B6 ★8 — the clock wrong at boot: −2 years, then +2 years, then the real time (2026-10-21 07:15–07:58 real UTC)
Method (00-expected.txt): NTP dropped at the VM's tap (314 packets dropped in all — positive control); clean restarts
with the RTC set; clock control = the box's HTTP Date header (01-run.txt).
−2 years (RTC 2024-10-21)
- The box came up at 2026-04-13 19:38, not 2024 — the operating system will not run before its own build date and raised the clock to it. So the real test was „6 months behind".
- The hub and the registry refuse the box: „x509: certificate … not yet valid". The dashboard says only „Hub nem elérhető" — not that the clock is wrong, although the log knows the exact reason.
- Paperless crash-looped and the box stopped it with a restore hold („crash_loop — 7 in 10m0s; STOPPING it"); its
warning event could not reach the hub, so nobody was told. Its log was empty when read (
03-…). - Nothing was deleted; no backup ran.
+2 years (RTC 2028-10-21)
- Every tier looked 2 years old: a local whole-box catch-up ran at once (
vzdump-lxc-9201-2028_10_21-09_34_16, 4.6 GB). The weekly PBS tier had not started when the clock was put back. Hub and registry refused the box („certificate has expired"). No deletion: off-site retention is the hub's (decision 68), local keep-daily 3 kept all three archives.
Back to the real time (07:43:47 real) — two lasting effects
- The box's WireGuard tunnel to ep0 is dead (
07-…,08-ep0-wg-handshakes.txt): every PBS call from the agent times out; the agent answers the controller so slowly that the backups page says „A host-ügynök jelenleg nem elérhető" 10+ minutes after the return. ep0's side, read-only: Tester4's last handshake was 07:40:47 — while its clock said 2028 — and none since, while the other peers shook hands 21–96 s ago. WireGuard refuses a handshake whose timestamp is older than the last one it accepted, so the tunnel stays dead until the real date passes 2028 or the peer is reset on ep0. → R-1204. Not reset (ep0 is read-only in this run). - The local whole-box tier's newest archive is dated 2028-10-21. By the code (
localapi/server.go:1187), the due rule answers „within cadence" until then — the D3/T11 shape (R-1189 a). The live answer was not read: the controller asks only inside its night window, and the box dies in B7 before tonight.
- Paperless stayed stopped after the return with a clear sentence („leállítottuk, mert újra és újra összeomlott … Az Indítás gombbal újra megpróbálhatod"); one Start → running in 1 minute. → R-1202 (with the „Hub nem elérhető" text).
Verdict: FINDINGS. A box that runs once with its clock ahead loses its DR tunnel (R-1204, P2) and, by the code, its whole-box schedule (R-1189 a); a box with its clock behind stops an app silently and blames the hub (R-1202, P3).