50 lines
4.4 KiB
Markdown
50 lines
4.4 KiB
Markdown
# REPORT — installer 1.36.1 published; the night's fixes (2026-10-25 evening → 2026-10-26 morning)
|
|
|
|
**Plain words first.**
|
|
1. **Every package that is still named is there.** You pruned old controller, agent and golden packages by hand; nothing a
|
|
box or the installer can still ask for is missing (the agent 0.165.0 + bundle, the 0.158.1 floor agent, golden
|
|
0.331.0, the agent tags from 0.158.1 up, controller 0.343.0 / 0.342.0 / 0.331.0, samba 1.2.0, the ISO).
|
|
2. **Installer 1.36.1 is live, and its three messages were seen:** a wrong customer → „not found (404)", a wrong
|
|
passphrase → „passphrase REJECTED (401)", a customer whose box is live → „already has a live box (409)" (R-1167's
|
|
sentence, which could never show before).
|
|
3. **The agent CI is green with D50 = A** (the newest 5 versions + the MinAgent floor + the day-0 agent).
|
|
4. **R-1261 is fixed and proven before Tuesday** — on a test VM with two seeders: both held, 94.8 Mbit/s measured, both
|
|
limits back; a speed-mode switch mid-test never left 1 KiB/s. It reaches households with Monday's controller release.
|
|
5. **You decide:** Kimai on demo-hp — press Start, or remove it (STATUS, D51). And the Monday release list (STATUS).
|
|
|
|
## Each fix, before → after
|
|
|
|
- **R-1261 (controller `a79a292`):** one seeder held, a removed app's record kept forever, qBittorrent's limit put back
|
|
in whatever slot its mode showed → every seeder held, the record dropped, the held slot named. Live on the rig.
|
|
- **R-1287 (hub `f6328486`, v0.171.0):** a set-aside mailed „🔴 1 of 1 apps failed to back up" → „⚠️ … a backup of an
|
|
earlier install was set aside — nothing failed", a warning. Test on the real dispatch path.
|
|
- **R-1288 (controller `b5863a9`):** a set-aside restore's replaced unit was set aside at the NEXT backup, with a second
|
|
alarm → set aside at the restore, no alarm. Live on the rig (one set-aside mail only).
|
|
- **R-1281 (controller `7ea942a`):** an app container signed in to FileBrowser with a forged header (200) → no answer;
|
|
the household's file manager still 200; a FileBrowser left on traefik-public is moved off by the next round. Live.
|
|
- **R-1289 (hub `f6328486`):** a dev build no box ran was „the fleet's newest" → test builds never count.
|
|
- **R-1282 (controller `b5863a9`):** the 03:30 media restart was forgotten by a controller restart → stored, resumed once.
|
|
- **R-1280 (agent `d912307`):** a signed window of any length → at most 24 h (verifier, root wrapper, felhom-opsign).
|
|
- **R-1285 (agent `abcc1e6`):** a BYO host lost our SSH file one update late → the agent runs the new wrapper's policy
|
|
pass after every bundle install.
|
|
- **R-1283 (drill catalog `6733764`):** MeTube's downloads `excluded` → `optional` (a named ruling in the gate).
|
|
- **R-1286 (controller `838c834`):** Kimai's crash-loop hold read „a failed restore whose rollback also failed" → every
|
|
hold reason says what it is. The cause: the crash-loop guard during the 10-14 power drill.
|
|
|
|
## Teardown — three layers
|
|
|
|
- **Machine (rig VM 9372 on demo-hp):** the product's own `--uninstall` ran first (rc 0, „UNINSTALL complete — removed:
|
|
guest 9201, the felhom-agent …", `audits/night-2026-10-25/rig/uninstall-console.txt`); the host journal was copied off
|
|
before (`rig/rig-host-journal.txt`). Then `qm destroy 9372 --purge 1`: `qm list` shows no 9372, its folder on
|
|
`nvme-scratch` is gone, the plain-PVE ISO is removed from demo-hp, the ISO work folder on DooPlex is removed, the old
|
|
host key is removed from `known_hosts`.
|
|
- **Host (demo-hp):** guest 9202's test tracker, downloader container, test files and image are removed (0 containers,
|
|
0 files, port 6969 closed). `nvme-scratch` is a standing storage (it holds 341, 9202, 9401) — this session did not add
|
|
it, so it stays. `local-lvm` (the thin pool) was never used: 48 %.
|
|
- **Hub:** host `Tester4-84bbe7` stays on the Hosts page — a host delete is the operator's (STATUS, „Also Monday"). The
|
|
R-1285 test package was deleted from the registry (204, then 404).
|
|
- **Secrets:** the scratch session, CSRF and header files, the dashboard password file, the rig root password file, the
|
|
test bundle and the test agent build are shredded. The evidence was scanned against the four known values (through
|
|
`sec`) and four token shapes: 0 hits (one shape hit is code that reads a file). The `sec` entries
|
|
`RIG_2026_10_25_DASH_PW` and `RIG_2026_10_25_SETUP_CODE` remain; `sec` has no delete, and the box they opened is gone.
|