Files
felhom.eu/documentation/audits/security-app-updates-2026-10-27/walks/bookstack/box-verdict-bookstack.json
T

260 lines
9.1 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"app": "bookstack",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.1",
"bookstack-db": "mariadb:12.3"
},
"to": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
"bookstack-db": "mariadb:12.3"
},
"observables_before": {
"pinned_images": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.1",
"bookstack-db": "mariadb:12.3"
},
"installed_images": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.1",
"bookstack-db": "mariadb:12.3"
},
"catalog_images": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.1",
"bookstack-db": "mariadb:12.3"
},
"live_compose_image_lines": [
"image: lscr.io/linuxserver/bookstack:26.09.1@sha256:99cd1f5707c1911afad213adec5c9739763b76f843d1477142231834ecdcb6f7",
"image: mariadb:12.3@sha256:805c8e104bd563d5bfa24fadd3f31cd419ea859cb5277f32b5dbf2db714f9ed1"
],
"docker_inspect": [
"bookstack lscr.io/linuxserver/bookstack:26.09.1@sha256:99cd1f5707c1911afad213adec5c9739763b76f843d1477142231834ecdcb6f7 running=true restarts=0",
"bookstack-db mariadb:12.3@sha256:805c8e104bd563d5bfa24fadd3f31cd419ea859cb5277f32b5dbf2db714f9ed1 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "404",
"redirect": null
},
"script": {
"status": "404",
"redirect": null
}
},
"seed": "read_back",
"drill_commit": "cbb4196e7162",
"sync_waited_s": 4.6,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-10-27T13:40:36Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 14.4,
"phase": "safety-dump",
"label": "Adatbázis pillanatkép…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 15.5,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 41.1,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 53.4,
"phase": "starting",
"label": "Indítás az új verzióval…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 59.5,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 76.9,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 76.9,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
"bookstack-db": "mariadb:12.3"
},
"installed_images": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
"bookstack-db": "mariadb:12.3"
},
"catalog_images": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
"bookstack-db": "mariadb:12.3"
},
"live_compose_image_lines": [
"image: lscr.io/linuxserver/bookstack:26.09.2",
"image: mariadb:12.3"
],
"docker_inspect": [
"bookstack lscr.io/linuxserver/bookstack:26.09.2 running=true restarts=0",
"bookstack-db mariadb:12.3 running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"bookstack": "sha256:2fdeeb1a2028ce7cb1274696237e32b9f849e16b6d77314d08c78356a6016fca",
"bookstack-db": "sha256:d46e102fa8b9b72bfcdeb56f9dd538742092119dc8b11f31fe662605cd234cd9"
},
"four_observables": {
"pinned": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
"bookstack-db": "mariadb:12.3"
},
"installed": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
"bookstack-db": "mariadb:12.3"
},
"catalog": {
"bookstack": "lscr.io/linuxserver/bookstack:26.09.2",
"bookstack-db": "mariadb:12.3"
},
"live_compose": [
"lscr.io/linuxserver/bookstack:26.09.2",
"mariadb:12.3"
]
},
"seed_read_after": true,
"setup_gate_after": {
"browser": {
"status": "404",
"redirect": null
},
"script": {
"status": "404",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 118,
"containers": {
"bookstack": {
"samples": 59,
"anon_peak_bytes": 21417984,
"limit_bytes": 536870912,
"anon_peak_pct": 4.0,
"cgroup_peak_pct": 18.9,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-02a0824975a3d83f37b881059857a096b1e8fb07b70c45ac35e9bf3c2a2b380f.scope"
},
"bookstack-db": {
"samples": 59,
"anon_peak_bytes": 99962880,
"limit_bytes": 268435456,
"anon_peak_pct": 37.2,
"cgroup_peak_pct": 43.7,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-8beb2b13dfc2dba96fa95b781acda2fbe0206b255efa842d163f987c1baf4292.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 37.2
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
"log": [
"14:38:50 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['ADMIN_PASSWORD']",
"14:38:50 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"14:40:06 [1] deployed, controller state=unhealthy, pinned={'bookstack': 'lscr.io/linuxserver/bookstack:26.09.1', 'bookstack-db': 'mariadb:12.3'}",
"14:40:06 [1] NOTE: the controller's own state is 'unhealthy', not 'running' — recorded, not treated as a failure; the fixture's front-door wait is the real gate",
"14:40:10 [2] setup gate as installed: {'browser': {'status': '404', 'redirect': None}, 'script': {'status': '404', 'redirect': None}}",
"14:40:14 bookstack: artisan create-admin :: Admin account with email \"drill-c575a897@gate.invalid\" successfully created!",
"14:40:21 bookstack: readback of the seeded account found=True :: This will delete any configure multi-factor authentication methods for user: - ID: 3 - Name: drill-de83a8 - Email: drill-c575a897@gate.inval",
"14:40:22 [5] drill commit cbb4196e7162: bookstack lscr.io/linuxserver/bookstack:26.09.1 -> lscr.io/linuxserver/bookstack:26.09.2 (push rc=0)",
"14:40:31 [5] the box's drill mirror now at cbb4196e7",
"14:40:36 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"14:40:36 + 0.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"14:40:51 + 14.4s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None",
"14:40:52 + 15.5s phase=pulling label=Új verzió letöltése… err=None hold=None",
"14:41:17 + 41.1s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"14:41:30 + 53.4s phase=starting label=Indítás az új verzióval… err=None hold=None",
"14:41:36 + 59.5s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"14:41:53 + 76.9s phase=done label=Frissítve err=None hold=None",
"14:42:20 bookstack: readback of the seeded account found=True :: This will delete any configure multi-factor authentication methods for user: - ID: 3 - Name: drill-de83a8 - Email: drill-c575a897@gate.inval",
"14:42:21 [7] memory soak 600 s …",
"14:52:28 [7] soak: peak 37.2% of the limit (anon), kills 0, restarts 0"
]
}