admin
65790672d5
gates / gates (push) Successful in 17s
ISO 1.27.1 gated PASS and proven live: first-boot console Felhom-only, pvebanner masked across a proven reboot. Hub v0.113.0 hand-over copy live (R-497 closed). Full first hour walked again on customer tester-1 (three disks + one disk): deploy, use, backup, removal, byte-identical restore, power cut, typo all PASS. The tunnel gives a fresh box no routes: 12/12 503 from DooPlex (R-505); the record has no e-mail (R-508). Rows R-507, R-508 filed; R-496/R-495 fixed/answered awaiting publish; day-0 A.1 no longer claims the controller creates hostnames (R-506). NOT PUBLISHED. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
3.3 KiB
3.3 KiB
ISO release gate — felhom-installer-1.27.1 (2026-09-14)
NOT PUBLISHED — awaiting the operator's yes. Built and gated; the proof installs and the first-hour walk are Phase 4 of the doorstep task; publishing waits for the operator's yes (task Phase 5 STOP).
| file | felhom-installer-1.27.1-pve9.2-1.iso |
| sha256 | 25637007d5a7120ff9faa6b5b7ead3e33c0a361ac2d67e9fd4e0ee77c034c053 |
| size | 1 705 322 496 B |
| built from | felhom.eu 27e8ec8 (manifest repo-commit) = HEAD at gate time |
| package | felhom-bootstrap_1.27.1_all.deb |
Every observed value and what was scanned for: gate-run.txt (run in felhom-iso-assistant:trixie
against the exact output file, stock ISO proxmox-ve_9.2-1.iso for the enumeration).
| criterion | result | observed |
|---|---|---|
| G1 no answer file | PASS | 0; control: /auto-installer-capable found by the same find (1) |
| G2 no root password | PASS | 0 hash patterns across every added file + the package tree; no .rootpw.txt |
| G3 no SSH key | PASS | 0 |
| G4 no customer identity | PASS (reviewed) | 1 hit, a non-value: the FELHOM_RETRIEVAL_PASSPHRASE= parse check string (felhom-bootstrap.sh:515) |
| G5 enumeration | PASS | 4 paths added (felhomtheme/ ×3, the .deb), 3 removed (stock theme); content scan 0 hits, planted control 1 |
| G6 menu | PASS | 2 entries, default=0, timeout=15, timeout_style=menu; banned tokens 0; extra: proxmox-start-auto-installer in a live line 0 (the build log's "lifted kernel line … auto-installer" is the repack's source read, not what ships) |
| G7 package | PASS | one felhom-*.deb, Version 1.27.1, Depends lines 0 |
| G8 postinst | PASS | forbidden systemctl verbs 0, network tools 0, set -e 0, last line exit 0 |
| G9 payload = HEAD | PASS | felhom-bootstrap.sh 973f0c8f…9dd6 = repo; .service cf2e4678…9af3 = repo |
| G10 committed | PASS | scripts/iso/ porcelain empty; HEAD == origin/main |
| G11 round trip | publish-time | — |
| G12 bucket private | publish-time | — |
| G13 directories | PASS | ./etc/felhom/, ./usr/local/sbin/, ./lib/systemd/system/ each 1 |
| G14 a person chooses the disk | static half PASS | no answer file (G1), filter. keys 0; the proof-install half is the walk |
| G15 console after first boot + reboot | PASS (live, VM 332) — first boot Felhom-only (screen 332-b12); proven reboot (boot 16:14:11Z > qm reboot 16:13:56Z); pvebanner masked → /dev/null; /etc/issue 0 × 8006; postinst log shows both acts |
systemctl mask pvebanner.service present; issue text names 8006 0; see audits/evidence-doorstep-walk-1270-2026-09-14/G15-live-332-iso1271.txt |
| G16 Hungarian, one name | static half PASS | jelszavad 0; Tulajdonosi jelmondat 1; negative control isszaáll 0; English printf review list empty; GRUB titles and echo lines Hungarian |
G14 proof half: one disk (VM 332) and three disks (VM 331, on 1.27.0 — the installer path is identical in 1.27.1) both show the installer's own disk screen; the three-disk list is screen 331-s07. Graphical entry: proven to boot, wait at the EULA with nobody at the keyboard, show the one-disk target and reach the password screen — not driven to a full install (R-507).