admin ce1a4b4758 R-812 option A: the Proxmox package lane (layer pve) + the /etc/pve write gate ...

The wrapper gains layer "pve" (slow lane): the host's Proxmox userspace
packages only — origin "Proxmox Debian Repository", never a kernel / boot /
firmware / microcode name (R14), no removal, no undo, a new package only from
an allow-list; authority = a signed os_pve_step or the root-owned ring-0 mark.
The night leg runs it in ring 0 after a healthy host step; ring 1 only by a
signed job (PVEStepExecutor). While it runs, the agent's own /etc/pve writes
(every non-GET API call, pct config verbs, pvesm, pveum, felhom-pbs-apply)
wait on internal/pvegate. Health = the host rule + unchanged container ids +
pveversion reads the installed pve-manager.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-07 10:19:38 +02:00

..

backup_test.go

fix(proxmox): DestroyLXC DELETE takes no body + force=1 (live restore-test teardown)

2026-06-09 13:53:36 +02:00

client_test.go

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

client.go

R-812 option A: the Proxmox package lane (layer pve) + the /etc/pve write gate

2026-10-07 10:19:38 +02:00

doc.go

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

errors.go

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

mock_test.go

controllerswap: stdin tee write + narrow FELHOM_CONTROLLERSWAP grants (non-root, v0.45.0)

2026-06-29 19:42:30 +02:00

mutate.go

v0.101.0 — R-82: a leaked restore-test scratch can no longer auto-start

2026-07-26 16:49:40 +02:00

pool_test.go

feat(reconcile): re-assert pool membership after restore-over-existing (campaign-2 R2, v0.74.0)

2026-07-07 18:42:19 +02:00

privileged.go

R-812 option A: the Proxmox package lane (layer pve) + the /etc/pve write gate

2026-10-07 10:19:38 +02:00

pvegate_test.go

R-812 option A: the Proxmox package lane (layer pve) + the /etc/pve write gate

2026-10-07 10:19:38 +02:00

query.go

v0.123.0: a tier the box cannot READ now says so (R-185)

2026-08-03 18:53:47 +02:00

restore_test.go

v0.53.0: restore guests INTO the felhom pool (pool-scoped-ACL enabler)

2026-07-01 12:32:41 +02:00

routing_test.go

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

scratch_destroy_test.go

F-LEAK third attempt: band-scoped fenced destroy (v0.110.0)

2026-07-28 11:28:54 +02:00

task_test.go

restore-test: verdict is liveness, not start-task exitstatus (v0.7.0)

2026-06-09 19:30:03 +02:00

task.go

restore-test: verdict is liveness, not start-task exitstatus (v0.7.0)

2026-06-09 19:30:03 +02:00

tls_test.go

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

tls.go

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

types.go

restore test takes only this box's archives (R-727): an archive encrypted with another key is another box's

2026-09-30 10:33:52 +02:00

upid_test.go

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00

upid.go

feat(agent): scaffold + proxmox interaction layer (slice 1)

2026-06-08 14:34:32 +02:00