Files
felhom.eu/documentation/audits/storage-identity-buildA-2026-10-15/README.md
T
admin 314308b4aa
gates / gates (push) Successful in 6m44s
storage identity build A: 16 accepted + §13 build status; D14; close R-1072/R-1074/R-1075; open R-1083/R-1084; live evidence
The operator ruled D1-D6 as recommended. Build A shipped (agent v0.157.0, controller v0.317.0 MinAgent 0.157.0,
hub v0.154.0): live on Tester 1 (unknown/vm, the "cannot check" notice, copies made not counted), demo-hp and
the N100 (proven, different, unchanged). NAS notice and the no-drive sentence are unit-proven only.
STATUS: D10 removed; vouch agent 0.157.0 and rule on R-1082 added. Poster: the Tier-2 line, text only.

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb
2026-10-15 21:49:38 +02:00

62 lines
4.4 KiB
Markdown

# Storage identity, build A — live evidence (2026-10-15)
Design: `architecture/16-storage-physical-identity.md` (§13 = what was built). Releases: agent v0.157.0 (not vouched),
controller v0.317.0 (MinAgent 0.157.0), hub v0.154.0. Rows: R-1072, R-1074, R-1075 closed; R-1068, R-1079 narrowed;
R-1082, R-1083, R-1084 opened.
**Method:** endpoint level — no browser on DooPlex. The agent's local API on each PVE host (the same calls the
controller makes, with the guest's own token), the dashboard pages and the „run Tier-2 now" endpoint the buttons call,
and the hub's database copied with its WAL (a different channel from the agent calls). Times are UTC.
## The boxes
| Box | What it is | Agent says | Household sees on `/backups` |
|---|---|---|---|
| Tester 1 | Felhom inside a VM on demo-hp | every place `unknown/vm`; drive vs system data: not proven (`vm`) | „A Felhom nem tudja ellenőrizni, hogy a második meghajtó valóban másik lemez-e … ezért nem számolja második másolatnak.” A Tier-2 run copied 10 apps; each app row on `/backups/apps` says „…ezt a másolatot nem számolja második másolatnak” |
| demo-hp | HP t740, SATA SSD + NVMe | every place `proven`; drive vs system data: different, proven | no one-copy notice; Tier-2 copied 10 apps, counted (unchanged) |
| N100 | SATA SSD + USB disk (the bridge passes the real serial) | every place `proven`; drive vs system data: different, proven | no one-copy notice; Tier-2 copied 5 apps, counted (unchanged) |
All three, same-disk call: system data vs `/var/lib/docker` → same disk, proven; a drive name that is not mounted →
`unmapped` (never „the system disk").
**Search controls** (Hungarian searched with ASCII fragments `nem tudja` / `nem sz`): Tester 1 after → 11 hits (positive:
the notice + 10 app lines). demo-hp → 0. N100 → 1 hit, read by eye: „…külön adatbázis-kiírás nem szükséges” — not the
notice (negative holds).
## Files
| File | What |
|---|---|
| `agent-disks-{demo-hp,n100,tester1}.json` | the agent's `GET /disks` with the new fields |
| `agent-same-disk-live.txt` | `POST /disks/same-disk` — three pairs per box |
| `tester1-rc1.txt` | Tester 1 on 0.317.0-rc.1 by hand (first look) |
| `tester1-tier2-run.txt`, `tester1-tier2-log.txt` | the Tier-2 run on rc.1 and its log (unproven copies) |
| `tester1-backup-pages.txt` | `/backups` + `/backups/apps` on rc.1 |
| `per-customer-floors.txt` | per-box floors 0.317.0 / MinAgent 0.157.0 for tester-1, demo-hp, demo-felhom — 303 `floor_set` at 19:27:52 |
| `demo-hp-backup-page.txt`, `n100-backup-page.txt` | the pages before the Tier-2 runs |
| `{demo-hp,n100}-tier2-run.txt`, `-tier2-log.txt` | Tier-2 runs on 0.317.0 (counted copies) |
| `{demo-hp,n100,tester1}-backup-pages-after.txt` | the pages after, all on 0.317.0 |
| `hub-stored-identity.txt` | the hub's latest stored report per box: kind, identity, reason, physical disks |
| `9202-before-0.314.0.txt`, `9202-after-0.317.0.txt`, `9202-upgrade.txt` | the NAS check on the scratch box: it has no `local_api`, so it cannot ask the agent (R-1083); put back on 0.314.0 at 19:40:35 |
## Not shown live (unit-proven, red-proved)
- A same-disk Tier-2 target skipped — no box has two places on one disk.
- A NAS share does not hide the one-copy notice (R-1075) — 9202 cannot reach its agent (R-1083).
- The no-drive install sentence „Ehhez az alkalmazáshoz egy adattároló kell. A Meghajtók oldalon adhatsz hozzá egyet.”
— no one-disk box at hand (R-1068). Deliberately not probed with a deploy request (`live-probes.md`).
- `usb_bridge` — no such device seen.
## Also seen
- Tester 1's page also says „Ezt a meghajtót kijelölheted a rendszermentés helyéül — így egy lemezhiba után is vissza
tudod állítani a rendszert.” The whole-box backup offer does not ask about identity → R-1084.
- R-1072 is closed entirely: `backup.target.degraded` was already informal, and the formal word `csatlakoztasson` is
gone from all three pages (0 hits each; 1 hit on the OMV run's page `omv-vm-2026-10-15/B4-backup-pages.txt`, the control).
## Teardown
Machine: Tester 1, demo-hp 9201, N100 9201 stay on 0.317.0 through their per-box floors (cleared after the global floor);
9202 back on 0.314.0. Host: the helper script `/tmp/agentq.sh` removed from demo-hp, felhom-pve and Tester 1's host.
Hub: three per-customer floors set (listed above); nothing else. No app installed or removed; no disk touched.