felhom-controller

admin/felhom-controller

Fork 0

Commit Graph

Author	SHA1	Message	Date
admin	c48f95fe06	v0.66.0: userdata layout + shared-storage ownership convention appbackup/userdata.go: EnsureUserdataDir (MkdirAll + explicit setgid Chmod 2775 + chown gid 1000), UserdataSkeleton, EnsureUserdataSkeleton; linux chown/StatGID + non-linux stubs. stackEnv injects USERDATA_PATH=<HDD_PATH>/userdata. Skeleton pre-created on register + FileBrowser sync; deploy belt (composeExecCustomEnv on 'up') pre-creates every ${USERDATA_PATH} bind source. FileBrowser mounts userdata (was appdata) — uid 1000 can now write into 2775 setgid. #8: migrate merge walk + copyFile preserve source setgid+group so the convention survives MigrateAll. Non-hollow tests incl. Linux setgid assertions + migration-preserve companion. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-14 21:58:49 +02:00
admin	5a80739799	fix(CTRL-T2-1,H10): crash-safe deploy state + fail-closed secret encryption deploy.go, one slice (both edit SaveAppConfig / the deploy goroutine): CTRL-T2-1 (ghost-deployed on crash): DeployStack wrote app.yaml Deployed:true to disk BEFORE the async 'docker compose up -d'; a crash during the image-pull window left a ghost-deployed stack (Deployed:true, no containers) that DeployStack then refused to redeploy. Now the env is persisted with Deployed:false (transitional), and Deployed:true is written by runComposeDeploy ONLY after up -d succeeds. In-memory Deployed stays true during the pull to preserve the no-stale-Telepítés-button UX. On a post-success save failure, revert so the stack is redeployable. H10 (plaintext secret on encrypt failure): SaveAppConfig logged a WARN then fell through to persist the secret in PLAINTEXT. Now fail-closed: return an error on crypto.Encrypt failure, never write plaintext. Callers already propagate it. Regression tests: H10 fail-closed (+ good-key encrypts) and the CTRL-T2-1 transitional durable-state contract (transitional reads not-deployed). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-13 19:13:58 +02:00

Author

SHA1

Message

Date

admin

c48f95fe06

v0.66.0: userdata layout + shared-storage ownership convention

appbackup/userdata.go: EnsureUserdataDir (MkdirAll + explicit setgid Chmod 2775 +
chown gid 1000), UserdataSkeleton, EnsureUserdataSkeleton; linux chown/StatGID +
non-linux stubs. stackEnv injects USERDATA_PATH=<HDD_PATH>/userdata. Skeleton
pre-created on register + FileBrowser sync; deploy belt (composeExecCustomEnv on
'up') pre-creates every ${USERDATA_PATH} bind source. FileBrowser mounts userdata
(was appdata) — uid 1000 can now write into 2775 setgid. #8: migrate merge walk +
copyFile preserve source setgid+group so the convention survives MigrateAll.
Non-hollow tests incl. Linux setgid assertions + migration-preserve companion.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 21:58:49 +02:00

admin

5a80739799

fix(CTRL-T2-1,H10): crash-safe deploy state + fail-closed secret encryption

deploy.go, one slice (both edit SaveAppConfig / the deploy goroutine):

CTRL-T2-1 (ghost-deployed on crash): DeployStack wrote app.yaml Deployed:true to
disk BEFORE the async 'docker compose up -d'; a crash during the image-pull
window left a ghost-deployed stack (Deployed:true, no containers) that DeployStack
then refused to redeploy. Now the env is persisted with Deployed:false
(transitional), and Deployed:true is written by runComposeDeploy ONLY after up -d
succeeds. In-memory Deployed stays true during the pull to preserve the
no-stale-Telepítés-button UX. On a post-success save failure, revert so the stack
is redeployable.

H10 (plaintext secret on encrypt failure): SaveAppConfig logged a WARN then fell
through to persist the secret in PLAINTEXT. Now fail-closed: return an error on
crypto.Encrypt failure, never write plaintext. Callers already propagate it.

Regression tests: H10 fail-closed (+ good-key encrypts) and the CTRL-T2-1
transitional durable-state contract (transitional reads not-deployed).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-13 19:13:58 +02:00

2 Commits