Files
felhom.eu/documentation/audits/security-app-updates-2026-10-27/walks/code-server/box-verdict-code-server.json
T

229 lines
7.4 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"app": "code-server",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"code-server": "lscr.io/linuxserver/code-server:4.129.0"
},
"to": {
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
},
"observables_before": {
"pinned_images": {
"code-server": "lscr.io/linuxserver/code-server:4.129.0"
},
"installed_images": {
"code-server": "lscr.io/linuxserver/code-server:4.129.0"
},
"catalog_images": {
"code-server": "lscr.io/linuxserver/code-server:4.129.0"
},
"live_compose_image_lines": [
"image: lscr.io/linuxserver/code-server:4.129.0"
],
"docker_inspect": [
"code-server lscr.io/linuxserver/code-server:4.129.0 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "401",
"redirect": null
},
"script": {
"status": "401",
"redirect": null
}
},
"seed": "none",
"seed_why": "its front door is a browser IDE behind one password; it exposes no data API, and writing a file with docker exec would not be the front door (R-156)",
"drill_commit": "e9d45463d7d9",
"sync_waited_s": 15.8,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-10-27T13:14:40Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "checking",
"label": "Ellenőrzés…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 1.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 23.6,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 47.1,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 51.2,
"phase": "starting",
"label": "Indítás az új verzióval…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 52.3,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 57.4,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 57.4,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
},
"installed_images": {
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
},
"catalog_images": {
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
},
"live_compose_image_lines": [
"image: lscr.io/linuxserver/code-server:4.143.1"
],
"docker_inspect": [
"code-server lscr.io/linuxserver/code-server:4.143.1 running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"code-server": "sha256:4524d0b00478e41264f42e0e660c1819e3b7d0c460f78ce73e44fa39b2b55134"
},
"four_observables": {
"pinned": {
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
},
"installed": {
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
},
"catalog": {
"code-server": "lscr.io/linuxserver/code-server:4.143.1"
},
"live_compose": [
"lscr.io/linuxserver/code-server:4.143.1"
]
},
"setup_gate_after": {
"browser": {
"status": "401",
"redirect": null
},
"script": {
"status": "401",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 60,
"containers": {
"code-server": {
"samples": 60,
"anon_peak_bytes": 56635392,
"limit_bytes": 1073741824,
"anon_peak_pct": 5.3,
"cgroup_peak_pct": 6.5,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-3e70f1cab90c32e664a14c2861fdebbbf7c7bc27370465d09a60f0048b2a437d.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 5.3
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak",
"log": [
"14:13:20 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['PASSWORD']",
"14:13:21 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"14:14:11 [1] deployed, controller state=running, pinned={'code-server': 'lscr.io/linuxserver/code-server:4.129.0'}",
"14:14:15 [2] setup gate as installed: {'browser': {'status': '401', 'redirect': None}, 'script': {'status': '401', 'redirect': None}}",
"14:14:15 [3] seed: none — its front door is a browser IDE behind one password; it exposes no data API, and writing a file with docker exec would not be the front door (R-156)",
"14:14:16 [5] drill commit e9d45463d7d9: code-server lscr.io/linuxserver/code-server:4.129.0 -> lscr.io/linuxserver/code-server:4.143.1 (push rc=0)",
"14:14:25 [5] the box's drill mirror now at e9d45463",
"14:14:40 [sync] the badge needed 15.8s and 2 sync+rescan rounds to catch up to lscr.io/linuxserver/code-server:4.143.1 — R-607's window, measured",
"14:14:41 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"14:14:41 + 0.0s phase=checking label=Ellenőrzés… err=None hold=None",
"14:14:42 + 1.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"14:15:04 + 23.6s phase=pulling label=Új verzió letöltése… err=None hold=None",
"14:15:28 + 47.1s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"14:15:32 + 51.2s phase=starting label=Indítás az új verzióval… err=None hold=None",
"14:15:33 + 52.3s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"14:15:38 + 57.4s phase=done label=Frissítve err=None hold=None",
"14:15:57 [7] memory soak 600 s …",
"14:26:03 [7] soak: peak 5.3% of the limit (anon), kills 0, restarts 0"
]
}