diff --git a/REPORT-r840-config-bundle-2026-10-04.md b/REPORT-r840-config-bundle-2026-10-04.md index 83588b8f..ec74e70a 100644 --- a/REPORT-r840-config-bundle-2026-10-04.md +++ b/REPORT-r840-config-bundle-2026-10-04.md @@ -11,7 +11,7 @@ Architecture read first: `11-os-updates.md` (§5.3, §5.4, §5.8, §5.9, §8), ` | A — what Tester 2 has | **done (read through the hub; no route to the box)** | The brief's timestamp reasoning was wrong (UTC vs local). Tester 2 has installer 1.30.0, agent 0.142.0, the crash guard armed, `live-restore` on, Docker 29.8.2, the re-made golden. It lacks only the R-858 wrapper fix. | | A — the `felhom-pbs` warning | **done: not a fault** | By design (R-723): a new box's first-hour tier skip is recorded, never mailed; the tier came 7 min later and backed up at 16:31 UTC. No row. | | B — the bundle route | **done, live on both demo boxes** | Agent 0.143.0 (bundle mode in `felhom-os-apply`, signed `agent_config_update`), hub 0.133.0, installer 1.31.0. Changed: the installer is NOT the self-update wrapper (it cannot do it); a one-time bootstrap is needed on older boxes. | -| C — Tester 2 | **act 1 sent; act 2 waits for the operator; act 3 not needed** | Act 1 (signed agent update to 0.143.0): queued 18:35 UTC — see "Tester 2" below. Act 2 needs the one by-hand bootstrap (R-862, the operator's tunnel). Act 3: `live-restore` is already on. | +| C — Tester 2 | **act 1 sent, NOT delivered (box offline since 18:06 UTC); act 2 waits for the operator; act 3 not needed** | Act 1: queued 18:35 UTC — see "Part C" below. Act 2 needs the one by-hand bootstrap (R-862, the operator's tunnel). Act 3: `live-restore` is already on. | | D — test approvals end | **done, live** | Hub 0.133.0 cancelled the 4 test approvals of 2026-10-04 at start (18:20 UTC). Changed: the operator's own Docker button approval was not backfilled (CC decision). | | E — self-heal after any Docker restart | **done, live (9202 + demo-hp)** | Controller 0.293.0. Changed: only a `docker.socket` restart breaks it; a dockerd crash or `systemctl restart docker` does not. | | F — new installs start with the approved fixes | **built; tonight's golden carries none** | `build-golden.sh` 3.2.0 `GOLDEN_GUEST_PKGS`. No guest release is in force tonight (the test one was cancelled), so the golden keeps the template (49 Debian updates pending for the next real approval). | @@ -51,6 +51,18 @@ Architecture read first: `11-os-updates.md` (§5.3, §5.4, §5.8, §5.9, §8), ` | golden | first 0.292.0 bake | the re-bake (live-restore + 29.8.2) | facts | | OS releases installed | TEST-approved | guest `os-guest-20261004-123933` (49 pkgs, 16:24) and host `os-host-20261004-124133` (106, 16:25), both approved "auto" 1.5 h after first seen = the TEST wait | `os_reports`, `os_releases` | +## Part C — Tester 2, what happened + +- **Act 1** (signed `agent_update` to 0.143.0): queued 18:35 UTC, **not delivered** — Tester 2 stopped reporting at + 18:06 UTC (host 18:05:48, controller 18:06:24). It was also silent 17:13–18:05 UTC, and its controller started at + 18:06:20 UTC, so the box restarted or was switched on in between. CC sent Tester 2 nothing before 18:35 UTC; the cause + is outside this work (power, network, or the tester). The job expires 19:20 UTC; if Tester 2 returns later, it is + refused as expired (harmless) and must be re-signed. +- **Act 2** (bundle): waits for the operator's one-time bootstrap (R-862). +- **Act 3** (`live-restore`): not needed — already on. +- No Docker step, no reboot, no app change was sent. Read-back of the System page line: still agent 0.142.0, Root files + `unknown`, guard armed, `live-restore` on (last report 18:05 UTC). + ## Part B — the bundle Shape, checks, trust rule, bootstrap: `11` §5.4.2; runbook `runbooks/config-bundle.md`. Red-proofs: 22 of 22 wrapper rules diff --git a/STATUS.md b/STATUS.md index f1199f55..de9509ff 100644 --- a/STATUS.md +++ b/STATUS.md @@ -33,6 +33,9 @@ test; the controller repairs itself after a Docker socket restart. Both demo box - New-install image 0.293.0 baked and approved. **Needs you (nothing breaks if you wait):** +- **Tester 2 is offline** since 20:06 local (and was off 19:13–20:05 local; it restarted in between). I sent it nothing + before 20:35. My agent update for it is queued but expires at 21:20 local; when the box is back I re-send it. + Worth asking the tester whether the box was switched off. - **Tester 2's one-time step** (5 minutes): connect your tunnel, `ssh -p 8822 felhom-op@10.77.0.5`, reveal the root password in the hub (Hosts → Tester-2 → Console access; this writes one line on Tester 2's timeline), `su -`, then run the three commands in `documentation/runbooks/config-bundle.md` ("Tester 2"). Tell me when done; I send the package.