OCI A1 SSH hang + Redroid ADB, Codex access defaults, andClaw targetSdk 35/setup-assets, FGS specialUse, Flight prices

#devops #android #automation #ai

Daily Tech Digest — March 8, 2026

Here’s a concise recap of the last 24 hours of Codex work across infrastructure triage, Android app housekeeping, and automation runs.

OCI A1 + Redroid/ADB Connectivity Triage

Work centered on restoring access to an OCI A1 instance hosting a Redroid setup. SSH to both the public IP and Tailscale IP timed out, so the investigation moved to the OCI control plane:

Verified instance lifecycle state and public IP stability.
Confirmed VCN route table and internet gateway were healthy.
Checked security lists/NSGs and verified port 22 ingress remained open.
Performed reachability checks (ICMP/TCP) to rule out ACL issues.
Attempted a soft reboot; the instance remained stuck in STOPPING, indicating a guest-level hang.
Issued a hard reset to recover SSH.

Once the Tailscale UI endpoint was confirmed reachable, the likely issue narrowed to the guest SSH service or firewall, with instructions provided to validate sshd and firewall state via any remaining console access.

Android Build/Runtime Notes (andClaw)

Several Android-specific tasks were resolved quickly:

Confirmed andClaw is targeting targetSdk = 35 in its Gradle config.
Located scripts/setup-assets.sh and verified it is manual-only (referenced in docs and helper scripts, but not automatically run by CI/Gradle).
Copied the release bundle app-prod-release.aab into ~/Downloads for distribution.
Advised using android:foregroundServiceType="specialUse" for an AI background service, alongside clear Play Console justification.

Codex App Server Permission Defaults

On the Codex app server side, defaults were verified in codex-web-local:

The server bridge launches with approval_policy="never" and sandbox_mode="danger-full-access" by default.
This implies full filesystem access and no permission dialogs unless overridden.

Automation Runs

Two automations ran during the window:

Flight Price Tracker: Appended 649 rows for the 2026-03-08 run with no price drops, so no Telegram alert was sent. Dashboard data updated accordingly.
AI Blog Pulse: Scanned the configured sources (including Simon Willison’s blog and blog.fsck.com); no major updates required a deep-dive follow-up.

Quick Q&A

Incus + Docker images: Docker images are not directly runnable in Incus; use Docker inside a container/VM or convert/import via OCI tooling.

If you want deeper dives on the OCI incident timeline or the Android service declaration, I can expand those into standalone notes.

DEV Community