admin e15d1d30ea R-1124 + R-1012: forget a decommissioned drive that is gone; name an orphan thin device in a backup failure ...

R-1124: ForgetRetiredDrives (start-up + the 20 s tick) disables and removes the host mount unit of a
DECOMMISSIONED drive whose disk is absent and unmounted; the agent then no longer lists it. A present
decommissioned drive keeps its unit (one-click re-enroll). The file goes only through the new
felhom-priv-apply verb `unit-forget`, which re-checks marker, disabled, unmounted and absent as root.

R-1012: the read-only root helper felhom-thin-check <vg> <pool> (bundle) lists the pool's thin ids
(metadata snapshot reserved and released) next to LVM's before and after. BackupRunner.SetThinCheck runs
it before a snapshot-mode backup (log) and again after a failure, appending the finding in plain words to
the error the controller mails to the operator. Two reads, intersected; fails open; never removes.

Red-proofs: felhom.eu audits/agent-allowlist-rotation-2026-10-17/P1/. Code only; the CHANGELOG entry
follows the release.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-17 15:20:34 +02:00

..

archive_completeness_test.go

R-99: the PBS phantom WARN names the cleanup runbook (09 §3 decision 140)

2026-10-06 11:24:45 +02:00

backup_state_test.go

Host report keeps the last backup across a restart; Secure Boot meta-package leaves the Proxmox lane

2026-10-09 06:47:58 +02:00

backup_state.go

Host report keeps the last backup across a restart; Secure Boot meta-package leaves the Proxmox lane

2026-10-09 06:47:58 +02:00

backup_test.go

agent: a guest outside the agent's ACL is not a known guest (R-689, v0.136.0 regression)

2026-09-27 14:00:42 +02:00

doc.go

v0.6.0-rc1: slice 6 Phase A — backup + the self-restore-test (local target)

2026-06-09 13:49:39 +02:00

foreign_key_ledger.go

R-366 slice 2 (decision 168): the host report carries the archives the restore-test skipped as another key's

2026-10-07 10:19:38 +02:00

inflight.go

docs: correct inflight.go's DEFERS claim (F-A1)

2026-07-28 08:50:23 +02:00

prune_test.go

agent v0.51.0: local vzdump retention default (--prune-backups keep-last=3)

2026-06-30 19:44:07 +02:00

r366_foreign_key_ledger_test.go

R-366 slice 2 (decision 168): the host report carries the archives the restore-test skipped as another key's

2026-10-07 10:19:38 +02:00

r672_skip_test.go

v0.133.0: a restore-test can never fill a box's disk; leftovers retried on a timer (R-672, R-673)

2026-09-24 16:23:15 +02:00

r685_space_test.go

After a power cut: remove the dead half-written backup (R-1006); a backup task from before the boot is not in flight (R-1008)

2026-10-14 11:29:41 +02:00

r689_golden_test.go

agent: a guest outside the agent's ACL is not a known guest (R-689, v0.136.0 regression)

2026-09-27 14:00:42 +02:00

r727_own_archives_test.go

restore test takes only this box's archives (R-727): an archive encrypted with another key is another box's

2026-09-30 10:33:52 +02:00

r874_first_eval_test.go

v0.145.0 code: the OS wrapper repairs dpkg's update journal by itself after a power cut (R-876); restore-test first check 30 min after start (R-874); neutral "sent late" text (R-875)

2026-10-05 09:23:23 +02:00

r1012_thincheck_test.go

R-1124 + R-1012: forget a decommissioned drive that is gone; name an orphan thin device in a backup failure

2026-10-17 15:20:34 +02:00

restoretest_due_test.go

v0.122.0: three ways the signals lied about themselves (R-189, R-188, R-186)

2026-08-03 16:40:18 +02:00

restoretest_due.go

v0.121.1: 'nothing is due' must be AUDIBLE (R-86 + standing rule 3)

2026-08-03 15:26:54 +02:00

restoretest_state.go

v0.122.0: three ways the signals lied about themselves (R-189, R-188, R-186)

2026-08-03 16:40:18 +02:00

rotation_test.go

v0.122.0: three ways the signals lied about themselves (R-189, R-188, R-186)

2026-08-03 16:40:18 +02:00

runner_snapshot_test.go

agent v0.51.0: local vzdump retention default (--prune-backups keep-last=3)

2026-06-30 19:44:07 +02:00

runner.go

R-1124 + R-1012: forget a decommissioned drive that is gone; name an orphan thin device in a backup failure

2026-10-17 15:20:34 +02:00

schedule_spec_test.go

R-85 Phase 1: the restore-test spec is built PER RUN, not frozen at daemon start

2026-07-26 20:47:28 +02:00

schedule.go

v0.145.0 code: the OS wrapper repairs dpkg's update journal by itself after a power cut (R-876); restore-test first check 30 min after start (R-874); neutral "sent late" text (R-875)

2026-10-05 09:23:23 +02:00

store.go

R-894: after a restart the agent remembers the last backup per tier

2026-10-06 20:33:27 +02:00