Files
felhom.eu/documentation/audits/evidence-bignight-2026-09-14/journal.md
T

7.7 KiB
Raw Blame History

Journal — BIGNIGHT 2026-09-14 (a household's first month in one night)

Times UTC unless marked. Hub logs print CEST (UTC+2). Brief: drills/BIGNIGHT-2026-09-14.md.

Phase 1 — baselines (read 17:29–17:40Z from live source)

repo main == origin/main version
felhom-controller 406755fa8fba v0.242.0 (CHANGELOG top)
felhom-agent 4586f0f7f6d1 v0.130.0 (tree: one untracked scripts/__pycache__/, no tracked change)
felhom.eu a4d684412b49 hub v0.113.0 (CHANGELOG top; live image felhom-hub:0.113.0)
app-catalog-felhom.eu 6d6eec307939 —

Register: highest id R-508; 221 table rows (grep ^| R-n).

ISO 1.27.1: /mnt/5_hdd/felhom.eu/felhom-iso/out/felhom-installer-1.27.1-pve9.2-1.iso, 1 705 322 496 B, sha256 25637007d5a7120ff9faa6b5b7ead3e33c0a361ac2d67e9fd4e0ee77c034c053 = .sha256 = manifest output-sha256; manifest repo-commit 27e8ec86…, mode release, answer-file NONE. Found, not rebuilt.

DooPlex headroom: /mnt/5_hdd 37 %, / 52 %.

demo-hp (17:29Z): qm list empty; 9201 + 9202 running (each memory: 25898, cores: 7); host RAM 29 994 MB total, 24 652 MB available; 8 threads (Ryzen V1756B); storages local 56.96 %, local-lvm 44.17 %, nvme-scratch (dir /mnt/hdd_1, is_mountpoint yes) 1.03 %.

Gmail connector: authenticates as felhom.eu@gmail.com — the catch-all for @felhom.eu (threads to admin@felhom.eu and drill0242@felhom.eu land there). Read only; nothing sent.

Phase 1 — the Tester 1 record (hub GET /customers/tester-1, Basic auth, 17:30Z)

Customer ID tester-1 · Name „Tester 1" · Domain enkicsifelhom.hu · Email tester1@felhom.eu · Config MANAGED. Status tile still reads down, „Last report 1h ago · Controller 0.242.0" — the stale report of the destroyed VM 331 (host record deleted 16:46:52Z). Claim: „Claimed 1h ago · generation 1". Edit tab: dr_tier ON (all four DR steps „waiting — no host enrolled yet"); offsite_enabled OFF („Enable offsite (provisions a Hetzner Storage Box on save)"). Controller floor v0.242.0. Mailbox: to:tester1@felhom.eu → 0 threads before tonight.

Brief vs record — off-site. The brief says "Off-site (Tier 3) is ON … its own namespace on ep0". On the record, the ep0 namespace is the DR tier (PBS whole-guest); the Tier-3 restic off-site is OFF, and turning it on provisions a Hetzner Storage Box (money, and a new external resource). Not followed: I do not tick it — money is fenced by the rules file §1. "Off-site" tonight = the DR tier to ep0 as configured. Consequence, stated up front: the Phase 4 off-site integrity check and the Phase 6 app restore "from off-site" have no restic tier to act on; each is recorded as such when reached.

Harness slip: the first read of the customer page printed the page's text into this session's tool output, which includes the customer's hub API key (not the retrieval passphrase — that is masked). It stayed on DooPlex; not written to any file.

Tunnel before any box (17:31:19Z, from DooPlex) — tunnel-before-no-box.txt

DNS resolves to Cloudflare (both resolvers); https://felhom.enkicsifelhom.hu → 530, error code: 1033 (no connector). Expected with no box.

Venue — VM 333 bignight-household on demo-hp (created 17:31:52Z)

q35 / OVMF (pre-enrolled-keys=0), 4 cores, cpu=host, 16 384 MB, virtio NIC BC:24:11:F2:E2:95 on vmbr0, scsi0 200 G qcow2 on nvme-scratch (dir at /mnt/hdd_1, its root), ISO 1.27.1 on ide2 (sha verified on the HP = 25637007…). One disk at install; the data disk is added after.

Why these numbers. System disk = doorstep VM 331's 200 G. Memory: the HP has 29 994 MB; 9201 and 9202 together used ≈ 5.3 GB at 17:29Z with 24 652 MB available. Both LXCs carry a 25 898 MB limit, so no VM size leaves both limits whole; 16 GB leaves ≈ 8 GB free plus 8 GB swap for 9201's real load. Cores: the 0242 drill's 4 of 8 threads.

Power-on 17:32:13Z. GRUB (s01, s02): the two Felhom entries; text mode chosen (H4).

Phase 2.1 — install from 1.27.1 (text mode), one disk

UTC screen what it said / what was done
17:34:5x s03 English Proxmox EULA → „I agree"
17:35:11 s04 „Target harddisk: /dev/sda (QEMU HARDDISK) (200.00 GiB)" — one disk, no choice to make → Next
17:35:24 s05 Country Hungary · Timezone Europe/Budapest · Keyboard layout Hungarian (H2: changed to U.S. English, s06–s09; one dropped keystroke landed on „Turkish" first, corrected)
17:37:00 s11 „Root password [at least 8 characters]" · Confirm · „Administrator email" prefilled mail@example.invalid → 20-char generated password (0600 file on DooPlex), tester1@felhom.eu (the guide: „a saját e-mail címedet")
17:39:01 s13 nic0 bc:24:11:f2:e2:95, virtio_net · Hostname pve.example.invalid · IP 192.168.0.136/24 (the DHCP lease, frozen static) · GW 192.168.0.1 · DNS 192.168.0.250 · „[X] Pin network interface names" → hostname set felhom.enkicsifelhom.hu per the guide (s15)
17:40:36 s16 Summary: ext4 · /dev/sda · Europe/Budapest · U.S. English · tester1@felhom.eu · nic0 · felhom.enkicsifelhom.hu · 192.168.0.136/24 · 192.168.0.1 · 192.168.0.250 · „[X] Automatically reboot after successful installation" (H3: unticked, s17)
17:41:02 — Install pressed
≤17:43:47 s18 „Success — Installation finished - reboot now?" (≤ 2 m 45 s copying; qcow2 4 058 MB, settled)
17:44:xx first boot H3: qm stop, --delete ide2, --boot order=scsi0, qm start

Seeds prepared on DooPlex (scratchpad, tmpfs): 200 JPEG 1600×1200 noise + caption (264 MB), 20 three-page PDFs (2.3 MB), a 50 MB random file, a 150 s 1280×720 H.264 video (98.9 MB).

Phase 2.2 — first screen, and waiting for the mail

17:44:53Z — hub lists Unclaimed appliance 28 (38 s after power-on): smbios uuid 1ecd1c40…, pairing code ***-*** (redacted), MAC bc:24:11:f2:e2:95, „Standard PC (Q35 + ICH9, 2009)", 15.6 GB, three SSH host keys. Bind list offers „Tester 1 (0 hosts)".

The console, 17:45:31Z (s19, code redacted), verbatim:

  Felhom otthoni szerver

  Ezen a gépen most nincs dolgod, és bejelentkezni sem kell.
  A beállításhoz kövesd a Felhomtól kapott útmutatót.

felhom login:
==============================================
  Felhom — a doboz készen áll, és a párosításra vár.

  Párosító kód:  ***-***

  Nyisd meg az e-mailben kapott linket, és add meg
  ezt a kódot és a Tulajdonosi jelmondatodat
  (az 5 szót a Felhom üzemeltetőjétől kaptad).

  Ez a képernyő magától frissül — nincs teendő a
  doboznál, és nyugodtan itt hagyhatod bekapcsolva.
==============================================

No Proxmox :8006 line on the first boot (the 1.27.1 fix holds on a fresh install). Text says „otthoni szerver"; the guide §3 quotes „Ezen a képernyőn nincs teendőd" — the guide's quote does not match the screen word for word (meaning is the same).

Mailbox, 17:46Z: to:tester1@felhom.eu → 0 threads. The console asks for „az e-mailben kapott linket". Hub source: the self-bind link is auto-sent only at customer creation (configs.go:725) and at RESET completion (customer_reset.go:162); tester-1 was created 32 days ago with no e-mail, so no link was ever sent to tester1@felhom.eu. Waiting the brief's 10 minutes (to 17:55Z) before acting.

17:55:11Z — ten minutes, 0 messages to tester1@felhom.eu. Filed R-509 (P1) at 17:56Z, before acting. Intervention I1: the operator's „Send self-bind link" button on the customer's Setup tab is pressed (a volunteer cannot press it).