felhom.eu/REPORT-night-2026-10-25.md

REPORT — installer 1.36.1 published; the night's fixes (2026-10-25 evening → 2026-10-26 morning)

Plain words first.

1. Every package that is still named is there. You pruned old controller, agent and golden packages by hand; nothing a box or the installer can still ask for is missing (the agent 0.165.0 + bundle, the 0.158.1 floor agent, golden 0.331.0, the agent tags from 0.158.1 up, controller 0.343.0 / 0.342.0 / 0.331.0, samba 1.2.0, the ISO).
2. Installer 1.36.1 is live, and its three messages were seen: a wrong customer → „not found (404)", a wrong passphrase → „passphrase REJECTED (401)", a customer whose box is live → „already has a live box (409)" (R-1167's sentence, which could never show before).
3. The agent CI is green with D50 = A (the newest 5 versions + the MinAgent floor + the day-0 agent).
4. R-1261 is fixed and proven before Tuesday — on a test VM with two seeders: both held, 94.8 Mbit/s measured, both limits back; a speed-mode switch mid-test never left 1 KiB/s. It reaches households with Monday's controller release.
5. You decide: Kimai on demo-hp — press Start, or remove it (STATUS, D51). And the Monday release list (STATUS).

Each fix, before → after

• R-1261 (controller a79a292): one seeder held, a removed app's record kept forever, qBittorrent's limit put back in whatever slot its mode showed → every seeder held, the record dropped, the held slot named. Live on the rig.
• R-1287 (hub f6328486, v0.171.0): a set-aside mailed „🔴 1 of 1 apps failed to back up" → „⚠️ … a backup of an earlier install was set aside — nothing failed", a warning. Test on the real dispatch path.
• R-1288 (controller b5863a9): a set-aside restore's replaced unit was set aside at the NEXT backup, with a second alarm → set aside at the restore, no alarm. Live on the rig (one set-aside mail only).
• R-1281 (controller 7ea942a): an app container signed in to FileBrowser with a forged header (200) → no answer; the household's file manager still 200; a FileBrowser left on traefik-public is moved off by the next round. Live.
• R-1289 (hub f6328486): a dev build no box ran was „the fleet's newest" → test builds never count.
• R-1282 (controller b5863a9): the 03:30 media restart was forgotten by a controller restart → stored, resumed once.
• R-1280 (agent d912307): a signed window of any length → at most 24 h (verifier, root wrapper, felhom-opsign).
• R-1285 (agent abcc1e6): a BYO host lost our SSH file one update late → the agent runs the new wrapper's policy pass after every bundle install.
• R-1283 (drill catalog 6733764): MeTube's downloads excluded → optional (a named ruling in the gate).
• R-1286 (controller 838c834): Kimai's crash-loop hold read „a failed restore whose rollback also failed" → every hold reason says what it is. The cause: the crash-loop guard during the 10-14 power drill.

Teardown — three layers

• Machine (rig VM 9372 on demo-hp): the product's own --uninstall ran first (rc 0, „UNINSTALL complete — removed: guest 9201, the felhom-agent …", audits/night-2026-10-25/rig/uninstall-console.txt); the host journal was copied off before (rig/rig-host-journal.txt). Then qm destroy 9372 --purge 1: qm list shows no 9372, its folder on nvme-scratch is gone, the plain-PVE ISO is removed from demo-hp, the ISO work folder on DooPlex is removed, the old host key is removed from known_hosts.
• Host (demo-hp): guest 9202's test tracker, downloader container, test files and image are removed (0 containers, 0 files, port 6969 closed). nvme-scratch is a standing storage (it holds 341, 9202, 9401) — this session did not add it, so it stays. local-lvm (the thin pool) was never used: 48 %.
• Hub: host Tester4-84bbe7 stays on the Hosts page — a host delete is the operator's (STATUS, „Also Monday"). The R-1285 test package was deleted from the registry (204, then 404).
• Secrets: the scratch session, CSRF and header files, the dashboard password file, the rig root password file, the test bundle and the test agent build are shredded. The evidence was scanned against the four known values (through sec) and four token shapes: 0 hits (one shape hit is code that reads a file). The sec entries RIG_2026_10_25_DASH_PW and RIG_2026_10_25_SETUP_CODE remain; sec has no delete, and the box they opened is gone.