diff --git a/documentation/audits/morning-2026-10-22/release/01-https-only.txt b/documentation/audits/morning-2026-10-22/release/01-https-only.txt new file mode 100644 index 00000000..8682d689 --- /dev/null +++ b/documentation/audits/morning-2026-10-22/release/01-https-only.txt @@ -0,0 +1,33 @@ +control NEGATIVE (a stub answering 200 over plain http): convicted, as it must (200 -) +== tester-1 (enkicsifelhom.hu): 6 public name(s) + OK control POSITIVE http://felhom.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://felhom.enkicsifelhom.hu/r1033-check?q=1 + OK http://files.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://files.enkicsifelhom.hu/r1033-check?q=1 + OK http://no-such-name-r1033.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://no-such-name-r1033.enkicsifelhom.hu/r1033-check?q=1 + OK http://paperless.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://paperless.enkicsifelhom.hu/r1033-check?q=1 + OK http://paste.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://paste.enkicsifelhom.hu/r1033-check?q=1 + OK http://wiki.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://wiki.enkicsifelhom.hu/r1033-check?q=1 +== demo-hp (enkisfelhom.hu): 14 public name(s) + OK http://arcade.enkisfelhom.hu/r1033-check?q=1 -> 301 https://arcade.enkisfelhom.hu/r1033-check?q=1 + OK http://books.enkisfelhom.hu/r1033-check?q=1 -> 301 https://books.enkisfelhom.hu/r1033-check?q=1 + OK http://docs.enkisfelhom.hu/r1033-check?q=1 -> 301 https://docs.enkisfelhom.hu/r1033-check?q=1 + OK http://felhom.enkisfelhom.hu/r1033-check?q=1 -> 301 https://felhom.enkisfelhom.hu/r1033-check?q=1 + OK http://files.enkisfelhom.hu/r1033-check?q=1 -> 301 https://files.enkisfelhom.hu/r1033-check?q=1 + OK http://gist.enkisfelhom.hu/r1033-check?q=1 -> 301 https://gist.enkisfelhom.hu/r1033-check?q=1 + OK http://ha.enkisfelhom.hu/r1033-check?q=1 -> 301 https://ha.enkisfelhom.hu/r1033-check?q=1 + OK http://no-such-name-r1033.enkisfelhom.hu/r1033-check?q=1 -> 301 https://no-such-name-r1033.enkisfelhom.hu/r1033-check?q=1 + OK http://papir.enkisfelhom.hu/r1033-check?q=1 -> 301 https://papir.enkisfelhom.hu/r1033-check?q=1 + OK http://paste.enkisfelhom.hu/r1033-check?q=1 -> 301 https://paste.enkisfelhom.hu/r1033-check?q=1 + OK http://pdf.enkisfelhom.hu/r1033-check?q=1 -> 301 https://pdf.enkisfelhom.hu/r1033-check?q=1 + OK http://plex.enkisfelhom.hu/r1033-check?q=1 -> 301 https://plex.enkisfelhom.hu/r1033-check?q=1 + OK http://travel.enkisfelhom.hu/r1033-check?q=1 -> 301 https://travel.enkisfelhom.hu/r1033-check?q=1 + OK http://wiki.enkisfelhom.hu/r1033-check?q=1 -> 301 https://wiki.enkisfelhom.hu/r1033-check?q=1 +== demo-felhom (demo-felhom.eu): 8 public name(s) + OK http://felhom.demo-felhom.eu/r1033-check?q=1 -> 301 https://felhom.demo-felhom.eu/r1033-check?q=1 + OK http://files.demo-felhom.eu/r1033-check?q=1 -> 301 https://files.demo-felhom.eu/r1033-check?q=1 + OK http://gist.demo-felhom.eu/r1033-check?q=1 -> 301 https://gist.demo-felhom.eu/r1033-check?q=1 + OK http://no-such-name-r1033.demo-felhom.eu/r1033-check?q=1 -> 301 https://no-such-name-r1033.demo-felhom.eu/r1033-check?q=1 + OK http://prowlarr.demo-felhom.eu/r1033-check?q=1 -> 301 https://prowlarr.demo-felhom.eu/r1033-check?q=1 + OK http://radarr.demo-felhom.eu/r1033-check?q=1 -> 301 https://radarr.demo-felhom.eu/r1033-check?q=1 + OK http://sonarr.demo-felhom.eu/r1033-check?q=1 -> 301 https://sonarr.demo-felhom.eu/r1033-check?q=1 + OK http://torrent.demo-felhom.eu/r1033-check?q=1 -> 301 https://torrent.demo-felhom.eu/r1033-check?q=1 +== every public name redirects http -> https diff --git a/documentation/audits/morning-2026-10-22/release/02-containers.txt b/documentation/audits/morning-2026-10-22/release/02-containers.txt new file mode 100644 index 00000000..242346a7 --- /dev/null +++ b/documentation/audits/morning-2026-10-22/release/02-containers.txt @@ -0,0 +1,3 @@ +10 0 0 gitea.dooplex.hu/admin/felhom-controller:0.338.0 Up 9 minutes (healthy) ← root@192.168.0.154 (containers, unhealthy+restarting, controller) +24 0 0 gitea.dooplex.hu/admin/felhom-controller:0.338.0 Up 9 minutes (healthy) ← demo-hp (containers, unhealthy+restarting, controller) +9 0 0 gitea.dooplex.hu/admin/felhom-controller:0.338.0 Up 9 minutes (healthy) ← felhom-pve (containers, unhealthy+restarting, controller) diff --git a/documentation/audits/morning-2026-10-22/release/03-controller-errors.txt b/documentation/audits/morning-2026-10-22/release/03-controller-errors.txt new file mode 100644 index 00000000..135393ab --- /dev/null +++ b/documentation/audits/morning-2026-10-22/release/03-controller-errors.txt @@ -0,0 +1,18 @@ +errors=0 +2026/10/22 07:54:56 [INFO] [scheduler] Registered periodic job: selfupdate-check (every 6h0m0s) +2026/10/22 07:55:06 [INFO] [offsite-apply] settle-gate: GO — at/above floor 0.338.0 (we are 0.338.0), no managed update running +2026/10/22 07:55:27 [INFO] [selfupdate] Current version 0.338.0 is up to date +2026/10/22 07:57:56 [INFO] [stacks] controller image retention: pass over 10 controller image(s) — running 0.338.0, previous "0.337.0" (the self-update's record), 1 candidate(s), 1 deleted, the rest kept + ← root@192.168.0.154 +errors=0 +2026/10/22 07:55:29 updater.go:104: [DEBUG] [selfupdate] queryRegistry: 200 tags returned: [0.213.0 0.214.0 0.215.0 0.216.0 0.217.0 0.218.0 0.219.0 0.220.0 0.220.1 0.220.2 0.221.0 0.221.1 0.222.0 0.223.0 0.224.0 0.225.0 +2026/10/22 07:55:29 updater.go:196: [INFO] [selfupdate] Current version 0.338.0 is up to date +2026/10/22 07:55:29 updater.go:104: [DEBUG] [selfupdate] version comparison: current=0.338.0 (0.338.0), latest=0.338.0 (0.338.0), cmp=0, updateAvailable=false +2026/10/22 07:57:57 controller_image_retention.go:115: [INFO] [stacks] controller image retention: pass over 29 controller image(s) — running 0.338.0, previous "0.337.0" (the self-update's record), 1 candidate(s), 1 de + ← demo-hp +errors=0 +2026/10/22 07:54:41 [INFO] [scheduler] Registered periodic job: selfupdate-check (every 6h0m0s) +2026/10/22 07:54:51 [INFO] [offsite-apply] settle-gate: GO — at/above floor 0.338.0 (we are 0.338.0), no managed update running +2026/10/22 07:55:12 [INFO] [selfupdate] Current version 0.338.0 is up to date +2026/10/22 07:57:41 [INFO] [stacks] controller image retention: pass over 3 controller image(s) — running 0.338.0, previous "0.337.0" (the self-update's record), 1 candidate(s), 1 deleted, the rest kept + ← felhom-pve diff --git a/documentation/audits/morning-2026-10-22/release/04-agent-delivery.txt b/documentation/audits/morning-2026-10-22/release/04-agent-delivery.txt new file mode 100644 index 00000000..4abb3dda --- /dev/null +++ b/documentation/audits/morning-2026-10-22/release/04-agent-delivery.txt @@ -0,0 +1,36 @@ +### demo-hp +Oct 22 09:49:10 demo-hp felhom-agent[1266]: time=2026-10-22T09:49:10.131+02:00 level=WARN msg="signedjobs: AUTHORIZED signed op — executing" job=7e7f40c82c1823a2 op=agent_update key_id=felhom-op-1 nonce=4432037f376dc41e99f2836fde62c86a +Oct 22 09:49:11 demo-hp felhom-agent[1266]: time=2026-10-22T09:49:11.750+02:00 level=WARN msg="signedjobs: signed op COMPLETED" job=7e7f40c82c1823a2 op=agent_update +Oct 22 09:49:13 demo-hp systemd[1]: felhom-agent.service: Consumed 4h 48min 2.414s CPU time, 569.9M memory peak, 1.8M memory swap peak. +Oct 22 09:49:13 demo-hp felhom-agent[2089514]: time=2026-10-22T09:49:13.830+02:00 level=INFO msg="felhom-agent daemon starting" version=0.162.0 host_id=demo-hp-bb76ea hub_url=https://hub.felhom.eu interval_s=900 +Oct 22 09:49:14 demo-hp felhom-agent[2089514]: time=2026-10-22T09:49:14.879+02:00 level=INFO msg="capabilities self-check" ok=76 total=76 degraded=0 inactive=0 +Oct 22 09:50:13 demo-hp felhom-agent[2089514]: time=2026-10-22T09:50:13.931+02:00 level=INFO msg="guest-swap: raised (R-1192 — a guest swap cap below its RAM turned a memory burst into a freeze)" vmid=9201 from_mb=512 to_mb=25898 +Oct 22 09:50:13 demo-hp felhom-agent[2089514]: time=2026-10-22T09:50:13.931+02:00 level=INFO msg="guest-swap: checked" raised=1 +Oct 22 09:50:15 demo-hp felhom-agent[2089514]: time=2026-10-22T09:50:15.908+02:00 level=WARN msg="selfupdate: update committed" version=0.162.0 wrapper="" +Oct 22 09:54:51 demo-hp felhom-agent[2089514]: time=2026-10-22T09:54:51.395+02:00 level=WARN msg="local-api: controller swap requested" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controller:0.338.0 previous=gitea.dooplex.hu/admin/felhom-controller:0.337.0 +Oct 22 09:54:54 demo-hp felhom-agent[2089514]: time=2026-10-22T09:54:54.554+02:00 level=INFO msg="controller-swap: image file written, restarting bootstrap" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controller:0.338.0 +Oct 22 09:55:01 demo-hp felhom-agent[2089514]: time=2026-10-22T09:55:01.946+02:00 level=INFO msg="controller-swap: new controller healthy" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controller:0.338.0 +Oct 22 09:57:02 demo-hp felhom-agent[2089514]: time=2026-10-22T09:57:02.238+02:00 level=WARN msg="host-swap: the host's swap is below its guests' swap allowance — a memory burst can freeze the box (R-1192); the hub is told (host_swap_short)" host_swap_mb=819 +### root@192.168.0.154 +Oct 22 09:54:50 felhom felhom-agent[1155]: time=2026-10-22T09:54:50.441+02:00 level=WARN msg="local-api: controller swap requested" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controller:0.338.0 previous=gitea.dooplex.hu/admin/felhom-controller:0.337.0 +Oct 22 09:54:53 felhom felhom-agent[1155]: time=2026-10-22T09:54:53.621+02:00 level=INFO msg="controller-swap: image file written, restarting bootstrap" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controller:0.338.0 +Oct 22 09:55:00 felhom felhom-agent[1155]: time=2026-10-22T09:55:00.921+02:00 level=INFO msg="controller-swap: new controller healthy" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controller:0.338.0 +Oct 22 09:57:05 felhom felhom-agent[1155]: time=2026-10-22T09:57:05.382+02:00 level=WARN msg="signedjobs: AUTHORIZED signed op — executing" job=85e2d7ed579c7b6d op=agent_update key_id=felhom-op-1 nonce=0994bac47790c72c77860e72b54d8a04 +Oct 22 09:57:06 felhom felhom-agent[1155]: time=2026-10-22T09:57:06.818+02:00 level=WARN msg="signedjobs: signed op COMPLETED" job=85e2d7ed579c7b6d op=agent_update +Oct 22 09:57:08 felhom felhom-agent[2313303]: time=2026-10-22T09:57:08.945+02:00 level=INFO msg="felhom-agent daemon starting" version=0.162.0 host_id=tester-1-d70be4 hub_url=https://hub.felhom.eu interval_s=900 +Oct 22 09:57:09 felhom felhom-agent[2313303]: time=2026-10-22T09:57:09.830+02:00 level=INFO msg="capabilities self-check" ok=76 total=76 degraded=0 inactive=0 +Oct 22 09:58:09 felhom felhom-agent[2313303]: time=2026-10-22T09:58:09.009+02:00 level=INFO msg="guest-swap: raised (R-1192 — a guest swap cap below its RAM turned a memory burst into a freeze)" vmid=9201 from_mb=512 to_mb=4096 +Oct 22 09:58:09 felhom felhom-agent[2313303]: time=2026-10-22T09:58:09.009+02:00 level=INFO msg="guest-swap: checked" raised=1 +Oct 22 09:58:10 felhom felhom-agent[2313303]: time=2026-10-22T09:58:10.559+02:00 level=WARN msg="selfupdate: update committed" version=0.162.0 wrapper="" +### felhom-pve +Oct 22 09:54:12 demo-felhom felhom-agent[1253]: time=2026-10-22T09:54:12.466+02:00 level=WARN msg="signedjobs: AUTHORIZED signed op — executing" job=bfe474a69c69e1b9 op=agent_update key_id=felhom-op-1 nonce=4a39b738f278b274caa978a5945890ca +Oct 22 09:54:13 demo-felhom felhom-agent[1253]: time=2026-10-22T09:54:13.232+02:00 level=WARN msg="signedjobs: signed op COMPLETED" job=bfe474a69c69e1b9 op=agent_update +Oct 22 09:54:15 demo-felhom felhom-agent[1894394]: time=2026-10-22T09:54:15.344+02:00 level=INFO msg="felhom-agent daemon starting" version=0.162.0 host_id=demo-felhom-8363b5 hub_url=https://hub.felhom.eu interval_s=900 +Oct 22 09:54:16 demo-felhom felhom-agent[1894394]: time=2026-10-22T09:54:16.013+02:00 level=INFO msg="capabilities self-check" ok=76 total=76 degraded=0 inactive=0 +Oct 22 09:54:36 demo-felhom felhom-agent[1894394]: time=2026-10-22T09:54:36.562+02:00 level=WARN msg="local-api: controller swap requested" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controller:0.338.0 previous=gitea.dooplex.hu/admin/felhom-controller:0.33 +Oct 22 09:54:38 demo-felhom felhom-agent[1894394]: time=2026-10-22T09:54:38.916+02:00 level=INFO msg="controller-swap: image file written, restarting bootstrap" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controller:0.338.0 +Oct 22 09:54:48 demo-felhom felhom-agent[1894394]: time=2026-10-22T09:54:48.575+02:00 level=INFO msg="controller-swap: new controller healthy" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controller:0.338.0 +Oct 22 09:55:15 demo-felhom felhom-agent[1894394]: time=2026-10-22T09:55:15.376+02:00 level=INFO msg="guest-swap: raised (R-1192 — a guest swap cap below its RAM turned a memory burst into a freeze)" vmid=9201 from_mb=512 to_mb=12288 +Oct 22 09:55:15 demo-felhom felhom-agent[1894394]: time=2026-10-22T09:55:15.376+02:00 level=INFO msg="guest-swap: checked" raised=1 +Oct 22 09:55:17 demo-felhom felhom-agent[1894394]: time=2026-10-22T09:55:17.326+02:00 level=WARN msg="selfupdate: update committed" version=0.162.0 wrapper="" +Oct 22 09:56:48 demo-felhom felhom-agent[1894394]: time=2026-10-22T09:56:48.008+02:00 level=WARN msg="host-swap: the host's swap is below its guests' swap allowance — a memory burst can freeze the box (R-1192); the hub is told (host_swap_short)" host_swap_mb