 demo-felhom-8363b5 — Felhom Hub Felhom Hub Dashboard Customers Apps Hosts System Offsite Configuration ← Hosts demo-felhom-8363b5 KIKAPCSOLVA Host ID demo-felhom-8363b5 Customer Demo Ügyfél Agent Version 0.155.0 Enrolled 87d ago Last Report 2h ago Power Kikapcsolva a háztartás által, 2026-10-13 18:52 UTC — riasztás szünetel eddig: 2026-10-27 18:52 UTC Box connection last connected 2026-10-13 18:55 UTC (1h ago) Desired Generation 21 Vitals CPU 0% Memory 14% Disk (root fs) 33% Cloudflared running (connected) Guests 1/2 running Guests VMID Name Status Controller Last Seen 9201 demo-felhom running — 2h ago 990000 CT990000 stopped — 71d ago Storage Targets Name Role Type State Fill Thin Pool SMART Temp Wear felhom-backup — local-dir attached 1% — PASSED 34°C — felhom-pbs — pbs attached 0% — UNKNOWN — — local — local attached 33% — PASSED 34°C — local-lvm — lvmthin attached 15% 15% UNKNOWN — — Capabilities Capability Status Feature / reason controllerswap-image-inspect critical ok controller-swap / managed auto-update controllerswap-inspect critical ok controller-swap / managed auto-update controllerswap-read critical ok controller-swap / managed auto-update controllerswap-restart critical ok controller-swap / managed auto-update controllerswap-write critical ok controller-swap / managed auto-update disk-blkid critical ok disk data-bearing classify (format gate) disk-lsblk critical ok disk topology read (format gate) disk-lvs ok thin-pool usage read disk-mkfs-ext4 critical ok guarded format (ext4) disk-mkfs-xfs ok guarded format (xfs) disk-smart ok disk SMART health read dnsmasq-enable ok dnsmasq enable dnsmasq-guest-domain ok guest domain discovery dnsmasq-guest-ip ok guest LAN IP discovery dnsmasq-install ok dnsmasq package install dnsmasq-reload ok dnsmasq reload dnsmasq-restart ok dnsmasq restart (LAN-DNS self-heal) dnsmasq-rm ok dnsmasq drop-in remove (decommission) dnsmasq-write ok dnsmasq drop-in write (root content check, R-861) drive-bind critical ok drive attach (felhom-data bind under parent) drive-umount critical ok drive detach (fail-closed unmount) drives-chown-data ok felhom-data guest-root chown drives-mkdir-data ok felhom-data namespace create drives-mkdir-parent ok stable parent dir create drives-mkdir-sub ok per-drive stable dir create escrow-ceremony critical ok customer recovery-code ceremony (controller-driven) guest-fstrim ok weekly guest disk trim (thin-pool reclaim, R-444) guest-init-pid critical ok drive-gate guest-sees check (multi-drive concurrency) guest-reboot ok enroll activate-binds reboot guest-shutdown ok household power-off: guest shutdown (R-998) guesthook-delete-mp ok dead mountpoint slot delete (C1 net) guesthook-register ok pre-start hook register guestnet-dhclient-probe ok guest DHCP-client liveness probe guestnet-heal ok guest DHCP-client restart (the 2026-07-20 heal) guestnet-ifaces ok guest interface-mode read guestnet-route ok guest default-route probe host-poweroff ok household power-off: host power-off (R-998) mount-daemon-reload ok systemd reload after unit write mount-unit-disable ok mount unit disable mount-unit-enable ok mount unit enable mount-unit-install ok fs-UUID mount unit install (root content check, R-861) mount-unit-stop ok mount unit stop netmount-reset-failed ok NAS automount re-arm after start-limit (F10) netmount-rmdir ok removed-share mountpoint cleanup (F1) osapply-run ok OS update wrapper (guest fast lane) parent-bind-mp8 ok parent bind into guest at provision parent-make-private critical ok intermediary shared-parent peer-group isolation parent-make-shared critical ok intermediary shared-parent propagation parent-self-bind critical ok intermediary shared-parent self-bind parent-unit-enable ok shared-parent boot-persistence enable pbsdr-create ok PBS DR storage-entry create (K autogen) pbsdr-grant ok PBS DR storage ACL self-grant pbsdr-read ok PBS DR credential read (verify-loop auth probe) pbsdr-reconcile ok PBS DR storage-entry reconcile (set-only) provision-chown ok bootstrap mount guest-root chown provision-config-mount ok bootstrap config bind mount provision-onboot ok customer guest autostart (onboot) pve:pool-read ok stale-lock recovery scoping (pool ownership check) pve:store-grant:felhom-backup critical ok backup tier felhom-backup readable by the agent (archive listing, restore-test candidacy) pve:store-grant:felhom-pbs critical ok backup tier felhom-pbs readable by the agent (archive listing, restore-test candidacy) selfheal-networking-start ok appliance networking recovery at boot (F12 defense in depth) selfupdate-commit ok agent self-update commit selfupdate-rollback ok agent self-update rollback stalelock-unlock critical ok reboot-during-backup stale-lock recovery wg-conf-install critical ok wg-felhom conf install (root content check, R-861) wg-disable ok wg-quick@wg-felhom disable (revocation) wg-enable critical ok wg-quick@wg-felhom enable wg-handshake-read critical ok tunnel handshake-age read wg-restart critical ok wg-quick@wg-felhom restart (conf change) wg-tools-install ok wireguard-tools package install Diagnostics — Log Bundles Pull-based: the box ships its debug ring on its own next cycle — controller ≤ one report interval (~15 min), agent ≈ one heartbeat. The pull is recorded in the box's own log (customer-visible). Bundles expire after 72 h. Request controller logs Request agent logs No log bundles. Use the request buttons above — the box delivers on its next cycle. Operator Actions The box acts on its next report reply (usually seconds, at most one report interval) and answers on the report after that. Each press runs once. Recorded in the box's own log and in Events. Unanswered after a day: expired. Run off-site backup now disk-health-check fill-watch offsite-integrity offsite-proof Run check now Stop deletion countdown Extend countdown (days from now) No operator actions for this box yet. Network WireGuard 10.77.0.2 confirmed Interface Address tailscale0 100.70.170.35/32 tailscale0 fd7a:115c:a1e0::5236:aa24/128 vmbr0 192.168.0.162/24 Every routable address the box holds, as the kernel sees it. Loopback and link-local are excluded — including the 169.254.253.1 local-API island, which is identical on every box. The PVE web console is at https://<the LAN address>:8006 . Guest network healthy Guest State Address Route dhclient Repairs (1h) 9201 healthy 192.168.0.149 (dhcp) yes yes 0 Last swept 2026-10-13T18:52:31Z. One row per owned running guest the watchdog has probed. DR / Backup DR Recipe present Key Escrow present · 3 superseded escrow blob(s) retained Last full check (off-site) OK, depth 100%, 2026-10-11 04:00 UTC Console access User root@pam Password set 87d ago •••••••••••••••• Reveal Copy Break-glass credential for the PVE web console at https://<host-ip>:8006 (realm: Linux PAM standard authentication). Copy puts it straight on the clipboard without showing it; Reveal displays it for 60 s. Either one is recorded on the customer's event timeline. Last vaulted value — if root@pam was changed on the box without re-vaulting, this is stale. Danger zone Removing this host deletes its reports, guests, log bundles and WireGuard peer, and permanently invalidates its API key — a still-running agent would receive 401s. Re-enrollment requires the Day-0 passphrase flow. Remove host… … Move key escrow to retained custody (required when escrow present) + remove DR bundle for this host Type the host id to confirm: Confirm & remove Cancel Felhom Hub 0.149.0 