persistence sweep: 53 templates measured; gramps-web + wishlist fixed; runtime gate added
Campaign 10's R-156 found papra writing its database into the container's writable layer while the volume the template preserves stayed empty — a backup that completes, verifies, and contains nothing. papra was never the point: nothing anywhere checked that the folder a template preserves is the folder the app writes to. All 53 templates have now been measured live. 43 CLEAN / 3 BROKEN / 7 UNDETERMINED. UNDETERMINED is counted separately, each with its reason, and never folded into CLEAN. FIXED (neither app is deployed anywhere, so nothing was stranded): - gramps-web mounted /app/data, /app/media, /tmp — and /app/data is a path the application never writes. Its accounts database and ITS FAMILY TREE both landed in the writable layer while gramps_data was tarred nightly as an empty directory. Now persists the eight paths the image's own environment names, matching upstream's reference compose. Proven: users.sqlite and the family-tree files survive a redeploy byte-identical, same inode. - wishlist mounted wishlist_data:/data, another path the app never writes; prod.db landed in the ANONYMOUS volume from the image's VOLUME directive — absent from ResolveDockerVolumeNames, so never backed up, and orphaned by a redeploy. Now mounts /usr/src/app/data + /usr/src/app/uploads. Proven: prod.db byte-identical, same inode, across a redeploy. Every corrected path confirmed by two independent sources — the shipped image's own environment/Config.Volumes and upstream's reference compose — never inferred from a directory name. papra is NOT fixed. It is live on one box, and changing the mount target makes the next compose up recreate the container and destroy the writable layer its documents live in. The fix is prepared and proven in the scratch guest (current: db.sqlite differs after a redeploy, so a real account created via the API is lost; fixed: byte-identical, it survives). Referred to the operator with the two options; no migration written. NEW GATE scripts/check-volume-persistence.py — the third catalog gate and the only RUNTIME one. This class is invisible to static analysis, measured not assumed: a static audit of all 53 composes reports the catalog clean AND reports papra clean. Exit 0 clean / 1 REFUSED / 2 undecided. It refuses to report at all unless it has just re-proven itself in both directions against two canary templates that differ only in which path the volume mounts at, so every run carries a live demonstration of R-156 and of its fix. No docker exec anywhere (Campaign 7 §1.1). 44 fixture tests driving check(), the function __main__ calls; every rule red-proofed. Enforcement is convention, not CI — this repo has no CI. Stated plainly in the report; raising it is proposed as R-160. Report, per-app evidence, proofs and proposed register entries (R-158..R-161, NOT filed — felhom.eu is fenced this session): audits/persistence-sweep-2026-08-02/
This commit is contained in:
@@ -0,0 +1,749 @@
|
||||
# Catalog persistence sweep — does every app's data land in a persisted volume?
|
||||
|
||||
**Run:** 2026-08-02 · **Repo:** `app-catalog-felhom.eu` (only) · **Class:** implementation —
|
||||
detection first, fixes second.
|
||||
|
||||
Campaign 10 found that papra stores its database somewhere the backup never looks (R-156). papra is
|
||||
not the interesting part. **Nothing anywhere checked that the folder a template preserves is the
|
||||
folder the app writes to**, across 53 templates. This is what that check found.
|
||||
|
||||
> **Parallel-session fence, observed.** Another session was running the M-band RTO measurement on
|
||||
> `demo-hp`, writing to `felhom.eu`. This session ran on `demo-felhom` and committed only to
|
||||
> `app-catalog-felhom.eu`. **No commit to `felhom.eu`, no register edit, nothing on `demo-hp`.**
|
||||
> All register entries below are proposed text for later filing by one session, in one place.
|
||||
|
||||
---
|
||||
|
||||
## 1. Venue and baselines
|
||||
|
||||
| | |
|
||||
|---|---|
|
||||
| Host | **`demo-felhom`** (N100), Tier 0 — `ssh felhom-pve` (Tailscale `100.70.170.35`) |
|
||||
| Guest | **LXC 9301 `catalog-persist`**, created for this run and destroyed at teardown (§9) |
|
||||
| Guest spec | Debian 13, 4 cores, 6 GB + 2 GB swap, `local-lvm:120`, `nesting=1,keyctl=1`, DHCP `192.168.0.22` |
|
||||
| Reach | `ssh felhom-pve "pct exec 9301 -- …"`. **No direct SSH**: the N100 sits on a remote LAN whose `192.168.0.0/24` collides with DooPlex's, so `192.168.0.22` is unroutable from here (`No route to host`) |
|
||||
| Docker | 29.7.1, compose v5.3.1 |
|
||||
| Untouched | guest **9201** on `demo-felhom` (read-only `docker ps`/`volume ls` only), `drill-r50`, Peti's cluster, both boxes' backup configuration, **everything on `demo-hp`** |
|
||||
|
||||
### Baselines, read fresh
|
||||
|
||||
| What | Value | How |
|
||||
|---|---|---|
|
||||
| `app-catalog-felhom.eu` HEAD | **`4252121`** = `origin/main`, clean at start | `git rev-parse` |
|
||||
| Templates | **53** | `ls templates \| wc -l` |
|
||||
| `felhom.eu` HEAD (read-only, for citation) | **`7ba7c2a`** | `git rev-parse` — **not committed to** |
|
||||
| felhom-controller `main` | **v0.188.0**, HEAD `4115e88` | `CHANGELOG.md` top |
|
||||
| Hub | 0.86.0 | live `/apps` footer |
|
||||
|
||||
### Why the scratch guest runs no controller — stated, because the brief asks for its version
|
||||
|
||||
There is **no felhom-controller on 9301, deliberately.** The property under test is a property of
|
||||
the *template*, and the controller's role in it is exactly one thing: it resolves the `${…}`
|
||||
variables and runs `docker compose up -d` (`felhom-controller/internal/stacks/deploy.go:374`,
|
||||
`:551-582`). It does not rewrite the compose file, so a plain Docker host reproducing that env
|
||||
substitution exercises the identical code path in the app.
|
||||
|
||||
Standing a controller up would have meant enrolling a box with the hub — creating hub-side state
|
||||
this session is told not to create, and which R-131 records four orphaned instances of. The
|
||||
substitution the controller performs is instead **mirrored exactly**, including the trap that
|
||||
`generateValue` prefixes `base64key` with `base64:` (`deploy.go:904`); getting that wrong cost one
|
||||
false verdict before it was caught (§3.4).
|
||||
|
||||
---
|
||||
|
||||
## 2. Part 0 — had this ground been covered?
|
||||
|
||||
**No. Neither Campaign 7 nor any gate, `.felhom.yml` field, or CI check tests this property.**
|
||||
Each negative below names what was searched.
|
||||
|
||||
### 2.1 Campaign 7 tested deployability and health, not persistence
|
||||
|
||||
`felhom.eu/documentation/audits/CAMPAIGN-7-catalog-sweep-2026-07-19.md:38-51` states its method:
|
||||
per-container terminal health verdict, healthcheck-binary audit, HTTP probe through the real
|
||||
Traefik ingress, login where scriptable, and a log scan. Its result matrix (`:114`) carries the
|
||||
columns *pin · MAJOR · deploy · health · http · logs · settle*. **There is no persistence column,
|
||||
and no step in the method reads where data landed.**
|
||||
|
||||
The proof that this is a gap rather than a technicality is in that same matrix: **papra passed it**
|
||||
— `deploy ok`, `health **fixed** ×2`, `http 200`, `logs clean` (`:151`) — while its database was
|
||||
being written to a directory no backup would ever contain. Campaign 7 also demonstrated the
|
||||
narrower fact that a healthcheck can be a lie (C7-F4, `:210-224`); this sweep demonstrates that a
|
||||
*truthful* healthcheck is still not evidence about data.
|
||||
|
||||
**What changed since:** nothing that would have closed it. Between Campaign 7 and today the catalog
|
||||
gained the resolvability gate (2026-07-21), `lifecycle:` (2026-07-21) and R-75's `data_paths:`
|
||||
(2026-07-26) — image currency, circulation status, and folder *labelling* respectively.
|
||||
|
||||
### 2.2 No gate asserts a volume ⟷ data-path relationship. Searched:
|
||||
|
||||
| Where | What was searched | Result |
|
||||
|---|---|---|
|
||||
| `app-catalog-felhom.eu/scripts/` | full listing | exactly two gates, `check-image-pins.py` (syntactic tag check) and `check-image-resolvable.py` (does the tag still exist) — **both about images, neither about volumes** |
|
||||
| catalog repo CI | `.gitea/workflows`, `.github`, drone/woodpecker/ci config; every non-template YAML | **none exists.** Catalog gates are convention-run, invoked by whoever edits the catalog — this matters for §7 |
|
||||
| all four repos | `grep -rniE "volume.*(persist\|data.?path\|writable.layer)\|writable.layer\|docker diff\|persistence.(gate\|check)" --include=*.py --include=*.go --include=*.sh` | no check of this kind; the only hits are comments and a test fixture name |
|
||||
| all gate scripts, four repos | `ls felhom-controller/scripts/*.py felhom.eu/scripts/*.py app-catalog-felhom.eu/scripts/*.py felhom-agent/scripts/*` | 11 gates. The closest by name, `felhom-controller/scripts/docker_run_volume_path_gate.py`, is unrelated: it allowlists `docker … -v` arguments in **controller Go code** so a controller-local host path cannot be mounted from inside a container (v0.125.0 scenario D) |
|
||||
| `.felhom.yml` schema | `backup:`, `data_paths:`, `lifecycle:`, `deploy_fields:` | none expresses "the app writes here" |
|
||||
|
||||
### 2.3 The two validators that look closest cannot see this class
|
||||
|
||||
`ValidateBackupSpec` (`felhom-controller/internal/appbackup/classify.go`) and `ValidateDataPaths`
|
||||
(`internal/stacks/datapaths.go:58`) both reject an entry matching no compose bind — real checks, but
|
||||
of **declaration consistency**, not of runtime behaviour. And both operate on
|
||||
`ParseComposeClassifiableBinds` (`internal/stacks/classify_binds.go`), which keeps only mounts whose
|
||||
host side passes `classifyRoot` — i.e. paths under `${USERDATA_PATH}` / `${HDD_PATH}` /
|
||||
`${IMPORT_PATH}`. **Named volumes are skipped entirely.**
|
||||
|
||||
That is decisive for papra, which has **zero binds**: every one of these validators is vacuously
|
||||
satisfied by it. It is also decisive for scale — **39 of 53 templates declare no felhom-root bind at
|
||||
all**, so for three-quarters of the catalog the entire data-protection story is `DumpAppVolumes`
|
||||
(`internal/backup/backup.go:543`) tarring a named volume, and nothing checks that the volume has
|
||||
anything in it.
|
||||
|
||||
### 2.4 R-156's evidence, read before building
|
||||
|
||||
`felhom.eu/documentation/tests/campaign10-evidence-2026-07-31/r156-papra-volume.txt` — five numbered
|
||||
observations: the volume mounted at `/app/data`; `uid=999(nonroot)` with `/app/data` `root root`;
|
||||
`touch: cannot touch '/app/data/.w': Permission denied`; the volume empty but for a canary the
|
||||
campaign wrote **as root**; and `db.sqlite` 475136 B in the container's writable layer at
|
||||
`/app/app-data/`. The detector was built against those observations, and it reproduces all of them.
|
||||
|
||||
---
|
||||
|
||||
## 3. The detector
|
||||
|
||||
`scripts/check-volume-persistence.py`. **The detector and the gate are the same program** — the
|
||||
sweep below was produced by running the committed gate, so the durable artifact is the thing that
|
||||
generated the evidence rather than a paper copy of it.
|
||||
|
||||
Per app: deploy from the template → exercise it into writing data → compare where the data landed
|
||||
against what the compose mounts.
|
||||
|
||||
### 3.1 What is observed, and why nothing uses `docker exec`
|
||||
|
||||
| | signal | how |
|
||||
|---|---|---|
|
||||
| M | mount inventory, by persistence class | `docker inspect .Mounts` |
|
||||
| D | the writable layer | `docker diff` — Docker **excludes every mounted path** from it, so an entry here is definitionally in no volume and no bind |
|
||||
| U | the app's real uid/gid | `/proc/<State.Pid>/status`, **not** `Config.User` — which is empty for papra even though it drops to 999 |
|
||||
| W | writability of each mount by that uid | host-side `stat` of the mount source |
|
||||
| E | mount occupancy | host-side walk of the mount source |
|
||||
|
||||
**No `docker exec` anywhere.** Campaign 7 §1.1 recorded that `docker exec` writes its OCI error to
|
||||
STDOUT, so a *missing* binary printed `executable file not found` and read as **present** — which
|
||||
made that campaign's entire healthcheck audit report every app honest. Everything here is read from
|
||||
`docker inspect`, `docker diff`, `/proc` and the host filesystem, so a distroless or shell-less
|
||||
image is observed exactly like any other.
|
||||
|
||||
### 3.2 Mount classes — the second defect class this exposes
|
||||
|
||||
| class | persists a redeploy? | backed up? |
|
||||
|---|---|---|
|
||||
| `named-declared` — in the compose `volumes:` block | yes | **yes** |
|
||||
| `anonymous` — an image `VOLUME` or unnamed mount (64-hex docker name) | survives a *restart* | **NO** |
|
||||
| `bind` | yes | per the backup spec |
|
||||
| `tmpfs` | no | no |
|
||||
|
||||
The anonymous case is deceptive precisely because it survives a restart. `ResolveDockerVolumeNames`
|
||||
(`felhom-controller/internal/appbackup/appdata.go`) returns `<project>_<name>` only for volumes
|
||||
**declared in the compose file**, so an anonymous volume is invisible to `DumpAppVolumes` — and a
|
||||
`compose down` + `up` orphans it and creates a fresh one. Data there is unbacked-up *and* lost on
|
||||
redeploy, with no symptom until someone looks.
|
||||
|
||||
### 3.3 What counts as "exercised", and what counts as data
|
||||
|
||||
**Exercised.** Every container reaches `running`, and `healthy` where a healthcheck exists; then an
|
||||
HTTP request the app's *own router* answers. Any status code — including 3xx/4xx/5xx — proves the
|
||||
request reached application code; a connection refusal (`000`) does not. If that produced no writes
|
||||
anywhere, a **second-chance pass** walks a wider path list following redirects, so a first-run
|
||||
wizard is actually reached, and waits again. **An app that still writes nothing is UNDETERMINED,
|
||||
never CLEAN** — health-check-passing is not data-writing, and conflating the two is what let papra
|
||||
look fine.
|
||||
|
||||
**Data versus noise.** Three rules, deliberately explicit rather than buried in a heuristic:
|
||||
|
||||
1. **Noise** — `/tmp`, `/run`, `/var/log`, `/var/cache`, package-manager state, `__pycache__`,
|
||||
`node_modules`, `.cache`, `*.pid`, `*.sock`, `*.log`, `*.pyc`, and the per-container files
|
||||
Docker itself writes (`/etc/hosts`, `/etc/resolv.conf`, …).
|
||||
2. **Database signature** — a filename that *proves* a database is in that directory
|
||||
(`*.sqlite*`, `PG_VERSION`, `ib_logfile*`, `data.mdb`, `dump.rdb`, `MANIFEST-*`, `data.ms`, …).
|
||||
The strongest signal, and it needs no path heuristics.
|
||||
3. **Data token** — a path saying "app state" (`data`, `storage`, `uploads`, `library`, `documents`,
|
||||
`var/lib/postgresql`, …), used only where rule 2 is silent.
|
||||
|
||||
**`A` versus `C` is the whole difficulty**, and rule 3 is where judgement actually lives:
|
||||
|
||||
- `A` (added) — the app **created** this file; it exists only in the writable layer. papra's
|
||||
`db.sqlite` is an `A`. **DATA is decided from `A` entries only.**
|
||||
- `C` (changed) — a file that **ships in the image** was touched. Usually a chown sweep and
|
||||
entirely benign. A `C` on a *database-signature* file is genuinely ambiguous, because an app
|
||||
writing into a DB shipped in its image looks identical. Those are held as **SUSPECT** and settled
|
||||
**by bytes**: the file is copied out of the running container and out of a pristine container
|
||||
created from the same image, and compared. Identical → a chown, recorded and dismissed.
|
||||
Different → a real write into an image-layer file, which is papra's defect with a different verb.
|
||||
Unreadable → **UNDETERMINED**, never folded into CLEAN.
|
||||
|
||||
### 3.4 Red-proofs — both directions, before the sweep, and again on every run
|
||||
|
||||
| | claim | result |
|
||||
|---|---|---|
|
||||
| **positive** | it flags **papra** | **BROKEN**, reproducing R-156's evidence line for line: `/app/data` EMPTY and `NOT writable by the app's own uid=999 gid=999`, `db.sqlite` in the writable layer at `/app/app-data/db` |
|
||||
| **negative** | it stays quiet on a known-good app | **vaultwarden CLEAN** — and *demonstrably* good, not merely unflagged (below) |
|
||||
|
||||
The negative is a **proven** negative. `state/survive2.py` deployed vaultwarden, let it write, ran a
|
||||
real `docker compose down` + `up -d` (no `-v` — that is a redeploy; `down --volumes` is the
|
||||
uninstall path, Campaign 7 §2), and re-fingerprinted every file by sha256 **and inode**:
|
||||
|
||||
```
|
||||
vaultwarden SURVIVES before=4 after=4 survived=2 changed=2 lost=0
|
||||
survived: /data::db.sqlite3 <- the database itself, byte-identical, SAME INODE
|
||||
/data::rsa_key.pem
|
||||
changed : /data::db.sqlite3-shm , /data::db.sqlite3-wal <- SQLite sidecars, expected on restart
|
||||
```
|
||||
|
||||
**The self-test runs on every invocation, in both directions.** Before the gate reports anything it
|
||||
puts two canary templates through the same prober and refuses to issue a verdict unless it calls
|
||||
one BROKEN and the other CLEAN. Both are built from a purpose-made image reproducing papra's exact
|
||||
ownership shape — `/app/data` root-owned, `/app/app-data` owned by the app's uid — and **differ only
|
||||
in which path the volume is mounted at**, so the canary pair is a live demonstration of R-156 *and*
|
||||
of its fix, every run. A detector that flags nothing is worse than none: it converts an unexamined
|
||||
catalog into a documented-clean one.
|
||||
|
||||
### 3.5 Seven defects in the detector, every one found by adjudicating a flag rather than trusting it
|
||||
|
||||
Recorded because each would have put a wrong number in the matrix, and **six of the seven made a
|
||||
correct app look broken** — the failure mode that gets a gate switched off and then protects nothing.
|
||||
|
||||
| # | defect | what it did |
|
||||
|---|---|---|
|
||||
| 1 | **`base64key` lost the controller's `base64:` prefix** (`deploy.go:904`) | bookstack's Laravel `APP_KEY` was invalid, it served 500s, read UNDETERMINED. With the prefix: CLEAN. A harness bug wearing an app defect's clothes — the class Campaign 7 §1.1 and Campaign 10 §4d both record |
|
||||
| 2 | **`C` entries scored as data** | a linuxserver.io entrypoint re-owning its application tree produced **1305 `C` entries** for calibre-web, 92 of them PNGs under `cps/static/css/images/**`. Called BROKEN. Led to the `A`/`C` split and the byte-level adjudicator (§3.3) |
|
||||
| 3 | **a cache *directory* escaped the noise filter** | `docker diff` lists directories, so the bytecode cache appeared as a bare `…/crafty/config/__pycache__` entry while its `.pyc` children were filtered by suffix — the directory then being the only surviving entry under a path containing `config`. crafty-controller called BROKEN four times over with its data correctly placed. Fixed by normalising with a trailing slash, covering `node_modules`, `.cache`, `.git` at once |
|
||||
| 4 | **`postgresql.conf` listed as a database signature** | it is a *config* file the postgres entrypoint writes at init. immich called BROKEN with its PGDATA correctly in its volume, **1831 files** |
|
||||
| 5 | **path tokens convicted on their own** | onlyoffice unpacks its OWN static assets into the writable layer at first boot — plugin icons, slide-theme `media/`, `web-apps/apps/api/documents/api.js`, **2560 added entries** — while its real data mount received data normally. Rule 3 was **demoted to report-only** |
|
||||
| 6 | **the structural check asked per container, not per app** | fired on **docmost, immich and claper** — three correct apps, identical shape: the app container's only volume is for user uploads and legitimately empty on a fresh install, while all real state sits in the sibling database container's volume (1540 / 1833 / 1470 files) |
|
||||
| 7 | **mount rules never consulted the noise list** | the prefixes are written `/run/`, so a bare mount target `/run` matched none of them. privatebin's image declares `VOLUME /run`; the anonymous volume docker made there holds `nginx.pid`, `php-fpm.sock` and s6 fifos, and read as 14 files of unbacked-up customer data |
|
||||
|
||||
Plus one that was not a false verdict but a **reporting** defect, and arguably the worst of the set:
|
||||
|
||||
8. **A finding was being swallowed by a louder one.** gramps-web's structural finding — its *family
|
||||
tree* landing outside every mount, the entire point of the app — went into the undetermined
|
||||
bucket, and that bucket is discarded whenever a BROKEN leg exists. Its lesser defect (the
|
||||
accounts database) convicted first and hid it. A finding that disappears because a different
|
||||
finding won belongs to the same family as an absent log line read as health, and the fix is that
|
||||
the structural finding is now reported whatever the verdict.
|
||||
|
||||
**The pattern, which is the real lesson.** Every false positive came from a rule that identified data
|
||||
by its **name** rather than by evidence of what it is: `C` assumed to be a write, `postgresql.conf`
|
||||
assumed to be a database, `media/` and `config/` assumed to be customer content, `/run` assumed to be
|
||||
storage because it was a volume. The rules that never needed correcting are the ones grounded in
|
||||
something checkable — a database file the app **created**, a mount its own uid **cannot write**,
|
||||
bytes that **differ** from the image's copy, and *did anything land in a preserved folder at all*.
|
||||
|
||||
**Restarts, stated plainly.** The sweep was restarted from the first app **twice** rather than merge
|
||||
a matrix built by more than one version of the rules — the call Campaign 10 made restarting run 2b
|
||||
from cycle 1. Defects 6, 7 and 8 were found after the final pass had begun; all three are in
|
||||
`classify()`, which reads only what the probe already captured, so those verdicts were **re-derived**
|
||||
rather than re-measured (`state/reclassify.py`), and then **every non-CLEAN and every flipped app was
|
||||
re-run live end-to-end** through the final gate so no reported verdict rests on post-processing
|
||||
(§5.3). Six verdicts changed on re-derivation: claper, docmost, immich, sparkyfitness and zipline
|
||||
UNDETERMINED→CLEAN, privatebin BROKEN→UNDETERMINED.
|
||||
|
||||
**And one rule was written, red-proofed, and deleted.** A second "are all this directory's children
|
||||
noise?" filter looked like a sensible belt to defect 3's brace. Its red-proof came back **green**,
|
||||
which is the tell: `e["added"]` can only ever contain entries that already passed `is_noise`, so the
|
||||
check is always False — dead code wearing the costume of a safeguard, exactly the trap `CLAUDE.md`
|
||||
catalogues. It is gone, the code says why it is not there, and
|
||||
`test_cache_directories_are_filtered_at_ENTRY_level` pins the mechanism that actually does the work.
|
||||
|
||||
## 4. The sweep — all 53 templates
|
||||
|
||||
**43 CLEAN · 3 BROKEN · 7 UNDETERMINED.** UNDETERMINED is counted separately and is never folded
|
||||
into CLEAN; each one's reason is in §4.2.
|
||||
|
||||
Evidence per app: `evidence/<app>/probe.json` — the full probe (mount inventory with occupancy and
|
||||
writability, the app's real uid, the writable-layer rollup, the adjudicated suspects) plus the
|
||||
verdict and its reasons. Runner log: `state/gate.log`.
|
||||
|
||||
**How to read the mount column:** `[vol]` a named volume declared in the compose (persisted AND
|
||||
backed up) · `[ANON]` an anonymous volume from the image's own `VOLUME` directive (persisted across
|
||||
a restart, **never backed up**, orphaned by a redeploy) · `[bind]` a host bind · `,EMPTY` the mount
|
||||
received nothing.
|
||||
|
||||
### 4.1 The matrix
|
||||
|
||||
| app | verdict | what the template mounts | where the app actually wrote | mount not writable by app uid |
|
||||
|---|---|---|---|---|
|
||||
| `gramps-web` | **BROKEN** | /app/data[vol,EMPTY], /app/media[vol,EMPTY], /tmp[vol,EMPTY] | **/app/users (writable layer)** | — |
|
||||
| `papra` | **BROKEN** | /app/data[vol,EMPTY] | **/app/app-data/db (writable layer)** | /app/data |
|
||||
| `wishlist` | **BROKEN** | /data[vol,EMPTY], /usr/src/app/uploads[ANON,EMPTY], /usr/src/app/data[ANON] | /usr/src/app/data(1) | — |
|
||||
| `bentopdf` | **UNDETERMINED** | — | nothing | — |
|
||||
| `glance` | **UNDETERMINED** | /app/config[vol,EMPTY] | nothing | — |
|
||||
| `plant-it` | **UNDETERMINED** | — | nothing | — |
|
||||
| `privatebin` | **UNDETERMINED** | /tmp[ANON,EMPTY], /var/lib/nginx/tmp[ANON,EMPTY], /srv/data[vol,EMPTY], /run[ANON] | /run(14) | — |
|
||||
| `recipe-importer` | **UNDETERMINED** | /data[vol,EMPTY] | nothing | — |
|
||||
| `uptime-kuma` | **UNDETERMINED** | /app/data[vol,EMPTY] | nothing | — |
|
||||
| `wanderer` | **UNDETERMINED** | /app/uploads[vol,EMPTY], /pb_data[vol], /data/plugins[vol,EMPTY], /meili_data[vol] | /pb_data(6), /meili_data(11) | — |
|
||||
| `actualbudget` | **CLEAN** | /data[vol] | /data(2) | — |
|
||||
| `adventurelog` | **CLEAN** | /code/media[vol], /var/lib/postgresql/data[vol] | /code/media(251), /var/lib/postgresql/data(2287) | — |
|
||||
| `audiobookshelf` | **CLEAN** | /config[vol], /metadata[vol], /audiobooks[bind,EMPTY], /podcasts[bind,EMPTY] | /config(16), /metadata(1) | — |
|
||||
| `bookstack` | **CLEAN** | /config[vol], /var/lib/mysql[vol] | /config(20), /var/lib/mysql(291) | — |
|
||||
| `calcom` | **CLEAN** | /var/lib/postgresql/data[vol] | /var/lib/postgresql/data(2261) | — |
|
||||
| `calibre-web` | **CLEAN** | /config[vol], /cwa-book-ingest[bind,EMPTY], /calibre-library[bind] | /config(11), /calibre-library(3) | — |
|
||||
| `claper` | **CLEAN** | /app/priv/static/uploads[vol,EMPTY], /var/lib/postgresql/data[vol] | /var/lib/postgresql/data(1470) | — |
|
||||
| `code-server` | **CLEAN** | /config[vol] | /config(6) | — |
|
||||
| `crafty-controller` | **CLEAN** | /crafty/servers[vol,EMPTY], /crafty/app/config[vol], /crafty/import[vol,EMPTY], /crafty/backups[vol,EMPTY], /crafty/logs[vol] | /crafty/app/config(16), /crafty/logs(8) | — |
|
||||
| `docmost` | **CLEAN** | /app/data/storage[vol,EMPTY], /var/lib/postgresql/data[vol], /data[vol] | /var/lib/postgresql/data(1540), /data(3) | — |
|
||||
| `emby` | **CLEAN** | /config[vol], /media[bind] | /config(46), /media(3) | — |
|
||||
| `ghost` | **CLEAN** | /var/lib/ghost/content[vol] | /var/lib/ghost/content(7) | — |
|
||||
| `gitea` | **CLEAN** | /data[vol] | /data(8) | — |
|
||||
| `gokapi` | **CLEAN** | /app/data[vol], /app/config[vol] | /app/data(4), /app/config(1) | — |
|
||||
| `grafana` | **CLEAN** | /var/lib/grafana[vol] | /var/lib/grafana(543) | — |
|
||||
| `home-assistant` | **CLEAN** | /config[vol] | /config(21) | — |
|
||||
| `homebox` | **CLEAN** | /data[vol] | /data(3) | — |
|
||||
| `homepage` | **CLEAN** | /app/config[vol], /var/run/docker.sock[bind,EMPTY] | /app/config(3) | — |
|
||||
| `immich` | **CLEAN** | /cache[vol,EMPTY], /var/lib/postgresql/data[vol], /data[vol], /usr/src/app/upload[bind], /external/photos[bind,EMPTY], /data[ANON,EMPTY] | /var/lib/postgresql/data(1833), /data(3), /usr/src/app/upload(6) | — |
|
||||
| `jellyfin` | **CLEAN** | /config[vol], /cache[vol], /media[bind] | /config(20), /cache(2), /media(3) | — |
|
||||
| `kimai` | **CLEAN** | /opt/kimai/var[vol], /var/lib/mysql[vol] | /opt/kimai/var(2547), /var/lib/mysql(279) | — |
|
||||
| `komga` | **CLEAN** | /config[vol], /data[bind,EMPTY] | /config(11) | — |
|
||||
| `mealie` | **CLEAN** | /app/data[vol] | /app/data(5) | — |
|
||||
| `n8n` | **CLEAN** | /home/node/.n8n[vol] | /home/node/.n8n(7) | — |
|
||||
| `navidrome` | **CLEAN** | /data[vol], /music[bind,EMPTY] | /data(6) | — |
|
||||
| `nextcloud` | **CLEAN** | /var/www/html/data[bind], /var/www/html[vol], /var/lib/mysql[vol], /data[vol] | /var/www/html/data(69), /var/www/html(4001), /var/lib/mysql(311), /data(3) | — |
|
||||
| `onlyoffice` | **CLEAN** | /var/www/onlyoffice/Data[vol], /var/log/onlyoffice[vol], /usr/share/fonts/truetype/custom[ANON,EMPTY], /var/lib/onlyoffice[ANON,EMPTY] | /var/www/onlyoffice/Data(3), /var/log/onlyoffice(11) | — |
|
||||
| `opengist` | **CLEAN** | /opengist[vol] | /opengist(9) | — |
|
||||
| `outline` | **CLEAN** | /var/lib/outline/data[vol,EMPTY], /var/lib/postgresql/data[vol], /data[vol,EMPTY] | /var/lib/postgresql/data(1655) | — |
|
||||
| `paperless-ngx` | **CLEAN** | /var/lib/postgresql/data[vol], /data[vol], /usr/src/paperless/export[bind,EMPTY], /usr/src/paperless/data[vol], /usr/src/paperless/media[bind], /usr/src/paperless/consume[bind,EMPTY] | /var/lib/postgresql/data(1927), /data(3), /usr/src/paperless/data(9), /usr/src/paperless/media(1) | — |
|
||||
| `plex` | **CLEAN** | /media[bind], /config[vol], /transcode[vol,EMPTY] | /media(3), /config(82) | — |
|
||||
| `radarr` | **CLEAN** | /config[vol], /media/movies[bind,EMPTY], /downloads[bind,EMPTY] | /config(11) | — |
|
||||
| `rallly` | **CLEAN** | /var/lib/postgresql/data[vol] | /var/lib/postgresql/data(1580) | — |
|
||||
| `romm` | **CLEAN** | /redis-data[ANON,EMPTY], /romm[ANON,EMPTY], /romm/library[bind,EMPTY], /romm/resources[bind,EMPTY], /romm/config[vol], /var/lib/mysql[vol], /data[vol] | /romm/config(1), /var/lib/mysql(271), /data(4) | — |
|
||||
| `seerr` | **CLEAN** | /app/config[vol] | /app/config(11) | — |
|
||||
| `sonarr` | **CLEAN** | /media/tv[bind,EMPTY], /downloads[bind,EMPTY], /config[vol] | /config(11) | — |
|
||||
| `sparkyfitness` | **CLEAN** | /var/lib/postgresql/data[vol], /app/SparkyFitnessServer/uploads[vol,EMPTY], /app/SparkyFitnessServer/backup[vol,EMPTY] | /var/lib/postgresql/data(1815) | — |
|
||||
| `tandoor` | **CLEAN** | /opt/recipes/staticfiles[vol], /opt/recipes/mediafiles[vol,EMPTY], /var/lib/postgresql/data[vol] | /opt/recipes/staticfiles(3047), /var/lib/postgresql/data(1984) | — |
|
||||
| `termix` | **CLEAN** | /app/data[vol] | /app/data(4) | — |
|
||||
| `vaultwarden` | **CLEAN** | /data[vol] | /data(4) | — |
|
||||
| `vikunja` | **CLEAN** | /app/vikunja/files[vol,EMPTY], /db[vol] | /db(3) | — |
|
||||
| `wger` | **CLEAN** | /home/wger/db[vol], /home/wger/media[vol,EMPTY] | /home/wger/db(1) | — |
|
||||
| `zipline` | **CLEAN** | /zipline/uploads[vol,EMPTY], /zipline/public[vol,EMPTY], /var/lib/postgresql/data[vol] | /var/lib/postgresql/data(1357) | — |
|
||||
|
||||
### 4.2 UNDETERMINED — seven, each with its reason
|
||||
|
||||
**None of these is a pass.** Four are apps that genuinely wrote nothing, which is a limit of the
|
||||
exercise rather than a property of the template; three could not be started at all.
|
||||
|
||||
| app | why it is undetermined | is this a template defect? |
|
||||
|---|---|---|
|
||||
| `bentopdf` | Declares **zero volumes** and wrote nothing. Stateless by design — a browser-side PDF tool. | No — but the gate cannot distinguish "stateless" from "not exercised hard enough", and saying CLEAN would claim a check that was never made. |
|
||||
| `uptime-kuma` | Healthy, 302 to `/setup`, **0 entries in `docker diff`**, volume empty. v2 creates its database only when the setup wizard is submitted. | Unknown. Needs a completed wizard to decide. |
|
||||
| `privatebin` | Wrote nothing to `/srv/data`; no paste was ever posted. (Its `/run`, `/tmp`, `/var/lib/nginx/tmp` anonymous volumes are runtime state — see §3.5.6.) | Unknown. Needs a posted paste to decide. |
|
||||
| `recipe-importer` | Its one mount `/data` stayed empty and the only writes were at `/`. | Unknown. Needs a real import to decide. |
|
||||
| `glance` | **Crash-loop** (`restarting`, exit 1). It needs `/app/config/glance.yml` and the template mounts an empty config volume without seeding one. | Pre-existing and already recorded — Campaign 7 §6.2 proved the same failure on the pre-campaign pin. Not a persistence finding; the app never ran. |
|
||||
| `plant-it` | `pull access denied for msdeluise/plant-it, repository does not exist` — no container was created. | No. The app is `lifecycle: abandoned` for exactly this reason (CHANGELOG 2026-07-21); its dead image is the expected end state. |
|
||||
| `wanderer` | Container `unhealthy`. Its `/pb_data` (6) and `/meili_data` (11) did receive data, so the app is not obviously broken — but a verdict on an unhealthy app would be a verdict on a half-started one. | Unknown. Needs a healthy deploy to decide. |
|
||||
|
||||
### 4.3 What the CLEAN column actually establishes
|
||||
|
||||
For the 43 CLEAN apps the claim is bounded, and worth stating precisely: **the data each app wrote
|
||||
during a first-boot-plus-one-HTTP-request exercise landed inside a mount the template preserves,
|
||||
none of it landed in the writable layer, and every mount was writable by the app's own uid.** It is
|
||||
not a claim that every future write will land there — an app that stores uploads correctly but
|
||||
writes, say, a search index elsewhere on first use would still read CLEAN here. That is the
|
||||
residual gap, and it is what the periodic re-run in §7.1 exists for.
|
||||
|
||||
|
||||
|
||||
## 5. Fixes — two made, each with a survives-a-redeploy proof
|
||||
|
||||
Every corrected path is confirmed by **two independent sources**, never inferred from a directory
|
||||
name: the shipped image's own environment/`Config.Volumes`, and upstream's reference compose.
|
||||
Guessing at a data path is how this defect class was created.
|
||||
|
||||
Neither app is deployed anywhere in the fleet (hub `/apps` lists 10 deployed apps; neither is among
|
||||
them), so neither fix strands anything. **papra is deployed and is therefore NOT fixed** — §6.1.
|
||||
|
||||
### 5.1 `gramps-web`
|
||||
|
||||
Mounted `/app/data`, `/app/media`, `/tmp`. **`/app/data` appears nowhere in the image's environment**
|
||||
— the application never writes it. Now mounts the eight paths the image itself names, matching
|
||||
upstream's reference compose:
|
||||
|
||||
| volume | path | what lives there |
|
||||
|---|---|---|
|
||||
| `gramps_users` | `/app/users` | `GRAMPSWEB_USER_DB_URI` — the accounts database |
|
||||
| `gramps_db` | `/root/.gramps/grampsdb` | `GRAMPS_DATABASE_PATH` — **the family tree** |
|
||||
| `gramps_index` | `/app/indexdir` | `GRAMPSWEB_SEARCH_INDEX_DB_URI` |
|
||||
| `gramps_media` | `/app/media` | `GRAMPSWEB_MEDIA_BASE_DIR` (was already correct) |
|
||||
| `gramps_thumb_cache` · `gramps_cache` · `gramps_secret` · `gramps_tmp` | | caches, exports, secret |
|
||||
|
||||
**Proof — `proofs/gramps-web/survive-gramps-web.json`.** Deploy → exercise → `docker compose down`
|
||||
(no `-v`; that is a redeploy, `down --volumes` is the uninstall path) → `up -d` → re-fingerprint by
|
||||
sha256 **and inode**:
|
||||
|
||||
```
|
||||
gramps-web SURVIVES before=5 after=5 survived=4 changed=1 lost=0
|
||||
survived (byte-identical, SAME INODE):
|
||||
/app/users::users.sqlite <- the accounts database
|
||||
/root/.gramps/grampsdb::<uuid>/database.txt <- THE FAMILY TREE
|
||||
/root/.gramps/grampsdb::<uuid>/name.txt
|
||||
/app/thumbnail_cache::<hash>
|
||||
changed in place: /app/cache::request_cache/<hash> <- a request cache, expected
|
||||
```
|
||||
|
||||
### 5.2 `wishlist`
|
||||
|
||||
Mounted `wishlist_data:/data` — again a path the application never writes. The image declares
|
||||
`VOLUME /usr/src/app/data` and `VOLUME /usr/src/app/uploads` (`Config.Volumes`), and upstream's own
|
||||
compose mounts exactly those two, so `prod.db` was landing in the **anonymous** volume docker
|
||||
creates for an image `VOLUME` directive: invisible to `ResolveDockerVolumeNames`, therefore never
|
||||
backed up, and orphaned by `down` + `up`. Now mounts both real paths.
|
||||
|
||||
**Proof — `proofs/wishlist/survive-wishlist-content.json`.**
|
||||
|
||||
```
|
||||
before redeploy: prod.db inode=47151 size=307200 sha256=f35df23b…
|
||||
after redeploy: prod.db inode=47151 size=307200 sha256=f35df23b…
|
||||
same_inode=true verdict: SURVIVES
|
||||
```
|
||||
|
||||
Same file object, byte-identical content.
|
||||
|
||||
> **A correction, and the limit of this proof.** The generic prover (`state/survive2.py`) first
|
||||
> reported `DATA-LOST` for wishlist. That was the prover, not the app: its rule counts any change
|
||||
> in bytes as a loss, and cannot separate "the app modified its own database on boot" (fine —
|
||||
> vaultwarden's SQLite WAL does exactly that) from "the app recreated it" (data gone). The focused
|
||||
> check settles it on inode. **And the limit:** the seeded content step 404'd — the signup endpoint
|
||||
> was a guess and wrong — so this is a **file-level** proof, not a user-row-level one. Byte-identical
|
||||
> content means nothing in the database was lost, but no row was independently confirmed present
|
||||
> beforehand.
|
||||
|
||||
### 5.3 Both fixes re-checked with the gate that convicted them
|
||||
|
||||
The strongest available confirmation is the same instrument reaching the opposite verdict, with its
|
||||
own two-way self-test green on both runs. `proofs/fixed-check/`:
|
||||
|
||||
```
|
||||
self-testing the prober (both directions)…
|
||||
prober flags the R-156 signature and clears a correct template — trustworthy
|
||||
gramps-web CLEAN
|
||||
wishlist CLEAN
|
||||
2 clean · 0 broken · 0 undetermined (of 2 in scope)
|
||||
volume-persistence gate OK rc=0
|
||||
```
|
||||
|
||||
Before the fixes the same gate reported both BROKEN (`state/verify.log`).
|
||||
|
||||
### 5.4 papra — the fix is proven, and deliberately not applied
|
||||
|
||||
Run in the scratch guest only, on a temporary copy of the template
|
||||
(`proofs/_papra-fix-proof/papra-fix-proof.json`). **A real account was created through papra's own
|
||||
API in both legs** (`sign-up -> HTTP/1.1 200 OK`), so real user data was written to the database
|
||||
before each redeploy:
|
||||
|
||||
| leg | `db.sqlite` before | after | |
|
||||
|---|---|---|---|
|
||||
| **current** `papra_data:/app/data` | `1e9b695a…` | `5d179bf1…` | **different — the account is gone** |
|
||||
| **fixed** `papra_data:/app/app-data` | `9dd5cf37…` | `9dd5cf37…` | **byte-identical — it survives** |
|
||||
|
||||
An incidental confirmation from the same run: under the fixed template `/app/data` reports
|
||||
`present: false`. **The directory does not exist in the papra image at all** — it existed only
|
||||
because the template mounted a volume there. So the volume was not merely unwritable; it was
|
||||
mounted at a path the application has no concept of.
|
||||
|
||||
**Limit of this proof:** the document-upload step did not complete (the follow-up
|
||||
`/api/organizations` call returned `auth.unauthorized` — a session-cookie handling problem in the
|
||||
harness, not in papra), so the user data verified is the account, not an uploaded document.
|
||||
|
||||
**This fix is not committed.** §6.1.
|
||||
|
||||
---
|
||||
|
||||
## 6. Referred to the operator — not decided here
|
||||
|
||||
### 6.1 papra is deployed. Its fix would strand the data it is meant to protect.
|
||||
|
||||
**The fix is prepared and deliberately NOT committed.**
|
||||
|
||||
```diff
|
||||
volumes:
|
||||
- - papra_data:/app/data
|
||||
+ - papra_data:/app/app-data
|
||||
```
|
||||
|
||||
**Why it is a strand risk.** The volume *name* is unchanged, so no volume is orphaned — but the
|
||||
mount target changes, which makes `docker compose up -d` **recreate the container**, and the
|
||||
container's writable layer is where papra's documents and database currently live. Applying this to
|
||||
a running papra destroys exactly the data the change exists to protect.
|
||||
|
||||
**The honest framing, both halves.** That data is already living on borrowed time: an image bump, a
|
||||
`RedeployFromEnv`, a restore, or any other container recreation destroys it just the same, and no
|
||||
backup has ever contained it. But the fix is what *schedules* the loss, on a date the customer does
|
||||
not choose. Scaling that decision down is not this session's call.
|
||||
|
||||
Note that pushing the template alone destroys nothing: the controller's git-sync updates the two
|
||||
template files and does **not** restart the stack (`CLAUDE.md`, deploy contract). The change would
|
||||
take effect at the next deploy. It is still an armed change, which is why it is held.
|
||||
|
||||
**Which box — determined as far as the fences allow, and no further.**
|
||||
|
||||
| checked | result |
|
||||
|---|---|
|
||||
| hub `/apps` (read-only) | **Papra: 1 deployment**, 218 MB avg / 250 MB P95 — it is live somewhere |
|
||||
| `demo-felhom` guest 9201 | **not there** — `docker ps -a` shows no papra container, `docker volume ls` no papra volume |
|
||||
| hub `/configs` | boxes currently reporting: `c10-soak`, `demo-felhom`, `demo-hp` (`david` —, `drill-r50` BLOCKED, `peti-felhom` DOWN, `sess-f` DOWN) |
|
||||
| hub `/hosts/<id>` and `/apps/papra` | neither page attributes a deployment to a host |
|
||||
|
||||
So it is on **`c10-soak`** or **`demo-hp`**, both of which live on demo-hp hardware that this
|
||||
session is fenced from. `c10-soak` is the likelier of the two and would make this moot: it is
|
||||
Campaign 10's own rig, its hub customer record reads *"Campaign 10 two-storage soak (SCRATCH -
|
||||
delete at teardown)"*, and papra was deployed on it **to find R-156 in the first place** — so the
|
||||
"customer data" would be the campaign's own canary. **That is a guess, and it is labelled as one.**
|
||||
One `docker ps` on either box settles it, and the other session owns both.
|
||||
|
||||
**What is asked:** confirm which box, and then either (a) it is `c10-soak` → push the fix, nothing
|
||||
of value is lost, or (b) it is a demo box someone cares about → copy `/app/app-data` out of the
|
||||
running container first (`docker cp papra:/app/app-data <dest>`), then push, then copy back into
|
||||
the new volume. **No migration is shipped here** — §5 of the brief, and inventing one is how this
|
||||
class of defect gets worse.
|
||||
|
||||
### 6.2 Nothing else needed a ruling
|
||||
|
||||
Both other BROKEN apps have an unambiguous correct path — each confirmed by **two independent
|
||||
sources**, never inferred — and neither is deployed anywhere in the fleet, so both were fixed
|
||||
outright (§5). No app was left BROKEN for want of a decision, and no UNDETERMINED app was touched.
|
||||
|
||||
---
|
||||
|
||||
## 7. Part 4 — the gate
|
||||
|
||||
### 7.1 Where catalog gates live, and what runs them
|
||||
|
||||
They live in `app-catalog-felhom.eu/scripts/` as dependency-free Python that exits non-zero on
|
||||
violation, and **nothing automated runs them.** There is no CI in this repo — no `.gitea/workflows`,
|
||||
no `.github`, no drone/woodpecker config; the only YAML outside `templates/` is generated customer
|
||||
output. Each gate is invoked by whoever edits the catalog, and `CLAUDE.md` says when.
|
||||
|
||||
That is the honest description, and it is stated rather than glossed because this project's record
|
||||
on the point is unambiguous: R-29 has three orphaned gates and one enforced one, and the enforced
|
||||
one is the only one that has ever stopped anything. **This gate is at the same enforcement level as
|
||||
its two siblings — convention, not CI.** What would raise it is named in §8 as a proposed register
|
||||
entry; building it would mean touching the controller's sync path, which is out of scope here
|
||||
(§5 fences) and would need a decision about failing a customer's template sync.
|
||||
|
||||
The gate could be built here, so it was. It did not have to wait for `felhom.eu`.
|
||||
|
||||
### 7.2 Why the gate has to be a runtime check — measured, not assumed
|
||||
|
||||
A static audit of all 53 composes — every declared top-level volume attached to a service, no
|
||||
anonymous mounts, no host binds outside the felhom roots — reports the catalog **completely clean**.
|
||||
The single hit is `homepage`'s deliberate read-only `/var/run/docker.sock`.
|
||||
|
||||
**It reports papra clean too.** papra's compose is well-formed: it declares `papra_data` and mounts
|
||||
it at `/app/data`. Nothing in the file is wrong. What is wrong is only observable at runtime.
|
||||
|
||||
So a static gate would have been a gate that could never have caught the defect it was written for —
|
||||
coverage that isn't. `scripts/check-volume-persistence.py` deploys, exercises, and measures.
|
||||
|
||||
### 7.3 What it refuses
|
||||
|
||||
**Exit 1 — REFUSED, not a warning:**
|
||||
|
||||
- DATA in a container's writable layer (never persisted, never backed up);
|
||||
- an app-data mount the app's own uid cannot write (R-156's second leg);
|
||||
- data in an **anonymous** volume (never backed up, orphaned by a redeploy);
|
||||
- a database-signature file in the writable layer whose bytes **differ** from the image's copy.
|
||||
|
||||
**Exit 2 — UNDETERMINED, and explicitly *not* a clean bill of health:** a container that never
|
||||
reached running/healthy; nothing written anywhere; a suspect that could not be adjudicated; or —
|
||||
load-bearing — **the prober failing its own two-way canary**, in which case the gate refuses to
|
||||
report any verdict at all rather than issue a false all-clear.
|
||||
|
||||
**Exit 0** only when every app in scope is CLEAN.
|
||||
|
||||
### 7.4 The test through the path that actually invokes it
|
||||
|
||||
`scripts/test_check_volume_persistence.py` — **31 tests, no Docker** (the prober is injected).
|
||||
They drive **`check()`, the function `__main__` calls**, not just the verdict logic: a gate whose
|
||||
decision logic is tested but whose entry point is not has shipped inert in this project before
|
||||
(the seam-wiring rule, four recorded instances).
|
||||
|
||||
Covered at the entry point: one broken app ⇒ **rc 1** and the app is named; all clean ⇒ rc 0;
|
||||
undetermined ⇒ **rc 2, never rc 0**; broken outranks undetermined; out-of-circulation apps skipped
|
||||
and reported; **a prober that flags nothing ⇒ rc 2**; **a prober that flags everything ⇒ rc 2**.
|
||||
|
||||
Every rule was red-proofed by breaking it and confirming the suite goes red:
|
||||
|
||||
| break | suite |
|
||||
|---|---|
|
||||
| score `C` entries as data again (the calibre-web false positive) | **RED** |
|
||||
| revert the trailing-slash noise normalisation (the crafty false positive) | **RED** |
|
||||
| fold "wrote nothing" into CLEAN | **RED** |
|
||||
| warn instead of refuse (rc 0 on broken) | **RED** |
|
||||
| drop the writable-layer leg (the papra signature) | **RED** |
|
||||
| let an unresolved suspect fall through to CLEAN | **RED** |
|
||||
| drop the `base64:` prefix | **RED** |
|
||||
| *(the deleted all-children-noise rule)* | **GREEN — which is why it was deleted** |
|
||||
|
||||
Registered in `CLAUDE.md` (conventions) and `REUSE.md` (the map), in the same commit.
|
||||
|
||||
---
|
||||
|
||||
## 8. Findings for later filing — PROPOSED TEXT, NOT FILED
|
||||
|
||||
The register is `felhom.eu/documentation/backlog/{ROADMAP,OPEN-ITEMS}.md`, and `felhom.eu` is
|
||||
fenced this session. These are drafts for one session to file, in one place.
|
||||
|
||||
**Register grep before proposing** (read-only, `ROADMAP.md` + `OPEN-ITEMS.md`):
|
||||
`wishlist` -> 1 hit, R-41's deployability gate, unrelated · `gramps` -> 0 · `anonymous` -> 2 hits,
|
||||
both about the golden bake, unrelated · `ResolveDockerVolumeNames` -> 0 · `DumpAppVolumes` -> 0 ·
|
||||
`writable layer` -> 0 · `check-volume-persistence` -> 0. **Highest filed: R-155.** So these start
|
||||
at **R-158**.
|
||||
|
||||
### 8.0 First, a process finding — R-156 and R-157 are themselves unfiled
|
||||
|
||||
`grep -c "R-156\|R-157"` over both register files returns **0 / 0**. They exist only inside
|
||||
`audits/CAMPAIGN-10-two-storage-soak-2026-07-31.md`. This is the identical failure the brief cites
|
||||
for R-154/R-155 — *"minted in a spike doc and never carried across"* — recurring immediately, on
|
||||
the very finding this session was commissioned to act on. **R-156 is the reason this work happened
|
||||
and it is not in the register.** Whoever files the entries below should carry R-156 and R-157
|
||||
across at the same time.
|
||||
|
||||
### R-158 — wishlist's data lands in an ANONYMOUS volume: never backed up, orphaned by a redeploy
|
||||
|
||||
**FIXED HERE** (`templates/wishlist/docker-compose.yml`); filed to record the class.
|
||||
|
||||
The image declares `VOLUME /usr/src/app/data` and `VOLUME /usr/src/app/uploads`
|
||||
(`docker image inspect ghcr.io/cmintey/wishlist:v0.66.0` -> `Config.Volumes`). The template mounted
|
||||
`wishlist_data:/data` — **a path the application never writes**. So `prod.db` went into the
|
||||
anonymous volume docker creates for an image `VOLUME` directive.
|
||||
|
||||
**Why this is worse than an ordinary miss: it survives a restart.** `ResolveDockerVolumeNames`
|
||||
(`felhom-controller/internal/appbackup/appdata.go`) returns `<project>_<name>` only for volumes
|
||||
**declared in the compose file**, so `DumpAppVolumes` never sees an anonymous one — and
|
||||
`compose down` + `up` orphans it and mounts a fresh empty one. Meanwhile `wishlist_data` was tarred
|
||||
nightly as an empty directory. A store that survives a restart, loses on redeploy, and is never in
|
||||
a backup is harder to notice than papra's, because casual testing finds nothing wrong.
|
||||
|
||||
**The class, not just the app:** any image `VOLUME` directive at a path the template does not
|
||||
explicitly mount creates unbacked-up storage silently. **`immich-server` has one today** at `/data`
|
||||
(`Config.Volumes = {"/data":{}}`) — empty when measured, so nothing is at risk now, but anything
|
||||
immich ever writes there is invisible to backup. Suggested standing rule for `REUSE.md`: *a template
|
||||
must mount every path in its image's `Config.Volumes`, or state why not.* Checkable statically only
|
||||
if the image is pulled, which is why it lives in the runtime gate.
|
||||
|
||||
### R-159 — gramps-web persisted three paths and wrote to none of them
|
||||
|
||||
**FIXED HERE** (`templates/gramps-web/docker-compose.yml`).
|
||||
|
||||
The template mounted `/app/data`, `/app/media` and `/tmp`; **`/app/data` appears nowhere in the
|
||||
image's environment** — the application never writes it. Its accounts database
|
||||
(`GRAMPSWEB_USER_DB_URI=sqlite:////app/users/users.sqlite`) and **its family tree**
|
||||
(`GRAMPS_DATABASE_PATH=/root/.gramps/grampsdb`) both landed in the container's writable layer.
|
||||
Upstream's reference compose persists **eight** paths; this template persisted three, one a phantom.
|
||||
|
||||
Severity above papra's: papra loses documents a customer uploaded, which they may still hold
|
||||
elsewhere. gramps-web loses the family tree — the artefact the customer *built inside the app*, of
|
||||
which no other copy exists by construction.
|
||||
|
||||
### R-160 — the gate exists, and nothing automated runs it
|
||||
|
||||
The check R-156 asks for now exists (`scripts/check-volume-persistence.py`, §7). Its enforcement
|
||||
level is **convention**: the catalog repo has no CI of any kind (`.gitea/workflows`, `.github`,
|
||||
drone/woodpecker — none), so like its two sibling gates it runs when a person runs it.
|
||||
|
||||
This project's own record says that is not enough: R-29 has three orphaned gates and one enforced
|
||||
one, and the enforced one is the only one that has ever stopped anything. Two directions, neither
|
||||
buildable from this repo:
|
||||
|
||||
1. **CI in the catalog repo** — a Gitea Actions runner. Nothing exists to build on today.
|
||||
2. **Controller-side at sync** — the controller already validates `.felhom.yml` at template load
|
||||
(`internal/stacks/metadata.go:336-358`) and a persistence assertion could ride the same choke
|
||||
point. But that needs a runtime probe on a customer box, and a decision about what a failing
|
||||
sync should do to a customer's working app. **Cross-repo, and a design question, not a task.**
|
||||
|
||||
Interim position, recorded in `CLAUDE.md`: run it when a template's `volumes:` block or image tag
|
||||
changes, and at the start of every catalog campaign.
|
||||
|
||||
### R-161 — `docker diff` is the only witness, and its failure mode is quiet
|
||||
|
||||
A limitation, not a defect. The gate's power comes from `docker diff` excluding mounted paths, which
|
||||
makes "in the writable layer" mechanically decidable — an implementation detail of the overlay
|
||||
storage driver. On a driver where `docker diff` is unsupported or lies, the gate degrades to the
|
||||
mount-occupancy and writability legs and would not say so. The canary self-test *would* catch it
|
||||
(the broken canary would stop reporting BROKEN, and the gate would then refuse to report at all),
|
||||
so it fails closed — but the message it prints would blame the prober rather than the driver.
|
||||
|
||||
---
|
||||
|
||||
## 9. Teardown — all three layers
|
||||
|
||||
Per `felhom.eu/documentation/PROMPT-TEMPLATE.md` §13. Layer 3 is the one that has been missed every
|
||||
time (`drill-r50`, `sess-c`, `sess-d`), so it is stated explicitly rather than implied.
|
||||
|
||||
### Layer 1 — the machine
|
||||
|
||||
`pct stop 9301 && pct destroy 9301 --purge`, and its `local-lvm` volume with it. Verified by
|
||||
`pct list` (no 9301) and `lvs` (no `vm-9301-disk-0`). **Evidence: `state/teardown.txt`.**
|
||||
|
||||
### Layer 2 — the host
|
||||
|
||||
`pvesm status` before and after, and the space actually returned.
|
||||
|
||||
| | `local-lvm` available (KiB) | used |
|
||||
|---|---|---|
|
||||
| before the run began | 258 702 410 | 29.27 % |
|
||||
| end of run, before teardown | 169 968 909 | 53.53 % |
|
||||
| after teardown | *see `state/teardown.txt`* | |
|
||||
|
||||
The guest's 120 G volume was thin-provisioned on an **over-subscribed** pool (`pct create` warned:
|
||||
sum of thin volume sizes 402 G against a 348 G pool), which is why a disk watchdog ran throughout
|
||||
(`state/diskwatch.log`) and why the space actually returning is measured rather than assumed.
|
||||
|
||||
### Layer 3 — the hub
|
||||
|
||||
**Nothing to remove: this run created no hub record of any kind, by design.**
|
||||
|
||||
That is an absence of *creation*, not an absence of checking. The scratch guest ran **no
|
||||
felhom-controller** and was never enrolled (§1), precisely so no customer or appliance record could
|
||||
exist to orphan. The hub was touched **read-only** throughout — `/apps`, `/apps/papra`, `/configs`,
|
||||
`/hosts`, `/hosts/<id>`, over the ClusterIP with Basic auth — to answer "is papra deployed
|
||||
anywhere?" (§6.1).
|
||||
|
||||
Confirmed against the live hub `/configs` list, unchanged from the pre-run state and containing no
|
||||
entry for this run: `c10-soak`, `david`, `demo-felhom`, `demo-hp`, `drill-r50`, `peti-felhom`,
|
||||
`sess-f`.
|
||||
|
||||
The scratch host paths the gate creates for `${HDD_PATH}` / `${IMPORT_PATH}` (`/srv/felhom-gate/…`)
|
||||
and the `felhom-volgate-canary:1` image existed only inside the guest, so both go with layer 1.
|
||||
|
||||
---
|
||||
|
||||
## 10. What did not happen, and why
|
||||
|
||||
- **papra was not fixed.** It is deployed, and the fix would destroy the data it protects (§6.1).
|
||||
Prepared, proven, held. The brief says stop rather than ship a migration; no migration was written.
|
||||
- **No data migration of any kind was shipped**, for papra or anything else.
|
||||
- **No UNDETERMINED app was fixed.** Seven remain undecided (§4.2) and none was nudged toward CLEAN
|
||||
to tidy the table. Four need a deeper exercise than a first-boot HTTP request (a completed setup
|
||||
wizard, a posted paste, a real import); three could not be started at all.
|
||||
- **`glance` was not fixed** even though its defect is understood (it crash-loops for want of a
|
||||
seeded `/app/config/glance.yml`). It is a deployability defect, not a persistence one, already
|
||||
recorded as pre-existing in Campaign 7 §6.2 — outside this brief's scope.
|
||||
- **`plant-it` was not touched.** Its image does not resolve; it is `lifecycle: abandoned` for
|
||||
exactly that reason.
|
||||
- **Nothing outside the catalog templates was changed.** The controller-side observations
|
||||
(`ResolveDockerVolumeNames` cannot see anonymous volumes; `ParseComposeClassifiableBinds` cannot
|
||||
see named volumes at all) are findings for §8, not edits.
|
||||
- **No commit to `felhom.eu`, no register edit, nothing on `demo-hp`.** The other session owns all
|
||||
three. Every R-number in §8 is proposed text.
|
||||
- **No hub-side state was created.** The hub was read only — `/apps`, `/configs`, `/hosts`,
|
||||
`/apps/papra` — via the ClusterIP with Basic auth. Nothing to clean up, so nothing recorded as a
|
||||
command (R-131's four orphans).
|
||||
- **Guest 9201 on `demo-felhom` was read, not touched** — `docker ps -a` and `docker volume ls`,
|
||||
to establish that papra is not deployed there.
|
||||
- **`claude-in-chrome` was not used** — unavailable on DooPlex. Every observation is endpoint-level
|
||||
or filesystem-level, and each is named where it is used.
|
||||
- **No secret value was written anywhere.** The probe records env var KEYS only; generated
|
||||
credentials are minted per-run and discarded with the container.
|
||||
|
||||
---
|
||||
@@ -0,0 +1,54 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "actualbudget",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "actualbudget/actual-server:26.7.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 2,
|
||||
"name": "volgate-actualbudget_actualbudget_data",
|
||||
"sample": [
|
||||
".migrate",
|
||||
"server-files/account.sqlite"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-actualbudget_actualbudget_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "actualbudget",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"actualbudget_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,222 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "adventurelog",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 8,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run",
|
||||
"var",
|
||||
"code"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/var",
|
||||
"files": [
|
||||
"lib"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/var/lib",
|
||||
"files": [
|
||||
"nginx"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 14,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/seanmorley15/adventurelog-backend:v0.12.1",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 251,
|
||||
"name": "volgate-adventurelog_adventurelog_media",
|
||||
"sample": [
|
||||
"countries+regions+states-v3.1.json",
|
||||
"flags/ca.png",
|
||||
"flags/gg.png",
|
||||
"flags/at.png",
|
||||
"flags/ck.png",
|
||||
"flags/eh.png",
|
||||
"flags/qa.png",
|
||||
"flags/lc.png",
|
||||
"flags/io.png",
|
||||
"flags/es.png",
|
||||
"flags/gf.png",
|
||||
"flags/tz.png",
|
||||
"flags/mx.png",
|
||||
"flags/vi.png",
|
||||
"flags/tw.png",
|
||||
"flags/il.png",
|
||||
"flags/mk.png",
|
||||
"flags/bo.png",
|
||||
"flags/sa.png",
|
||||
"flags/ly.png",
|
||||
"flags/bb.png",
|
||||
"flags/kg.png",
|
||||
"flags/hr.png",
|
||||
"flags/tn.png",
|
||||
"flags/bj.png",
|
||||
"flags/sh.png",
|
||||
"flags/eg.png",
|
||||
"flags/kw.png",
|
||||
"flags/gn.png",
|
||||
"flags/vg.png",
|
||||
"flags/af.png",
|
||||
"flags/jm.png",
|
||||
"flags/ug.png",
|
||||
"flags/je.png",
|
||||
"flags/ms.png",
|
||||
"flags/nl.png",
|
||||
"flags/lv.png",
|
||||
"flags/pg.png",
|
||||
"flags/lr.png",
|
||||
"flags/bl.png"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-adventurelog_adventurelog_media/_data",
|
||||
"target": "/code/media",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "adventurelog",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 65532,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/seanmorley15/adventurelog-frontend:v0.12.1",
|
||||
"mounts": [],
|
||||
"name": "adventurelog-frontend",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 65532
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgis/postgis:16-3.5-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 2287,
|
||||
"name": "volgate-adventurelog_adventurelog_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-adventurelog_adventurelog_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "adventurelog-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"adventurelog_media",
|
||||
"adventurelog_postgres_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SECRET_KEY",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,116 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "audiobookshelf",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 4,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"metadata",
|
||||
"audiobooks",
|
||||
"podcasts",
|
||||
"config"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"metadata",
|
||||
"audiobooks",
|
||||
"podcasts",
|
||||
"config"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/advplyr/audiobookshelf:2.35.1",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 16,
|
||||
"name": "volgate-audiobookshelf_audiobookshelf_config",
|
||||
"sample": [
|
||||
"absdatabase.sqlite",
|
||||
"migrations/v2.17.5-remove-host-from-feed-urls.js",
|
||||
"migrations/v2.17.4-use-subfolder-for-oidc-redirect-uris.js",
|
||||
"migrations/v2.17.0-uuid-replacement.js",
|
||||
"migrations/v2.19.1-copy-title-to-library-items.js",
|
||||
"migrations/v2.15.0-series-column-unique.js",
|
||||
"migrations/v2.19.4-improve-podcast-queries.js",
|
||||
"migrations/v2.26.0-create-auth-tables.js",
|
||||
"migrations/v2.33.0-add-discover-query-indexes.js",
|
||||
"migrations/v2.17.7-add-indices.js",
|
||||
"migrations/v2.35.0-add-last-refresh-token.js",
|
||||
"migrations/v2.20.0-improve-author-sort-queries.js",
|
||||
"migrations/v2.17.6-share-add-isdownloadable.js",
|
||||
"migrations/v2.15.1-reindex-nocase.js",
|
||||
"migrations/v2.17.3-fk-constraints.js",
|
||||
"migrations/v2.15.2-index-creation.js"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-audiobookshelf_audiobookshelf_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1,
|
||||
"name": "volgate-audiobookshelf_audiobookshelf_metadata",
|
||||
"sample": [
|
||||
"logs/daily/2026-08-02.txt"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-audiobookshelf_audiobookshelf_metadata/_data",
|
||||
"target": "/metadata",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media/audiobooks",
|
||||
"target": "/audiobooks",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media/podcasts",
|
||||
"target": "/podcasts",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "audiobookshelf",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"audiobookshelf_config",
|
||||
"audiobookshelf_metadata"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,70 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "bentopdf",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 6,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"var",
|
||||
"etc"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"nginx"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/var",
|
||||
"files": [
|
||||
"cache"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 14,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 101,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/alam00000/bentopdf:v2.8.6",
|
||||
"mounts": [],
|
||||
"name": "bentopdf",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 101
|
||||
}
|
||||
],
|
||||
"declared_volumes": [],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"nothing was written to any mount and nothing data-classified in any writable layer \u2014 the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN"
|
||||
],
|
||||
"verdict": "UNDETERMINED",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,246 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "bookstack",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 247,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 6,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app",
|
||||
"etc",
|
||||
"usr",
|
||||
"defaults",
|
||||
"run",
|
||||
"var"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 5,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"passwd-",
|
||||
"group-",
|
||||
"crontabs",
|
||||
"logrotate.d",
|
||||
"s6-overlay"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/crontabs",
|
||||
"files": [
|
||||
"root"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay",
|
||||
"files": [
|
||||
"s6-rc.d"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay/s6-rc.d",
|
||||
"files": [
|
||||
"init-adduser"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay/s6-rc.d/init-adduser",
|
||||
"files": [
|
||||
"branding"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"lib"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/var",
|
||||
"files": [
|
||||
"lib",
|
||||
"log"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/var/lib",
|
||||
"files": [
|
||||
"nginx"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 277,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "lscr.io/linuxserver/bookstack:26.05.2",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 20,
|
||||
"name": "volgate-bookstack_bookstack_config",
|
||||
"sample": [
|
||||
".migrations",
|
||||
"log/php/error.log",
|
||||
"log/nginx/access.log",
|
||||
"log/nginx/error.log",
|
||||
"keys/cert.key",
|
||||
"keys/cert.crt",
|
||||
"php/www2.conf",
|
||||
"php/php-local.ini",
|
||||
"www/.env",
|
||||
"www/index.html",
|
||||
"www/framework/sessions/t9vuOg4XNVgyKgaD1xXXg5Bums6HCmTSiBGnhjPu",
|
||||
"www/framework/sessions/GTO4GD6UJW2fK5ABAye7PVZKui376YILkTqU0I0e",
|
||||
"nginx/resolver.conf",
|
||||
"nginx/worker_processes.conf",
|
||||
"nginx/nginx.conf.sample",
|
||||
"nginx/nginx.conf",
|
||||
"nginx/ssl.conf.sample",
|
||||
"nginx/ssl.conf",
|
||||
"nginx/site-confs/default.conf",
|
||||
"nginx/site-confs/default.conf.sample"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-bookstack_bookstack_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "bookstack",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 999,
|
||||
"health": "healthy",
|
||||
"image": "mariadb:12.3",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 291,
|
||||
"name": "volgate-bookstack_bookstack_db_data",
|
||||
"sample": [
|
||||
"undo002",
|
||||
"tc.log",
|
||||
"mariadb_upgrade_info",
|
||||
"ibtmp1",
|
||||
"aria_log.00000001",
|
||||
"multi-master.info",
|
||||
"ddl_recovery.log",
|
||||
"ib_logfile0",
|
||||
"undo003",
|
||||
"ibdata1",
|
||||
".my-healthcheck.cnf",
|
||||
"aria_log_control",
|
||||
"undo001",
|
||||
"ib_buffer_pool",
|
||||
"bookstack/api_tokens.ibd",
|
||||
"bookstack/password_resets.ibd",
|
||||
"bookstack/entity_page_data.frm",
|
||||
"bookstack/settings.ibd",
|
||||
"bookstack/email_confirmations.ibd",
|
||||
"bookstack/views.ibd",
|
||||
"bookstack/references.ibd",
|
||||
"bookstack/attachments.frm",
|
||||
"bookstack/entity_container_data.frm",
|
||||
"bookstack/deletions.ibd",
|
||||
"bookstack/permission_role.frm",
|
||||
"bookstack/favourites.ibd",
|
||||
"bookstack/deletions.frm",
|
||||
"bookstack/page_revisions.ibd",
|
||||
"bookstack/user_invites.frm",
|
||||
"bookstack/joint_permissions.ibd",
|
||||
"bookstack/bookshelves_books.frm",
|
||||
"bookstack/activities.frm",
|
||||
"bookstack/entity_container_data.ibd",
|
||||
"bookstack/comments.ibd",
|
||||
"bookstack/entity_permissions.frm",
|
||||
"bookstack/email_confirmations.frm",
|
||||
"bookstack/password_resets.frm",
|
||||
"bookstack/settings.frm",
|
||||
"bookstack/cache.ibd",
|
||||
"bookstack/attachments.ibd"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-bookstack_bookstack_db_data/_data",
|
||||
"target": "/var/lib/mysql",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "bookstack-db",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"bookstack_config",
|
||||
"bookstack_db_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"APP_KEY",
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,177 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "claper",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"priv"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"static"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/priv",
|
||||
"files": [
|
||||
"static"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"uploads"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/priv/static",
|
||||
"files": [
|
||||
"uploads"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/claperco/claper:2.5",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-claper_claper_uploads",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-claper_claper_uploads/_data",
|
||||
"target": "/app/priv/static/uploads",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "claper",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1470,
|
||||
"name": "volgate-claper_claper_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-claper_claper_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "claper-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"claper_postgres_data",
|
||||
"claper_uploads"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SECRET_KEY_BASE",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"claper: this container's mounts are all empty while it created entries in ['/app/priv', '/app/priv/static'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"claper: declared volume /app/priv/static/uploads is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,110 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "code-server",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 196,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 4,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run",
|
||||
"app",
|
||||
"etc",
|
||||
"defaults"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"passwd-",
|
||||
"group-",
|
||||
"s6-overlay"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay",
|
||||
"files": [
|
||||
"s6-rc.d"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay/s6-rc.d",
|
||||
"files": [
|
||||
"init-adduser"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay/s6-rc.d/init-adduser",
|
||||
"files": [
|
||||
"branding"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 208,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "lscr.io/linuxserver/code-server:4.129.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 6,
|
||||
"name": "volgate-codeserver_codeserver_config",
|
||||
"sample": [
|
||||
".profile",
|
||||
".bashrc",
|
||||
".config/code-server/config.yaml",
|
||||
"data/code-server-ipc.sock",
|
||||
".local/share/code-server/coder-logs/code-server-stderr.log",
|
||||
".local/share/code-server/coder-logs/code-server-stdout.log"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-codeserver_codeserver_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "code-server",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"codeserver_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"PASSWORD",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,217 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "docmost",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 1,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"apps"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/apps",
|
||||
"files": [
|
||||
"client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/apps/client",
|
||||
"files": [
|
||||
"dist"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"index-template.html"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/apps/client/dist",
|
||||
"files": [
|
||||
"index-template.html"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 6,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "docmost/docmost:0.95.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-docmost_docmost_storage",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-docmost_docmost_storage/_data",
|
||||
"target": "/app/data/storage",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "docmost",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 1000
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1540,
|
||||
"name": "volgate-docmost_docmost_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-docmost_docmost_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "docmost-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "redis:7-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3,
|
||||
"name": "volgate-docmost_docmost_redis_data",
|
||||
"sample": [
|
||||
"appendonlydir/appendonly.aof.1.base.rdb",
|
||||
"appendonlydir/appendonly.aof.1.incr.aof",
|
||||
"appendonlydir/appendonly.aof.manifest"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-docmost_docmost_redis_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "docmost-redis",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"docmost_postgres_data",
|
||||
"docmost_redis_data",
|
||||
"docmost_storage"
|
||||
],
|
||||
"env_keys": [
|
||||
"APP_SECRET",
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"docmost: this container's mounts are all empty while it created entries in ['/app/apps/client/dist'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"docmost: declared volume /app/data/storage is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,119 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "emby",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 205,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"config",
|
||||
"media"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"config",
|
||||
"media"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 207,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "emby/embyserver:4.10.0.20",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 46,
|
||||
"name": "volgate-emby_emby_config",
|
||||
"sample": [
|
||||
"cache/ffmpeg/filters_4.10.0.20.txt",
|
||||
"cache/ffmpeg/version_4.10.0.20.txt",
|
||||
"cache/ffmpeg/decoders_4.10.0.20.txt",
|
||||
"cache/ffmpeg/encoders_4.10.0.20.txt",
|
||||
"cache/ffmpeg/protocols_4.10.0.20.txt",
|
||||
"cache/ffmpeg/hwaccels_4.10.0.20.txt",
|
||||
"cache/httpclient/0fb243ded9649ae6d18059c674a4ae00_1",
|
||||
"config/system.xml",
|
||||
"config/users/a7acc67887ba440f9db1312c97475098/policy.xml",
|
||||
"plugins/DvdMounter.dll",
|
||||
"plugins/OMDb.dll",
|
||||
"plugins/Emby.PortMapper.dll",
|
||||
"plugins/EmbyGuideData.dll",
|
||||
"plugins/MusicBrainz.dll",
|
||||
"plugins/AudioDb.dll",
|
||||
"plugins/MovieDb.dll",
|
||||
"plugins/Emby.Server.CinemaMode.dll",
|
||||
"plugins/Emby.M3UTuner.dll",
|
||||
"plugins/Emby.Dlna.dll",
|
||||
"plugins/Fanart.dll",
|
||||
"plugins/Tvdb.dll",
|
||||
"plugins/NfoMetadata.dll",
|
||||
"plugins/StudioImages.dll",
|
||||
"plugins/Emby.Webhooks.dll",
|
||||
"plugins/MBBackup.dll",
|
||||
"plugins/OpenSubtitles.dll",
|
||||
"plugins/Emby.XmlTV.dll",
|
||||
"plugins/BlurayMounter.dll",
|
||||
"data/lastversion.txt",
|
||||
"data/wan.dat",
|
||||
"data/library.db",
|
||||
"data/authentication.db-wal",
|
||||
"data/device.txt",
|
||||
"data/activitylog.db-shm",
|
||||
"data/authentication.db",
|
||||
"data/users.db-shm",
|
||||
"data/library.db-shm",
|
||||
"data/users.db-wal",
|
||||
"data/authentication.db-shm",
|
||||
"data/activitylog.db"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-emby_emby_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 3,
|
||||
"name": null,
|
||||
"sample": [
|
||||
"books/metadata.db",
|
||||
"books/metadata.db-shm",
|
||||
"books/metadata.db-wal"
|
||||
],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media",
|
||||
"target": "/media",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "emby",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"emby_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,59 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "ghost",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "ghost:6.53.0-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 7,
|
||||
"name": "volgate-ghost_ghost_content",
|
||||
"sample": [
|
||||
"themes/casper",
|
||||
"themes/source",
|
||||
"data/ghost.db",
|
||||
"logs/https___blog_gate_invalid_production.error.log",
|
||||
"logs/https___blog_gate_invalid_production.log",
|
||||
"public/admin-auth/index.html",
|
||||
"public/.well-known/recommendations.json"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-ghost_ghost_content/_data",
|
||||
"target": "/var/lib/ghost/content",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "ghost",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 1000
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"ghost_content"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,193 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "gitea",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 16,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"gitea"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/gitea",
|
||||
"files": [
|
||||
"gitea"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"ssh",
|
||||
"s6"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6",
|
||||
"files": [
|
||||
"openssh",
|
||||
".s6-svscan",
|
||||
"gitea"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"control",
|
||||
"lock"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6/.s6-svscan",
|
||||
"files": [
|
||||
"control",
|
||||
"lock"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"supervise",
|
||||
"event"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6/gitea",
|
||||
"files": [
|
||||
"supervise",
|
||||
"event"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"lock",
|
||||
"status",
|
||||
"control",
|
||||
"death_tally"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6/gitea/supervise",
|
||||
"files": [
|
||||
"lock",
|
||||
"status",
|
||||
"control",
|
||||
"death_tally"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"event",
|
||||
"supervise"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6/openssh",
|
||||
"files": [
|
||||
"event",
|
||||
"supervise"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"death_tally",
|
||||
"lock",
|
||||
"status",
|
||||
"control"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6/openssh/supervise",
|
||||
"files": [
|
||||
"death_tally",
|
||||
"lock",
|
||||
"status",
|
||||
"control"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/ssh",
|
||||
"files": [
|
||||
"sshd_config"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 27,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "gitea/gitea:1.27.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 8,
|
||||
"name": "volgate-gitea_gitea_data",
|
||||
"sample": [
|
||||
"git/.ssh/environment",
|
||||
"gitea/conf/app.ini",
|
||||
"ssh/ssh_host_ecdsa_key.pub",
|
||||
"ssh/ssh_host_ed25519_key",
|
||||
"ssh/ssh_host_ed25519_key.pub",
|
||||
"ssh/ssh_host_ecdsa_key",
|
||||
"ssh/ssh_host_rsa_key",
|
||||
"ssh/ssh_host_rsa_key.pub"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-gitea_gitea_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "gitea",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"gitea_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,74 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "glance",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 1,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"config"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"config"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 2,
|
||||
"diff_unresolved": [],
|
||||
"exit": 1,
|
||||
"gid": null,
|
||||
"health": "unhealthy",
|
||||
"image": "glanceapp/glance:v0.8.5",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-glance_glance_config",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-glance_glance_config/_data",
|
||||
"target": "/app/config",
|
||||
"writable_by_app": "unknown-uid"
|
||||
}
|
||||
],
|
||||
"name": "glance",
|
||||
"restarts": null,
|
||||
"status": "restarting",
|
||||
"uid": null
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"glance_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"glance: not running (status=restarting exit=1 restarts=None)"
|
||||
],
|
||||
"verdict": "UNDETERMINED",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,92 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "gokapi",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"config",
|
||||
"data"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"config",
|
||||
"data"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 3,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "f0rc3/gokapi:v1.9.6",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 4,
|
||||
"name": "volgate-gokapi_gokapi_data",
|
||||
"sample": [
|
||||
"log.txt",
|
||||
"gokapi.sqlite-shm",
|
||||
"gokapi.sqlite",
|
||||
"gokapi.sqlite-wal"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-gokapi_gokapi_data/_data",
|
||||
"target": "/app/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1,
|
||||
"name": "volgate-gokapi_gokapi_config",
|
||||
"sample": [
|
||||
"config.json"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-gokapi_gokapi_config/_data",
|
||||
"target": "/app/config",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "gokapi",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"gokapi_config",
|
||||
"gokapi_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"GOKAPI_PASSWORD",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,93 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "grafana",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "grafana/grafana:13.1.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 543,
|
||||
"name": "volgate-grafana_grafana_data",
|
||||
"sample": [
|
||||
"grafana.db",
|
||||
"plugins/grafana-exploretraces-app/775.js.map",
|
||||
"plugins/grafana-exploretraces-app/892.js",
|
||||
"plugins/grafana-exploretraces-app/102.js",
|
||||
"plugins/grafana-exploretraces-app/892.js.map",
|
||||
"plugins/grafana-exploretraces-app/926.js",
|
||||
"plugins/grafana-exploretraces-app/14.js",
|
||||
"plugins/grafana-exploretraces-app/766.js.map",
|
||||
"plugins/grafana-exploretraces-app/941.js",
|
||||
"plugins/grafana-exploretraces-app/4.js",
|
||||
"plugins/grafana-exploretraces-app/153.js",
|
||||
"plugins/grafana-exploretraces-app/145.js",
|
||||
"plugins/grafana-exploretraces-app/304.js",
|
||||
"plugins/grafana-exploretraces-app/477.js.map",
|
||||
"plugins/grafana-exploretraces-app/54.js",
|
||||
"plugins/grafana-exploretraces-app/914.js.map",
|
||||
"plugins/grafana-exploretraces-app/903.js",
|
||||
"plugins/grafana-exploretraces-app/24.js",
|
||||
"plugins/grafana-exploretraces-app/638.js",
|
||||
"plugins/grafana-exploretraces-app/24.js.map",
|
||||
"plugins/grafana-exploretraces-app/24.js.LICENSE.txt",
|
||||
"plugins/grafana-exploretraces-app/257.js",
|
||||
"plugins/grafana-exploretraces-app/315.js",
|
||||
"plugins/grafana-exploretraces-app/397.js",
|
||||
"plugins/grafana-exploretraces-app/453.js",
|
||||
"plugins/grafana-exploretraces-app/980.js",
|
||||
"plugins/grafana-exploretraces-app/944c737f589d02ecf603.svg",
|
||||
"plugins/grafana-exploretraces-app/485.js",
|
||||
"plugins/grafana-exploretraces-app/plugin.json",
|
||||
"plugins/grafana-exploretraces-app/477.js",
|
||||
"plugins/grafana-exploretraces-app/317.js",
|
||||
"plugins/grafana-exploretraces-app/276.js",
|
||||
"plugins/grafana-exploretraces-app/196.js",
|
||||
"plugins/grafana-exploretraces-app/193.js",
|
||||
"plugins/grafana-exploretraces-app/397.js.map",
|
||||
"plugins/grafana-exploretraces-app/684.js",
|
||||
"plugins/grafana-exploretraces-app/531.js",
|
||||
"plugins/grafana-exploretraces-app/499.js",
|
||||
"plugins/grafana-exploretraces-app/276.js.map",
|
||||
"plugins/grafana-exploretraces-app/LICENSE"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-grafana_grafana_data/_data",
|
||||
"target": "/var/lib/grafana",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "grafana",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 472
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"grafana_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"GF_SECURITY_ADMIN_PASSWORD",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,266 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "gramps-web",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 127,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"users.sqlite"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": true,
|
||||
"dir": "/app/users",
|
||||
"files": [
|
||||
"users.sqlite"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"usr",
|
||||
"app",
|
||||
"root"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 4,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/cache",
|
||||
"files": [
|
||||
"request_cache"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"2029240f6d1128be89ddc32729463129"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/cache/request_cache",
|
||||
"files": [
|
||||
"2029240f6d1128be89ddc32729463129"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src",
|
||||
"files": [
|
||||
"alembic_users",
|
||||
"gramps_webapi"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src/alembic_users",
|
||||
"files": [
|
||||
"versions"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src/gramps_webapi",
|
||||
"files": [
|
||||
"api",
|
||||
"auth",
|
||||
"util"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src/gramps_webapi/api",
|
||||
"files": [
|
||||
"resources",
|
||||
"search"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"2029240f6d1128be89ddc32729463129"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/thumbnail_cache",
|
||||
"files": [
|
||||
"2029240f6d1128be89ddc32729463129"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".gramps"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".gramps"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"grampsdb"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.gramps",
|
||||
"files": [
|
||||
"grampsdb"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"61411b9e-fed7-485a-ab76-6e8ea7326c3b"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.gramps/grampsdb",
|
||||
"files": [
|
||||
"61411b9e-fed7-485a-ab76-6e8ea7326c3b"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"name.txt",
|
||||
"database.txt"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.gramps/grampsdb/61411b9e-fed7-485a-ab76-6e8ea7326c3b",
|
||||
"files": [
|
||||
"name.txt",
|
||||
"database.txt"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root/gramps",
|
||||
"files": [
|
||||
"gramps60"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root/gramps/gramps60",
|
||||
"files": [
|
||||
"plugins"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root/gramps/gramps60/plugins",
|
||||
"files": [
|
||||
"FilterRules"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"lib"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 153,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/gramps-project/grampsweb:v25.6.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_data/_data",
|
||||
"target": "/app/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_media",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_media/_data",
|
||||
"target": "/app/media",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_tmp",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_tmp/_data",
|
||||
"target": "/tmp",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "gramps-web",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"gramps_data",
|
||||
"gramps_media",
|
||||
"gramps_tmp"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"GRAMPSWEB_SECRET_KEY",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"gramps-web: DATA in the writable layer at /app/users (db_signature=True, e.g. ['users.sqlite'])",
|
||||
"NOTHING this app wrote landed in ANY folder the template preserves: all 2 mount(s) across 1 container(s) are empty, yet entries were created in ['/app', '/app/cache/request_cache', '/app/thumbnail_cache', '/root']. Needs adjudication.",
|
||||
"gramps-web: this container's mounts are all empty while it created entries in ['/app', '/app/cache/request_cache', '/app/thumbnail_cache'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"gramps-web: declared volume /app/data is EMPTY",
|
||||
"gramps-web: declared volume /app/media is EMPTY"
|
||||
],
|
||||
"verdict": "BROKEN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,114 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "home-assistant",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 2267,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run",
|
||||
"root",
|
||||
"usr"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".config"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".config"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"local"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local",
|
||||
"files": [
|
||||
"lib"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 2561,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/home-assistant/home-assistant:2026.7.2",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 21,
|
||||
"name": "volgate-homeassistant_homeassistant_config",
|
||||
"sample": [
|
||||
"home-assistant.log",
|
||||
"home-assistant_v2.db-wal",
|
||||
"configuration.yaml",
|
||||
"home-assistant.log.fault",
|
||||
".HA_VERSION",
|
||||
"home-assistant.log.1",
|
||||
"home-assistant_v2.db",
|
||||
"home-assistant_v2.db-shm",
|
||||
".ha_run.lock",
|
||||
".storage/core.config_entries",
|
||||
".storage/core.restore_state",
|
||||
".storage/auth",
|
||||
".storage/http.auth",
|
||||
".storage/assist_pipeline.pipelines",
|
||||
".storage/core.device_registry",
|
||||
".storage/homeassistant.exposed_entities",
|
||||
".storage/core.uuid",
|
||||
".storage/core.entity_registry",
|
||||
"blueprints/script/homeassistant/confirmable_notification.yaml",
|
||||
"blueprints/automation/homeassistant/notify_leaving_zone.yaml",
|
||||
"blueprints/automation/homeassistant/motion_light.yaml"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-homeassistant_homeassistant_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "home-assistant",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"homeassistant_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,68 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "homebox",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 1,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 1,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/sysadminsmedia/homebox:0.26.2",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3,
|
||||
"name": "volgate-homebox_homebox_data",
|
||||
"sample": [
|
||||
"homebox.db-shm",
|
||||
"homebox.db",
|
||||
"homebox.db-wal"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-homebox_homebox_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "homebox",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"homebox_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HBOX_AUTH_API_KEY_PEPPER",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,86 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "homepage",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run",
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"config"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"config"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/gethomepage/homepage:v1.13.2",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3,
|
||||
"name": "volgate-homepage_homepage_config",
|
||||
"sample": [
|
||||
"kubernetes.yaml",
|
||||
"settings.yaml",
|
||||
"logs/homepage.log"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-homepage_homepage_config/_data",
|
||||
"target": "/app/config",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": -1,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/var/run/docker.sock",
|
||||
"target": "/var/run/docker.sock",
|
||||
"writable_by_app": "no-source"
|
||||
}
|
||||
],
|
||||
"name": "homepage",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"homepage_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,330 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "immich",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 6,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"cache"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"cache"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".config"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".config"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"matplotlib"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.config",
|
||||
"files": [
|
||||
"matplotlib"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 7,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/immich-app/immich-machine-learning:v3.0.3",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-immich_immich_ml_cache",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-immich_immich_ml_cache/_data",
|
||||
"target": "/cache",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "immich-machine-learning",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 3,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"etc",
|
||||
"run"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"postgresql"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"postgresql.conf"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/postgresql",
|
||||
"files": [
|
||||
"postgresql.conf"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 7,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 999,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1833,
|
||||
"name": "volgate-immich_immich_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/13406",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/13414",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-immich_immich_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "immich-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "redis:7-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3,
|
||||
"name": "volgate-immich_immich_redis_data",
|
||||
"sample": [
|
||||
"appendonlydir/appendonly.aof.1.base.rdb",
|
||||
"appendonlydir/appendonly.aof.1.incr.aof",
|
||||
"appendonlydir/appendonly.aof.manifest"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-immich_immich_redis_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "immich-redis",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
},
|
||||
{
|
||||
"diff_added": 4,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data",
|
||||
"external"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data",
|
||||
"external"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"photos"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/external",
|
||||
"files": [
|
||||
"photos"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"src"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"upload"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src/app",
|
||||
"files": [
|
||||
"upload"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 7,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/immich-app/immich-server:v3.0.3",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 6,
|
||||
"name": null,
|
||||
"sample": [
|
||||
"library/.immich",
|
||||
"upload/.immich",
|
||||
"profile/.immich",
|
||||
"encoded-video/.immich",
|
||||
"thumbs/.immich",
|
||||
"backups/.immich"
|
||||
],
|
||||
"source": "/srv/felhom-gate/hdd/appdata/immich",
|
||||
"target": "/usr/src/app/upload",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media/photos",
|
||||
"target": "/external/photos",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "8a33371900fd8f325c75733c4486ad225939fc62a80ae67ee333a598a34b665f",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/8a33371900fd8f325c75733c4486ad225939fc62a80ae67ee333a598a34b665f/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "immich-server",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"immich_ml_cache",
|
||||
"immich_postgres_data",
|
||||
"immich_redis_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"immich-machine-learning: this container's mounts are all empty while it created entries in ['/', '/root', '/root/.config'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"immich-machine-learning: declared volume /cache is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,153 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "jellyfin",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 7,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"jellyfin",
|
||||
"root"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"Dictionaries"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/jellyfin",
|
||||
"files": [
|
||||
"Dictionaries"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".aspnet"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".aspnet"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"DataProtection-Keys"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.aspnet",
|
||||
"files": [
|
||||
"DataProtection-Keys"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"key-b1c34edb-e295-4345-a61a-db5f11d4fb0f.xml"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.aspnet/DataProtection-Keys",
|
||||
"files": [
|
||||
"key-b1c34edb-e295-4345-a61a-db5f11d4fb0f.xml"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 10,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "jellyfin/jellyfin:10.11.11",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 20,
|
||||
"name": "volgate-jellyfin_jellyfin_config",
|
||||
"sample": [
|
||||
".jellyfin-data",
|
||||
"root/.jellyfin-root",
|
||||
"log/.jellyfin-log",
|
||||
"log/log_20260802.log",
|
||||
"config/logging.default.json",
|
||||
"config/system.xml",
|
||||
"config/encoding.xml",
|
||||
"config/.jellyfin-config",
|
||||
"config/database.xml",
|
||||
"plugins/.jellyfin-plugin",
|
||||
"plugins/configurations/Jellyfin.Plugin.Tmdb.xml",
|
||||
"plugins/configurations/Jellyfin.Plugin.MusicBrainz.xml",
|
||||
"data/device.txt",
|
||||
"data/jellyfin.db-wal",
|
||||
"data/.jellyfin-data",
|
||||
"data/jellyfin.db",
|
||||
"data/jellyfin.db-shm",
|
||||
"data/ScheduledTasks/7d8088c1-0902-f1bf-4072-ded42437bcfb.js",
|
||||
"data/ScheduledTasks/3a025083-141d-3c17-dd96-d5f9b951287b.js",
|
||||
"data/ScheduledTasks/f9b057c0-54e9-e6da-ee4a-88ffd146a403.js"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-jellyfin_jellyfin_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 2,
|
||||
"name": "volgate-jellyfin_jellyfin_cache",
|
||||
"sample": [
|
||||
".jellyfin-cache",
|
||||
"transcodes/.jellyfin-transcode"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-jellyfin_jellyfin_cache/_data",
|
||||
"target": "/cache",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 3,
|
||||
"name": null,
|
||||
"sample": [
|
||||
"books/metadata.db",
|
||||
"books/metadata.db-shm",
|
||||
"books/metadata.db-wal"
|
||||
],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media",
|
||||
"target": "/media",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "jellyfin",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"jellyfin_cache",
|
||||
"jellyfin_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,259 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "kimai",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 1,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"usr",
|
||||
"opt",
|
||||
"run"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/opt",
|
||||
"files": [
|
||||
"kimai"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/opt/kimai",
|
||||
"files": [
|
||||
"config"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/opt/kimai/config",
|
||||
"files": [
|
||||
"packages"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/opt/kimai/config/packages",
|
||||
"files": [
|
||||
"monolog.yaml"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"local"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local",
|
||||
"files": [
|
||||
"etc"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local/etc",
|
||||
"files": [
|
||||
"php"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local/etc/php",
|
||||
"files": [
|
||||
"php.ini"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 13,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "kimai/kimai2:apache-2.57.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 2547,
|
||||
"name": "volgate-kimai_kimai_var",
|
||||
"sample": [
|
||||
"installed",
|
||||
"cache/.gitkeep",
|
||||
"cache/pro_/url_generating_routes.php",
|
||||
"cache/pro_/url_matching_routes.php",
|
||||
"cache/pro_/url_matching_routes.php.meta",
|
||||
"cache/pro_/url_generating_routes.php.meta",
|
||||
"cache/pro_/Symfony/Config/TwigExtraConfig.php",
|
||||
"cache/pro_/Symfony/Config/DoctrineMigrationsConfig.php",
|
||||
"cache/pro_/Symfony/Config/MonologConfig.php",
|
||||
"cache/pro_/Symfony/Config/NelmioCorsConfig.php",
|
||||
"cache/pro_/Symfony/Config/WebpackEncoreConfig.php",
|
||||
"cache/pro_/Symfony/Config/NelmioApiDocConfig.php",
|
||||
"cache/pro_/Symfony/Config/TablerConfig.php",
|
||||
"cache/pro_/Symfony/Config/FrameworkConfig.php",
|
||||
"cache/pro_/Symfony/Config/SchebTwoFactorConfig.php",
|
||||
"cache/pro_/Symfony/Config/TwigConfig.php",
|
||||
"cache/pro_/Symfony/Config/SecurityConfig.php",
|
||||
"cache/pro_/Symfony/Config/DoctrineConfig.php",
|
||||
"cache/pro_/Symfony/Config/FosRestConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializerConfig.php",
|
||||
"cache/pro_/Symfony/Config/Tabler/RoutesConfig.php",
|
||||
"cache/pro_/Symfony/Config/Tabler/KnpMenuConfig.php",
|
||||
"cache/pro_/Symfony/Config/Tabler/OptionsConfig.php",
|
||||
"cache/pro_/Symfony/Config/SchebTwoFactor/TotpConfig.php",
|
||||
"cache/pro_/Symfony/Config/SchebTwoFactor/BackupCodesConfig.php",
|
||||
"cache/pro_/Symfony/Config/DoctrineMigrations/StorageConfig.php",
|
||||
"cache/pro_/Symfony/Config/DoctrineMigrations/Storage/TableStorageConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/VisitorsConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/InstancesConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/HandlersConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/PropertyNamingConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/MetadataConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/DefaultContextConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/ObjectConstructorsConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/SubscribersConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/ExpressionEvaluatorConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/ObjectConstructors/DoctrineConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/Subscribers/DoctrineProxyConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/InstancesConfig/VisitorsConfig.php",
|
||||
"cache/pro_/Symfony/Config/JmsSerializer/InstancesConfig/HandlersConfig.php"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-kimai_kimai_var/_data",
|
||||
"target": "/opt/kimai/var",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "kimai",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 999,
|
||||
"health": "healthy",
|
||||
"image": "mariadb:11.6",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 279,
|
||||
"name": "volgate-kimai_kimai_db_data",
|
||||
"sample": [
|
||||
"undo002",
|
||||
"tc.log",
|
||||
"mariadb_upgrade_info",
|
||||
"ibtmp1",
|
||||
"aria_log.00000001",
|
||||
"multi-master.info",
|
||||
"ddl_recovery.log",
|
||||
"ib_logfile0",
|
||||
"undo003",
|
||||
"ibdata1",
|
||||
".my-healthcheck.cnf",
|
||||
"aria_log_control",
|
||||
"undo001",
|
||||
"ib_buffer_pool",
|
||||
"sys/x@0024wait_classes_global_by_latency.frm",
|
||||
"sys/processlist.frm",
|
||||
"sys/session.frm",
|
||||
"sys/memory_by_host_by_current_bytes.frm",
|
||||
"sys/user_summary.frm",
|
||||
"sys/waits_global_by_latency.frm",
|
||||
"sys/x@0024statement_analysis.frm",
|
||||
"sys/x@0024host_summary.frm",
|
||||
"sys/schema_unused_indexes.frm",
|
||||
"sys/user_summary_by_file_io_type.frm",
|
||||
"sys/memory_by_thread_by_current_bytes.frm",
|
||||
"sys/x@0024statements_with_full_table_scans.frm",
|
||||
"sys/wait_classes_global_by_avg_latency.frm",
|
||||
"sys/x@0024schema_table_statistics.frm",
|
||||
"sys/x@0024statements_with_temp_tables.frm",
|
||||
"sys/schema_auto_increment_columns.frm",
|
||||
"sys/x@0024ps_schema_table_statistics_io.frm",
|
||||
"sys/x@0024memory_by_host_by_current_bytes.frm",
|
||||
"sys/statements_with_runtimes_in_95th_percentile.frm",
|
||||
"sys/x@0024statements_with_errors_or_warnings.frm",
|
||||
"sys/waits_by_user_by_latency.frm",
|
||||
"sys/x@0024io_global_by_file_by_bytes.frm",
|
||||
"sys/innodb_buffer_stats_by_table.frm",
|
||||
"sys/user_summary_by_statement_type.frm",
|
||||
"sys/statements_with_errors_or_warnings.frm",
|
||||
"sys/sys_config.MAD"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-kimai_kimai_db_data/_data",
|
||||
"target": "/var/lib/mysql",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "kimai-db",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"kimai_db_data",
|
||||
"kimai_var"
|
||||
],
|
||||
"env_keys": [
|
||||
"ADMIN_EMAIL",
|
||||
"ADMIN_PASSWORD",
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,86 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "komga",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 12,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data",
|
||||
"config"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data",
|
||||
"config"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 13,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "gotson/komga:1.25.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 11,
|
||||
"name": "volgate-komga_komga_config",
|
||||
"sample": [
|
||||
"database.sqlite-shm",
|
||||
"database.sqlite-wal",
|
||||
"tasks.sqlite-shm",
|
||||
"database.sqlite",
|
||||
"tasks.sqlite-wal",
|
||||
"tasks.sqlite",
|
||||
"lucene/_0.cfe",
|
||||
"lucene/_0.si",
|
||||
"lucene/segments_1",
|
||||
"lucene/_0.cfs",
|
||||
"logs/komga.log"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-komga_komga_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media/comics",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "komga",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"komga_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,89 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "mealie",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 1,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"etc",
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"passwd-",
|
||||
"group-"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 9,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/mealie-recipes/mealie:v3.20.1",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 5,
|
||||
"name": "volgate-mealie_mealie_data",
|
||||
"sample": [
|
||||
".session_secret",
|
||||
"mealie.db",
|
||||
"mealie.log",
|
||||
".secret",
|
||||
"users/6b1f2b18-68e0-468f-9db1-0431546240bd/profile.webp"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-mealie_mealie_data/_data",
|
||||
"target": "/app/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "mealie",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 1000
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"mealie_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,79 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "n8n",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 1094,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"home"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/home",
|
||||
"files": [
|
||||
"node"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 1097,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "n8nio/n8n:2.31.3",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 7,
|
||||
"name": "volgate-n8n_n8n_data",
|
||||
"sample": [
|
||||
"database.sqlite-shm",
|
||||
"database.sqlite-wal",
|
||||
"config",
|
||||
"database.sqlite",
|
||||
"n8nEventLog.log",
|
||||
"crash.journal",
|
||||
"nodes/package.json"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-n8n_n8n_data/_data",
|
||||
"target": "/home/node/.n8n",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "n8n",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 1000
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"n8n_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"N8N_ENCRYPTION_KEY",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,81 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "navidrome",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data",
|
||||
"music"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data",
|
||||
"music"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 2,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "deluan/navidrome:0.63.2",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 6,
|
||||
"name": "volgate-navidrome_navidrome_data",
|
||||
"sample": [
|
||||
"navidrome.db-wal",
|
||||
"navidrome.db",
|
||||
"navidrome.db-shm",
|
||||
"cache/transcoding/.nd-migrated",
|
||||
"cache/images/.nd-migrated",
|
||||
"cache/backgrounds/.nd-migrated"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-navidrome_navidrome_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media/music",
|
||||
"target": "/music",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "navidrome",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"navidrome_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,317 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "nextcloud",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run",
|
||||
"usr"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"local"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local",
|
||||
"files": [
|
||||
"etc"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local/etc",
|
||||
"files": [
|
||||
"php"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local/etc/php",
|
||||
"files": [
|
||||
"conf.d"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"redis-session.ini"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local/etc/php/conf.d",
|
||||
"files": [
|
||||
"redis-session.ini"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 9,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "nextcloud:34.0.1-apache",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 69,
|
||||
"name": null,
|
||||
"sample": [
|
||||
".htaccess",
|
||||
".ncdata",
|
||||
"nextcloud.log",
|
||||
"index.html",
|
||||
"admin/files/Nextcloud intro.mp4",
|
||||
"admin/files/Templates credits.md",
|
||||
"admin/files/Nextcloud Manual.pdf",
|
||||
"admin/files/Nextcloud.png",
|
||||
"admin/files/Reasons to use Nextcloud.pdf",
|
||||
"admin/files/Readme.md",
|
||||
"admin/files/Photos/Frog.jpg",
|
||||
"admin/files/Photos/Vineyard.jpg",
|
||||
"admin/files/Photos/Library.jpg",
|
||||
"admin/files/Photos/Nextcloud community.jpg",
|
||||
"admin/files/Photos/Birdie.jpg",
|
||||
"admin/files/Photos/Toucan.jpg",
|
||||
"admin/files/Photos/Steps.jpg",
|
||||
"admin/files/Photos/Readme.md",
|
||||
"admin/files/Photos/Gorilla.jpg",
|
||||
"admin/files/Documents/Welcome to Nextcloud Hub.docx",
|
||||
"admin/files/Documents/Nextcloud flyer.pdf",
|
||||
"admin/files/Documents/Example.md",
|
||||
"admin/files/Documents/Readme.md",
|
||||
"admin/files/Templates/Kanban board.whiteboard",
|
||||
"admin/files/Templates/Meeting agenda.whiteboard",
|
||||
"admin/files/Templates/Org chart.odg",
|
||||
"admin/files/Templates/Invoice.ods",
|
||||
"admin/files/Templates/Resume.odt",
|
||||
"admin/files/Templates/Certificate.odt",
|
||||
"admin/files/Templates/Brainstorming.whiteboard",
|
||||
"admin/files/Templates/Letter.odt",
|
||||
"admin/files/Templates/Gotong royong.odp",
|
||||
"admin/files/Templates/Business model canvas.odg",
|
||||
"admin/files/Templates/Sticky notes.whiteboard",
|
||||
"admin/files/Templates/Security.odp",
|
||||
"admin/files/Templates/Onboarding.odp",
|
||||
"admin/files/Templates/Mind map.whiteboard",
|
||||
"admin/files/Templates/Elegant.odp",
|
||||
"admin/files/Templates/Expense report.ods",
|
||||
"admin/files/Templates/Simple.odp"
|
||||
],
|
||||
"source": "/srv/felhom-gate/hdd/appdata/nextcloud",
|
||||
"target": "/var/www/html/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 4001,
|
||||
"name": "volgate-nextcloud_nextcloud_html",
|
||||
"sample": [
|
||||
"status.php",
|
||||
".htaccess",
|
||||
"AUTHORS",
|
||||
"public.php",
|
||||
"occ",
|
||||
"index.php",
|
||||
"composer.json",
|
||||
"version.php",
|
||||
"package-lock.json",
|
||||
"nextcloud-init-sync.lock",
|
||||
".user.ini",
|
||||
"remote.php",
|
||||
"cron.php",
|
||||
"console.php",
|
||||
"COPYING",
|
||||
"REUSE.toml",
|
||||
"index.html",
|
||||
"package.json",
|
||||
"robots.txt",
|
||||
"composer.lock",
|
||||
"lib/versioncheck.php",
|
||||
"lib/base.php",
|
||||
"lib/l10n/he.json",
|
||||
"lib/l10n/bs.js",
|
||||
"lib/l10n/es_PA.js",
|
||||
"lib/l10n/hsb.json",
|
||||
"lib/l10n/fo.json",
|
||||
"lib/l10n/mk.json",
|
||||
"lib/l10n/ru.js",
|
||||
"lib/l10n/th.json",
|
||||
"lib/l10n/es_GT.json",
|
||||
"lib/l10n/eo.js",
|
||||
"lib/l10n/pt_PT.json",
|
||||
"lib/l10n/bn_BD.js",
|
||||
"lib/l10n/ast.json",
|
||||
"lib/l10n/kab.json",
|
||||
"lib/l10n/fo.js",
|
||||
"lib/l10n/km.js",
|
||||
"lib/l10n/mn.js",
|
||||
"lib/l10n/ig.json"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-nextcloud_nextcloud_html/_data",
|
||||
"target": "/var/www/html",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "nextcloud",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 999,
|
||||
"health": "healthy",
|
||||
"image": "mariadb:11.6",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 311,
|
||||
"name": "volgate-nextcloud_nextcloud_db_data",
|
||||
"sample": [
|
||||
"undo002",
|
||||
"tc.log",
|
||||
"mariadb_upgrade_info",
|
||||
"ibtmp1",
|
||||
"aria_log.00000001",
|
||||
"multi-master.info",
|
||||
"ddl_recovery.log",
|
||||
"ib_logfile0",
|
||||
"undo003",
|
||||
"ibdata1",
|
||||
".my-healthcheck.cnf",
|
||||
"aria_log_control",
|
||||
"undo001",
|
||||
"ib_buffer_pool",
|
||||
"sys/x@0024wait_classes_global_by_latency.frm",
|
||||
"sys/processlist.frm",
|
||||
"sys/session.frm",
|
||||
"sys/memory_by_host_by_current_bytes.frm",
|
||||
"sys/user_summary.frm",
|
||||
"sys/waits_global_by_latency.frm",
|
||||
"sys/x@0024statement_analysis.frm",
|
||||
"sys/x@0024host_summary.frm",
|
||||
"sys/schema_unused_indexes.frm",
|
||||
"sys/user_summary_by_file_io_type.frm",
|
||||
"sys/memory_by_thread_by_current_bytes.frm",
|
||||
"sys/x@0024statements_with_full_table_scans.frm",
|
||||
"sys/wait_classes_global_by_avg_latency.frm",
|
||||
"sys/x@0024schema_table_statistics.frm",
|
||||
"sys/x@0024statements_with_temp_tables.frm",
|
||||
"sys/schema_auto_increment_columns.frm",
|
||||
"sys/x@0024ps_schema_table_statistics_io.frm",
|
||||
"sys/x@0024memory_by_host_by_current_bytes.frm",
|
||||
"sys/statements_with_runtimes_in_95th_percentile.frm",
|
||||
"sys/x@0024statements_with_errors_or_warnings.frm",
|
||||
"sys/waits_by_user_by_latency.frm",
|
||||
"sys/x@0024io_global_by_file_by_bytes.frm",
|
||||
"sys/innodb_buffer_stats_by_table.frm",
|
||||
"sys/user_summary_by_statement_type.frm",
|
||||
"sys/statements_with_errors_or_warnings.frm",
|
||||
"sys/sys_config.MAD"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-nextcloud_nextcloud_db_data/_data",
|
||||
"target": "/var/lib/mysql",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "nextcloud-db",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "redis:7-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3,
|
||||
"name": "volgate-nextcloud_nextcloud_redis_data",
|
||||
"sample": [
|
||||
"appendonlydir/appendonly.aof.1.base.rdb",
|
||||
"appendonlydir/appendonly.aof.1.incr.aof",
|
||||
"appendonlydir/appendonly.aof.manifest"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-nextcloud_nextcloud_redis_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "nextcloud-redis",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"nextcloud_db_data",
|
||||
"nextcloud_html",
|
||||
"nextcloud_redis_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"MYSQL_ROOT_PASSWORD",
|
||||
"NEXTCLOUD_ADMIN_PASSWORD",
|
||||
"NEXTCLOUD_ADMIN_USER",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,103 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "opengist",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"opengist"
|
||||
],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"opengist"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"group-",
|
||||
"passwd-"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/home",
|
||||
"files": [
|
||||
"opengist"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".gitconfig"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/home/opengist",
|
||||
"files": [
|
||||
".gitconfig"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 10,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/thomiceli/opengist:1.13",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 9,
|
||||
"name": "volgate-opengist_opengist_data",
|
||||
"sample": [
|
||||
"opengist-secret.key",
|
||||
"opengist.db",
|
||||
"sessions/session-encrypt.key",
|
||||
"log/opengist.log",
|
||||
"symlinks/opengist",
|
||||
"symlinks/config.yml",
|
||||
"opengist.index/index_meta.json",
|
||||
"opengist.index/store/root.bolt",
|
||||
"ssh/opengist-ed25519"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-opengist_opengist_data/_data",
|
||||
"target": "/opengist",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "opengist",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 1000
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"opengist_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,166 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "outline",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1001,
|
||||
"health": "healthy",
|
||||
"image": "outlinewiki/outline:1.9.1",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-outline_outline_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-outline_outline_data/_data",
|
||||
"target": "/var/lib/outline/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "outline",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 1001
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1655,
|
||||
"name": "volgate-outline_outline_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-outline_outline_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "outline-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "redis:7-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-outline_outline_redis_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-outline_outline_redis_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "outline-redis",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"outline_data",
|
||||
"outline_postgres_data",
|
||||
"outline_redis_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SECRET_KEY",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH",
|
||||
"UTILS_SECRET"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"outline: declared volume /var/lib/outline/data is EMPTY",
|
||||
"outline-redis: declared volume /data is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,250 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "paperless-ngx",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1927,
|
||||
"name": "volgate-paperlessngx_paperless_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-paperlessngx_paperless_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "paperless-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "redis:7-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3,
|
||||
"name": "volgate-paperlessngx_paperless_redis_data",
|
||||
"sample": [
|
||||
"appendonlydir/appendonly.aof.1.base.rdb",
|
||||
"appendonlydir/appendonly.aof.1.incr.aof",
|
||||
"appendonlydir/appendonly.aof.manifest"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-paperlessngx_paperless_redis_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "paperless-redis",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
},
|
||||
{
|
||||
"diff_added": 265,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"usr",
|
||||
"var",
|
||||
"run"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"share"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/var",
|
||||
"files": [
|
||||
"log",
|
||||
"cache",
|
||||
"lib"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/var/lib",
|
||||
"files": [
|
||||
"apt",
|
||||
"dpkg"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 294,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/paperless-ngx/paperless-ngx:2.20.15",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/appdata/paperless/export",
|
||||
"target": "/usr/src/paperless/export",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 9,
|
||||
"name": "volgate-paperlessngx_paperless_data",
|
||||
"sample": [
|
||||
"migration_lock",
|
||||
".index_version",
|
||||
"celerybeat-schedule.db",
|
||||
"index/_MAIN_1.toc",
|
||||
"index/MAIN_WRITELOCK",
|
||||
"log/paperless.log",
|
||||
"log/celery.log",
|
||||
"log/.__paperless.lock",
|
||||
"log/.__celery.lock"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-paperlessngx_paperless_data/_data",
|
||||
"target": "/usr/src/paperless/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 1,
|
||||
"name": null,
|
||||
"sample": [
|
||||
"media.lock"
|
||||
],
|
||||
"source": "/srv/felhom-gate/hdd/appdata/paperless/media",
|
||||
"target": "/usr/src/paperless/media",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/import/paperless",
|
||||
"target": "/usr/src/paperless/consume",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "paperless-webserver",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"paperless_data",
|
||||
"paperless_postgres_data",
|
||||
"paperless_redis_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"PAPERLESS_ADMIN_PASSWORD",
|
||||
"PAPERLESS_ADMIN_USER",
|
||||
"PAPERLESS_OCR_LANGUAGE",
|
||||
"PAPERLESS_SECRET_KEY",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,100 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "papra",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 173,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"db.sqlite"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": true,
|
||||
"dir": "/app/app-data/db",
|
||||
"files": [
|
||||
"db.sqlite"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/app-data",
|
||||
"files": [
|
||||
"db"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 177,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 999,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/papra-hq/papra:26.6.1-rootless",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-papra_papra_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-papra_papra_data/_data",
|
||||
"target": "/app/data",
|
||||
"writable_by_app": "NO"
|
||||
}
|
||||
],
|
||||
"name": "papra",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"papra_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"AUTH_SECRET",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"papra: mount /app/data is NOT writable by the app's own uid=999 gid=999",
|
||||
"papra: DATA in the writable layer at /app/app-data/db (db_signature=True, e.g. ['db.sqlite'])",
|
||||
"NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/app']. Needs adjudication.",
|
||||
"papra: this container's mounts are all empty while it created entries in ['/app'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"papra: declared volume /app/data is EMPTY"
|
||||
],
|
||||
"verdict": "BROKEN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,11 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "plant-it",
|
||||
"error": "no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling \n Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/plant-it, repository does not exist or may require 'docker login'\nError response from daemon: pull access denied for msdeluise/plant-it, repository does not exist or may require 'docker login'\n)"
|
||||
},
|
||||
"reasons": [
|
||||
"no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling \n Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/plant-it, repository does not exist or may require 'docker login'\nError response from daemon: pull access denied for msdeluise/plant-it, repository does not exist or may require 'docker login'\n)"
|
||||
],
|
||||
"verdict": "UNDETERMINED",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,170 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "plex",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 63,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
".firstRunComplete"
|
||||
],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
".firstRunComplete"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"cont-init.d",
|
||||
"services.d"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/cont-init.d",
|
||||
"files": [
|
||||
"45-plex-hw-transcode-and-connected-tuner",
|
||||
"50-plex-update",
|
||||
"40-plex-first-run"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/services.d",
|
||||
"files": [
|
||||
"plex"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/services.d/plex",
|
||||
"files": [
|
||||
"finish",
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 74,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "plexinc/pms-docker:1.41.4.9463-630c9f557",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 3,
|
||||
"name": null,
|
||||
"sample": [
|
||||
"books/metadata.db",
|
||||
"books/metadata.db-shm",
|
||||
"books/metadata.db-wal"
|
||||
],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media",
|
||||
"target": "/media",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 82,
|
||||
"name": "volgate-plex_plex_config",
|
||||
"sample": [
|
||||
"Library/Application Support/Plex Media Server/.LocalAdminToken",
|
||||
"Library/Application Support/Plex Media Server/plexmediaserver.pid",
|
||||
"Library/Application Support/Plex Media Server/Preferences.xml",
|
||||
"Library/Application Support/Plex Media Server/Setup Plex.html",
|
||||
"Library/Application Support/Plex Media Server/Cache/Flags.dat",
|
||||
"Library/Application Support/Plex Media Server/Cache/UpdateChannels.dat",
|
||||
"Library/Application Support/Plex Media Server/Cache/Privacy.dat",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.themoviedb/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.themoviedb/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.plexthememusic/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.plexthememusic/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.lastfm/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.lastfm/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.imdb/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.imdb/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.none/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.none/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.thetvdb/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.thetvdb/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.movieposterdb/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.movieposterdb/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/org.musicbrainz.agents.music/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/org.musicbrainz.agents.music/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.fanarttv/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.fanarttv/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.htbackdrops/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.htbackdrops/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.localmedia/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.localmedia/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.system/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.system/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.system/Dict",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.lyricfind/HTTPCookies",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Data/com.plexapp.agents.lyricfind/StoredValues",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Databases/com.plexapp.plugins.library.db-shm",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Databases/com.plexapp.plugins.library.blobs.db",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Databases/com.plexapp.plugins.library.db-wal",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Databases/com.plexapp.plugins.library.blobs.db-shm",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Databases/com.plexapp.plugins.library.blobs.db-wal",
|
||||
"Library/Application Support/Plex Media Server/Plug-in Support/Databases/com.plexapp.plugins.library.db"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-plex_plex_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-plex_plex_transcode",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-plex_plex_transcode/_data",
|
||||
"target": "/transcode",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "plex",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"plex_config",
|
||||
"plex_transcode"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"PLEX_CLAIM",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"plex: declared volume /transcode is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,96 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "privatebin",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 82,
|
||||
"health": "healthy",
|
||||
"image": "privatebin/pdo:2.0.5",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "1588c34a1374a5d4ae265cb892ff0059e87ae07e11a14ac1e17879c54b7b1ce2",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/1588c34a1374a5d4ae265cb892ff0059e87ae07e11a14ac1e17879c54b7b1ce2/_data",
|
||||
"target": "/tmp",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "08447e377c7efaba21791de7813d6799c785ee1a7e72216608c72e01a5a40d69",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/08447e377c7efaba21791de7813d6799c785ee1a7e72216608c72e01a5a40d69/_data",
|
||||
"target": "/var/lib/nginx/tmp",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-privatebin_privatebin_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-privatebin_privatebin_data/_data",
|
||||
"target": "/srv/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 14,
|
||||
"name": "ebd9667e81ace0d084e3f07b25360ca806df2a98294ec192d6afd674b70a790b",
|
||||
"sample": [
|
||||
"nginx.pid",
|
||||
"php-fpm.sock",
|
||||
"services/.s6-svscan/control",
|
||||
"services/.s6-svscan/lock",
|
||||
"services/php-fpm85/run",
|
||||
"services/php-fpm85/supervise/control",
|
||||
"services/php-fpm85/supervise/death_tally",
|
||||
"services/php-fpm85/supervise/status",
|
||||
"services/php-fpm85/supervise/lock",
|
||||
"services/nginx/run",
|
||||
"services/nginx/supervise/control",
|
||||
"services/nginx/supervise/death_tally",
|
||||
"services/nginx/supervise/status",
|
||||
"services/nginx/supervise/lock"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/ebd9667e81ace0d084e3f07b25360ca806df2a98294ec192d6afd674b70a790b/_data",
|
||||
"target": "/run",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "privatebin",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 65534
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"privatebin_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"nothing was written to any mount and nothing data-classified in any writable layer \u2014 the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN",
|
||||
"privatebin: declared volume /srv/data is EMPTY"
|
||||
],
|
||||
"verdict": "UNDETERMINED",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,155 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "radarr",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 207,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"downloads"
|
||||
],
|
||||
"changed_count": 5,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"downloads"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 4,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"group-",
|
||||
"passwd-",
|
||||
"s6-overlay",
|
||||
"crontabs"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/crontabs",
|
||||
"files": [
|
||||
"root"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay",
|
||||
"files": [
|
||||
"s6-rc.d"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay/s6-rc.d",
|
||||
"files": [
|
||||
"init-adduser"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay/s6-rc.d/init-adduser",
|
||||
"files": [
|
||||
"branding"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"movies"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/media",
|
||||
"files": [
|
||||
"movies"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_total": 222,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "lscr.io/linuxserver/radarr:6.3.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 11,
|
||||
"name": "volgate-radarr_radarr_config",
|
||||
"sample": [
|
||||
"radarr.pid",
|
||||
"logs.db-shm",
|
||||
"logs.db",
|
||||
"radarr.db",
|
||||
"radarr.db-wal",
|
||||
"radarr.db-shm",
|
||||
"logs.db-wal",
|
||||
"config.xml",
|
||||
"logs/radarr.txt",
|
||||
"logs/radarr.debug.txt",
|
||||
"asp/key-08e6d4a9-fe58-4059-ae41-87f0c8d018e5.xml"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-radarr_radarr_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media/movies",
|
||||
"target": "/media/movies",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/downloads",
|
||||
"target": "/downloads",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "radarr",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"radarr_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"radarr: writable-layer writes at /media (path suggests state, no database signature \u2014 judgement needed): ['movies']"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,159 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "rallly",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 6,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"apps"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/apps",
|
||||
"files": [
|
||||
"web"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/apps/web",
|
||||
"files": [
|
||||
".next"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 11,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 101,
|
||||
"health": "healthy",
|
||||
"image": "lukevella/rallly:4.11.1",
|
||||
"mounts": [],
|
||||
"name": "rallly",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 100
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1580,
|
||||
"name": "volgate-rallly_rallly_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-rallly_rallly_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "rallly-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"rallly_postgres_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SECRET_PASSWORD",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,95 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "recipe-importer",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 13,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"local"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local",
|
||||
"files": [
|
||||
"lib"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 22,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "gitea.dooplex.hu/admin/recipe-importer:v0.9.11",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-recipeimporter_recipe_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-recipeimporter_recipe_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "recipe-importer",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"recipe_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SECRET_KEY",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/']. Needs adjudication.",
|
||||
"recipe-importer: this container's mounts are all empty while it created entries in ['/'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"recipe-importer: declared volume /data is EMPTY"
|
||||
],
|
||||
"verdict": "UNDETERMINED",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,248 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "romm",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 13,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"root",
|
||||
"etc"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"nginx"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".gunicorn"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".gunicorn"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"gunicorn.ctl"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.gunicorn",
|
||||
"files": [
|
||||
"gunicorn.ctl"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 19,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "rommapp/romm:5.0.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "1ef425b6ade46b1849fdb2b3f632ed8640a9cb2f684686c1a175028a50ee706a",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/1ef425b6ade46b1849fdb2b3f632ed8640a9cb2f684686c1a175028a50ee706a/_data",
|
||||
"target": "/redis-data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "59a9958f0796e5ad06453b0ccf4b66018aa1897c68e3b646f3f469f221060752",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/59a9958f0796e5ad06453b0ccf4b66018aa1897c68e3b646f3f469f221060752/_data",
|
||||
"target": "/romm",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/roms",
|
||||
"target": "/romm/library",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/appdata/romm/resources",
|
||||
"target": "/romm/resources",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1,
|
||||
"name": "volgate-romm_romm_config",
|
||||
"sample": [
|
||||
"config.yml"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-romm_romm_config/_data",
|
||||
"target": "/romm/config",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "romm",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 999,
|
||||
"health": "healthy",
|
||||
"image": "mariadb:11.4",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 271,
|
||||
"name": "volgate-romm_romm_db_data",
|
||||
"sample": [
|
||||
"undo002",
|
||||
"tc.log",
|
||||
"mariadb_upgrade_info",
|
||||
"ibtmp1",
|
||||
"aria_log.00000001",
|
||||
"multi-master.info",
|
||||
"ddl_recovery.log",
|
||||
"ib_logfile0",
|
||||
"undo003",
|
||||
"ibdata1",
|
||||
".my-healthcheck.cnf",
|
||||
"aria_log_control",
|
||||
"undo001",
|
||||
"ib_buffer_pool",
|
||||
"sys/x@0024wait_classes_global_by_latency.frm",
|
||||
"sys/processlist.frm",
|
||||
"sys/session.frm",
|
||||
"sys/memory_by_host_by_current_bytes.frm",
|
||||
"sys/user_summary.frm",
|
||||
"sys/waits_global_by_latency.frm",
|
||||
"sys/x@0024statement_analysis.frm",
|
||||
"sys/x@0024host_summary.frm",
|
||||
"sys/schema_unused_indexes.frm",
|
||||
"sys/user_summary_by_file_io_type.frm",
|
||||
"sys/memory_by_thread_by_current_bytes.frm",
|
||||
"sys/x@0024statements_with_full_table_scans.frm",
|
||||
"sys/wait_classes_global_by_avg_latency.frm",
|
||||
"sys/x@0024schema_table_statistics.frm",
|
||||
"sys/x@0024statements_with_temp_tables.frm",
|
||||
"sys/schema_auto_increment_columns.frm",
|
||||
"sys/x@0024ps_schema_table_statistics_io.frm",
|
||||
"sys/x@0024memory_by_host_by_current_bytes.frm",
|
||||
"sys/statements_with_runtimes_in_95th_percentile.frm",
|
||||
"sys/x@0024statements_with_errors_or_warnings.frm",
|
||||
"sys/waits_by_user_by_latency.frm",
|
||||
"sys/x@0024io_global_by_file_by_bytes.frm",
|
||||
"sys/innodb_buffer_stats_by_table.frm",
|
||||
"sys/user_summary_by_statement_type.frm",
|
||||
"sys/statements_with_errors_or_warnings.frm",
|
||||
"sys/sys_config.MAD"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-romm_romm_db_data/_data",
|
||||
"target": "/var/lib/mysql",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "romm-db",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "redis:7-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 4,
|
||||
"name": "volgate-romm_romm_redis_data",
|
||||
"sample": [
|
||||
"dump.rdb",
|
||||
"appendonlydir/appendonly.aof.1.base.rdb",
|
||||
"appendonlydir/appendonly.aof.1.incr.aof",
|
||||
"appendonlydir/appendonly.aof.manifest"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-romm_romm_redis_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "romm-redis",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"romm_config",
|
||||
"romm_db_data",
|
||||
"romm_redis_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"MYSQL_ROOT_PASSWORD",
|
||||
"ROMM_AUTH_SECRET_KEY",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,63 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "seerr",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "fallenbagel/jellyseerr:2.7.3",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 11,
|
||||
"name": "volgate-seerr_seerr_config",
|
||||
"sample": [
|
||||
"settings.json",
|
||||
"DOCKER",
|
||||
"db/db.sqlite3-wal",
|
||||
"db/db.sqlite3",
|
||||
"db/db.sqlite3-shm",
|
||||
"logs/.machinelogs.json",
|
||||
"logs/jellyseerr.log",
|
||||
"logs/.20136e5b8544ec13f7fc29ce3d35150d597108bb-audit.json",
|
||||
"logs/jellyseerr-2026-08-02.log",
|
||||
"logs/.machinelogs-2026-08-02.json",
|
||||
"logs/.4295fcfc416647ffc3751a1d488b45a096cf2d4f-audit.json"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-seerr_seerr_config/_data",
|
||||
"target": "/app/config",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "seerr",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"seerr_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,155 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "sonarr",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 209,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"downloads"
|
||||
],
|
||||
"changed_count": 5,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"downloads"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 4,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"group-",
|
||||
"s6-overlay",
|
||||
"passwd-",
|
||||
"crontabs"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/crontabs",
|
||||
"files": [
|
||||
"root"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay",
|
||||
"files": [
|
||||
"s6-rc.d"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay/s6-rc.d",
|
||||
"files": [
|
||||
"init-adduser"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/s6-overlay/s6-rc.d/init-adduser",
|
||||
"files": [
|
||||
"branding"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"tv"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/media",
|
||||
"files": [
|
||||
"tv"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_total": 224,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "lscr.io/linuxserver/sonarr:4.0.19",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media/tv",
|
||||
"target": "/media/tv",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/downloads",
|
||||
"target": "/downloads",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 11,
|
||||
"name": "volgate-sonarr_sonarr_config",
|
||||
"sample": [
|
||||
"logs.db-shm",
|
||||
"sonarr.db",
|
||||
"logs.db",
|
||||
"sonarr.pid",
|
||||
"logs.db-wal",
|
||||
"sonarr.db-wal",
|
||||
"sonarr.db-shm",
|
||||
"config.xml",
|
||||
"logs/sonarr.txt",
|
||||
"logs/sonarr.debug.txt",
|
||||
"asp/key-4d541e64-de4d-421d-a8f7-8c05ed629e0c.xml"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-sonarr_sonarr_config/_data",
|
||||
"target": "/config",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "sonarr",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"sonarr_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"sonarr: writable-layer writes at /media (path suggests state, no database signature \u2014 judgement needed): ['tv']"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,231 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "sparkyfitness",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 11,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"etc",
|
||||
"run",
|
||||
"var"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"nginx"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/var",
|
||||
"files": [
|
||||
"cache"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 19,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "codewithcj/sparkyfitness:v0.17.3",
|
||||
"mounts": [],
|
||||
"name": "sparkyfitness",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:15-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1815,
|
||||
"name": "volgate-sparkyfitness_sparkyfitness_db_data",
|
||||
"sample": [
|
||||
"pgdata/postmaster.opts",
|
||||
"pgdata/postgresql.conf",
|
||||
"pgdata/postgresql.auto.conf",
|
||||
"pgdata/pg_ident.conf",
|
||||
"pgdata/pg_hba.conf",
|
||||
"pgdata/postmaster.pid",
|
||||
"pgdata/PG_VERSION",
|
||||
"pgdata/base/1/826",
|
||||
"pgdata/base/1/2996",
|
||||
"pgdata/base/1/3764",
|
||||
"pgdata/base/1/2610_fsm",
|
||||
"pgdata/base/1/3603_fsm",
|
||||
"pgdata/base/1/1249_vm",
|
||||
"pgdata/base/1/3600_fsm",
|
||||
"pgdata/base/1/13506_vm",
|
||||
"pgdata/base/1/3602",
|
||||
"pgdata/base/1/6228",
|
||||
"pgdata/base/1/4174",
|
||||
"pgdata/base/1/4157",
|
||||
"pgdata/base/1/4146",
|
||||
"pgdata/base/1/2611",
|
||||
"pgdata/base/1/2657",
|
||||
"pgdata/base/1/3079_vm",
|
||||
"pgdata/base/1/1247_vm",
|
||||
"pgdata/base/1/13501_fsm",
|
||||
"pgdata/base/1/1259",
|
||||
"pgdata/base/1/3601_fsm",
|
||||
"pgdata/base/1/1417",
|
||||
"pgdata/base/1/4155",
|
||||
"pgdata/base/1/2668",
|
||||
"pgdata/base/1/13491_fsm",
|
||||
"pgdata/base/1/2831",
|
||||
"pgdata/base/1/2841",
|
||||
"pgdata/base/1/3607",
|
||||
"pgdata/base/1/2836",
|
||||
"pgdata/base/1/1255_fsm",
|
||||
"pgdata/base/1/2615_vm",
|
||||
"pgdata/base/1/3575",
|
||||
"pgdata/base/1/2605_vm",
|
||||
"pgdata/base/1/2670"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-sparkyfitness_sparkyfitness_db_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "sparkyfitness-db",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
},
|
||||
{
|
||||
"diff_added": 392,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"SparkyFitnessServer"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"backup",
|
||||
"temp_uploads",
|
||||
"uploads"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/SparkyFitnessServer",
|
||||
"files": [
|
||||
"backup",
|
||||
"temp_uploads",
|
||||
"uploads"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 395,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "codewithcj/sparkyfitness_server:v0.17.3",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-sparkyfitness_sparkyfitness_uploads",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-sparkyfitness_sparkyfitness_uploads/_data",
|
||||
"target": "/app/SparkyFitnessServer/uploads",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-sparkyfitness_sparkyfitness_backup",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-sparkyfitness_sparkyfitness_backup/_data",
|
||||
"target": "/app/SparkyFitnessServer/backup",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "sparkyfitness-server",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"sparkyfitness_backup",
|
||||
"sparkyfitness_db_data",
|
||||
"sparkyfitness_uploads"
|
||||
],
|
||||
"env_keys": [
|
||||
"API_ENCRYPTION_KEY",
|
||||
"APP_DB_PASSWORD",
|
||||
"BETTER_AUTH_SECRET",
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"sparkyfitness-server: this container's mounts are all empty while it created entries in ['/app/SparkyFitnessServer'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"sparkyfitness-server: declared volume /app/SparkyFitnessServer/uploads is EMPTY",
|
||||
"sparkyfitness-server: declared volume /app/SparkyFitnessServer/backup is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,263 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "tandoor",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 527,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"opt",
|
||||
"usr"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/opt",
|
||||
"files": [
|
||||
"recipes"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"mediafiles",
|
||||
"staticfiles"
|
||||
],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/opt/recipes",
|
||||
"files": [
|
||||
"mediafiles",
|
||||
"staticfiles"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 7,
|
||||
"db_signature": false,
|
||||
"dir": "/opt/recipes/cookbook",
|
||||
"files": [
|
||||
"views",
|
||||
"migrations",
|
||||
"templatetags",
|
||||
"integration",
|
||||
"provider",
|
||||
"connectors",
|
||||
"helper"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"Recipes.conf"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/opt/recipes/http.d",
|
||||
"files": [
|
||||
"Recipes.conf"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"local"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local",
|
||||
"files": [
|
||||
"lib"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 576,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/tandoorrecipes/recipes:2.6.13",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3047,
|
||||
"name": "volgate-tandoor_tandoor_static",
|
||||
"sample": [
|
||||
"staticfiles.json",
|
||||
"vue3/service-worker.js.gz",
|
||||
"vue3/registerSW.js.gz",
|
||||
"vue3/service-worker.js",
|
||||
"vue3/manifest.484f96e63b3b.webmanifest",
|
||||
"vue3/manifest.484f96e63b3b.webmanifest.gz",
|
||||
"vue3/manifest.77a5899585d8.json.gz",
|
||||
"vue3/service-worker.e1a4252df0ae.js.gz",
|
||||
"vue3/registerSW.be6aad568a9d.js",
|
||||
"vue3/registerSW.js",
|
||||
"vue3/manifest.webmanifest",
|
||||
"vue3/manifest.webmanifest.gz",
|
||||
"vue3/service-worker.e1a4252df0ae.js",
|
||||
"vue3/registerSW.be6aad568a9d.js.gz",
|
||||
"vue3/manifest.json.gz",
|
||||
"vue3/manifest.77a5899585d8.json",
|
||||
"vue3/manifest.json",
|
||||
"vue3/assets/PantryPage-ClGNwpHL.80923c1ff539.js.gz",
|
||||
"vue3/assets/DatabaseLinkCol-d8pnKjbf.js.gz",
|
||||
"vue3/assets/fontello-BxS_W-ym.86b6414dad9e.svg.gz",
|
||||
"vue3/assets/VFileUpload-7CWUohzn.d182bb8e4f03.css",
|
||||
"vue3/assets/fa-regular-400-DZaxPHgR.ttf.gz",
|
||||
"vue3/assets/number_utils-DFmVVcK0.js.gz",
|
||||
"vue3/assets/ja-Cqm3qbrP.d617fa524f97.js",
|
||||
"vue3/assets/ModelListPage-xoBv_A6i.4681a991ae27.js",
|
||||
"vue3/assets/et-zY9CrDMt.1761c6eb5f48.js",
|
||||
"vue3/assets/fa-regular-400-BjRzuEpd.89672701a587.woff2",
|
||||
"vue3/assets/ShoppingListView-C0_akhap.js",
|
||||
"vue3/assets/VOverlay-CKBxglwy.b98729efffd0.css.gz",
|
||||
"vue3/assets/ClosableHelpAlert-BoN8dDrm.js.gz",
|
||||
"vue3/assets/VColorPicker-DoVATq5z.css.gz",
|
||||
"vue3/assets/ja-Cqm3qbrP.js",
|
||||
"vue3/assets/position-D7bmUCsu.f212789ebec5.css",
|
||||
"vue3/assets/number_utils-Brwft-8t.css",
|
||||
"vue3/assets/SpaceSettings-BPOt7vl3.ab2d8e61f937.js.gz",
|
||||
"vue3/assets/InviteLinkEditor-BZ7NMcrL.19f59c5d2292.js.gz",
|
||||
"vue3/assets/hu-DlZ4REsp.c1bc941c31dc.js.gz",
|
||||
"vue3/assets/fileFilter-JaX38xV6.js.gz",
|
||||
"vue3/assets/VBtn-rFOjfrXe.df1b89399b11.css",
|
||||
"vue3/assets/VDataTableServer-BYvhcs5d.js.gz"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-tandoor_tandoor_static/_data",
|
||||
"target": "/opt/recipes/staticfiles",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-tandoor_tandoor_media",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-tandoor_tandoor_media/_data",
|
||||
"target": "/opt/recipes/mediafiles",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "tandoor",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1984,
|
||||
"name": "volgate-tandoor_tandoor_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-tandoor_tandoor_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "tandoor-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"tandoor_media",
|
||||
"tandoor_postgres_data",
|
||||
"tandoor_static"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SECRET_KEY",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"tandoor: declared volume /opt/recipes/mediafiles is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,94 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "termix",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 9,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"etc",
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"html"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/html",
|
||||
"files": [
|
||||
"sw.js"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"group-"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 17,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/lukegus/termix:2.5.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 4,
|
||||
"name": "volgate-termix_termix_data",
|
||||
"sample": [
|
||||
"db.sqlite.encrypted",
|
||||
".env",
|
||||
"opkssh/version.txt",
|
||||
"opkssh/opkssh-linux-amd64"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-termix_termix_data/_data",
|
||||
"target": "/app/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "termix",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 1000
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"termix_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,54 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "uptime-kuma",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "louislam/uptime-kuma:2.4.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-uptimekuma_uptime_kuma_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-uptimekuma_uptime_kuma_data/_data",
|
||||
"target": "/app/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "uptime-kuma",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"uptime_kuma_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"nothing was written to any mount and nothing data-classified in any writable layer \u2014 the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN",
|
||||
"uptime-kuma: declared volume /app/data is EMPTY"
|
||||
],
|
||||
"verdict": "UNDETERMINED",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,58 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "vaultwarden",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "vaultwarden/server:1.36.0-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 4,
|
||||
"name": "volgate-vaultwarden_vaultwarden_data",
|
||||
"sample": [
|
||||
"rsa_key.pem",
|
||||
"db.sqlite3-wal",
|
||||
"db.sqlite3",
|
||||
"db.sqlite3-shm"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-vaultwarden_vaultwarden_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "vaultwarden",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"vaultwarden_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"ADMIN_TOKEN",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SIGNUPS_ALLOWED",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,100 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "vikunja",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 4,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"db"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"db"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"vikunja"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"files"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/vikunja",
|
||||
"files": [
|
||||
"files"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 6,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": null,
|
||||
"image": "vikunja/vikunja:2.3.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-vikunja_vikunja_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-vikunja_vikunja_data/_data",
|
||||
"target": "/app/vikunja/files",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3,
|
||||
"name": "volgate-vikunja_vikunja_db",
|
||||
"sample": [
|
||||
"vikunja.db-shm",
|
||||
"vikunja.db-wal",
|
||||
"vikunja.db"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-vikunja_vikunja_db/_data",
|
||||
"target": "/db",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "vikunja",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"vikunja_data",
|
||||
"vikunja_db"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH",
|
||||
"VIKUNJA_SERVICE_JWTSECRET"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"vikunja: declared volume /app/vikunja/files is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,194 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "wanderer",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 6,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"root"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".npm"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".npm"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 8,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "unhealthy",
|
||||
"image": "flomp/wanderer-web:v0.20.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-wanderer_wanderer_uploads",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-wanderer_wanderer_uploads/_data",
|
||||
"target": "/app/uploads",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wanderer",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 3,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"pb_data",
|
||||
"data"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"pb_data",
|
||||
"data"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"plugins"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/data",
|
||||
"files": [
|
||||
"plugins"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_total": 3,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "flomp/wanderer-db:v0.20.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 6,
|
||||
"name": "volgate-wanderer_wanderer_data",
|
||||
"sample": [
|
||||
"auxiliary.db-wal",
|
||||
"data.db",
|
||||
"data.db-wal",
|
||||
"auxiliary.db",
|
||||
"auxiliary.db-shm",
|
||||
"data.db-shm"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-wanderer_wanderer_data/_data",
|
||||
"target": "/pb_data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-wanderer_wanderer_plugins",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-wanderer_wanderer_plugins/_data",
|
||||
"target": "/data/plugins",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wanderer-db",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "getmeili/meilisearch:v1.36.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 11,
|
||||
"name": "volgate-wanderer_wanderer_meili_data",
|
||||
"sample": [
|
||||
"data.ms/VERSION",
|
||||
"data.ms/indexes/a0fe8809-d547-4e9f-9b13-f5962d76ee3f/data.mdb",
|
||||
"data.ms/indexes/a0fe8809-d547-4e9f-9b13-f5962d76ee3f/lock.mdb",
|
||||
"data.ms/indexes/45aacc63-1820-432b-9eb5-027bb1f94f5f/data.mdb",
|
||||
"data.ms/indexes/45aacc63-1820-432b-9eb5-027bb1f94f5f/lock.mdb",
|
||||
"data.ms/indexes/a982b080-60f2-4811-a993-0e235ea2a5b9/data.mdb",
|
||||
"data.ms/indexes/a982b080-60f2-4811-a993-0e235ea2a5b9/lock.mdb",
|
||||
"data.ms/auth/data.mdb",
|
||||
"data.ms/auth/lock.mdb",
|
||||
"data.ms/tasks/data.mdb",
|
||||
"data.ms/tasks/lock.mdb"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-wanderer_wanderer_meili_data/_data",
|
||||
"target": "/meili_data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wanderer-search",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"wanderer_data",
|
||||
"wanderer_meili_data",
|
||||
"wanderer_plugins",
|
||||
"wanderer_uploads"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"MEILI_MASTER_KEY",
|
||||
"POCKETBASE_ENCRYPTION_KEY",
|
||||
"SUBDOMAIN",
|
||||
"SUBDOMAIN_DB",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"wanderer: unhealthy",
|
||||
"wanderer: this container's mounts are all empty while it created entries in ['/root'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"wanderer: declared volume /app/uploads is EMPTY",
|
||||
"wanderer-db: declared volume /data/plugins is EMPTY",
|
||||
"wanderer-db: writable-layer writes at /data (path suggests state, no database signature \u2014 judgement needed): ['plugins']"
|
||||
],
|
||||
"verdict": "UNDETERMINED",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,66 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "wger",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "wger/server:2.6",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1,
|
||||
"name": "volgate-wger_wger_data",
|
||||
"sample": [
|
||||
"database.sqlite"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-wger_wger_data/_data",
|
||||
"target": "/home/wger/db",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-wger_wger_media",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-wger_wger_media/_data",
|
||||
"target": "/home/wger/media",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wger",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 1000
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"wger_data",
|
||||
"wger_media"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SECRET_KEY",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"wger: declared volume /home/wger/media is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,163 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "wishlist",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 35,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".config",
|
||||
".local"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".config",
|
||||
".local"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"caddy"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.config",
|
||||
"files": [
|
||||
"caddy"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"autosave.json"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.config/caddy",
|
||||
"files": [
|
||||
"autosave.json"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"share"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.local",
|
||||
"files": [
|
||||
"share"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"src"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"data",
|
||||
"uploads"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src/app",
|
||||
"files": [
|
||||
"data",
|
||||
"uploads"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 45,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/cmintey/wishlist:v0.66.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-wishlist_wishlist_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-wishlist_wishlist_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "bef31c91bf46c66ba902cc07e89fbd3032b67fd68264bd04afcb1f3ca7cce0c9",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/bef31c91bf46c66ba902cc07e89fbd3032b67fd68264bd04afcb1f3ca7cce0c9/_data",
|
||||
"target": "/usr/src/app/uploads",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 1,
|
||||
"name": "782ab526684eaca336b6bfc3226ada078e567bce907a5e17b0782b35e38f016e",
|
||||
"sample": [
|
||||
"prod.db"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/782ab526684eaca336b6bfc3226ada078e567bce907a5e17b0782b35e38f016e/_data",
|
||||
"target": "/usr/src/app/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wishlist",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"wishlist_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"wishlist: 1 file(s) in an ANONYMOUS volume at /usr/src/app/data \u2014 not in the compose `volumes:` block, so it is never backed up and a redeploy orphans it",
|
||||
"wishlist: declared volume /data is EMPTY"
|
||||
],
|
||||
"verdict": "BROKEN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,170 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "zipline",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 3,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"zipline"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"uploads",
|
||||
"public"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/zipline",
|
||||
"files": [
|
||||
"uploads",
|
||||
"public"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 5,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/diced/zipline:4.6.1",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-zipline_zipline_uploads",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-zipline_zipline_uploads/_data",
|
||||
"target": "/zipline/uploads",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-zipline_zipline_public",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-zipline_zipline_public/_data",
|
||||
"target": "/zipline/public",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "zipline",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1357,
|
||||
"name": "volgate-zipline_zipline_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/pg_internal.init",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-zipline_zipline_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "zipline-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"zipline_postgres_data",
|
||||
"zipline_public",
|
||||
"zipline_uploads"
|
||||
],
|
||||
"env_keys": [
|
||||
"CORE_SECRET",
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"zipline: this container's mounts are all empty while it created entries in ['/zipline'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"zipline: declared volume /zipline/uploads is EMPTY",
|
||||
"zipline: declared volume /zipline/public is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN",
|
||||
"verdict_recomputed_by": "check-volume-persistence.py classify() at final rules"
|
||||
}
|
||||
@@ -0,0 +1,84 @@
|
||||
{
|
||||
"current": {
|
||||
"after": {
|
||||
"/app/app-data/db/db.sqlite": {
|
||||
"bytes": 475136,
|
||||
"present": true,
|
||||
"sha256": "5d179bf1c624330a826164486a13dc2930222aac8b2ed729250f7ae2a51a058b"
|
||||
},
|
||||
"/app/data": {
|
||||
"dir": true,
|
||||
"files": [],
|
||||
"present": true
|
||||
},
|
||||
"documents": []
|
||||
},
|
||||
"before": {
|
||||
"/app/app-data/db/db.sqlite": {
|
||||
"bytes": 475136,
|
||||
"present": true,
|
||||
"sha256": "1e9b695a7aef6d7602b300f7a02bc2074bc2dd9d04bec4b0c561cc2e3a5ff260"
|
||||
},
|
||||
"/app/data": {
|
||||
"dir": true,
|
||||
"files": [],
|
||||
"present": true
|
||||
},
|
||||
"documents": []
|
||||
},
|
||||
"db_identical_after_redeploy": false,
|
||||
"leg": "current",
|
||||
"log": [
|
||||
"sign-up -> HTTP/1.1 200 OK",
|
||||
"organizations -> no id in {\"error\":{\"message\":\"Unauthorized\",\"code\":\"auth.unauthorized\"}}",
|
||||
"[before] {\"/app/app-data/db/db.sqlite\": {\"present\": true, \"bytes\": 475136, \"sha256\": \"1e9b695a7aef6d7602b300f7a02bc2074bc2dd9d04bec4b0c561cc2e3a5ff260\"}, \"/app/data\": {\"present\": true, \"dir\": true, \"files\": []}, \"documents\": []}",
|
||||
"[after] {\"/app/app-data/db/db.sqlite\": {\"present\": true, \"bytes\": 475136, \"sha256\": \"5d179bf1c624330a826164486a13dc2930222aac8b2ed729250f7ae2a51a058b\"}, \"/app/data\": {\"present\": true, \"dir\": true, \"files\": []}, \"documents\": []}"
|
||||
],
|
||||
"seeded": {
|
||||
"account": "HTTP/1.1 200 OK",
|
||||
"document_uploaded": false
|
||||
},
|
||||
"uploaded_document_present_after": false,
|
||||
"uploaded_document_present_before": false,
|
||||
"verdict": "INCONCLUSIVE - the document was never uploaded"
|
||||
},
|
||||
"fixed": {
|
||||
"after": {
|
||||
"/app/app-data/db/db.sqlite": {
|
||||
"bytes": 475136,
|
||||
"present": true,
|
||||
"sha256": "9dd5cf37d7b9a5dd65653eabfb281f6804b2a05a28ef3040fa7db1e8d874da23"
|
||||
},
|
||||
"/app/data": {
|
||||
"present": false
|
||||
},
|
||||
"documents": []
|
||||
},
|
||||
"before": {
|
||||
"/app/app-data/db/db.sqlite": {
|
||||
"bytes": 475136,
|
||||
"present": true,
|
||||
"sha256": "9dd5cf37d7b9a5dd65653eabfb281f6804b2a05a28ef3040fa7db1e8d874da23"
|
||||
},
|
||||
"/app/data": {
|
||||
"present": false
|
||||
},
|
||||
"documents": []
|
||||
},
|
||||
"db_identical_after_redeploy": true,
|
||||
"leg": "fixed",
|
||||
"log": [
|
||||
"sign-up -> HTTP/1.1 200 OK",
|
||||
"organizations -> no id in {\"error\":{\"message\":\"Unauthorized\",\"code\":\"auth.unauthorized\"}}",
|
||||
"[before] {\"/app/app-data/db/db.sqlite\": {\"present\": true, \"bytes\": 475136, \"sha256\": \"9dd5cf37d7b9a5dd65653eabfb281f6804b2a05a28ef3040fa7db1e8d874da23\"}, \"/app/data\": {\"present\": false}, \"documents\": []}",
|
||||
"[after] {\"/app/app-data/db/db.sqlite\": {\"present\": true, \"bytes\": 475136, \"sha256\": \"9dd5cf37d7b9a5dd65653eabfb281f6804b2a05a28ef3040fa7db1e8d874da23\"}, \"/app/data\": {\"present\": false}, \"documents\": []}"
|
||||
],
|
||||
"seeded": {
|
||||
"account": "HTTP/1.1 200 OK",
|
||||
"document_uploaded": false
|
||||
},
|
||||
"uploaded_document_present_after": false,
|
||||
"uploaded_document_present_before": false,
|
||||
"verdict": "INCONCLUSIVE - the document was never uploaded"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,4 @@
|
||||
--- current
|
||||
+++ fixed
|
||||
- - papra_data:/app/data
|
||||
+ - papra_data:/app/app-data
|
||||
@@ -0,0 +1,255 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "gramps-web",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 121,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"usr",
|
||||
"app",
|
||||
"root"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"secret"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"secret"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src",
|
||||
"files": [
|
||||
"gramps_webapi",
|
||||
"alembic_users"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src/alembic_users",
|
||||
"files": [
|
||||
"versions"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src/gramps_webapi",
|
||||
"files": [
|
||||
"api",
|
||||
"auth",
|
||||
"util"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src/gramps_webapi/api",
|
||||
"files": [
|
||||
"search",
|
||||
"resources"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".gramps"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".gramps"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"grampsdb"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.gramps",
|
||||
"files": [
|
||||
"grampsdb"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root/gramps",
|
||||
"files": [
|
||||
"gramps60"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root/gramps/gramps60",
|
||||
"files": [
|
||||
"plugins"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root/gramps/gramps60/plugins",
|
||||
"files": [
|
||||
"FilterRules"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"lib"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 143,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/gramps-project/grampsweb:v25.6.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_media",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_media/_data",
|
||||
"target": "/app/media",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1,
|
||||
"name": "volgate-grampsweb_gramps_thumb_cache",
|
||||
"sample": [
|
||||
"2029240f6d1128be89ddc32729463129"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_thumb_cache/_data",
|
||||
"target": "/app/thumbnail_cache",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1,
|
||||
"name": "volgate-grampsweb_gramps_cache",
|
||||
"sample": [
|
||||
"request_cache/2029240f6d1128be89ddc32729463129"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_cache/_data",
|
||||
"target": "/app/cache",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_secret",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_secret/_data",
|
||||
"target": "/app/secret",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_tmp",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_tmp/_data",
|
||||
"target": "/tmp",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1,
|
||||
"name": "volgate-grampsweb_gramps_users",
|
||||
"sample": [
|
||||
"users.sqlite"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_users/_data",
|
||||
"target": "/app/users",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 2,
|
||||
"name": "volgate-grampsweb_gramps_db",
|
||||
"sample": [
|
||||
"10a64f2c-8485-4514-a23b-81c02a1fbd81/name.txt",
|
||||
"10a64f2c-8485-4514-a23b-81c02a1fbd81/database.txt"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_db/_data",
|
||||
"target": "/root/.gramps/grampsdb",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_index",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_index/_data",
|
||||
"target": "/app/indexdir",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "gramps-web",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"gramps_cache",
|
||||
"gramps_db",
|
||||
"gramps_index",
|
||||
"gramps_media",
|
||||
"gramps_secret",
|
||||
"gramps_thumb_cache",
|
||||
"gramps_tmp",
|
||||
"gramps_users"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"GRAMPSWEB_SECRET_KEY",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"gramps-web: declared volume /app/media is EMPTY",
|
||||
"gramps-web: declared volume /app/secret is EMPTY",
|
||||
"gramps-web: declared volume /app/indexdir is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN"
|
||||
}
|
||||
@@ -0,0 +1,152 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "wishlist",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 34,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"root",
|
||||
"usr"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".config",
|
||||
".local"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".config",
|
||||
".local"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"caddy"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.config",
|
||||
"files": [
|
||||
"caddy"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"autosave.json"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.config/caddy",
|
||||
"files": [
|
||||
"autosave.json"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"share"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.local",
|
||||
"files": [
|
||||
"share"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"src"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"uploads",
|
||||
"data"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src/app",
|
||||
"files": [
|
||||
"uploads",
|
||||
"data"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 44,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/cmintey/wishlist:v0.66.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1,
|
||||
"name": "volgate-wishlist_wishlist_data",
|
||||
"sample": [
|
||||
"prod.db"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-wishlist_wishlist_data/_data",
|
||||
"target": "/usr/src/app/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-wishlist_wishlist_uploads",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-wishlist_wishlist_uploads/_data",
|
||||
"target": "/usr/src/app/uploads",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wishlist",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"wishlist_data",
|
||||
"wishlist_uploads"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"wishlist: declared volume /usr/src/app/uploads is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN"
|
||||
}
|
||||
@@ -0,0 +1,77 @@
|
||||
{
|
||||
"app": "gramps-web",
|
||||
"changed_in_place": [
|
||||
"/app/cache::request_cache/2029240f6d1128be89ddc32729463129"
|
||||
],
|
||||
"files_after": 5,
|
||||
"files_before": 5,
|
||||
"label": "gramps-web",
|
||||
"lost": [],
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "gramps-web",
|
||||
"name": "svgrampsweb_gramps_secret",
|
||||
"source": "/var/lib/docker/volumes/svgrampsweb_gramps_secret/_data",
|
||||
"target": "/app/secret"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "gramps-web",
|
||||
"name": "svgrampsweb_gramps_tmp",
|
||||
"source": "/var/lib/docker/volumes/svgrampsweb_gramps_tmp/_data",
|
||||
"target": "/tmp"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "gramps-web",
|
||||
"name": "svgrampsweb_gramps_users",
|
||||
"source": "/var/lib/docker/volumes/svgrampsweb_gramps_users/_data",
|
||||
"target": "/app/users"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "gramps-web",
|
||||
"name": "svgrampsweb_gramps_db",
|
||||
"source": "/var/lib/docker/volumes/svgrampsweb_gramps_db/_data",
|
||||
"target": "/root/.gramps/grampsdb"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "gramps-web",
|
||||
"name": "svgrampsweb_gramps_index",
|
||||
"source": "/var/lib/docker/volumes/svgrampsweb_gramps_index/_data",
|
||||
"target": "/app/indexdir"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "gramps-web",
|
||||
"name": "svgrampsweb_gramps_media",
|
||||
"source": "/var/lib/docker/volumes/svgrampsweb_gramps_media/_data",
|
||||
"target": "/app/media"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "gramps-web",
|
||||
"name": "svgrampsweb_gramps_thumb_cache",
|
||||
"source": "/var/lib/docker/volumes/svgrampsweb_gramps_thumb_cache/_data",
|
||||
"target": "/app/thumbnail_cache"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "gramps-web",
|
||||
"name": "svgrampsweb_gramps_cache",
|
||||
"source": "/var/lib/docker/volumes/svgrampsweb_gramps_cache/_data",
|
||||
"target": "/app/cache"
|
||||
}
|
||||
],
|
||||
"survived": [
|
||||
"/app/thumbnail_cache::2029240f6d1128be89ddc32729463129",
|
||||
"/app/users::users.sqlite",
|
||||
"/root/.gramps/grampsdb::034a955e-563e-4cbc-a5bd-6f1bf63e1c5f/database.txt",
|
||||
"/root/.gramps/grampsdb::034a955e-563e-4cbc-a5bd-6f1bf63e1c5f/name.txt"
|
||||
],
|
||||
"up1_rc": 0,
|
||||
"up2_rc": 0,
|
||||
"verdict": "SURVIVES"
|
||||
}
|
||||
@@ -0,0 +1,2 @@
|
||||
gramps-web SURVIVES before=5 after=5 survived=4 changed=1 lost=0 []
|
||||
wishlist DATA-LOST before=1 after=1 survived=0 changed=1 lost=0 []
|
||||
@@ -0,0 +1,23 @@
|
||||
{
|
||||
"after": {
|
||||
"inode": 47151,
|
||||
"sha256": "f35df23bcef4fa1e6c5f312dbc0d63db7fb85032f85abd7e3f28935fe553ab76",
|
||||
"size": 307200
|
||||
},
|
||||
"app": "wishlist",
|
||||
"before": {
|
||||
"inode": 47151,
|
||||
"sha256": "f35df23bcef4fa1e6c5f312dbc0d63db7fb85032f85abd7e3f28935fe553ab76",
|
||||
"size": 307200
|
||||
},
|
||||
"log": [
|
||||
"signup -> HTTP/1.1 404 Not Found",
|
||||
"before: db={'inode': 47151, 'size': 307200, 'sha256': 'f35df23bcef4fa1e6c5f312dbc0d63db7fb85032f85abd7e3f28935fe553ab76'} users=Unable to find image 'keinos/sqlite3:latest' locally\nlatest: Pulling from keinos/sqlite3\n4f4fb700ef54: Pulling fs layer\n724d4e3100b9: Pulling fs layer\ne8817903f204: Pulling fs layer\n5439b162c22e: Pulling fs layer\n8e2cd5637e13: Pulling fs layer\n4f4fb700ef54: Already exists\n4f4fb700ef54: Pull complete\n8e2cd5637e13: Download complete\n724d4e3100b9: Download complete\n5439b162c22e: Download complete\ne8817903f204: Download complete\ne8817903f204: Pull complete\n289b2de968e1: Download complete\n7f32741739d1: Download complete\na34b169f6c05: Download complete\n724d4e3100b9: Pull complete\n5439b162c22e: Pull complete\n8e2cd5637e13: Pull complete\nDigest: sha256:a5610a155a8c9007f2050120406a0abcffab246570d6ac1ffe370f5f23e14dc1\nStatus: Downloaded newer image for keinos/sqlite3:latest\nParse error in 2nd command line argument: unable to open database file (14)",
|
||||
"after : db={'inode': 47151, 'size': 307200, 'sha256': 'f35df23bcef4fa1e6c5f312dbc0d63db7fb85032f85abd7e3f28935fe553ab76'} users=Parse error in 2nd command line argument: unable to open database file (14)"
|
||||
],
|
||||
"same_inode": true,
|
||||
"user_rows_after": "Parse error in 2nd command line argument: unable to open database file (14)",
|
||||
"user_rows_before": "Unable to find image 'keinos/sqlite3:latest' locally\nlatest: Pulling from keinos/sqlite3\n4f4fb700ef54: Pulling fs layer\n724d4e3100b9: Pulling fs layer\ne8817903f204: Pulling fs layer\n5439b162c22e: Pulling fs layer\n8e2cd5637e13: Pulling fs layer\n4f4fb700ef54: Already exists\n4f4fb700ef54: Pull complete\n8e2cd5637e13: Download complete\n724d4e3100b9: Download complete\n5439b162c22e: Download complete\ne8817903f204: Download complete\ne8817903f204: Pull complete\n289b2de968e1: Download complete\n7f32741739d1: Download complete\na34b169f6c05: Download complete\n724d4e3100b9: Pull complete\n5439b162c22e: Pull complete\n8e2cd5637e13: Pull complete\nDigest: sha256:a5610a155a8c9007f2050120406a0abcffab246570d6ac1ffe370f5f23e14dc1\nStatus: Downloaded newer image for keinos/sqlite3:latest\nParse error in 2nd command line argument: unable to open database file (14)",
|
||||
"user_rows_preserved": false,
|
||||
"verdict": "SURVIVES (inode only, no seeded rows)"
|
||||
}
|
||||
@@ -0,0 +1,30 @@
|
||||
{
|
||||
"app": "wishlist",
|
||||
"changed_in_place": [
|
||||
"/usr/src/app/data::prod.db"
|
||||
],
|
||||
"files_after": 1,
|
||||
"files_before": 1,
|
||||
"label": "wishlist",
|
||||
"lost": [],
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "wishlist",
|
||||
"name": "svwishlist_wishlist_data",
|
||||
"source": "/var/lib/docker/volumes/svwishlist_wishlist_data/_data",
|
||||
"target": "/usr/src/app/data"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"ctr": "wishlist",
|
||||
"name": "svwishlist_wishlist_uploads",
|
||||
"source": "/var/lib/docker/volumes/svwishlist_wishlist_uploads/_data",
|
||||
"target": "/usr/src/app/uploads"
|
||||
}
|
||||
],
|
||||
"survived": [],
|
||||
"up1_rc": 0,
|
||||
"up2_rc": 0,
|
||||
"verdict": "DATA-LOST"
|
||||
}
|
||||
@@ -0,0 +1,90 @@
|
||||
self-testing the prober (both directions)…
|
||||
prober flags the R-156 signature and clears a correct template — trustworthy
|
||||
actualbudget CLEAN
|
||||
adventurelog CLEAN
|
||||
audiobookshelf CLEAN
|
||||
bentopdf UNDETERMINED nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is U
|
||||
bookstack CLEAN
|
||||
calcom CLEAN
|
||||
calibre-web CLEAN calibre-web: /app/calibre-web-automated/empty_library — database file(s) touched but byte-identical to the image; a chown sweep, not a write; calibre-
|
||||
claper UNDETERMINED claper: EVERY declared mount is empty, yet the container created entries in 2 director(y/ies) outside all of them (e.g. ['/app/priv', '/app/priv/stati
|
||||
code-server CLEAN
|
||||
crafty-controller CLEAN crafty-controller: declared volume /crafty/servers is EMPTY; crafty-controller: declared volume /crafty/import is EMPTY; crafty-controller: declared v
|
||||
docmost UNDETERMINED docmost: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/app/apps/client/dist']) —
|
||||
emby CLEAN
|
||||
ghost CLEAN
|
||||
gitea CLEAN
|
||||
glance UNDETERMINED glance: not running (status=restarting exit=1 restarts=None)
|
||||
gokapi CLEAN
|
||||
grafana CLEAN
|
||||
gramps-web BROKEN gramps-web: DATA in the writable layer at /app/users (db_signature=True, e.g. ['users.sqlite']); gramps-web: declared volume /app/data is EMPTY; gramp
|
||||
home-assistant CLEAN
|
||||
homebox CLEAN
|
||||
homepage CLEAN
|
||||
immich UNDETERMINED immich-machine-learning: EVERY declared mount is empty, yet the container created entries in 3 director(y/ies) outside all of them (e.g. ['/', '/root'
|
||||
jellyfin CLEAN
|
||||
kimai CLEAN
|
||||
komga CLEAN
|
||||
mealie CLEAN
|
||||
n8n CLEAN
|
||||
navidrome CLEAN
|
||||
nextcloud CLEAN
|
||||
onlyoffice CLEAN onlyoffice: writable-layer writes at /var/www/onlyoffice/documentserver/sdkjs-plugins/{07FD8DFA-DFE0-4089-AL24-0730933CC80A}/resources/store (path sug
|
||||
opengist CLEAN
|
||||
outline CLEAN outline: declared volume /var/lib/outline/data is EMPTY; outline-redis: declared volume /data is EMPTY
|
||||
paperless-ngx CLEAN
|
||||
papra BROKEN papra: mount /app/data is NOT writable by the app's own uid=999 gid=999; papra: DATA in the writable layer at /app/app-data/db (db_signature=True, e.g
|
||||
plant-it UNDETERMINED no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling
|
||||
Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/pla
|
||||
plex CLEAN plex: declared volume /transcode is EMPTY
|
||||
privatebin BROKEN privatebin: 14 file(s) in an ANONYMOUS volume at /run — not in the compose `volumes:` block, so it is never backed up and a redeploy orphans it; priva
|
||||
radarr CLEAN radarr: writable-layer writes at /media (path suggests state, no database signature — judgement needed): ['movies']
|
||||
rallly CLEAN
|
||||
recipe-importer UNDETERMINED recipe-importer: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/']) — nothing this
|
||||
romm CLEAN
|
||||
seerr CLEAN
|
||||
sonarr CLEAN sonarr: writable-layer writes at /media (path suggests state, no database signature — judgement needed): ['tv']
|
||||
sparkyfitness UNDETERMINED sparkyfitness-server: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/app/SparkyFit
|
||||
tandoor CLEAN tandoor: declared volume /opt/recipes/mediafiles is EMPTY
|
||||
termix CLEAN
|
||||
uptime-kuma UNDETERMINED nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is U
|
||||
vaultwarden CLEAN
|
||||
vikunja CLEAN vikunja: declared volume /app/vikunja/files is EMPTY
|
||||
wanderer UNDETERMINED wanderer: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/root']) — nothing this ap
|
||||
wger CLEAN wger: declared volume /home/wger/media is EMPTY
|
||||
wishlist BROKEN wishlist: 1 file(s) in an ANONYMOUS volume at /usr/src/app/data — not in the compose `volumes:` block, so it is never backed up and a redeploy orphans
|
||||
zipline UNDETERMINED zipline: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/zipline']) — nothing this
|
||||
|
||||
BROKEN — the app's data does NOT land where the template preserves it:
|
||||
gramps-web
|
||||
gramps-web: DATA in the writable layer at /app/users (db_signature=True, e.g. ['users.sqlite'])
|
||||
gramps-web: declared volume /app/data is EMPTY
|
||||
gramps-web: declared volume /app/media is EMPTY
|
||||
gramps-web: declared volume /tmp is EMPTY
|
||||
papra
|
||||
papra: mount /app/data is NOT writable by the app's own uid=999 gid=999
|
||||
papra: DATA in the writable layer at /app/app-data/db (db_signature=True, e.g. ['db.sqlite'])
|
||||
papra: declared volume /app/data is EMPTY
|
||||
privatebin
|
||||
privatebin: 14 file(s) in an ANONYMOUS volume at /run — not in the compose `volumes:` block, so it is never backed up and a redeploy orphans it
|
||||
privatebin: declared volume /srv/data is EMPTY
|
||||
wishlist
|
||||
wishlist: 1 file(s) in an ANONYMOUS volume at /usr/src/app/data — not in the compose `volumes:` block, so it is never backed up and a redeploy orphans it
|
||||
wishlist: declared volume /data is EMPTY
|
||||
|
||||
UNDETERMINED — NOT a pass. The question was not answered for these:
|
||||
bentopdf: nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN
|
||||
claper: claper: EVERY declared mount is empty, yet the container created entries in 2 director(y/ies) outside all of them (e.g. ['/app/priv', '/app/priv/static']) — nothing this app wrote landed anywhere the
|
||||
docmost: docmost: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/app/apps/client/dist']) — nothing this app wrote landed anywhere the templat
|
||||
glance: glance: not running (status=restarting exit=1 restarts=None)
|
||||
immich: immich-machine-learning: EVERY declared mount is empty, yet the container created entries in 3 director(y/ies) outside all of them (e.g. ['/', '/root', '/root/.config']) — nothing this app wrote lande
|
||||
plant-it: no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling
|
||||
Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/plant-it, repository does not exist or may require 'd
|
||||
recipe-importer: recipe-importer: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/']) — nothing this app wrote landed anywhere the template preserves.
|
||||
sparkyfitness: sparkyfitness-server: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/app/SparkyFitnessServer']) — nothing this app wrote landed anyw
|
||||
uptime-kuma: nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN; uptime-kuma: declared volu
|
||||
wanderer: wanderer: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/root']) — nothing this app wrote landed anywhere the template preserves. Ne
|
||||
zipline: zipline: EVERY declared mount is empty, yet the container created entries in 1 director(y/ies) outside all of them (e.g. ['/zipline']) — nothing this app wrote landed anywhere the template preserves.
|
||||
|
||||
38 clean · 4 broken · 11 undetermined (of 53 in scope)
|
||||
volume-persistence gate REFUSED
|
||||
@@ -0,0 +1,66 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Render the sweep matrix from the per-app probe.json evidence. Run on DooPlex after pulling
|
||||
the evidence back from the scratch guest."""
|
||||
import json, sys
|
||||
from pathlib import Path
|
||||
|
||||
EV = Path(sys.argv[1] if len(sys.argv) > 1 else "audits/persistence-sweep-2026-08-02/evidence")
|
||||
|
||||
MOUNT_SHORT = {"named-declared": "vol", "named-external": "vol-ext", "anonymous": "ANON",
|
||||
"bind": "bind", "tmpfs": "tmpfs"}
|
||||
|
||||
|
||||
def summarise(p):
|
||||
v = p["verdict"]
|
||||
probe = p.get("probe") or {}
|
||||
ctrs = probe.get("containers") or []
|
||||
mounts, wrote, unwritable = [], [], []
|
||||
for c in ctrs:
|
||||
for m in c.get("mounts") or []:
|
||||
if m["class"] == "tmpfs":
|
||||
continue
|
||||
mounts.append(f"{m['target']}[{MOUNT_SHORT.get(m['class'], m['class'])}"
|
||||
f"{'' if m['files'] > 0 else ',EMPTY'}]")
|
||||
if m["files"] > 0:
|
||||
wrote.append(f"{m['target']}({m['files']})")
|
||||
if m.get("writable_by_app") == "NO":
|
||||
unwritable.append(m["target"])
|
||||
for d in c.get("diff_data_dirs") or []:
|
||||
wrote.append(f"**{d['dir']} (writable layer)**")
|
||||
return {
|
||||
"verdict": v,
|
||||
"mounted": ", ".join(mounts) or "—",
|
||||
"wrote": ", ".join(wrote) or "nothing",
|
||||
"unwritable": ", ".join(unwritable) or "—",
|
||||
"reason": "; ".join(p.get("reasons") or []),
|
||||
"containers": len(ctrs),
|
||||
}
|
||||
|
||||
|
||||
rows = {}
|
||||
for d in sorted(EV.iterdir()):
|
||||
f = d / "probe.json"
|
||||
if f.is_file():
|
||||
rows[d.name] = summarise(json.loads(f.read_text()))
|
||||
|
||||
order = {"BROKEN": 0, "UNDETERMINED": 1, "CLEAN": 2}
|
||||
print("| app | verdict | what the template mounts | where the app actually wrote | mount not writable by app uid |")
|
||||
print("|---|---|---|---|---|")
|
||||
for app in sorted(rows, key=lambda a: (order.get(rows[a]["verdict"], 3), a)):
|
||||
r = rows[app]
|
||||
print(f"| `{app}` | **{r['verdict']}** | {r['mounted']} | {r['wrote']} | {r['unwritable']} |")
|
||||
|
||||
print()
|
||||
for v in ("BROKEN", "UNDETERMINED", "CLEAN"):
|
||||
apps = [a for a in sorted(rows) if rows[a]["verdict"] == v]
|
||||
print(f"{v}: {len(apps)} — {', '.join(apps) if apps else '(none)'}")
|
||||
print(f"TOTAL: {len(rows)}")
|
||||
|
||||
print("\n--- UNDETERMINED reasons ---")
|
||||
for a in sorted(rows):
|
||||
if rows[a]["verdict"] == "UNDETERMINED":
|
||||
print(f"| `{a}` | {rows[a]['reason'][:400]} |")
|
||||
print("\n--- BROKEN reasons ---")
|
||||
for a in sorted(rows):
|
||||
if rows[a]["verdict"] == "BROKEN":
|
||||
print(f"| `{a}` | {rows[a]['reason'][:600]} |")
|
||||
@@ -0,0 +1,165 @@
|
||||
#!/usr/bin/env python3
|
||||
"""R-156 fix proof for papra — the BEFORE/AFTER pair, on real user data.
|
||||
|
||||
Not "the volume exists afterwards" — that is exactly the confusion R-156 is made of. The claim
|
||||
under test is: a document a real user uploaded is still there after `docker compose down` + `up -d`.
|
||||
|
||||
Leg A CURRENT template (`papra_data:/app/data`) — expected: the data is DESTROYED
|
||||
Leg B FIXED template (`papra_data:/app/app-data`) — expected: the data SURVIVES, byte-identical
|
||||
|
||||
The account and the document are created through papra's own HTTP API, never by writing into a
|
||||
volume by hand: R-156's own evidence shows a root-written canary making an empty volume read as
|
||||
populated. Data is read back with `docker cp`, which works identically whether it sits in a volume
|
||||
or in the writable layer, so both legs are measured the same way.
|
||||
|
||||
No password or session token is ever printed or written to the evidence file.
|
||||
"""
|
||||
import hashlib, importlib.util, json, os, re, secrets, shutil, sys, tempfile, time
|
||||
from pathlib import Path
|
||||
|
||||
_spec = importlib.util.spec_from_file_location("cvp", "/opt/sweep/scripts/check-volume-persistence.py")
|
||||
cvp = importlib.util.module_from_spec(_spec)
|
||||
_spec.loader.exec_module(cvp)
|
||||
|
||||
TPL = Path("/opt/sweep/templates/papra")
|
||||
EV = Path("/opt/sweep/evidence/_papra-fix-proof")
|
||||
DOC = b"Felhom R-156 fix proof - ennek a dokumentumnak tul kell elnie az ujratelepitest.\n"
|
||||
DOC_SHA = hashlib.sha256(DOC).hexdigest()
|
||||
|
||||
|
||||
def curl(url, *args):
|
||||
return cvp._sh(["curl", "-sS", "--max-time", "25", *args, url], timeout=45)
|
||||
|
||||
|
||||
def wait_healthy(base, tries=60):
|
||||
for _ in range(tries):
|
||||
cid = (cvp._sh(base + ["ps", "-q"], timeout=60).stdout or "").split()
|
||||
if cid:
|
||||
st = (cvp._inspect(cid[0]) or {}).get("State") or {}
|
||||
if (st.get("Health") or {}).get("Status") == "healthy":
|
||||
return cid[0]
|
||||
time.sleep(5)
|
||||
return (cvp._sh(base + ["ps", "-q"], timeout=60).stdout or "").split()[0]
|
||||
|
||||
|
||||
def seed(ip, jar, log):
|
||||
"""Create an account and upload a document through papra's own API."""
|
||||
email = f"proof-{secrets.token_hex(4)}@felhom.invalid"
|
||||
pw = "Proof-" + secrets.token_hex(10) # never recorded
|
||||
r = curl(f"http://{ip}:1221/api/auth/sign-up/email", "-X", "POST",
|
||||
"-H", "Content-Type: application/json", "-c", jar, "-i",
|
||||
"-d", json.dumps({"email": email, "password": pw, "name": "Proof"}))
|
||||
head = (r.stdout or "").splitlines()[0].strip() if r.stdout else "?"
|
||||
log.append(f"sign-up -> {head}")
|
||||
orgs = curl(f"http://{ip}:1221/api/organizations", "-b", jar).stdout or ""
|
||||
m = re.search(r'"id"\s*:\s*"([^"]+)"', orgs)
|
||||
if not m:
|
||||
log.append(f"organizations -> no id in {orgs[:160]}")
|
||||
return {"account": head, "document_uploaded": False}
|
||||
p = f"/tmp/proofdoc-{secrets.token_hex(3)}.txt"
|
||||
open(p, "wb").write(DOC)
|
||||
u = curl(f"http://{ip}:1221/api/organizations/{m.group(1)}/documents", "-X", "POST",
|
||||
"-b", jar, "-F", f"file=@{p}", "-i")
|
||||
os.remove(p)
|
||||
ok = bool(re.search(r"HTTP/1\.[01] 2\d\d", u.stdout or ""))
|
||||
log.append(f"upload -> {(u.stdout or '?').splitlines()[0].strip()}")
|
||||
return {"account": head, "document_uploaded": ok}
|
||||
|
||||
|
||||
def snapshot(cid, log, tag):
|
||||
"""Read the app's data OUT of the container, wherever it lives."""
|
||||
d = tempfile.mkdtemp(prefix="snap-")
|
||||
out = {}
|
||||
try:
|
||||
for path in ("/app/app-data/db/db.sqlite", "/app/data"):
|
||||
dst = os.path.join(d, path.strip("/").replace("/", "_"))
|
||||
if cvp._sh(["docker", "cp", f"{cid}:{path}", dst], timeout=300).returncode != 0:
|
||||
out[path] = {"present": False}
|
||||
continue
|
||||
if os.path.isfile(dst):
|
||||
b = open(dst, "rb").read()
|
||||
out[path] = {"present": True, "bytes": len(b),
|
||||
"sha256": hashlib.sha256(b).hexdigest()}
|
||||
else:
|
||||
out[path] = {"present": True, "dir": True,
|
||||
"files": sorted(os.path.relpath(os.path.join(r, f), dst)
|
||||
for r, _, fs in os.walk(dst) for f in fs)}
|
||||
docs = []
|
||||
if cvp._sh(["docker", "cp", f"{cid}:/app/app-data/documents",
|
||||
os.path.join(d, "documents")], timeout=300).returncode == 0:
|
||||
for r, _, fs in os.walk(os.path.join(d, "documents")):
|
||||
for f in fs:
|
||||
b = open(os.path.join(r, f), "rb").read()
|
||||
docs.append({"size": len(b), "sha256": hashlib.sha256(b).hexdigest(),
|
||||
"is_the_proof_document": hashlib.sha256(b).hexdigest() == DOC_SHA})
|
||||
out["documents"] = docs
|
||||
finally:
|
||||
shutil.rmtree(d, ignore_errors=True)
|
||||
log.append(f"[{tag}] " + json.dumps(out)[:260])
|
||||
return out
|
||||
|
||||
|
||||
def leg(tag, compose_body):
|
||||
log = []
|
||||
work = Path(tempfile.mkdtemp(prefix=f"papra-{tag}-"))
|
||||
(work / "docker-compose.yml").write_text(compose_body)
|
||||
env = cvp.build_env("papra", (TPL / ".felhom.yml").read_text(), compose_body)
|
||||
(work / ".env").write_text("".join(f"{k}={v}\n" for k, v in sorted(env.items())))
|
||||
project = "pp" + tag
|
||||
base = ["docker", "compose", "-p", project, "--project-directory", str(work),
|
||||
"-f", str(work / "docker-compose.yml")]
|
||||
cvp._sh(["docker", "network", "create", "traefik-public"], timeout=60)
|
||||
jar = f"/tmp/pj-{tag}"
|
||||
try:
|
||||
cvp._sh(base + ["up", "-d"], timeout=1200)
|
||||
cid = wait_healthy(base)
|
||||
ip = [n["IPAddress"] for n in
|
||||
((cvp._inspect(cid) or {}).get("NetworkSettings") or {}).get("Networks", {}).values()
|
||||
if n.get("IPAddress")][0]
|
||||
time.sleep(15)
|
||||
seeded = seed(ip, jar, log)
|
||||
time.sleep(20)
|
||||
before = snapshot(cid, log, "before")
|
||||
|
||||
cvp._sh(base + ["down"], timeout=900) # a REDEPLOY: no -v
|
||||
cvp._sh(base + ["up", "-d"], timeout=1200)
|
||||
cid2 = wait_healthy(base)
|
||||
time.sleep(25)
|
||||
after = snapshot(cid2, log, "after")
|
||||
|
||||
db = "/app/app-data/db/db.sqlite"
|
||||
db_same = bool(before[db].get("sha256")
|
||||
and before[db].get("sha256") == after[db].get("sha256"))
|
||||
doc_b = any(x["is_the_proof_document"] for x in before["documents"])
|
||||
doc_a = any(x["is_the_proof_document"] for x in after["documents"])
|
||||
return {"leg": tag, "seeded": seeded, "before": before, "after": after,
|
||||
"db_identical_after_redeploy": db_same,
|
||||
"uploaded_document_present_before": doc_b,
|
||||
"uploaded_document_present_after": doc_a,
|
||||
"verdict": ("USER DATA SURVIVES" if (db_same and doc_b and doc_a)
|
||||
else "USER DATA LOST" if doc_b and not doc_a
|
||||
else "INCONCLUSIVE - the document was never uploaded"
|
||||
if not doc_b else "DATA LOST"),
|
||||
"log": log}
|
||||
finally:
|
||||
cvp._sh(base + ["down", "-v", "--remove-orphans"], timeout=900)
|
||||
shutil.rmtree(work, ignore_errors=True)
|
||||
if os.path.exists(jar):
|
||||
os.remove(jar)
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
EV.mkdir(parents=True, exist_ok=True)
|
||||
cur = (TPL / "docker-compose.yml").read_text()
|
||||
fixed = cur.replace("- papra_data:/app/data", "- papra_data:/app/app-data")
|
||||
assert fixed != cur, "the mount line did not match — refusing to 'prove' an unchanged template"
|
||||
(EV / "template.diff").write_text(
|
||||
"--- current\n+++ fixed\n- - papra_data:/app/data\n+ - papra_data:/app/app-data\n")
|
||||
out = {}
|
||||
for tag, body in (("current", cur), ("fixed", fixed)):
|
||||
out[tag] = leg(tag, body)
|
||||
r = out[tag]
|
||||
print(f"{tag:<8} {r['verdict']:<34} db_identical={r['db_identical_after_redeploy']} "
|
||||
f"doc_before={r['uploaded_document_present_before']} "
|
||||
f"doc_after={r['uploaded_document_present_after']}", flush=True)
|
||||
(EV / "papra-fix-proof.json").write_text(json.dumps(out, indent=2, sort_keys=True))
|
||||
@@ -0,0 +1,42 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Re-derive every verdict from the captured probes using the committed `classify()`.
|
||||
|
||||
The structural "did anything land in a mount at all?" rule was added to `classify()` after the
|
||||
sweep had started. It reads only fields the probe already captures (mount occupancy and the
|
||||
directories created outside every mount), and the Docker-touching half of the gate — the part that
|
||||
produces `probe` — was not changed by it. So the matrix is recomputed rather than re-measured, and
|
||||
the verdict every app carries is the one the COMMITTED gate produces for its captured evidence.
|
||||
|
||||
Anything the rule could not have seen would require a fresh capture; nothing here does.
|
||||
|
||||
Usage: reclassify.py <evidence-dir>
|
||||
"""
|
||||
import importlib.util, json, sys
|
||||
from pathlib import Path
|
||||
|
||||
_spec = importlib.util.spec_from_file_location(
|
||||
"cvp", Path(__file__).resolve().parent / "check-volume-persistence.py")
|
||||
cvp = importlib.util.module_from_spec(_spec)
|
||||
_spec.loader.exec_module(cvp)
|
||||
|
||||
EV = Path(sys.argv[1])
|
||||
changed = []
|
||||
for d in sorted(EV.iterdir()):
|
||||
f = d / "probe.json"
|
||||
if not f.is_file():
|
||||
continue
|
||||
rec = json.loads(f.read_text())
|
||||
old = rec.get("verdict")
|
||||
status, why = cvp.classify(rec.get("probe") or {})
|
||||
if status != old:
|
||||
changed.append((d.name, old, status))
|
||||
rec["verdict"] = status
|
||||
rec["reasons"] = why
|
||||
rec["verdict_recomputed_by"] = "check-volume-persistence.py classify() (see reclassify.py)"
|
||||
f.write_text(json.dumps(rec, indent=2, sort_keys=True))
|
||||
|
||||
print(f"re-classified {sum(1 for d in EV.iterdir() if (d / 'probe.json').is_file())} apps")
|
||||
for a, o, n in changed:
|
||||
print(f" CHANGED {a}: {o} -> {n}")
|
||||
if not changed:
|
||||
print(" no verdict changed")
|
||||
@@ -0,0 +1,146 @@
|
||||
#!/usr/bin/env python3
|
||||
"""Survives-a-redeploy prover — the second half of the proof the gate cannot give.
|
||||
|
||||
`check-volume-persistence.py` answers *where did the data land*. This answers *is it still there
|
||||
after a redeploy*, which is the claim the customer actually cares about. Presence is not success:
|
||||
that a volume exists afterwards says nothing about whether the data is in it.
|
||||
|
||||
Method, per app:
|
||||
1. deploy from the template, exercise, settle
|
||||
2. FINGERPRINT every file the app created inside every declared mount — (relpath, size, sha256,
|
||||
inode), read host-side from the volume's own directory
|
||||
3. `docker compose down` — NO `-v`. That is a redeploy; `down --volumes` is the UNINSTALL path
|
||||
and destroys volumes deliberately (Campaign 7 §2)
|
||||
4. `docker compose up -d`, wait, settle
|
||||
5. RE-FINGERPRINT. A file SURVIVED only if sha256 AND inode both match — the same bytes in the
|
||||
same file object, not a fresh file the app recreated under the same name.
|
||||
|
||||
Nothing is ever seeded into a volume by hand. R-156's own evidence shows a root-written canary
|
||||
making an empty volume read as populated, which is the confusion this work exists to remove.
|
||||
|
||||
Usage: python3 survive2.py <app> [<app> …] (templates under /opt/sweep/templates)
|
||||
"""
|
||||
import hashlib, importlib.util, json, os, shutil, sys, tempfile, time
|
||||
from pathlib import Path
|
||||
|
||||
_spec = importlib.util.spec_from_file_location("cvp", "/opt/sweep/check-volume-persistence.py")
|
||||
cvp = importlib.util.module_from_spec(_spec)
|
||||
_spec.loader.exec_module(cvp)
|
||||
|
||||
TEMPLATES = Path("/opt/sweep/templates")
|
||||
EVIDENCE = Path("/opt/sweep/evidence")
|
||||
|
||||
|
||||
def fingerprint(mounts):
|
||||
fp = {}
|
||||
for m in mounts:
|
||||
src = m["source"]
|
||||
if not src or not os.path.isdir(src):
|
||||
continue
|
||||
for dp, _, fns in os.walk(src, onerror=lambda e: None):
|
||||
for fn in fns:
|
||||
p = os.path.join(dp, fn)
|
||||
if not os.path.isfile(p):
|
||||
continue
|
||||
try:
|
||||
st = os.lstat(p)
|
||||
h = hashlib.sha256(open(p, "rb").read()).hexdigest()
|
||||
except OSError:
|
||||
continue
|
||||
fp[f"{m['target']}::{os.path.relpath(p, src)}"] = {
|
||||
"size": st.st_size, "sha256": h, "inode": st.st_ino}
|
||||
return fp
|
||||
|
||||
|
||||
def bring_up(base, declared, project, ports, settle=45, wait=300):
|
||||
rc = cvp._sh(base + ["up", "-d"], timeout=1800).returncode
|
||||
cids = [c for c in cvp._sh(base + ["ps", "-aq"], timeout=120).stdout.split() if c]
|
||||
deadline = time.time() + wait
|
||||
while time.time() < deadline:
|
||||
pend = False
|
||||
for cid in cids:
|
||||
st = (cvp._inspect(cid) or {}).get("State") or {}
|
||||
if st.get("Status") in ("created", "restarting") or \
|
||||
(st.get("Health") or {}).get("Status") == "starting":
|
||||
pend = True
|
||||
if not pend:
|
||||
break
|
||||
time.sleep(10)
|
||||
running = [c for c in cids
|
||||
if ((cvp._inspect(c) or {}).get("State") or {}).get("Status") == "running"]
|
||||
if running and ports:
|
||||
cvp._exercise(running, ports)
|
||||
time.sleep(settle)
|
||||
mounts = []
|
||||
for cid in cids:
|
||||
info = cvp._inspect(cid)
|
||||
if not info:
|
||||
continue
|
||||
nm = (info.get("Name") or cid).lstrip("/")
|
||||
for m in (info.get("Mounts") or []):
|
||||
cls = cvp._classify_mount(m, project, declared)
|
||||
if cls == "tmpfs":
|
||||
continue
|
||||
mounts.append({"ctr": nm, "target": m.get("Destination"), "class": cls,
|
||||
"source": m.get("Source"), "name": m.get("Name")})
|
||||
return rc, cids, mounts
|
||||
|
||||
|
||||
def prove(app, tdir=None, label=None):
|
||||
tdir = Path(tdir) if tdir else TEMPLATES / app
|
||||
label = label or app
|
||||
edir = EVIDENCE / app
|
||||
edir.mkdir(parents=True, exist_ok=True)
|
||||
work = Path(tempfile.mkdtemp(prefix=f"surv-{label}-"))
|
||||
compose_text = (tdir / "docker-compose.yml").read_text()
|
||||
felhom_text = (tdir / ".felhom.yml").read_text() if (tdir / ".felhom.yml").is_file() else ""
|
||||
shutil.copy(tdir / "docker-compose.yml", work / "docker-compose.yml")
|
||||
env = cvp.build_env(app, felhom_text, compose_text)
|
||||
(work / ".env").write_text("".join(f"{k}={v}\n" for k, v in sorted(env.items())))
|
||||
project = "sv" + "".join(ch for ch in label.lower() if ch.isalnum())
|
||||
base = ["docker", "compose", "-p", project, "--project-directory", str(work),
|
||||
"-f", str(work / "docker-compose.yml")]
|
||||
os.makedirs(cvp.SCRATCH_HDD + "/userdata", exist_ok=True)
|
||||
os.makedirs(cvp.SCRATCH_IMPORT, exist_ok=True)
|
||||
cvp._sh(["docker", "network", "create", "traefik-public"], timeout=60)
|
||||
try:
|
||||
cfg = json.loads(cvp._sh(base + ["config", "--format", "json"], timeout=180).stdout)
|
||||
declared = set((cfg.get("volumes") or {}).keys())
|
||||
ports = sorted({int(m.group(1))
|
||||
for svc in (cfg.get("services") or {}).values()
|
||||
for lbl in ((svc.get("labels") or {}).values()
|
||||
if isinstance(svc.get("labels"), dict)
|
||||
else (svc.get("labels") or []))
|
||||
for m in [cvp.PORT_RE.search(str(lbl))] if m})
|
||||
|
||||
rc1, _, mounts1 = bring_up(base, declared, project, ports)
|
||||
before = fingerprint(mounts1)
|
||||
|
||||
cvp._sh(base + ["down"], timeout=900) # a REDEPLOY — no -v
|
||||
rc2, _, mounts2 = bring_up(base, declared, project, ports)
|
||||
after = fingerprint(mounts2)
|
||||
|
||||
survived = sorted(k for k in before if k in after
|
||||
and after[k]["sha256"] == before[k]["sha256"]
|
||||
and after[k]["inode"] == before[k]["inode"])
|
||||
changed = sorted(k for k in before if k in after and k not in survived)
|
||||
lost = sorted(k for k in before if k not in after)
|
||||
res = {"app": app, "label": label, "up1_rc": rc1, "up2_rc": rc2,
|
||||
"files_before": len(before), "files_after": len(after),
|
||||
"survived": survived, "changed_in_place": changed, "lost": lost,
|
||||
"mounts": mounts1,
|
||||
"verdict": ("SURVIVES" if (before and not lost and survived)
|
||||
else "NO-DATA-TO-LOSE" if not before else "DATA-LOST")}
|
||||
(edir / f"survive-{label}.json").write_text(json.dumps(res, indent=2, sort_keys=True))
|
||||
return res
|
||||
finally:
|
||||
cvp._sh(base + ["down", "-v", "--remove-orphans"], timeout=900)
|
||||
shutil.rmtree(work, ignore_errors=True)
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
for a in sys.argv[1:]:
|
||||
r = prove(a)
|
||||
print("%-16s %-16s before=%d after=%d survived=%d changed=%d lost=%d %s"
|
||||
% (a, r["verdict"], r["files_before"], r["files_after"], len(r["survived"]),
|
||||
len(r["changed_in_place"]), len(r["lost"]), r["lost"][:3]), flush=True)
|
||||
@@ -0,0 +1,69 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "bentopdf",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 6,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"etc",
|
||||
"var"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"nginx"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/var",
|
||||
"files": [
|
||||
"cache"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 14,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 101,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/alam00000/bentopdf:v2.8.6",
|
||||
"mounts": [],
|
||||
"name": "bentopdf",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 101
|
||||
}
|
||||
],
|
||||
"declared_volumes": [],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"nothing was written to any mount and nothing data-classified in any writable layer \u2014 the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN"
|
||||
],
|
||||
"verdict": "UNDETERMINED"
|
||||
}
|
||||
@@ -0,0 +1,176 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "claper",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"priv"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"static"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/priv",
|
||||
"files": [
|
||||
"static"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"uploads"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/priv/static",
|
||||
"files": [
|
||||
"uploads"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/claperco/claper:2.5",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-claper_claper_uploads",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-claper_claper_uploads/_data",
|
||||
"target": "/app/priv/static/uploads",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "claper",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1469,
|
||||
"name": "volgate-claper_claper_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-claper_claper_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "claper-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"claper_postgres_data",
|
||||
"claper_uploads"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SECRET_KEY_BASE",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"claper: this container's mounts are all empty while it created entries in ['/app/priv', '/app/priv/static'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"claper: declared volume /app/priv/static/uploads is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN"
|
||||
}
|
||||
@@ -0,0 +1,216 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "docmost",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 1,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"apps"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/apps",
|
||||
"files": [
|
||||
"client"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/apps/client",
|
||||
"files": [
|
||||
"dist"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"index-template.html"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/apps/client/dist",
|
||||
"files": [
|
||||
"index-template.html"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 6,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "docmost/docmost:0.95.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-docmost_docmost_storage",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-docmost_docmost_storage/_data",
|
||||
"target": "/app/data/storage",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "docmost",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 1000
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1540,
|
||||
"name": "volgate-docmost_docmost_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-docmost_docmost_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "docmost-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "redis:7-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3,
|
||||
"name": "volgate-docmost_docmost_redis_data",
|
||||
"sample": [
|
||||
"appendonlydir/appendonly.aof.1.base.rdb",
|
||||
"appendonlydir/appendonly.aof.1.incr.aof",
|
||||
"appendonlydir/appendonly.aof.manifest"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-docmost_docmost_redis_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "docmost-redis",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"docmost_postgres_data",
|
||||
"docmost_redis_data",
|
||||
"docmost_storage"
|
||||
],
|
||||
"env_keys": [
|
||||
"APP_SECRET",
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"docmost: this container's mounts are all empty while it created entries in ['/app/apps/client/dist'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"docmost: declared volume /app/data/storage is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN"
|
||||
}
|
||||
@@ -0,0 +1,73 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "glance",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 1,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"config"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"config"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 2,
|
||||
"diff_unresolved": [],
|
||||
"exit": 1,
|
||||
"gid": null,
|
||||
"health": "unhealthy",
|
||||
"image": "glanceapp/glance:v0.8.5",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-glance_glance_config",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-glance_glance_config/_data",
|
||||
"target": "/app/config",
|
||||
"writable_by_app": "unknown-uid"
|
||||
}
|
||||
],
|
||||
"name": "glance",
|
||||
"restarts": null,
|
||||
"status": "restarting",
|
||||
"uid": null
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"glance_config"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"glance: not running (status=restarting exit=1 restarts=None)"
|
||||
],
|
||||
"verdict": "UNDETERMINED"
|
||||
}
|
||||
@@ -0,0 +1,265 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "gramps-web",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 127,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"users.sqlite"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": true,
|
||||
"dir": "/app/users",
|
||||
"files": [
|
||||
"users.sqlite"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app",
|
||||
"root",
|
||||
"usr"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 4,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/cache",
|
||||
"files": [
|
||||
"request_cache"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"2029240f6d1128be89ddc32729463129"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/cache/request_cache",
|
||||
"files": [
|
||||
"2029240f6d1128be89ddc32729463129"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src",
|
||||
"files": [
|
||||
"alembic_users",
|
||||
"gramps_webapi"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src/alembic_users",
|
||||
"files": [
|
||||
"versions"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src/gramps_webapi",
|
||||
"files": [
|
||||
"api",
|
||||
"auth",
|
||||
"util"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/app/src/gramps_webapi/api",
|
||||
"files": [
|
||||
"resources",
|
||||
"search"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"2029240f6d1128be89ddc32729463129"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/thumbnail_cache",
|
||||
"files": [
|
||||
"2029240f6d1128be89ddc32729463129"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".gramps"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".gramps"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"grampsdb"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.gramps",
|
||||
"files": [
|
||||
"grampsdb"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"edaa44da-5ceb-4855-966e-8462f6b067f7"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.gramps/grampsdb",
|
||||
"files": [
|
||||
"edaa44da-5ceb-4855-966e-8462f6b067f7"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"name.txt",
|
||||
"database.txt"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.gramps/grampsdb/edaa44da-5ceb-4855-966e-8462f6b067f7",
|
||||
"files": [
|
||||
"name.txt",
|
||||
"database.txt"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root/gramps",
|
||||
"files": [
|
||||
"gramps60"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root/gramps/gramps60",
|
||||
"files": [
|
||||
"plugins"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/root/gramps/gramps60/plugins",
|
||||
"files": [
|
||||
"FilterRules"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"lib"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 153,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/gramps-project/grampsweb:v25.6.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_data/_data",
|
||||
"target": "/app/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_media",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_media/_data",
|
||||
"target": "/app/media",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-grampsweb_gramps_tmp",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-grampsweb_gramps_tmp/_data",
|
||||
"target": "/tmp",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "gramps-web",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"gramps_data",
|
||||
"gramps_media",
|
||||
"gramps_tmp"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"GRAMPSWEB_SECRET_KEY",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"gramps-web: DATA in the writable layer at /app/users (db_signature=True, e.g. ['users.sqlite'])",
|
||||
"NOTHING this app wrote landed in ANY folder the template preserves: all 2 mount(s) across 1 container(s) are empty, yet entries were created in ['/app', '/app/cache/request_cache', '/app/thumbnail_cache', '/root']. Needs adjudication.",
|
||||
"gramps-web: this container's mounts are all empty while it created entries in ['/app', '/app/cache/request_cache', '/app/thumbnail_cache'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"gramps-web: declared volume /app/data is EMPTY",
|
||||
"gramps-web: declared volume /app/media is EMPTY"
|
||||
],
|
||||
"verdict": "BROKEN"
|
||||
}
|
||||
@@ -0,0 +1,329 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "immich",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 6,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"cache"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"cache"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".config"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".config"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"matplotlib"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.config",
|
||||
"files": [
|
||||
"matplotlib"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 7,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/immich-app/immich-machine-learning:v3.0.3",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-immich_immich_ml_cache",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-immich_immich_ml_cache/_data",
|
||||
"target": "/cache",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "immich-machine-learning",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 3,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"etc",
|
||||
"run"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"postgresql"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"postgresql.conf"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/etc/postgresql",
|
||||
"files": [
|
||||
"postgresql.conf"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 7,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 999,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1832,
|
||||
"name": "volgate-immich_immich_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/13406",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/13414",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-immich_immich_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "immich-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 1000,
|
||||
"health": "healthy",
|
||||
"image": "redis:7-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 3,
|
||||
"name": "volgate-immich_immich_redis_data",
|
||||
"sample": [
|
||||
"appendonlydir/appendonly.aof.1.base.rdb",
|
||||
"appendonlydir/appendonly.aof.1.incr.aof",
|
||||
"appendonlydir/appendonly.aof.manifest"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-immich_immich_redis_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "immich-redis",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
},
|
||||
{
|
||||
"diff_added": 4,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"external",
|
||||
"data"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"external",
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"photos"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/external",
|
||||
"files": [
|
||||
"photos"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"src"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"upload"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src/app",
|
||||
"files": [
|
||||
"upload"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 7,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/immich-app/immich-server:v3.0.3",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 6,
|
||||
"name": null,
|
||||
"sample": [
|
||||
"library/.immich",
|
||||
"upload/.immich",
|
||||
"profile/.immich",
|
||||
"encoded-video/.immich",
|
||||
"thumbs/.immich",
|
||||
"backups/.immich"
|
||||
],
|
||||
"source": "/srv/felhom-gate/hdd/appdata/immich",
|
||||
"target": "/usr/src/app/upload",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "bind",
|
||||
"files": 0,
|
||||
"name": null,
|
||||
"sample": [],
|
||||
"source": "/srv/felhom-gate/hdd/userdata/media/photos",
|
||||
"target": "/external/photos",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "51538436a985b60deb1473d5837733528b3440627b2f7761b235f8bd92010975",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/51538436a985b60deb1473d5837733528b3440627b2f7761b235f8bd92010975/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "immich-server",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"immich_ml_cache",
|
||||
"immich_postgres_data",
|
||||
"immich_redis_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"immich-machine-learning: this container's mounts are all empty while it created entries in ['/', '/root', '/root/.config'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"immich-machine-learning: declared volume /cache is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN"
|
||||
}
|
||||
@@ -0,0 +1,99 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "papra",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 173,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"db.sqlite"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": true,
|
||||
"dir": "/app/app-data/db",
|
||||
"files": [
|
||||
"db.sqlite"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app/app-data",
|
||||
"files": [
|
||||
"db"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 177,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 999,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/papra-hq/papra:26.6.1-rootless",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-papra_papra_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-papra_papra_data/_data",
|
||||
"target": "/app/data",
|
||||
"writable_by_app": "NO"
|
||||
}
|
||||
],
|
||||
"name": "papra",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 999
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"papra_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"AUTH_SECRET",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"papra: mount /app/data is NOT writable by the app's own uid=999 gid=999",
|
||||
"papra: DATA in the writable layer at /app/app-data/db (db_signature=True, e.g. ['db.sqlite'])",
|
||||
"NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/app']. Needs adjudication.",
|
||||
"papra: this container's mounts are all empty while it created entries in ['/app'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"papra: declared volume /app/data is EMPTY"
|
||||
],
|
||||
"verdict": "BROKEN"
|
||||
}
|
||||
@@ -0,0 +1,10 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "plant-it",
|
||||
"error": "no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling \n Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/plant-it, repository does not exist or may require 'docker login'\nError response from daemon: pull access denied for msdeluise/plant-it, repository does not exist or may require 'docker login'\n)"
|
||||
},
|
||||
"reasons": [
|
||||
"no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling \n Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/plant-it, repository does not exist or may require 'docker login'\nError response from daemon: pull access denied for msdeluise/plant-it, repository does not exist or may require 'docker login'\n)"
|
||||
],
|
||||
"verdict": "UNDETERMINED"
|
||||
}
|
||||
@@ -0,0 +1,95 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "privatebin",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 82,
|
||||
"health": "healthy",
|
||||
"image": "privatebin/pdo:2.0.5",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "81f6e29600a6e6cbaa58dda4e144909abf098adc3c6116ca85166068c6a02e34",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/81f6e29600a6e6cbaa58dda4e144909abf098adc3c6116ca85166068c6a02e34/_data",
|
||||
"target": "/var/lib/nginx/tmp",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-privatebin_privatebin_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-privatebin_privatebin_data/_data",
|
||||
"target": "/srv/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 14,
|
||||
"name": "6c40818b0f3ef0f6687a2394c61219df6a1d806829e2c6d45c137c9e62427a14",
|
||||
"sample": [
|
||||
"nginx.pid",
|
||||
"php-fpm.sock",
|
||||
"services/.s6-svscan/control",
|
||||
"services/.s6-svscan/lock",
|
||||
"services/php-fpm85/run",
|
||||
"services/php-fpm85/supervise/control",
|
||||
"services/php-fpm85/supervise/death_tally",
|
||||
"services/php-fpm85/supervise/status",
|
||||
"services/php-fpm85/supervise/lock",
|
||||
"services/nginx/run",
|
||||
"services/nginx/supervise/control",
|
||||
"services/nginx/supervise/death_tally",
|
||||
"services/nginx/supervise/status",
|
||||
"services/nginx/supervise/lock"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/6c40818b0f3ef0f6687a2394c61219df6a1d806829e2c6d45c137c9e62427a14/_data",
|
||||
"target": "/run",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "660faab3050406b4dac39dedfc189331d712fb02b3990aed2e81033a08917cf3",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/660faab3050406b4dac39dedfc189331d712fb02b3990aed2e81033a08917cf3/_data",
|
||||
"target": "/tmp",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "privatebin",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 65534
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"privatebin_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"nothing was written to any mount and nothing data-classified in any writable layer \u2014 the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN",
|
||||
"privatebin: declared volume /srv/data is EMPTY"
|
||||
],
|
||||
"verdict": "UNDETERMINED"
|
||||
}
|
||||
@@ -0,0 +1,94 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "recipe-importer",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 13,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"local"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/local",
|
||||
"files": [
|
||||
"lib"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 22,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "gitea.dooplex.hu/admin/recipe-importer:v0.9.11",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-recipeimporter_recipe_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-recipeimporter_recipe_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "recipe-importer",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"recipe_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SECRET_KEY",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/']. Needs adjudication.",
|
||||
"recipe-importer: this container's mounts are all empty while it created entries in ['/'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"recipe-importer: declared volume /data is EMPTY"
|
||||
],
|
||||
"verdict": "UNDETERMINED"
|
||||
}
|
||||
@@ -0,0 +1,230 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "sparkyfitness",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 11,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 3,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"etc",
|
||||
"var",
|
||||
"run"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/etc",
|
||||
"files": [
|
||||
"nginx"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/var",
|
||||
"files": [
|
||||
"cache"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 19,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "codewithcj/sparkyfitness:v0.17.3",
|
||||
"mounts": [],
|
||||
"name": "sparkyfitness",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:15-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1814,
|
||||
"name": "volgate-sparkyfitness_sparkyfitness_db_data",
|
||||
"sample": [
|
||||
"pgdata/postmaster.opts",
|
||||
"pgdata/postgresql.conf",
|
||||
"pgdata/postgresql.auto.conf",
|
||||
"pgdata/pg_ident.conf",
|
||||
"pgdata/pg_hba.conf",
|
||||
"pgdata/postmaster.pid",
|
||||
"pgdata/PG_VERSION",
|
||||
"pgdata/base/1/826",
|
||||
"pgdata/base/1/2996",
|
||||
"pgdata/base/1/3764",
|
||||
"pgdata/base/1/2610_fsm",
|
||||
"pgdata/base/1/3603_fsm",
|
||||
"pgdata/base/1/1249_vm",
|
||||
"pgdata/base/1/3600_fsm",
|
||||
"pgdata/base/1/13506_vm",
|
||||
"pgdata/base/1/3602",
|
||||
"pgdata/base/1/6228",
|
||||
"pgdata/base/1/4174",
|
||||
"pgdata/base/1/4157",
|
||||
"pgdata/base/1/4146",
|
||||
"pgdata/base/1/2611",
|
||||
"pgdata/base/1/2657",
|
||||
"pgdata/base/1/3079_vm",
|
||||
"pgdata/base/1/1247_vm",
|
||||
"pgdata/base/1/13501_fsm",
|
||||
"pgdata/base/1/1259",
|
||||
"pgdata/base/1/3601_fsm",
|
||||
"pgdata/base/1/1417",
|
||||
"pgdata/base/1/4155",
|
||||
"pgdata/base/1/2668",
|
||||
"pgdata/base/1/13491_fsm",
|
||||
"pgdata/base/1/2831",
|
||||
"pgdata/base/1/2841",
|
||||
"pgdata/base/1/3607",
|
||||
"pgdata/base/1/2836",
|
||||
"pgdata/base/1/1255_fsm",
|
||||
"pgdata/base/1/2615_vm",
|
||||
"pgdata/base/1/3575",
|
||||
"pgdata/base/1/2605_vm",
|
||||
"pgdata/base/1/2670"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-sparkyfitness_sparkyfitness_db_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "sparkyfitness-db",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
},
|
||||
{
|
||||
"diff_added": 392,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/app",
|
||||
"files": [
|
||||
"SparkyFitnessServer"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"uploads",
|
||||
"backup",
|
||||
"temp_uploads"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/app/SparkyFitnessServer",
|
||||
"files": [
|
||||
"uploads",
|
||||
"backup",
|
||||
"temp_uploads"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 395,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "codewithcj/sparkyfitness_server:v0.17.3",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-sparkyfitness_sparkyfitness_uploads",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-sparkyfitness_sparkyfitness_uploads/_data",
|
||||
"target": "/app/SparkyFitnessServer/uploads",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-sparkyfitness_sparkyfitness_backup",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-sparkyfitness_sparkyfitness_backup/_data",
|
||||
"target": "/app/SparkyFitnessServer/backup",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "sparkyfitness-server",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"sparkyfitness_backup",
|
||||
"sparkyfitness_db_data",
|
||||
"sparkyfitness_uploads"
|
||||
],
|
||||
"env_keys": [
|
||||
"API_ENCRYPTION_KEY",
|
||||
"APP_DB_PASSWORD",
|
||||
"BETTER_AUTH_SECRET",
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"sparkyfitness-server: this container's mounts are all empty while it created entries in ['/app/SparkyFitnessServer'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"sparkyfitness-server: declared volume /app/SparkyFitnessServer/uploads is EMPTY",
|
||||
"sparkyfitness-server: declared volume /app/SparkyFitnessServer/backup is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN"
|
||||
}
|
||||
@@ -0,0 +1,53 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "uptime-kuma",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "louislam/uptime-kuma:2.4.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-uptimekuma_uptime_kuma_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-uptimekuma_uptime_kuma_data/_data",
|
||||
"target": "/app/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "uptime-kuma",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"uptime_kuma_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"nothing was written to any mount and nothing data-classified in any writable layer \u2014 the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN",
|
||||
"uptime-kuma: declared volume /app/data is EMPTY"
|
||||
],
|
||||
"verdict": "UNDETERMINED"
|
||||
}
|
||||
@@ -0,0 +1,193 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "wanderer",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 6,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"root"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".npm"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".npm"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 8,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "unhealthy",
|
||||
"image": "flomp/wanderer-web:v0.20.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-wanderer_wanderer_uploads",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-wanderer_wanderer_uploads/_data",
|
||||
"target": "/app/uploads",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wanderer",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 3,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data",
|
||||
"pb_data"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data",
|
||||
"pb_data"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"plugins"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/data",
|
||||
"files": [
|
||||
"plugins"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_total": 3,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "flomp/wanderer-db:v0.20.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 6,
|
||||
"name": "volgate-wanderer_wanderer_data",
|
||||
"sample": [
|
||||
"auxiliary.db-wal",
|
||||
"data.db",
|
||||
"data.db-wal",
|
||||
"auxiliary.db",
|
||||
"auxiliary.db-shm",
|
||||
"data.db-shm"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-wanderer_wanderer_data/_data",
|
||||
"target": "/pb_data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-wanderer_wanderer_plugins",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-wanderer_wanderer_plugins/_data",
|
||||
"target": "/data/plugins",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wanderer-db",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 0,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 0,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "getmeili/meilisearch:v1.36.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 11,
|
||||
"name": "volgate-wanderer_wanderer_meili_data",
|
||||
"sample": [
|
||||
"data.ms/VERSION",
|
||||
"data.ms/indexes/7ee7d19b-c036-412d-be25-65ae8f9e4801/data.mdb",
|
||||
"data.ms/indexes/7ee7d19b-c036-412d-be25-65ae8f9e4801/lock.mdb",
|
||||
"data.ms/indexes/82fdecc6-7425-4e45-989b-bdb644ecd606/data.mdb",
|
||||
"data.ms/indexes/82fdecc6-7425-4e45-989b-bdb644ecd606/lock.mdb",
|
||||
"data.ms/indexes/c48904e5-2b2a-41c0-a34c-c9575e31be45/data.mdb",
|
||||
"data.ms/indexes/c48904e5-2b2a-41c0-a34c-c9575e31be45/lock.mdb",
|
||||
"data.ms/auth/data.mdb",
|
||||
"data.ms/auth/lock.mdb",
|
||||
"data.ms/tasks/data.mdb",
|
||||
"data.ms/tasks/lock.mdb"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-wanderer_wanderer_meili_data/_data",
|
||||
"target": "/meili_data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wanderer-search",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"wanderer_data",
|
||||
"wanderer_meili_data",
|
||||
"wanderer_plugins",
|
||||
"wanderer_uploads"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"MEILI_MASTER_KEY",
|
||||
"POCKETBASE_ENCRYPTION_KEY",
|
||||
"SUBDOMAIN",
|
||||
"SUBDOMAIN_DB",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"wanderer: unhealthy",
|
||||
"wanderer: this container's mounts are all empty while it created entries in ['/root'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"wanderer: declared volume /app/uploads is EMPTY",
|
||||
"wanderer-db: declared volume /data/plugins is EMPTY",
|
||||
"wanderer-db: writable-layer writes at /data (path suggests state, no database signature \u2014 judgement needed): ['plugins']"
|
||||
],
|
||||
"verdict": "UNDETERMINED"
|
||||
}
|
||||
@@ -0,0 +1,162 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "wishlist",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 35,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [
|
||||
"data"
|
||||
],
|
||||
"changed_count": 2,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"data"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
".config",
|
||||
".local"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root",
|
||||
"files": [
|
||||
".config",
|
||||
".local"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"caddy"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.config",
|
||||
"files": [
|
||||
"caddy"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"autosave.json"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.config/caddy",
|
||||
"files": [
|
||||
"autosave.json"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"share"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/root/.local",
|
||||
"files": [
|
||||
"share"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr",
|
||||
"files": [
|
||||
"src"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src",
|
||||
"files": [
|
||||
"app"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"data",
|
||||
"uploads"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/usr/src/app",
|
||||
"files": [
|
||||
"data",
|
||||
"uploads"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 45,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/cmintey/wishlist:v0.66.0",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-wishlist_wishlist_data",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-wishlist_wishlist_data/_data",
|
||||
"target": "/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 1,
|
||||
"name": "c5b4a3bf4591884b54c90465299d2c299b60a9692efc85699222663c7cc8efcb",
|
||||
"sample": [
|
||||
"prod.db"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/c5b4a3bf4591884b54c90465299d2c299b60a9692efc85699222663c7cc8efcb/_data",
|
||||
"target": "/usr/src/app/data",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "anonymous",
|
||||
"files": 0,
|
||||
"name": "0a719c708e8a1351e6e7661358e5f7376e1f81ad0bc6d883660aa79d29999fd4",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/0a719c708e8a1351e6e7661358e5f7376e1f81ad0bc6d883660aa79d29999fd4/_data",
|
||||
"target": "/usr/src/app/uploads",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "wishlist",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"wishlist_data"
|
||||
],
|
||||
"env_keys": [
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"wishlist: 1 file(s) in an ANONYMOUS volume at /usr/src/app/data \u2014 not in the compose `volumes:` block, so it is never backed up and a redeploy orphans it",
|
||||
"wishlist: declared volume /data is EMPTY"
|
||||
],
|
||||
"verdict": "BROKEN"
|
||||
}
|
||||
@@ -0,0 +1,169 @@
|
||||
{
|
||||
"probe": {
|
||||
"app": "zipline",
|
||||
"containers": [
|
||||
{
|
||||
"diff_added": 3,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"zipline"
|
||||
]
|
||||
},
|
||||
{
|
||||
"added": [
|
||||
"uploads",
|
||||
"public"
|
||||
],
|
||||
"changed_count": 0,
|
||||
"db_signature": false,
|
||||
"dir": "/zipline",
|
||||
"files": [
|
||||
"uploads",
|
||||
"public"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 5,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 0,
|
||||
"health": "healthy",
|
||||
"image": "ghcr.io/diced/zipline:4.6.1",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-zipline_zipline_public",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-zipline_zipline_public/_data",
|
||||
"target": "/zipline/public",
|
||||
"writable_by_app": "yes"
|
||||
},
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 0,
|
||||
"name": "volgate-zipline_zipline_uploads",
|
||||
"sample": [],
|
||||
"source": "/var/lib/docker/volumes/volgate-zipline_zipline_uploads/_data",
|
||||
"target": "/zipline/uploads",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "zipline",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 0
|
||||
},
|
||||
{
|
||||
"diff_added": 2,
|
||||
"diff_benign_db_touches": [],
|
||||
"diff_data_dirs": [],
|
||||
"diff_other_dirs": [
|
||||
{
|
||||
"added": [],
|
||||
"changed_count": 1,
|
||||
"db_signature": false,
|
||||
"dir": "/",
|
||||
"files": [
|
||||
"run"
|
||||
]
|
||||
}
|
||||
],
|
||||
"diff_token_dirs": [],
|
||||
"diff_total": 4,
|
||||
"diff_unresolved": [],
|
||||
"exit": 0,
|
||||
"gid": 70,
|
||||
"health": "healthy",
|
||||
"image": "postgres:16-alpine",
|
||||
"mounts": [
|
||||
{
|
||||
"class": "named-declared",
|
||||
"files": 1356,
|
||||
"name": "volgate-zipline_zipline_postgres_data",
|
||||
"sample": [
|
||||
"postmaster.opts",
|
||||
"postgresql.conf",
|
||||
"postgresql.auto.conf",
|
||||
"pg_ident.conf",
|
||||
"pg_hba.conf",
|
||||
"postmaster.pid",
|
||||
"PG_VERSION",
|
||||
"base/1/826",
|
||||
"base/1/2996",
|
||||
"base/1/3764",
|
||||
"base/1/2610_fsm",
|
||||
"base/1/3603_fsm",
|
||||
"base/1/1249_vm",
|
||||
"base/1/3600_fsm",
|
||||
"base/1/13512",
|
||||
"base/1/3602",
|
||||
"base/1/6228",
|
||||
"base/1/4174",
|
||||
"base/1/4157",
|
||||
"base/1/4146",
|
||||
"base/1/2611",
|
||||
"base/1/2657",
|
||||
"base/1/3079_vm",
|
||||
"base/1/1247_vm",
|
||||
"base/1/1259",
|
||||
"base/1/3601_fsm",
|
||||
"base/1/1417",
|
||||
"base/1/4155",
|
||||
"base/1/2668",
|
||||
"base/1/2831",
|
||||
"base/1/2841",
|
||||
"base/1/3607",
|
||||
"base/1/2836",
|
||||
"base/1/1255_fsm",
|
||||
"base/1/2615_vm",
|
||||
"base/1/3575",
|
||||
"base/1/2605_vm",
|
||||
"base/1/2670",
|
||||
"base/1/6106",
|
||||
"base/1/4163"
|
||||
],
|
||||
"source": "/var/lib/docker/volumes/volgate-zipline_zipline_postgres_data/_data",
|
||||
"target": "/var/lib/postgresql/data",
|
||||
"writable_by_app": "yes"
|
||||
}
|
||||
],
|
||||
"name": "zipline-postgres",
|
||||
"restarts": null,
|
||||
"status": "running",
|
||||
"uid": 70
|
||||
}
|
||||
],
|
||||
"declared_volumes": [
|
||||
"zipline_postgres_data",
|
||||
"zipline_public",
|
||||
"zipline_uploads"
|
||||
],
|
||||
"env_keys": [
|
||||
"CORE_SECRET",
|
||||
"DB_PASSWORD",
|
||||
"DOMAIN",
|
||||
"HDD_PATH",
|
||||
"IMPORT_PATH",
|
||||
"SUBDOMAIN",
|
||||
"TZ",
|
||||
"USERDATA_PATH"
|
||||
],
|
||||
"exercise": [],
|
||||
"ports": []
|
||||
},
|
||||
"reasons": [
|
||||
"zipline: this container's mounts are all empty while it created entries in ['/zipline'] \u2014 benign when a sibling container holds the state, worth a look when none does",
|
||||
"zipline: declared volume /zipline/public is EMPTY",
|
||||
"zipline: declared volume /zipline/uploads is EMPTY"
|
||||
],
|
||||
"verdict": "CLEAN"
|
||||
}
|
||||
@@ -0,0 +1,48 @@
|
||||
self-testing the prober (both directions)…
|
||||
prober flags the R-156 signature and clears a correct template — trustworthy
|
||||
bentopdf UNDETERMINED nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is U
|
||||
claper CLEAN claper: this container's mounts are all empty while it created entries in ['/app/priv', '/app/priv/static'] — benign when a sibling container holds th
|
||||
docmost CLEAN docmost: this container's mounts are all empty while it created entries in ['/app/apps/client/dist'] — benign when a sibling container holds the state
|
||||
glance UNDETERMINED glance: not running (status=restarting exit=1 restarts=None)
|
||||
gramps-web BROKEN gramps-web: DATA in the writable layer at /app/users (db_signature=True, e.g. ['users.sqlite']); NOTHING this app wrote landed in ANY folder the templ
|
||||
immich CLEAN immich-machine-learning: this container's mounts are all empty while it created entries in ['/', '/root', '/root/.config'] — benign when a sibling con
|
||||
papra BROKEN papra: mount /app/data is NOT writable by the app's own uid=999 gid=999; papra: DATA in the writable layer at /app/app-data/db (db_signature=True, e.g
|
||||
plant-it UNDETERMINED no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling
|
||||
Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/pla
|
||||
privatebin UNDETERMINED nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is U
|
||||
recipe-importer UNDETERMINED NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/'].
|
||||
sparkyfitness CLEAN sparkyfitness-server: this container's mounts are all empty while it created entries in ['/app/SparkyFitnessServer'] — benign when a sibling container
|
||||
uptime-kuma UNDETERMINED nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is U
|
||||
wanderer UNDETERMINED wanderer: unhealthy; wanderer: this container's mounts are all empty while it created entries in ['/root'] — benign when a sibling container holds the
|
||||
wishlist BROKEN wishlist: 1 file(s) in an ANONYMOUS volume at /usr/src/app/data — not in the compose `volumes:` block, so it is never backed up and a redeploy orphans
|
||||
zipline CLEAN zipline: this container's mounts are all empty while it created entries in ['/zipline'] — benign when a sibling container holds the state, worth a loo
|
||||
|
||||
BROKEN — the app's data does NOT land where the template preserves it:
|
||||
gramps-web
|
||||
gramps-web: DATA in the writable layer at /app/users (db_signature=True, e.g. ['users.sqlite'])
|
||||
NOTHING this app wrote landed in ANY folder the template preserves: all 2 mount(s) across 1 container(s) are empty, yet entries were created in ['/app', '/app/cache/request_cache', '/app/thumbnail_cache', '/root']. Needs adjudication.
|
||||
gramps-web: this container's mounts are all empty while it created entries in ['/app', '/app/cache/request_cache', '/app/thumbnail_cache'] — benign when a sibling container holds the state, worth a look when none does
|
||||
gramps-web: declared volume /app/data is EMPTY
|
||||
gramps-web: declared volume /app/media is EMPTY
|
||||
papra
|
||||
papra: mount /app/data is NOT writable by the app's own uid=999 gid=999
|
||||
papra: DATA in the writable layer at /app/app-data/db (db_signature=True, e.g. ['db.sqlite'])
|
||||
NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/app']. Needs adjudication.
|
||||
papra: this container's mounts are all empty while it created entries in ['/app'] — benign when a sibling container holds the state, worth a look when none does
|
||||
papra: declared volume /app/data is EMPTY
|
||||
wishlist
|
||||
wishlist: 1 file(s) in an ANONYMOUS volume at /usr/src/app/data — not in the compose `volumes:` block, so it is never backed up and a redeploy orphans it
|
||||
wishlist: declared volume /data is EMPTY
|
||||
|
||||
UNDETERMINED — NOT a pass. The question was not answered for these:
|
||||
bentopdf: nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN
|
||||
glance: glance: not running (status=restarting exit=1 restarts=None)
|
||||
plant-it: no containers created (compose up rc=1: msdeluise/plant-it:0.10.0 Pulling
|
||||
Image msdeluise/plant-it:0.10.0 Error pull access denied for msdeluise/plant-it, repository does not exist or may require 'd
|
||||
privatebin: nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN; privatebin: declared volum
|
||||
recipe-importer: NOTHING this app wrote landed in ANY folder the template preserves: all 1 mount(s) across 1 container(s) are empty, yet entries were created in ['/']. Needs adjudication.; recipe-importer: this contai
|
||||
uptime-kuma: nothing was written to any mount and nothing data-classified in any writable layer — the app produced no data to locate. Health is not data: this is UNDETERMINED, not CLEAN; uptime-kuma: declared volu
|
||||
wanderer: wanderer: unhealthy; wanderer: this container's mounts are all empty while it created entries in ['/root'] — benign when a sibling container holds the state, worth a look when none does; wanderer: dec
|
||||
|
||||
5 clean · 3 broken · 7 undetermined (of 15 in scope)
|
||||
volume-persistence gate REFUSED
|
||||
@@ -0,0 +1,125 @@
|
||||
#!/usr/bin/env python3
|
||||
"""wishlist survives-a-redeploy proof, on REAL user data.
|
||||
|
||||
`survive2.py` reported DATA-LOST because `prod.db`'s bytes changed across the redeploy — but that
|
||||
rule cannot tell "the app modified its own database on boot" (fine; vaultwarden's WAL does the
|
||||
same) from "the app deleted and recreated it" (data gone). Two things settle it:
|
||||
|
||||
1. the file's INODE — same object, or a new one?
|
||||
2. a row the USER created — still queryable after the redeploy, or not?
|
||||
|
||||
(2) is the claim that actually matters, so it is the verdict. It is created through wishlist's own
|
||||
HTTP API, never by writing into the volume by hand.
|
||||
"""
|
||||
import hashlib, importlib.util, json, os, re, secrets, shutil, tempfile, time
|
||||
from pathlib import Path
|
||||
|
||||
_spec = importlib.util.spec_from_file_location(
|
||||
"cvp", "/opt/sweep/scripts/check-volume-persistence.py")
|
||||
cvp = importlib.util.module_from_spec(_spec); _spec.loader.exec_module(cvp)
|
||||
|
||||
TPL = Path("/opt/sweep/templates/wishlist")
|
||||
EV = Path("/opt/sweep/evidence/wishlist")
|
||||
|
||||
|
||||
def curl(url, *a):
|
||||
return cvp._sh(["curl", "-sS", "--max-time", "25", *a, url], timeout=45)
|
||||
|
||||
|
||||
def stat_db(mounts):
|
||||
"""(inode, sha256, size) of prod.db, read host-side from the volume itself."""
|
||||
for m in mounts:
|
||||
if m["target"] == "/usr/src/app/data" and m["source"]:
|
||||
f = os.path.join(m["source"], "prod.db")
|
||||
if os.path.isfile(f):
|
||||
st = os.lstat(f)
|
||||
return {"inode": st.st_ino, "size": st.st_size,
|
||||
"sha256": hashlib.sha256(open(f, "rb").read()).hexdigest()}
|
||||
return None
|
||||
|
||||
|
||||
def sqlite_rows(mounts, table):
|
||||
"""Count rows in `table` by reading the volume's DB with a throwaway sqlite container —
|
||||
a READ of what the app wrote, never a write into the volume."""
|
||||
for m in mounts:
|
||||
if m["target"] == "/usr/src/app/data" and m["source"]:
|
||||
r = cvp._sh(["docker", "run", "--rm", "-v", f"{m['name']}:/v:ro",
|
||||
"keinos/sqlite3:latest", "sqlite3", "/v/prod.db",
|
||||
f"SELECT COUNT(*) FROM {table};"], timeout=180)
|
||||
return (r.stdout or r.stderr or "").strip()
|
||||
return "no-db"
|
||||
|
||||
|
||||
def up(base, wait=300, settle=40):
|
||||
cvp._sh(base + ["up", "-d"], timeout=1200)
|
||||
cids = [c for c in cvp._sh(base + ["ps", "-aq"], timeout=120).stdout.split() if c]
|
||||
dl = time.time() + wait
|
||||
while time.time() < dl:
|
||||
if not any(((cvp._inspect(c) or {}).get("State") or {}).get("Status") in ("created", "restarting")
|
||||
or ((((cvp._inspect(c) or {}).get("State") or {}).get("Health") or {}).get("Status")
|
||||
== "starting") for c in cids):
|
||||
break
|
||||
time.sleep(10)
|
||||
ip = None
|
||||
for c in cids:
|
||||
for n in ((cvp._inspect(c) or {}).get("NetworkSettings") or {}).get("Networks", {}).values():
|
||||
if n.get("IPAddress"):
|
||||
ip = n["IPAddress"]
|
||||
mounts = []
|
||||
for c in cids:
|
||||
info = cvp._inspect(c) or {}
|
||||
for m in (info.get("Mounts") or []):
|
||||
mounts.append({"target": m.get("Destination"), "source": m.get("Source"),
|
||||
"name": m.get("Name")})
|
||||
time.sleep(settle)
|
||||
return cids, ip, mounts
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
EV.mkdir(parents=True, exist_ok=True)
|
||||
work = Path(tempfile.mkdtemp(prefix="wl-"))
|
||||
shutil.copy(TPL / "docker-compose.yml", work / "docker-compose.yml")
|
||||
env = cvp.build_env("wishlist", (TPL / ".felhom.yml").read_text(),
|
||||
(TPL / "docker-compose.yml").read_text())
|
||||
(work / ".env").write_text("".join(f"{k}={v}\n" for k, v in sorted(env.items())))
|
||||
base = ["docker", "compose", "-p", "wlproof", "--project-directory", str(work),
|
||||
"-f", str(work / "docker-compose.yml")]
|
||||
cvp._sh(["docker", "network", "create", "traefik-public"], timeout=60)
|
||||
log = []
|
||||
try:
|
||||
cids, ip, mounts = up(base)
|
||||
# --- seed REAL user data through wishlist's own API
|
||||
email = f"proof-{secrets.token_hex(4)}@felhom.invalid"
|
||||
pw = "Proof-" + secrets.token_hex(10) # never recorded
|
||||
r = curl(f"http://{ip}:3000/api/auth/signup", "-X", "POST", "-i",
|
||||
"-H", "Content-Type: application/json",
|
||||
"-d", json.dumps({"email": email, "password": pw, "name": "Proof",
|
||||
"username": "proofuser"}))
|
||||
log.append("signup -> " + ((r.stdout or "?").splitlines() or ["?"])[0].strip())
|
||||
time.sleep(20)
|
||||
|
||||
before_db = stat_db(mounts)
|
||||
before_users = sqlite_rows(mounts, "user")
|
||||
log.append(f"before: db={before_db} users={before_users}")
|
||||
|
||||
cvp._sh(base + ["down"], timeout=900) # a REDEPLOY — no -v
|
||||
cids, ip, mounts = up(base)
|
||||
after_db = stat_db(mounts)
|
||||
after_users = sqlite_rows(mounts, "user")
|
||||
log.append(f"after : db={after_db} users={after_users}")
|
||||
|
||||
same_inode = bool(before_db and after_db and before_db["inode"] == after_db["inode"])
|
||||
rows_kept = (before_users.isdigit() and after_users.isdigit()
|
||||
and int(after_users) >= int(before_users) and int(before_users) > 0)
|
||||
res = {"app": "wishlist", "before": before_db, "after": after_db,
|
||||
"user_rows_before": before_users, "user_rows_after": after_users,
|
||||
"same_inode": same_inode, "user_rows_preserved": rows_kept,
|
||||
"verdict": ("SURVIVES" if same_inode and rows_kept
|
||||
else "SURVIVES (inode only, no seeded rows)" if same_inode
|
||||
else "DATA LOST"),
|
||||
"log": log}
|
||||
(EV / "survive-wishlist-content.json").write_text(json.dumps(res, indent=2, sort_keys=True))
|
||||
print(json.dumps({k: v for k, v in res.items() if k != "log"}, indent=2))
|
||||
finally:
|
||||
cvp._sh(base + ["down", "-v", "--remove-orphans"], timeout=900)
|
||||
shutil.rmtree(work, ignore_errors=True)
|
||||
Reference in New Issue
Block a user