admin
df78b6caae
gates / gates (push) Successful in 1m51s
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
31 lines
2.8 KiB
Markdown
31 lines
2.8 KiB
Markdown
# REPORT — night 2026-10-22: four fixes on `main`, not released
|
|
|
|
**What:** the night brief's controller parts. Nothing released (the brief forbids a controller release tonight).
|
|
Design read: `07-backup-architecture.md` §6.1.1 (catch-up), §6.2 (capture set), §10.2; `09` §6.5 (drill catalog).
|
|
Next release **0.340.0**, **MinAgent 0.158.1** (unchanged).
|
|
|
|
- **R-49 (operator D21 = B), `6a17c95`.** `.felhom.yml` `backup.volumes: [{name, class: excluded}]` leaves a named
|
|
volume out of every backup (`appbackup.ExcludedDockerVolumes` → `backup.Manager.dumpableVolumes`); declared names
|
|
only, a list that would exclude every named volume is refused whole. Red-proved (`TestR49_*`, both packages) and
|
|
the R-591 deep-copy alias test caught a shared slice (fixed in `deepCopyStack`). 9202: Immich unit
|
|
1 160 553 832 → 336 788 031 B; with the cache volume removed Immich's ML answered after 9.2 s.
|
|
- **R-1187 (c), `d5f88a2`.** A `.fab` import over an installed app that is not running merged the old volume data with
|
|
the bundle's. Reproduced on 9202 rc.1 (a marker written after the export survived the import; the running control
|
|
replaced it); now refused with a Hungarian sentence, the app untouched (rc.2: markers unchanged; the running path
|
|
still replaces). Red-proved (`r1187c_test.go`). Evidence felhom.eu `audits/night-2026-10-22/P3-candidates/r1187c-9202.txt`.
|
|
- **R-1189 (d), `d5f88a2`.** The off-site proof (05:30) and integrity check (06:00) never ran on a box that is off
|
|
then. `nightchain.CatchUp.After` now runs both once after the catch-up's legs; the false comment in `main.go`
|
|
corrected. Red-proved (`nightchain/r1189d_test.go`, `cmd/controller/r1189d_wiring_test.go`).
|
|
- **R-1214, `03c0a69` + `ae39467`.** The 03:30 second-drive copy's page cache pushed the apps out of memory.
|
|
`rsyncMirror` runs rsync in a 512 MB memory-capped container of the controller's own image, only for clean `/mnt/`
|
|
paths with no symlink (a security review found the symlink case; fixed and tested). 9202 (4 GB, 1.8 GB held, 6 GB):
|
|
full stall 5.7 / 2.5 s → 0.37 / 0.32 s; peak „full" 16.8 / 6.9 % → 0.9 / 1.0 %. A real `POST /api/backup/tier2` on
|
|
rc.4: 6 capped containers, each exit 0; Immich's copy equals its source (0 differences, 44 = 44 files).
|
|
`docker_run_volume_path_gate.py` allow-list entry with its WHY.
|
|
- **Gates:** `controller_gates.py --fast` green before each push; CI by commit — see felhom.eu
|
|
`REPORT-night-2026-10-22.md`.
|
|
- **Teardown (9202):** throwaway uptime-kuma removed through the product (`.fab` deleted); hog container and 19 GB of
|
|
test files removed; memory 25898 MB / swap 512 MB again; Immich's `.felhom.yml` back to its pre-night file; controller
|
|
back on **0.339.0** (healthy); the drill catalog equals live main again. Host: `/tmp/r1214*` removed on demo-hp. Hub:
|
|
9202 has no hub link — nothing.
|