{
  "app": "bookstack",
  "walk": "security",
  "box_walk_version": 1,
  "verdict": "proven",
  "venue": "box 9202 (drill catalog), the guarded Update",
  "from": {
    "bookstack": "lscr.io/linuxserver/bookstack:26.09.1",
    "bookstack-db": "mariadb:12.3"
  },
  "to": {
    "bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
    "bookstack-db": "mariadb:12.3"
  },
  "observables_before": {
    "pinned_images": {
      "bookstack": "lscr.io/linuxserver/bookstack:26.09.1",
      "bookstack-db": "mariadb:12.3"
    },
    "installed_images": {
      "bookstack": "lscr.io/linuxserver/bookstack:26.09.1",
      "bookstack-db": "mariadb:12.3"
    },
    "catalog_images": {
      "bookstack": "lscr.io/linuxserver/bookstack:26.09.1",
      "bookstack-db": "mariadb:12.3"
    },
    "live_compose_image_lines": [
      "image: lscr.io/linuxserver/bookstack:26.09.1@sha256:99cd1f5707c1911afad213adec5c9739763b76f843d1477142231834ecdcb6f7",
      "image: mariadb:12.3@sha256:805c8e104bd563d5bfa24fadd3f31cd419ea859cb5277f32b5dbf2db714f9ed1"
    ],
    "docker_inspect": [
      "bookstack  lscr.io/linuxserver/bookstack:26.09.1@sha256:99cd1f5707c1911afad213adec5c9739763b76f843d1477142231834ecdcb6f7  running=true  restarts=0",
      "bookstack-db  mariadb:12.3@sha256:805c8e104bd563d5bfa24fadd3f31cd419ea859cb5277f32b5dbf2db714f9ed1  running=true  restarts=0"
    ]
  },
  "setup_gate_before": {
    "browser": {
      "status": "404",
      "redirect": null
    },
    "script": {
      "status": "404",
      "redirect": null
    }
  },
  "seed": "read_back",
  "drill_commit": "cbb4196e7162",
  "sync_waited_s": 4.6,
  "badge_before": {
    "hu": [
      {
        "title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
        "text": "Frissítés elérhető — ma"
      }
    ],
    "en": [
      {
        "title": "A newer version of this app is available. Select the Update button to start it.",
        "text": "Update available — today"
      }
    ]
  },
  "measured_at": "2026-10-27T13:40:36Z",
  "update": {
    "accepted": true,
    "http": "202",
    "phases": [
      {
        "t": 0.0,
        "phase": "backing-up",
        "label": "Biztonsági mentés készül a frissítés előtt…",
        "updating": true,
        "error": null,
        "hold": null
      },
      {
        "t": 14.4,
        "phase": "safety-dump",
        "label": "Adatbázis pillanatkép…",
        "updating": true,
        "error": null,
        "hold": null
      },
      {
        "t": 15.5,
        "phase": "pulling",
        "label": "Új verzió letöltése…",
        "updating": true,
        "error": null,
        "hold": null
      },
      {
        "t": 41.1,
        "phase": "copying",
        "label": "Az adatok másolása a frissítés előtt…",
        "updating": true,
        "error": null,
        "hold": null
      },
      {
        "t": 53.4,
        "phase": "starting",
        "label": "Indítás az új verzióval…",
        "updating": true,
        "error": null,
        "hold": null
      },
      {
        "t": 59.5,
        "phase": "verifying",
        "label": "Működés ellenőrzése…",
        "updating": true,
        "error": null,
        "hold": null
      },
      {
        "t": 76.9,
        "phase": "done",
        "label": "Frissítve",
        "updating": false,
        "error": null,
        "hold": null
      }
    ],
    "duration_s": 76.9,
    "final_phase": "done",
    "update_error": null,
    "hold_reason": null,
    "state": "running"
  },
  "observables_after": {
    "pinned_images": {
      "bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
      "bookstack-db": "mariadb:12.3"
    },
    "installed_images": {
      "bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
      "bookstack-db": "mariadb:12.3"
    },
    "catalog_images": {
      "bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
      "bookstack-db": "mariadb:12.3"
    },
    "live_compose_image_lines": [
      "image: lscr.io/linuxserver/bookstack:26.09.2",
      "image: mariadb:12.3"
    ],
    "docker_inspect": [
      "bookstack  lscr.io/linuxserver/bookstack:26.09.2  running=true  restarts=0",
      "bookstack-db  mariadb:12.3  running=true  restarts=0"
    ]
  },
  "badge_after": {
    "hu": [
      {
        "title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
        "text": "Naprakész"
      }
    ],
    "en": [
      {
        "title": "This app is running the newest version available.",
        "text": "Up to date"
      }
    ]
  },
  "state_after": "running",
  "hold_after": null,
  "to_digests": {
    "bookstack": "sha256:2fdeeb1a2028ce7cb1274696237e32b9f849e16b6d77314d08c78356a6016fca",
    "bookstack-db": "sha256:d46e102fa8b9b72bfcdeb56f9dd538742092119dc8b11f31fe662605cd234cd9"
  },
  "four_observables": {
    "pinned": {
      "bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
      "bookstack-db": "mariadb:12.3"
    },
    "installed": {
      "bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
      "bookstack-db": "mariadb:12.3"
    },
    "catalog": {
      "bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
      "bookstack-db": "mariadb:12.3"
    },
    "live_compose": [
      "lscr.io/linuxserver/bookstack:26.09.2",
      "mariadb:12.3"
    ]
  },
  "seed_read_after": true,
  "setup_gate_after": {
    "browser": {
      "status": "404",
      "redirect": null
    },
    "script": {
      "status": "404",
      "redirect": null
    }
  },
  "memory": {
    "soak_s": 600,
    "interval_s": 10,
    "samples": 118,
    "containers": {
      "bookstack": {
        "samples": 59,
        "anon_peak_bytes": 21417984,
        "limit_bytes": 536870912,
        "anon_peak_pct": 4.0,
        "cgroup_peak_pct": 18.9,
        "oom_kill_delta": 0,
        "oom_killed_flag": false,
        "restarts_delta": 0,
        "running_all_samples": true,
        "cgroup": "/sys/fs/cgroup/system.slice/docker-02a0824975a3d83f37b881059857a096b1e8fb07b70c45ac35e9bf3c2a2b380f.scope"
      },
      "bookstack-db": {
        "samples": 59,
        "anon_peak_bytes": 99962880,
        "limit_bytes": 268435456,
        "anon_peak_pct": 37.2,
        "cgroup_peak_pct": 43.7,
        "oom_kill_delta": 0,
        "oom_killed_flag": false,
        "restarts_delta": 0,
        "running_all_samples": true,
        "cgroup": "/sys/fs/cgroup/system.slice/docker-8beb2b13dfc2dba96fa95b781acda2fbe0206b255efa842d163f987c1baf4292.scope"
      }
    },
    "oom_kills": 0,
    "restarts": 0,
    "peak_pct": 37.2
  },
  "why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
  "log": [
    "14:38:50   [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['ADMIN_PASSWORD']",
    "14:38:50   [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
    "14:40:06   [1] deployed, controller state=unhealthy, pinned={'bookstack': 'lscr.io/linuxserver/bookstack:26.09.1', 'bookstack-db': 'mariadb:12.3'}",
    "14:40:06   [1] NOTE: the controller's own state is 'unhealthy', not 'running' — recorded, not treated as a failure; the fixture's front-door wait is the real gate",
    "14:40:10   [2] setup gate as installed: {'browser': {'status': '404', 'redirect': None}, 'script': {'status': '404', 'redirect': None}}",
    "14:40:14     bookstack: artisan create-admin :: Admin account with email \"drill-c575a897@gate.invalid\" successfully created!",
    "14:40:21     bookstack: readback of the seeded account found=True :: This will delete any configure multi-factor authentication methods for user: - ID: 3 - Name: drill-de83a8 - Email: drill-c575a897@gate.inval",
    "14:40:22   [5] drill commit cbb4196e7162: bookstack lscr.io/linuxserver/bookstack:26.09.1 -> lscr.io/linuxserver/bookstack:26.09.2 (push rc=0)",
    "14:40:31   [5] the box's drill mirror now at cbb4196e7",
    "14:40:36   [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
    "14:40:36       +   0.0s  phase=backing-up  label=Biztonsági mentés készül a frissítés előtt…  err=None  hold=None",
    "14:40:51       +  14.4s  phase=safety-dump  label=Adatbázis pillanatkép…  err=None  hold=None",
    "14:40:52       +  15.5s  phase=pulling  label=Új verzió letöltése…  err=None  hold=None",
    "14:41:17       +  41.1s  phase=copying  label=Az adatok másolása a frissítés előtt…  err=None  hold=None",
    "14:41:30       +  53.4s  phase=starting  label=Indítás az új verzióval…  err=None  hold=None",
    "14:41:36       +  59.5s  phase=verifying  label=Működés ellenőrzése…  err=None  hold=None",
    "14:41:53       +  76.9s  phase=done  label=Frissítve  err=None  hold=None",
    "14:42:20     bookstack: readback of the seeded account found=True :: This will delete any configure multi-factor authentication methods for user: - ID: 3 - Name: drill-de83a8 - Email: drill-c575a897@gate.inval",
    "14:42:21   [7] memory soak 600 s …",
    "14:52:28   [7] soak: peak 37.2% of the limit (anon), kills 0, restarts 0"
  ]
}