admin/felhom-controller
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

v0.323.0 released to the three test boxes: REPORT, CONTEXT
gates / gates (push) Successful in 44s
Details

Browse Source
This commit is contained in:
authentik Default Admin
2026-10-16 21:36:06 +02:00
parent 8587198781
commit 00a0d91976
2 changed files with 46 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CONTEXT.md
+17 -1
View File
@@ -7,7 +7,23 @@
>
> Ask Claude Code: "Please update CONTEXT.md with what we did today"
Last updated: 2026-10-16 (v0.322.0 — burndown 2: the hub key opens no route, Go 1.27.2 on Debian 12.13, Data tab leftovers, dead install-form branches)
Last updated: 2026-10-16 (v0.323.0 — Debian 13, restic 0.18.1 pinned outside the OS and re-proven, felhom-samba 1.2.0)
> **2026-10-16 (evening) — v0.323.0 RELEASED to the three test boxes ONLY (per-box floors); the GLOBAL floor stays
> 0.322.0 until each test box has made one real night's off-site backup on 0.323.0** (the brief's rule; the check and
> the floor command are in felhom.eu `STATUS.md`). R-1105: runtime `debian:13.7-slim` (digest-pinned), Docker repo
> codename from `/etc/os-release`; restic is the official 0.18.1 release binary from a `restic` build stage (signed
> `SHA256SUMS` + vendored key in `third_party/restic/`, published sum, pinned per-arch sum). Every restic assumption
> re-proven with REAL outputs of 0.14.0 and 0.18.1 (`internal/backup/testdata/restic/`, `TestR1105_*`); the one that
> moved is the forget plan — 0.17+ keeps each group's oldest snapshot while monthly slots are unused (only ever keeps
> more). Removed packages the binary never runs (postgres/mysql clients, sqlite3, fdisk, e2fsprogs, parted, sshpass).
> felhom-samba 1.2.0 (Alpine 3.24.2), and `build-samba-image.sh` refuses a reused tag. Live on demo-hp 9201: both
> restore directions byte-identical on the real store; the drill's data came back; the full restore after a reinstall
> leaves a DB app unusable (old volume, new password — R-1106, not restic). Open: R-1107 (restic 0.18.1's binary adds
> 50 fixable scanner findings; 0.19.1 has 19 — the operator's choice), R-1108 (a share added before the first password
> is not exported). **Decision (CC, inside the brief, reversible):** the packages above were removed though the brief
> named only the two database clients — none is run by the binary (every exec call read), and the image carries fewer
> known holes. Full report: felhom.eu `REPORT-debian13-restic-2026-10-16.md`.
> **2026-10-16 — v0.322.0 RELEASED by CC; the global floor 0.322.0 / MinAgent 0.158.1.** R-970: `/api/config`,
> `/api/config/apply`, `/api/config/hash` are gone; the self-update and geo routes no longer take the box's hub key