1407 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	321df1f87a	README §8e + REPORT: R-1250 hold, live proof on demo-hp	2026-10-24 13:48:15 +02:00
admin	046b808792	upwatch: hold a seeding torrent app for one line test, then put its limit back exactly (R-1250) ... When the agent waits for quiet and qBittorrent or Transmission runs: record the limit first, hold at 1 KiB/s, ask the agent for a test on request, put the old limit back (deferred; a household change during the test stays). Start-up puts back a limit a killed controller left; the 50 % rule skips while a hold record exists. Commit only.	2026-10-24 13:19:07 +02:00
admin	bddc477e22	CHANGELOG: v0.342.0 released (the upload and CPU watch, the tested line, qBittorrent's limit); REPORT	2026-10-24 10:28:53 +02:00
admin	42cda07b42	v0.342.0 (unreleased): the watch's start line no longer says the line is learnt only from the off-site push	2026-10-24 09:58:13 +02:00
admin	ed1011b088	v0.342.0 (unreleased): the upload watch reads the host's weekly line test (GET /host/line-test, agent >= 0.164.0); qBittorrent's limit = 50 % of the TESTED line only (D41), the watch uses the higher of test and push floor, the system page names the source; red-proved	2026-10-24 08:59:57 +02:00
admin	60e487db51	docs: v0.342.0 (unreleased) — CONTEXT note and REPORT for the upload watch; live proofs on scratch 9202	2026-10-23 22:56:39 +02:00
admin	a9c1997fbc	v0.342.0 (unreleased): the upload and CPU watch — an app that sends or burns far more than its own numbers explain is one operator-only alarm; the line learnt from the off-site push; qBittorrent's default upload limit (never over the household's) ... internal/upwatch: exact per-container counters from the Docker Engine API, per-app judging (upload >= max(5 Mbit/s, 25% of the line) for 15 min; CPU >= max(150%, 50% x cores) for 30 min), explainers qBittorrent / Transmission / Plex, app_unexplained_upload / app_unexplained_cpu + _cleared (hub 0.169.0). The off-site push is sampled once a second for the line (a lower bound). qBittorrent limit = 50% of the line, the household's limit always wins. 20 red-proofs. Spike + design: felhom.eu audits/SPIKE-upload-watch-2026-10-23.md, architecture/08 section 9. Not released.	2026-10-23 21:26:09 +02:00
admin	277e99839d	docs: v0.341.0 released — global floor 11:24 UTC on the operator's yes, MinAgent 0.158.1; the live proofs in REPORT (no code change) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-23 13:30:54 +02:00
admin	63dcccfeec	v0.341.0: the night update takes a security_fix ladder step (D39 = B, 09 §3 decision 255, R-1239); every other leg guard unchanged; the leg names the CVE ids; MinAgent 0.158.1 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-23 13:09:52 +02:00
admin	32e61d5d1d	REPORT: day 2026-10-23 — controller 0.340.0 released (floor 06:41 UTC, MinAgent 0.158.1)	2026-10-23 11:07:44 +02:00
admin	caaa86eb3c	v0.340.0: release — the capped night copy that never outlives the controller (R-1214 + stray-copy fix), Immich's model cache out of backups (R-49), no import over a stopped app (R-1187 c), the catch-up checks (R-1189 d, C5); MinAgent 0.158.1	2026-10-23 08:19:45 +02:00
admin	23f77f93ba	night 2026-10-23 docs: CONTEXT (0.340.0 candidate), REPORT (both review rounds, rc.8 re-proof), the OffsiteStateAwaitingRecoveryKey comment corrected (its hub claim was measured false: felhom.eu R-1230); no behaviour change	2026-10-23 00:05:34 +02:00
admin	1babfe94f6	Second-drive copy: two races closed — the start-up/retry removal holds the destination's lock (a copy this process starts is never removed), and a run records itself in one step with the restore check, every leg asking again; red-proved, race-clean; unreleased	2026-10-22 22:58:33 +02:00
admin	9d9e4041c9	Second review of the night's own code: a stray clears when a later removal works (N2), the start-up check never removes this process's own copy (N3), one copy per destination at a time (N4), RunTier2 refuses during a restore for every caller (N5), the import refusal no longer advises removal (N9); red-proved, race-clean; README; REPORT; unreleased	2026-10-22 22:45:42 +02:00
admin	943c517550	Review fixes for 0.340.0: C5 a catch-up releases the whole-guest backup when its backup legs end (red-proved); C3 the R-1187 c refusal text fits an unhealthy app; C6 two comments; C8 README backup.volumes wording; unreleased	2026-10-22 21:25:48 +02:00
admin	912e59210d	Stray-copy fix: the copy container runs with --no-healthcheck (the image's controller health check showed it as starting on the 9202 proof); unreleased	2026-10-22 20:39:05 +02:00
admin	66a69d4954	Stray-copy fix: the capped second-drive copy container never outlives the copy — fixed name + label, removed by name on any error (the timeout included), every leftover removed at start before the scheduler and web server; a restore is refused while a copy runs or may still run; --mount (refuses a path the daemon does not see) and the image ID with --pull never (review); red-proved; unreleased	2026-10-22 20:20:35 +02:00
admin	df78b6caae	night 2026-10-22: README (backup.volumes excluded, the capped second-drive copy), CONTEXT, REPORT — four fixes on main, not released (0.340.0 next) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-22 18:11:45 +02:00
admin	ae394670c1	R-1214: the capped copy refuses any path with a symlink in it (security review: a link under /mnt pointing outside resolves elsewhere for the daemon); red-proved; unreleased	2026-10-22 17:51:14 +02:00
admin	03c0a693b8	R-1214: the second-drive copy runs in a 512 MB memory-capped container for /mnt paths (its page cache no longer evicts the apps) — measured on 9202; guarded against a path the daemon sees differently; unreleased	2026-10-22 17:47:19 +02:00
admin	d5f88a2182	R-1187 (c): refuse a .fab import over an installed app that is not running (it merged old and bundle data); R-1189 (d): the off-site proof + integrity check run after a catch-up; unreleased	2026-10-22 17:27:56 +02:00
admin	6a17c95815	R-49 (D21 = B): a template may exclude a named volume from every backup (backup.volumes, class excluded) — Immich's model cache; guarded, red-proved; unreleased	2026-10-22 16:21:38 +02:00
admin	cbc944c3c0	REPORT: v0.339.0 released (R-1199 reopened, R-1216)	2026-10-22 13:15:42 +02:00
admin	fc5a20f40a	v0.339.0: release — the household's mail list never overwritten (R-1199 reopened), the swap sentence only when swap is really short (R-1216); MinAgent 0.158.1	2026-10-22 12:57:24 +02:00
admin	add310c80a	R-1199 reopened: a box with no list of its own reads the household's from the hub and adopts it, pushes its default once only when no household saved one; every push names its source; an empty saved list stays empty; R-1216 (D28 = A): the install page's swap sentence only when host swap is really short (shared case table); unreleased	2026-10-22 12:13:26 +02:00
admin	08fa440d04	REPORT: v0.338.0 released (operator yes 2026-10-22): 3 test boxes through the floor, checks green, global floor set	2026-10-22 10:39:43 +02:00
admin	7900a32695	v0.338.0: release (operator yes 2026-10-22) — D22 restore put-back, first-hour words, swap sentence, R-1199; MinAgent 0.158.1	2026-10-22 09:51:27 +02:00
admin	1de8a559ed	REPORT: the night of 2026-10-21 (D22, words, R-1199; rc.2), unreleased	2026-10-22 00:06:36 +02:00
admin	f0abdd0eda	CHANGELOG: blank line before v0.337.0	2026-10-21 23:41:10 +02:00
admin	ba22f9b2d9	R-1199: a box whose household never saved its notification choice pushes the default list its page shows at start, so the hub mails by it; unreleased	2026-10-21 23:40:21 +02:00
admin	5776d54901	W21 sharing switched on without a password asks for it and says why it waits; W25 failed off-site run shows the household a sentence built from the classifier, raw text only to log and operator; W28 share restore skips the controller's drop-zone share; unreleased	2026-10-21 23:19:07 +02:00
admin	28b05d6d68	W13 new-drive pages pre-fill the next free hdd_N and answer a bad name visibly; W14 drive operator detail behind Részletek; W29 plain decommission names no move; unreleased	2026-10-21 22:51:08 +02:00
admin	8c1e290f63	W12 family names keep their accents, login made without them; W9 banner link colour; W10 recovery-code page one plain line; W11/W24 remote page hides provider login and key fields behind Haladó; unreleased	2026-10-21 22:35:24 +02:00
admin	37b79caad9	install page: say when the host has too little swap behind the guest (R-1192 follow-up); restore record log says when a cut restore was put back; unreleased	2026-10-21 22:11:16 +02:00
admin	d582feb245	D22: every restore puts the data back exactly on failure and after a power cut (R-1177, R-1195); whole restore asks the unit first (R-1178); no mirror during a restore (R-1180); W22 restore refusals in Hungarian; unreleased	2026-10-21 21:19:46 +02:00
admin	7848d4aaac	CHANGELOG: v0.337.0 (MinAgent 0.158.1)	2026-10-21 15:58:43 +02:00
admin	5929b8e345	kept second-drive copies (D25: R-1175, R-1181, R-1179); .fab import keeps the family gate (R-1191); stale restore temp (R-1188 c); the overcommit sentence made true (R-1192); escrow before the floor (R-1176); unreleased	2026-10-21 15:46:10 +02:00
admin	8f5bea0148	R-1182: a finished off-site abandonment closes on the hub's abandon_purge_done (hub v0.163.0 keeps other copies' packages); unreleased	2026-10-21 13:36:12 +02:00
admin	01c967e49e	monitoring page: storage labels follow the reader's language (W26, rehearsal 2026-10-20); unreleased	2026-10-20 22:36:19 +02:00
admin	7ca59e2de3	CHANGELOG + CONTEXT: v0.336.0 release line (the previous commit carried only REPORT)	2026-10-20 10:58:00 +02:00
admin	aa9e09e817	CHANGELOG + CONTEXT + REPORT: v0.336.0 released (floor 08:54 UTC, MinAgent 0.158.1) after the 9202 proof and the three test boxes	2026-10-20 10:56:59 +02:00
admin	93fb251ea9	R-893 option A (operator D20): a failed off-site restore puts the app's live volumes and definition back exactly and starts it; fit check before the stop; the held sentence made true (R-1169)	2026-10-20 09:17:00 +02:00
admin	ae2bfb2f7a	REPORT: the security-scan gate (R-986)	2026-10-19 21:48:13 +02:00
admin	a03c25aa1f	security-scan gate (shared felhom.eu/scripts/security_scan_gate.py) in the fast set and CI, warn-first, with the accepted-hits file and decoys (R-986)	2026-10-19 21:11:31 +02:00
admin	c4b3b0a039	REPORT: v0.335.0 is the floor (R-921)	2026-10-19 20:40:07 +02:00
admin	15ea002458	v0.335.0: no app stop for a tier the agent will refuse because its host is busy (host_busy pre-check, R-921)	2026-10-19 20:05:52 +02:00
admin	db980ff2cc	REPORT: v0.334.0 is the floor (R-1159)	2026-10-19 16:33:58 +02:00
admin	546eef37bd	v0.334.0: a live box refreshes its config with its own hub key (GET /box-config; R-1159, operator D19)	2026-10-19 15:55:10 +02:00
admin	e1a2abf1e3	REPORT: v0.333.0 is the floor (R-1155, R-1161)	2026-10-19 12:16:57 +02:00
admin	a6fa3c01d2	v0.333.0 (unreleased): the R-1155 check reads every token source FileBrowser reads, Basic auth included (security review)	2026-10-19 11:43:52 +02:00