felhom.eu/hub/internal/web/templates/system.html

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>System — Felhom Hub</title>
    <link rel="stylesheet" href="/style.css?v={{hubVersion}}">
    <style>
        .sys td, .sys th { white-space: nowrap; font-size: 0.82em; vertical-align: top; }
        .sys .grp { border-left: 2px solid var(--border, #444); }
        .c-warn { color: var(--warn); font-weight: 600; }
        .c-bad { color: var(--danger, #e5534b); font-weight: 700; }
        .sys form { display: inline; }
        .rel-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(16rem, 1fr)); gap: 0.75rem; }
    </style>
</head>
<body>
    {{template "icon_sprite"}}
    {{template "inline_confirm_js"}}
    <div class="container">
        <header>
            <h1>Felhom <span>Hub</span></h1>
            <nav class="nav-links">
                <a href="/" class="nav-link">Dashboard</a>
                <a href="/configs" class="nav-link">Customers</a>
                <a href="/apps" class="nav-link">Apps</a>
                <a href="/hosts" class="nav-link">Hosts</a>
                <a href="/system" class="nav-link active">System</a>
                <a href="/offsite" class="nav-link">Offsite</a>
                <a href="/configuration" class="nav-link">Configuration</a>
            </nav>
        </header>

        <h2 style="margin-bottom: 1rem;">System — versions and OS updates</h2>

        {{if .Flash}}<div class="flash flash-success" style="margin-bottom: 1rem;">{{.Flash}}</div>{{end}}
        {{if .FlashErr}}<div class="flash flash-error" style="margin-bottom: 1rem;">{{.FlashErr}}</div>{{end}}

        <section class="card" style="margin-bottom: 1.5rem;">
            <h3 style="margin-top: 0;">Approved releases</h3>
            <div class="rel-grid">
                {{range .Releases}}
                <div><strong>{{.Layer}}</strong>: <code>{{.ID}}</code><br>
                    <span class="text-muted">{{.Packages}} packages · {{.ApprovedAt.UTC.Format "2006-01-02 15:04"}} UTC · by {{.ApprovedBy}}</span>
                    {{if .Test}}<br><span class="c-warn" title="Approved while a TEST wait override was active. It is cancelled when the hub starts without the override (`11` §5.3.1).">TEST approval</span>{{end}}</div>
                {{else}}<div class="text-muted">No release approved yet.</div>{{end}}
            </div>
            {{if .Cancelled}}
            <h3>Cancelled approvals (last 7 days)</h3>
            <div class="rel-grid">
                {{range .Cancelled}}
                <div><strong>{{.Layer}}</strong>: <code>{{.ID}}</code><br>
                    <span class="c-warn">cancelled {{.Cancelled}} UTC{{if .Test}} — a TEST approval{{end}}</span><br>
                    <span class="text-muted">no further box installs it; boxes that installed it keep it</span></div>
                {{end}}
            </div>
            {{end}}
            <h3>What ring 0 runs now</h3>
            <div class="rel-grid">
                {{range .Candidates}}
                <div><strong>{{.Layer}}</strong>:
                    {{if .Fingerprint}}{{.Packages}} packages, first seen {{.FirstSeen.UTC.Format "2006-01-02 15:04"}} UTC{{else}}<span class="text-muted">—</span>{{end}}<br>
                    {{if .Approved}}<span class="text-muted">approved as {{.Approved}}</span>
                    {{else if .Waiting}}<span class="text-muted">{{.Waiting}}</span>{{end}}
                    {{if and (eq .Layer "docker") .Fingerprint (not .Approved) (eq .Waiting "")}}
                    <form method="POST" action="/os/approve-docker" style="margin-top: 0.3rem;">
                        <input type="hidden" name="_csrf" value="{{$.CSRFToken}}"><input type="hidden" name="return" value="/system">
                        <button type="submit" class="btn btn-sm" data-confirm="Approve this Docker engine set? Ring-1 boxes take it only through a signed operator job.">Approve Docker set</button>
                    </form>{{end}}
                </div>
                {{end}}
            </div>
            <form method="POST" action="/os/approve-now" style="margin-top: 0.8rem;">
                <input type="hidden" name="_csrf" value="{{$.CSRFToken}}"><input type="hidden" name="return" value="/system">
                <button type="submit" class="btn btn-sm btn-danger" data-confirm="Approve the guest and host sets ring 0 runs NOW, without the 24 h + 1 night wait? Every ring-1 box installs them at its next night run.">Approve now (guest + host)</button>
                <span class="text-muted" style="font-size: 0.85em;">An urgent fix only — normally the hub approves after 24 h and one night.</span>
            </form>
        </section>

        <section class="card" id="version-floors">
            <h3 style="margin-top: 0;">Version floors</h3>
            <p>Global controller floor: <strong>{{if .GlobalFloor}}{{.GlobalFloor}}{{else}}none{{end}}</strong> · vouched agent: <strong>{{if .VouchedAgent}}{{.VouchedAgent}}{{else}}none{{end}}</strong></p>
            {{if .Floors}}
            <table class="data-table">
                <thead><tr><th>Customer</th><th>Own floor</th><th>Set</th><th>Global floor moves it?</th></tr></thead>
                <tbody>
                    {{range .Floors}}
                    <tr>
                        <td><a href="/customers/{{.CustomerID}}">{{.CustomerID}}</a>{{if .CustomerName}}<br><span class="text-muted">{{.CustomerName}}</span>{{end}}</td>
                        <td>{{.Version}}</td>
                        <td class="{{if .Age.Class}}c-{{.Age.Class}}{{end}}" title="{{.Age.Title}}">{{.Age.Text}}</td>
                        <td>{{if .HeldBack}}<span class="c-bad">NO — its own floor is lower and wins (R-604)</span>{{else}}no — its own floor applies (at or above the global){{end}}</td>
                    </tr>
                    {{end}}
                </tbody>
            </table>
            {{else}}<p class="text-muted">No per-customer floors: every box follows the global floor.</p>{{end}}
        </section>

        {{if .Rows}}
        <section class="card" style="padding: 0; overflow-x: auto;">
            <table class="data-table sys">
                <thead>
                    <tr>
                        <th>Box</th><th>Ring / updates</th><th>Tunnel</th>
                        <th class="grp">Proxmox</th><th>Kernel (running)</th><th>Kernel (next boot)</th><th>Debian</th><th>Felhom release</th><th>Pending</th><th>Not covered</th><th>Held</th><th>Reboot needed</th><th>kernel.panic</th><th>Oops</th><th>Crash restarts 24 h</th><th>Crash guard</th><th title="The root-owned config bundle: sudoers, wrappers, units (R-840)">Root files</th><th title="The box's agent against the vouched one (R-530). Agents update only by a per-box signed job.">Agent</th>
                        <th class="grp">Guest Debian</th><th>Felhom release</th><th>Pending</th><th>Restart needed</th>
                        <th class="grp">Docker</th><th>containerd</th><th>live-restore</th><th>Docker release</th>
                        <th class="grp">Last OS leg</th>
                    </tr>
                    <tr class="text-muted"><th></th><th></th><th></th><th class="grp" colspan="15">host</th><th class="grp" colspan="4">guest</th><th class="grp" colspan="4">Docker engine</th><th class="grp"></th></tr>
                </thead>
                <tbody>
                    {{range .Rows}}
                    <tr>
                        <td><a href="/hosts/{{.HostID}}">{{.HostID}}</a>{{if .CustomerName}}<br><span class="text-muted">{{.CustomerName}}</span>{{end}}
                            {{if .FactsNote}}<br><span class="c-warn" style="font-weight: normal;">{{.FactsNote}}</span>{{end}}</td>
                        <td>
                            ring {{.Ring}}
                            <form method="POST" action="/os/ring/{{.HostID}}">
                                <input type="hidden" name="_csrf" value="{{$.CSRFToken}}"><input type="hidden" name="return" value="/system">
                                {{if eq .Ring 0}}<input type="hidden" name="ring" value="1"><button type="submit" class="btn btn-sm btn-outline" data-confirm="Make {{.HostID}} a normal (ring 1) box? It then installs only approved releases.">→ normal</button>
                                {{else}}<input type="hidden" name="ring" value="0"><button type="submit" class="btn btn-sm btn-outline" data-confirm="Make {{.HostID}} a DEMO (ring 0) box? It then installs every new fix first and takes unsigned Docker steps if its root-owned ring-0 mark allows.">→ demo</button>{{end}}
                            </form><br>
                            updates {{if .Enabled}}<strong>ON</strong>{{else}}<span class="c-warn">OFF</span>{{end}}
                            <form method="POST" action="/os/enabled/{{.HostID}}">
                                <input type="hidden" name="_csrf" value="{{$.CSRFToken}}"><input type="hidden" name="return" value="/system">
                                {{if .Enabled}}<input type="hidden" name="on" value="0"><button type="submit" class="btn btn-sm btn-outline" data-confirm="Switch OS updates OFF for {{.HostID}}? It keeps reporting and installs nothing.">switch off</button>
                                {{else}}<input type="hidden" name="on" value="1"><button type="submit" class="btn btn-sm btn-outline">switch on</button>{{end}}
                            </form>
                        </td>
                        {{template "sys_cell" .Tunnel}}
                        <td class="grp {{if .PVE.Class}}c-{{.PVE.Class}}{{end}}">{{.PVE.Text}}</td>
                        {{template "sys_cell" .KernelRunning}}{{template "sys_cell" .KernelNextBoot}}{{template "sys_cell" .HostDebian}}
                        {{template "sys_cell" .HostRelease}}{{template "sys_cell" .HostPending}}{{template "sys_cell" .HostNotCovered}}
                        {{template "sys_cell" .Held}}{{template "sys_cell" .RebootSince}}{{template "sys_cell" .KernelPanic}}{{template "sys_cell" .Oops}}
                        {{template "sys_cell" .CrashRestarts24h}}{{template "sys_cell" .Guard}}{{template "sys_cell" .Bundle}}{{template "sys_cell" .Agent}}
                        <td class="grp {{if .GuestDebian.Class}}c-{{.GuestDebian.Class}}{{end}}">{{.GuestDebian.Text}}</td>
                        {{template "sys_cell" .GuestRelease}}{{template "sys_cell" .GuestPending}}{{template "sys_cell" .GuestRestart}}
                        <td class="grp {{if .Engine.Class}}c-{{.Engine.Class}}{{end}}">{{.Engine.Text}}</td>
                        {{template "sys_cell" .Containerd}}{{template "sys_cell" .LiveRestore}}{{template "sys_cell" .DockerRelease}}
                        <td class="grp {{if .LastLeg.Class}}c-{{.LastLeg.Class}}{{end}}" title="{{.LastLeg.Title}}">{{.LastLeg.Text}}</td>
                    </tr>
                    {{end}}
                </tbody>
            </table>
        </section>
        <p class="text-muted" style="font-size: 0.85em;">Amber: worth a look. Red: an operator alarm fires (`08` §6.3). "unknown": the box could not read the value — never a guess.</p>
        {{else}}
        <div class="empty-state"><p>No boxes yet.</p></div>
        {{end}}

        <footer style="margin-top: 2rem; color: var(--text-muted); font-size: 0.8rem; text-align: center;">
            Felhom Hub <span style="font-family: var(--font-mono)">{{hubVersion}}</span>
        </footer>
    </div>
</body>
</html>
{{define "sys_cell"}}<td{{if .Class}} class="c-{{.Class}}"{{end}}{{if .Title}} title="{{.Title}}"{{end}}>{{.Text}}</td>{{end}}