admin/felhom.eu
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Night 2026-10-27/28: Immich and Home Assistant lane walks proven (drill), Wanderer hidden in the drill, R-1322/R-1313 updated; STATUS (D61 RomM, the morning list), CONTEXT with the unattended decisions
gates / gates (push) Successful in 2m0s
Details

Browse Source
This commit is contained in:
admin committed 2026-10-27 23:36:25 +01:00
1 parent f5a4995da5
commit 3d3cd3ad7c
8 files changed
+377 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

documentation/audits/http2shell-2026-10-27/walks/immich/box-verdict-immich.json
+313
View File
@@ -0,0 +1,313 @@
{
"app": "immich",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"immich-server": "ghcr.io/immich-app/immich-server:v3.2.4",
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.2.4",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine"
},
"to": {
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5",
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine"
},
"observables_before": {
"pinned_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.2.4",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.2.4"
},
"installed_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.2.4",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.2.4"
},
"catalog_images": null,
"live_compose_image_lines": [
"image: ghcr.io/immich-app/immich-server:v3.2.4@sha256:d317916b28090c33eb36b308464ea391f8b7df1d850fcfea227a39ec879718c2",
"image: ghcr.io/immich-app/immich-machine-learning:v3.2.4@sha256:e16c2f166a8174901959fdf85e2e4c7bd1ebc4b37e0b6655de97c41408a260c4",
"image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0@sha256:1a078b237c1d9b420b0ee59147386b4aa60d3a07a8e6a402fc84a57e41b043a4",
"image: redis:7-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499"
],
"docker_inspect": [
"immich-server ghcr.io/immich-app/immich-server:v3.2.4@sha256:d317916b28090c33eb36b308464ea391f8b7df1d850fcfea227a39ec879718c2 running=true restarts=0",
"immich-postgres ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0@sha256:1a078b237c1d9b420b0ee59147386b4aa60d3a07a8e6a402fc84a57e41b043a4 running=true restarts=0",
"immich-machine-learning ghcr.io/immich-app/immich-machine-learning:v3.2.4@sha256:e16c2f166a8174901959fdf85e2e4c7bd1ebc4b37e0b6655de97c41408a260c4 running=true restarts=0",
"immich-redis redis:7-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"seed": "read_back",
"drill_commit": "d992f141bbb3",
"sync_waited_s": 4.5,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-10-27T22:17:33Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 20.5,
"phase": "safety-dump",
"label": "Adatbázis pillanatkép…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 22.5,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 85.0,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 94.2,
"phase": "starting",
"label": "Indítás az új verzióval…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 105.5,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 121.9,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 121.9,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"installed_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"catalog_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"live_compose_image_lines": [
"image: ghcr.io/immich-app/immich-server:v3.3.5",
"image: ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"image: redis:7-alpine"
],
"docker_inspect": [
"immich-server ghcr.io/immich-app/immich-server:v3.3.5 running=true restarts=0",
"immich-postgres ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0 running=true restarts=0",
"immich-machine-learning ghcr.io/immich-app/immich-machine-learning:v3.3.5 running=true restarts=0",
"immich-redis redis:7-alpine running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"immich-server": "sha256:485d546a2e31d6a8b4db8423fcba5c109de8c218d93410af115fd1ccfc4352a6",
"immich-machine-learning": "sha256:5b28c9352c8374b8a1ed96fbdd8d6755fea6e43510ec43fdf6538aa02ea40f56",
"immich-postgres": "sha256:1a078b237c1d9b420b0ee59147386b4aa60d3a07a8e6a402fc84a57e41b043a4",
"immich-redis": "sha256:6ba19c50b56777f5c11c58eff8ddb69d0d5f27ba131cffb63f180ccfd43c66af"
},
"four_observables": {
"pinned": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"installed": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"catalog": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"live_compose": [
"ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"ghcr.io/immich-app/immich-server:v3.3.5",
"ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"redis:7-alpine"
]
},
"seed_read_after": true,
"setup_gate_after": {
"browser": {
"status": "200",
"redirect": null
},
"script": {
"status": "200",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 228,
"containers": {
"immich-server": {
"samples": 57,
"anon_peak_bytes": 1359732736,
"limit_bytes": 3221225472,
"anon_peak_pct": 42.2,
"cgroup_peak_pct": 49.7,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-1494b4cdbecfdc28139124c97ae25f995d6619fcbe13f6c1469e917a18bcc896.scope"
},
"immich-postgres": {
"samples": 57,
"anon_peak_bytes": 201875456,
"limit_bytes": 805306368,
"anon_peak_pct": 25.1,
"cgroup_peak_pct": 94.7,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-8a943f33c7cd70898b9668e2922e71cf04a8f88bd67d0e0c0d3d6e8f7bbab489.scope"
},
"immich-machine-learning": {
"samples": 57,
"anon_peak_bytes": 243011584,
"limit_bytes": 2147483648,
"anon_peak_pct": 11.3,
"cgroup_peak_pct": 12.6,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-ad472ac57c05e6391116441682d0b1b3fe1b6f5908b5769e87d2931e729a6f35.scope"
},
"immich-redis": {
"samples": 57,
"anon_peak_bytes": 6139904,
"limit_bytes": 134217728,
"anon_peak_pct": 4.6,
"cgroup_peak_pct": 16.9,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-b7c6711034b950f1d086fbbb8f2613c7777dc17d7f9986d07c231d10f735d174.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 42.2
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
"log": [
"23:15:29 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['HDD_PATH']",
"23:15:29 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"23:17:15 [1] deployed, controller state=running, pinned={'immich-machine-learning': 'ghcr.io/immich-app/immich-machine-learning:v3.2.4', 'immich-postgres': 'ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0', 'immich-redis': 'redis:7-alpine', 'immich-server': 'ghcr.io/immich-app/immich-server:v3.2.4'}",
"23:17:15 gate: photos is gated — passed as the household (cookie set)",
"23:17:18 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
"23:17:19 immich: seeded album drillalbum0382044e",
"23:17:19 immich: readback found=True (http 200, control passed)",
"23:17:20 [5] drill commit d992f141bbb3: immich ghcr.io/immich-app/immich-machine-learning:v3.2.4,ghcr.io/immich-app/immich-server:v3.2.4 -> ghcr.io/immich-app/immich-machine-learning:v3.3.5,ghcr.io/immich-app/immich-server:v3.3.5 (push rc=0)",
"23:17:29 [5] the box's drill mirror now at d992f141",
"23:17:34 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"23:17:34 + 0.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"23:17:54 + 20.5s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None",
"23:17:56 + 22.5s phase=pulling label=Új verzió letöltése… err=None hold=None",
"23:18:59 + 85.0s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"23:19:08 + 94.2s phase=starting label=Indítás az új verzióval… err=None hold=None",
"23:19:19 + 105.5s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"23:19:36 + 121.9s phase=done label=Frissítve err=None hold=None",
"23:19:55 immich: readback found=True (http 200, control passed)",
"23:19:55 [7] memory soak 600 s …",
"23:30:03 [7] soak: peak 42.2% of the limit (anon), kills 0, restarts 0"
]
}
documentation/audits/http2shell-2026-10-27/walks/immich/immich-leftover-remove.txt
+11
View File
@@ -0,0 +1,11 @@
before: deployed=True state=running pins={'immich-machine-learning': 'ghcr.io/immich-app/immich-machine-learning:v3.2.4', 'immich-postgres': 'ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0', 'immich-redis': 'redis:7-alpine', 'immich-server': 'ghcr.io/immich-app/immich-server:v3.2.4'}
23:14:23 [X] stop -> 200 {'ok': True, 'message': 'Stack immich stop completed'}
23:14:28 [X] remove (with drive data) -> 409 {'ok': False, 'error': 'A(z) /mnt/sizing-bench tárhely jelenleg nem elérhető — az alkalmazás nem távolítható el, amíg a meghajtó vissza nem csatlakozik.'}
23:14:28 [X] refused because the drive path cannot be resolved (R-442, fail-closed and right) — removing the app and KEEPING the drive data instead
23:14:56 [X] remove (keeping drive data) -> 200 {'ok': True, 'data': {'removed': 'immich', 'volumes_removed': ['immich_immich_ml_cache', 'immich_immich_postgres_data', 'immich_immich_redis_data'], 'hdd_paths_
23:15:05 [X] after remove: deployed=False leftovers=''
after: deployed=False
leftovers: 0
ls: cannot access '/opt/docker/stacks/immich/app.yaml': No such file or directory
0
documentation/audits/http2shell-2026-10-27/walks/immich/walk.txt
+25
View File
@@ -0,0 +1,25 @@
23:15:29 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['HDD_PATH']
23:15:29 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}
23:17:15 [1] deployed, controller state=running, pinned={'immich-machine-learning': 'ghcr.io/immich-app/immich-machine-learning:v3.2.4', 'immich-postgres': 'ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0', 'immich-redis': 'redis:7-alpine', 'immich-server': 'ghcr.io/immich-app/immich-server:v3.2.4'}
23:17:15 gate: photos is gated — passed as the household (cookie set)
23:17:18 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}
23:17:19 immich: seeded album drillalbum0382044e
23:17:19 immich: readback found=True (http 200, control passed)
23:17:20 [5] drill commit d992f141bbb3: immich ghcr.io/immich-app/immich-machine-learning:v3.2.4,ghcr.io/immich-app/immich-server:v3.2.4 -> ghcr.io/immich-app/immich-machine-learning:v3.3.5,ghcr.io/immich-app/immich-server:v3.3.5 (push rc=0)
23:17:29 [5] the box's drill mirror now at d992f141
23:17:34 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}
23:17:34 + 0.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None
23:17:54 + 20.5s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None
23:17:56 + 22.5s phase=pulling label=Új verzió letöltése… err=None hold=None
23:18:59 + 85.0s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None
23:19:08 + 94.2s phase=starting label=Indítás az új verzióval… err=None hold=None
23:19:19 + 105.5s phase=verifying label=Működés ellenőrzése… err=None hold=None
23:19:36 + 121.9s phase=done label=Frissítve err=None hold=None
23:19:55 immich: readback found=True (http 200, control passed)
23:19:55 [7] memory soak 600 s …
23:30:03 [7] soak: peak 42.2% of the limit (anon), kills 0, restarts 0
23:30:03 [9] verdict proven -> /tmp/claude-1000/-mnt-5-hdd-felhom-eu-git/0b76c4d7-9b39-4e4e-869d-d0d2c6006331/scratchpad/p2ev/immich/verdict.json
23:30:03 RESULT proven — the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back
23:30:04 [X] stop -> 200 {'ok': True, 'message': 'Stack immich stop completed'}
23:30:36 [X] remove (with drive data) -> 200 {'ok': True, 'data': {'removed': 'immich', 'volumes_removed': ['immich_immich_ml_cache', 'immich_immich_postgres_data'], 'hdd_paths_removed': ['/mnt/felhom-driv
23:30:44 [X] after remove: deployed=False leftovers=''
documentation/audits/http2shell-2026-10-27/walks/immich/writer-drill.txt
+3
View File
@@ -0,0 +1,3 @@
STEP immich: the superseded step {'immich-server': 'ghcr.io/immich-app/immich-server:v3.2.4', 'immich-machine-learning': 'ghcr.io/immich-app/immich-machine-learning:v3.2.4', 'immich-postgres': 'ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0', 'immich-redis': 'redis:7-alpine'} keeps its definition at steps/6e2f0f71608351ad.yml
STEP immich: … and its .felhom.yml at steps/6e2f0f71608351ad.felhom.yml
WROTE immich: {'immich-server': 'ghcr.io/immich-app/immich-server:v3.2.4', 'immich-machine-learning': 'ghcr.io/immich-app/immich-machine-learning:v3.2.4', 'immich-postgres': 'ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0', 'immich-redis': 'redis:7-alpine'} -> {'immich-server': 'ghcr.io/immich-app/immich-server:v3.3.5', 'immich-machine-learning': 'ghcr.io/immich-app/immich-machine-learning:v3.3.5', 'immich-postgres': 'ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0', 'immich-redis': 'redis:7-alpine'} peak 42.2% marks {'files_may_change': False, 'needs_person': None, 'memory_tight': False}