felhom-agent

agent v0.146.1 REPORT

#136:Commit e06ed97fa8 pushed by admin

main

2026-10-05 13:01:18 +02:00

22s

R-880: build-step-bundle.py — the transition bundle for a release whose bundle adds paths (an installed felhom-os-apply refuses unknown paths, R16)

#135:Commit e4b5cf9693 pushed by admin

main

2026-10-05 12:24:21 +02:00

21s

agent v0.146.1 CHANGELOG (released)

#134:Commit faa3cad92e pushed by admin

main

2026-10-05 12:14:45 +02:00

20s

R-861 review fixes: the signed update hands the A/B wrapper a root-owned copy of the hashed bytes; mount units accept no Wants/Requires/Before and no continuation lines; the escrow read walks the path without following any symlink

#133:Commit fdd87178d2 pushed by admin

v0.146.1

2026-10-05 12:14:25 +02:00

20s

R-861 review fixes: the signed update hands the A/B wrapper a root-owned copy of the hashed bytes; mount units accept no Wants/Requires/Before and no continuation lines; the escrow read walks the path without following any symlink

#132:Commit fdd87178d2 pushed by admin

main

2026-10-05 12:14:05 +02:00

20s

agent v0.146.0 CHANGELOG (released)

#131:Commit 0342c7bb57 pushed by admin

main

2026-10-05 12:01:48 +02:00

19s

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

#130:Commit 6ab1e7c56c pushed by admin

v0.146.0

2026-10-05 12:01:29 +02:00

20s

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

#129:Commit 6ab1e7c56c pushed by admin

main

2026-10-05 12:01:09 +02:00

19s

REPORT: the 2026-10-05 catch-up session

#128:Commit 61345790ed pushed by admin

main

2026-10-05 10:30:10 +02:00

19s

v0.145.0: CHANGELOG (released 894da35c…, bundle 78c00adc…)

#127:Commit 7c4b8e599f pushed by admin

main

2026-10-05 09:24:29 +02:00

18s

v0.145.0 code: the OS wrapper repairs dpkg's update journal by itself after a power cut (R-876); restore-test first check 30 min after start (R-874); neutral "sent late" text (R-875)

#126:Commit 56ef1d6655 pushed by admin

v0.145.0

2026-10-05 09:24:11 +02:00

20s

v0.145.0 code: the OS wrapper repairs dpkg's update journal by itself after a power cut (R-876); restore-test first check 30 min after start (R-874); neutral "sent late" text (R-875)

#125:Commit 56ef1d6655 pushed by admin

main

2026-10-05 09:23:51 +02:00

20s

REPORT: the 2026-10-05 night-fixes session

#124:Commit 78c890e4bb pushed by admin

main

2026-10-05 08:26:42 +02:00

21s

v0.144.1: CHANGELOG (released 6ccd521d…, bundle e89a9ddf…)

#123:Commit d48f1bbb23 pushed by admin

main

2026-10-05 07:50:11 +02:00

21s

v0.144.1 code: the wrapper survives a dead reader (BrokenPipe) so a killed pass still keeps its report; the agent looks for kept copies every 5 min (R-868, measured live)

#122:Commit 8401a30917 pushed by admin

v0.144.1

2026-10-05 07:49:50 +02:00

20s

v0.144.1 code: the wrapper survives a dead reader (BrokenPipe) so a killed pass still keeps its report; the agent looks for kept copies every 5 min (R-868, measured live)

#121:Commit 8401a30917 pushed by admin

main

2026-10-05 07:49:30 +02:00

21s

v0.144.0: CHANGELOG (released f18093c3…, bundle 6acf42fe…)

#120:Commit d1b6004458 pushed by admin

main

2026-10-05 07:15:37 +02:00

20s

v0.144.0 code: R8 measures the real download (R-865); an OS pass's report survives a killed agent (R-868); the debug pass runs from the saved block when the hub is away (R-866)

#119:Commit ca78c17b29 pushed by admin

v0.144.0

2026-10-05 07:15:17 +02:00

19s

v0.144.0 code: R8 measures the real download (R-865); an OS pass's report survives a killed agent (R-868); the debug pass runs from the saved block when the hub is away (R-866)

#118:Commit ca78c17b29 pushed by admin

main

2026-10-05 07:14:58 +02:00

20s

REPORT + CONTEXT: 2026-10-04 night (R-840 / R-860)

#117:Commit c8d12f1f2a pushed by admin

main

2026-10-04 20:40:11 +02:00

20s

CHANGELOG v0.143.0 (R-840); build-golden.sh 3.2.0: GOLDEN_GUEST_PKGS — the approved guest release at bake time, first-night count

#116:Commit dc9164c5af pushed by admin

main

2026-10-04 20:08:39 +02:00

20s

R-840: the config bundle — a signed agent_config_update brings a box's root-owned files (sudoers, wrappers, units)

#115:Commit c9fa2e717b pushed by admin

v0.143.0

2026-10-04 19:37:38 +02:00

18s

R-840: the config bundle — a signed agent_config_update brings a box's root-owned files (sudoers, wrappers, units)

#114:Commit c9fa2e717b pushed by admin

main

2026-10-04 19:37:19 +02:00

19s

CHANGELOG + REPORT: v0.142.1 released (R-858)

#113:Commit 0af1187e03 pushed by admin

main

2026-10-04 18:22:27 +02:00

19s

R-858: after a Docker engine step the wrapper restarts ONLY the containers that mount the docker socket (controller, traefik); the health rule fails when the controller cannot reach Docker from inside its container (ruling 95)

#112:Commit 495003051b pushed by admin

v0.142.1

2026-10-04 18:22:08 +02:00

18s

R-858: after a Docker engine step the wrapper restarts ONLY the containers that mount the docker socket (controller, traefik); the health rule fails when the controller cannot reach Docker from inside its container (ruling 95)

#111:Commit 495003051b pushed by admin

main

2026-10-04 18:21:50 +02:00

20s

build-golden.sh 3.1.0: live-restore on in the golden (fail-closed assertion), GOLDEN_DOCKER_PKGS pins the approved Docker engine set

#110:Commit 42af3ab9bc pushed by admin

main

2026-10-04 17:30:41 +02:00

19s

CHANGELOG + REPORT: v0.142.0 released

#109:Commit f24dce5b95 pushed by admin

main

2026-10-04 16:15:40 +02:00

18s

Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the versio…

#108:Commit b1746c25af pushed by admin

v0.142.0

2026-10-04 16:15:22 +02:00

19s

Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the versio…

#107:Commit b1746c25af pushed by admin

main

2026-10-04 16:15:03 +02:00

20s