adminandClaude Opus 5.5
02be5006bb
gates / gates (push) Successful in 6m47s
- audits/prowlarr-2026-10-15/box9201: Sonarr then Prowlarr — no link until „Bekötés most"; Radarr after Prowlarr — linked by itself ~60 s later; Prowlarr's connection test 200 for both, its sync command completed; all removed keeping data. The first run's key-quoting defect in the tool is recorded and fixed. - R-1058 (Apps & catalog, P3): the wiring does not start when Prowlarr itself comes up. - R-1048 closed (CLOSED-ITEMS). STATUS, CONTEXT. REPORT-release-rule-prowlarr-2026-10-15.md. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
36 lines
3.2 KiB
Markdown
36 lines
3.2 KiB
Markdown
# Prowlarr into the live catalog — evidence (R-1048, 2026-10-15)
|
||
|
||
The record that cites this folder: `app-catalog-felhom.eu/onboarding/prowlarr.md` (61 checks). The design it follows:
|
||
`documentation/architecture/15-media-library.md` §6 (the links) and `09-update-architecture.md` §6.4 (the ladder).
|
||
|
||
## The venues and what each run proves
|
||
|
||
| folder | venue | what it proves |
|
||
|---|---|---|
|
||
| `bench/` | LXC 9401 on demo-hp (`/opt/upg`) | licence, tags, the official-image check, first start from birth (memory, tools, files, analytics on by default), the update test `MV-prowlarr` (proven; abort starts-and-serves; 10-minute soak 7.6 %), C3 negative control (failed, as it must), volume-persistence CLEAN |
|
||
| `box/walk.txt`, `walk-results.json` | 9202, drill catalog, run 1 | install window as a stranger, the setup gate, the first account, sign-in right and wrong, „Kész", the stranger after it, six wrong passwords, the address the app logs, remove with data. **Its Update ran with an EMPTY `.felhom.yml`** — see run 2 |
|
||
| `box/run2-empty-meta/` | 9202, run 2 | **not a measurement of the template** — the test tool emptied the drill `.felhom.yml` (README there). One product fact: a restore brings the app back at the image in the backup |
|
||
| `box/run3/` | 9202, drill catalog with the full template | the step version-2.5.2.5491 -> version-2.6.5.5623 through the guarded Update (the box verdict `box/prowlarr/box-verdict-prowlarr.json`), seed -> the Update's per-app backup -> remove keeping backups -> restore -> seed read back; probe negative control; volume size |
|
||
| `box9201/` | demo-hp 9201, LIVE catalog, after the publish | the link read-back: Sonarr then Prowlarr, „Bekötés most", the link and its test, the sync command; remove both keeping data |
|
||
| `tools/` | DooPlex | the scripts that ran (passwords and keys never printed) |
|
||
|
||
## The test-tool bug (fixed)
|
||
|
||
`tools/walk_prowlarr.py` bumped the drill template with `open(fy, "w").write(re.sub(…, open(fy).read(), …))`: the write
|
||
truncates before the read, so drill commit f2b0cc1 emptied `templates/prowlarr/.felhom.yml`. The product then ran the
|
||
app with no deploy fields (`env: {}`, traefik rule `Host(\`.enkisfelhom.hu\`)`). Found in run 2 by the gate's `not
|
||
routed (404)` lines and the 0-byte file in the stack folder. Fixed in the tool (read first, then write); drill commit
|
||
e917a58 restored the file; run 3 repeated the step. Run 1's checks before the bump stand.
|
||
|
||
## Findings and where they went
|
||
|
||
- Prowlarr sends anonymous usage data by default → the template seeds it off (template; no row, fixed).
|
||
- `/initialize.json` gives the API key to anyone before the first account → the setup gate hides it; after the setup
|
||
it redirects to the login (measured; FIRST-ADMIN row).
|
||
- No lock-out after wrong passwords → a stranger cannot lock the household out (the property `09` §3 decisions 57–60
|
||
protect); no row.
|
||
- The box links Prowlarr only when Sonarr/Radarr come up, or on „Bekötés most" → measured on 9201 (`box9201/`); the copy
|
||
and the website card say so; R-1058.
|
||
- A restore of a removed gated app comes back without the gate, even from a backup made before the setup → measured
|
||
on 9202 run 3 (a stranger's `/ping` 200 after the restore, 401 before); R-1057.
|