Security app updates 2026-10-27: evidence of batch 1 (box walks rallly, romm, code-server, outline, vikunja; wishlist + bookstack bench and box; jellyfin bench; the walk's negative control). Docs only.
gates / gates (push) Successful in 1m58s
gates / gates (push) Successful in 1m58s
This commit is contained in:
admin committed
1 parent
bbc3acb817
commit
708a34512e
78 files changed
+7256
No files matched your search
+229
@@ -0,0 +1,229 @@
|
||||
{
|
||||
"app": "code-server",
|
||||
"walk": "security",
|
||||
"box_walk_version": 1,
|
||||
"verdict": "proven",
|
||||
"venue": "box 9202 (drill catalog), the guarded Update",
|
||||
"from": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.129.0"
|
||||
},
|
||||
"to": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
|
||||
},
|
||||
"observables_before": {
|
||||
"pinned_images": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.129.0"
|
||||
},
|
||||
"installed_images": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.129.0"
|
||||
},
|
||||
"catalog_images": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.129.0"
|
||||
},
|
||||
"live_compose_image_lines": [
|
||||
"image: lscr.io/linuxserver/code-server:4.129.0"
|
||||
],
|
||||
"docker_inspect": [
|
||||
"code-server lscr.io/linuxserver/code-server:4.129.0 running=true restarts=0"
|
||||
]
|
||||
},
|
||||
"setup_gate_before": {
|
||||
"browser": {
|
||||
"status": "401",
|
||||
"redirect": null
|
||||
},
|
||||
"script": {
|
||||
"status": "401",
|
||||
"redirect": null
|
||||
}
|
||||
},
|
||||
"seed": "none",
|
||||
"seed_why": "its front door is a browser IDE behind one password; it exposes no data API, and writing a file with docker exec would not be the front door (R-156)",
|
||||
"drill_commit": "e9d45463d7d9",
|
||||
"sync_waited_s": 15.8,
|
||||
"badge_before": {
|
||||
"hu": [
|
||||
{
|
||||
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
|
||||
"text": "Frissítés elérhető — ma"
|
||||
}
|
||||
],
|
||||
"en": [
|
||||
{
|
||||
"title": "A newer version of this app is available. Select the Update button to start it.",
|
||||
"text": "Update available — today"
|
||||
}
|
||||
]
|
||||
},
|
||||
"measured_at": "2026-10-27T13:14:40Z",
|
||||
"update": {
|
||||
"accepted": true,
|
||||
"http": "202",
|
||||
"phases": [
|
||||
{
|
||||
"t": 0.0,
|
||||
"phase": "checking",
|
||||
"label": "Ellenőrzés…",
|
||||
"updating": true,
|
||||
"error": null,
|
||||
"hold": null
|
||||
},
|
||||
{
|
||||
"t": 1.0,
|
||||
"phase": "backing-up",
|
||||
"label": "Biztonsági mentés készül a frissítés előtt…",
|
||||
"updating": true,
|
||||
"error": null,
|
||||
"hold": null
|
||||
},
|
||||
{
|
||||
"t": 23.6,
|
||||
"phase": "pulling",
|
||||
"label": "Új verzió letöltése…",
|
||||
"updating": true,
|
||||
"error": null,
|
||||
"hold": null
|
||||
},
|
||||
{
|
||||
"t": 47.1,
|
||||
"phase": "copying",
|
||||
"label": "Az adatok másolása a frissítés előtt…",
|
||||
"updating": true,
|
||||
"error": null,
|
||||
"hold": null
|
||||
},
|
||||
{
|
||||
"t": 51.2,
|
||||
"phase": "starting",
|
||||
"label": "Indítás az új verzióval…",
|
||||
"updating": true,
|
||||
"error": null,
|
||||
"hold": null
|
||||
},
|
||||
{
|
||||
"t": 52.3,
|
||||
"phase": "verifying",
|
||||
"label": "Működés ellenőrzése…",
|
||||
"updating": true,
|
||||
"error": null,
|
||||
"hold": null
|
||||
},
|
||||
{
|
||||
"t": 57.4,
|
||||
"phase": "done",
|
||||
"label": "Frissítve",
|
||||
"updating": false,
|
||||
"error": null,
|
||||
"hold": null
|
||||
}
|
||||
],
|
||||
"duration_s": 57.4,
|
||||
"final_phase": "done",
|
||||
"update_error": null,
|
||||
"hold_reason": null,
|
||||
"state": "running"
|
||||
},
|
||||
"observables_after": {
|
||||
"pinned_images": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
|
||||
},
|
||||
"installed_images": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
|
||||
},
|
||||
"catalog_images": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
|
||||
},
|
||||
"live_compose_image_lines": [
|
||||
"image: lscr.io/linuxserver/code-server:4.143.1"
|
||||
],
|
||||
"docker_inspect": [
|
||||
"code-server lscr.io/linuxserver/code-server:4.143.1 running=true restarts=0"
|
||||
]
|
||||
},
|
||||
"badge_after": {
|
||||
"hu": [
|
||||
{
|
||||
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
|
||||
"text": "Naprakész"
|
||||
}
|
||||
],
|
||||
"en": [
|
||||
{
|
||||
"title": "This app is running the newest version available.",
|
||||
"text": "Up to date"
|
||||
}
|
||||
]
|
||||
},
|
||||
"state_after": "running",
|
||||
"hold_after": null,
|
||||
"to_digests": {
|
||||
"code-server": "sha256:4524d0b00478e41264f42e0e660c1819e3b7d0c460f78ce73e44fa39b2b55134"
|
||||
},
|
||||
"four_observables": {
|
||||
"pinned": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
|
||||
},
|
||||
"installed": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
|
||||
},
|
||||
"catalog": {
|
||||
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
|
||||
},
|
||||
"live_compose": [
|
||||
"lscr.io/linuxserver/code-server:4.143.1"
|
||||
]
|
||||
},
|
||||
"setup_gate_after": {
|
||||
"browser": {
|
||||
"status": "401",
|
||||
"redirect": null
|
||||
},
|
||||
"script": {
|
||||
"status": "401",
|
||||
"redirect": null
|
||||
}
|
||||
},
|
||||
"memory": {
|
||||
"soak_s": 600,
|
||||
"interval_s": 10,
|
||||
"samples": 60,
|
||||
"containers": {
|
||||
"code-server": {
|
||||
"samples": 60,
|
||||
"anon_peak_bytes": 56635392,
|
||||
"limit_bytes": 1073741824,
|
||||
"anon_peak_pct": 5.3,
|
||||
"cgroup_peak_pct": 6.5,
|
||||
"oom_kill_delta": 0,
|
||||
"oom_killed_flag": false,
|
||||
"restarts_delta": 0,
|
||||
"running_all_samples": true,
|
||||
"cgroup": "/sys/fs/cgroup/system.slice/docker-3e70f1cab90c32e664a14c2861fdebbbf7c7bc27370465d09a60f0048b2a437d.scope"
|
||||
}
|
||||
},
|
||||
"oom_kills": 0,
|
||||
"restarts": 0,
|
||||
"peak_pct": 5.3
|
||||
},
|
||||
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak",
|
||||
"log": [
|
||||
"14:13:20 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['PASSWORD']",
|
||||
"14:13:21 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
|
||||
"14:14:11 [1] deployed, controller state=running, pinned={'code-server': 'lscr.io/linuxserver/code-server:4.129.0'}",
|
||||
"14:14:15 [2] setup gate as installed: {'browser': {'status': '401', 'redirect': None}, 'script': {'status': '401', 'redirect': None}}",
|
||||
"14:14:15 [3] seed: none — its front door is a browser IDE behind one password; it exposes no data API, and writing a file with docker exec would not be the front door (R-156)",
|
||||
"14:14:16 [5] drill commit e9d45463d7d9: code-server lscr.io/linuxserver/code-server:4.129.0 -> lscr.io/linuxserver/code-server:4.143.1 (push rc=0)",
|
||||
"14:14:25 [5] the box's drill mirror now at e9d45463",
|
||||
"14:14:40 [sync] the badge needed 15.8s and 2 sync+rescan rounds to catch up to lscr.io/linuxserver/code-server:4.143.1 — R-607's window, measured",
|
||||
"14:14:41 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
|
||||
"14:14:41 + 0.0s phase=checking label=Ellenőrzés… err=None hold=None",
|
||||
"14:14:42 + 1.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
|
||||
"14:15:04 + 23.6s phase=pulling label=Új verzió letöltése… err=None hold=None",
|
||||
"14:15:28 + 47.1s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
|
||||
"14:15:32 + 51.2s phase=starting label=Indítás az új verzióval… err=None hold=None",
|
||||
"14:15:33 + 52.3s phase=verifying label=Működés ellenőrzése… err=None hold=None",
|
||||
"14:15:38 + 57.4s phase=done label=Frissítve err=None hold=None",
|
||||
"14:15:57 [7] memory soak 600 s …",
|
||||
"14:26:03 [7] soak: peak 5.3% of the limit (anon), kills 0, restarts 0"
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,3 @@
|
||||
14:26:52 [5] drill commit 26f60a061f06: code-server lscr.io/linuxserver/code-server:4.143.1 -> lscr.io/linuxserver/code-server:4.129.0 (push rc=0)
|
||||
14:27:01 [5] the box's drill mirror now at 26f60a06
|
||||
26f60a061f06
|
||||
@@ -0,0 +1,23 @@
|
||||
14:13:20 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['PASSWORD']
|
||||
14:13:21 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}
|
||||
14:14:11 [1] deployed, controller state=running, pinned={'code-server': 'lscr.io/linuxserver/code-server:4.129.0'}
|
||||
14:14:15 [2] setup gate as installed: {'browser': {'status': '401', 'redirect': None}, 'script': {'status': '401', 'redirect': None}}
|
||||
14:14:15 [3] seed: none — its front door is a browser IDE behind one password; it exposes no data API, and writing a file with docker exec would not be the front door (R-156)
|
||||
14:14:16 [5] drill commit e9d45463d7d9: code-server lscr.io/linuxserver/code-server:4.129.0 -> lscr.io/linuxserver/code-server:4.143.1 (push rc=0)
|
||||
14:14:25 [5] the box's drill mirror now at e9d45463
|
||||
14:14:40 [sync] the badge needed 15.8s and 2 sync+rescan rounds to catch up to lscr.io/linuxserver/code-server:4.143.1 — R-607's window, measured
|
||||
14:14:41 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}
|
||||
14:14:41 + 0.0s phase=checking label=Ellenőrzés… err=None hold=None
|
||||
14:14:42 + 1.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None
|
||||
14:15:04 + 23.6s phase=pulling label=Új verzió letöltése… err=None hold=None
|
||||
14:15:28 + 47.1s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None
|
||||
14:15:32 + 51.2s phase=starting label=Indítás az új verzióval… err=None hold=None
|
||||
14:15:33 + 52.3s phase=verifying label=Működés ellenőrzése… err=None hold=None
|
||||
14:15:38 + 57.4s phase=done label=Frissítve err=None hold=None
|
||||
14:15:57 [7] memory soak 600 s …
|
||||
14:26:03 [7] soak: peak 5.3% of the limit (anon), kills 0, restarts 0
|
||||
14:26:03 [9] verdict proven -> /mnt/5_hdd/felhom.eu/git/felhom.eu/documentation/audits/security-app-updates-2026-10-27/walks/code-server/verdict.json
|
||||
14:26:03 RESULT proven — the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak
|
||||
14:26:09 [X] stop -> 200 {'ok': True, 'message': 'Stack code-server stop completed'}
|
||||
14:26:41 [X] remove (with drive data) -> 200 {'ok': True, 'data': {'removed': 'code-server', 'volumes_removed': ['code-server_codeserver_config'], 'hdd_paths_removed': [], 'hdd_paths_preserved': [], 'hdd_n
|
||||
14:26:50 [X] after remove: deployed=False leftovers=''
|
||||
+1
@@ -0,0 +1 @@
|
||||
WROTE code-server: {'code-server': 'lscr.io/linuxserver/code-server:4.129.0'} -> {'code-server': 'lscr.io/linuxserver/code-server:4.143.1'} peak 5.3% marks {'files_may_change': False, 'needs_person': None, 'memory_tight': False}
|
||||
Reference in new issue
Block a user