admin/felhom-controller
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

v0.343.0 released (global floor 17:53:42 UTC on the operator's yes): CHANGELOG header, REPORT
gates / gates (push) Successful in 1m27s
Details

Browse Source
This commit is contained in:
authentik Default Admin
2026-10-25 19:02:08 +01:00
parent e2a976198d
commit fe9837708a
2 changed files with 36 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+1 -1
View File
@@ -1,4 +1,4 @@
## v0.343.0 (2026-10-25) — a restore tells the truth, downloads first and never touches an earlier install's backup; the line test for a box that seeds all day (R-1250, R-1251–R-1253, R-1269–R-1271, R-1279; D47, D48, D49 = A) — tag pushed; global floor after the operator's yes
## v0.343.0 (2026-10-25) — RELEASED on the operator's yes (attended release run; image sha256:bb3da72a…, from `e2a9761`, CI 2330; global floor 17:53:42 UTC, MinAgent 0.158.1) — a restore tells the truth, downloads first and never touches an earlier install's backup; the line test for a box that seeds all day (R-1250, R-1251–R-1253, R-1269–R-1271, R-1279; D47, D48, D49 = A)
**MinAgent: 0.158.1** (unchanged): an agent before 0.165.0 never reports `waiting_for_quiet`, so nothing is held. Attended
brief 2026-10-24, Part 4 (commit only; the release rides the next normal train). Design: felhom.eu `08` §9.
REPORT.md
+35 -22
View File
@@ -1,33 +1,46 @@
# REPORT — a backup is never changed by a new install, a restore downloads first, a restore tells the truth (2026-10-25, unattended; commit only, NOT released)
# REPORT — controller v0.343.0 released (2026-10-25, attended release run)
Brief: operator rulings D47 and D48 (2026-10-25 08:38); fix R-1269, D48, R-1270, R-1271; red-proof each; live-prove on
9202; nothing released — rides v0.343.0 (MinAgent 0.158.1 unchanged). Full record: felhom.eu
`documentation/audits/restore-truth-2026-10-25/README.md`.
**Plain words first.** Every box now runs 0.343.0. A restore whose app does not start says so and keeps both the
restored data and the old copy (operator ruling D49 = A); the old copy goes only after the app ran stably for 3 more
minutes. A `.fab` import that cannot download its version refuses before it touches the app. A reinstall never writes
into the old backup — it sets it aside whole, and now tells the operator. Full record: felhom.eu
`REPORT-release-2026-10-26.md` and `documentation/audits/release-2026-10-26/`.
## What changed (each commit pushed; CI green by hash)
## Commits (each pushed, CI green by hash)
| commit | CI job | what |
|---|---|---|
| `02daebe` | 2311 | **D47 / R-1269:** `stacks.AppConfig.InstallID`; `backup/unit_owner.go` — every unit writer sets another install's unit aside whole (`backups/set-aside/<app>/<stamp>`, a kept copy kind `unit`); the restore page „Visszaállítás" on it (`POST /backup/kept/restore`); remove with backups deletes it |
| `b680db8` | 2312 | **R-1270:** `backup/restore_verdict.go` — `ErrRestoreNotStarted` on every restore path; undo copy kept; late-start watcher; one operator line |
| `2d71270` | 2313 | **D48:** `backup/restore_pull.go` — `prepareRestoreImages` before the stop on every restore path, under `dockerexec.HoldImageWork` |
| `bd9f4f7` | 2314 | **R-1271:** `keptPick` / `KeptNewerAt` — a copy > 10 min in the future is never the newest; alone it is offered, said, not recommended |
| `1f9c863` | 2315 | D47 follow-up (found live): the kept-copies list shows on a box without off-site too |
| `1f82959` | 2316 | R-1270 follow-up (found live): remove with backups deletes `backups/restore-undo/<app>` |
| `7720439` | 2319 | D49 = A follow-ups: fix A (the undo copy only after a stable start; a watch ends only for a newer restore) and fix B (R-1279: the `.fab` import downloads first) |
| `2149a13` | 2321 | fix A on the page too: the first verdict needs a stable 45 s on every path |
| `35232de`, `1ee0353`, `3a1f09d` | 2322, 2324, 2327 | fix A, found live on 9202: the sampler's DEBUG reasons, Docker's stderr kept, and docker inspect read as JSON (a `-f` template failed on every app without a healthcheck) |
| `935e624` | 2328 | D47 follow-up: a set-aside tells the operator once (`backup_run_failures`, leg `unit-set-aside`, own run id) |
| `e2a9761` | 2330 | v0.343.0 release header; README (fix A, fix B, the D47 line) |
## Red-proofs (each test seen failing with its fix switched off)
## Red-proofs (felhom.eu `audits/release-2026-10-26/redproof/`)
felhom.eu `audits/restore-truth-2026-10-25/redproof/`: `d47-guard-off.txt` (6 of 8 fail), `d47-stacks-adopt-off.txt`,
`d47-web-form-off.txt`, `d47-kept-list-without-offsite.txt`, `r1270-warn-only.txt` (3 of 5), `r1270-web.txt`,
`d48-no-prepull.txt` (5 of 6), `r1271-future-ignored.txt` (4), `remove-undo-copy-before.txt`.
`fixA-first-sample.txt`, `fixA-own-restore-race.txt`, `fixA-page-verdict.txt`, `fixB-no-prepull.txt`,
`d47-setaside-notify.txt` — each test seen failing with its fix switched off.
## Live proofs (9202, `0.343.0-rc.1` then `-rc.2`; back on 0.342.0 at the end)
## Live proofs
Before on 0.342.0 (= `e1613ae` for these files): the kept unit rewritten, the restore `ok: true` over `starting`, 44 + 23
password errors. After: Tandoor and AdventureLog — set aside byte for byte, restored with the old password, the item
back, 0 errors; Vikunja — an unpullable pin refused with the container never restarted, an exiting image recorded
`not_started`; RomM — the own copy chosen over a forged future-dated one, which alone was offered and marked.
- **9202, rc.6:** an image that exits after 20 s → „még nem indult el", the copy kept, one operator line; the original
unit back → success, the copy released 3 min later. A `.fab` with a missing tag → refused with the D48 sentence,
containers and volumes untouched.
- **9202, rc.7:** a reinstall's set-aside raised the operator event in the same second; the set-aside restore brought
the account back.
- **Release build on Tester 1:** a unit restore and a set-aside (kept-data) restore — the item back each time, „ran
stably for 3m0s … the restore copy is released" each time; Tandoor removed through the product, nothing left.
- **Upgrade (D47):** install ids recorded at start — Tester 1 3/3, demo-felhom 5/5, demo-hp 11/12 (kimai held since
2026-10-14, R-1286); 0 units set aside. Three boxes: 0 ERROR lines, all containers up, https-only green.
## Not done here, filed
## Rollout
R-1278 (a volume app's reinstall does not offer its kept backup), R-1279 (the `.fab` import removes volumes before its pull).
rc.6/rc.7 on 9202 → `0.343.0` pushed (`sha256:bb3da72a…`) → per-box floors on Tester 1, demo-hp, demo-felhom (all
three on 0.343.0 at 17:17 UTC) → the operator's yes → global floor 17:53:42 UTC, MinAgent 0.158.1, read back in the hub
log. MinAgent unchanged (an agent before 0.165.0 never reports `waiting_for_quiet`, so the line hold stays idle).
## Found, filed (felhom.eu register)
R-1287 (a set-aside mails „failed to back up"), R-1288 (a set-aside restore leaves the reinstall's unit for the next
writer — a second kept copy and alarm), R-1286 (demo-hp kimai held since 10-14). R-1261 (three line-hold edges) acts only
on a box with agent ≥ 0.165.0.