ISO 1.29.0 PUBLISHED — bilingual console, proven on both menu entries (R-559)

Live at iso.felhom.eu, sha256 dceacae5da247d76cad065bf6c0d3bbefac8d8a5f8e571
db2fd8449a97e94829, and both download pages now name it.

Every gate criterion is recorded with its OBSERVED value in
documentation/tests/iso-release-1.29.0-2026-09-18/ — including two proof
installs from the published bytes, one per boot-menu entry, each with a first
boot AND one reboot: /etc/issue bilingual with zero hits for 8006, pvebanner
masked, package 1.29.0 installed, unit enabled and fired, pairing code present,
and the installed script byte-identical to repo HEAD. G11: the downloaded bytes
hash to the published checksum.

A defect was caught BETWEEN builds by looking at the screen rather than at the
config: the second menu entry read "Felhom telepítés (szöveges mód) / Install
Felhom (text mode)" — 58 characters — and the GRUB menu box cut it at "Instal".
The English half was unreadable on the boot screen. Shortened to "… / text" and
rebuilt; the published image is the rebuilt one. The Hungarian half is the part
that may not change, so the English half is the part that gave.

Teardown: VMs 323/324/325 destroyed, the two unclaimed appliance registrations
discarded (zero left in `registered`), guest 9201 untouched — 23 containers
before and after. The two stale *.rootpw.txt files were shredded from the
publish source directory before the upload ran from it (R-587, files gone; the
guard that would stop it recurring is still open).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/tests/iso-release-1.29.0-2026-09-18/README.md

@@ -0,0 +1,59 @@
+# ISO release 1.29.0 — PUBLISHED 2026-09-18 (R-559, bilingual console)
+
+| | |
+|---|---|
+| file | `felhom-installer-1.29.0-pve9.2-1.iso` |
+| sha256 | `dceacae5da247d76cad065bf6c0d3bbefac8d8a5f8e571db2fd8449a97e94829` |
+| size | 1 705 324 544 bytes |
+| base | Proxmox VE 9.2-1 (`4e88fe41…c2c6c`) |
+| source | felhom.eu `eb1ae37` + the menu-width fix (this commit) |
+| published | `https://iso.felhom.eu/felhom-installer-1.29.0-pve9.2-1.iso` |
+| rollback | `felhom-installer-1.28.0-pve9.2-1.iso` (sha `a4cd9b6d…`) stays online; rolling back is one edit on the two download pages |
+
+**What changed:** the console is bilingual — the pairing banner, the bound banner and `/etc/issue`
+carry the Hungarian block byte-for-byte as before, then an English block inside the same frame. Both
+GRUB entries gained an English half.
+
+## The criteria, each with its observed value
+
+| | verdict | observed |
+|---|---|---|
+| G1 no `answer.toml` | **PASS** | `osirrox -find / -name answer.toml` → 0 hits |
+| G2 no root password | **PASS** | no `.rootpw.txt` emitted for 1.29.0; the build says `root-pw: NONE` |
+| G5 no credential literal | **PASS** | scanned the shipped script for `root_password`, `ssh-rsa`, `ssh-ed25519`, `PRIVATE KEY`, `password =`, `$6$`, `api_key` → all 0. One `Bearer` hit is `Bearer $token`, a variable |
+| G6 boot menu | **PASS** | 2 menuentries, `timeout=15`, `timeout_style=menu` (underscore), `default=0`, banned entries 0 |
+| G7 package present | **PASS** | `felhom-bootstrap 1.29.0` in `/proxmox/packages/`, and `dpkg -l` on both installs |
+| G9 payload = repo HEAD | **PASS** | `cmp` of `felhom-bootstrap.sh` and `postinst` extracted from the shipped `.deb` → **IDENTICAL**; the installed copy's sha256 `00d4eb55…` equals the repo file's |
+| G11 checksum + round trip | **PASS** | downloaded the published bytes: 1 705 324 544 B, sha256 `dceacae5…e94829` = built file = published `.sha256` |
+| G14 a person chooses the disk | **PASS** | observed on BOTH entries: graphical `Target Harddisk: /dev/sda (32.00GiB, QEMU HARDDISK)` with a selector; text `Target harddisk: < /dev/sda (QEMU HARDDISK) (32.00 GiB) >` |
+| G15 console after first boot AND one reboot | **PASS** | both installs: `grep -c 8006 /etc/issue` → **0**; `Felhom otthoni szerver` → 1; `Felhom home server` → 1; `pvebanner.service` → **masked**. Screendumps after the reboot are identical to first boot |
+| G16 Hungarian first, secrets named once per language | **PASS** | harness green on every R-559 golden/English/width/height check; `jelszavad` 0, `Tulajdonosi jelmondat` 1, `Owner passphrase` 1 |
+
+## The proof installs — BOTH menu entries, on the published bytes
+
+Nested VMs on demo-hp, disks on `nvme-scratch` (`/mnt/hdd_1`), destroyed afterwards.
+
+| | entry | VM | result |
+|---|---|---|---|
+| 1 | `Felhom telepítés / Install Felhom` (graphical) | 323 | installed, first boot + reboot, all checks pass |
+| 2 | `Felhom telepítés (szöveges mód) / text` | 325 | installed, first boot + reboot, all checks pass |
+
+Both first boots showed the bilingual `/etc/issue` above the login prompt and the bilingual pairing
+banner, with the accented characters rendering correctly (R-63's console font). Screendumps in this
+directory; the pairing codes in them are non-secret (a bind also needs the owner passphrase).
+
+## A defect found and fixed BETWEEN builds
+
+The first build's second menu entry read `Felhom telepítés (szöveges mód) / Install Felhom (text
+mode)` — 58 characters. **The GRUB menu box cut it at `Instal`**, so its English half was
+unreadable on the boot screen. Seen on the screendump, not reasoned about. Shortened to
+`… / text` (38 chars) and the image rebuilt; the published image is the rebuilt one. The Hungarian
+half is unchanged, which is why the English half was the part that had to give.
+
+## Teardown
+
+VMs 323, 324 and 325 created and **destroyed** (`qm destroy --purge`); `qm list` empty. The two
+unclaimed appliance registrations the proof installs made (ids 32, 33) were **discarded** through
+the operator endpoint — `status='discarded'`, and zero rows remain in `registered`. demo-hp guest
+9201: the same 23 containers before and after, untouched. Two stale `*.rootpw.txt` files from July
+were shredded from the publish source directory before the upload (R-587).

documentation/tests/iso-release-1.29.0-2026-09-18/felhom-installer-1.29.0-pve9.2-1.iso.manifest.txt

@@ -0,0 +1,26 @@
+Felhom bare-metal ISO build manifest (R-21 slice A+B+C)
+built              : 2026-09-18T20:41:45+02:00
+iso-version-tag    : v1.29.0
+pve-version        : 9.2-1
+source-iso         : proxmox-ve_9.2-1.iso
+source-iso-sha256  : 4e88fe416df9b527624a175f24c9aa07c714d3332afb1ee3dbf3879573ef2c6c
+assistant-version  : proxmox-installer-common v9.2.7
+profile            : none (a release image bakes no disk selection)
+fqdn               : (none — interactive install)
+mode               : release (PUBLIC image — NO answer.toml, NO baked credential, interactive disk selection)
+loader             : shim (stock MS-signed chain; Secure Boot OK on compliant firmware)
+grub-mkimage       : unknown
+boot-menu          : FELHOM release menu — TWO INTERACTIVE entries ('Felhom telepítés' graphical = default, 'Felhom telepítés (szöveges mód)' = Terminal UI), timeout 15s
+menu-entries       : 2 (graphical default + Terminal UI; timeout 15s)
+menu-removed       : debug variants, Rescue Boot, memtest86+, UEFI Firmware Settings
+automated-entry    : NOT PRESENT — no auto-installer-mode.toml, so the stock grub.cfg does
+                     not emit it. Disk selection is INTERACTIVE by construction.
+host-install-url   : https://felhom.eu/scripts/felhom-host-install.sh (default)
+secret-bearing     : no   (PUBLIC image — carries NO credential of any kind)
+root-password      : NONE — not baked. The installer prompts the person installing (release gate G2).
+answer-file        : NONE — no answer.toml, no auto-installer-mode.toml (release gate G1)
+felhom-package     : felhom-bootstrap_1.29.0_all.deb sha256=2c9ff754589d771d8926e68f443e17c7249246f9fca6e43f0050479692f431e8
+repo-commit        : 8d539f971cf67aae3a69599905ab78b72ca2f889
+output             : felhom-installer-1.29.0-pve9.2-1.iso
+output-sha256      : dceacae5da247d76cad065bf6c0d3bbefac8d8a5f8e571db2fd8449a97e94829
+output-size-bytes  : 1705324544

documentation/tests/iso-release-1.29.0-2026-09-18/felhom-installer-1.29.0-pve9.2-1.iso.sha256

@@ -0,0 +1 @@
+dceacae5da247d76cad065bf6c0d3bbefac8d8a5f8e571db2fd8449a97e94829  felhom-installer-1.29.0-pve9.2-1.iso