admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

answers 2026-10-12 Parts C + E: hub 0.147.0 live and read back, Glance gated; 5 rows closed (110 -> 105)
gates / gates (push) Successful in 6m17s
Details

Browse Source 
- closed: R-242 (golden-vouch alarm live), R-244 (cascade + sweep 19 ids / 79 rows / 7 orphans, recount 0),
  R-246 (stale_at retired), R-402 (host-page integrity line, matches the box), R-782 (Glance family gate proven on 9202)
- R-250 VERIFY (next real off-site setup); R-266 + R-521 hub halves live, controller halves pending
- R-887: my rate limit refused a hub image push (home public IP); fixed at once (homelab-manifests d0767fe)
- evidence: audits/answers-2026-10-12/{hub-0.147.0-readback,s26-glance-family-gate-9202}.txt

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
This commit is contained in:
authentik Default Admin
2026-10-12 15:36:49 +02:00
parent c0a2953bea
commit c31f0a1a51
4 changed files with 44 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
documentation/audits/answers-2026-10-12/hub-0.147.0-readback.txt
+18
View File
@@ -0,0 +1,18 @@
# hub 0.147.0 — deployed 2026-10-12 with the operator present (yes in chat); read back
deploy: manifests 0fbba610 (image 0.146.0 -> 0.147.0); ArgoCD app felhom OutOfSync on Secret/gitea-creds, Secret/healthchecks-config,
Secret/umami-config, Deployment/hub, Deployment/umami -> resource-only sync of Deployment/hub, Succeeded; rollout ok;
image gitea.dooplex.hu/admin/felhom-hub:0.147.0; Deployment/hub Synced (umami left OutOfSync, untouched; the 3 Secrets untouched — R-925).
Code CI: felhom.eu run 1704 success (655f5f66).
S4 / R-242: hub log "Golden vouch check: newest published 0.301.0, vouched 0.301.0 — ok" (first sweep after start).
Other channel: app-catalog family-gate gate printed "newest baked golden 0.301.0" earlier today.
S33 / R-402: host pages, "Last full check (off-site)":
Tester-2-be8404: never checked | demo-felhom-8363b5: OK, depth 100%, 2026-10-11 04:00 UTC
demo-hp-bb76ea: OK, depth 100%, 2026-10-11 04:00 UTC | tester-1-d70be4: OK, depth 100%, 2026-10-12 04:00 UTC
Other channel: demo-hp guest 9201 settings.json last_integrity_check 2026-10-11T04:00:00Z, ok true, depth 100%.
Tester-2's "never checked" agrees with the 2026-10-11 offsite_escrow_pending mail (no off-site copy ever).
S6 / R-244: `felhom-hub -sweep-app-log-residue=count` in the pod: 19 deleted customer ids, 79 shared rows to de-reference, 7 orphan rows.
Shown to the operator; yes in chat; `=apply`: same numbers; a second `=count`: 0 / 0 / 0.
Other channel: /apps/paperless-ngx lists live boxes (3 mentions) and none of finalwalk / peti-felhom / walk5; /apps/immich, /apps/nextcloud none.
S10 (hub half): live only when a box sends read_failed (controller 0.308.0); pinned by TestDiskSummaryShowsAFailedRead.
S29, S30, S32 (hub half): no live trigger without provisioning a new customer, a leftover stale stamp or unplugging a drive;
pinned by their red-proved tests (CHANGELOG v0.147.0). Not live-validated — said so.
documentation/audits/answers-2026-10-12/s26-glance-family-gate-9202.txt
+13
View File
@@ -0,0 +1,13 @@
# S26 / R-782 — Glance behind the family gate, proven on scratch guest 9202 (demo-hp), 2026-10-12 ~12:57-13:00Z
catalog: app-catalog-felhom.eu d308445 (family_gate: true, min_controller 0.287.0, no exceptions; check-family-gate rule 4)
box: 9202, controller 0.304.0. POST /api/sync + rescan -> catalog-cache templates/glance/.felhom.yml has `family_gate: true` (grep -c = 1); stack meta family_gate True.
install: POST /api/stacks/glance/deploy -> 202; deployed, state running, pinned glanceapp/glance:v0.8.5 (15 s).
stranger (no cookie), Host dashboard.enkisfelhom.hu via 9202's traefik:
GET Accept: text/html -> 302 https://felhom.enkisfelhom.hu/__family/start?rd=https%3A%2F%2Fdashboard.enkisfelhom.hu%2F
GET (no Accept) -> 401
POST -> 401
control, other channel: inside the guest `docker exec glance wget -S http://127.0.0.1:8080/` -> HTTP/1.1 200 OK (the app is up; only the front door refuses)
household (dashboard session): /__family/start -> 302 dashboard.enkisfelhom.hu/__felhom_gate/fcb -> Set-Cookie felhom_famgate (set) -> GET / with it -> 200, <title> Kezdőlap
teardown (through the product): POST stop -> 200; POST remove (remove_hdd_data, remove_backups) -> 200, volumes_removed [glance_glance_config];
deployed False; containers 0; volumes 0; /opt/docker/stacks/glance holds only the catalog's .felhom.yml + docker-compose.yml (as for all 65 catalog apps). Cookie values were never printed.
gap (decision, not taken): the gate is recorded at INSTALL (controller deploy.go: only when no app.yaml exists), so a Glance installed before d308445 stays public until re-installed. Read 2026-10-12: no Glance on demo-hp 9201/9202 or demo-felhom 9201.