REPORT — the 2026-10-26 release: hub 0.171.0, agent 0.166.0, controller 0.344.0, catalog, golden 0.344.0

Plain words first.

The push is unblocked. The waiver covered one day; the three waiting felhom.eu commits went out (CI 2352 ✓ on 7ad7c996, which carries b00d5c61 and 1550b1da). The waiver is now removed: the golden gate is green on the new golden alone.
Hub 0.171.0 is live. A set-aside now mails „⚠️ … nothing failed" as a warning (seen in your mailbox), and the vouch line names a release version as „the fleet's newest".
Agent 0.166.0 is vouched (10:04:55 CET) and runs on the three test boxes; a 25-hour signed job is refused on a box.
Controller 0.344.0 runs on every live box (3 of 3; the global floor 09:07:47 UTC). Tester-2 has no box (R-862).
Golden 0.344.0 is baked and vouched (10:26:23 CET); a fresh install from the public ISO came up on 0.344.0 with no update step.

The release-build checks (one line each)

R-1287 — Tester 1 set-aside → mail „⚠️ tester-1: a backup of an earlier install was set aside — nothing failed", warning (hub log + mailbox; the 10-25 mails of the same event read 🔴 „failed"). Closed.
R-1289 — the agent vouch logged „behind the fleet's 0.344.0" while 0.344.0-rc.3 reports sit in the same table. Closed.
R-1280 — demo-hp: 25 h job REJECTED, 30 min job ran; felhom-opsign -ttl 25h refuses. Closed.
R-1285 — the policy pass is wired (seen under 0.166.0), but in the normal delivery the bundle runs in the OLD agent process, so a BYO host still loses our drop-in one release late. Back to OPEN.
R-1281 — FileBrowser only on its own networks on all three boxes; forged header from four apps → 000 (control 404/301); household files 200, no cookie 401; OnlyOffice linked: joins felhom-files, editor config 200, the document fetched 200. The file manager restarted once at the update. Closed.
R-1261 / R-1250 — the line hold is in 0.344.0; the live test is Tuesday 10:00–16:00 (dated check stays). R-1261 VERIFY.
R-1282 — „Később" survives a controller restart (start-up line + settings.json). Closed.
R-1278 — the install page shows the kept-backup hint and link; none before or after (Tester 1). Closed.
R-1286 — Kimai has its install id (07:01:55Z); the hold sentences are released. Closed.
R-1288 — released (proven on the night's rig). Closed.
R-1283 — catalog 73c165d pushed; Tester 1 synced at once, MeTube's folder optional. Closed.
D47 — 0 set aside after the update; every app has an install id.

Versions, digests, CI by commit

What	Version / digest	Commit → CI job
hub	0.171.0, `sha256:742d2e69ce75d0d96598e8ee9a9acb11e677a3663348571e34abbd3819c7c46e`	`7ad7c996` → 2352 ✓ (code `f6328486` → 2342 ✓); manifest `6efb4760`
agent	0.166.0, binary `3f22c65b…bfea9c5c`, bundle `093772c1…5156003a3`	`aa69114` → 2351 ✓; record `b890b57` → 2356 ✓
controller	0.344.0, `sha256:9435165dab85b1200d94157ec49d8be065889139e1831a5476dc68f4b9474b8a`	`0a59044` → 2355 ✓
catalog	`73c165d`	gates green locally (catalog CI runs on push)
golden	0.344.0, `767a90fe07ed47c85a3e08a16b85926e30531b65608f9856aa25855b4dd53210` (637,293,448 bytes)	`documentation/tests/golden-0.344.0-2026-10-26/`

Rows

Before 219, after 212; opened 2 (R-1294 demo-hp's off-site clean-up refused by its own cap; R-1295 PBS DR provisioning rolled back at a re-enrolled install, log only); closed 9 (R-1278, R-1280, R-1281, R-1282, R-1283, R-1286, R-1287, R-1288, R-1289). R-1285 back to OPEN.

Observations

FILED: R-1294 — demo-hp's weekly off-site clean-up refused (209 > 179) at 03:17Z; each refused week grows the next plan.
FILED: R-1295 — at the fresh install the PBS DR auto-provision for Tester4 rolled back (self_check_failed); no mail.
R-1285 reopened (delivery order), see above.
NOT-A-FINDING: the vouch's wrapper_sha=false — the PBS-DR wrapper was never vouched (empty before and after).
NOT-A-FINDING: 9202's rc start logged one WARN while FileBrowser was re-created in the same second; joined 2 s later, log only; the release boxes logged none.
NOT-A-FINDING: the 07:23Z self-bind mail to tester4@ — the operator's delete of Tester4-84bbe7, as designed.
NOT-A-FINDING: the 02:57Z DooPlex sweep found RIG_2026_10_25_SETUP_CODE in last night's session record — that box is destroyed, so the code opens nothing; the sweep worked as designed.
NOT-A-FINDING: R-1282's status API read „LOST" on Tester 1 — the API shows later_at only on a box with media apps; the stored value and the start-up line both kept it (instrument, recorded in the evidence).
Deviation from the brief, said once: the fresh-install proof ran AFTER the golden vouch, because an install refuses any golden but the vouched one (R-297); the vouch was reversible and the proof passed.

Teardown

Machines: fresh-install VM 9373 on demo-hp destroyed with its disks (nvme-scratch); Tester 1's throwaway Tandoor (×2) and OnlyOffice (×2) removed through the product, nothing left; 9202 back on 0.343.0 with FileBrowser on traefik-public and no felhom-files network, the rc image deleted; the drill VM back to virgin (CT 9100 purged).
Host: demo-hp's thin pool never used; nvme-scratch (standing) untouched otherwise.
Hub: host Tester4-eb7371 (the fresh-install VM) stays for the operator to delete (STATUS); per-box floors cleared.
Secrets: bake token/user, bind token, pairing code shredded; the pairing code blacked out in the committed screenshot; evidence scanned (6 sec values + the 3 one-time values: 0 hits). New sec entry REL_2026_10_26_ROOTPW (the test VM's typed root password, replaced at day-0; the VM is gone).
One test side effect: at 2026-10-27 03:30 the „Később" timer fires on Tester 1, which has no media app — it restarts nothing.

5.9 KiB Raw Blame History Unescape Escape