From 5622ce2735e7f94c03e8beacee6fca0cf5741eb3 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Mon, 19 Oct 2026 03:52:34 +0200 Subject: [PATCH] Day 2026-10-19 P1 evidence: agent 0.160.0 release, demo-hp delivery, backup + cap, escrow confirm/abandon, R-1093 on the format route --- .../audits/day-2026-10-19/P1/backup-press.txt | 23 ++++ .../P1/delivery-signed-jobs.txt | 13 +++ .../P1/demo-hp-after-backup.txt | 29 +++++ .../day-2026-10-19/P1/demo-hp-before.txt | 33 ++++++ .../day-2026-10-19/P1/demo-hp-signed-jobs.txt | 9 ++ .../day-2026-10-19/P1/escrow-0-before.txt | 5 + .../day-2026-10-19/P1/escrow-1-confirm.txt | 11 ++ .../day-2026-10-19/P1/escrow-2-abandon.txt | 9 ++ .../P1/escrow-agent-journal.txt | 23 ++++ .../day-2026-10-19/P1/others-before.txt | 36 +++++++ .../day-2026-10-19/P1/r1093-after-journal.txt | 32 ++++++ .../day-2026-10-19/P1/r1093-format-route.txt | 39 +++++++ .../day-2026-10-19/P1/release-agent.txt | 102 ++++++++++++++++++ 13 files changed, 364 insertions(+) create mode 100644 documentation/audits/day-2026-10-19/P1/backup-press.txt create mode 100644 documentation/audits/day-2026-10-19/P1/delivery-signed-jobs.txt create mode 100644 documentation/audits/day-2026-10-19/P1/demo-hp-after-backup.txt create mode 100644 documentation/audits/day-2026-10-19/P1/demo-hp-before.txt create mode 100644 documentation/audits/day-2026-10-19/P1/demo-hp-signed-jobs.txt create mode 100644 documentation/audits/day-2026-10-19/P1/escrow-0-before.txt create mode 100644 documentation/audits/day-2026-10-19/P1/escrow-1-confirm.txt create mode 100644 documentation/audits/day-2026-10-19/P1/escrow-2-abandon.txt create mode 100644 documentation/audits/day-2026-10-19/P1/escrow-agent-journal.txt create mode 100644 documentation/audits/day-2026-10-19/P1/others-before.txt create mode 100644 documentation/audits/day-2026-10-19/P1/r1093-after-journal.txt create mode 100644 documentation/audits/day-2026-10-19/P1/r1093-format-route.txt create mode 100644 documentation/audits/day-2026-10-19/P1/release-agent.txt diff --git a/documentation/audits/day-2026-10-19/P1/backup-press.txt b/documentation/audits/day-2026-10-19/P1/backup-press.txt new file mode 100644 index 00000000..0948b859 --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/backup-press.txt @@ -0,0 +1,23 @@ +Mon Oct 19 01:24:39 UTC 2026 +200 +{"data": {"started": true}, "ok": true} +200 +{ + "data": { + "backup": { + "target_id": "local", + "vmid": 9201, + "archive": "local:backup/vzdump-lxc-9201-2026_10_19-03_25_27.tar.zst", + "mode": "snapshot", + "crash_consistent": true, + "size_bytes": 6864786948, + "success": true, + "started_at": "2026-10-19T01:25:26Z", + "duration_seconds": 443.050964897 + }, + "error": "", + "job_id": "backup-9201-1792373126635435331", + "phase": "done" + }, + "ok": true +} diff --git a/documentation/audits/day-2026-10-19/P1/delivery-signed-jobs.txt b/documentation/audits/day-2026-10-19/P1/delivery-signed-jobs.txt new file mode 100644 index 00000000..ae565128 --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/delivery-signed-jobs.txt @@ -0,0 +1,13 @@ +Mon Oct 19 01:52:00 UTC 2026 +tester-1-d70be4 agent_update: +signed: op=agent_update host=tester-1-d70be4 guest="" key_id=felhom-op-1 nonce=3516434bfa0c5c47295e3de0a8bd20c7 expires=2026-10-19T02:37:00Z +uploaded signed op to the hub jobs queue +tester-1-d70be4 agent_config_update: +signed: op=agent_config_update host=tester-1-d70be4 guest="" key_id=felhom-op-1 nonce=2dfc5b3e216030c82add18ba69899b41 expires=2026-10-19T02:37:00Z +uploaded signed op to the hub jobs queue +demo-felhom-8363b5 agent_update: +signed: op=agent_update host=demo-felhom-8363b5 guest="" key_id=felhom-op-1 nonce=8f3a6c280cb124c6f85a4039c5b112dc expires=2026-10-19T02:37:00Z +uploaded signed op to the hub jobs queue +demo-felhom-8363b5 agent_config_update: +signed: op=agent_config_update host=demo-felhom-8363b5 guest="" key_id=felhom-op-1 nonce=dc2ead6937a38d0a2d8acd4abf57bef9 expires=2026-10-19T02:37:00Z +uploaded signed op to the hub jobs queue diff --git a/documentation/audits/day-2026-10-19/P1/demo-hp-after-backup.txt b/documentation/audits/day-2026-10-19/P1/demo-hp-after-backup.txt new file mode 100644 index 00000000..5a51e8e4 --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/demo-hp-after-backup.txt @@ -0,0 +1,29 @@ +Volid Format Type Size VMID +local:backup/vzdump-lxc-9100-2026_08_21-17_59_15.tar.zst tar.zst backup 656970239 9100 +local:backup/vzdump-lxc-9201-2026_10_19-03_25_27.tar.zst tar.zst backup 6864786948 9201 +local:backup/felhom-golden-0.236.0.tar.zst tar.zst backup 654115664 +Oct 19 03:23:37 demo-hp felhom-agent[2622137]: time=2026-10-19T03:23:37.628+02:00 level=INFO msg="backup tier armed" target=local cadence=24h0m0s keep_last=1 prune="keep-daily=1" wait_timeout=30m0s prune_pbs_allowed=false primary=true +Oct 19 03:23:37 demo-hp felhom-agent[2622137]: time=2026-10-19T03:23:37.628+02:00 level=INFO msg="backup tier armed" target=felhom-pbs cadence=168h0m0s keep_last=0 prune="" wait_timeout=12h0m0s prune_pbs_allowed=false primary=false +Oct 19 03:24:39 demo-hp felhom-agent[2622137]: time=2026-10-19T03:24:39.730+02:00 level=WARN msg="selfupdate: update committed" version=0.160.0 wrapper="" +Oct 19 03:32:49 demo-hp felhom-agent[2622137]: time=2026-10-19T03:32:49.686+02:00 level=INFO msg="backup: completed" vmid=9201 target=local archive=local:backup/vzdump-lxc-9201-2026_10_19-03_25_27.tar.zst size_bytes=6864786948 uncovered_volumes=2 +Oct 19 03:32:49 demo-hp felhom-agent[2622137]: time=2026-10-19T03:32:49.686+02:00 level=INFO msg="local-api: backup job complete" vmid=9201 target=local job=backup-9201-1792373126635435331 archive=local:backup/vzdump-lxc-9201-2026_10_19-03_25_27.tar.zst +-rw------- 1 felhom-agent felhom-agent 323 Oct 19 03:32 /var/lib/felhom-agent/backup-success-state.json +[ + { + "target": "felhom-pbs", + "vmid": 9201, + "started_at": "2026-10-15T20:38:46Z", + "recent": [ + "2026-10-15T20:38:46Z" + ] + }, + { + "target": "local", + "vmid": 9201, + "started_at": "2026-10-19T01:25:26Z", + "recent": [ + "2026-10-18T11:12:25Z", + "2026-10-19T01:25:26Z" + ] + } +] diff --git a/documentation/audits/day-2026-10-19/P1/demo-hp-before.txt b/documentation/audits/day-2026-10-19/P1/demo-hp-before.txt new file mode 100644 index 00000000..827274c6 --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/demo-hp-before.txt @@ -0,0 +1,33 @@ +Mon Oct 19 01:22:11 UTC 2026 +felhom-agent 0.159.2 +demo-hp-bb76ea +Volid Format Type Size VMID +local:backup/vzdump-lxc-9100-2026_08_21-17_59_15.tar.zst tar.zst backup 656970239 9100 +local:backup/vzdump-lxc-9201-2026_10_18-13_12_26.tar.zst tar.zst backup 6938307162 9201 +local:backup/felhom-golden-0.236.0.tar.zst tar.zst backup 654115664 +"local_backup_retention": 1 + VMID NAME STATUS MEM(MB) BOOTDISK(GB) PID + 341 night1004-tester1 running 8192 200.00 1851 +perl: warning: Setting locale failed. +perl: warning: Please check that your locale settings: + LANGUAGE = (unset), + LC_ALL = (unset), + LC_CTYPE = "UTF-8", + LC_NUMERIC = (unset), + LC_COLLATE = (unset), + LC_TIME = (unset), + LC_MESSAGES = (unset), + LC_MONETARY = (unset), + LC_ADDRESS = (unset), + LC_IDENTIFICATION = (unset), + LC_MEASUREMENT = (unset), + LC_PAPER = (unset), + LC_TELEPHONE = (unset), + LC_NAME = (unset), + LANG = "en_US.UTF-8" + are supported and installed on your system. +perl: warning: Falling back to a fallback locale ("en_US.UTF-8"). +VMID Status Lock Name +9201 running demo-hp +9202 running demo-hp-scratch +9401 stopped upgrade-harness diff --git a/documentation/audits/day-2026-10-19/P1/demo-hp-signed-jobs.txt b/documentation/audits/day-2026-10-19/P1/demo-hp-signed-jobs.txt new file mode 100644 index 00000000..d6a34302 --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/demo-hp-signed-jobs.txt @@ -0,0 +1,9 @@ +Mon Oct 19 01:22:47 UTC 2026 +demo-hp-bb76ea agent_update: +signed: op=agent_update host=demo-hp-bb76ea guest="" key_id=felhom-op-1 nonce=71396ac328c9ea3192d027b830ec0990 expires=2026-10-19T02:07:47Z +wrote envelope to /dev/null +uploaded signed op to the hub jobs queue +demo-hp-bb76ea agent_config_update: +signed: op=agent_config_update host=demo-hp-bb76ea guest="" key_id=felhom-op-1 nonce=603f1d8ed0937492cf01a05146fc9e48 expires=2026-10-19T02:07:47Z +wrote envelope to /dev/null +uploaded signed op to the hub jobs queue diff --git a/documentation/audits/day-2026-10-19/P1/escrow-0-before.txt b/documentation/audits/day-2026-10-19/P1/escrow-0-before.txt new file mode 100644 index 00000000..e2063123 --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/escrow-0-before.txt @@ -0,0 +1,5 @@ +Mon Oct 19 01:47:33 UTC 2026 +code 0 (the stored demo-hp code, before): +HTTP 200 opens; restic_pw_sha256 8a9e33aa +control, a wrong code: +HTTP 400 the recovery code did not open the sealed bundle — nothing was written diff --git a/documentation/audits/day-2026-10-19/P1/escrow-1-confirm.txt b/documentation/audits/day-2026-10-19/P1/escrow-1-confirm.txt new file mode 100644 index 00000000..de07cda8 --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/escrow-1-confirm.txt @@ -0,0 +1,11 @@ +01:47:43Z start 200 {"data":{"job_id":"escrow-1792374463410689900","phase":"running"},"error":"","ok":true} + +status 200 {"phase": "done", "claimable": true, "uploaded": false, "restic_pw_sealed": true, "detail": ""} +claim 200 code words: 10 {"confirm_required": true, "verify_positions": [3, 10]} +status after claim {"phase": "done", "claimed": true, "uploaded": false} +confirm with one wrong word 422 A megadott szavak nem egyeznek — ellenőrizd a felírt kódot. +01:47:47Z confirm with the right words 200 {"uploaded": true} +code 1 after the confirm: +HTTP 200 opens; restic_pw_sha256 8a9e33aa +code 0 after the confirm: +HTTP 422 the recovery code is correct, but it belongs to an EARLIER sealed package (superseded 2026-10-19T01:47:47Z), not the one diff --git a/documentation/audits/day-2026-10-19/P1/escrow-2-abandon.txt b/documentation/audits/day-2026-10-19/P1/escrow-2-abandon.txt new file mode 100644 index 00000000..6342456c --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/escrow-2-abandon.txt @@ -0,0 +1,9 @@ +01:48:09Z start 200 {"data":{"job_id":"escrow-1792374489199785658","phase":"running"},"error":"","ok":true} + +status 200 {"phase": "done", "claimable": true, "uploaded": false, "restic_pw_sealed": true, "detail": ""} +claim 200 code words: 10 {"confirm_required": true, "verify_positions": [5, 10]} +status after claim {"phase": "done", "claimed": true, "uploaded": false} +after the abandon — code 1 (stored): +HTTP 200 opens; restic_pw_sha256 8a9e33aa +code 2 (shown, never typed back): +HTTP 400 the recovery code did not open the sealed bundle — nothing was written diff --git a/documentation/audits/day-2026-10-19/P1/escrow-agent-journal.txt b/documentation/audits/day-2026-10-19/P1/escrow-agent-journal.txt new file mode 100644 index 00000000..b629d24b --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/escrow-agent-journal.txt @@ -0,0 +1,23 @@ +time=2026-10-19T03:47:33.706+02:00 level=INFO msg="local-api: recovering the offsite repository password from the sealed escrow (R via body, never logged/persisted)" vmid=9201 +time=2026-10-19T03:47:34.786+02:00 level=INFO msg="local-api: offsite repository password RECOVERED from the sealed escrow — returning that field ONLY (the tunnel token, the PBS token and the WG key stay inside the agent and are not returned)" vmid=9201 rest +time=2026-10-19T03:47:35.044+02:00 level=INFO msg="local-api: recovering the offsite repository password from the sealed escrow (R via body, never logged/persisted)" vmid=9201 +time=2026-10-19T03:47:36.053+02:00 level=WARN msg="local-api: offsite key recovery: the fetched bundle did not open with the supplied recovery code" vmid=9201 err="escrow: the recovery code did not unwrap the identity escrow (wrong recovery code, or a corrupt +time=2026-10-19T03:47:43.409+02:00 level=INFO msg="local-api: staged offsite restic repo password for escrow (field name only)" vmid=9201 +time=2026-10-19T03:47:43.410+02:00 level=INFO msg="local-api: escrow ceremony started (controller-driven)" vmid=9201 job_id=escrow-1792374463410689900 +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/felhom-agent --config /etc/felhom-agent/agent.json --selftest=escrow-create --upload --output=json +time=2026-10-19T03:47:45.992+02:00 level=INFO msg="local-api: escrow ceremony complete — R claimable (in-memory, one-shot); package uploads at the claim" job_id=escrow-1792374463410689900 restic_pw_sealed=true uploaded=false claim_ttl_s=600 duration_ms=2581 +time=2026-10-19T03:47:47.507+02:00 level=INFO msg="local-api: escrow ceremony R claimed — the package waits for the typed-back words (R-1151)" vmid=9201 job_id=escrow-1792374463410689900 confirm_ttl_s=1800 +time=2026-10-19T03:47:47.550+02:00 level=INFO msg="local-api: escrow confirm — the typed words do not match; still waiting (R-1151)" vmid=9201 +time=2026-10-19T03:47:47.619+02:00 level=INFO msg="local-api: escrow confirm — words typed back; the new package is on the hub (R-1151)" vmid=9201 job_id=escrow-1792374463410689900 duration_ms=48 +time=2026-10-19T03:47:48.247+02:00 level=INFO msg="local-api: recovering the offsite repository password from the sealed escrow (R via body, never logged/persisted)" vmid=9201 +time=2026-10-19T03:47:49.287+02:00 level=INFO msg="local-api: offsite repository password RECOVERED from the sealed escrow — returning that field ONLY (the tunnel token, the PBS token and the WG key stay inside the agent and are not returned)" vmid=9201 rest +time=2026-10-19T03:47:49.635+02:00 level=INFO msg="local-api: recovering the offsite repository password from the sealed escrow (R via body, never logged/persisted)" vmid=9201 +time=2026-10-19T03:48:09.199+02:00 level=INFO msg="local-api: staged offsite restic repo password for escrow (field name only)" vmid=9201 +time=2026-10-19T03:48:09.199+02:00 level=INFO msg="local-api: escrow ceremony started (controller-driven)" vmid=9201 job_id=escrow-1792374489199785658 +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/local/bin/felhom-agent --config /etc/felhom-agent/agent.json --selftest=escrow-create --upload --output=json +time=2026-10-19T03:48:11.881+02:00 level=INFO msg="local-api: escrow ceremony complete — R claimable (in-memory, one-shot); package uploads at the claim" job_id=escrow-1792374489199785658 restic_pw_sealed=true uploaded=false claim_ttl_s=600 duration_ms=2681 +time=2026-10-19T03:48:13.294+02:00 level=INFO msg="local-api: escrow ceremony R claimed — the package waits for the typed-back words (R-1151)" vmid=9201 job_id=escrow-1792374489199785658 confirm_ttl_s=1800 +time=2026-10-19T03:48:14.059+02:00 level=INFO msg="local-api: recovering the offsite repository password from the sealed escrow (R via body, never logged/persisted)" vmid=9201 +time=2026-10-19T03:48:15.141+02:00 level=INFO msg="local-api: offsite repository password RECOVERED from the sealed escrow — returning that field ONLY (the tunnel token, the PBS token and the WG key stay inside the agent and are not returned)" vmid=9201 rest +time=2026-10-19T03:48:15.389+02:00 level=INFO msg="local-api: recovering the offsite repository password from the sealed escrow (R via body, never logged/persisted)" vmid=9201 +time=2026-10-19T03:48:17.435+02:00 level=WARN msg="local-api: offsite key recovery: the fetched bundle did not open with the supplied recovery code" vmid=9201 err="escrow: the recovery code did not unwrap the identity escrow (wrong recovery code, or a corrupt diff --git a/documentation/audits/day-2026-10-19/P1/others-before.txt b/documentation/audits/day-2026-10-19/P1/others-before.txt new file mode 100644 index 00000000..012039d0 --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/others-before.txt @@ -0,0 +1,36 @@ +== root@192.168.0.154 +Mon Oct 19 01:51:20 UTC 2026 +felhom-agent 0.159.2 +"host_id": "tester-1-d70be4" +"local_backup_retention": 3 +Volid Format Type Size VMID +local:backup/vzdump-lxc-9100-2026_10_04-21_40_45.tar.zst tar.zst backup 648135998 9100 +local:backup/vzdump-lxc-9201-2026_10_15-22_43_40.tar.zst tar.zst backup 3364084456 9201 +local:backup/vzdump-lxc-9201-2026_10_17-04_32_43.tar.zst tar.zst backup 3479976346 9201 +local:backup/vzdump-lxc-9201-2026_10_18-04_37_41.tar.zst tar.zst backup 1867626596 9201 +== felhom-pve +Mon Oct 19 01:51:13 UTC 2026 +felhom-agent 0.159.2 +"host_id": "demo-felhom-8363b5" +"local_backup_retention": 3 +Volid Format Type Size VMID +local:backup/vzdump-lxc-9100-2026_07_18-18_30_52.tar.zst tar.zst backup 612397450 9100 +local:backup/vzdump-lxc-9100-2026_07_20-17_50_57.tar.zst tar.zst backup 648549366 9100 +local:backup/vzdump-lxc-9100-2026_08_03-06_58_00.tar.zst tar.zst backup 649547835 9100 +local:backup/vzdump-lxc-9100-2026_08_03-09_15_34.tar.zst tar.zst backup 649547835 9100 +local:backup/vzdump-lxc-9201-2026_07_28-01_27_56.tar.zst tar.zst backup 5820882781 9201 +local:backup/vzdump-lxc-9201-2026_07_28-06_44_22.tar.zst tar.zst backup 5840583923 9201 +local:backup/vzdump-lxc-9201-2026_07_28-17_53_26.tar.zst tar.zst backup 5929975285 9201 +{'local_backup_target': 'felhom-backup', 'local_backup_retention': 3, 'restore_test_cadence_seconds': 0, 'backup_cadence_seconds': 0, 'backup_targets': [{'target_id': 'felhom-pbs', 'cadence_seconds': 604800, 'keep_last': 0}]} +Name Type Status Total (KiB) Used (KiB) Available (KiB) % +felhom-backup dir active 960303848 7518604 903930732 0.78% +felhom-pbs pbs active 0 0 0 0.00% +local dir active 98497780 33631712 59816520 34.14% +local-lvm lvmthin active 365760512 11082543 354677968 3.03% +time=2026-10-16T05:03:53.319+02:00 level=INFO msg="backup: completed" vmid=9201 target=felhom-backup archive=felhom-backup:backup/vzdump-lxc-9201-2026_10_16-05_03_12.tar.zst size_bytes=1300947312 uncovered_volumes=2 +time=2026-10-17T05:07:43.382+02:00 level=INFO msg="backup: completed" vmid=9201 target=felhom-backup archive=felhom-backup:backup/vzdump-lxc-9201-2026_10_17-05_07_02.tar.zst size_bytes=1334976334 uncovered_volumes=2 +time=2026-10-18T05:08:13.307+02:00 level=INFO msg="backup: completed" vmid=9201 target=felhom-backup archive=felhom-backup:backup/vzdump-lxc-9201-2026_10_18-05_07_32.tar.zst size_bytes=1296570428 uncovered_volumes=2 +Volid Format Type Size VMID +felhom-backup:backup/vzdump-lxc-9201-2026_10_16-05_03_12.tar.zst tar.zst backup 1300947312 9201 +felhom-backup:backup/vzdump-lxc-9201-2026_10_17-05_07_02.tar.zst tar.zst backup 1334976334 9201 +felhom-backup:backup/vzdump-lxc-9201-2026_10_18-05_07_32.tar.zst tar.zst backup 1296570428 9201 diff --git a/documentation/audits/day-2026-10-19/P1/r1093-after-journal.txt b/documentation/audits/day-2026-10-19/P1/r1093-after-journal.txt new file mode 100644 index 00000000..dd8044b5 --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/r1093-after-journal.txt @@ -0,0 +1,32 @@ +time=2026-10-19T03:49:56.342+02:00 level=INFO msg="audit: gate decision" class=storage_wipe host=demo-hp-bb76ea guest="" source=one_shot_job disposition=customer_confirmable allowed=false reason=pending_confirmation key_id="" nonce="" durab +time=2026-10-19T03:49:56.342+02:00 level=INFO msg="gate decision (storage wipe)" role=user-data disposition=customer_confirmable allowed=false reason=pending_confirmation durable_id=byid:wwn-0x3333333000000fa0-part1+fsuuid:ef8fc766-1e12-491 +time=2026-10-19T03:49:56.342+02:00 level=WARN msg="local-api: user-data data-bearing format refused" vmid=9201 device=/dev/sdb1 durable_id=byid:wwn-0x3333333000000fa0-part1+fsuuid:ef8fc766-1e12-491e-b6f2-31433e1989c8 reason=pending_confirma +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +backup-success-state.json +controller-swap-9201.json +drive-intents.json +escrow-stage +felhom-sshd +format-job.json +guest-binds.json +guest-disk-trim.json +guests +journal.log +local-api.crt +local-api.key +local-tokens.log +nonces.log +os +pbsdr +restore-test-state.json +selfupdate +units +wg diff --git a/documentation/audits/day-2026-10-19/P1/r1093-format-route.txt b/documentation/audits/day-2026-10-19/P1/r1093-format-route.txt new file mode 100644 index 00000000..f4c6fb3a --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/r1093-format-route.txt @@ -0,0 +1,39 @@ +Mon Oct 19 01:49:49 UTC 2026 +new test disk: /dev/sdb +NAME SIZE MODEL +sdb 64M scsi_debug +--- the empty partition (the R-1093 input): +{ + "blockdevices": [ + { + "name": "sdb1", + "fstype": null, + "pttype": "gpt" + } + ] +} +DEVNAME=/dev/sdb1 +PART_ENTRY_SCHEME=gpt +PART_ENTRY_UUID=aec56a69-b9a0-46de-9c8e-911ca8558717 +PART_ENTRY_TYPE=0fc63daf-8483-4772-8e79-3d69d8477de4 +PART_ENTRY_NUMBER=1 +PART_ENTRY_OFFSET=2048 +PART_ENTRY_SIZE=126976 +PART_ENTRY_DISK=8:16 +blkid rc=0 +lrwxrwxrwx 1 root root 9 Oct 19 03:49 scsi-33333333000000fa0 -> ../../sdb +lrwxrwxrwx 1 root root 10 Oct 19 03:49 scsi-33333333000000fa0-part1 -> ../../sdb1 +lrwxrwxrwx 1 root root 9 Oct 19 03:49 wwn-0x3333333000000fa0 -> ../../sdb +--- POST /disks/format on the EMPTY partition (no confirmation sent): +HTTP 200 {"ok":true,"data":{"vmid":9201,"device":"/dev/sdb1","formatted":true,"data_bearing":false,"reason":"blank device formatted ext4","durable_id":"byid:wwn-0x3333333000000fa0-part1","fs_uuid":"ef8fc766-1e12-491e-b6f2-31433e1989c8"}} + +--- the partition now: +TYPE=ext4 +PART_ENTRY_SCHEME=gpt +--- CONTROL: the same call again, on the now-ext4 partition: +HTTP 403 {"ok":false,"data":{"vmid":9201,"device":"/dev/sdb1","formatted":false,"data_bearing":true,"reason":"device has a ext4 filesystem","role":"user-data","needs_confirmation":true,"durable_id":"byid:wwn-0x3333333000000fa0-part1+fsuuid:ef8fc766-1e12-491e-b6f2-31433e1989c8"},"error":"device is data-bearing — customer confirmation required"} + +--- teardown +not mounted +scsi_debug removed +0 diff --git a/documentation/audits/day-2026-10-19/P1/release-agent.txt b/documentation/audits/day-2026-10-19/P1/release-agent.txt new file mode 100644 index 00000000..979a799e --- /dev/null +++ b/documentation/audits/day-2026-10-19/P1/release-agent.txt @@ -0,0 +1,102 @@ +[release-agent] building 0.160.0 … +[release-agent] built ok: sha256 7ebb547f2b1ab93544ba828d3040351b60c4126327a5b85bbcb33f8f2b3dfca1 +[release-agent] config bundle built: sha256 6b06090190ff609af1fe9842447ebf385fd52da4be382bc7ca708b558c8e202f +[release-agent] tagging v0.160.0 at c11e3e2 … +[release-agent] publishing … +[publish-agent] publishing /tmp/felhom-agent-YBD0P9 (16071264 bytes, sha256 7ebb547f2b1ab935…) → https://gitea.dooplex.hu/api/packages/admin/generic/felhom-agent/0.160.0/felhom-agent +[publish-agent] pre-delete existing artifact: HTTP 404 (404/204 expected) +[publish-agent] upload OK (HTTP 201) +[publish-agent] round-trip GET verified (sha256 matches) +[publish-agent] DONE. Record in the hub operator UI (Configs → Day-0 artifacts): agent 0.160.0 / 7ebb547f2b1ab93544ba828d3040351b6AGENT_VERSION=0.160.0 +AGENT_SHA256=7ebb547f2b1ab93544ba828d3040351b60c4126327a5b85bbcb33f8f2b3dfca1 +pre-push [felhom-agent]: running scripts/agent_gates.py --fast ... +agent_gates — 4 gate(s) [--fast] + --fast SKIPPED (deliberate periodic runs, never in a hook): published, gate-decoys + +============================================================================== +== gate: reuse-refs (reuse_refs_check.py /mnt/5_hdd/felhom.eu/git/felhom-agent) +============================================================================== +note [felhom-agent] line 190: localapi/debuglogs_test.go (resolved by suffix → internal/localapi/debuglogs_test.go) +note [felhom-agent] line 206: hub/internal/store/dr_recipe.go (cross-repo → felhom.eu/hub/internal/store/dr_recipe.go) +OK [felhom-agent]: 118 cited paths — exact 116, suffix 1, ambiguous 0, cross-repo 1, FAILED 0 (siblings searched: app-catalog-felhom.eu, cc-secrets, felhom-controller, felhom.eu, felhom.eu-media, felhom.eu-sizing-push, felhom.eu-wt-sizing) + +============================================================================== +== gate: instructions (instructions_gate.py /mnt/5_hdd/felhom.eu/git/felhom-agent) +============================================================================== +instructions_gate: /mnt/5_hdd/felhom.eu/git/felhom-agent + CLAUDE.md effective lines : 108 (ceiling 200) + version literals : 0 + TEMPORARY blocks : 0 + rule files : 6 (5 path-scoped) + workspace file : SYMLINK -> felhom.eu/documentation/runbooks/workspace-CLAUDE.md (resolves to the versioned copy) + memory index : 200 lines (ceiling 200), 25109 bytes (ceiling 25600) + memory index content : 28 version literal(s), 3 host address(es), 0 expired statement(s) [WARN only] + memory topic files : 183 indexed, 4 orphaned, 41 archived + register citations : 6 cited, 1116 register items known + +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md:31: version literal '0.14.0' — the fleet is not uniform, so it is stale within a day. Not a failure: Claude writes this file between sessions, so this warning is aimed at the model that will next edit it, not at whoever is pushing. + - **[restic 0.14.0 `--verify` is size+mtime, NOT content](restic-0140-verify-and-lock-sema +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md:90: version literal '0.142.0' — the fleet is not uniform, so it is stale within a day. Not a failure: Claude writes this file between sessions, so this warning is aimed at the model that will next edit it, not at whoever is pushing. + - [Offsite continuity](offsite-continuity-2026-07-17.md) — ctrl 0.142.0 orphan guard + hub +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md:90: version literal '0.60.0' — the fleet is not uniform, so it is stale within a day. Not a failure: Claude writes this file between sessions, so this warning is aimed at the model that will next edit it, not at whoever is pushing. + - [Offsite continuity](offsite-continuity-2026-07-17.md) — ctrl 0.142.0 orphan guard + hub +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md:97: version literal '0.152.0' — the fleet is not uniform, so it is stale within a day. Not a failure: Claude writes this file between sessions, so this warning is aimed at the model that will next edit it, not at whoever is pushing. + - **[Hub operator UI: CC uses its token HUB_TOKEN, not the password](hub-operator-ui-basic +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md:101: version literal '0.90.1' — the fleet is not uniform, so it is stale within a day. Not a failure: Claude writes this file between sessions, so this warning is aimed at the model that will next edit it, not at whoever is pushing. + - [Agent 0.90.1 is wrapper-only](agent-0901-is-wrapper-only.md) — do NOT publish the binar +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md:103: version literal '0.144.0' — the fleet is not uniform, so it is stale within a day. Not a failure: Claude writes this file between sessions, so this warning is aimed at the model that will next edit it, not at whoever is pushing. + - [SMB „Megosztás" R-7 slice 1](smb-sharing-r7-slice1-2026-07-18.md) — ctrl 0.144.0 + felh +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md: ... and 22 more version literal(s) — full list from the tally counts above. +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md:59: host address '192.168.0.192' — operations/nodes.md is the single home for these. Not a failure: Claude writes this file between sessions, so this warning is aimed at the model that will next edit it, not at whoever is pushing. + - [hub.felhom.eu resolves to the LAN here](hub-resolves-to-lan-on-dooplex-network.md) — 19 +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md:78: host address '167.233.158.164' — operations/nodes.md is the single home for these. Not a failure: Claude writes this file between sessions, so this warning is aimed at the model that will next edit it, not at whoever is pushing. + - [Offsite PBS box RAM ceiling](offsite-pbs-box-ram-ceiling-2026-07-27.md) — **root SSH = +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory/MEMORY.md:186: host address '192.168.0.180' — operations/nodes.md is the single home for these. Not a failure: Claude writes this file between sessions, so this warning is aimed at the model that will next edit it, not at whoever is pushing. + - **CC runs ON DooPlex** (192.168.0.180) — repos `/mnt/5_hdd/felhom.eu/git/felhom-*`, buil +WARNING: /mnt/5_hdd/felhom.eu/git/.claude-memory: 4 top-level topic file(s) are not referenced by MEMORY.md, so nothing will ever read them: f10-demo-hp-offsite-resolved-2026-07-23.md, launcher-v0163-2026-07-24.md, peti-return-p1-stop-2026-07-13.md, stopped-not-fault-v0164-2026-07-24.md + +instructions_gate: OK (11 warning(s)) + +============================================================================== +== gate: release-complete (check-release-complete.py) +============================================================================== +check-release-complete — the newest CHANGELOG version is a complete release + newest CHANGELOG version: v0.159.2 + ok tag v0.159.2 -> 65c1994d3b, an ancestor of HEAD + ok package 0.159.2 is downloadable + +check-release-complete: v0.159.2 is tagged, placed and published. + +============================================================================== +== gate: observations (observations_gate.py /mnt/5_hdd/felhom.eu/git/felhom-agent) +============================================================================== +observations gate OK — REPORT.md has no observations section (nothing to check) + +============================================================================== +== summary +============================================================================== + reuse-refs OK (exit 0) + instructions OK (exit 0) + release-complete OK (exit 0c4126327a5b85bbcb33f8f2b3dfca1 +[release-agent] config bundle published (HTTP 201) +[release-agent] pushing v0.160.0 … +remote: . Processing 1 references +remote: Processed 1 references in total +To https://gitea.dooplex.hu0) + observations OK (exit 0) + +all agent gates OK +pre-push [felhom-agent]: gates OK - push proceeding. + + RELEASED — and installable, verified by download, not by this script's own say-so. + + version : 0.160.0 + tag : v0.160.0 + sha256 : 7ebb547f2b1ab93544ba828d3040351b60c4126327a5b85bbcb33f8f2b3dfca1 + bundle : 6b06090190ff609af1fe9842447ebf385fd52da4be382bc7ca708b558c8e202f (felhom-config-bundle.json — vouch it with the agent) + + NOT VOUCHED. Vouching is what points machines at this version and stays you/admin/felhom-agent.git + * [new tag] v0.160.0 -> v0.160.0 +[release-agent] verifying by independent download … +r deliberate act: + hub operator UI → Configs → Day-0 artifacts. Until then boxes keep installing the previous one.