Files
felhom.eu/documentation/audits/evidence-ep0-established-connections-2026-08-20/step2-boxes-reading-B.txt
T
admin 19672e685e
gates / gates (push) Successful in 14s
SPIKE ep0 connections: the leak is felhom-agent's, not the poll rate
R-341's first dated check, taken at +46.2 h: fd 17 -> 405 over 166,251 s
= 201.6/day. Pre-registered range was 370-450; observed 388. UNCHANGED,
as predicted. CLOSE-WAIT is 0 -- absent entirely, not merely flat.

Q1: exactly two peers, 194 each, no third party.
Q2: outcome (a). ep0 388 = 194 + 194 on the boxes, twice, and the four
    new sockets carry the same source ports on both sides. 0 closed in 31 min.

The finding: all 388 are held by felhom-agent. pvestatd and
proxmox-backup-client made 162,404 requests and leaked zero. Mechanism is
a per-cycle http.Transport with a zero-value IdleConnTimeout that nothing
ever closes (internal/pbs/client.go:56, main.go:1486). R-336's premise
does not survive this -- cutting the poll rate would have fixed nothing.

Q3 NOT measured: Phase C held at STOP 1, prediction pre-registered first.

Part 0 captures the due-checks gate's first conviction on a real overdue
date (rc=1, names R-341, sole failure among 10 gates). Row cleared at
Part 4, after the result was recorded in R-341, not to make a push work.

New: R-344 (the transport leak), R-345 (hub/Makefile pushes :latest),
R-346 (ActiveEnterTimestamp reads 5h56m early -- NRestarts is still 0).
2026-08-20 10:41:37 +02:00

55 lines
2.1 KiB
Plaintext

##################### felhom-pve #####################
host: demo-felhom UTC: 2026-08-20T08:34:01+00:00 epoch=1787214841
--- state histogram, dport 8007 ---
196 ESTAB
--- owner ---
196 users:(("felhom-agent"
--- persistence diff A vs B (source port is the key) ---
A=194 B=196 both=194 closed=0 new=2
closed set:
new set:
10.77.0.2:45620
10.77.0.2:53226
--- agent uptime (has it restarted? if so the count would have reset) ---
Wed 2026-08-12 18:45:28 CEST
2596329
--- agent fd total ---
agent fds: 208
Max open files 524287 524288 files
--- pvestatd state (Part 3 precondition) ---
active
1215
--- backup schedule: next offsite run? ---
"target_id": "felhom-pbs" "cadence_seconds": 604800 "keep_last": 0
--- last PBS snapshots on this box (pvesm) ---
Volid Format Type Size VMID
felhom-pbs:backup/ct/9201/2026-08-11T04:54:07Z pbs-ct backup 3978122771 9201
felhom-pbs:backup/ct/9201/2026-08-18T03:57:43Z pbs-ct backup 4104429602 9201
##################### demo-hp #####################
host: felhom-host UTC: 2026-08-20T08:34:02+00:00 epoch=1787214842
--- state histogram, dport 8007 ---
196 ESTAB
--- owner ---
196 users:(("felhom-agent"
--- persistence diff A vs B (source port is the key) ---
A=194 B=196 both=194 closed=0 new=2
closed set:
new set:
10.77.0.3:37554
10.77.0.3:46214
--- agent uptime (has it restarted? if so the count would have reset) ---
Wed 2026-08-12 20:52:29 CEST
3199936
--- agent fd total ---
agent fds: 208
Max open files 524287 524288 files
--- pvestatd state (Part 3 precondition) ---
active
1298
--- backup schedule: next offsite run? ---
"target_id": "felhom-pbs" "cadence_seconds": 604800 "keep_last": 0
--- last PBS snapshots on this box (pvesm) ---
Volid Format Type Size VMID
felhom-pbs:backup/ct/9201/2026-08-11T19:29:13Z pbs-ct backup 4067039591 9201
felhom-pbs:backup/ct/9201/2026-08-18T03:58:43Z pbs-ct backup 4287958060 9201