Notes

I forgot to let the Codex VM reach my PXE server through the firewall, so the Proxmox reinstall should have failed.

It did not.

Codex used the target host as a jump box, staged the PXE stack, armed one-shot PXE, forced the PXE boot with headless-amt, watched the install over KVM, then flipped boot back to disk and disarmed PXE.

Both scary and fascinating.

Successful /goal run: ~28 minutes, after ~12 hours idle waiting for credentials. Oops.

headless-amt is headless Intel AMT control, now being hardened for OSS release.

Update: Bought a base M4 Mac Mini, 32GB, to offload the work and run autonomous agents

Running agents remotely, accessing them from anywhere. Not ideal, but it works. Optimize later.

iPhone [→ WireGuard] → iSH → ssh Mac Mini → limactl shell → tmux attach → codex —dangerously-bypass-approvals-and-sandbox

Verified for Cyber in ChatGPT/Codex.

Mostly means I can now use it for authorized defensive work on my own systems: firewall validation, VPN testing, network automation, and live infrastructure checks.