Files
felhom.eu/documentation/audits/storage-identity-buildA-2026-10-15
admin 314308b4aa
gates / gates (push) Successful in 6m44s
storage identity build A: 16 accepted + §13 build status; D14; close R-1072/R-1074/R-1075; open R-1083/R-1084; live evidence
The operator ruled D1-D6 as recommended. Build A shipped (agent v0.157.0, controller v0.317.0 MinAgent 0.157.0,
hub v0.154.0): live on Tester 1 (unknown/vm, the "cannot check" notice, copies made not counted), demo-hp and
the N100 (proven, different, unchanged). NAS notice and the no-drive sentence are unit-proven only.
STATUS: D10 removed; vouch agent 0.157.0 and rule on R-1082 added. Poster: the Tier-2 line, text only.

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb
2026-10-15 21:49:38 +02:00
..

Storage identity, build A — live evidence (2026-10-15)

Design: architecture/16-storage-physical-identity.md (§13 = what was built). Releases: agent v0.157.0 (not vouched), controller v0.317.0 (MinAgent 0.157.0), hub v0.154.0. Rows: R-1072, R-1074, R-1075 closed; R-1068, R-1079 narrowed; R-1082, R-1083, R-1084 opened.

Method: endpoint level — no browser on DooPlex. The agent's local API on each PVE host (the same calls the controller makes, with the guest's own token), the dashboard pages and the „run Tier-2 now" endpoint the buttons call, and the hub's database copied with its WAL (a different channel from the agent calls). Times are UTC.

The boxes

Box What it is Agent says Household sees on /backups
Tester 1 Felhom inside a VM on demo-hp every place unknown/vm; drive vs system data: not proven (vm) „A Felhom nem tudja ellenőrizni, hogy a második meghajtó valóban másik lemez-e … ezért nem számolja második másolatnak.” A Tier-2 run copied 10 apps; each app row on /backups/apps says „…ezt a másolatot nem számolja második másolatnak”
demo-hp HP t740, SATA SSD + NVMe every place proven; drive vs system data: different, proven no one-copy notice; Tier-2 copied 10 apps, counted (unchanged)
N100 SATA SSD + USB disk (the bridge passes the real serial) every place proven; drive vs system data: different, proven no one-copy notice; Tier-2 copied 5 apps, counted (unchanged)

All three, same-disk call: system data vs /var/lib/docker → same disk, proven; a drive name that is not mounted → unmapped (never „the system disk").

Search controls (Hungarian searched with ASCII fragments nem tudja / nem sz): Tester 1 after → 11 hits (positive: the notice + 10 app lines). demo-hp → 0. N100 → 1 hit, read by eye: „…külön adatbázis-kiírás nem szükséges” — not the notice (negative holds).

Files

File What
agent-disks-{demo-hp,n100,tester1}.json the agent's GET /disks with the new fields
agent-same-disk-live.txt POST /disks/same-disk — three pairs per box
tester1-rc1.txt Tester 1 on 0.317.0-rc.1 by hand (first look)
tester1-tier2-run.txt, tester1-tier2-log.txt the Tier-2 run on rc.1 and its log (unproven copies)
tester1-backup-pages.txt /backups + /backups/apps on rc.1
per-customer-floors.txt per-box floors 0.317.0 / MinAgent 0.157.0 for tester-1, demo-hp, demo-felhom — 303 floor_set at 19:27:52
demo-hp-backup-page.txt, n100-backup-page.txt the pages before the Tier-2 runs
{demo-hp,n100}-tier2-run.txt, -tier2-log.txt Tier-2 runs on 0.317.0 (counted copies)
{demo-hp,n100,tester1}-backup-pages-after.txt the pages after, all on 0.317.0
hub-stored-identity.txt the hub's latest stored report per box: kind, identity, reason, physical disks
9202-before-0.314.0.txt, 9202-after-0.317.0.txt, 9202-upgrade.txt the NAS check on the scratch box: it has no local_api, so it cannot ask the agent (R-1083); put back on 0.314.0 at 19:40:35

Not shown live (unit-proven, red-proved)

  • A same-disk Tier-2 target skipped — no box has two places on one disk.
  • A NAS share does not hide the one-copy notice (R-1075) — 9202 cannot reach its agent (R-1083).
  • The no-drive install sentence „Ehhez az alkalmazáshoz egy adattároló kell. A Meghajtók oldalon adhatsz hozzá egyet.” — no one-disk box at hand (R-1068). Deliberately not probed with a deploy request (live-probes.md).
  • usb_bridge — no such device seen.

Also seen

  • Tester 1's page also says „Ezt a meghajtót kijelölheted a rendszermentés helyéül — így egy lemezhiba után is vissza tudod állítani a rendszert.” The whole-box backup offer does not ask about identity → R-1084.
  • R-1072 is closed entirely: backup.target.degraded was already informal, and the formal word csatlakoztasson is gone from all three pages (0 hits each; 1 hit on the OMV run's page omv-vm-2026-10-15/B4-backup-pages.txt, the control).

Teardown

Machine: Tester 1, demo-hp 9201, N100 9201 stay on 0.317.0 through their per-box floors (cleared after the global floor); 9202 back on 0.314.0. Host: the helper script /tmp/agentq.sh removed from demo-hp, felhom-pve and Tester 1's host. Hub: three per-customer floors set (listed above); nothing else. No app installed or removed; no disk touched.