Files
felhom.eu/documentation/audits/night-2026-09-25/REPORT-DRAFT-AB.md
T

2.2 KiB

Part A — the agent, the restore test, the HP backup

A1 — agent v0.133.0 signed and delivered, one box after the other (ruling 1, 2026-09-16). Package sha256 3aa30345…e69b6 verified against the published package before signing (A/A1-*.txt).

box signed (UTC) box took it AUTHORIZED → COMPLETED committed hub reads
demo-felhom-8363b5 19:25:30 21:34:05 CEST job c4b592ff7c9ff307 21:35:09 0.133.0
demo-hp-bb76ea 19:35:55 21:48:58 CEST job 36aab1ed8ad00979 21:50:02 0.133.0

Peti's box: never signed for.

A2 — the restore test back on, both boxes. agent.json.pre-r672 copied back; the diff was only restore_test_eval_interval_seconds: -1 (and the trailing newline). The -1 config is kept as agent.json.night-0925-off. Start-up line on both: restore-test scheduler starting (per-archive due-check) eval_interval=6h0m0s settle=24h0m0s.

A3 — one on-demand restore test. demo-felhom: PASS — scratch 990000 restored, booted, verified, torn down in 1 min 25 s; pool 3.13 % → peak 5.68 % → 3.13 %; preflight "required 12.8 GB, avail 362.8 GB". demo-hp: REFUSED, correctly — "restoring 21.1 GiB (vzdump log: total bytes written) needs 30.3 GiB free, has 22.1 GiB", exit 4, pool 59.01 % before and after, nothing created.

A4 — HP whole-box backups, option A. Before: root disk (local) 89 % used, 4.3 GB free, three 9201 archives (6.2, 6.3, 7.4 GB), retention 3. Changed: local_backup_retention 3 → 1 (saved copy agent.json.pre-a4-retention), agent restarted, the two oldest archives removed with PVE's own pvesm prune-backups local --vmid 9201 --keep-last 1 (dry-run shown first) → 58 % used, 16.8 GB free. Why the prune by hand: PVE prunes AFTER a successful backup, so lowering the retention alone would not have let the next backup fit. One whole-box backup by the product's own button (POST /api/guest-backup/trigger, the Mentések page) — 9201's apps were stopped for it (snapshot mode, resumed at "snapshotted"): local archive 8.18 GB in 7 min, then the PBS tier (the button covers every tier) 23.2 GB in 4.5 min; the new prune kept 1 archive; root 60 %; all 20 app containers healthy. The product row is R-685.