admin
3e28c202d7
The golden waiver (R-468) expired 2026-10-13 and the gate refused every push. Operator: bake a golden, vouch, then push. Baked per RUNBOOK-manual-build §4.0-4.1 in the drill VM: build-golden.sh v3.2.0, controller 0.309.0 (MinAgent 0.131.0), the approved Docker set, round trip sha-equal, token grep 0 with a working control, VM back on virgin. Vouch saved by the operator in the hub UI (this session's save was refused by Claude Code's permission check); read back: golden 0.309.0, agent 0.150.0, min_agent 0.131.0. Floor untouched.
35 lines
2.2 KiB
Markdown
35 lines
2.2 KiB
Markdown
# Golden 0.309.0 — bake + publish, 2026-10-13 (the waiver ran out; operator: „bake a golden, vouch, then push")
|
||
|
||
Procedure: `documentation/runbooks/RUNBOOK-manual-build.md` §4.0 and §4.1 steps 1–4, in the drill VM on DooPlex.
|
||
|
||
| | Previous (`../golden-0.301.0-2026-10-06/`) | This bake |
|
||
|---|---|---|
|
||
| `build-golden.sh` | v3.2.0 | same file, unchanged (agent repo `configs/`, clean and at `origin/main`) |
|
||
| Controller | `felhom-controller:0.301.0` (MinAgent 0.131.0) | **`felhom-controller:0.309.0`** (MinAgent 0.131.0, unchanged) |
|
||
| Docker engine | approved set `os-docker-20261004-142842` | same six pairs (still the hub's newest approved Docker release, read 2026-10-13), `GOLDEN_DOCKER_PKGS` set in the runner from the start |
|
||
| Template | `debian-13-standard_13.6-1_amd64.tar.zst` | same (after `pveam update`; `_amd64` filtered) |
|
||
|
||
## Pass markers (from `bake.log`, this folder)
|
||
|
||
```
|
||
[golden] Docker engine set PINNED to the approved release: containerd.io=2.3.6-1~debian.13~trixie … docker-ce=5:29.8.2-1~debian.13~trixie …
|
||
docker OK (overlay2; data-root /var/lib/docker)
|
||
INFO: including mount point rootfs ('/') in backup
|
||
INFO: including mount point mp0 ('/var/lib/felhom') in backup
|
||
[golden] upload OK (HTTP 201)
|
||
GOLDEN_VERSION=0.309.0
|
||
GOLDEN_SHA256=c8a9913d21b2630fabd45181320f3e29bcbb2bcae203ad4c231bd6ec53c10e06
|
||
```
|
||
|
||
No `excluding`, no `FATAL`, no `GOLDEN_DOCKER_PKGS not set`. Round trip: the registry's file downloaded and hashed =
|
||
the bake's sha, 649,450,207 bytes (`02-round-trip.txt`). Token: the unit's properties grep = 0; the committed log grep = 0,
|
||
with a working control (= 1 on a copy with the token appended, the copy shredded). Teardown: `03-teardown.txt`.
|
||
|
||
## Vouch — saved by the operator
|
||
|
||
The hub listed golden 0.309.0 with this sha (`/configuration`, read 2026-10-13). The save from this session (`POST
|
||
/configuration/artifacts`) was **refused by Claude Code's permission check**, so **the operator saved it in the UI**.
|
||
Read back afterwards (`GET /configuration`, 2026-10-13): golden **0.309.0** / `c8a9913d…0e06`, agent **0.150.0**,
|
||
min_agent **0.131.0** (0.309.0's MinAgent is unchanged). The floor was not touched (global floor 0.292.0): raising it
|
||
would deliver 0.309.0 to Tester 2 as well, which nobody asked for.
|