Day 3 2026-10-19: passphrase locks once the box uses its own key (D19; hub 0.161.0, controller 0.334.0 floor), every ep0 household gets a prune job (tenantsync v1.3.0), demo-hp address clean; register 163 -> 161 (closed 3, opened R-1167)
gates / gates (push) Successful in 7m23s
gates / gates (push) Successful in 7m23s
This commit is contained in:
admin committed
1 parent
97f27a7528
commit
a28f162c66
23 files changed
+330
-14
No files matched your search
@@ -0,0 +1,43 @@
|
||||
Mon Oct 19 11:01:33 UTC 2026
|
||||
{"id":"prune-demo-felhom","ns":"demo-felhom","keep-last":null,"keep-weekly":2,"schedule":"03:30"}
|
||||
{"id":"prune-operator-hubdb","ns":"operator","keep-last":null,"keep-weekly":8,"schedule":"03:45"}
|
||||
{"id":"prune-demo-hp","ns":"demo-hp","keep-last":null,"keep-weekly":2,"schedule":"03:30"}
|
||||
ns/Tester-2/ct/9201/2026-10-04T16:31:13Z
|
||||
ns/demo-felhom/ct/9201/2026-10-06T04:21:09Z
|
||||
ns/demo-felhom/ct/9201/2026-10-13T04:22:51Z
|
||||
ns/demo-hp/ct/9201/2026-10-08T20:34:27Z
|
||||
ns/demo-hp/ct/9201/2026-10-15T20:38:47Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-09T22:23:15Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-10T22:22:52Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-11T22:23:50Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-12T22:22:36Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-13T22:21:39Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-14T22:21:12Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-15T22:20:59Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-16T22:21:23Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-17T22:22:32Z
|
||||
ns/operator/host/dooplex-gitea/2026-10-18T22:22:01Z
|
||||
ns/operator/host/dooplex-hub/2026-10-06T00:32:21Z
|
||||
ns/operator/host/dooplex-hub/2026-10-07T00:31:55Z
|
||||
ns/operator/host/dooplex-hub/2026-10-08T00:31:27Z
|
||||
ns/operator/host/dooplex-hub/2026-10-09T00:31:46Z
|
||||
ns/operator/host/dooplex-hub/2026-10-10T00:30:56Z
|
||||
ns/operator/host/dooplex-hub/2026-10-11T00:30:55Z
|
||||
ns/operator/host/dooplex-hub/2026-10-12T00:32:07Z
|
||||
ns/operator/host/dooplex-hub/2026-10-13T00:31:03Z
|
||||
ns/operator/host/dooplex-hub/2026-10-14T00:31:15Z
|
||||
ns/operator/host/dooplex-hub/2026-10-15T00:32:14Z
|
||||
ns/operator/host/dooplex-hub/2026-10-16T00:30:12Z
|
||||
ns/operator/host/dooplex-hub/2026-10-17T00:31:09Z
|
||||
ns/operator/host/dooplex-hub/2026-10-18T00:31:48Z
|
||||
ns/operator/host/dooplex-hub/2026-10-19T00:32:07Z
|
||||
ns/tester-1/ct/9201/2026-10-04T19:57:18Z
|
||||
ns/tester-1/ct/9201/2026-10-11T20:02:13Z
|
||||
ns/tester-1/ct/9201/2026-10-18T20:04:51Z
|
||||
== tester-1 keep-weekly 2 (PBS dry-run)
|
||||
2026-10-04T19:57:18Z REMOVE
|
||||
2026-10-11T20:02:13Z keep
|
||||
2026-10-18T20:04:51Z keep
|
||||
== Tester-2 keep-weekly 2 (PBS dry-run)
|
||||
2026-10-04T16:31:13Z keep
|
||||
32
|
||||
@@ -0,0 +1,9 @@
|
||||
Prune job created: prune-tester-1
|
||||
Prune job created: prune-Tester-2
|
||||
Mon Oct 19 13:35:57 UTC 2026
|
||||
{"id":"prune-demo-felhom","ns":"demo-felhom","max-depth":0,"keep-weekly":2,"keep-daily":null,"schedule":"03:30"}
|
||||
{"id":"prune-demo-hp","ns":"demo-hp","max-depth":0,"keep-weekly":2,"keep-daily":null,"schedule":"03:30"}
|
||||
{"id":"prune-tester-1","ns":"tester-1","max-depth":0,"keep-weekly":2,"keep-daily":null,"schedule":"03:30"}
|
||||
{"id":"prune-Tester-2","ns":"Tester-2","max-depth":0,"keep-weekly":2,"keep-daily":null,"schedule":"03:30"}
|
||||
{"id":"prune-operator-hubdb","ns":"operator","max-depth":0,"keep-weekly":8,"keep-daily":14,"schedule":"03:45"}
|
||||
32
|
||||
@@ -0,0 +1,3 @@
|
||||
ARP watch for 192.168.0.104 (demo-hp vmbr0 7c:d3:0a:77:d9:76), every 10 s for 30 min, from 10:59:56 UTC; a line is written on every change
|
||||
10:59:56 mac=7c:d3:0a:77:d9:76 ssh=open
|
||||
end 11:29:59: 180 samples, 0 not demo-hp's MAC
|
||||
@@ -0,0 +1,3 @@
|
||||
config file found: yes; key length: 64
|
||||
GET /box-config with the box's own key: HTTP 200; top-level fields: assets backup customer git hub infrastructure logging monitoring notifications offsite paths self_update stacks system web
|
||||
control, a wrong key: HTTP 401
|
||||
@@ -0,0 +1,8 @@
|
||||
Mon Oct 19 14:07:28 UTC 2026
|
||||
36412c6a24e1a1e4a39627d0eb2c6e1441ebd12efe4d92951b4e13d017642ed6 /usr/local/bin/felhom-tenantsync
|
||||
# felhom-tenantsync v1.3.0 — the offsite endpoint's per-customer PBS tenancy surface (PBS DR tier
|
||||
== usage (read-only)
|
||||
{"status":"ok","total":105089261568,"used":14276538368,"avail":90795945984,"unpruned_checked":true,"unpruned":[]}
|
||||
== fingerprint op still answers
|
||||
ok
|
||||
prune-Tester-2 prune-demo-felhom prune-demo-hp prune-operator-hubdb prune-tester-1
|
||||
@@ -0,0 +1,5 @@
|
||||
b32b2f3579ce44048af6352606764469693a65df549cc27a0106c734c7a8bb0f /usr/local/bin/felhom-tenantsync
|
||||
# felhom-tenantsync v1.2.0 — the offsite endpoint's per-customer PBS tenancy surface (PBS DR tier
|
||||
-rwxr-xr-x 1 root root 12004 Jul 17 19:15 /usr/local/bin/felhom-tenantsync
|
||||
-rwxr-xr-x 1 root root 8253 Jul 10 18:57 /usr/local/bin/felhom-tenantsync.bak-1.0.0
|
||||
-rwxr-xr-x 1 root root 10480 Jul 17 11:12 /usr/local/bin/felhom-tenantsync.bak-1.1.0
|
||||
@@ -0,0 +1,5 @@
|
||||
GET /config with the box's passphrase: HTTP 409; carries hub.api_key: 0
|
||||
refusal text: Conflict: this customer already has a live box, which uses its own key. The passphrase gives no keys now. For a reinstall the operator deletes the old host first.
|
||||
config file found: yes; key length: 64
|
||||
GET /box-config with the box's own key: HTTP 200; top-level fields: assets backup customer git hub infrastructure logging monitoring notifications offsite paths self_update stacks system web
|
||||
control, a wrong key: HTTP 401
|
||||
@@ -0,0 +1 @@
|
||||
GET /config with the box's passphrase: HTTP 200; carries hub.api_key: 0
|
||||
@@ -0,0 +1,4 @@
|
||||
## per-customer floors 0.334.0 / MinAgent 0.158.1 — 14:16:11 UTC
|
||||
tester-1: HTTP/1.1 303 See Other Location: /customers/tester-1?flash=floor_set
|
||||
demo-hp: HTTP/1.1 303 See Other Location: /customers/demo-hp?flash=floor_set
|
||||
demo-felhom: HTTP/1.1 303 See Other Location: /customers/demo-felhom?flash=floor_set
|
||||
@@ -0,0 +1 @@
|
||||
14:30:08 demo-hp=0.334.0 demo-felhom=0.334.0 tester-1=0.334.0
|
||||
@@ -0,0 +1,27 @@
|
||||
=== demo-hp (enkisfelhom.hu) 14:31:15
|
||||
containers: 24 running; not healthy/running: traefik Up 3 days;
|
||||
unhealthy: 0
|
||||
2026/10/19 14:30:06 updater.go:855: [INFO] [selfupdate] Post-update startup: update successful (0.334.0-rc.1 → 0.334.0)
|
||||
allow-list refusals since start: 0
|
||||
2026/10/19 14:30:06 sync.go:142: [INFO] [sync] Initial sync: Sablonok naprakészek — nincs változás
|
||||
installed apps (stacks with app.yaml): 12
|
||||
public https://felhom.enkisfelhom.hu/: 302
|
||||
public https://files.enkisfelhom.hu/: 200
|
||||
=== demo-felhom (demo-felhom.eu) 14:31:18
|
||||
containers: 9 running; not healthy/running: traefik Up 3 days;
|
||||
unhealthy: 0
|
||||
2026/10/19 14:16:13 [INFO] [selfupdate] Post-update startup: update successful (0.333.0 → 0.334.0)
|
||||
allow-list refusals since start: 0
|
||||
2026/10/19 14:16:13 [INFO] [sync] Initial sync: Sablonok naprakészek — nincs változás
|
||||
installed apps (stacks with app.yaml): 5
|
||||
public https://felhom.demo-felhom.eu/: 302
|
||||
public https://files.demo-felhom.eu/: 200
|
||||
=== tester-1 (enkicsifelhom.hu) 14:31:19
|
||||
containers: 10 running; not healthy/running: traefik Up 3 days;
|
||||
unhealthy: 0
|
||||
2026/10/19 14:16:21 [INFO] [selfupdate] Post-update startup: update successful (0.333.0 → 0.334.0)
|
||||
allow-list refusals since start: 0
|
||||
2026/10/19 14:16:22 [INFO] [sync] Initial sync: Sablonok naprakészek — nincs változás
|
||||
installed apps (stacks with app.yaml): 3
|
||||
public https://felhom.enkicsifelhom.hu/: 302
|
||||
public https://files.enkicsifelhom.hu/: 200
|
||||
@@ -0,0 +1,33 @@
|
||||
control NEGATIVE (a stub answering 200 over plain http): convicted, as it must (200 -)
|
||||
== tester-1 (enkicsifelhom.hu): 6 public name(s)
|
||||
OK control POSITIVE http://felhom.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://felhom.enkicsifelhom.hu/r1033-check?q=1
|
||||
OK http://files.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://files.enkicsifelhom.hu/r1033-check?q=1
|
||||
OK http://no-such-name-r1033.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://no-such-name-r1033.enkicsifelhom.hu/r1033-check?q=1
|
||||
OK http://paperless.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://paperless.enkicsifelhom.hu/r1033-check?q=1
|
||||
OK http://paste.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://paste.enkicsifelhom.hu/r1033-check?q=1
|
||||
OK http://wiki.enkicsifelhom.hu/r1033-check?q=1 -> 301 https://wiki.enkicsifelhom.hu/r1033-check?q=1
|
||||
== demo-hp (enkisfelhom.hu): 14 public name(s)
|
||||
OK http://arcade.enkisfelhom.hu/r1033-check?q=1 -> 301 https://arcade.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://books.enkisfelhom.hu/r1033-check?q=1 -> 301 https://books.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://docs.enkisfelhom.hu/r1033-check?q=1 -> 301 https://docs.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://felhom.enkisfelhom.hu/r1033-check?q=1 -> 301 https://felhom.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://files.enkisfelhom.hu/r1033-check?q=1 -> 301 https://files.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://gist.enkisfelhom.hu/r1033-check?q=1 -> 301 https://gist.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://ha.enkisfelhom.hu/r1033-check?q=1 -> 301 https://ha.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://no-such-name-r1033.enkisfelhom.hu/r1033-check?q=1 -> 301 https://no-such-name-r1033.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://papir.enkisfelhom.hu/r1033-check?q=1 -> 301 https://papir.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://paste.enkisfelhom.hu/r1033-check?q=1 -> 301 https://paste.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://pdf.enkisfelhom.hu/r1033-check?q=1 -> 301 https://pdf.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://plex.enkisfelhom.hu/r1033-check?q=1 -> 301 https://plex.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://travel.enkisfelhom.hu/r1033-check?q=1 -> 301 https://travel.enkisfelhom.hu/r1033-check?q=1
|
||||
OK http://wiki.enkisfelhom.hu/r1033-check?q=1 -> 301 https://wiki.enkisfelhom.hu/r1033-check?q=1
|
||||
== demo-felhom (demo-felhom.eu): 8 public name(s)
|
||||
OK http://felhom.demo-felhom.eu/r1033-check?q=1 -> 301 https://felhom.demo-felhom.eu/r1033-check?q=1
|
||||
OK http://files.demo-felhom.eu/r1033-check?q=1 -> 301 https://files.demo-felhom.eu/r1033-check?q=1
|
||||
OK http://gist.demo-felhom.eu/r1033-check?q=1 -> 301 https://gist.demo-felhom.eu/r1033-check?q=1
|
||||
OK http://no-such-name-r1033.demo-felhom.eu/r1033-check?q=1 -> 301 https://no-such-name-r1033.demo-felhom.eu/r1033-check?q=1
|
||||
OK http://prowlarr.demo-felhom.eu/r1033-check?q=1 -> 301 https://prowlarr.demo-felhom.eu/r1033-check?q=1
|
||||
OK http://radarr.demo-felhom.eu/r1033-check?q=1 -> 301 https://radarr.demo-felhom.eu/r1033-check?q=1
|
||||
OK http://sonarr.demo-felhom.eu/r1033-check?q=1 -> 301 https://sonarr.demo-felhom.eu/r1033-check?q=1
|
||||
OK http://torrent.demo-felhom.eu/r1033-check?q=1 -> 301 https://torrent.demo-felhom.eu/r1033-check?q=1
|
||||
== every public name redirects http -> https
|
||||
@@ -0,0 +1,16 @@
|
||||
== demo-hp
|
||||
dashboard sign-in: 302
|
||||
the Fajlok button goes to: https://files.enkisfelhom.hu/_felhom/sso
|
||||
the pass answer goes to: https://files.enkisfelhom.hu/files/; files cookie set: 1
|
||||
FileBrowser with the files cookie: felhom-household admin: False modify: True
|
||||
FileBrowser without it, a fresh browser: HTTP 401
|
||||
dashboard sign-out: 302
|
||||
after the sign-out, the files cookie sends the browser to: https://felhom.enkisfelhom.hu/__files/open?to=%2Ffiles%2F
|
||||
== tester-1
|
||||
dashboard sign-in: 302
|
||||
the Fajlok button goes to: https://files.enkicsifelhom.hu/_felhom/sso
|
||||
the pass answer goes to: https://files.enkicsifelhom.hu/files/; files cookie set: 1
|
||||
FileBrowser with the files cookie: felhom-household admin: False modify: True
|
||||
FileBrowser without it, a fresh browser: HTTP 401
|
||||
dashboard sign-out: 302
|
||||
after the sign-out, the files cookie sends the browser to: https://felhom.enkicsifelhom.hu/__files/open?to=%2Ffiles%2F
|
||||
@@ -0,0 +1,13 @@
|
||||
## global floor 0.334.0 / MinAgent 0.158.1 — 14:31:44 UTC
|
||||
HTTP/1.1 303 See Other
|
||||
Location: /configuration?flash=floor_set
|
||||
## clear per-box floors
|
||||
tester-1: HTTP/1.1 303 See Other Location: /customers/tester-1?flash=floor_set
|
||||
demo-hp: HTTP/1.1 303 See Other Location: /customers/demo-hp?flash=floor_set
|
||||
demo-felhom: HTTP/1.1 303 See Other Location: /customers/demo-felhom?flash=floor_set
|
||||
## read back (hub.db + WAL)
|
||||
min_controller_version|0.334.0
|
||||
min_controller_version_declared_min_agent|0.334.0=0.158.1
|
||||
demo-felhom|
|
||||
demo-hp|
|
||||
tester-1|
|
||||
Reference in new issue
Block a user