R-1214: the second-drive copy runs in a 512 MB memory-capped container for /mnt paths (its page cache no longer evicts the apps) — measured on 9202; guarded against a path the daemon sees differently; unreleased

2026-10-22 17:45:47 +02:00
parent d5f88a2182
commit 03c0a693b8
4 changed files with 177 additions and 1 deletions
@@ -14,6 +14,12 @@ ROOTS = ["internal", "cmd"]

 # (file suffix, substring that must appear on the "-v" line, why it is safe)
 ALLOWLIST = [
+    ("internal/backup/tier2.go", '"-v", s + ":" + s + ":ro", "-v", d + ":" + d',
+     "R-1214 (2026-10-22): the second-drive copy's memory-capped rsync container. Reached ONLY when both paths pass "
+     "tier2CappedPath — under /mnt/, which the golden deployment bind-mounts into the controller at the IDENTICAL "
+     "path (container-inspect on 9202 2026-10-22: /mnt -> /mnt) — so the daemon resolves them correctly; every other "
+     "path (the controller's own data volume) takes the in-process rsync. Pinned by "
+     "TestR1214_APathOutsideMntNeverGoesToDocker"),
    ("internal/appbackup/dbdump.go", '"psql", "-v"',
     "psql's own -v flag (ON_ERROR_STOP) — not a docker mount at all"),
    ("internal/appexport/estimate.go", '"-v", volumeName+":/vol:ro"',