# R-1148 — a fresh install from nothing with installer 1.34.0 (2026-10-18 evening)

Throwaway customer **Tester4** (created by the operator; domain `tester4.test`, a reserved name that never resolves; no
off-site, no PBS-DR — nothing on ep0). VM 9302 `newbox-r1148` on demo-hp (Tier 1; 8 GB / 4 cores / 120 GB raw on
`nvme-scratch` = `/mnt/hdd_1` root) from the public ISO 1.29.0 (checksum = the published one). The ISO fetches
`felhom-host-install.sh` at run time from `https://felhom.eu/scripts/` — served 1.34.0 (`SCRIPT_VERSION` read live). The
graphical installer was driven with `qm sendkey`, the Hungarian keyboard kept, as a household would. The household's
path: the mailed bind link + the pairing code on the console + the owner phrase (the operator put it in a 0600 file;
shredded after), then the mailed setup code.

| file | what it shows |
|---|---|
| `02-timeline.txt` | every step with its time (UTC below the line) |
| `03-bind.txt` | the bind page's answer: „Sikeres összekötés" |
| `04-pve-login-check.txt` | CC's own PVE API login from DooPlex, status codes only: the **vaulted** value 200; the value typed at install 401 |
| `05-claim-and-version.txt` | the claim (302 /) and the box's own `/api/selfupdate/status`: 0.329.0 → 0.330.0, `initiated_by: auto-floor` |
| `07-first-app.txt` | BentoPDF installed through the dashboard's API: deploy 202, running, healthy |
| `08-bootstrap-journal.txt` | the box's `felhom-bootstrap` journal (scanned for secret shapes: 0) |
| `09-hub-reports.txt` | the hub's host reports (agent 0.159.2) and the controller's own reports (0.329.0, then 0.330.0) |
| `10-poweroff.txt` | the household's „turn off" (202), the hub's `deliberate_off_at` |
| `99-teardown.txt` | the name read back twice, VM 9302 destroyed with its disk; the other VMs listed |
| `screens/` | installer and console |

**Step 4b (R-1145) in the full sequence:** `recovery password vaulted at the hub (stored) — now setting it on root@pam`
→ chpasswd → `[OK] root@pam password vaulted, set, and the PVE login takes it`, all at 18:03:43 UTC; the hub's
`host_recovery.set_at` is the same second. **The golden and the agent:** the hub manifest named agent v0.159.2 (sha
`4d98868e…`) and golden v0.329.0 — the two vouched artifacts; both verified by sha256. The box came up on 0.329.0 and
moved to the floor 0.330.0 by itself 2 min 47 s after the bind.

Not walked: an SSH key login — CC logged in with the vaulted password (`sshpass -f`, file 0600, shredded after).

**Left for the operator (session only):** delete customer Tester4 on the hub — allowed from 19:09 UTC (the last report
18:24:18 + the 45-minute stale threshold); a 409 before that is by design (R-599).