{ "app": "code-server", "walk": "security", "box_walk_version": 1, "verdict": "proven", "venue": "box 9202 (drill catalog), the guarded Update", "from": { "code-server": "lscr.io/linuxserver/code-server:4.129.0" }, "to": { "code-server": "lscr.io/linuxserver/code-server:4.143.1" }, "observables_before": { "pinned_images": { "code-server": "lscr.io/linuxserver/code-server:4.129.0" }, "installed_images": { "code-server": "lscr.io/linuxserver/code-server:4.129.0" }, "catalog_images": { "code-server": "lscr.io/linuxserver/code-server:4.129.0" }, "live_compose_image_lines": [ "image: lscr.io/linuxserver/code-server:4.129.0" ], "docker_inspect": [ "code-server lscr.io/linuxserver/code-server:4.129.0 running=true restarts=0" ] }, "setup_gate_before": { "browser": { "status": "401", "redirect": null }, "script": { "status": "401", "redirect": null } }, "seed": "none", "seed_why": "its front door is a browser IDE behind one password; it exposes no data API, and writing a file with docker exec would not be the front door (R-156)", "drill_commit": "e9d45463d7d9", "sync_waited_s": 15.8, "badge_before": { "hu": [ { "title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.", "text": "Frissítés elérhető — ma" } ], "en": [ { "title": "A newer version of this app is available. Select the Update button to start it.", "text": "Update available — today" } ] }, "measured_at": "2026-10-27T13:14:40Z", "update": { "accepted": true, "http": "202", "phases": [ { "t": 0.0, "phase": "checking", "label": "Ellenőrzés…", "updating": true, "error": null, "hold": null }, { "t": 1.0, "phase": "backing-up", "label": "Biztonsági mentés készül a frissítés előtt…", "updating": true, "error": null, "hold": null }, { "t": 23.6, "phase": "pulling", "label": "Új verzió letöltése…", "updating": true, "error": null, "hold": null }, { "t": 47.1, "phase": "copying", "label": "Az adatok másolása a frissítés előtt…", "updating": true, "error": null, "hold": null }, { "t": 51.2, "phase": "starting", "label": "Indítás az új verzióval…", "updating": true, "error": null, "hold": null }, { "t": 52.3, "phase": "verifying", "label": "Működés ellenőrzése…", "updating": true, "error": null, "hold": null }, { "t": 57.4, "phase": "done", "label": "Frissítve", "updating": false, "error": null, "hold": null } ], "duration_s": 57.4, "final_phase": "done", "update_error": null, "hold_reason": null, "state": "running" }, "observables_after": { "pinned_images": { "code-server": "lscr.io/linuxserver/code-server:4.143.1" }, "installed_images": { "code-server": "lscr.io/linuxserver/code-server:4.143.1" }, "catalog_images": { "code-server": "lscr.io/linuxserver/code-server:4.143.1" }, "live_compose_image_lines": [ "image: lscr.io/linuxserver/code-server:4.143.1" ], "docker_inspect": [ "code-server lscr.io/linuxserver/code-server:4.143.1 running=true restarts=0" ] }, "badge_after": { "hu": [ { "title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.", "text": "Naprakész" } ], "en": [ { "title": "This app is running the newest version available.", "text": "Up to date" } ] }, "state_after": "running", "hold_after": null, "to_digests": { "code-server": "sha256:4524d0b00478e41264f42e0e660c1819e3b7d0c460f78ce73e44fa39b2b55134" }, "four_observables": { "pinned": { "code-server": "lscr.io/linuxserver/code-server:4.143.1" }, "installed": { "code-server": "lscr.io/linuxserver/code-server:4.143.1" }, "catalog": { "code-server": "lscr.io/linuxserver/code-server:4.143.1" }, "live_compose": [ "lscr.io/linuxserver/code-server:4.143.1" ] }, "setup_gate_after": { "browser": { "status": "401", "redirect": null }, "script": { "status": "401", "redirect": null } }, "memory": { "soak_s": 600, "interval_s": 10, "samples": 60, "containers": { "code-server": { "samples": 60, "anon_peak_bytes": 56635392, "limit_bytes": 1073741824, "anon_peak_pct": 5.3, "cgroup_peak_pct": 6.5, "oom_kill_delta": 0, "oom_killed_flag": false, "restarts_delta": 0, "running_all_samples": true, "cgroup": "/sys/fs/cgroup/system.slice/docker-3e70f1cab90c32e664a14c2861fdebbbf7c7bc27370465d09a60f0048b2a437d.scope" } }, "oom_kills": 0, "restarts": 0, "peak_pct": 5.3 }, "why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak", "log": [ "14:13:20 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['PASSWORD']", "14:13:21 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}", "14:14:11 [1] deployed, controller state=running, pinned={'code-server': 'lscr.io/linuxserver/code-server:4.129.0'}", "14:14:15 [2] setup gate as installed: {'browser': {'status': '401', 'redirect': None}, 'script': {'status': '401', 'redirect': None}}", "14:14:15 [3] seed: none — its front door is a browser IDE behind one password; it exposes no data API, and writing a file with docker exec would not be the front door (R-156)", "14:14:16 [5] drill commit e9d45463d7d9: code-server lscr.io/linuxserver/code-server:4.129.0 -> lscr.io/linuxserver/code-server:4.143.1 (push rc=0)", "14:14:25 [5] the box's drill mirror now at e9d45463", "14:14:40 [sync] the badge needed 15.8s and 2 sync+rescan rounds to catch up to lscr.io/linuxserver/code-server:4.143.1 — R-607's window, measured", "14:14:41 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}", "14:14:41 + 0.0s phase=checking label=Ellenőrzés… err=None hold=None", "14:14:42 + 1.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None", "14:15:04 + 23.6s phase=pulling label=Új verzió letöltése… err=None hold=None", "14:15:28 + 47.1s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None", "14:15:32 + 51.2s phase=starting label=Indítás az új verzióval… err=None hold=None", "14:15:33 + 52.3s phase=verifying label=Működés ellenőrzése… err=None hold=None", "14:15:38 + 57.4s phase=done label=Frissítve err=None hold=None", "14:15:57 [7] memory soak 600 s …", "14:26:03 [7] soak: peak 5.3% of the limit (anon), kills 0, restarts 0" ] }