diff --git a/CONTEXT.md b/CONTEXT.md index a96615b..9177064 100644 --- a/CONTEXT.md +++ b/CONTEXT.md @@ -1,6 +1,14 @@ # CONTEXT — felhom-agent working state +> **2026-09-25 night — v0.133.0 AND v0.134.0 DELIVERED to both demo boxes (CC-signed `agent_update`, ruling 1); +> restore test back ON (the `-1` config kept as `agent.json.night-0925-off`). v0.134.0 = R-685:** `backup/runner.go` +> `spaceFits` — a vzdump to a LOCAL target needs free ≥ newest archive of that guest × 1.25 + 1 GiB (PVE prunes +> only after success); a shortfall is a named skip (`BackupSkipNoSpacePrefix`), fail-open on PBS / first backup / +> unknown usage. **Free space comes from `NodeStorage` (`GET /nodes//storage`) — `ListStorage` (`GET /storage`) +> has NO usage**; the first build read it and a real vzdump started in its own live test (aborted, no archive). +> demo-hp: `local_backup_retention` 1 (operator option A, saved `agent.json.pre-a4-retention`). Peti's box: nothing. + > **2026-09-24 — v0.133.0 RELEASED, NOT DELIVERED (R-672, R-673).** Restore-test space preflight > (`reconcile/restoretest_space.go`, `internal/restorespace`): uncompressed size from the vzdump log / PBS size, > × 1.2 + 5 GiB, thin metadata, off the tested guest's pool, unknown refuses, reported as `skipped` non-pass. diff --git a/REPORT.md b/REPORT.md index 73bf9ac..f252809 100644 --- a/REPORT.md +++ b/REPORT.md @@ -1,29 +1,17 @@ -# REPORT — agent v0.133.0: a restore-test can never fill a box's disk (2026-09-24, R-672, R-673) +# REPORT — agents v0.133.0 + v0.134.0 delivered; v0.134.0 released (night 2026-09-25) -Full record: `felhom.eu/documentation/audits/r672-2026-09-24/README.md`. +**Delivered** to demo-felhom and demo-hp by CC-signed `agent_update` jobs (ruling 1, 2026-09-16), each verified +against the published package's sha256 first: v0.133.0 (committed 21:35 / 21:50 CEST), then v0.134.0 (22:52 / +22:58). Hub reads 0.134.0 on both. Peti's box: nothing. Restore test back ON on both (A3: demo-felhom PASS 85 s; +demo-hp refused for space, correctly). demo-hp `local_backup_retention: 1` (operator option A). -## Shipped (released, not delivered) -Tag `v0.133.0` (`9bdb4da`), package sha256 `3aa30345…e69b6`, verified by anonymous download. Delivery needs the -operator's signed `agent_update` job per box. +**v0.134.0 = R-685 (agent half):** a vzdump to a LOCAL target needs free ≥ newest archive × 1.25 + 1 GiB; a +shortfall is a named skip before anything starts; fail-open on PBS / first backup / unknown usage. Tag `v0.134.0` +(`0722b2c`), sha256 `7593bebe03234c7d22f3ade384e7ed7787dc659aa8c8594b3ee19af2ce81c72d`, verified by download; CI jobs +975–977 success. **Not vouched** for Day-0. -- **Space preflight** before anything is created: free ≥ restored × 1.2 + 5 GiB, `restored` UNCOMPRESSED (vzdump - log "Total bytes written" / PBS snapshot size), thin metadata with room, off the tested guest's pool when - another eligible storage fits, unknown refuses, reported as a non-pass (`skipped`). -- **Scratch teardown retried every 10 min**; operator told once after 3 failed tries. -- **Thin pool ≥ 90 %** → immediate host report (hub v0.124.0 alarms `storage_fill_critical`, per pool per 6 h). -- **R-673:** the stale-lock sweep on the same timer, under the one-heavy-op gate. - -## Red-proofs (each seen failing; files in `felhom.eu/documentation/audits/r672-2026-09-24/redproofs/`) -1. preflight removed → the 2026-09-24 restore issued again; 2. archive FILE size used → "the compressed file size -was used"; 3. timer pass a no-op → "the leaked scratch was not destroyed by the timer"; 4. sweep without the gate → -"the sweep ran while a backup held the gate"; 5. no 90 % edge → "0 report requests, want 1"; 6. every skip dropped → -"a space refusal never reached the host report". Full suite `go test ./...` green; `agent_gates.py` OK. - -## Live (demo-hp, the on-demand `--selftest=restore-test`, cadence OFF) -(a) factor 10 → refused: needs 215.5 GiB, has 22.1 GiB. (b) normal margin → refused: restoring 21.1 GiB needs 30.3 GiB, -has 22.1 GiB — correct: no full restore-test fits demo-hp under 80 % pool use. (c) a forced teardown failure could not -run live (it needs a scratch guest, which (b) shows cannot be created within the 80 % rule) — unit tests only. Pool -58.99 % before and after every run; nothing created. - -## Observations -1. demo-hp has no second eligible storage for a restore-test: `nvme-scratch` takes `rootdir`, but the agent holds no grant there. FILED: R-672 +**Found live before the release:** the first build read free space from `GET /storage` (no usage) and failed open — +its own "must refuse" test started a real vzdump of demo-hp 9201, aborted by CC after 5 min 16 s, no archive left. +Fixed (`NodeStorage`), test fake made honest (`ListStorage` strips usage), two red-proofs, re-proven live with safe +builds (a hard stop before vzdump): ×10 refused with real numbers, ×1.25 passed. Evidence: +`felhom.eu/documentation/audits/night-2026-09-25/F/`.