installer 1.32.0 published and read back (sha = tag); its nine rows closed (164 -> 155); golden 0.299.0 baked (pinned) for controller v0.299.0 (R-889)
gates / gates (push) Successful in 2m37s
gates / gates (push) Successful in 2m37s
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
This commit is contained in:
@@ -26,6 +26,22 @@
|
||||
|
||||
---
|
||||
|
||||
## 2026-10-06 (morning) — installer 1.32.0 published
|
||||
|
||||
The full text of every row below: `git show 32a15208:documentation/backlog/OPEN-ITEMS.md`.
|
||||
|
||||
| Row | What | Closed | Evidence |
|
||||
|---|---|---|---|
|
||||
| **R-130** | **A "hard min" that only warns.** (P3) | CLOSED 2026-10-06 — FIXED AND PUBLISHED (installer 1.32.0): the 120 GiB check is named a recommendation | felhom.eu `efe76093` (`09` decision 131). Published 2026-10-06 05:52Z as `installer-v1.32.0` (= `32a1520833`; both `webpage.yaml` pins, `dbede797`); the public URL serves `SCRIPT_VERSION="1.32.0"` with sha256 `70a4ea9f…` = the tag's file (`audits/morning-after-2026-10-06/installer-publish.txt`). Operator ruling `09` §3 decision 137. |
|
||||
| **R-179** | **`--uninstall` leaves the NAS network-storage systemd units behind, with the automount in `failed` state and the parent bind still mounted.** (P3) | CLOSED 2026-10-06 — FIXED AND PUBLISHED (installer 1.32.0): the uninstall removes the NAS network-storage units | felhom.eu `c11d4fbf`. Not done, stated: an enrolled DATA drive's mount unit still survives an uninstall (removing it unmounts customer drives — GL6-F2, its own question). Published 2026-10-06 05:52Z as `installer-v1.32.0` (= `32a1520833`; both `webpage.yaml` pins, `dbede797`); the public URL serves `SCRIPT_VERSION="1.32.0"` with sha256 `70a4ea9f…` = the tag's file (`audits/morning-after-2026-10-06/installer-publish.txt`). Operator ruling `09` §3 decision 137. |
|
||||
| **R-180** | **`--archive-storage` is accepted without checking the agent's token will ever be granted on it, and the failure lands at step 8/8 — after the root@pam password has already been rotated.** (P3) | CLOSED 2026-10-06 — FIXED AND PUBLISHED (installer 1.32.0): pre-flight refuses an archive storage the token will not be granted on | felhom.eu `7f3944ef`. Published 2026-10-06 05:52Z as `installer-v1.32.0` (= `32a1520833`; both `webpage.yaml` pins, `dbede797`); the public URL serves `SCRIPT_VERSION="1.32.0"` with sha256 `70a4ea9f…` = the tag's file (`audits/morning-after-2026-10-06/installer-publish.txt`). Operator ruling `09` §3 decision 137. |
|
||||
| **R-306** | **`--preflight-only` says "no state written" and writes state — with an answer that can be wrong.** (P3) | CLOSED 2026-10-06 — FIXED AND PUBLISHED (installer 1.32.0): --preflight-only writes no state | felhom.eu `17af3b65`. Published 2026-10-06 05:52Z as `installer-v1.32.0` (= `32a1520833`; both `webpage.yaml` pins, `dbede797`); the public URL serves `SCRIPT_VERSION="1.32.0"` with sha256 `70a4ea9f…` = the tag's file (`audits/morning-after-2026-10-06/installer-publish.txt`). Operator ruling `09` §3 decision 137. |
|
||||
| **R-310** | **Two small edges on the installer, neither costing more than a moment.** (P4) | CLOSED 2026-10-06 — FIXED AND PUBLISHED (installer 1.32.0): one vouched version per refusal; an unattended uninstall refuses in words | felhom.eu `b43705ac` + the `day0-install.md` pty line. Published 2026-10-06 05:52Z as `installer-v1.32.0` (= `32a1520833`; both `webpage.yaml` pins, `dbede797`); the public URL serves `SCRIPT_VERSION="1.32.0"` with sha256 `70a4ea9f…` = the tag's file (`audits/morning-after-2026-10-06/installer-publish.txt`). Operator ruling `09` §3 decision 137. |
|
||||
| **R-881** | **The installer's uninstall does not remove `/usr/local/sbin/felhom-priv-apply`** (P4) | CLOSED 2026-10-06 — FIXED AND PUBLISHED (installer 1.32.0): the uninstall removes felhom-priv-apply | felhom.eu `85de3f9b`; a test fails when the agent's bundle gains a file the uninstall does not name. Published 2026-10-06 05:52Z as `installer-v1.32.0` (= `32a1520833`; both `webpage.yaml` pins, `dbede797`); the public URL serves `SCRIPT_VERSION="1.32.0"` with sha256 `70a4ea9f…` = the tag's file (`audits/morning-after-2026-10-06/installer-publish.txt`). Operator ruling `09` §3 decision 137. |
|
||||
| **R-275** | **`--uninstall` leaves five 0600 `agent.json.*` credential backups, and the reinstall hands them to the new service account.** (P3) | CLOSED 2026-10-06 — FIXED AND PUBLISHED (installer 1.32.0): the uninstall removes every copy of the agent config | felhom.eu `85de3f9b` (tests in `scripts/test_hostinstall.py`, red-proved). Published 2026-10-06 05:52Z as `installer-v1.32.0` (= `32a1520833`; both `webpage.yaml` pins, `dbede797`); the public URL serves `SCRIPT_VERSION="1.32.0"` with sha256 `70a4ea9f…` = the tag's file (`audits/morning-after-2026-10-06/installer-publish.txt`). Operator ruling `09` §3 decision 137. |
|
||||
| **R-276** | **RANK 2 — an uninstalled box keeps a live WireGuard tunnel into Felhom's off-site endpoint, and the teardown says nothing.** (P3) | CLOSED 2026-10-06 — FIXED AND PUBLISHED (installer 1.32.0): the uninstall takes the tunnel down; the hub drops the peer | installer `85de3f9b` + hub `0a460bcd` (v0.138.0, deployed 2026-10-05). Published 2026-10-06 05:52Z as `installer-v1.32.0` (= `32a1520833`; both `webpage.yaml` pins, `dbede797`); the public URL serves `SCRIPT_VERSION="1.32.0"` with sha256 `70a4ea9f…` = the tag's file (`audits/morning-after-2026-10-06/installer-publish.txt`). Operator ruling `09` §3 decision 137. |
|
||||
| **R-274** | **A local golden is adopted with NO version and NO checksum check, so a reinstall can silently come up releases behind.** (P3) | CLOSED 2026-10-06 — FIXED AND PUBLISHED (installer 1.32.0): the BYO disclosure names the golden it reuses; the check is pinned | felhom.eu `f790734e` (the check itself shipped with R-297). Published 2026-10-06 05:52Z as `installer-v1.32.0` (= `32a1520833`; both `webpage.yaml` pins, `dbede797`); the public URL serves `SCRIPT_VERSION="1.32.0"` with sha256 `70a4ea9f…` = the tag's file (`audits/morning-after-2026-10-06/installer-publish.txt`). Operator ruling `09` §3 decision 137. |
|
||||
|
||||
## 2026-10-06 (night) — the burn-down night: the decoy exemptions emptied
|
||||
|
||||
The full text of every row below: `git show e6fe7319:documentation/backlog/OPEN-ITEMS.md`.
|
||||
|
||||
File diff suppressed because one or more lines are too long
Reference in New Issue
Block a user