From 5791fa83e357bcaad189086dd19a866371bbd555 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Thu, 15 Oct 2026 11:16:41 +0200 Subject: [PATCH] =?UTF-8?q?REPORT-media-build-2026-10-15:=20what=20waits?= =?UTF-8?q?=20on=20the=20operator=20(vouch=200.313.0=20+=20floor,=20hub=20?= =?UTF-8?q?yes,=20a=20Plex=20code),=20what=20is=20proven,=20Prowlarr=20not?= =?UTF-8?q?=20done,=20register=20163=E2=86=92153?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS --- REPORT-media-build-2026-10-15.md | 77 ++++++++++++++++++++++++++++++++ 1 file changed, 77 insertions(+) create mode 100644 REPORT-media-build-2026-10-15.md diff --git a/REPORT-media-build-2026-10-15.md b/REPORT-media-build-2026-10-15.md new file mode 100644 index 00000000..c95b8b8d --- /dev/null +++ b/REPORT-media-build-2026-10-15.md @@ -0,0 +1,77 @@ +# Media build, 2026-10-15 — Plex gate, the 0.312.0/0.313.0 release train, media apps on every drive + +## What waits on you + +1. **Vouch golden 0.313.0, then raise the floor to 0.313.0.** Hub → Configuration → Day-0 artifacts: golden 0.313.0, agent + 0.156.1, min_agent 0.155.0, Save. Then a separate save: global floor 0.313.0, min_agent 0.155.0. (Golden 0.312.0 is + baked too; 0.313.0 carries its https fix, so one vouch is enough.) +2. **Hub 0.151.0 (a mail when a drive comes back): may I build and deploy it?** Say „yes”. +3. **One more Plex code (5 min):** plex.tv/claim → save the code in `~/.felhom-demohp/plex-claim` on DooPlex (`chmod 600`). + The box claims the waiting Plex on demo-hp through its own Plex page at once. +4. Earlier, still open: remove „plex-k6” from your Plex account (plex.tv → Settings → Authorized Devices). + +## 1. Plex — closed to strangers until set up? Code after start? +- **Yes, on every controller:** the live catalog's Plex has the setup gate (`9a23ee5`). Proven on demo-hp: a stranger over + the internet or the home network gets only the gate; the household gets in. +- **Code after start: yes, on controller 0.313.0.** The wizard does not ask for it; the Plex page asks once Plex runs; the + gate opens only when Plex itself says „claimed”, and „Kész” is refused before that (proven on demo-hp up to the code). +- **Two security reviews** of my catalog pushes found that older controllers could still open an unclaimed Plex. The code + is required again for them. A status probe I tried to cover them **opened an unclaimed Plex for about 26 seconds** on the + test box (Plex answers 401 while it starts). I removed it within minutes. The rest closes when the floor is 0.313.0. + +## 2. https — released? +Golden 0.312.0 and 0.313.0 are baked and published. Not released until your vouch and floor. It runs today on Tester 1, +demo-hp and demo-felhom (by hand, 2026-10-14). + +## 3. Media apps on every drive — proven how +Controller 0.313.0 + the `media_library` marker. On Tester 1, after the move: every stored path, every library item, the +watch marks and all 69 files identical. A new drive (Media D) was made ready in every app in one run; two more runs +changed nothing. On demo-hp the live catalog linked Sonarr and qBittorrent by itself and Sonarr made a real hardlink. +13 hardlink pairs intact on Tester 1. + +## 4. Drive added / pulled / back / safe removal — what the household sees +- **Added or pulled or back:** a notice on the storage page and the dashboard: which apps must restart, „Újraindítás most” + (it asks again if something is playing) or „Később” (03:30), and per drive „restarted since: yes/no”. One click. +- **Pulled:** nothing lost; the file browser lets go of the drive. **Back:** the file browser shows it again at once. +- **Safe removal:** only that drive's torrents pause, every app lets go before the unmount, the drive stays known. When the + disk comes back the box finds it by itself (7 s); after the restart the torrents seed again, no re-check. No household step. + +## 5. Old installs +Sonarr/Radarr from before `bc54c01` are repaired by themselves, no file moved (tested with the measured K7 sequence). + +## 6. Prowlarr +**Not done.** The live catalog needs the full new-app checklist with a bench upgrade test and a box walk (about half a +day). Prowlarr stays in the drill catalog; R-1048 stays open. I can do it next. + +## 7. Claims in the prompt that turned out wrong +- A Plex `setup_done_probe` on `/identity` cannot work: Plex answers JSON only with an Accept header the probe never sent. + And a status probe is unsafe (401 while Plex starts). +- „A small capped test drive” on demo-hp 9201: there is no free block device on demo-hp; the two-drive proof is Tester 1's. +- „ADVERTISE_IP: measure whether the apps find the server without it”: not measured (it needs a Plex app and your account); + the template keeps it, per the 2026-10-14 measurement. +- „Agent change only if the controller cannot”: none was needed. But the agent reports a pulled registered disk as + „attached”; presence is its backing device. + +## Found and fixed on the boxes (no row) +qBittorrent 5 logs in with HTTP 204; the drive gate raced a safe removal (false „returned”, then a „disconnected” mail); +presence read from the agent's state. Each has a red-proved test. + +## Decisions recorded +`09` §3 247 (bake first; supersedes 7), 248 (Plex through its own token), 249 (HSTS one day). The bake-first rule is in +all five rule-file copies, `CLAUDE.md`, the manual-build and publish-train runbooks, and two memories. + +## Commits +felhom.eu: `e0a5fe96` through `1ddf967b` (decisions, Part A, goldens, Part G evidence, docs, register, STATUS). Controller: +`331be17`, `78c8942`, `f580d88`, `a09cab1` (qBittorrent 204), `37ffa3b` (safe removal), `372d6e5` (Plex), `f327bc5`, +`cac92a4` (v0.313.0). Hub: `12552aca` (v0.151.0, not deployed). Catalog: `0c67873`, `9a23ee5`, `0188430`, `b6986eb`, `674d859` +(probe, reverted), `0f1e78b`. Drill: `6589376` + Plex copies. Agent: `7d4e564` (rule file). CI green by head_sha: +felhom.eu 1838, controller 1836, catalog 1834, agent 1818. + +## Register +Before 163 · after 153 · opened 1 (R-1050) · closed 11 (R-1041, R-1046, R-1024, R-1026, R-1027, R-1031, R-1032, R-1037, +R-1038, R-1044, R-1047). STATUS: 57 lines. `unproven.py --summary`: unchanged. + +## Teardown +Machines: demo-hp 9201 — the test Plex (gated, unclaimed, for item 3) stays until the claim, then removed; Sonarr and +qBittorrent removed; controller rc.4 by hand. Tester 1: the rig stays (R-1022, Media D added to its list); controller rc.4 +by hand. Host: demo-hp VM 341 has the 20 GB Media D disk (scsi5). Drill VM back to `virgin`. Hub: nothing changed.