admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

drill 0242: teardown complete in three layers; R-501 filed
gates / gates (push) Successful in 19s
Details

Browse Source 
Machine: VM 330 destroyed with its disks. Host: ISO and scratch removed,
~8.5 GiB returned on nvme-scratch. Hub: customer drill0242 DELETED via the
cascade (journal #17), pages 404; its ep0 WireGuard peer dropped at the next
full-list push. Evidence pulled before the destroy. R-501: the documented
CI-check recipe reads only the last jobs page, which is not in id order.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
This commit is contained in:
authentik Default Admin
2026-09-14 16:40:59 +02:00
parent 38848ffbeb
commit 8c7f882d1c
5 changed files with 73 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
documentation/audits/evidence-drill-fresh-install-0242-2026-09-14/journal.md
+14
View File
@@ -480,3 +480,17 @@ the lock is honest about its length and lifts on time. Two properties recorded,
household out for 15 minutes, by design against guessing; and the lockout e-mail went to the
**operator only** (`Operator email sent for drill0242/claim_lockout`), while the screen tells the
customer.
## Teardown — three layers (`teardown-before.txt`, `teardown-layer1.txt`, `teardown-layer2.txt`, `teardown-layer3-hub.txt`)
Evidence was copied off the box **before** the destroy (`box-logs-final/`, 14:16, secret sweep 0).
| layer | UTC | result |
|---|---|---|
| **1. machine** | 14:16:23 | `qm destroy 330 --purge` → `qm list` empty; `/mnt/hdd_1/images/330` gone; `images/9202` untouched |
| **2. host** | 14:16:27 | ISO removed (0 left); `/root/drill0242` shredded, removed; `nvme-scratch` used **19 059 372 → 10 130 532 KiB**; `local` **24 768 200 → 23 013 832 KiB**; `local-lvm` 44.17 % before and after; 9201 and 9202 running; `vmbr9` pre-existed |
| **3. hub** | 14:35:15 | host stale at 14:34:45 (true `host_stale` operator mail); **customer DELETE cascade COMPLETE** (journal #17); customer and host pages 404; lists 0 (control 1) |
| 3b. ep0 peer | 14:40:00 | `10.77.0.5/32` removed at the 14:39:30 periodic push (5 → 4 peers); 4 m 14 s after the delete; control peer present |
**Disposition of `drill0242`: DELETED.** The hub's event stream and the three operator mails
(`claim_lockout`, `host_stale`, and the bind/enrol log lines) are append-only and stay, by design.