admin
31eeb36e88
gates / gates (push) Successful in 22s
Live at iso.felhom.eu, sha256 dceacae5da247d76cad065bf6c0d3bbefac8d8a5f8e571 db2fd8449a97e94829, and both download pages now name it. Every gate criterion is recorded with its OBSERVED value in documentation/tests/iso-release-1.29.0-2026-09-18/ — including two proof installs from the published bytes, one per boot-menu entry, each with a first boot AND one reboot: /etc/issue bilingual with zero hits for 8006, pvebanner masked, package 1.29.0 installed, unit enabled and fired, pairing code present, and the installed script byte-identical to repo HEAD. G11: the downloaded bytes hash to the published checksum. A defect was caught BETWEEN builds by looking at the screen rather than at the config: the second menu entry read "Felhom telepítés (szöveges mód) / Install Felhom (text mode)" — 58 characters — and the GRUB menu box cut it at "Instal". The English half was unreadable on the boot screen. Shortened to "… / text" and rebuilt; the published image is the rebuilt one. The Hungarian half is the part that may not change, so the English half is the part that gave. Teardown: VMs 323/324/325 destroyed, the two unclaimed appliance registrations discarded (zero left in `registered`), guest 9201 untouched — 23 containers before and after. The two stale *.rootpw.txt files were shredded from the publish source directory before the upload ran from it (R-587, files gone; the guard that would stop it recurring is still open). Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
60 lines
4.2 KiB
Markdown
60 lines
4.2 KiB
Markdown
# ISO release 1.29.0 — PUBLISHED 2026-09-18 (R-559, bilingual console)
|
|
|
|
| | |
|
|
|---|---|
|
|
| file | `felhom-installer-1.29.0-pve9.2-1.iso` |
|
|
| sha256 | `dceacae5da247d76cad065bf6c0d3bbefac8d8a5f8e571db2fd8449a97e94829` |
|
|
| size | 1 705 324 544 bytes |
|
|
| base | Proxmox VE 9.2-1 (`4e88fe41…c2c6c`) |
|
|
| source | felhom.eu `eb1ae37` + the menu-width fix (this commit) |
|
|
| published | `https://iso.felhom.eu/felhom-installer-1.29.0-pve9.2-1.iso` |
|
|
| rollback | `felhom-installer-1.28.0-pve9.2-1.iso` (sha `a4cd9b6d…`) stays online; rolling back is one edit on the two download pages |
|
|
|
|
**What changed:** the console is bilingual — the pairing banner, the bound banner and `/etc/issue`
|
|
carry the Hungarian block byte-for-byte as before, then an English block inside the same frame. Both
|
|
GRUB entries gained an English half.
|
|
|
|
## The criteria, each with its observed value
|
|
|
|
| | verdict | observed |
|
|
|---|---|---|
|
|
| G1 no `answer.toml` | **PASS** | `osirrox -find / -name answer.toml` → 0 hits |
|
|
| G2 no root password | **PASS** | no `.rootpw.txt` emitted for 1.29.0; the build says `root-pw: NONE` |
|
|
| G5 no credential literal | **PASS** | scanned the shipped script for `root_password`, `ssh-rsa`, `ssh-ed25519`, `PRIVATE KEY`, `password =`, `$6$`, `api_key` → all 0. One `Bearer` hit is `Bearer $token`, a variable |
|
|
| G6 boot menu | **PASS** | 2 menuentries, `timeout=15`, `timeout_style=menu` (underscore), `default=0`, banned entries 0 |
|
|
| G7 package present | **PASS** | `felhom-bootstrap 1.29.0` in `/proxmox/packages/`, and `dpkg -l` on both installs |
|
|
| G9 payload = repo HEAD | **PASS** | `cmp` of `felhom-bootstrap.sh` and `postinst` extracted from the shipped `.deb` → **IDENTICAL**; the installed copy's sha256 `00d4eb55…` equals the repo file's |
|
|
| G11 checksum + round trip | **PASS** | downloaded the published bytes: 1 705 324 544 B, sha256 `dceacae5…e94829` = built file = published `.sha256` |
|
|
| G14 a person chooses the disk | **PASS** | observed on BOTH entries: graphical `Target Harddisk: /dev/sda (32.00GiB, QEMU HARDDISK)` with a selector; text `Target harddisk: < /dev/sda (QEMU HARDDISK) (32.00 GiB) >` |
|
|
| G15 console after first boot AND one reboot | **PASS** | both installs: `grep -c 8006 /etc/issue` → **0**; `Felhom otthoni szerver` → 1; `Felhom home server` → 1; `pvebanner.service` → **masked**. Screendumps after the reboot are identical to first boot |
|
|
| G16 Hungarian first, secrets named once per language | **PASS** | harness green on every R-559 golden/English/width/height check; `jelszavad` 0, `Tulajdonosi jelmondat` 1, `Owner passphrase` 1 |
|
|
|
|
## The proof installs — BOTH menu entries, on the published bytes
|
|
|
|
Nested VMs on demo-hp, disks on `nvme-scratch` (`/mnt/hdd_1`), destroyed afterwards.
|
|
|
|
| | entry | VM | result |
|
|
|---|---|---|---|
|
|
| 1 | `Felhom telepítés / Install Felhom` (graphical) | 323 | installed, first boot + reboot, all checks pass |
|
|
| 2 | `Felhom telepítés (szöveges mód) / text` | 325 | installed, first boot + reboot, all checks pass |
|
|
|
|
Both first boots showed the bilingual `/etc/issue` above the login prompt and the bilingual pairing
|
|
banner, with the accented characters rendering correctly (R-63's console font). Screendumps in this
|
|
directory; the pairing codes in them are non-secret (a bind also needs the owner passphrase).
|
|
|
|
## A defect found and fixed BETWEEN builds
|
|
|
|
The first build's second menu entry read `Felhom telepítés (szöveges mód) / Install Felhom (text
|
|
mode)` — 58 characters. **The GRUB menu box cut it at `Instal`**, so its English half was
|
|
unreadable on the boot screen. Seen on the screendump, not reasoned about. Shortened to
|
|
`… / text` (38 chars) and the image rebuilt; the published image is the rebuilt one. The Hungarian
|
|
half is unchanged, which is why the English half was the part that had to give.
|
|
|
|
## Teardown
|
|
|
|
VMs 323, 324 and 325 created and **destroyed** (`qm destroy --purge`); `qm list` empty. The two
|
|
unclaimed appliance registrations the proof installs made (ids 32, 33) were **discarded** through
|
|
the operator endpoint — `status='discarded'`, and zero rows remain in `registered`. demo-hp guest
|
|
9201: the same 23 containers before and after, untouched. Two stale `*.rootpw.txt` files from July
|
|
were shredded from the publish source directory before the upload (R-587).
|