From 7187ef6b62852d63cb59ef702643ed5c1c4e09ce Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 22 Jun 2026 21:31:33 +0200 Subject: [PATCH] test campaign #3: Phase 4 time chaos SKIP (unprivileged guest shares host clock; host jump risks certs/DooPlex) Co-Authored-By: Claude Opus 4.8 (1M context) --- TEST-REPORT.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/TEST-REPORT.md b/TEST-REPORT.md index 8a2b9fa..dc485ed 100644 --- a/TEST-REPORT.md +++ b/TEST-REPORT.md @@ -32,7 +32,16 @@ handles-or-fails-safe, then recovers. Every break carries a timed auto-revert; P | C1 | deploy + backup + restore + git-sync simultaneously | **PASS** | backup/run + tier2 both single-flighted ("Mentés már folyamatban"); restore mutex'd (302); sync ran independently ("nincs változás"); after settle **no stuck flag** (`running:false`), no deadlock, 25/0 healthy | | C2 | rapid felhom-usb flap ×5 in ~10s | **PASS** | converged → felhom-usb **MOUNTED**, disconnected mark `None` (not stuck); **0 `permission denied`** during the flap; the v0.75 mountpoint-gate fired **5 clean skips** ("not mounted") in the disconnected windows; 25/0 | | C3 | kill `felhom-agent` mid-quiesce-backup | **PASS** | quiesce stopped 14 stacks → agent killed → controller `[quiesce] unquiescing (backup start failed): restarting 14 stack(s)` (clean error + defer-unwind, **no stack stranded**); agent restarted → `/api/disks` OK; **idle sockets→8443 = 1** (v0.74 bound holds); recovered 25/0 | -## Phase 4 — Time chaos — _pending_ +## Phase 4 — Time chaos — **SKIPPED (not safely isolable)** + +T1 (+25h) / T2 (−2h): the guest is an **unprivileged LXC** — it **cannot set its own clock** +(`date -s` → `Operation not permitted`, no CAP_SYS_TIME) and shares the host's `CLOCK_REALTIME` (time +namespaces don't isolate the wall clock). The only way to jump the guest's wall-clock is to change the +**host** (felhom-pve) clock, which would risk: cloudflared tunnel cert time-validation (demo down), +the agent's leaf-cert pin to PVE/PBS, and **agent→DooPlex hub/PBS TLS auth** (§0.1 forbids degrading +DooPlex). NTP is active on the host. **Not safely isolable to the guest unattended → SKIP.** Proper +venue: a dedicated throwaway VM with its own clock, or an injectable-clock unit test. **Deferred to +supervised / implementation.** ## Phase 5 — Network partitions — _pending_ ## Phase 6 — Input/security fuzzing [HIGH SEV] — _pending_ ## Phase 7 — Brutal recovery — _pending_