be398f92e8
R-99: the PBS phantom WARN names the cleanup runbook (09 §3 decision 140)
admin2026-10-06 11:24:13 +02:00
ee71abd1d4
R-444: weekly guest disk trim (pct fstrim) outside the night, under the heavy-op gate
admin2026-10-06 11:22:45 +02:00
37e98f452b
REPORT: the burn-down night (2026-10-06)
admin2026-10-06 02:13:10 +02:00
b2b82ae828
bundle test: the ISO first-boot files the installer names under KEPT are not installer-written (go test red since felhom.eu 85de3f9b); CHANGELOG unreleased (R-426 decoys)
admin2026-10-06 01:42:25 +02:00
b78a0ff3ac
R-426: decoys for the shared reuse-refs, instructions and observations gates
admin2026-10-06 01:33:32 +02:00
96047453cb
R-426: decoys for the release-complete gate
admin2026-10-06 01:33:21 +02:00
4bf5db6875
R-426: decoy suite for the published gate, against a fake Gitea
admin2026-10-06 01:33:02 +02:00
87977ff40a
CHANGELOG/v0.148.0 released (shas)
admin2026-10-06 00:37:07 +02:00
769c4c3cf2
R-25 (agent half): the format answer carries the NEW filesystem's UUID, bound to the durable id
admin2026-10-05 21:15:01 +02:00
64f704d0f7
R-349: the host report carries the sha256 of the RUNNING agent binary
admin2026-10-05 21:10:43 +02:00
208fac8027
CHANGELOG/REPORT: v0.147.0 released (shas)
admin2026-10-05 18:58:37 +02:00
f1b9b41214
R-124 recipe root namespace as PBS spells it; R-118 no root size for an absent drive; R-269 rotated-out token rejected at once; R-317 dnsmasq install probed by its unit (burn-down round 2)
v0.147.0
admin2026-10-05 18:56:13 +02:00
d83316326e
R-291 retention record source, R-348 restart comment (no binary change; burn-down)
admin2026-10-05 16:56:18 +02:00
fdd87178d2
R-861 review fixes: the signed update hands the A/B wrapper a root-owned copy of the hashed bytes; mount units accept no Wants/Requires/Before and no continuation lines; the escrow read walks the path without following any symlink
v0.146.1
admin2026-10-05 12:13:42 +02:00
56ef1d6655
v0.145.0 code: the OS wrapper repairs dpkg's update journal by itself after a power cut (R-876); restore-test first check 30 min after start (R-874); neutral "sent late" text (R-875)
v0.145.0
admin2026-10-05 09:23:23 +02:00
78c890e4bb
REPORT: the 2026-10-05 night-fixes session
admin2026-10-05 08:25:49 +02:00
8401a30917
v0.144.1 code: the wrapper survives a dead reader (BrokenPipe) so a killed pass still keeps its report; the agent looks for kept copies every 5 min (R-868, measured live)
v0.144.1
admin2026-10-05 07:49:04 +02:00
ca78c17b29
v0.144.0 code: R8 measures the real download (R-865); an OS pass's report survives a killed agent (R-868); the debug pass runs from the saved block when the hub is away (R-866)
v0.144.0
admin2026-10-05 07:14:32 +02:00
dc9164c5af
CHANGELOG v0.143.0 (R-840); build-golden.sh 3.2.0: GOLDEN_GUEST_PKGS — the approved guest release at bake time, first-night count
admin2026-10-04 20:08:16 +02:00
c9fa2e717b
R-840: the config bundle — a signed agent_config_update brings a box's root-owned files (sudoers, wrappers, units)
v0.143.0
admin2026-10-04 19:36:58 +02:00
0af1187e03
CHANGELOG + REPORT: v0.142.1 released (R-858)
admin2026-10-04 18:21:46 +02:00
495003051b
R-858: after a Docker engine step the wrapper restarts ONLY the containers that mount the docker socket (controller, traefik); the health rule fails when the controller cannot reach Docker from inside its container (ruling 95)
v0.142.1
admin2026-10-04 18:21:24 +02:00
42af3ab9bc
build-golden.sh 3.1.0: live-restore on in the golden (fail-closed assertion), GOLDEN_DOCKER_PKGS pins the approved Docker engine set
admin2026-10-04 17:30:19 +02:00
f24dce5b95
CHANGELOG + REPORT: v0.142.0 released
admin2026-10-04 16:15:15 +02:00
b1746c25af
Docker engine slow lane (live-restore once by reload; ring-0 pending-docker under a root-owned ring-0 mark; ring 1 and undo only by a signed os_docker_step the wrapper re-verifies against a root-owned signers file; same-container-id health), the version report (facts mode -> host report system stanza, R-852), guest restart scan every pass (R-849), the crash guard (kernel.panic=10, the 3rd unclean stop in 60 min stays off, 24 h re-arm)
v0.142.0
admin2026-10-04 16:14:36 +02:00
a6bc3f1197
os-apply: the host restart scan no longer hides lxc-start (skip ':/lxc/' not 'lxc'), and the host scans on every pass so a reboot clears 'reboot needed' (reboot_scanned reaches the hub) — both found live on demo-felhom
v0.141.1
admin2026-10-04 13:39:14 +02:00
3bf77c3423
CHANGELOG + REPORT: v0.141.0 released (host fast lane, true tunnel status, fast leg)
admin2026-10-04 13:19:02 +02:00
cfba0d022a
contract: the desired-state golden gains host_release (byte-identical with hub v0.131.0); TestOSUpdateGolden_Decodes checks it
v0.141.0
admin2026-10-04 13:18:43 +02:00
c3d08b4821
OS updates host fast lane + true tunnel status + fast leg: wrapper host layer (R12 appliance proof from the root-owned install record, R14 kernel/boot/firmware refused), select pending-fast, one call per layer, host-side version checks, restart scan only after an install, reboot-needed for PID 1/lxc-start; the leg runs the host step after a healthy guest step; GuestTunnelProber reads the cloudflared container + its readiness check (R-841)
admin2026-10-04 12:54:02 +02:00
a55eedcf2c
CHANGELOG + REPORT: v0.140.0 released (OS updates, guest fast lane)
admin2026-10-04 11:30:14 +02:00
9cac3462bb
osupdate: the health baseline is the start of the leg (inventory reading merged with the apply's own) — an app that stops during the run fails it (found live on demo-hp)
v0.140.0
admin2026-10-04 11:22:03 +02:00
1bb8608e88
os-apply: tell an UPDATED conffile from a KEPT one (dpkg's two shapes, measured live on demo-hp)
admin2026-10-04 11:08:43 +02:00
b84e0dd1bd
selftest flag accepts os-update and wgtunnel (both dispatched, both refused); a test pins every dispatched mode
admin2026-10-04 11:04:03 +02:00
23a8ef3de4
OS updates, guest fast lane (11 §8 step 2): felhom-os-apply wrapper (R1-R13 refusals, repair first, snapshot.debian.org fallback), FELHOM_OSAPPLY sudoers, the OS leg after the primary backup, hub os_update block + os-report, --selftest=os-update
admin2026-10-04 10:44:29 +02:00
596238cc2e
CHANGELOG + REPORT: v0.139.0 released (R-834)
admin2026-10-04 08:52:57 +02:00
475bdce7e4
DR bring-up refuses beside a live original (R-834): source guest present, drives bind, or unreadable config
v0.139.0
admin2026-10-04 08:52:35 +02:00
d766666ff8
CHANGELOG: v0.138.0 vouched with golden 0.283.1
admin2026-09-30 11:40:20 +02:00
904dc20466
CHANGELOG: v0.138.0 released (R-727)
admin2026-09-30 10:34:25 +02:00
e1b8269be0
restore test takes only this box's archives (R-727): an archive encrypted with another key is another box's
v0.138.0
admin2026-09-30 10:33:52 +02:00
5c68c869b6
docs: v0.137.0 vouched with golden 0.276.0 (2026-09-28)
admin2026-09-28 09:45:08 +02:00
728d12b1a0
CHANGELOG: v0.137.0 released (tag + package verified by download), not vouched
admin2026-09-27 14:01:26 +02:00
3ef095fb71
agent: a guest outside the agent's ACL is not a known guest (R-689, v0.136.0 regression)
admin2026-09-27 14:00:42 +02:00
7c986915ca
CHANGELOG: v0.136.0 released (tag + package verified by download), not vouched
admin2026-09-27 13:46:22 +02:00
16dbc83221
agent: the restore test takes only archives of a guest that still exists (R-689, second half)
v0.136.0
admin2026-09-27 13:45:56 +02:00
9555a7f93b
REPORT: v0.135.0 released and signed-delivered to both demo hosts
admin2026-09-27 13:02:10 +02:00
9ff937d8fb
CHANGELOG: v0.135.0 released (tag + package verified by download), not vouched
admin2026-09-27 12:16:17 +02:00
d4be12ca95
agent: the restore test proves only backups of a guest (R-689)
v0.135.0
admin2026-09-27 12:15:42 +02:00
7403c2a838
REPORT + CONTEXT: v0.133.0 and v0.134.0 delivered to both demo boxes; restore test back on
admin2026-09-25 04:55:26 +02:00
309e368731
CHANGELOG: v0.134.0 released (tag + package verified by download), not vouched
admin2026-09-24 22:49:19 +02:00
0722b2cdb0
agent: a whole-box backup that cannot fit its local target is skipped with a reason before anything starts (R-685)
v0.134.0
admin2026-09-24 22:48:51 +02:00
4fe2f81a32
CHANGELOG + REPORT + CONTEXT: v0.133.0 released (tag + package verified by download), not delivered
admin2026-09-24 16:25:13 +02:00
9bdb4dae8f
v0.133.0: a restore-test can never fill a box's disk; leftovers retried on a timer (R-672, R-673)
v0.133.0
admin2026-09-24 16:23:15 +02:00
d9864a94bf
CHANGELOG: v0.132.0 vouched for Day-0 installs with golden 0.246.0 (operator decision)
admin2026-09-17 12:25:49 +02:00
77cd70f7c0
REPORT: agent v0.132.0 - slow crash loop, signed delivery, live proof with the production window
admin2026-09-17 11:30:45 +02:00
1030abd7d6
CHANGELOG: v0.132.0 released (tag + package verified by download)
admin2026-09-17 10:27:16 +02:00
18d03bd437
v0.132.0: the slow crash-loop counter (R-539, operator ruling 3 of 2026-09-16)
v0.132.0
admin2026-09-17 10:26:42 +02:00
e98b857684
REPORT: v0.131.0 supervisor + per-tier status, delivery and live validation
admin2026-09-15 11:37:07 +02:00
dcdeb3d16d
CHANGELOG: v0.131.0 released (tag + package verified by download)
admin2026-09-15 09:50:47 +02:00
admin