adminandClaude Opus 5.5 ddbcabebb4 hub v0.179.1: a host boot ends "the host needs a restart" at once (demo-felhom 2026-11-08) ...

The host layer's reboot-needed run is cut at the host's last boot (crash guard
last_boot_at, one minute skew margin): the kernel step's reboot is reported on the
kernel layer, so the flag outlived it until the next night. Feeds the System page
and the 14-day alarm. Test TestRebootNeeded_ClearedByAHostBootAfterTheClaim, red on
two mutants.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-11-08 07:21:50 +01:00

..

accesslog

hub 0.177.0: Reboot guest on the host page (D65 = A, reboot_guest in the agent's closed list, 30-minute expiry); R-1346: the slow-request line and the vouch save's per-leg timing

2026-10-29 16:36:34 +01:00

api

hub: controller_unresponsive_restart (R-1344 restart, agent >= 0.171.0) — one mail per restart, not also controller_restarted_by_agent; the unresponsive alarm text says what the agent will do

2026-10-30 09:23:51 +01:00

assets

feat(hub): Configuration page, asset seedOrUpdate, English UI

2026-02-25 09:34:43 +01:00

claim

hub v0.159.0 (R-1154, after security review): the enroll reuse path re-issues nothing, it warns the operator

2026-10-19 03:29:44 +02:00

cloudflare

hub R-138: the token's one zone must BE the customer's domain (order-independent; security review)

2026-10-08 15:17:05 +02:00

configgen

hub 0.168.0: seal the last plain tokens in config_json (R-975, R-1241's Felhom half); decide row R-1243 for the hub's plain Longhorn copies (register 188 -> 189)

2026-10-23 19:48:17 +02:00

dbsnap

hub 0.167.0 + DooPlex push: the hub DB snapshot every 6 hours (D34, operator yes 2026-10-23, R-232 G5) — slots 02/08/14/20, catch-up 6 h, push :30 after each, refuse a copy older than 2 h; tests red-proved

2026-10-23 09:12:08 +02:00

gitea

hub v0.162.0 (built, not deployed): no repeat mail after a restart for a known-down host or an already-reported stale restore test (R-1001); the Day-0 agent list leaves out packages without the felhom-agent file, a vouch of one is refused (R-1011); an absent tunnel reads 'none set up' (R-1070)

2026-10-19 20:27:01 +02:00

hetznerapi

hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

2026-10-19 10:26:36 +02:00

i18n

hub(D53): held apps reach the operator — mirror, Held apps list (host + Hosts page), reminder after the grace

2026-10-26 18:25:00 +01:00

intent

hub: box presence from the wait channel + delete a switched-off box at once (R-30, D2)

2026-10-08 15:17:05 +02:00

mailhold

hub (unreleased): R-922 option A — a household's clear deletes its notification address (email_cleared); MAIL-HOLD — a restored hub sends no mail until released; two log lines drop the address; runbooks: mail hold is restore step 1; 07 §6.4 R-921 pre-check; R-921/R-922 narrowed

2026-10-09 12:37:29 +02:00

mailrelay

hub v0.18.0: app-email passthrough POST /api/v1/mail → Resend SMTP

2026-06-29 08:45:22 +02:00

monitor

R-1352: the does-not-answer alarm is not mailed after the restart mail of the same episode. Hub commit only.

2026-11-02 23:16:16 +01:00

notify

hub: controller_unresponsive_restart (R-1344 restart, agent >= 0.171.0) — one mail per restart, not also controller_restarted_by_agent; the unresponsive alarm text says what the agent will do

2026-10-30 09:23:51 +01:00

offsite

hub v0.160.0: a live re-enroll mails the operator (R-1156); further refused backups counted, alarm once a day (R-1157); the reinstall's off-site re-issue says what it still does (R-1158)

2026-10-19 10:34:41 +02:00

offsiteheal

hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

2026-10-19 10:26:36 +02:00

offsitekeys

hub: R-1255 escrow edges (HUNT-3 H3/H4) — the carry takes the package with a hash; set-aside names unique per run; the purge never takes a reused path's package

2026-10-28 22:40:01 +01:00

osupdates

hub v0.179.1: a host boot ends "the host needs a restart" at once (demo-felhom 2026-11-08)

2026-11-08 07:21:50 +01:00

pbsdrheal

hub v0.68.0 — auth_failed self-heal, consumed_at honesty gauge, wrapper drift (R-39 + R-50b(a))

2026-07-21 10:01:35 +02:00

poke

hub v0.59.0: Direction-2a agent-plane immediate-sync poke sender + ep0 felhom-poke surface

2026-07-16 22:48:15 +02:00

semver

hub: gofmt -w on 22 files, formatting only, no behaviour change (R-1160)

2026-10-19 10:26:36 +02:00

store

hub 0.178.0: the database speed (R-1346) — four indexes and one hint for the five statements that read whole tables (vouch fleet check, OS alarm agent versions, the 04:30 prune inside its write lock, the apps page); the manifest save in one transaction; the slow-statement line (SQL only, never values); evidence p1-r1344 + p2-r1346

2026-10-30 09:52:03 +01:00

sysfacts

Attended release run: hub 0.168.0 deployed (R-975 closed; the live file's residue accepted by the operator, 05 16.2); D40 in effect (R-1243 VERIFY, dated check 10-25); D41/D42 closed; the ep0 iperf3 line-test server (scripts/ep0-iperf3, 06 5) and hub 0.169.0 models line_test (System page cell); R-1249, R-1250 filed; register 194 -> 193

2026-10-24 09:18:44 +02:00

tenantsync

R-1295: the PBS DR set-up waits out PBS's 5-s permission cache. Cause measured on a throwaway PBS 4.2.5 under load (v1.3.0 failed 11/30, v1.4.0 0/30): tenantsync v1.4.0 re-checks the same token (and the admin token) up to 15 s; hub v0.172.0 retries a self_check_failed rollback 3x, 7 s apart, and a final failure mails the operator (pbsdr_provision_failed, operator-only). Red-proved. Commit only; ep0 unchanged.

2026-10-26 12:27:28 +01:00

web

hub 0.177.0: Reboot guest on the host page (D65 = A, reboot_guest in the agent's closed list, 30-minute expiry); R-1346: the slow-request line and the vouch save's per-leg timing

2026-10-29 16:36:34 +01:00

wgsync

hub: wgsync fix — constrain HostKeyAlgorithms to the pinned key's type

2026-07-03 23:52:08 +02:00