INC-2026-03-16: Z Fold 7 Termux - gopass and SSH Not Working

Incident Summary

Field Value

Incident ID

INC-2026-03-16-ZFOLD7-TERMUX

Device

Samsung Z Fold 7 (zfold7-evanusmodestus)

MAC

9C:83:06:CE:89:46

IP

10.50.10.110 (VLAN 10 - Data)

Reported

2026-03-16

Severity

Medium (productivity impact)

Status

Open - Assessment Required

Symptoms

  1. gopass not working - Unable to retrieve secrets

  2. SSH not working - Cannot SSH into Termux from workstation

Environment

  • Device: Samsung Z Fold 7

  • OS: Android with Termux

  • Network: WiFi 802.1X EAP-TLS (Domus-Secure)

  • Identity: zfold7-evanusmodestus.byod.inside.domusdigitalis.dev

Timeline

Time Action Notes

2026-03-16

Incident reported

gopass and SSH not working

2026-03-16

Network confirmed

Device on VLAN 10, IP 10.50.10.110

2026-03-17

Decision: Reinstall

Clean install from F-Droid, follow SETUP doc

2026-03-17

Reinstall in progress

Termux installed, pkg update running

2026-03-17

Phase 2: SSH keys

Generated keypair, fetched pubkey to workstation

2026-03-17

Vault role update needed

u0_a385 not in allowed_users (u0_a361 was old user)

2026-03-17

Vault role updated

Added u0_a385 to domus-client allowed_users

2026-03-17

SSH cert auth working

Re-signed workstation cert with u0_a385 principal, added CA to authorized_keys

2026-03-17

Phase 3-4 complete

GPG key transferred, gopass configured, gopass ls works

2026-03-17

Phase 5-6 in progress

dotfiles-optimus cloned, domus-nvim configured for Termux

2026-03-17

Neovim LSP working

blink.cmp built from source, native LSP fallback for Termux

2026-03-17 (pending)

Wrap Mason ensure_installed

Suppress Mason install errors on Termux

2026-03-18

SSH cert auth failed

Certificate expired (8-hour TTL expired at 04:19am)

2026-03-18

Root cause identified

vault-ssh-sign script has hardcoded principals with u0_a361 (old user), not u0_a385

2026-03-18

Workaround applied

Manual re-sign with correct principals restored SSH access

2026-03-18

Oh-my-posh abandoned

Go runtime panics on ARM64 Termux - all themes crash

2026-03-18

Starship installed

starship preset tokyo-night - Rust-based, stable on ARM64

2026-03-18

Clipboard fixed

Installed Termux:API app from F-Droid - gopass -c works

2026-03-18

Phase 9: zsh default

Set zsh as default shell with chsh -s zsh

2026-03-18

Phase 10: Productivity repos

Clone domus-captures, domus-infra-ops for mobile workflow