gates / gates (push) Successful in 13m17s
Every catalog app installed, used, backed up, removed keeping data, reinstalled, restored and removed with data on a fresh box from the public ISO (demo-hp VM 9360, Tester4), endpoint-level. Worst: a reinstall's capture rewrites the kept unit so its restore breaks the app (R-1269, P2), the restore still reports success (R-1270, P2), and „use my kept data" loaded another box's future-dated database (R-1271, P2). Drill catalog fixes for the morning list (n8n usage data; OpenGist 256M, proven by a cgroup probe). VM 9360 and LXC 9361 destroyed; hub host Tester4-aa9466 left for the operator. REPORT-catalog-sweep-2026-10-24.md.
Part 0 — the sweep box (2026-10-24, from 12:33Z)
| VM | 9360 sweep1024-box on demo-hp: 6 cores (cpu host), 12 GiB (demo-hp had 14 GiB available of 29; 9201, 9202 and Tester 1 untouched — the brief's minimum, not its 16 GiB aim), 256 GB system disk + 200 GB + 150 GB data disks, all raw on nvme-scratch (the dir storage), never the thin pool (vm-create.txt) |
| ISO | felhom-installer-1.30.0-pve9.2-1.iso — the current one on felhom.eu/letoltes; sha256 590d7b9b…74d5cc1 = the published .sha256 |
| Installer | graphical, Hungarian keyboard kept, driven by qm sendkey (tools/vmctl.sh), screens in install/. Install pressed 12:37:33Z; pairing code on the console 12:41 (blacked out in install/11-console.png) |
| Bind | Tester4's old host deleted by the operator (12:32, asked by CC); the hub mailed a new bind link 12:31:57Z; bound through the real page in Chromium 12:42:18Z, first try (screens/b-bind-*) |
| Day-0 | 8/8 steps, SUCCESS 12:45:40Z — host Tester4-aa9466, guest 9201, golden imported and verified; Install → done 8 min 7 s |
| Claim | setup-code mail 12:43:14Z („Új beállító kód — újratelepült a szervered", right for a customer who had a box before); claimed 302 → / (claim.txt) |
| Recovery | the box found Tester4's sealed off-site package (2026-10-20 14:16) and asked for the old code first (/recovery): the 2026-10-20 code, typed as it was written down (ten words joined by hyphens), unlocked it — controller „the offsite repository key was recovered and placed" 12:47:41Z. Then the dashboard asked for a NEW code: the ceremony in Chromium (words 4 and 9 asked), escrowed; „Távoli mentés: Aktív" (screens/box-escrow-*, the code blacked out) |
| Drives | /dev/sdb → hdd_1 (210 GB, the apps' data), /dev/sdc → hdd_2 (157 GB), both through POST /api/storage/init (drive-init.txt); the installer's internal place belso (59 GB) |
| Versions | controller 0.342.0, agent 0.164.0, hub 0.169.0; the box syncs the LIVE catalog (app-catalog-felhom.eu main, 5e196e1 at the start; it re-syncs every 15 min) |
| Guest | 9201 at 192.168.0.157, 7.7 GiB RAM (the golden's size), domain tester4.test (no DNS — the browser LXC maps the names; TLS not verified) |
| Browser | LXC 9361 sweep1024-browser (2 cores, 2 GB, nvme-scratch): Chromium 156.0.8078.47 + Playwright 1.52.0; the household's session stored in the LXC (/root/work/state-dash.json) |
| Dashboard | every menu page at phone and computer size, HU and EN (screens-dashboard/, 60): no sideways scroll reported; a signed-in household reads its OWN language setting whatever the browser asks — by design (langFor), the page texts were read with ?lang= |
Secrets used (names only, sec): SWEEP_2026_10_24_ROOTPW (the typed root password — day-0 replaced it with the vaulted
one; DooPlex's key was added before the bind), SWEEP_2026_10_24_BIND_TOKEN, _PAIRING_CODE, _SETUP_CODE, _DASH_PW,
_RECOVERY_CODE, and the existing REHEARSAL_2026_10_20_PASSPHRASE / _RECOVERY_CODE.