felhom-agent

CHANGELOG/REPORT: v0.147.0 released (shas)

gates.yml #140:Commit 208fac8027 pushed by admin

main

2026-10-05 19:00:12 +02:00

57s

R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)

gates.yml #139:Commit f1b9b41214 pushed by admin

v0.147.0

2026-10-05 18:59:12 +02:00

49s

R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)

gates.yml #138:Commit f1b9b41214 pushed by admin

main

2026-10-05 18:57:06 +02:00

44s

R-291 retention record source, R-348 restart comment (no binary change; burn-down)

gates.yml #137:Commit d83316326e pushed by admin

main

2026-10-05 16:56:43 +02:00

22s

agent v0.146.1 REPORT

gates.yml #136:Commit e06ed97fa8 pushed by admin

main

2026-10-05 13:01:18 +02:00

22s

R-880: build-step-bundle.py — the transition bundle for a release whose bundle adds paths (an installed felhom-os-apply refuses unknown paths, R16)

gates.yml #135:Commit e4b5cf9693 pushed by admin

main

2026-10-05 12:24:21 +02:00

21s

agent v0.146.1 CHANGELOG (released)

gates.yml #134:Commit faa3cad92e pushed by admin

main

2026-10-05 12:14:45 +02:00

20s

R-861 review fixes: the signed update hands the A/B wrapper a root-owned copy of the hashed bytes; mount units accept no Wants/Requires/Before and no continuation lines; the escrow read walks the path without following any symlink

gates.yml #133:Commit fdd87178d2 pushed by admin

v0.146.1

2026-10-05 12:14:25 +02:00

20s

R-861 review fixes: the signed update hands the A/B wrapper a root-owned copy of the hashed bytes; mount units accept no Wants/Requires/Before and no continuation lines; the escrow read walks the path without following any symlink

gates.yml #132:Commit fdd87178d2 pushed by admin

main

2026-10-05 12:14:05 +02:00

20s

agent v0.146.0 CHANGELOG (released)

gates.yml #131:Commit 0342c7bb57 pushed by admin

main

2026-10-05 12:01:48 +02:00

19s

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

gates.yml #130:Commit 6ab1e7c56c pushed by admin

v0.146.0

2026-10-05 12:01:29 +02:00

20s

R-861: narrow the agent's root grants — exact sudo patterns, felhom-priv-apply content checker, fixed hook/parent files in the bundle, signed self-update verified as root, escrow root reads pinned

gates.yml #129:Commit 6ab1e7c56c pushed by admin

main

2026-10-05 12:01:09 +02:00

19s

REPORT: the 2026-10-05 catch-up session

gates.yml #128:Commit 61345790ed pushed by admin

main

2026-10-05 10:30:10 +02:00

19s

v0.145.0: CHANGELOG (released 894da35c…, bundle 78c00adc…)

gates.yml #127:Commit 7c4b8e599f pushed by admin

main

2026-10-05 09:24:29 +02:00

18s

v0.145.0 code: the OS wrapper repairs dpkg's update journal by itself after a power cut (R-876); restore-test first check 30 min after start (R-874); neutral "sent late" text (R-875)

gates.yml #126:Commit 56ef1d6655 pushed by admin

v0.145.0

2026-10-05 09:24:11 +02:00

20s

v0.145.0 code: the OS wrapper repairs dpkg's update journal by itself after a power cut (R-876); restore-test first check 30 min after start (R-874); neutral "sent late" text (R-875)

gates.yml #125:Commit 56ef1d6655 pushed by admin

main

2026-10-05 09:23:51 +02:00

20s

REPORT: the 2026-10-05 night-fixes session

gates.yml #124:Commit 78c890e4bb pushed by admin

main

2026-10-05 08:26:42 +02:00

21s

v0.144.1: CHANGELOG (released 6ccd521d…, bundle e89a9ddf…)

gates.yml #123:Commit d48f1bbb23 pushed by admin

main

2026-10-05 07:50:11 +02:00

21s

v0.144.1 code: the wrapper survives a dead reader (BrokenPipe) so a killed pass still keeps its report; the agent looks for kept copies every 5 min (R-868, measured live)

gates.yml #122:Commit 8401a30917 pushed by admin

v0.144.1

2026-10-05 07:49:50 +02:00

20s

v0.144.1 code: the wrapper survives a dead reader (BrokenPipe) so a killed pass still keeps its report; the agent looks for kept copies every 5 min (R-868, measured live)

gates.yml #121:Commit 8401a30917 pushed by admin

main

2026-10-05 07:49:30 +02:00

21s

v0.144.0: CHANGELOG (released f18093c3…, bundle 6acf42fe…)

gates.yml #120:Commit d1b6004458 pushed by admin

main

2026-10-05 07:15:37 +02:00

20s

v0.144.0 code: R8 measures the real download (R-865); an OS pass's report survives a killed agent (R-868); the debug pass runs from the saved block when the hub is away (R-866)

gates.yml #119:Commit ca78c17b29 pushed by admin

v0.144.0

2026-10-05 07:15:17 +02:00

19s

v0.144.0 code: R8 measures the real download (R-865); an OS pass's report survives a killed agent (R-868); the debug pass runs from the saved block when the hub is away (R-866)

gates.yml #118:Commit ca78c17b29 pushed by admin

main

2026-10-05 07:14:58 +02:00

20s

REPORT + CONTEXT: 2026-10-04 night (R-840 / R-860)

gates.yml #117:Commit c8d12f1f2a pushed by admin

main

2026-10-04 20:40:11 +02:00

20s

CHANGELOG v0.143.0 (R-840); build-golden.sh 3.2.0: GOLDEN_GUEST_PKGS — the approved guest release at bake time, first-night count

gates.yml #116:Commit dc9164c5af pushed by admin

main

2026-10-04 20:08:39 +02:00

20s

R-840: the config bundle — a signed agent_config_update brings a box's root-owned files (sudoers, wrappers, units)

gates.yml #115:Commit c9fa2e717b pushed by admin

v0.143.0

2026-10-04 19:37:38 +02:00

18s

R-840: the config bundle — a signed agent_config_update brings a box's root-owned files (sudoers, wrappers, units)

gates.yml #114:Commit c9fa2e717b pushed by admin

main

2026-10-04 19:37:19 +02:00

19s

CHANGELOG + REPORT: v0.142.1 released (R-858)

gates.yml #113:Commit 0af1187e03 pushed by admin

main

2026-10-04 18:22:27 +02:00

19s

R-858: after a Docker engine step the wrapper restarts ONLY the containers that mount the docker socket (controller, traefik); the health rule fails when the controller cannot reach Docker from inside its container (ruling 95)

gates.yml #112:Commit 495003051b pushed by admin

v0.142.1

2026-10-04 18:22:08 +02:00

18s

R-858: after a Docker engine step the wrapper restarts ONLY the containers that mount the docker socket (controller, traefik); the health rule fails when the controller cannot reach Docker from inside its container (ruling 95)

gates.yml #111:Commit 495003051b pushed by admin

main

2026-10-04 18:21:50 +02:00

20s