DinaSync connectivity

Run dinasync --check-config and fix the reported ICE line and column. Plain HTTP is rejected unless explicitly enabled for local development.

Confirm that the token is unexpired, was created in the intended workspace, and is passed through standard input. Retrying the same token after a lost response can reuse the encrypted pending enrollment identity.

Check system time, CA trust, the configured control-plane URL, and outbound HTTPS access. Inspect the systemd service log without printing credentials.

Targets can intentionally exist without assignment. Edit the target and assign an active agent after enrollment.

DinaSync accepts the versioned deployment.execute command with Docker Compose, Docker container, and Docker Swarm strategies. Confirm that the installed agent version supports the target strategy and protocol version emitted by Codinamo.

Do not work around an unsupported command with arbitrary remote shell execution. Upgrade DinaSync or select a supported target strategy.

Confirm that the dinasync service account can access the Docker daemon, the host can pull the release image, and the selected Docker context exists. Then inspect the originating run logs for the exact Docker operation that failed.