hub v0.132.0: the System page (versions + OS updates with the ring/switch/approve buttons, R-852), the Hosts Proxmox/kernel column, the operator-approved Docker engine release (2 healthy ring-0 nights), the crash-guard events (R-851); evidence audits/os-docker-crash-2026-10-04

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-04 16:16:02 +02:00
parent bee277ffad
commit 175ecfcdd2
45 changed files with 2198 additions and 12 deletions
@@ -411,7 +411,20 @@ func main() {
 			logger.Printf("[ERROR] OS_APPROVE_NIGHTS=%q invalid — keeping 1", v)
 		}
 	}
+	osSvc.DockerNights = 2
+	if v := os.Getenv("OS_DOCKER_APPROVE_NIGHTS"); v != "" {
+		if n, nerr := strconv.Atoi(v); nerr == nil && n >= 0 {
+			osSvc.DockerNights = n
+			if n == 0 {
+				osSvc.DockerNights = -1 // "none" (0 in the service means the default)
+			}
+			logger.Printf("[WARN] OS_DOCKER_APPROVE_NIGHTS=%s — the Docker button needs %d healthy night(s) instead of 2 (TEST CONFIGURATION)", v, n)
+		} else {
+			logger.Printf("[ERROR] OS_DOCKER_APPROVE_NIGHTS=%q invalid — keeping 2", v)
+		}
+	}
 	logger.Printf("[INFO] osupdates: approval rule = every ring-0 box healthy for %s and %d night run(s)", osSvc.ApproveAfter, osSvc.NightsRequired)
+	logger.Printf("[INFO] osupdates: the Docker engine set is approved only by the operator, after %d healthy ring-0 night(s)", osSvc.DockerNights)
 	apiHandler.SetOSUpdateService(osSvc)
 	webServer.SetOSUpdateAdmin(osSvc)
 	// `11` §8.3: the four alarm thresholds are configuration (decided by CC unattended — operator may reverse).