test campaign #3: Phase 5 network partitions (N1 tunnel block, N2 PBS block mid-backup — fail-safe + unquiesce, both PASS)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-22 21:40:11 +02:00
parent 7187ef6b62
commit f40fedfbfc
1 changed files with 6 additions and 1 deletions
@@ -42,7 +42,12 @@ the agent's leaf-cert pin to PVE/PBS, and **agent→DooPlex hub/PBS TLS auth** (
 DooPlex). NTP is active on the host. **Not safely isolable to the guest unattended → SKIP.** Proper
 venue: a dedicated throwaway VM with its own clock, or an injectable-clock unit test. **Deferred to
 supervised / implementation.**
-## Phase 5 — Network partitions — _pending_
+## Phase 5 — Network partitions (guest/host-side timed rules) — **PASS**
+
+| # | Break (timed-revert) | Result | Evidence |
+|---|---|---|---|
+| N1 | block cloudflared egress (iptables DOCKER-USER, 130s) | **PASS** | tunnel partitioned: cloudflared `timeout: no recent network activity` + `Retrying connection` (no crash); **apps serve locally** (romm → HTTP 200); controller healthy 25/0. Unblock → `Registered tunnel connection`; no leftover rule. |
+| N2 | block agent→PBS `192.168.0.180:8007` mid-quiesce-backup (N100-side OUTPUT rule per §0.1, 150s) | **PASS** | quiesce stopped 14 stacks → `[quiesce] backup job failed` (vzdump phase=failed, clean error) → `[quiesce] unquiescing (backup failed): restarting 14 stack(s)` (**fails safe, no stack stranded**). Unblock → next PBS backup `success:true`; 25/0; no leftover rule. (Rule was N100-side; DooPlex untouched.) |
 ## Phase 6 — Input/security fuzzing [HIGH SEV] — _pending_
 ## Phase 7 — Brutal recovery — _pending_