admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Commit Graph

  • 1122b5c65b REPORT/STATUS: CI red for five pushes (BusyBox date), fixed in 40d34c5, job 1360 green main admin 2026-10-05 17:32:51 +02:00
  • 40d34c5576 hub-db-backup: parse the snapshot time in a form BusyBox date reads (CI red since ab2b304: 9/15 on the Alpine runner) admin 2026-10-05 17:29:05 +02:00
  • 8012ce4640 burn-down: R-423 site page walk (exemption dropped); STATUS Part C list (45 rows for the operator); REPORT; register 336 -> 291 (0 opened, 45 closed) admin 2026-10-05 17:15:02 +02:00
  • b26d292a64 burn-down Part B: 14 small rows fixed and closed across four repos (306 -> 292); no :latest in the hub build; gate list pinned; closed-id duplicates refused; R-262 subset pinned admin 2026-10-05 17:10:38 +02:00
  • f5a0aeb0b8 burn-down Part A: 24 rows closed as fixed by later work, 2 duplicates merged, R-376/R-817/R-818 done (335 -> 306); Part A table admin 2026-10-05 16:53:02 +02:00
  • 58ce696e16 R-885 closed (its gate shipped in ab2b304; the closing JSON had failed) — 336 -> 335 admin 2026-10-05 16:48:50 +02:00
  • ab2b304987 R-885: script-tests gate runs every scripts/**/test_*.py on every push (decoys, red-proofs); closed (336 -> 335) admin 2026-10-05 16:48:12 +02:00
  • b018ca9092 the size rule: a small finding is fixed in the session, not filed; reports state four register numbers (burn-down Part D) admin 2026-10-05 16:43:19 +02:00
  • 53d8131b20 R-886 opened (336); alarm proven end to end; REPORT-hub-db-offsite-2026-10-05 admin 2026-10-05 16:25:48 +02:00
  • afba622fb6 R-173 option A in force (hub DB nightly to ep0, restore-tested, alarmed); R-519 proven live on 9202 and closed; R-173/R-232 narrowed; R-882..R-885 opened (332 -> 335); runbook §3 tested; hubdb-check admin 2026-10-05 16:14:13 +02:00
  • cea8502f0b scripts/hub-db-backup: DooPlex push (02:30) + weekly restore test (Sun 04:30) of the hub DB to ep0 (R-173, R-231); 15 tests, red-proofs P1-P9; Part A/B evidence admin 2026-10-05 15:41:08 +02:00
  • 5d8922e619 manifests: hub 0.136.0 admin 2026-10-05 14:29:45 +02:00
  • d4be9f6ff1 hub v0.136.0: nightly VACUUM INTO snapshot, keep 2 (R-173 decision A); hub PVC 2Gi + Longhorn default group; 09 rulings 125-127; 05 §16.3 admin 2026-10-05 14:28:30 +02:00
  • 0826e41b31 hub-safety session: R-135/R-133/R-604/R-530/R-508/R-509/R-880 closed, R-861/R-173/R-518/R-519 narrowed, R-879/R-881 opened (336 → 332); 03 §3.1, 05 §16, golden 0.296.0, the hub-DB off-site plan, STATUS admin 2026-10-05 13:47:57 +02:00
  • 2b30733b0d manifests: hub 0.135.0 admin 2026-10-05 11:14:01 +02:00
  • 3d7a2761fc hub v0.135.0: CSRF on the Basic-auth path (R-135), console passwords sealed at rest (R-133), boxes left behind listed and alarmed (R-604, R-530), no-e-mail banner (R-508) admin 2026-10-05 11:12:56 +02:00
  • 9bb45eaaa2 catch-up session 2026-10-05: design 07 §6.1.1 (a box that is not always on), 08 §6.4; rulings 109-111, CC decisions 112-118; R-871/R-873..R-877 closed, R-872 narrowed (dated check), R-878 opened; live evidence; STATUS admin 2026-10-05 10:29:22 +02:00
  • ff25f1076d manifests: hub 0.134.0 admin 2026-10-05 09:49:28 +02:00
  • 1b0678fa05 golden 0.295.0 baked + vouched with agent 0.145.0 (catch-up session) admin 2026-10-05 09:48:27 +02:00
  • 6da3a7d866 hub v0.134.0: a down box is judged on longer missed-backup lines (R-872); household outage mail at most weekly (R-873); backup_catchup_done allowed (R-871) admin 2026-10-05 09:24:14 +02:00
  • 8e873ee4a0 night fixes 2026-10-05: System page read after demo-hp's facts caught up (R-853 delay, ~17 min) admin 2026-10-05 08:31:49 +02:00
  • 5fd2656021 night fixes 2026-10-05: R-867/R-95/R-863..R-869 closed, R-870..R-876 opened (R-876 P2: repair misses dpkg's journal); Part E crash record; Part F spike; golden 0.294.0; rulings 100-103, CC decisions 104-108; STATUS admin 2026-10-05 08:26:23 +02:00
  • 7221ee5cd6 night 2026-10-04: Tester 2 read 06:20 local admin 2026-10-05 06:20:28 +02:00
  • d1d56cb0ad night 2026-10-04: last Tester 2 read (still down) admin 2026-10-05 05:22:32 +02:00
  • 51ac1cb4ff night 2026-10-04/05: morning note, accidents, decision 78 proven, R-867..R-869; STATUS admin 2026-10-05 05:20:57 +02:00
  • 76ff0654ea night 2026-10-04: the guest undo runbook (proven 48 s), R-866, A3 in progress admin 2026-10-04 22:37:25 +02:00
  • a1a32bbd74 night 2026-10-04: baseline, prediction, Tester 1 fresh box (installer 1.31.0 + bundle live), the ruled undo proven (48 s), A2, A4; rows R-863..R-865 admin 2026-10-04 22:25:38 +02:00
  • 9d3e0f558d Tester 2 offline since 18:06 UTC: act 1 queued, not delivered (report, STATUS) admin 2026-10-04 20:52:18 +02:00
  • 79f07a7f10 R-840/R-859/R-860 records: 11 §5.3.1 + §5.4.2, 03, 04, 00; runbooks config-bundle + os-updates-test-waits; register 333→334 (R-840/859/860 closed, R-861/862 opened); STATUS; report; evidence admin 2026-10-04 20:40:08 +02:00
  • c01d48f457 manifests: installer 1.31.0 (scripts sync ref) admin 2026-10-04 20:21:52 +02:00
  • 877e89ee2a manifests: hub 0.133.0 installer-v1.31.0 admin 2026-10-04 20:19:40 +02:00
  • ff1db11db4 hub v0.133.0 (R-859 test approvals end with the test; R-840 bundle on the System page, manifest, alarm); installer 1.31.0 (root files from the config bundle); bundle bootstrap script; golden 0.293.0 evidence; rulings 96–99; drill-r50 removed (evidence) admin 2026-10-04 20:18:37 +02:00
  • 6b820143f8 R-858 closed (agent v0.142.1, ruling 95): the Docker step restarts the socket users; incident evidence; STATUS; report addendum admin 2026-10-04 18:35:40 +02:00
  • 242f0a15d5 R-858 filed (P2): a Docker engine step leaves the controller and traefik on the old docker socket; demo-felhom repaired by restarting the two containers; incident evidence admin 2026-10-04 17:57:54 +02:00
  • 9291ae255a REPORT-os-docker-crash-2026-10-04: CI line admin 2026-10-04 17:51:09 +02:00
  • 21986d03b5 golden 0.292.0 re-vouched (re-bake: live-restore + approved Docker set) with agent 0.142.0; R-857 filed; STATUS; REPORT-os-docker-crash-2026-10-04 admin 2026-10-04 17:49:30 +02:00
  • 208d21d18f golden 0.292.0 re-bake evidence: build-golden.sh 3.1.0, pinned Docker set, live-restore on admin 2026-10-04 17:39:28 +02:00
  • c9052264f7 manifests: publish installer 1.30.0 (both git-sync refs) admin 2026-10-04 17:36:21 +02:00
  • 0c55336fba docs: 11 §5.7 System page, §5.8 Docker slow lane BUILT, §5.9 crash restart; 00/03/07/08; decisions 90-94 (CC unattended); runbooks docker-undo + crash-guard; register R-852 R-835 R-848 R-849 R-851 R-854 closed, R-853 R-855 R-856 opened, R-812 R-840 narrowed (334 -> 332); live evidence installer-v1.30.0 admin 2026-10-04 17:36:10 +02:00
  • 245886ee92 manifests: revert the TEST-ONLY Docker approval wait (ruled 2 nights) admin 2026-10-04 16:28:52 +02:00
  • 30cfdc1dc5 manifests: TEST-ONLY Docker approval wait 0 nights (os-docker-crash Part B; reverted in the same session) admin 2026-10-04 16:27:19 +02:00
  • 3de64b138d manifests: hub 0.132.0 admin 2026-10-04 16:17:23 +02:00
  • b1b5c7e7e1 installer 1.30.0 (not yet tagged): the crash guard units + config, the root-owned slow-lane trust files (os-trust.json, operator-signers), their removal on uninstall admin 2026-10-04 16:16:24 +02:00
  • 175ecfcdd2 hub v0.132.0: the System page (versions + OS updates with the ring/switch/approve buttons, R-852), the Hosts Proxmox/kernel column, the operator-approved Docker engine release (2 healthy ring-0 nights), the crash-guard events (R-851); evidence audits/os-docker-crash-2026-10-04 admin 2026-10-04 16:16:02 +02:00
  • bee277ffad rulings 87-89 recorded before the work (live-restore ON; crash restart with a limit; versions visible in the hub); R-852 filed (versions shown nowhere) admin 2026-10-04 15:26:41 +02:00
  • 5efe6daec3 golden 0.292.0 vouched with agent 0.141.1; golden waiver deleted (newest controller has its golden); REPORT-os-host-lane-2026-10-04 with the Part table; STATUS/CONTEXT admin 2026-10-04 14:53:50 +02:00
  • f93738dc49 golden 0.292.0: bake + publish evidence (RUNBOOK-manual-build §4.0/§4.1 steps 1-4; not vouched, no floor change) admin 2026-10-04 14:51:35 +02:00
  • 31bdb4b549 docs: OS updates steps 3+4 BUILT (11 §8.2/§8.3, §5.6 kernel facts, §5.8 Docker slow lane design), 00/03/07/08 updated, decisions 84-86 (CC unattended), host undo runbook (proved), register: R-841 R-845 R-846 R-850 closed, R-848 R-849 R-851 opened, R-836 R-812 narrowed (332 -> 333); STATUS; live evidence admin 2026-10-04 14:47:21 +02:00
  • 0e970ba384 manifests: revert the TEST-ONLY OS approval wait (ruled 24h + 1 night) admin 2026-10-04 14:41:35 +02:00
  • a73f728a55 manifests: TEST-ONLY OS approval wait 2m / 0 nights (os-host-lane Part B ring-1 proof; reverted in the same session) admin 2026-10-04 14:38:17 +02:00
  • 771e12445c manifests: hub 0.131.1 admin 2026-10-04 13:40:46 +02:00
  • fd1f98547e hub v0.131.1: a scanned host pass (reboot_scanned, agent 0.141.1) clears 'reboot needed', so the 14-day alarm does not fire after a reboot; live evidence partB/partD/partG admin 2026-10-04 13:39:48 +02:00
  • 693f3b45aa manifests: hub 0.131.0 admin 2026-10-04 13:05:59 +02:00
  • 88b0a2e761 hub v0.131.0: the tunnel status is true (R-841: three states, tunnel_down after two not_running reports, unknown never alarms); OS updates per layer (guest/host separate approved sets, host candidate leaves out kernel/boot/firmware, host_release in the box block), the fleet view and four hourly operator alarms (11 §8 steps 3+4); red-proofs in audits/os-host-lane-2026-10-04 admin 2026-10-04 13:05:00 +02:00
  • 0ed2e8de4c docs: rulings 2026-10-04 ~12:20 (decisions 81-83); R-842 closed (A); R-840 ruling recorded admin 2026-10-04 12:24:07 +02:00
  • e78726314e OS updates guest fast lane: records — 11 §8.1 BUILT, 03 cloudflared corrected, 07 §6.1 OS leg, 00 PARTIAL, monthly runbook infra pins, golden 0.291.0 record + vouch, register 331 -> 333 (R-837/838/726/843 closed; R-840/841/842/844/845 opened), STATUS, report admin 2026-10-04 11:41:50 +02:00
  • e55b2ceb63 manifests: serve the installer from installer-v1.29.0 admin 2026-10-04 11:40:40 +02:00
  • eaae94a4b8 felhom-host-install.sh 1.29.0: installs the OS-update wrapper (felhom-os-apply) from the pinned agent tag; skipped with a warning on an agent older than 0.140.0; uninstall removes it installer-v1.29.0 admin 2026-10-04 11:40:37 +02:00
  • 0e22a0ecc7 manifests: revert the TEST-ONLY OS approval wait (ruled 24h + 1 night) admin 2026-10-04 11:14:42 +02:00
  • 44992360a4 manifests: TEST-ONLY OS approval wait 2m / 0 nights (Part G 2; reverted in the same session) admin 2026-10-04 11:12:04 +02:00
  • 66b7540b7a manifests: hub 0.130.0 admin 2026-10-04 10:58:53 +02:00
  • a23ae9e3dc golden waiver: renewed 3 days (bake is Part H of this session) admin 2026-10-04 10:56:55 +02:00
  • c5f91174f6 hub v0.130.0: OS updates, guest fast lane — rings, per-box switch, OS releases approved from ring 0, os-report, os_update desired block admin 2026-10-04 10:56:39 +02:00
  • 6ed79cd2e9 docs: rulings 2026-10-04 ~10:17 (decisions 78-80) admin 2026-10-04 10:24:28 +02:00
  • 1b74ddc0c9 off-site closed (R-833, R-834 closed; R-95 dated check; R-726 options) + OS-update spike: 11 corrected C1-C12, wrapper draft, answers; R-835..R-839 admin 2026-10-04 09:54:31 +02:00
  • 85e3e05e10 manifests: hub 0.129.0 admin 2026-10-04 08:58:02 +02:00
  • 55f7621c90 hub v0.129.0: operator raises ONE clean-up window's cap (R-833); restore-beside script + runbooks (R-834) admin 2026-10-04 08:56:56 +02:00
  • 3885640f66 docs: rulings 2026-10-04 (decisions 75-77); add 11-os-updates.md verbatim (NOT RATIFIED) admin 2026-10-04 08:42:38 +02:00
  • d07a1a904c Off-site safety finished: Parts A-F evidence, decision 74, golden 0.290.0 recorded (vouched, floor 0.290.0), restore walked from the DooPlex copy, register 330 -> 328 (R-823/824/826/827/828/830 closed; R-833, R-834 opened) admin 2026-10-04 07:39:59 +02:00
  • 7a0d0c027d hub: remove the OFFSITE_ABANDON_DELAY=3m test configuration (decision-74 live proof done) — set-aside deletions wait 7 days again admin 2026-10-04 07:12:33 +02:00
  • 5eee18cf16 hub v0.128.0 deployed — with OFFSITE_ABANDON_DELAY=3m as a logged TEST configuration for the decision-74 live proof (reverted next) admin 2026-10-04 07:06:40 +02:00
  • d3c50b50f6 hub v0.128.0: set-aside deletion through the hub after a 7-day wait (decision 74, R-823), key-file clean-up route (R-826), read-only key check (R-827), window cap = half admin 2026-10-04 07:05:21 +02:00
  • 697c2a7b10 Decisions 71-73 recorded before the work (ep0 copy keeps 8 weekly; tester-1 keys removed via registrar; token not rotated now) + R-831 token row, R-832 roadmap P4 admin 2026-10-04 06:57:19 +02:00
  • 710a2505f9 Part A/E scratch teardown on u629488-sub4 (authorized_keys byte-identical) admin 2026-10-03 21:30:11 +02:00
  • 2344589a5e Golden 0.289.1 recorded (baked, round-trip, vouched; floor 0.289.1 served), STATUS, session REPORT, runbook pveam note admin 2026-10-03 21:29:59 +02:00
  • 207ad19746 Off-site lock live: Parts D/E/F evidence, ep0 copy runbook, 06/07 facts, register (R-820/R-821/R-342 closed, R-825 opened+closed, R-95/R-822 narrowed, R-823/R-824/R-826/R-827/R-828/R-830 opened; 327 -> 330); hub window-sweep test (test-only) admin 2026-10-03 21:21:04 +02:00
  • cdfcc47b15 hub v0.127.0 deployed: manifest image tag + required OFFSITE_SECRET_KEY (Secret/offsite-secret-key, created out-of-band) admin 2026-10-03 16:58:23 +02:00
  • f417cdede1 hub v0.127.0: off-site key registrar (box never gets the storage password), password sealed at rest, daily key check, clean-up window (shipped off) — decisions 68-69, R-820/R-821/R-822 admin 2026-10-03 16:56:42 +02:00
  • 5188dbdb44 Decisions 68-70 recorded before the work: weekly hub-opened prune window (option 2 rejected), hub = key registrar + password encrypted at rest, ep0 -> DooPlex nightly PBS pull-sync admin 2026-10-03 16:03:03 +02:00
  • 9268d9933b R-436 measured on the provider: append-only forced key HOLDS (403 on every delete), but the sub-account password defeats it (R-820); design proposal + ep0 options admin 2026-10-03 13:40:35 +02:00
  • f4c5466c39 Backlog triage Part E: RECOMMENDATION (top 29 = every P2, five themes, pick A off-site backup safety vs B box OS updates), STATUS decision, REPORT-backlog-triage-2026-10-03 admin 2026-10-03 09:24:43 +02:00
  • 33bbf8e94a Backlog triage Part D: ROADMAP cleaned (161 -> 123 lines, 81 -> 42 KB): intentions re-sorted P2/P3/P4, each names its 00 row; 33 shipped/killed/closed/moved items + the pre-invite checklist -> ROADMAP-HISTORY; UPDATE-ARC collapsed; one_register_gate reads suffix ids (R-50b found, moved to OPEN-ITEMS; decoy seen red) admin 2026-10-03 09:22:30 +02:00
  • 9f77865c2a Backlog triage Part C: every open row has a Category (11) and a Sev (P1-P4); OPEN-ITEMS grouped by category, severity order; register_shape_gate RULES 5-8 (columns by header, category, sev, defined state) with five decoys seen red; CLAUDE.md + PROMPT-TEMPLATE: new rows filed into their category admin 2026-10-03 09:18:42 +02:00
  • 71b8c8c62b Backlog triage Part B: 125 finished rows + 20 id-less rows moved to CLOSED-ITEMS (full text at 9e2786c); open rows normalised to one 6-column shape; narratives archived verbatim; closed_register_gate RULE 3 refuses a finished row in OPEN-ITEMS (decoys, seen red); rules rehomed to CONTEXT + 07 §11; loose notes triaged; R-814..R-819 filed; register 444 -> 325 admin 2026-10-03 09:17:22 +02:00
  • 9e2786c907 Backlog triage Part A: four roadmap items R-808..R-811 (OS updates, legal/business, independence spike, dashboard 2FA); findings R-812 (no OS security updates) + R-813 (no legal pages); 00 gap rows + new §H; CONTEXT records the 2026-10-03 request admin 2026-10-03 09:06:39 +02:00
  • 93052884b2 Persistence re-sweep of all 58 (R-801 closed: CLEAN 40 / UNDETERMINED 18 / BROKEN 0), R-788 + R-803 (papra) closed, R-804..R-807 opened; STATUS "Before the first paying customer"; REPORT-persistence-sweep-2026-10-02; register 442 admin 2026-10-02 16:54:26 +02:00
  • 5ed44ada6e Rulings 66 (licences) + 67 (userdata stays on remove, 07 §6.5); R-789..R-795 ruled, R-802 (lawyer review) opened; R-800 live proof on 9202 (0.288.0); floor 0.288.0; golden 0.288.0 baked + vouched admin 2026-10-02 14:16:41 +02:00
  • 2633dc1654 Family gate session close: B4 on demo-hp (real internet: member in, stranger 401; remove with data), REPORT-family-gate-2026-10-02, STATUS, R-800 (remove-with-data keeps userdata, operator), CONTEXT; register 436 admin 2026-10-02 10:43:10 +02:00
  • e6d1ebd152 Family gate built + licence read: evidence (9202, bench, floor), licence table + SparkyFitness request draft (not sent), 01 §5 family gate, 09 decision 64 built, capability map, register 422 -> 436 (R-767/R-780/R-787 closed; R-775/R-784 updated; R-788..R-801 opened), CONTEXT admin 2026-10-02 09:35:42 +02:00
  • 68c22907e5 Golden 0.287.0 baked + vouched (record); floor 0.287.0 (min_agent 0.131.0) — both demo boxes on 0.287.0 admin 2026-10-02 09:00:18 +02:00
  • 344081f064 website assets: Grimmory and MeTube logos (from their own images) and three screenshots each (their own UI + the family sign-in page they sit behind; 9202, headless Chrome) admin 2026-10-02 08:32:10 +02:00
  • e215351fe2 Record operator rulings 2026-10-02 morning: decision 64 (family gate GO), 65 (SparkyFitness option B + trigger) admin 2026-10-02 07:17:58 +02:00
  • cba2badade Evidence: SparkyFitness box walk (9202) and its licence text admin 2026-10-01 22:19:55 +02:00
  • 27f4e7d976 Session close: REPORT-visitors-2026-10-01, STATUS (go/no-go: the family gate; SparkyFitness licence), CONTEXT, capability map rows, R-783..R-787 (register 422) admin 2026-10-01 22:19:50 +02:00
  • 09ae93db05 Golden 0.286.1 baked + vouched (record); 01 §5 visitor addresses + §7 cloudflared in the guest (R-754); register: R-753/754/772/773 closed, R-775 narrowed, R-776..R-782 opened (410 → 417); live evidence (demo-hp real tunnel, 9202) admin 2026-10-01 22:05:24 +02:00
  • b50289074d Evidence: Part A (visitors apart — measurements, design, sweep, 9202 live) and the permanent-gate spike (items 1–6, VERDICT: PASS, build plan) admin 2026-10-01 21:26:23 +02:00
  • 7c50dba454 Permanent-gate spike: exit test written BEFORE the spike runs (decision 63) admin 2026-10-01 21:13:27 +02:00
  • 88810ad09f Record operator ruling 2026-10-01 evening: decision 63 — extend the box's own gate (A), order R-753 → spike → build on go admin 2026-10-01 20:29:45 +02:00
  • bc9c7b4934 New apps night: Radicale, Karakeep, Dawarich published; Grimmory held (R-775); fit table; R-765..R-775; STATUS, CONTEXT, report, evidence admin 2026-10-01 19:52:32 +02:00
  • 8e31b45006 website assets: Dawarich logo (from its own image) and three screenshots of its own UI (9202, headless Chrome) admin 2026-10-01 18:31:08 +02:00