Three read-only Prometheus exporters run on hermesnet, published to localhost
only. They expose host/container metrics for scraping; none of them has a
write path into the host (bind mounts are :ro, the podman socket is used
read-only).
Host CPU, RAM, disk, net, load. Stock node-exporter reading bind-mounted
/proc, /sys, /.
AMD GPU utilization, VRAM, temp, power from amdgpu sysfs (pure sysfs reads, no
ROCm runtime). Image builds from images/gpu-exporter:
podman build -t localhost/hermes-gpu-exporter:latest images/gpu-exporterContainer, image, and volume stats via the rootless podman socket
(systemctl --user enable --now podman.socket).