felhom-agent

CHANGELOG + REPORT: v0.142.1 released (R-858)

gates.yml #113:Commit 0af1187e03 pushed by admin

main

2026-10-04 18:22:27 +02:00

19s

R-858: after a Docker engine step the wrapper restarts ONLY the containers that mount the docker socket (controller, traefik); the health rule fails when the controller cannot reach Docker from inside its container (ruling 95)

gates.yml #112:Commit 495003051b pushed by admin

v0.142.1

2026-10-04 18:22:08 +02:00

18s

R-858: after a Docker engine step the wrapper restarts ONLY the containers that mount the docker socket (controller, traefik); the health rule fails when the controller cannot reach Docker from inside its container (ruling 95)

gates.yml #111:Commit 495003051b pushed by admin

main

2026-10-04 18:21:50 +02:00

20s

build-golden.sh 3.1.0: live-restore on in the golden (fail-closed assertion), GOLDEN_DOCKER_PKGS pins the approved Docker engine set

gates.yml #110:Commit 42af3ab9bc pushed by admin

main

2026-10-04 17:30:41 +02:00

19s

CHANGELOG + REPORT: v0.142.0 released

gates.yml #109:Commit f24dce5b95 pushed by admin

main

2026-10-04 16:15:40 +02:00

18s

Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the versio…

gates.yml #108:Commit b1746c25af pushed by admin

v0.142.0

2026-10-04 16:15:22 +02:00

19s

Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the versio…

gates.yml #107:Commit b1746c25af pushed by admin

main

2026-10-04 16:15:03 +02:00

20s

CHANGELOG + REPORT: v0.141.1 released (host reboot-needed fixes)

gates.yml #106:Commit 2e2e8f56b8 pushed by admin

main

2026-10-04 13:40:16 +02:00

17s

os-apply: the host restart scan no longer hides lxc-start (skip ':/lxc/' not 'lxc'), and the host scans on every pass so a reboot clears 'reboot needed' (reboot_scanned reaches the hub) — both found live on demo-felhom

gates.yml #105:Commit a6bc3f1197 pushed by admin

v0.141.1

2026-10-04 13:39:58 +02:00

18s

os-apply: the host restart scan no longer hides lxc-start (skip ':/lxc/' not 'lxc'), and the host scans on every pass so a reboot clears 'reboot needed' (reboot_scanned reaches the hub) — both found live on demo-felhom

gates.yml #104:Commit a6bc3f1197 pushed by admin

main

2026-10-04 13:39:40 +02:00

19s

CHANGELOG + REPORT: v0.141.0 released (host fast lane, true tunnel status, fast leg)

gates.yml #103:Commit 3bf77c3423 pushed by admin

main

2026-10-04 13:19:42 +02:00

19s

contract: the desired-state golden gains host_release (byte-identical with hub v0.131.0); TestOSUpdateGolden_Decodes checks it

gates.yml #102:Commit cfba0d022a pushed by admin

v0.141.0

2026-10-04 13:19:23 +02:00

20s

contract: the desired-state golden gains host_release (byte-identical with hub v0.131.0); TestOSUpdateGolden_Decodes checks it

gates.yml #101:Commit cfba0d022a pushed by admin

main

2026-10-04 13:19:03 +02:00

18s

OS updates host fast lane + true tunnel status + fast leg: wrapper host layer (R12 appliance proof from the root-owned install record, R14 kernel/boot/firmware refused), select pending-fast, one call per layer, host-side version checks, restart scan on…

gates.yml #100:Commit c3d08b4821 pushed by admin

main

2026-10-04 12:54:25 +02:00

19s

CHANGELOG + REPORT: v0.140.0 released (OS updates, guest fast lane)

gates.yml #99:Commit a55eedcf2c pushed by admin

main

2026-10-04 11:30:37 +02:00

19s

osupdate: the health baseline is the start of the leg (inventory reading merged with the apply's own) — an app that stops during the run fails it (found live on demo-hp)

gates.yml #98:Commit 9cac3462bb pushed by admin

v0.140.0

2026-10-04 11:30:16 +02:00

20s

osupdate: the health baseline is the start of the leg (inventory reading merged with the apply's own) — an app that stops during the run fails it (found live on demo-hp)

gates.yml #97:Commit 9cac3462bb pushed by admin

main

2026-10-04 11:22:25 +02:00

19s

os-apply: tell an UPDATED conffile from a KEPT one (dpkg's two shapes, measured live on demo-hp)

gates.yml #96:Commit 1bb8608e88 pushed by admin

main

2026-10-04 11:09:05 +02:00

19s

selftest flag accepts os-update and wgtunnel (both dispatched, both refused); a test pins every dispatched mode

gates.yml #95:Commit b84e0dd1bd pushed by admin

main

2026-10-04 11:04:26 +02:00

19s

OS updates, guest fast lane (11 §8 step 2): felhom-os-apply wrapper (R1-R13 refusals, repair first, snapshot.debian.org fallback), FELHOM_OSAPPLY sudoers, the OS leg after the primary backup, hub os_update block + os-report, --selftest=os-update

gates.yml #94:Commit 23a8ef3de4 pushed by admin

main

2026-10-04 10:44:52 +02:00

19s

CHANGELOG + REPORT: v0.139.0 released (R-834)

gates.yml #93:Commit 596238cc2e pushed by admin

main

2026-10-04 08:53:33 +02:00

17s

DR bring-up refuses beside a live original (R-834): source guest present, drives bind, or unreadable config

gates.yml #92:Commit 475bdce7e4 pushed by admin

v0.139.0

2026-10-04 08:53:16 +02:00

18s

DR bring-up refuses beside a live original (R-834): source guest present, drives bind, or unreadable config

gates.yml #91:Commit 475bdce7e4 pushed by admin

main

2026-10-04 08:52:58 +02:00

18s

CHANGELOG: v0.138.0 vouched with golden 0.283.1

gates.yml #90:Commit d766666ff8 pushed by admin

main

2026-09-30 11:41:08 +02:00

15s

REPORT: v0.138.0 (R-727)

gates.yml #89:Commit a4c09a7c11 pushed by admin

main

2026-09-30 11:01:34 +02:00

16s

CHANGELOG: v0.138.0 released (R-727)

gates.yml #88:Commit 904dc20466 pushed by admin

main

2026-09-30 10:34:45 +02:00

14s

restore test takes only this box's archives (R-727): an archive encrypted with another key is another box's

gates.yml #87:Commit e1b8269be0 pushed by admin

v0.138.0

2026-09-30 10:34:28 +02:00

16s

restore test takes only this box's archives (R-727): an archive encrypted with another key is another box's

gates.yml #86:Commit e1b8269be0 pushed by admin

main

2026-09-30 10:34:11 +02:00

15s

docs: v0.137.0 vouched with golden 0.276.0 (2026-09-28)

gates.yml #85:Commit 5c68c869b6 pushed by admin

main

2026-09-28 09:45:31 +02:00

15s

CHANGELOG: v0.137.0 released (tag + package verified by download), not vouched

gates.yml #84:Commit 728d12b1a0 pushed by admin

main

2026-09-27 14:01:51 +02:00

14s