmf_vars_templat":21,"o\u00f9":[11,12,13,14],"p":[10,13],"packag":27,"pag":[0,1,10,12,13,17,20],"pahaliah":29,"paimon":29,"pair":16,"paquet":[0,1,7,10,12,15,21,22,27,28],"parametr":[10,20,28],"para\u00eet":[0,7],"parc":[0,3,9,13,25,26],"parcour":[9,10,15,26],"pare":21,"parent":[11,18,20],"parl":21,"parlent":28,"part":[7,10,12,15,16,19],"partag":[6,21],"partagent":[4,10],"partent":13,"particuli":[15,16],"partiel":[0,4,18,22,27],"partit":13,"partout":3,"partprob":13,"pass":[0,2,6,10,11,12,13,15,17,18,21,22,24,25,27,28],"passag":[0,4],"passent":[0,2,8,11,12],"passerel":10,"passwd":[6,11,13],"password":[0,2,6,11,13,20,21,27],"passwordauthent":13,"path":[2,11,15,20,21],"pci":[0,8,11,13,27],"pend":[4,10,16,17,21,24],"penemu":29,"perdr":[10,25],"perdu":28,"perdus":12,"permet":[3,8,21,28,29],"permettr":13,"permiss":13,"permitrootlogin":13,"permittunnel":13,"persist":[24,28],"person":4,"personnel":13,"petit":12,"peupl":[12,15],"peut":[0,2,4,6,8,10,15,18,21,29],"peuvent":[4,8,18],"phenex":29,"physiqu":[8,10,11,12,21],"pid":[0,25],"pieg":[1,8,11,13],"pilot":[0,10,21,22,25,26,28],"ping":[10,12],"pir":[0,25],"pkg":[0,3,28],"plac":[3,7,10,11,13,14,22,26,27],"plag":[8,12,19],"plan":[3,10,11,14,16,17],"plat":[2,3],"plateform":28,"platform":3,"plein":12,"plus":[4,10,13,17,18,21,22,24,27,28],"plusieur":[8,26,27],"plut\u00f4t":[6,10,11,13,16,25,28],"poign":12,"point":[0,3,7,11,15,18,22],"pointill":12,"poll_second":21,"polling":18,"pool":[3,28],"port":[0,2,7,8,10,11,12,13,15,16,17,21,22,24,26,27,28,29],"portent":[3,13],"porteur":11,"pos":[0,7,8,10,11,12,13,15,22,24,25],"posit":27,"position":18,"post":[11,20],"postgresql":13,"poursuivr":9,"pouss":[7,25],"poweroff":13,"pratiqu":25,"prefix":[0,21,24],"premi":[9,10,14,16,17,21,25,26,27,29],"prend":[27,29],"prendr":[10,21],"prepar":[3,18],"prerouting":[0,7,22],"primair":27,"primary":[8,11,20],"principal":[10,25],"prob":[22,28],"probabl":22,"problem":22,"proc":13,"processus":[0,2,6,8,10,16,21,22,24,25,27,28],"proch":17,"prochain":29,"proc\u00e9dur":[13,15,16,21,28],"product":[0,7,10,11,15],"produir":28,"produit":[13,15],"profil":[10,27],"projet":28,"prometheus":[3,21,27],"propag":0,"proportionnel":24,"propr":[2,8,12,18,27],"protect":13,"protocol":17,"proven":13,"provision":[0,6,7,10,11,21,22],"pr\u00e9c\u00e9dent":[14,22],"pr\u00e9exist":12,"pr\u00e9existent":17,"pr\u00e9par":[10,15,17,27],"pr\u00e9requ":15,"pr\u00e9sent":[11,18,21,22,28],"pr\u00e9voir":10,"pr\u00e9vu":[12,21],"pr\u00eat":[11,18],"pubkey":2,"pubkeyauthent":13,"publi":[27,29],"public":[10,12,29],"public_ip":[2,7,22,27],"publiqu":[0,6,7,13,29],"puis":[3,10,11,18,21,24,25,27],"puisqu":[10,12,15],"puiss":14,"purson":29,"pxe":28,"p\u00e9riod":[3,21,24,27],"q35":0,"qcow2":[11,14,15,16],"qemu":[3,8,10,13,16,22,26,27],"qmp":[3,21,25],"qmp_dir":21,"quand":[0,11,13,15,16,24,25,27],"quatr":[10,11,21,25,28],"quelqu":0,"query":22,"queu":3,"quiconqu":[0,10,21],"quit":[0,21],"quoi":[4,14],"r":[10,13,18],"raccord":[7,8,13,22,26],"raccordent":17,"raccroch":11,"racin":[0,1,10,12,13,20,25],"raguel":29,"ramen":10,"ramiel":29,"rang":29,"raphael":29,"rapid":22,"rapport":[12,13],"rar":17,"rattach":[7,10],"raum":29,"raw":[10,11,13,25,27,28],"raziel":29,"ready":20,"reconna\u00eet":[0,6,11],"reconna\u00eetr":13,"reconnu":2,"reconstruct":16,"recopi":13,"recouvrent":12,"recr\u00e9":[0,6,11,16,18,21],"recr\u00e9at":[4,13,22,24],"redirect":27,"redistribu":[13,16],"redond":[0,7,16,17],"red\u00e9marr":[10,25],"red\u00e9marrag":[10,12,16,22,25,27],"ref":19,"reflector":[12,13,14,15],"refus":[2,11,25,27,28],"regard":[22,25],"regl":[6,18,24,28],"reiyel":29,"rejet":[6,11,22],"rejeu":[0,25],"rejou":[6,10,11,12,15,16,18,22,27],"rel":[12,25,26,28],"relanc":[10,25],"releas":[10,27,29],"relev":[10,25],"relir":15,"rel\u00e8vent":7,"remiel":29,"remis":16,"remont":18,"remot":15,"remov":13,"rempl":[12,29],"remplac":[0,6,10,28],"rencontr":22,"rend":[13,15,16,21,28],"render":13,"rendr":[0,6,28],"rendu":6,"renouvel":27,"repart":[6,11],"repertoire_de_telecharg":13,"repertoire_des_disqu":13,"repos":28,"reprend":0,"repris":[4,15],"requ":28,"request":20,"required":20,"requis":[10,28],"requ\u00eat":[12,22],"rescan":13,"reserv":22,"resolv":13,"resourc":20,"respect":8,"respons":20,"ressourc":[2,5,8,16,18,24,27],"rest":[0,1,4,9,10,11,12,13,14,20,21,22,25,27,28],"restart":21,"restent":[15,28],"restitu":[0,27],"restreindr":21,"restreint":27,"retenu":[13,15,28],"retir":[0,7,28],"retomb":[0,8,11,21,22,27],"retour":[11,19,21,28],"retourn":[2,3],"retournent":3,"retrouv":[4,13,29],"revanch":[0,18,21,28],"reven":10,"re\u00e7oit":[10,11,21,28],"rf":13,"rfc":[0,7,28],"rhk2":13,"rien":[0,6,10,12,21,25,28,29],"risqu":24,"rm":13,"robust":18,"rollback":[0,18,22,27],"ronov":29,"root":[10,13,27,28],"root_partit":13,"rout":[0,3,8,10,11,12,13,14,15,21,22,27,28],"routag":[7,10,11,12,16,17,26],"routeur":[14,22,28],"rpcbind":13,"rsaauthent":13,"run":[0,6,10,11,13,21,22,25,27,28],"run_d":[2,21],"running":[2,3,4,11,15,18,20,22,24,27],"r\u00e9alis":17,"r\u00e9attach":[16,22,25],"r\u00e9cent":13,"r\u00e9cuper":13,"r\u00e9dig":[12,13,15,16,17],"r\u00e9ecr":10,"r\u00e9el":[2,3,13,18,21,22],"r\u00e9f\u00e9rent":[0,1,15,17,19,21],"r\u00e9glag":21,"r\u00e9par":[10,22,24,27],"r\u00e9partit":13,"r\u00e9pertoir":21,"r\u00e9pond":[10,11,18,28],"r\u00e9pondr":[0,25,28],"r\u00e9pons":[11,18,22,24,28],"r\u00e9seau":[3,4,5,8,10,11,12,13,14,15,17,18,21,22,24,26,27,28],"r\u00e9serv":[7,10,12,22,25,28],"r\u00e9sidu":[21,25,28],"r\u00e9siduel":[4,28],"r\u00e9solu":[7,11,13],"r\u00e9sultat":13,"r\u00e9tractent":13,"r\u00e9uss":[3,10,18],"r\u00e9utilis":[6,8,13,29],"r\u00e9\u00e9crir":0,"r\u00e9\u00e9valu":[0,13],"r\u00f4l":[3,10,12,13,25,26],"sabnock":29,"sach":15,"sallos":29,"samigin":29,"samsapeel":29,"samyaz":29,"san":[0,3,6,7,11,13,15,18,21,22,24,25,27,28,29],"sandalphon":29,"sariel":29,"sauf":[0,7,28],"savoir":[10,13,15,25],"schem":[1,8],"scop":[0,25],"script":[10,12,13,21,25,27,28],"scsi":[0,8,13],"scsi0":13,"sda":[2,13],"sdb":13,"sdx":[0,8,11],"seabios":2,"second":[10,13,29],"secour":10,"section":[0,11,14],"seedfrom":13,"seer":29,"seheiah":29,"selaphiel":29,"selinux":13,"selon":[8,22],"sen":[12,17,21,25],"sensibl":13,"ser":[11,13,21,25,28],"serial":[11,13,21,25],"serial_d":21,"sert":[0,6,7,13,21,28],"serv":[0,3,11,13,20,21,25,27,28],"served":[22,28],"serveur":[0,2,3,6,8,10,11,13,15,22,27,28],"servic":[6,10,13,16,17,23,26,27],"serviceip":0,"session":[10,13,15,16],"set":[0,2,13,22],"setting":13,"seul":[0,2,3,8,10,11,12,13,15,16,18,19,21,24,25,27,28],"sf":18,"sh":[10,12,15,25,27,28],"sha256sum":[10,27],"shar":[21,22],"shax":29,"shem":29,"show":15,"si":[0,2,3,7,8,10,13,15,22,25,27],"signal":[22,24,27,28],"signatur":[0,13],"signif":[4,10,18,22],"silenc":[0,21,27],"silenci":[7,21,25,28],"simpl":[4,28],"sinon":[4,7,8,12,27],"sit":17,"sitael":29,"sitr":29,"six":27,"siz":13,"sleep":[13,18],"slog":[3,24],"slot":[8,11,27],"smp":13,"sn":[8,11,18],"sn000001":[24,25],"socat":[11,22,25],"sock":[11,13,22,25,28],"socket":[0,3,13,21,28],"somm":13,"sond":22,"sort":[0,7,13],"sourc":[2,8,13,20,21],"sous":[0,2,6,10,12,13,16,22,25,27,28],"souvent":[0,18],"sphinx":28,"ssh":[10,11,13],"ssh_authorized_key":13,"sshd_config":13,"sshkey":[2,6,11,20,27],"stabl":[18,22,27],"stad":26,"stal":22,"start":20,"stat":[2,3,11,18,20,22,25,28],"statefil":28,"stateless":[10,12],"statiqu":[7,12,25,28],"status":[10,20,22,25],"statut":20,"stdio":13,"stock":[0,2,27],"stockag":[1,8],"stol":29,"stop":[20,25],"stoppabl":20,"stopped":20,"storag":[11,15,20],"strict":[8,24],"string":20,"structur":[2,24],"subnet":[0,2,3,4,5,7,9,10,14,15,16,18,20,21,22,24,25,26,27,28],"subnetid":2,"subsist":24,"subsistent":22,"sudo":13,"suffis":9,"suffisent":21,"suit":[6,13,15,21],"suiv":[0,11,13,15,22,25,27],"suivent":8,"suivr":28,"sujet":25,"suppl\u00e9mentair":[8,10,11,13],"supported":3,"suppos":[11,13,21,28],"suppress":[0,3,11,18,22,25,27,28],"supprim":[0,4,6,8,13,21,22,25,28],"sup\u00e9rieur":[19,26],"surprend":18,"surv":[10,12,25],"surviv":22,"survivent":[16,25,27],"sy":13,"sympt\u00f4m":[12,22],"synchron":[3,18],"syonad":[6,10,11,13,27,28],"syonad_":3,"syonad_subnets_total":24,"syonad_vms_total":24,"syonad_vpcs_total":24,"system":[4,10,13,18,21,24,27],"system_info":13,"systemctl":[10,13,21,22,25],"systemd":[0,3,6,10,23,24,27,28],"s\u00e9lect":27,"s\u00e9par":26,"s\u00e9quenc":10,"s\u00e9rialis":2,"tabl":[7,10,12,15],"tableau":[8,11],"tabul":[21,28],"tag":[0,3,10,29],"tagu":29,"tail":[22,24],"taill":[12,13],"tamiel":29,"tant":[10,12,15,16,29],"tap":[0,3,8,11,13,22,24,25],"tap0":13,"tap_id":2,"tard":27,"techniqu":4,"tel":[0,6,15,22,27],"temp":[11,13,16],"templat":[0,3,6,22],"ten":29,"tentat":4,"termin":[4,11],"terminal":[4,18],"terminent":17,"terrain":17,"test":[3,16,28],"the":[13,22],"this":3,"tick":[22,24],"tient":12,"tim":13,"timeout":[0,13,18],"timeout_second":[0,18,21],"tir":29,"tl":12,"tmp":13,"tmpf":[10,12,28],"tmpl":[0,6],"to":[8,19],"toler":21,"topolog":14,"total":[10,26],"touch":[0,3,11],"toujour":[2,7,18,24],"tourn":[15,16,21,23,24,25,28],"tournent":26,"tous":[0,3,4,7,8,11,17,21,22],"tout":[0,2,3,4,6,7,9,10,11,12,13,14,15,18,21,22,27,28],"tr":[11,13],"tradit":29,"traduit":[4,8,21],"trafic":[0,7,10,12],"trait":[0,4,7,10,12,16,18,21],"tram":[0,7,22],"transfert":[12,15],"transit":[18,21],"transitoir":[0,18,22,25,27],"transm":27,"transmis":6,"travail":[3,13,18,27],"travers":[0,7,10,12,22],"triabl":29,"trois":[0,7,8,17,18,21,27],"trompeur":12,"tronqu":28,"trouv":[13,22],"trouvent":12,"tru":[2,7,11,13,20,21,22,24],"tunnel":[7,12,16,17],"turel":29,"tutoriel":11,"two":[0,6,10,11,19,21,22,24,25,27,28],"typ":[8,11,13,18,20,27],"t\u00e9l\u00e9charg":[10,13,27],"t\u00eat":13,"u":[10,22,24,25],"ubuntu":[13,21,22],"udp":[12,17,28],"uefi":[2,11,20,21,27],"uefi_vars_d":21,"unifi":27,"uniform":18,"uniqu":[2,10,13,20,21,28],"unit":[0,8,10,21,22,24,27,28],"unix":[3,11,13,21,22,25,28],"unknown":20,"unmap":13,"unprocess":20,"unspecified":3,"until":18,"uplink":[10,12,15],"uriel":29,"url":13,"url_du_qcow2_fournisseur":13,"usag":[6,12,28],"usedn":13,"user":[0,2,6,11,13,15,16],"user_dat":[6,11,20,27],"usr":[21,22],"usurp":28,"util":[13,24],"utilis":[10,12,13,15,16,22,24,25],"utilisent":6,"uuid":13,"uvall":29,"v":13,"val":16,"valabl":[15,28],"valac":29,"valefor":29,"valeur":[2,3,8,10,11,13,21,24,28],"valid":[3,7,8,9,12,18,19,27],"vapul":29,"var":[11,13,21,22,24,25],"vari":13,"variabl":[0,21,27],"vasariah":29,"vassago":29,"vaut":[0,6,11,13,22,27],"vda":[2,11,13],"vdx":[0,8,11],"vehuiah":29,"veilleur":29,"ven":26,"vendor":[0,2,6],"vepar":29,"ver":[0,8,10,11,13,15,16,17,21,27,29],"verb":22,"verbatim":[0,6,27],"verr":[0,25],"verrou":28,"verrouill":[6,27],"version":[13,15,17,21,26,27,28],"veth":[3,12,17],"veut":24,"vi":[2,3,5,18,24,26,27],"vid":[0,6,10,11,12,15,21,27,28,29],"viendront":[14,19],"viennent":17,"vient":[0,6,8,13],"vin":29,"vip":[0,3,21],"virtio":[0,8,13],"virtualis":26,"virtuel":[13,16,26,27],"vit":[7,11,25],"vlan":7,"vm":[2,3,4,5,6,9,10,12,14,15,18,20,21,24,26,27,28],"vni":[12,15],"vocabulair":4,"voient":8,"voir":[8,10,11,12,13,15,18,19,21,22,25],"voisin":[12,15],"voit":[10,12,13,22],"volontair":[13,21],"volum":[11,13,24],"volumin":12,"voulu":24,"vp":[8,11,24,25],"vpc":[0,2,3,4,5,6,7,9,10,12,14,15,18,20,21,22,24,25,26,27,28],"vrai":22,"vu":[1,8,13],"vxlan":[2,3,10,11,12,15,17,19,20,26,27],"vxlan_id":[2,7,11,12,20,22],"v\u00e9rif":[3,10,13,15,21,22,24,27],"v\u00e9rifi":[12,13,18,21,22,27],"warn":[21,24],"watchdog":[0,3,10,22,25,27,28],"web":[11,24,25],"webhook":18,"work":[3,13,21],"work_disk":13,"worker":[0,4,25,27],"workflow":28,"wrapp":3,"wrapper":3,"x":[3,11],"x11forwarding":13,"x86":10,"x86_64":13,"xf":13,"yaml":[0,3,20,21],"ye":13,"yehuiah":29,"yeiayel":29,"yerathel":29,"yml":[10,11,21,24,25,28],"yomiel":29,"yum":13,"zadkiel":29,"zagan":29,"zaphkiel":29,"zepar":29,"zero":13,"z\u00e9ro":16,"\u00c0":[12,13,15,16,17,21,26],"\u00e9cart":[0,1,20,22,24,25,27,28],"\u00e9chapp":6,"\u00e9chec":[0,4,18,22,27],"\u00e9chou":[0,3,4,7,10,15,18,21,22,27,28],"\u00e9chouent":12,"\u00e9cout":[0,21,27,28],"\u00e9cras":13,"\u00e9crit":[2,3,6,10,13,16,18,22,25,28],"\u00e9critur":[3,28],"\u00e9crivain":[0,25,27],"\u00e9gal":13,"\u00e9gar":21,"\u00e9larg":0,"\u00e9l\u00e9ment":[5,17,26],"\u00e9met":28,"\u00e9mettr":[4,22],"\u00e9mis":[27,28],"\u00e9numer":[2,3,13],"\u00e9quip":17,"\u00e9quivalent":15,"\u00e9tabl":[15,16],"\u00e9tap":11,"\u00e9tat":[0,2,3,6,7,15,16,18,21,22,24,25,26,27,28],"\u00e9teint":[13,21],"\u00e9tend":11,"\u00e9ven":16,"\u00e9vit":[6,12,21],"\u00eatre":[0,2,4,8,10,12,13,14,15,16,17,18,21,22,27,29]},"titles":["Invariants et pi\u00e8ges","Architecture","Sch\u00e9ma des cl\u00e9s","Vue d\u2019ensemble","Cycle de vie des ressources","Concepts","Metadata et cloud-init","Modes r\u00e9seau","VPC, subnet et VM","D\u00e9marrage","Installation d\u2019un hyperviseur","Premier VPC, premier subnet, premi\u00e8re VM","Architecture du cluster","Construction de l\u2019image qcow2","D\u00e9ploiement d\u2019un cluster","Premier hyperviseur","VM route reflector","Routeurs","Mod\u00e8le asynchrone et codes de retour","API de l\u2019agent","R\u00e9f\u00e9rence","Configuration","Diagnostic","Exploitation","Observabilit\u00e9","Services systemd","two","Michael","Bael","Versions"],"titleterms":{"Ce":[8,10,11,12],"L":22,"La":[11,22],"Le":[11,13,22],"Les":[13,18],"Par":26,"Pas":4,"a":22,"accept":0,"adress":22,"adressag":12,"agent":[0,4,12,19,22,25],"ajout":3,"annonc":7,"api":19,"appliqu":22,"apres":22,"architectur":[1,12],"arr\u00eat":[0,22,25],"asynchron":18,"attendr":18,"autr":21,"backend":21,"bael":28,"bas":[21,22,24],"bascul":21,"binair":10,"bridg":7,"brutal":22,"champ":6,"chang":28,"cha\u00een":6,"cibl":13,"cloud":[0,6,13,22],"clust":[12,14,17],"cl\u00e9":2,"cod":18,"colon":29,"command":21,"commenc":26,"concept":5,"configur":[0,6,21],"connu":[0,27,28],"construct":13,"construit":11,"contraint":17,"contr\u00f4l":[12,15],"correct":[18,28],"correspond":21,"cycl":[3,4],"dat":22,"default_rout":7,"delet":22,"depuis":28,"deux":18,"dhcp":[21,25],"diagnostic":22,"disqu":13,"diverg":22,"dnsmasq":25,"docu":6,"don":[15,21],"d\u00e9faut":7,"d\u00e9j\u00e0":12,"d\u00e9marr":22,"d\u00e9marrag":9,"d\u00e9ploi":[10,14],"ensembl":3,"error":22,"exploit":23,"ex\u00e9cu":21,"fait":10,"fonctionnal":[27,28],"fournisseur":13,"frr":15,"gateway":7,"host":10,"hyperviseur":[10,12,15],"i":10,"id":6,"idempotent":18,"imag":13,"impos":17,"indispens":7,"init":[0,6,13,22],"inspect":24,"install":[10,15,27],"instanc":6,"integr":25,"interfac":21,"intern":28,"invari":0,"jour":[10,25,28],"journal":24,"journalis":21,"just":22,"lanc":13,"limit":[27,28],"metadat":[6,7,21],"michael":27,"mis":[10,25,28],"mod":7,"model":18,"mtu":12,"m\u00e9triqu":24,"nettoi":13,"nom":29,"nommag":8,"n\u00e9cessair":12,"n\u0153ud":15,"observ":24,"o\u00f9":[8,26],"paquet":3,"part":22,"personnalis":13,"pieg":0,"plac":12,"plan":[12,15],"plateform":3,"point":[13,16],"pourquoi":[7,12],"premi":[11,15],"princip":13,"product":6,"prometheus":24,"pr\u00e9requ":10,"puis":13,"p\u00e9rimetr":[27,28],"qcow2":13,"qemu":[0,21,25],"red\u00e9marr":22,"red\u00e9marrag":4,"reflector":16,"regl":2,"renseign":29,"renvoi":22,"requ\u00eat":[3,18],"ressourc":[3,4,22],"rest":17,"retour":18,"rien":22,"rollback":4,"rout":[7,16],"routeur":17,"r\u00e9f\u00e9rent":20,"r\u00e9seau":[0,6,7],"san":[10,12],"schem":2,"seed":13,"serv":[6,22],"serveur":[7,21,25],"servic":25,"socket":25,"stock":8,"stub":3,"subnet":[8,11],"suppos":12,"suppress":4,"supprim":11,"system":22,"systemd":25,"s\u00e9cur":[0,6],"temp":18,"topolog":12,"transitoir":4,"two":26,"typ":3,"uefi":22,"unit":25,"user":22,"valid":15,"variabl":13,"ver":7,"version":29,"vi":4,"vid":22,"vigil":[13,16],"vm":[0,7,8,11,13,16,22,25],"vpc":[8,11],"vu":3,"vxlan":7,"v\u00e9rifi":[10,11,15],"watchdog":[21,24],"\u00e9crir":13,"\u00e9tap":[13,14],"\u00e9tat":[4,10,12],"\u00e9teindr":13}})
\ No newline at end of file
+Search.setIndex({"alltitles":{"1. Le VPC":[[11,"le-vpc"]],"2. Le subnet":[[11,"le-subnet"]],"3. La VM":[[11,"la-vm"]],"4. V\u00e9rifier":[[11,"verifier"]],"5. Supprimer":[[11,"supprimer"]],"API de l\u2019agent":[[21,null]],"Adressage":[[12,"adressage"],[16,"adressage"],[17,"adressage"]],"Ajouter un type de ressource":[[3,"ajouter-un-type-de-ressource"]],"Architecture":[[1,null]],"Architecture du cluster":[[12,null]],"Arr\u00eat de l\u2019agent":[[0,"arret-de-l-agent"],[27,"arret-de-l-agent"]],"Articulation avec l\u2019agent":[[15,"articulation-avec-l-agent"]],"Attendre correctement":[[20,"attendre-correctement"]],"Backend DHCP":[[23,"backend-dhcp"]],"Bael":[[30,null]],"Bascule d\u2019un backend \u00e0 l\u2019autre":[[23,"bascule-d-un-backend-a-l-autre"]],"Base de donn\u00e9es":[[23,"base-de-donnees"]],"Binaires install\u00e9s":[[10,"binaires-installes"]],"Ce que fait -i":[[10,"ce-que-fait-i"]],"Ce que l\u2019agent suppose d\u00e9j\u00e0 en place":[[12,"ce-que-l-agent-suppose-deja-en-place"]],"Ce que l\u2019on construit":[[11,"ce-que-l-on-construit"]],"Ce qui est stock\u00e9, et o\u00f9":[[8,"ce-qui-est-stocke-et-ou"]],"Champs de metadata":[[6,"champs-de-metadata"]],"Changements internes":[[30,"changements-internes"]],"Cha\u00eene de production":[[6,"chaine-de-production"]],"Codes de retour":[[20,"codes-de-retour"]],"Commandes":[[19,"commandes"]],"Concepts":[[5,null]],"Configuration":[[0,"configuration"],[23,null]],"Configuration de FRR":[[15,"configuration-de-frr"],[16,"configuration-de-frr"],[17,"configuration-de-frr"]],"Configuration r\u00e9seau":[[6,"configuration-reseau"]],"Construction de l\u2019image qcow2":[[13,null]],"Contraintes impos\u00e9es par le reste du cluster":[[17,"contraintes-imposees-par-le-reste-du-cluster"]],"Correctifs":[[30,"correctifs"]],"Correspondance des interfaces":[[23,"correspondance-des-interfaces"]],"Cycle de vie des ressources":[[4,null]],"Cycle d\u2019une requ\u00eate":[[3,"cycle-d-une-requete"]],"Diagnostic":[[19,"diagnostic"],[24,null]],"Documents servis":[[6,"documents-servis"]],"D\u00e9marrage":[[9,null]],"D\u00e9ploiement":[[10,"deploiement"]],"D\u00e9ploiement d\u2019un cluster":[[14,null]],"D\u00e9veloppement":[[18,null]],"Exploitation":[[25,null]],"Ex\u00e9cution des commandes":[[23,"execution-des-commandes"]],"Facturation":[[19,"facturation"]],"Fichiers locaux":[[19,"fichiers-locaux"]],"Fonctionnalit\u00e9s":[[29,"fonctionnalites"],[30,"fonctionnalites"]],"Host sans \u00e9tat":[[10,"host-sans-etat"]],"Hyperviseurs sans \u00e9tat":[[12,"hyperviseurs-sans-etat"]],"Idempotence":[[20,"idempotence"]],"Inspection de la base":[[26,"inspection-de-la-base"]],"Installation":[[15,"installation"],[29,"installation"]],"Installation d\u2019un hyperviseur":[[10,null]],"Invariants et pi\u00e8ges":[[0,null]],"Journalisation":[[23,"journalisation"]],"Journaux":[[26,"journaux"]],"La VM a une adresse mais cloud-init n\u2019applique rien":[[24,"la-vm-a-une-adresse-mais-cloud-init-n-applique-rien"]],"La VM d\u00e9marre mais n\u2019a pas d\u2019adresse":[[24,"la-vm-demarre-mais-n-a-pas-d-adresse"]],"La VM ne d\u00e9marre pas (UEFI)":[[24,"la-vm-ne-demarre-pas-uefi"]],"La base et le syst\u00e8me ont diverg\u00e9":[[24,"la-base-et-le-systeme-ont-diverge"]],"La ressource part en error juste apr\u00e8s le 202":[[24,"la-ressource-part-en-error-juste-apres-le-202"]],"Lab de test multi-n\u0153ud":[[19,null]],"Lancement des VM":[[19,"lancement-des-vm"]],"Le DELETE renvoie 409":[[24,"le-delete-renvoie-409"]],"Le serveur de lab":[[19,"le-serveur-de-lab"]],"Le user-data est servi vide":[[24,"le-user-data-est-servi-vide"]],"Les deux temps d\u2019une requ\u00eate":[[20,"les-deux-temps-d-une-requete"]],"L\u2019agent ne red\u00e9marre pas apr\u00e8s un arr\u00eat brutal":[[24,"l-agent-ne-redemarre-pas-apres-un-arret-brutal"]],"MTU":[[12,"mtu"]],"Metadata et QEMU":[[23,"metadata-et-qemu"]],"Metadata et cloud-init":[[6,null]],"Michael":[[29,null]],"Mise \u00e0 jour":[[10,"mise-a-jour"],[27,"mise-a-jour"]],"Mise \u00e0 jour depuis la 0.1.0":[[30,"mise-a-jour-depuis-la-0-1-0"]],"Modes r\u00e9seau":[[7,null]],"Mod\u00e8le asynchrone et codes de retour":[[20,null]],"M\u00e9triques Prometheus":[[26,"metriques-prometheus"]],"Nommage":[[8,"nommage"]],"Noms de version":[[31,"noms-de-version"]],"Observabilit\u00e9":[[26,null]],"Paquets":[[3,"paquets"]],"Par o\u00f9 commencer":[[28,"par-ou-commencer"]],"Pas de rollback":[[4,"pas-de-rollback"]],"Plan de contr\u00f4le \u2014 FRR":[[15,"plan-de-controle-frr"]],"Points de vigilance":[[13,"points-de-vigilance"],[16,"points-de-vigilance"]],"Pourquoi la route /32 vers le serveur de metadata est indispensable":[[7,"pourquoi-la-route-32-vers-le-serveur-de-metadata-est-indispensable"]],"Pourquoi un plan de contr\u00f4le est n\u00e9cessaire":[[12,"pourquoi-un-plan-de-controle-est-necessaire"]],"Premier VPC, premier subnet, premi\u00e8re VM":[[11,null]],"Premier hyperviseur":[[15,null]],"Principe":[[13,"principe"]],"Pr\u00e9requis":[[10,"prerequis"]],"Pr\u00e9requis c\u00f4t\u00e9 Scaleway":[[19,"prerequis-cote-scaleway"]],"P\u00e9rim\u00e8tre et limites connues":[[29,"perimetre-et-limites-connues"],[30,"perimetre-et-limites-connues"]],"QEMU et VM":[[0,"qemu-et-vm"]],"QEMU n\u2019est pas une unit":[[27,"qemu-n-est-pas-une-unit"]],"Rendu des VM":[[19,"rendu-des-vm"]],"Renseignement des colonnes":[[31,"renseignement-des-colonnes"]],"Route par d\u00e9faut : default_route et gateway":[[7,"route-par-defaut-default-route-et-gateway"]],"Routes annonc\u00e9es aux VM":[[7,"routes-annoncees-aux-vm"]],"Routeur de cluster":[[17,"routeur-de-cluster"]],"Routeurs":[[17,null]],"R\u00e8gles":[[2,"regles"]],"R\u00e9f\u00e9rence":[[22,null]],"R\u00e9seau":[[0,"reseau"]],"R\u00f4les":[[19,"roles"]],"Sch\u00e9ma des cl\u00e9s":[[2,null]],"Sc\u00e9narios":[[19,"scenarios"]],"Serveur DHCP int\u00e9gr\u00e9":[[27,"serveur-dhcp-integre"]],"Serveurs":[[23,"serveurs"]],"Services systemd":[[27,null]],"Sockets par VM":[[27,"sockets-par-vm"]],"Stubs de plateforme":[[3,"stubs-de-plateforme"]],"Subnet":[[8,"subnet"]],"Suppression":[[4,"suppression"]],"S\u00e9curit\u00e9":[[6,"securite"],[19,"securite"]],"S\u00e9curit\u00e9 connue et accept\u00e9e":[[0,"securite-connue-et-acceptee"]],"Tests":[[19,"tests"]],"Topologie":[[12,"topologie"],[19,"topologie"]],"VM":[[8,"vm"]],"VM route reflector":[[16,null]],"VPC":[[8,"vpc"]],"VPC, subnet et VM":[[8,null]],"Valider le n\u0153ud":[[15,"valider-le-noeud"]],"Variables":[[13,"variables"]],"Versions":[[31,null]],"Vue d\u2019ensemble":[[3,null]],"V\u00e9rifier le plan de donn\u00e9es":[[15,"verifier-le-plan-de-donnees"]],"V\u00e9rifier l\u2019installation":[[10,"verifier-l-installation"]],"V\u00e9rifi\u00e9 sur de vraies VM":[[19,"verifie-sur-de-vraies-vm"]],"V\u00e9rifi\u00e9 sur le serveur de lab":[[19,"verifie-sur-le-serveur-de-lab"]],"Watchdog":[[23,"watchdog"],[26,"watchdog"]],"bridge":[[7,"bridge"]],"cloud-init":[[0,"cloud-init"]],"dnsmasq":[[27,"dnsmasq"]],"instance-id":[[6,"instance-id"]],"two":[[28,null]],"vxlan":[[7,"vxlan"]],"\u00c9crire un sc\u00e9nario":[[19,"ecrire-un-scenario"]],"\u00c9tape 1 \u2014 Le seed cloud-init de la VM de construction":[[13,"etape-1-le-seed-cloud-init-de-la-vm-de-construction"]],"\u00c9tape 2 \u2014 Les disques":[[13,"etape-2-les-disques"]],"\u00c9tape 3 \u2014 Lancer la VM de construction":[[13,"etape-3-lancer-la-vm-de-construction"]],"\u00c9tape 4 \u2014 \u00c9crire l\u2019image du fournisseur sur le disque cible":[[13,"etape-4-ecrire-l-image-du-fournisseur-sur-le-disque-cible"]],"\u00c9tape 5 \u2014 Personnaliser l\u2019image":[[13,"etape-5-personnaliser-l-image"]],"\u00c9tape 6 \u2014 Nettoyer, puis \u00e9teindre":[[13,"etape-6-nettoyer-puis-eteindre"]],"\u00c9tapes":[[14,"etapes"]],"\u00c9tats transitoires au red\u00e9marrage de l\u2019agent":[[4,"etats-transitoires-au-redemarrage-de-l-agent"]]},"docnames":["architecture/contraintes","architecture/index","architecture/stockage","architecture/vue-densemble","concepts/cycle-de-vie","concepts/index","concepts/metadata-cloud-init","concepts/modes-reseau","concepts/vpc-subnet-vm","demarrage/index","demarrage/installation","demarrage/premier-vpc","deploiement/architecture-cluster","deploiement/image-qcow2","deploiement/index","deploiement/premier-hyperviseur","deploiement/route-reflector","deploiement/routeurs","developpement/index","developpement/lab","exploitation/api-agent/asynchronisme","exploitation/api-agent/index","exploitation/api-agent/reference","exploitation/configuration","exploitation/diagnostic","exploitation/index","exploitation/observabilite","exploitation/services","index","versions/0.1.0","versions/0.2.0","versions/index"],"envversion":{"sphinx":66,"sphinx.domains.c":3,"sphinx.domains.changeset":1,"sphinx.domains.citation":1,"sphinx.domains.cpp":9,"sphinx.domains.index":1,"sphinx.domains.javascript":3,"sphinx.domains.math":2,"sphinx.domains.python":4,"sphinx.domains.rst":2,"sphinx.domains.std":2},"filenames":["architecture/contraintes.rst","architecture/index.rst","architecture/stockage.rst","architecture/vue-densemble.rst","concepts/cycle-de-vie.rst","concepts/index.rst","concepts/metadata-cloud-init.rst","concepts/modes-reseau.rst","concepts/vpc-subnet-vm.rst","demarrage/index.rst","demarrage/installation.rst","demarrage/premier-vpc.rst","deploiement/architecture-cluster.rst","deploiement/image-qcow2.rst","deploiement/index.rst","deploiement/premier-hyperviseur.rst","deploiement/route-reflector.rst","deploiement/routeurs.rst","developpement/index.rst","developpement/lab.rst","exploitation/api-agent/asynchronisme.rst","exploitation/api-agent/index.rst","exploitation/api-agent/reference.rst","exploitation/configuration.rst","exploitation/diagnostic.rst","exploitation/index.rst","exploitation/observabilite.rst","exploitation/services.rst","index.rst","versions/0.1.0.md","versions/0.2.0.md","versions/index.rst"],"indexentries":{},"objects":{"":[[22,0,1,"get--subnets","/subnets"],[22,1,1,"post--subnets","/subnets"],[22,2,1,"delete--subnets-name","/subnets/{name}"],[22,0,1,"get--subnets-name","/subnets/{name}"],[22,0,1,"get--vms","/vms"],[22,1,1,"post--vms","/vms"],[22,2,1,"delete--vms-name","/vms/{name}"],[22,0,1,"get--vms-name","/vms/{name}"],[22,0,1,"get--vpcs","/vpcs"],[22,1,1,"post--vpcs","/vpcs"],[22,2,1,"delete--vpcs-name","/vpcs/{name}"],[22,0,1,"get--vpcs-name","/vpcs/{name}"]]},"objnames":{"0":["http","get","HTTP get"],"1":["http","post","HTTP post"],"2":["http","delete","HTTP delete"]},"objtypes":{"0":"http:get","1":"http:post","2":"http:delete"},"terms":{"05d2":19,"08f1":19,"0a":[19,24],"0b":19,"0de8":19,"0rc002":19,"0rc003":[15,19],"0x03":[0,8,11],"0x1e":0,"0x1f":0,"10g":13,"1fd5":19,"20_us":13,"20m":19,"20s":19,"25m":19,"2ecc1e6":19,"2hv":19,"2i":19,"30cae48380a4":19,"3d99":19,"3ed1":19,"45ad":19,"48c0":19,"4a56":19,"4c":19,"4d":19,"4dbf":19,"50g":13,"51930fb602f8":19,"60ghz":19,"68ac":19,"74de":19,"7fda":19,"80met":13,"83640d93":19,"8af3":19,"8bb3":19,"8ddb":19,"93857eee5957":19,"95a8":19,"95f5":19,"98e9":19,"99_metadat":13,"9ae7":19,"9c9f":19,"AS":[15,16,17],"Au":[4,16,19],"Avec":[0,7,13,16,19],"C":[3,4,6,8,12,13,15,17,19,20,21,22,23,28,31],"Ce":[13,15,16,17,19,23,24],"Ces":[0,1,15,16],"Cet":14,"Cette":[0,8,10,13,14,19,21,22],"D":[0,3,14,15],"DE":19,"Elle":[4,7,11,16,19,21,23,26],"Elles":[13,19],"En":[0,4,11,17,19,26],"Il":[0,8,10,11,12,13,15,16,19,20,23,24,26,27,28,30],"Ils":[0,19],"J":13,"L":[0,1,2,6,8,10,11,12,13,14,15,16,17,19,21,23,26,27,28,29,30],"La":[0,4,7,10,13,15,16,17,19,21,23,29,30,31],"Le":[0,2,5,6,7,8,9,10,12,14,15,16,17,20,23,26,27,29,30,31],"Les":[0,2,3,6,7,8,10,11,16,17,19,23,24,26,27,29],"M":19,"N":19,"Ne":[0,6,7,10,19,20,23,26],"Pas":[2,7,15,19,29,30],"Pour":[6,9,11,19,23,24,30],"Quelle":24,"S":[19,30],"Sa":[17,19],"Son":13,"Sur":[12,19,23,24],"Un":[0,2,4,6,7,8,10,11,19,20,23,24,26,27,29,30],"Une":[0,2,4,7,8,10,13,15,19,23,24,26,31],"Y":19,"_":[23,24,27,30],"_linux":3,"_oth":3,"_seed":13,"a":[0,4,10,12,13,14,15,16,17,19,20,21,22,23,27,29,30,31],"a0b8":19,"a198":19,"a832":19,"a90f":19,"aaa":[11,31],"ab19":19,"abord":[13,19,24],"about":[4,19,26],"absenc":[12,16,19],"absent":[0,2,6,8,20,23,24,29],"accel":19,"accept":[4,6,7,11,12,16,17,19,20,29],"accepted":22,"acces":[10,13,19],"accessibl":19,"achaiah":31,"actif":[13,19],"action":[10,15,26,30],"activ":[10,13,15,16,17,19,23,26,27,29],"activat":[15,16,17,19],"actuel":[13,19],"add":16,"additionnel":0,"address":[15,16,17,19,23],"admin":[0,8,11,23],"admin_br":[26,27],"administr":[0,17,19,23,26,28,29],"adress":[3,8,10,11,12,13,15,16,17,19,23,27,30],"adressag":[3,8,11],"adressent":1,"advertis":15,"affich":[10,19],"agar":31,"agent":[1,2,3,5,6,7,8,10,11,13,14,16,17,19,20,22,23,25,26,28,29,30],"agit":[16,19],"agrand":19,"agreg":26,"agr\u00e8gent":17,"ailleur":[3,19,24,31],"aim":31,"ains":19,"ajout":[6,12,13,15,17,19],"ajoutent":30,"al":19,"aladiah":31,"alert":26,"align":30,"aliment":26,"all":[13,15,19,22],"alloc":[12,31],"alor":[0,6,15,16,19,23,30],"already":22,"altern":31,"ambigu":31,"amd64":19,"amdusi":31,"amon":31,"amont":[12,23,24],"amorc":13,"amor\u00e7ag":[16,29],"amy":31,"ananel":31,"ancien":4,"and":22,"andras":31,"andrealphus":31,"andromalius":31,"ange":31,"aniel":31,"annonc":[8,11,15,16,17,19,23,30],"anomal":[26,27],"anti":30,"api":[0,3,5,7,8,10,11,13,17,19,22,23,25,26,27,28,29],"apparaissent":27,"appara\u00eet":[12,15,19],"apparent":[7,19],"apparten":[8,11,29],"appartient":[8,27,30],"appel":[0,3,4,6,7,8,19,20,21,27,29,30],"appliqu":[0,6,11,13,15,19,22],"appliquent":23,"apport":23,"apprend":17,"apprentissag":[12,15],"appris":[15,16,19],"appui":7,"apres":[4,10,15,19,20,27,30],"ar":31,"arakiel":31,"archang":31,"architectur":[11,14,15,17,19,23,28,30],"arg":19,"argument":19,"arist":19,"armaros":31,"arme":19,"arm\u00e9":10,"arp":19,"arrier":[10,23,30],"arriv":19,"arrivent":19,"arr\u00eat":[4,10,16,19,23,29,30],"artefact":[10,13,19],"asmoday":31,"asn":[17,19],"asset":29,"associ":26,"assum":[0,10,13,19],"astaroth":31,"asynchron":[3,11,21,29],"atom":30,"atteint":[0,10,23,24],"attend":[11,12,13,19],"attendent":[20,23],"attendr":24,"attendu":[6,16,17,24],"attent":[4,11,19,20,23],"attribu":19,"aucun":[0,6,10,11,13,15,16,17,18,19,21,23,24,27,29,30,31],"aug":13,"augment":19,"augtool":13,"aujourd":[13,17,19,21],"auquel":[10,19],"aur":24,"auss":[8,17,19],"aussit\u00f4t":16,"aut":19,"auth":19,"authentif":[0,10,17,19,21,23,29,30],"authentifi":19,"authorized_key":19,"auto":[10,19,30],"autom":19,"automat":[4,19,29],"autoris":[4,6,19,20,24,29],"autr":[0,7,11,12,14,15,16,17,19,21,30],"auxquel":19,"avail":19,"avant":[0,4,6,7,10,11,13,14,15,17,19,21,23,24,27,28,30],"avert":10,"avoir":[4,19,20,27,30],"b":[10,13,19],"b212x":19,"b2b2":19,"b3":19,"backend":[3,8,10,19,24,26,27,30],"backing":13,"bad":22,"badg":[0,2,3,6,23,24,26,27,30],"bael":31,"bail":[19,29],"balam":31,"bann":13,"barachiel":31,"baraqiel":31,"barbatos":31,"baremetal":19,"barr":[13,19],"barri":17,"bas":[0,2,3,6,8,10,13,17,19,20,27,29,30],"bascul":[4,10,17,24,29,30],"base64":[6,11,20,24,29],"bash":[10,19,29,30],"bash_history":13,"batariel":31,"bathin":31,"baux":[27,29,30],"be":22,"be11":19,"beleth":31,"belial":31,"berith":31,"besoin":[13,14,19],"best":[4,20],"bfd":[15,16,17,19],"bfdd":[16,17,19],"bgp":[12,15,16,17,19],"bgpd":[15,16,17,19],"bibliothequ":[19,30],"bifron":31,"bilan":19,"bin":[26,27],"binair":[3,6,19,23,27,29,30],"bind":13,"bleu":12,"blk":[0,8,13],"bloc":19,"block":13,"bloqu":[13,19,23],"body":22,"bookworm":19,"bool\u00e9en":10,"bootindex":13,"bootstrap":[10,12,15,19],"bootstrap_kvm":[19,29],"bord":[24,30],"bordur":[14,17],"born":[13,20,23,30],"bot":31,"boucl":[0,10,19,21,23,29],"bout":[11,15,19],"br":[2,10,12,19,23,27],"br_netfilt":10,"branch":[10,19,23,29,30],"bridg":[0,2,3,8,10,11,12,15,16,17,19,23,24,27,28,29,30],"brut":[2,13],"brutal":[0,23,30],"bu":31,"budget":[0,24,27,29],"buff":19,"buffer_siz":23,"bufferis":3,"bug":0,"build":[13,30],"bun":31,"bus":[0,3,13],"but":4,"c2d8":19,"c36d":19,"c3ryaw5n":22,"c773":19,"cabl":19,"cach":[13,19],"cahetel":31,"caim":31,"caliel":31,"call":[0,3,10],"camael":31,"campagn":19,"can":22,"canal":3,"candelet":3,"canon":[2,8,31],"capability":[15,16,19],"captur":19,"caracter":19,"carr":19,"cart":[0,8,11,19],"cas":[0,1,4,6,15,16,19,22,24,29],"cass":[0,10],"casse":19,"cassiel":31,"cat":[13,19,24],"caus":[19,24],"cd":13,"cdrom":13,"ced":19,"cel":[13,15,16,19,23,24,26,27,29,30],"celui":[13,16,17,19,30],"centos":13,"centralis":0,"ceux":[19,26],"cf":[11,13,15,16,17,26],"cfg":13,"cgl":27,"cgroup":29,"chacun":[16,19],"challengeresponseauthent":13,"champ":[7,11,13,19,20,30],"chang":[3,6,11,19,23],"changent":[15,19],"chaqu":[6,10,12,13,14,15,16,17,19,23,24,26,27,29,30,31],"charg":[0,3,6,10,19,21,23,29],"chaud":[15,23],"chavakiah":31,"cha\u00een":[2,3,19],"check":19,"chemin":[0,3,10,19,23,27,30],"cherch":19,"chiffr":19,"chmod":19,"chois":[7,19,23,29,30,31],"choix":[4,17,19],"chos":[0,24],"chroot":13,"ci":[12,16,17,23,29,30],"cibl":[0,6,12,14,19,24],"cidat":[13,19],"cidr":[0,2,7,8,11,19,21,22,23,29],"cinq":19,"circul":19,"circulair":16,"cisco":19,"clair":[0,6,29],"class":7,"classless":[24,30],"claud":[0,1],"claus":19,"clean":6,"cli":19,"client":[0,3,7,12,16,19,29],"cloud":[3,5,7,10,11,16,19,23,27,28,29],"clust":[9,10,11,13,15,16,18,19,28],"cluster":17,"cl\u00e9":[1,6,8,10,11,13,19,23,29,30],"cmd":[2,19],"cmdlin":19,"cockp":13,"cod":[1,11,19,21,22,23,31],"coexistent":30,"coh\u00e9rent":[7,13,21,29],"collector":3,"collis":12,"com":[19,22,30],"comm":[0,6,7,11,13,15,16,19,20,23,24,29,30],"command":[3,10,13,16,26],"commenc":19,"comment":[5,12,13,19,23,27,28],"commentair":19,"commod":13,"common":10,"commut":[0,7,24],"compact":30,"compar":[19,23,24,30],"comparaison":30,"compatibl":19,"compil":[3,19],"compilent":3,"complet":[8,13,14,19,28],"completed":19,"comport":[8,17,19,23,28,30],"compos":[12,14,21,28,30],"compr":[12,13,19,26,30],"compris":19,"compromis":19,"compt":[0,6,11,13,19,26,29],"compteur":31,"con":16,"concaten":13,"concept":[28,30],"concern":[0,13,16],"concret":[3,12],"concurrent":[0,10,27,29],"condit":13,"condition":23,"conf":[10,13,19,23,24,26,27],"config":[0,3,6,10,11,13,19,23,29],"configur":[3,7,8,10,11,12,13,19,21,24,25,26,27,28,29,30],"confl":20,"conflict":22,"confondr":12,"confondus":13,"conform":19,"confort":23,"connaiss":[17,19],"connaissent":16,"conna\u00eet":19,"conna\u00eetr":[3,7],"connect":[11,12,16,19,24,27],"connexion":[16,19],"connu":[6,19,24],"conserv":19,"consider":[13,24],"consign":19,"consol":[10,11,19,27],"consomm":21,"construct":[14,15,16,19,23],"constructeur":[17,19],"construir":13,"construit":13,"cons\u00e9quent":[0,4,11,12,20,27],"conten":15,"content":[11,22],"contenu":[0,2,11,23,24],"contiennent":19,"contient":[0,6,13,19,29],"continu":[19,23],"continuent":23,"contr":[10,19,29],"contraint":[0,1,8],"contrair":[15,30],"contrat":[5,17,22],"contrepart":10,"contr\u00f4l":[3,10,11,13,14,16,19,23,26,27,30],"contr\u00f4leur":[0,8],"convent":[8,21],"converg":12,"convers":[2,13,19],"convert":13,"cop":[15,23],"copi":[13,19],"corp":20,"correct":24,"correspond":[3,5,19,24],"corrig":[0,6,19,29],"corrompu":2,"corrupt":19,"couch":13,"count":23,"coup":[10,15],"coupl":19,"coupur":[10,19],"cour":[4,10,19],"cours":0,"court":[9,28],"couvert":30,"couvr":[14,19],"co\u00fbt":30,"co\u00fbtent":11,"cp":13,"cpu":[13,19],"cpus":[2,11,19,22],"creat":[3,13,19,22],"creating":[2,3,4,20,22,24,26,29],"creation":22,"crocel":31,"crois":19,"crw":19,"cr\u00e9":[0,4,6,10,11,12,15,16,17,19,20,23,24,27,28,29,30],"cr\u00e9ation":[0,3,4,7,10,11,15,16,19,20,24,27,29,30],"cr\u00e9ent":19,"ctrl":19,"curl":[10,11,13,19,20,24,26,29,30],"cut":13,"cycl":[5,20,26,28,29],"c\u00e2bl":[7,19],"c\u00f4t":[7,13,16,17,20],"daemon":[15,16,17],"daemoniz":19,"dan":[0,2,3,5,6,7,8,10,11,12,13,14,15,16,17,19,20,23,24,27,29,30,31],"danel":31,"dantalion":31,"dat":[0,2,6,11,13,15,16,19,23,31],"databas":23,"datacentr":[14,17],"datasourc":13,"datasource_list":13,"datasourcenocloudnet":19,"datasourcenon":13,"davantag":30,"david":19,"db":[0,3,10,23,26,30],"ddaf8ba6":19,"deb":19,"deb12u18":19,"debian":[13,19,23,24],"debian12":19,"debug":[19,23,26],"decarabi":31,"decr":[11,12,13,16,19],"def":0,"default":[13,15,16,17,19],"default_interfac":[8,11,23,24],"default_rout":[2,19,22,29],"default_us":13,"del":[10,19,23],"delet":[0,3,4,11,22,26],"deleted":[2,3,4,22,29],"deleting":[2,3,4,24,26,29],"del\u00e0":[10,15,21,23],"dem":19,"demain":19,"demand":[4,10,13,19,20,30],"deny":[16,17,19],"deploy":[10,12,15,19,27,29,30],"depuis":[2,4,7,8,10,11,12,13,16,17,19,20,22,24,29],"derni":[6,10,19,23,30],"descript":[16,17,19,26],"descripteur":19,"dessous":[12,23],"dessus":[7,13,16,30],"destin":29,"detect":13,"deux":[3,6,8,10,12,13,15,16,17,19,24,26,27,30],"deuxiem":12,"dev":[2,11,13,15,19,22],"devic":[0,13,19],"devient":[7,19,23],"devoir":15,"dfsg":19,"dgram":19,"dhcp":[0,2,3,6,7,8,10,11,13,15,16,19,24,26,28,29,30],"dhcp4":[13,19],"dhcpbackend":30,"dhcpnak":30,"dhcpv6":30,"diagnostic":[12,15,23,25,27,28],"diagnostiqu":[10,28],"dialogu":30,"differ":[8,10],"diff\u00e9rent":19,"dir":[19,23,26,30],"direct":[7,11,12,13,17,20,26,30],"disabl":13,"disabled":[13,16],"discard":13,"disk":[2,19],"disk_d":13,"dispara\u00eet":19,"dispara\u00eetr":19,"disparit":19,"dispatch":[0,2,3,10,20,23,27],"disponibl":[7,11,19,31],"dispos":6,"disqu":[0,2,6,8,10,11,16,19,24,29],"disqualif":6,"dist":[16,19],"distanc":10,"distinct":[0,6,12,19,24,29],"distingu":19,"distribu":[13,29],"dit":[12,13,20,23],"diverg":30,"divergent":[26,30],"dn":[13,19,24,30],"dnat":[0,7,10,24],"dnf":13,"dnsmasq":[3,8,10,19,23,24,26,29,30],"do":[19,20,22],"docu":[0,2,13,24,29],"document":[0,8,12,13,15,16,17,19,21,22,28,30],"doit":[0,7,8,12,13,14,15,16,17,19,20,23,24,26,29],"doivent":[0,6,8,11,13,15,17,19,24,26,29],"domain":31,"don":[5,10,12,13,17,19,20,24,26,28,29,30],"donc":[0,3,4,6,7,8,10,11,12,13,14,15,16,17,19,20,26,27,28,29,31],"dont":[3,7,8,11,14,15,17,19,20,23,28,30,31],"doubl":19,"dout":19,"down":19,"downscript":13,"drainag":[0,27,29],"drapeau":[10,13],"driv":13,"droit":19,"dry":10,"dummy":[16,19],"dupliqu":2,"duquel":23,"dur":[0,19,23,26],"durabl":[19,26],"durc":13,"dynam":[16,19,30],"d\u00e8s":12,"d\u00e9but":19,"d\u00e9cid":[23,30],"d\u00e9cis":[13,19,23],"d\u00e9clar":[16,17,19,24],"d\u00e9clench":4,"d\u00e9cor":13,"d\u00e9coupag":1,"d\u00e9couvert":0,"d\u00e9couvr":[9,11],"d\u00e9cret":19,"d\u00e9di":[3,19,23,24,29],"d\u00e9duit":[19,27,29,31],"d\u00e9dupl":26,"d\u00e9faut":[0,6,8,10,11,12,13,15,17,19,20,23,26,29,30],"d\u00e9fin":3,"d\u00e9j\u00e0":[4,6,8,11,13,19,20,23,24,29,30],"d\u00e9liber":[4,6,15],"d\u00e9l\u00e9gu":[29,30],"d\u00e9marr":[0,6,9,10,11,13,14,15,16,19,20,23,27,29],"d\u00e9marrag":[0,3,4,10,12,13,14,15,16,19,23,24,27,28,29,30],"d\u00e9mon":31,"d\u00e9part":24,"d\u00e9pass":[0,24,27,29],"d\u00e9pend":[0,8,11,16,17,19,20,27,30],"d\u00e9plac":[10,19],"d\u00e9ploi":[9,15,19,23,28,29,30],"d\u00e9ploient":19,"d\u00e9pos":19,"d\u00e9pourvu":30,"d\u00e9p\u00f4t":[1,19,22,23],"d\u00e9riv":[13,19,31],"d\u00e9rivent":[13,14],"d\u00e9roul":11,"d\u00e9sact":[10,15],"d\u00e9sactiv":[10,12,13,19,23,29],"d\u00e9sactivent":10,"d\u00e9sarm":10,"d\u00e9sign":19,"d\u00e9sir":27,"d\u00e9sorm":[19,30],"d\u00e9tach":19,"d\u00e9taill":11,"d\u00e9termin":[7,8,11,19,29],"d\u00e9truir":23,"d\u00e9velopp":[0,1,28],"e":[13,19],"e2e":19,"e5":19,"ebgp":[16,17,19],"ebtabl":[3,10,29,30],"ec2":13,"echo":[11,13,19,24,27],"ed25519":[11,19],"ed43":19,"effectu":3,"effet":[10,24,29,30],"effort":[4,20],"efi":[23,24],"elastic":19,"elemiah":31,"eligos":31,"elles":[16,19,24,27,31],"em":19,"embarqu":[13,19],"emploi":17,"emport":19,"empreint":19,"emp\u00each":19,"emulator":19,"enabl":13,"enabled":[0,23,26],"encapsul":[12,17],"encha\u00een":[19,20],"encod":[6,11],"encodag":[6,29,30],"encor":[4,7,11,12,13,16,19,20,29],"endfil":13,"endroit":[23,27],"enfreindr":[0,1],"engag":19,"eno1":10,"enregistr":[4,19,20],"enrobag":[10,23],"ens3":[0,6],"ensembl":[1,28],"ensuit":[10,19,27],"entam":19,"enter":3,"enti":[2,16],"entier":[16,23,30],"entity":22,"entour":28,"entourent":17,"entre":[5,10,12,15,16,17,19,26,27,28,29,30],"entr\u00e9":[7,15,16,17,19,21,29],"env":19,"enverr":24,"environ":[19,30],"envoi":[0,19,30],"eof":13,"equivalent":19,"erreur":[2,3,19,20,23,30],"error":[2,3,4,7,20,22,23,26,29],"esclav":12,"espac":[8,11,13,19],"essai":19,"essais":19,"essentiel":19,"established":19,"etc":[10,12,13,15,16,17,19,23,24,26,27,30],"eth0":[0,6,13],"ethernet":13,"eur":19,"eval":19,"evpn":[15,16,17,19],"exact":[8,11,12,15,19,23,29,30],"exampl":22,"except":[3,8],"excluent":27,"exec":[13,15,19],"execut":[3,4,7,20,24],"exempl":[0,8,19,23,29],"exig":[19,24,30],"exigent":[13,19],"exist":[4,7,13,14,15,16,19,20,22,23,27,29],"existent":[13,20,26,29,31],"exit":[0,15,16,17,19],"expir":[0,23],"explicit":[0,4,6,7,11,13,16,24,26,29,30],"expliqu":13,"exploit":[18,28,29,30],"export":13,"expos":[0,19,21,23,26,28],"exposit":[0,6,29],"extended":[15,16,19],"extern":[7,12],"extinct":[6,23],"extrait":19,"extrem":19,"ext\u00e9rieur":[17,19],"ex\u00e9cu":[7,10,27,29],"ex\u00e9cut":[0,6,10,19,27],"ex\u00e9cutent":[3,13,23],"ezeqeel":31,"f":[13,19,26],"f1":13,"f815":19,"fabric":[15,16,19],"fac":16,"facult":19,"faibl":6,"fair":[8,9,25],"fait":[0,1,6,11,12,13,16,17,19,20,22,23,27,30],"fals":[0,2,7,12,13,19,23,24,30],"famill":16,"family":[15,16,17,19],"fatal":0,"fauss":19,"faut":[4,14,15,17,19,28],"faux":[19,30],"fa\u00e7on":[6,7,10,19,27],"fd":[23,24],"fdb":[12,15],"fdisk":13,"fer":[0,6,19],"ferm":[0,24,27,29],"fermetur":[0,19,27,29],"feu":23,"fichi":[0,2,3,6,10,11,12,13,23,24,27,29,30],"field":22,"fig":[0,8,12,13,17],"figur":[0,7],"figurent":[7,13],"fil":[4,13,16,27,29],"filtr":[17,23],"filtrag":17,"fin":[13,19],"final":[13,19,20],"find":13,"firmwar":19,"first":22,"fix":19,"flauros":31,"flood":19,"fn":3,"focalor":31,"foi":[0,1,22],"fois":[4,11,13,19],"fonction":[0,8,9,13,14,15,16,19,27,28,31],"fonctionnent":[5,10,28,29],"font":14,"for":[13,31],"forc":[4,19,23,24,26],"fork":[0,27],"form":[6,10,16,19],"format":[13,21,29,31],"forneus":31,"found":[0,22],"fourn":[0,3,6,7,8,13,24,29],"fous":10,"fr":[10,19,29,30],"fragment":19,"frais":19,"fre":19,"froid":15,"frr":[12,19],"frrouting":19,"fr\u00e9quent":24,"fstrim":13,"fu":26,"fuit":19,"fur":28,"furc":31,"furfur":31,"futur":13,"g":19,"g3e":[10,19,29,30],"gaap":31,"gabriel":31,"garant":[12,19],"gard":[0,2,7,10,19],"gateway":[0,2,8,11,19,22,29],"gener":13,"generic":19,"genericcloud":19,"genisoimag":19,"ger":15,"get":[2,20,22,24,30],"gharaibeh":19,"gio":[13,19],"git":[10,19,29,30],"github":30,"glasi":31,"global":[11,19],"gnu":19,"go":[3,19,30],"goeti":31,"golden":[13,14,15,16],"goroutin":[0,3,23,26,30],"gpg":19,"graceful":16,"gracieux":29,"grand":13,"granular":19,"gratuit":19,"gremory":31,"grep":[13,19],"gris":12,"group":[12,15,16,19],"growpart":19,"gssapiauthent":13,"guest":[0,6,8,11,13,19,24,29],"guillemet":19,"gusion":31,"gzip":[6,29],"g\u00e9ner":[19,22,27,30],"g\u00e9n\u00e9ral":19,"h":[11,19],"h6n":19,"haagent":31,"haaiah":31,"haamiah":31,"hahaiah":31,"haheuiah":31,"hakamiah":31,"halph":31,"hamephorash":31,"handl":[3,20],"handler":3,"haniel":31,"hariel":31,"hash":[0,2,6,11,13,23,26,29],"haswel":19,"haziel":31,"hd":13,"hd0":13,"hd1":13,"head":[13,19],"helper":3,"heur":[19,28,29],"histor":[3,27],"hi\u00e9rarch":8,"hop":[0,7,24,29],"hor":[2,3,13,19,23,29],"horair":19,"host":[0,6,7,8,11,13,15,19,22,23,24,26,27,29,30],"host_mtu":19,"host_test":19,"hostfwd":19,"hostnam":[13,15,16,17,19],"hourly":19,"ht":19,"http":[0,3,5,10,11,13,19,20,21,22,24,26,27,28,29,30],"hui":[13,17,19,21],"humain":21,"hv1":[15,19],"hv2":19,"hyperviseur":[9,11,13,14,16,17,18,19,21,23,25,28,29,30],"hypervisor":19,"h\u00e9berg":[15,16],"h\u00e9noch":31,"h\u00e9rit":[0,13,27],"h\u00f4t":[13,19],"i":[8,11,15,19,26,27,29],"ibgp":[15,16],"icmp":19,"id":[0,2,11,13,15,16,17,19,21,24,29],"ide":13,"idempotent":[3,4,30],"ident":[13,15,19],"identifi":[13,19],"identitiesonly":19,"iem":31,"iezalel":31,"if":13,"ifac":10,"iface_typ":[7,8,11,20,22,23,24],"ifnam":[13,16],"ignor":[0,2,7,19,23,27,30],"iid":13,"illisibl":2,"imag":[0,6,11,14,15,16,19,23],"imbriqu":19,"img":[13,19],"impact":29,"impass":19,"implicit":19,"impliqu":30,"impl\u00e9ment":[3,7,19,24,30],"impl\u00e9mentent":[0,7,29],"import":[13,16],"impos":[0,13,27,29],"in":[16,17,19,22,27],"inaper\u00e7u":19,"inattendu":28,"incertain":19,"inchang":30,"inclut":[19,23],"incoh\u00e9rent":23,"inconnu":[8,11,19,20,23,24,27,30],"inconnus":19,"indent":[23,30],"index":[8,11,19],"indiff\u00e9rent":14,"indiqu":19,"indirect":8,"indispens":13,"indistingu":30,"ind\u00e9pend":17,"ind\u00e9tect":30,"inet":19,"inexist":[20,24],"info":[19,22,23,26],"informational":[15,16,17,19],"infrastructur":19,"init":[3,5,7,10,11,16,19,23,27,28,29],"initial":[3,20],"inject":19,"injoign":[7,19,24],"inond":[12,16,19],"inscriptibl":23,"insomniacslk":30,"inspect":[10,23,29],"install":[9,11,12,13,18,19,27,28,30],"installing":19,"instanc":[0,10,11,13,16,24,26,27,29,30],"insufficient":19,"int":2,"integr":[8,10,19,20,30],"intel":[13,19],"inter":10,"interact":19,"interfac":[3,8,10,11,12,15,16,17,19,22,27,28,29,30],"interface_ip":[0,2,7,8,11,19,22,24,29],"intern":[0,1,7,11,20],"internal":[3,19,22,29,30],"internet":[8,19,23],"interpret":[6,11,19],"interrog":[20,23,27,30],"interromp":10,"interrompu":[4,19,24],"interrupt":19,"interval_second":[23,26],"intervent":19,"int\u00e9gral":[13,19,26,30],"int\u00e9r\u00eat":19,"invalid":[6,11,19,20,22,23,24,29,30],"invari":[1,8,11,13],"invers":[0,11],"invit":23,"ip":[0,2,3,7,11,12,15,16,17,19,22,24,29],"ip_forward":10,"ipos":31,"iptabl":[3,10,29],"ipv4":[10,15,16,17,19],"ipv6":[16,19],"ipvlan":16,"is":[13,19,22],"iso":[13,19],"isol":[8,12,14,15,19,28,29,30],"israfel":31,"istransient":3,"it":22,"jafar":19,"jam":[0,2,3,6,7,10,11,12,19,24,26,27,29,30,31],"jehudiel":31,"jeliel":31,"jet":13,"jetabl":[13,19],"jeu":4,"jj":31,"joignabl":[7,11,17,19,29],"joignent":[15,19],"joint":[15,17,19],"jophiel":31,"jou":[3,19],"jour":[13,19],"journal":[0,19,24,27],"journalctl":[24,26,27],"journalis":3,"jq":[10,20,24],"json":[6,10,11,22,30],"junip":19,"jusqu":[0,13,16,19,20,23,26,29,30],"just":[4,19],"kernel":29,"key":[2,3,19],"keygen":19,"keyserv":19,"kilo":30,"kimar":31,"known_host":19,"kokabiel":31,"kv":3,"kvm":[0,8,10,13,19,23,28,29],"kvm_amd":19,"kvm_intel":19,"l2":[0,7,16,19,24],"l2vpn":[15,16,19],"l3":[0,7,19],"l3vni":19,"lab":[18,28],"lab3":19,"lab_ed25519":19,"label":13,"laiss":[0,15,19,23,30],"laissent":19,"lampart":19,"lanc":[0,3,10,15,16,27,29,30],"lancent":19,"latest":[19,24],"lauviah":31,"learning":[12,15],"leas":[24,27],"lecabel":31,"lectur":[3,19,20,23,26,29,30],"lehahiah":31,"lelahel":31,"length":19,"lent":23,"lequel":[10,19,27,30],"leraj":31,"lesquel":[10,27],"leuviah":31,"level":[23,26],"levi":16,"lib":[11,13,19,23,24],"lien":[2,8,16,17,19,26,31],"lieu":[10,30],"lign":[6,10,19,26,30,31],"lim":[16,19],"limit":19,"link":15,"linux":[3,10,19,29,30],"lir":[0,6,14,28],"lis":[10,19],"lisent":19,"lisibl":[19,23,30],"list":[10,16,17,19,22,23,24,27],"listen":[16,19],"lit":[0,2,6,7,19,20],"livr":[14,19,23,28,31],"livraison":[19,28],"lo":13,"lo1":[16,19],"local":[0,6,10,12,13,15,16,21,23,29,31],"local01":13,"local_ifac":[2,15,22],"locatair":30,"lock_passwd":13,"log":[0,6,13,15,16,17,19,24,26,27],"logg":[3,23,26],"logiciel":[21,29],"login":19,"logiqu":[3,8,11,23],"loin":13,"long":[19,20],"longu":10,"longueur":19,"loopback":[15,16,17,19],"lorsqu":31,"loss":19,"lou":[19,28],"ls":[19,23,24],"lsblk":13,"lscpu":19,"lu":[2,7,8,19,23,26],"lus":2,"l\u00e0":[11,19],"mac":[2,3,12,13,16,19,24,27,29,30],"machin":[0,8,16,19,21,28,29],"macos":[3,19],"magasin":29,"mahasiah":31,"main":[10,12,16,19,24,27,29,30],"mainten":16,"malgr":19,"malph":31,"manifest":[10,29],"manqu":[13,20],"manual":16,"manuel":[12,23,30],"map":[16,17,19],"mapstructur":[0,3],"marax":31,"marb":31,"marchosi":31,"marqu":[3,26],"masqu":[10,19,24,30],"match":[13,17],"mat\u00e9riel":[14,17,19],"mauvais":[23,24],"max_w":13,"md":[0,1],"mebahel":31,"medi":13,"melahel":31,"mem":19,"memory":[2,11,19,22],"memtabl":30,"menadel":31,"mensong":23,"mensuel":19,"mention":30,"messag":[19,24,27],"mesur":[14,19,28,29],"met":[3,10,13,19,24],"metadat":[0,2,3,5,8,10,11,13,15,16,22,24,26,27,28,29],"metadata_port":[2,22],"metal":19,"metatron":31,"method":16,"mettr":[19,28],"mgmt0":19,"mi":[10,15],"mib":19,"michael":31,"microsoft":30,"mieux":29,"migr":[23,30],"migrat":[3,4,10,15,19,24,29],"mikrotik":19,"min":19,"minimal":17,"minimum":13,"minuscul":19,"minut":19,"mio":[19,30],"mis":[7,14,17,19,24,29],"missing":[22,24],"mkdir":[13,19],"mkf":13,"mkisof":13,"mm":31,"mnt":13,"mo":2,"mod":[0,2,5,8,11,13,16,22,24,28,29],"model":[5,9,11,19,21,28,29],"modif":[1,12,29],"modifi":[19,23,29,30],"modify":16,"modul":[19,30],"moin":[12,13,16,17,19],"mois":19,"moment":[4,12,27,30,31],"monitor":[13,23,27],"monitor_d":23,"mono":29,"mont":13,"montag":13,"montr":[19,24,27,30],"mot":[0,2,6,11,13,19,23,26,29],"motif":8,"mount":13,"moyen":19,"mtu":[17,19],"mult":[6,18,23,28,30],"multicast":[12,15],"multipl":29,"murmur":31,"must":22,"my":13,"m\u00e9can":[10,12,13,15,17],"m\u00e9moir":[4,24,29],"m\u00e9ritent":15,"m\u00e9tadon":19,"m\u00e9triqu":[3,28,29],"m\u00eam":[0,4,6,8,9,10,11,12,13,14,16,17,19,23,24,26,29,30],"n1":13,"naberius":31,"nam":[0,2,3,8,11,13,16,19,20,22,23,29],"namespac":[3,8,10,11,26,27,28,29],"nat":[10,19],"natur":31,"neighbor":[15,16,17,19],"nelchael":31,"nested":19,"net":[10,13,19],"net0":13,"netdev":[13,19],"netif":[3,29],"netlink":[3,10],"netn":[0,3,6,7,8,10,11,15,19,23,24,27,29,30],"nettoi":[4,29],"nettoyag":[4,13],"network":[0,3,6,8,10,11,13,16,19,26,27,28,29],"networkd":[13,19],"networkmanag":16,"neuf":[6,11,19],"neutralis":6,"neuv":13,"new":0,"next":[0,7,24,29],"nexthop":[15,16,19],"nf":10,"nftabl":19,"ni":[0,3,6,8,11,12,13,15,16,19,20,23,27,29],"nic":0,"nithaiah":31,"niveau":[3,8,17,21,23,26,28],"nmcli":16,"no":[13,15,16,17,19],"nocloud":[6,13,19],"nocloud_seed_url_append_forward_slash":13,"nod":19,"nodefault":19,"nographic":13,"nom":[0,6,8,11,13,16,19,24,27,29],"nom_du_fichier_qcow2":13,"nom_os":13,"nombr":[23,26,29],"nomm":[13,19,30],"nommag":21,"non":[2,6,7,13,16,19,23,24,26,29,30],"nonetwork":10,"nopackag":10,"nopasswd":13,"normal":[10,19,24,27],"not":[0,3,19,22,24,26,31],"notif":[24,26],"noup_script":[10,19],"nouuid":13,"nouveau":[3,23,30],"nouvel":[19,23,30],"noverify":10,"now":13,"noyau":[10,13],"null":26,"num\u00e9ro":31,"n\u00e9cessair":[3,4,10,13,19,23],"n\u00e9gat":[10,19],"n\u0153ud":[9,10,11,12,14,18,28,29],"o":[10,13,29,30],"objet":[0,4,17,19,24,29],"obligatoir":[13,19,20],"obliqu":[13,19],"observ":[11,23,25],"obtenu":13,"obtiennent":23,"obtient":[15,27,30],"oct":19,"octet":[12,17,19,30],"of":[19,22],"off":[15,19],"offre":19,"ok":22,"omael":31,"omettr":30,"omis":[6,23],"only":22,"openpgp":19,"openssl":13,"oper":[0,6,10,20,23,26,30],"opt":[13,19,26,27],"option":[0,7,10,13,15,19,23,29,30],"optionnel":[2,29],"op\u00e9rationnel":17,"or":[19,22],"orchestr":[14,21,28,29],"ordered":19,"ordonnanc":28,"ordonnanceur":29,"ordre":[0,8,11,13,14,16,17,19,24,27,29,30,31],"org":19,"organis":[1,19],"ori":31,"origin":[10,19],"orob":31,"orphelin":[0,4,29],"os":[0,13,19],"os_dir":13,"os_disk":13,"os_fil":13,"os_link":13,"ose":31,"out":[16,17,19],"outil":[7,19,23],"outillag":[18,28],"outr":23,"ouvert":12,"ouvertur":23,"ouvr":[2,6,10,13,16,17,19,23,26],"ouvrent":16,"ouvreur":2,"overlay":[13,19],"ovmf":[10,23,24,29],"ovmf_cod":[23,24],"ovmf_code_path":23,"ovmf_var":[23,24],"ovmf_vars_templat":23,"o\u00f9":[11,12,13,14,19],"p":[10,13,19],"p0":19,"p1":19,"p2":19,"packag":29,"pag":[0,1,10,12,13,19,22],"pahaliah":31,"pai":19,"paimon":31,"pair":[16,19],"pann":19,"paquet":[0,1,7,10,12,15,16,19,23,24,29,30],"parameter":19,"parametr":[10,22,30],"para\u00eet":[0,7],"parc":[0,3,9,13,19,27,28],"parcour":[9,10,15,28],"pare":23,"parent":[11,20,22],"parl":23,"parlent":30,"part":[7,10,12,13,15,16,19,21],"partag":[6,19,23],"partagent":[4,10],"partent":[13,16],"particuli":[15,16],"partiel":[0,4,20,24,29],"partit":[13,19],"partout":[3,19],"partprob":13,"parvient":19,"pass":[0,2,6,10,11,12,13,15,16,17,19,20,23,24,26,27,29,30],"passag":[0,4],"passager":19,"passent":[0,2,8,11,12,19],"passerel":[10,15,16,17,19],"passwd":[6,11,13],"password":[0,2,6,11,13,22,23,29],"passwordauthent":13,"path":[2,11,15,22,23],"pci":[0,8,11,13,19,29],"pe":[15,16,19],"pend":[4,10,16,17,19,23,26],"penemu":31,"perdr":[10,27],"perdu":[19,30],"perdus":12,"perm":[16,17,19],"permet":[3,8,19,23,30,31],"permettr":13,"permiss":13,"permitrootlogin":13,"permittunnel":13,"persist":[19,26,30],"person":[4,19],"personnel":[13,19],"pert":16,"petit":12,"peupl":[12,15],"peut":[0,2,4,6,8,10,15,19,20,23,31],"peuvent":[4,8,20],"phenex":31,"phras":19,"physiqu":[8,10,11,12,19,23],"pid":[0,19,27],"pieg":[1,8,11,13],"pilot":[0,10,23,24,27,28,30],"pin":19,"ping":[10,12,19],"pir":[0,19,27],"pkg":[0,3,30],"plac":[3,7,10,11,13,14,17,19,24,28,29],"plag":[8,12,19,21],"plan":[3,10,11,14,16,17,19],"plat":[2,3],"plateform":30,"platform":3,"plein":[12,19],"plus":[4,10,13,16,17,19,20,23,24,26,29,30],"plusieur":[8,19,28,29],"plut\u00f4t":[6,10,11,13,16,19,27,30],"poign":12,"point":[0,3,7,11,15,19,20,24],"pointill":12,"polit":19,"poll_second":23,"polling":20,"pool":[3,30],"port":[0,2,7,8,10,11,12,13,15,16,17,19,23,24,26,28,29,30,31],"portent":[3,13],"porteur":11,"pos":[0,7,8,10,11,12,13,15,16,19,24,26,27],"posit":29,"position":20,"post":[11,19,22],"postgresql":13,"pourquoi":19,"poursuivr":9,"pouss":[7,27],"pouvoir":16,"poweroff":13,"pratiqu":27,"preempt_dynamic":19,"prefix":[0,16,17,19,23,26],"premi":[9,10,14,16,17,19,23,27,28,29,31],"prend":[17,29,31],"prendr":[10,19,23],"prepar":[3,19,20],"prepend":[16,19],"prerouting":[0,7,24],"pres":19,"prescr":19,"preuv":19,"primair":[15,19,29],"primary":[8,11,22],"principal":[10,16,19,27],"pris":19,"prix":19,"prob":[24,30],"probabl":24,"problem":24,"proc":[13,19],"processus":[0,2,6,8,10,16,19,23,24,26,27,29,30],"proch":17,"prochain":[19,31],"proc\u00e9dur":[13,15,16,23,30],"product":[0,7,10,11,15,16,19],"produir":30,"produit":[13,15,19],"profil":[10,29],"programm":19,"projet":[19,30],"prometheus":[3,23,29],"propag":[0,19],"proportionnel":26,"propr":[2,8,12,19,20,29],"propri\u00e9tair":19,"protect":13,"proteg":19,"prouv":19,"proven":13,"provis":19,"provision":[0,6,7,10,11,19,23,24],"pr\u00e9caut":19,"pr\u00e9ced":[17,19],"pr\u00e9c\u00e9dent":[14,24],"pr\u00e9exist":12,"pr\u00e9existent":17,"pr\u00e9fix":19,"pr\u00e9par":[10,15,17,19,29],"pr\u00e9requ":15,"pr\u00e9sent":[11,19,20,23,24,30],"pr\u00e9voir":10,"pr\u00e9vu":[12,23],"pr\u00eat":[11,19,20],"pseudo":19,"pu":19,"pub":19,"pubkey":2,"pubkeyauthent":13,"publi":[19,29,31],"public":[10,12,31],"public_ip":[2,7,24,29],"publiqu":[0,6,7,13,19,31],"puis":[3,10,11,19,20,23,26,27,29],"puisqu":[10,12,15,19],"puiss":[14,19],"purson":31,"push":19,"pxe":[19,30],"p\u00e9riod":[3,23,26,29],"p\u00e9ripher":19,"q35":[0,19],"qcow2":[11,14,15,16,19],"qemu":[3,8,10,13,16,19,24,28,29],"qmp":[3,19,23,27],"qmp_dir":23,"qualif":19,"qualifi":[16,19],"quand":[0,11,13,16,19,26,27,29],"quatr":[10,11,23,27,30],"quelqu":0,"query":24,"queu":3,"quiconqu":[0,10,23],"quit":[0,23],"quitt":19,"quoi":[4,14,19],"quot":19,"r":[10,13,19,20],"rabattr":19,"raccord":[7,8,13,24,28],"raccordent":17,"raccroch":11,"racin":[0,1,10,12,13,19,22,27],"raguel":31,"raison":19,"ramen":10,"ramiel":31,"rang":[16,19,31],"raphael":31,"rapid":24,"rapport":[12,13],"rar":17,"rattach":[7,10],"rattrap":19,"raum":31,"raw":[10,11,13,27,29,30],"raziel":31,"rc":19,"read_seeded":13,"ready":[19,22],"recoll":19,"recommand":19,"reconna\u00eet":[0,6,11],"reconna\u00eetr":13,"reconnu":[2,19],"reconstruct":16,"reconvergent":19,"recopi":13,"recouvrent":12,"recr":19,"recr\u00e9":[0,6,11,15,16,19,20,23],"recr\u00e9at":[4,13,19,24,26],"redirect":[19,29],"redirig":19,"redistribu":[13,16],"redond":[0,7,16,17,19],"red\u00e9marr":[10,19,27],"red\u00e9marrag":[10,12,15,16,19,24,27,29],"ref":21,"reflector":[12,13,14,15,17,19],"refus":[2,11,19,27,29,30],"regard":[24,27],"regl":[6,19,20,26,30],"reiyel":31,"rejet":[6,11,24],"rejeu":[0,27],"rejou":[6,10,11,12,15,16,19,20,24,29],"rel":[12,27,28,30],"relanc":[10,19,27],"relat":19,"releas":[10,15,19,29,31],"relev":[10,19,27],"reli":19,"relir":15,"relu":19,"rel\u00e8vent":7,"remiel":31,"remis":16,"remont":20,"remot":[15,16,17,19],"remov":13,"rempl":[12,31],"remplac":[0,6,10,19,30],"rencontr":24,"rend":[13,15,16,19,23,30],"render":13,"rendr":[0,6,30],"rendu":6,"renomm":19,"renouvel":[16,19,29],"renvoi":19,"rep":19,"repart":[6,11],"repertoire_de_telecharg":13,"repertoire_des_disqu":13,"repl":19,"replac":[16,19],"repos":[19,30],"repository":19,"reprend":0,"repris":[4,15],"reproductibl":19,"reproduit":19,"requ":30,"request":22,"required":22,"requis":[10,30],"requ\u00eat":[12,19,24],"rescan":13,"reserv":24,"resolv":13,"resourc":22,"respect":8,"respons":22,"ressourc":[2,5,8,16,19,20,26,29],"rest":[0,1,4,9,10,11,12,13,14,15,16,19,22,23,24,27,29,30],"restart":[16,23],"restent":[15,16,19,30],"restitu":[0,29],"restreindr":23,"restreint":29,"restrict":19,"retenu":[13,15,30],"retir":[0,7,16,19,30],"retomb":[0,8,11,19,23,24,29],"retour":[11,19,21,23,30],"retourn":[2,3],"retournent":3,"retrouv":[4,13,31],"ret\u00e9l\u00e9charg":19,"revanch":[0,15,20,23,30],"reven":10,"reviennent":16,"re\u00e7oit":[10,11,16,19,23,30],"re\u00e7u":19,"rf":13,"rfc":[0,7,30],"rhk2":13,"rien":[0,6,10,12,15,16,17,19,23,27,30,31],"risqu":26,"rm":13,"robust":20,"rol":19,"rollback":[0,20,24,29],"rom":19,"romfil":19,"ronov":31,"root":[10,13,19,29,30],"root_partit":13,"rout":[0,3,8,10,11,12,13,14,15,17,19,23,24,29,30],"routag":[7,10,11,12,17,19,28],"routeur":[14,15,16,19,24,30],"rpcbind":13,"rr":[16,17,19],"rr1":[16,17,19],"rsaauthent":13,"run":[0,6,10,11,13,19,23,24,27,29,30],"run_d":[2,23],"run_test":19,"runcmd":19,"running":[2,3,4,11,15,19,20,22,24,26,29],"rw":19,"r\u00e9alis":17,"r\u00e9appr":19,"r\u00e9attach":[16,24,27],"r\u00e9cent":13,"r\u00e9cuper":19,"r\u00e9dig":[12,13,15,16,17],"r\u00e9ecr":10,"r\u00e9el":[2,3,19,20,23,24],"r\u00e9essai":19,"r\u00e9flech":16,"r\u00e9f\u00e9rent":[0,1,15,17,19,21,23],"r\u00e9glag":23,"r\u00e9g\u00e9ner":19,"r\u00e9ordon":19,"r\u00e9par":[10,24,26,29],"r\u00e9partit":13,"r\u00e9pertoir":[19,23],"r\u00e9pet":19,"r\u00e9pond":[10,11,19,20,30],"r\u00e9pondent":19,"r\u00e9pondr":[0,27,30],"r\u00e9pons":[11,16,19,20,24,26,30],"r\u00e9seau":[3,4,5,8,10,11,12,13,14,15,16,17,19,20,23,24,26,28,29,30],"r\u00e9serv":[7,10,12,18,19,24,27,30],"r\u00e9sidu":[23,27,30],"r\u00e9siduel":[4,30],"r\u00e9solu":[7,11,13,19],"r\u00e9sout":19,"r\u00e9sultat":[13,19],"r\u00e9tractent":13,"r\u00e9uss":[3,10,19,20],"r\u00e9utilis":[6,8,13,19,31],"r\u00e9\u00e9crir":0,"r\u00e9\u00e9valu":[0,13],"r\u00f4l":[3,10,12,13,16,17,27,28],"s1":19,"s1a":19,"s1b":19,"s2":19,"s3":19,"s4":19,"s5":19,"s6":19,"sabnock":31,"sallos":31,"samigin":31,"samsapeel":31,"samyaz":31,"san":[0,3,6,7,11,13,15,16,19,20,23,24,26,27,29,30,31],"sandalphon":31,"sariel":31,"sauf":[0,7,19,30],"saut":19,"savoir":[10,13,15,27],"sbin":19,"scenario":19,"scenarios":19,"schem":[1,8],"scop":[0,27],"script":[10,12,13,19,23,27,29,30],"scsi":[0,8,13],"scsi0":13,"scw":19,"scw_default_project_id":19,"scw_default_zon":19,"scw_secret_key":19,"sda":[2,13],"sdb":13,"sdx":[0,8,11],"seabios":2,"second":[10,13,17,19,31],"secondair":[16,17],"secondary":19,"secour":[10,19],"secret":19,"section":[0,11,14],"seed":19,"seedfrom":[13,19],"seer":31,"segment":[15,16,17,19],"seheiah":31,"selaphiel":31,"selinux":13,"selon":[8,15,19,24],"sen":[12,17,23,27],"sensibl":13,"seq":[16,17,19],"ser":[11,13,19,23,27,30],"serial":[11,13,23,27],"serial_d":23,"sert":[0,6,7,13,17,18,19,23,30],"serv":[0,3,11,13,19,22,23,27,29,30],"served":[24,30],"servent":19,"server":19,"serveur":[0,2,3,6,8,10,11,13,15,24,28,29,30],"servic":[6,10,13,16,17,19,25,28,29],"serviceip":0,"session":[10,12,13,15,16,17,19],"set":[0,2,13,19,24],"setting":13,"seul":[0,2,3,8,10,11,12,13,15,16,17,19,20,21,23,26,27,29,30],"sf":20,"sh":[10,12,15,19,27,29,30],"sha256sum":[10,19,29],"sha512sum":19,"shar":[23,24],"shared":19,"shax":31,"shel":19,"shem":31,"shflag":19,"show":[15,19],"si":[0,2,3,7,8,10,15,19,24,27,29],"sigkill":19,"sign":19,"signal":[19,24,26,29,30],"signatur":[0,13,19],"signif":[4,10,20,24],"sigterm":19,"silenc":[0,23,29],"silenci":[7,23,27,30],"simpl":[4,30],"sinon":[4,7,8,12,19,29],"sit":17,"sitael":31,"sitr":31,"six":29,"siz":13,"sleep":[13,20],"slog":[3,26],"slot":[8,11,29],"smp":[13,19],"sn":[8,11,19,20],"sn000001":[26,27],"socat":[11,24,27],"sock":[11,13,19,24,27,30],"socket":[0,3,13,23,30],"somm":[13,19],"sond":24,"sort":[0,7,13,17,19],"sourc":[2,8,13,16,19,22,23],"sous":[0,2,6,10,12,13,16,19,24,27,29,30],"souvent":[0,20],"sphinx":30,"ssd":19,"ssh":[10,11,13,19],"ssh_authorized_key":13,"sshd_config":13,"sshkey":[2,6,11,22,29],"stabl":[19,20,24,29],"stad":28,"stal":24,"standard":19,"start":22,"started":19,"stat":[2,3,11,19,20,22,24,27,30],"statefil":30,"stateless":[10,12],"statiqu":[7,12,27,30],"status":[10,19,22,24,27],"statut":22,"stdio":13,"stock":[0,2,19,29],"stockag":[1,8],"stol":31,"stop":[22,27],"stoppabl":22,"stopped":22,"storag":[11,15,22],"stp":19,"strict":[8,26],"string":22,"structur":[2,26],"styl":19,"subnet":[0,2,3,4,5,7,9,10,14,15,16,19,20,22,23,24,26,27,28,29,30],"subnet_creat":19,"subnetid":2,"subsist":26,"subsistent":24,"succes":19,"sudo":[13,19],"suff":19,"suffis":9,"suffisent":23,"suit":[6,13,15,19,23],"suiv":[0,11,13,15,19,24,27,29],"suivent":8,"suivr":30,"sujet":27,"sum":19,"suppl\u00e9mentair":[8,10,11,13,19],"supported":3,"suppos":[11,13,23,30],"suppress":[0,3,11,19,20,24,27,29,30],"supprim":[0,4,6,8,13,19,23,24,27,30],"sup\u00e9rieur":[21,28],"surprend":20,"surv":[10,12,19,27],"surviv":24,"survivent":[16,19,27,29],"survivr":16,"sw1":[17,19],"switch":19,"sy":[13,19],"symetr":17,"sympt\u00f4m":[12,24],"synchron":[3,20],"syntax":19,"syonad":[6,10,11,13,19,29,30],"syonad_":3,"syonad_subnets_total":26,"syonad_vms_total":26,"syonad_vpcs_total":26,"syslog":[15,16,17,19],"system":[4,10,13,16,19,20,23,26,29],"system_info":13,"systemctl":[10,13,23,24,27],"systemd":[0,3,6,10,19,25,26,29,30],"s\u00e9lect":29,"s\u00e9par":[19,28],"s\u00e9quenc":10,"s\u00e9rialis":2,"tabl":[7,10,12,15],"tableau":[8,11],"tabul":[23,30],"tag":[0,3,10,19,31],"tagu":31,"tail":[24,26],"taill":[12,13],"tamiel":31,"tant":[10,12,15,16,19,31],"tap":[0,3,8,11,13,24,26,27],"tap0":13,"tap_id":2,"tar":19,"tard":[16,19,29],"tcg":19,"tcp":19,"techniqu":4,"tel":[0,6,15,19,24,29],"temp":[11,13,19],"templat":[0,3,6,24],"ten":31,"tent":19,"tentat":4,"tenu":19,"term":19,"termin":[4,11,19],"terminal":[4,19,20],"terminent":17,"terrain":17,"test":[3,16,18,28,30],"the":[13,24],"this":3,"tick":[24,26],"ticket":19,"tient":12,"tim":13,"timeout":[0,13,19,20],"timeout_second":[0,20,23],"tir":31,"tiret":12,"tl":12,"tmp":13,"tmpf":[10,12,19,30],"tmpl":[0,6],"to":[8,19,21],"to_install":19,"token":19,"toler":23,"tomb":[16,19],"too":19,"tool":19,"topolog":14,"topology":19,"total":[10,19,28],"touch":[0,3,11,15,19],"toujour":[2,7,19,20,26],"tourn":[15,16,19,23,25,26,27,30],"tournent":[19,28],"tous":[0,3,4,7,8,11,16,17,19,23,24],"tout":[0,2,3,4,6,7,9,10,11,12,13,14,15,16,17,19,20,23,24,29,30],"tr":[11,13],"trac":19,"tradit":31,"traditional":[15,16,17,19],"traduct":17,"traduit":[4,8,23],"trafic":[0,7,10,12,16,19],"trait":[0,4,7,10,12,16,20,23],"tram":[0,7,19,24],"tranch":15,"transfer":19,"transfert":[12,15],"transit":[20,23],"transitoir":[0,20,24,27,29],"transm":29,"transmis":6,"travail":[3,13,20,29],"traver":19,"travers":[0,7,10,12,24],"triabl":31,"trois":[0,7,8,16,17,19,20,23,29],"trompeur":12,"tronqu":30,"trouv":[13,19,24],"trouvent":12,"tru":[2,7,11,13,22,23,24,26],"tunnel":[7,12,16,17],"turel":31,"tutoriel":11,"two":[0,6,10,11,15,18,19,21,23,24,26,27,29,30],"two_imag":19,"typ":[8,11,13,16,19,20,22,29],"typiqu":19,"t\u00e9l\u00e9charg":[10,13,19,29],"t\u00e9moin":19,"t\u00eat":[13,19],"u":[10,19,24,26,27],"ubuntu":[13,19,23,24],"udp":[12,17,19,30],"uefi":[2,11,22,23,29],"uefi_vars_d":23,"ult\u00e9rieur":19,"unam":19,"underlay":19,"unicast":[15,16,17,19],"unifi":29,"uniform":20,"uniqu":[2,10,13,19,22,23,30],"unit":[0,8,10,23,24,26,29,30],"unix":[3,11,13,23,24,27,30],"unknown":22,"unmap":13,"unprocess":22,"unspecified":3,"until":20,"up":19,"updat":[16,19],"uplink":[10,12,15,19],"uriel":31,"url":[13,19],"url_du_qcow2_fournisseur":13,"usag":[6,12,19,30],"used":19,"usedn":13,"user":[0,2,6,11,13,15,16,19],"user_dat":[6,11,22,29],"usr":[19,23,24],"usurp":30,"util":[13,26],"utilis":[10,12,13,15,16,19,24,26,27],"utilisent":6,"uuid":13,"uvall":31,"v":13,"v1":19,"v3":19,"v4":19,"val":16,"valabl":[15,30],"valac":31,"valefor":31,"valeur":[2,3,8,10,11,13,19,23,26,30],"valid":[3,7,8,9,12,16,19,20,21,29],"vapul":31,"var":[11,13,19,23,24,26,27],"vari":13,"variabl":[0,19,23,29],"vasariah":31,"vassago":31,"vaut":[0,6,11,13,19,24,29],"vda":[2,11,13],"vdx":[0,8,11],"vehuiah":31,"veil":19,"veilleur":31,"ven":[16,28],"vendor":[0,2,6,13],"vepar":31,"ver":[0,8,10,11,13,15,16,17,19,23,29,31],"verb":24,"verbatim":[0,6,29],"verr":[0,27],"verrou":30,"verrouill":[6,29],"version":[13,15,17,19,23,28,29,30],"veth":[3,12,17],"veut":26,"vi":[2,3,5,19,20,26,28,29],"vid":[0,6,10,11,12,15,19,23,29,30,31],"viendront":[14,21],"viennent":17,"vient":[0,6,8,13,19],"vin":31,"violet":12,"vip":[0,3,23],"virtio":[0,8,13,19],"virtualis":[19,28],"virtualiz":19,"virtuel":[13,16,19,28,29],"vit":[7,11,19,27],"viv":19,"vivent":19,"vlan":7,"vm":[2,3,4,5,6,9,10,12,14,15,17,20,22,23,26,28,29,30],"vm_creat":19,"vm_fail":19,"vm_key":19,"vm_ssh":19,"vm_wait":19,"vni":[12,15,19],"vocabulair":4,"voient":[8,19],"voir":[8,10,11,12,13,15,19,20,21,23,24,27],"voisin":[12,15,16,17,19],"voit":[10,12,13,15,19,24],"volontair":[13,23],"volum":[11,13,19,26],"volumin":12,"vont":19,"voulu":26,"vp":[8,11,19,26,27],"vpc":[0,2,3,4,5,6,7,9,10,12,14,15,19,20,22,23,24,26,27,28,29,30],"vpc_creat":19,"vrai":24,"vt":19,"vtep":[15,16,19],"vtysh":19,"vu":[1,8,13,16],"vxlan":[2,3,10,11,12,15,16,17,19,21,22,28,29],"vxlan_id":[2,7,11,12,22,24],"v\u00e9rif":[3,10,13,15,19,23,24,26,29],"v\u00e9rifi":[12,13,16,20,23,24,29],"w":19,"wait":19,"warn":[23,26],"watchdog":[0,3,10,24,27,29,30],"web":[11,26,27],"webhook":20,"work":[3,13,23],"work_disk":13,"worker":[0,4,27,29],"workflow":30,"wrapp":3,"wrapper":3,"x":[3,11,19],"x1":19,"x11forwarding":13,"x86":10,"x86_64":[13,19],"xeon":19,"xf":13,"yaml":[0,3,19,22,23],"ye":13,"yehuiah":31,"yeiayel":31,"yerathel":31,"yml":[10,11,19,23,26,27,30],"yomiel":31,"yubikey":19,"yum":13,"zadkiel":31,"zagan":31,"zaphkiel":31,"zepar":31,"zero":13,"zon":19,"z\u00e9ro":16,"\u00c0":[12,13,15,16,17,23,28],"\u00e9cart":[0,1,22,24,26,27,29,30],"\u00e9chapp":[6,19],"\u00e9chec":[0,4,19,20,24,29],"\u00e9chou":[0,3,4,7,10,13,15,19,20,23,24,29,30],"\u00e9chouent":12,"\u00e9cout":[0,23,29,30],"\u00e9coutent":19,"\u00e9cran":19,"\u00e9cras":13,"\u00e9crit":[2,3,6,10,13,15,16,19,20,24,27,30],"\u00e9critur":[3,30],"\u00e9crivain":[0,27,29],"\u00e9gal":13,"\u00e9gar":23,"\u00e9larg":0,"\u00e9l\u00e9ment":[5,17,28],"\u00e9met":30,"\u00e9mettr":[4,24],"\u00e9mis":[29,30],"\u00e9mul":19,"\u00e9numer":[2,3,13],"\u00e9ph\u00e9mer":19,"\u00e9pinglag":19,"\u00e9quip":[17,19],"\u00e9quivalent":15,"\u00e9tabl":[15,16,17],"\u00e9tap":[11,19],"\u00e9tat":[0,2,3,6,7,15,16,19,20,23,24,26,27,28,29,30],"\u00e9teindr":19,"\u00e9teint":[13,19,23],"\u00e9tend":11,"\u00e9ven":16,"\u00e9vit":[6,12,23],"\u00eatre":[0,2,4,8,10,12,13,14,15,16,17,19,20,23,24,29,31]},"titles":["Invariants et pi\u00e8ges","Architecture","Sch\u00e9ma des cl\u00e9s","Vue d\u2019ensemble","Cycle de vie des ressources","Concepts","Metadata et cloud-init","Modes r\u00e9seau","VPC, subnet et VM","D\u00e9marrage","Installation d\u2019un hyperviseur","Premier VPC, premier subnet, premi\u00e8re VM","Architecture du cluster","Construction de l\u2019image qcow2","D\u00e9ploiement d\u2019un cluster","Premier hyperviseur","VM route reflector","Routeurs","D\u00e9veloppement","Lab de test multi-n\u0153ud","Mod\u00e8le asynchrone et codes de retour","API de l\u2019agent","R\u00e9f\u00e9rence","Configuration","Diagnostic","Exploitation","Observabilit\u00e9","Services systemd","two","Michael","Bael","Versions"],"titleterms":{"Ce":[8,10,11,12],"L":24,"La":[11,24],"Le":[11,13,19,24],"Les":[13,20],"Par":28,"Pas":4,"a":24,"accept":0,"adress":24,"adressag":[12,16,17],"agent":[0,4,12,15,21,24,27],"ajout":3,"annonc":7,"api":21,"appliqu":24,"apres":24,"architectur":[1,12],"arr\u00eat":[0,24,27],"articul":15,"asynchron":20,"attendr":20,"autr":23,"backend":23,"bael":30,"bas":[23,24,26],"bascul":23,"binair":10,"bridg":7,"brutal":24,"champ":6,"chang":30,"cha\u00een":6,"cibl":13,"cloud":[0,6,13,24],"clust":[12,14,17],"cl\u00e9":2,"cod":20,"colon":31,"command":[19,23],"commenc":28,"concept":5,"configur":[0,6,15,16,17,23],"connu":[0,29,30],"construct":13,"construit":11,"contraint":17,"contr\u00f4l":[12,15],"correct":[20,30],"correspond":23,"cycl":[3,4],"c\u00f4t":19,"dat":24,"default_rout":7,"delet":24,"depuis":30,"deux":20,"dhcp":[23,27],"diagnostic":[19,24],"disqu":13,"diverg":24,"dnsmasq":27,"docu":6,"don":[15,23],"d\u00e9faut":7,"d\u00e9j\u00e0":12,"d\u00e9marr":24,"d\u00e9marrag":9,"d\u00e9ploi":[10,14],"d\u00e9velopp":18,"ensembl":3,"error":24,"exploit":25,"ex\u00e9cu":23,"factur":19,"fait":10,"fichi":19,"fonctionnal":[29,30],"fournisseur":13,"frr":[15,16,17],"gateway":7,"host":10,"hyperviseur":[10,12,15],"i":10,"id":6,"idempotent":20,"imag":13,"impos":17,"indispens":7,"init":[0,6,13,24],"inspect":26,"install":[10,15,29],"instanc":6,"integr":27,"interfac":23,"intern":30,"invari":0,"jour":[10,27,30],"journal":26,"journalis":23,"just":24,"lab":19,"lanc":[13,19],"limit":[29,30],"local":19,"metadat":[6,7,23],"michael":29,"mis":[10,27,30],"mod":7,"model":20,"mtu":12,"mult":19,"m\u00e9triqu":26,"nettoi":13,"nom":31,"nommag":8,"n\u00e9cessair":12,"n\u0153ud":[15,19],"observ":26,"o\u00f9":[8,28],"paquet":3,"part":24,"personnalis":13,"pieg":0,"plac":12,"plan":[12,15],"plateform":3,"point":[13,16],"pourquoi":[7,12],"premi":[11,15],"princip":13,"product":6,"prometheus":26,"pr\u00e9requ":[10,19],"puis":13,"p\u00e9rimetr":[29,30],"qcow2":13,"qemu":[0,23,27],"red\u00e9marr":24,"red\u00e9marrag":4,"reflector":16,"regl":2,"rendu":19,"renseign":31,"renvoi":24,"requ\u00eat":[3,20],"ressourc":[3,4,24],"rest":17,"retour":20,"rien":24,"rollback":4,"rout":[7,16],"routeur":17,"r\u00e9f\u00e9rent":22,"r\u00e9seau":[0,6,7],"r\u00f4l":19,"san":[10,12],"scaleway":19,"schem":2,"sc\u00e9nario":19,"sc\u00e9narios":19,"seed":13,"serv":[6,24],"serveur":[7,19,23,27],"servic":27,"socket":27,"stock":8,"stub":3,"subnet":[8,11],"suppos":12,"suppress":4,"supprim":11,"system":24,"systemd":27,"s\u00e9cur":[0,6,19],"temp":20,"test":19,"topolog":[12,19],"transitoir":4,"two":28,"typ":3,"uefi":24,"unit":27,"user":24,"valid":15,"variabl":13,"ver":7,"version":31,"vi":4,"vid":24,"vigil":[13,16],"vm":[0,7,8,11,13,16,19,24,27],"vpc":[8,11],"vrai":19,"vu":3,"vxlan":7,"v\u00e9rifi":[10,11,15,19],"watchdog":[23,26],"\u00e9crir":[13,19],"\u00e9tap":[13,14],"\u00e9tat":[4,10,12],"\u00e9teindr":13}})
\ No newline at end of file
diff --git a/main/versions/0.1.0.html b/main/versions/0.1.0.html
index 1bf2c49..78ce2e9 100644
--- a/main/versions/0.1.0.html
+++ b/main/versions/0.1.0.html
@@ -217,6 +217,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/versions/0.2.0.html b/main/versions/0.2.0.html
index d7c6b45..c1e3f67 100644
--- a/main/versions/0.2.0.html
+++ b/main/versions/0.2.0.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
diff --git a/main/versions/index.html b/main/versions/index.html
index 6e499e3..e06feee 100644
--- a/main/versions/index.html
+++ b/main/versions/index.html
@@ -218,6 +218,13 @@
 </ul>
 </details></li>
 </ul>
+<p aria-level="2" class="caption" role="heading"><span class="caption-text">Développement</span></p>
+<ul class="nav bd-sidenav">
+<li class="toctree-l1 has-children"><a class="reference internal" href="../developpement/index.html">Développement</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>
+<li class="toctree-l2"><a class="reference internal" href="../developpement/lab.html">Lab de test multi-nœud</a></li>
+</ul>
+</details></li>
+</ul>
 <p aria-level="2" class="caption" role="heading"><span class="caption-text">Interne</span></p>
 <ul class="current nav bd-sidenav">
 <li class="toctree-l1 has-children"><a class="reference internal" href="../concepts/index.html">Concepts</a><details><summary><span class="toctree-toggle" role="presentation"><i class="fa-solid fa-chevron-down"></i></span></summary><ul>