From f40fedfbfcd5ec99a8e05c369d444736fcb3f316 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 22 Jun 2026 21:40:11 +0200 Subject: [PATCH] =?UTF-8?q?test=20campaign=20#3:=20Phase=205=20network=20p?= =?UTF-8?q?artitions=20(N1=20tunnel=20block,=20N2=20PBS=20block=20mid-back?= =?UTF-8?q?up=20=E2=80=94=20fail-safe=20+=20unquiesce,=20both=20PASS)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 4.8 (1M context) --- TEST-REPORT.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/TEST-REPORT.md b/TEST-REPORT.md index dc485ed..e53134e 100644 --- a/TEST-REPORT.md +++ b/TEST-REPORT.md @@ -42,7 +42,12 @@ the agent's leaf-cert pin to PVE/PBS, and **agent→DooPlex hub/PBS TLS auth** ( DooPlex). NTP is active on the host. **Not safely isolable to the guest unattended → SKIP.** Proper venue: a dedicated throwaway VM with its own clock, or an injectable-clock unit test. **Deferred to supervised / implementation.** -## Phase 5 — Network partitions — _pending_ +## Phase 5 — Network partitions (guest/host-side timed rules) — **PASS** + +| # | Break (timed-revert) | Result | Evidence | +|---|---|---|---| +| N1 | block cloudflared egress (iptables DOCKER-USER, 130s) | **PASS** | tunnel partitioned: cloudflared `timeout: no recent network activity` + `Retrying connection` (no crash); **apps serve locally** (romm → HTTP 200); controller healthy 25/0. Unblock → `Registered tunnel connection`; no leftover rule. | +| N2 | block agent→PBS `192.168.0.180:8007` mid-quiesce-backup (N100-side OUTPUT rule per §0.1, 150s) | **PASS** | quiesce stopped 14 stacks → `[quiesce] backup job failed` (vzdump phase=failed, clean error) → `[quiesce] unquiescing (backup failed): restarting 14 stack(s)` (**fails safe, no stack stranded**). Unblock → next PBS backup `success:true`; 25/0; no leftover rule. (Rule was N100-side; DooPlex untouched.) | ## Phase 6 — Input/security fuzzing [HIGH SEV] — _pending_ ## Phase 7 — Brutal recovery — _pending_