felhom.eu/REPORT-disk-evening-2026-10-12.md

# REPORT — the evacuated disk, delivered rows, small fixes, notification slice 1 (2026-10-12 evening)

**The disk: alarms silenced until 2026-11-11 14:32 UTC (by serial). Safe to pull out: yes, with the checklist (`runbooks/dooplex-remove-disk-Z6A07P2G.md`) — mind the same-model twin Z6A070XZ (`/mnt/3_hdd`).**
**Rows (this session's own): before 97 · after 94 · opened 2 (R-934, R-935) · closed 5 (R-304, R-836, R-931, R-932, R-521).** The register reads 116 because a parallel security session filed its own rows in the same hours.
**Releases delivered:** controller 0.309.0 to demo-hp, demo-felhom, Tester 1 at 18:08 (CI 1726 green); catalog `3a6e9308` (CI 1719 green); website nginx gzip (felhom.eu, resource-only sync). No hub release (none needed; Part E not run).

| Part | State | What |
|---|---|---|
| A — the disk | **done** | Read only: two alerts (`DiskUncorrectableSectors`, `DiskOfflineUncorrectable`) on `device=ata-ST3000VX010-2E3166_Z6A07P2G`, 352 sectors flat since 2026-10-09; not mounted; fstab line commented out since 2026-08-14; k3s does not wait for it; Longhorn HDD4 empty; no script/PV/hostPath uses it; the SMART exporter names it (checklist step). After the operator's yes: silence `1e18c10a…` (matches 1 of 7 disks); Longhorn HDD4 removed (78 volumes healthy); R-231 token moved to a header (`1943a70`, proven read-only). Runbook + operator row R-934. |
| B — verify and close | **done**, two dated | R-304 closed (released + runbook `RUNBOOK-open-retained-package.md`); R-836 closed (kernel lane removes the harm); R-330 wire half closed in the row; R-528 WATCH to 2026-11-12; R-435 re-dated 2026-10-20 (window unreadable today); R-231 VERIFY 2026-10-13; R-917: the post IS published (19:00:07, permalink 200) — only your pin is left; R-314 not attempted. |
| C — small rows | **partly** | R-931 (gzip: 114 784 → 22 130 B), R-932 (13 em dashes + a gate rule, red-proved), R-521 F7 (helper), R-206 part (a) in git (role `docker_daemon`, tag `never`, not installed). Not reached: the rest of the hint list. R-895 not touched (no hub release). |
| D — notification slice 1 | **done** | Operator Q1/Q2 „as picked" (decisions 234–235). Three group switches, details + cooldown under „Részletek", „egyedi" saved back unchanged; default list fills groups 1 and 3 for households with no saved list (group 2 custom: R-329). In 0.309.0. |
| E — hub readers | **not started** | A parallel session was releasing hub 0.148.0 (security); no second hub release here. |
| F — STATUS | **done** | |

**Findings:** R-935 — something set `core.bare=true` on the shared felhom.eu checkout at 16:29:37 and 16:37:33; restored both times; not this session's pushes or gates (measured). `homelab-manifests/.claude/settings.json` carries an uncommitted foreign edit that empties its `deny` list — not committed by me, not touched, reported.
**Slips, mine:** a `docker run --rm nginx:alpine nginx -t` on DooPlex for a syntax check (a container start on a protected host); the catalog was pushed while the previous felhom.eu CI run was still queued; a first closed-register merge swept another session's section and was restored from git before commit.
**Helpers:** one (controller), its prompt carrying the brief's fences in full.
**Poster:** no fact changed (its DooPlex lines name roles, not disks). **Instruction files:** none edited.
**Teardown:** none provisioned; the one Alertmanager silence stays by design.

**Decisions (2):**
1. **R-206 (b):** let the weekly clean-up run `docker builder prune -af` on DooPlex (it is banned today)? Pick: **yes** — the cache cap exists, and the prune measured 150 GB back. If you do nothing: the cap alone holds the cache at ≤ 30 GB.
2. **R-388 slice 2:** group 3's mails say „we noticed X and are handling it" instead of the raw error (hub). Pick: **build it next**. If you do nothing: households with group 3 on get today's raw error mails.