From 4697f8ac9efb0030d39fb404e787694e0c0267a8 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Sun, 25 Oct 2026 17:00:02 +0100 Subject: [PATCH] =?UTF-8?q?v0.165.0:=20CHANGELOG=20names=20the=20release?= =?UTF-8?q?=20(R-1257=20D43=20=3D=20A,=20R-1250);=20released=20from=20a=20?= =?UTF-8?q?clean=20clone,=20sha256=20e9d04a47=E2=80=A6,=20bundle=208dea1f3?= =?UTF-8?q?4=E2=80=A6;=20not=20vouched?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- CHANGELOG.md | 20 +++++++++++--------- 1 file changed, 11 insertions(+), 9 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index b1c8028..4695b66 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,6 @@ -## Unreleased (next: v0.165.0) — D43 = A: BYO hosts keep their own SSH settings (R-1257) (2026-10-24 night) — committed, NOT released (the release + the operator's vouch are Monday's) +## v0.165.0 (2026-10-25) — D43 = A: BYO hosts keep their own SSH settings (R-1257); the line test for a box that seeds all day (R-1250) — released in the attended release run; the vouch is the operator's + +### BYO hosts keep their own SSH settings (R-1257, D43 = A) — 2026-10-24 night - **The root-key-only sshd drop-in (`/etc/ssh/sshd_config.d/10-felhom-root-key-only.conf`, R-982 / D4) goes only to an appliance** — operator ruling D43 = A (2026-10-24): a BYO host belongs to its owner (`11` §1). The table entry's policy @@ -17,14 +19,7 @@ is; a LAN `Match` block is not in force; every address key-only passes; a failing `sshd -t` undoes only the SSH step. The fake box now carries an appliance record by default (every earlier test unchanged). -## 2026-10-24 (review round 2, unattended) — `.claude/rules/unprompted-work.md` aligned with its four siblings - -- The copy lacked item 6's paragraph „A version number is pushed once …" that the felhom.eu and felhom-controller copies - have carried since 2026-10-15; the file's header says „change all five or none". The paragraph states a fact - (`felhom-controller/controller/build.sh` refuses an existing tag and an unreachable registry). Now byte-identical to - the other four (md5 b1891bd4). No code change. Record: felhom.eu `documentation/audits/review-round-2-2026-10-24/EDITS.md`. - -## Unreleased (next: v0.165.0) — the line test for a box that seeds all day (R-1250) (2026-10-24) — committed, not released +### The line test for a box that seeds all day (R-1250) — 2026-10-24 Attended brief 2026-10-24, Part 4 (commit only; the release rides the next normal train). The weekly test (v0.164.0) starts only after 10 quiet minutes; a torrent app that seeds all day never gives them, so that box never got a tested @@ -47,6 +42,13 @@ line and qBittorrent never got its 50 % limit. Now: **No sudoers or config-bundle change. MinController: none** — an older controller never calls the route. +## 2026-10-24 (review round 2, unattended) — `.claude/rules/unprompted-work.md` aligned with its four siblings + +- The copy lacked item 6's paragraph „A version number is pushed once …" that the felhom.eu and felhom-controller copies + have carried since 2026-10-15; the file's header says „change all five or none". The paragraph states a fact + (`felhom-controller/controller/build.sh` refuses an existing tag and an unreachable registry). Now byte-identical to + the other four (md5 b1891bd4). No code change. Record: felhom.eu `documentation/audits/review-round-2-2026-10-24/EDITS.md`. + ## v0.164.0 — the weekly upload line test (R-1247) (2026-10-24) — RELEASED on the operator's ruling (attended release run); vouched by the operator 09:44:58 CEST Binary sha256 `1b803d8b70f8afbe1546f6989f35b6b0e29c9ed63f6acb3843d3c04ef0d24b2b`; config bundle sha256