Stray-copy fix: the copy container runs with --no-healthcheck (the image's controller health check showed it as starting on the 9202 proof); unreleased

controller/internal/backup/r1214_capped_copy_test.go

@@ -48,7 +48,7 @@ func TestR1214_MntPathsAreCopiedCapped(t *testing.T) {
 		t.Fatalf("docker calls = %d, want 1", len(rec.calls))
 	}
 	got := strings.Join(rec.calls[0], " ")
-	for _, want := range []string{"run --rm", "--memory 512m", "--memory-swap 512m", "--network none", "--pull never",
+	for _, want := range []string{"run --rm", "--memory 512m", "--memory-swap 512m", "--network none", "--pull never", "--no-healthcheck",
 		"--mount type=bind,src=" + src + ",dst=" + src + ",readonly", "--mount type=bind,src=" + dst + ",dst=" + dst + " ",
 		"--entrypoint rsync gitea.dooplex.hu/admin/felhom-controller:9.9.9 -a --delete " + src + "/ " + dst + "/"} {
 		if !strings.Contains(got, want) {

controller/internal/backup/tier2.go

@@ -808,7 +808,7 @@ func rsyncMirror(src, dst string) error {
 			args := append([]string{"run", "--rm", "--name", name, "--label", tier2CopyLabel + "=1",
 				"--label", tier2CopyAppLabel + "=" + tier2DockerSafe(app),
 				"--memory", tier2CopyMemCap, "--memory-swap", tier2CopyMemCap,
-				"--network", "none", "--pull", "never",
+				"--network", "none", "--pull", "never", "--no-healthcheck", // the image's controller health check means nothing here
 				// --mount (not -v): a path the daemon does not see is REFUSED (exit 125 → the in-process copy) instead of
 				// created empty — an empty source would let `--delete` empty the copy (review 2026-10-22 night, C4).
 				"--mount", "type=bind,src=" + s + ",dst=" + s + ",readonly", "--mount", "type=bind,src=" + d + ",dst=" + d,