Files
felhom.eu/documentation/audits/dockerhub-bigsteps-2026-10-28/termix-292/box/box-verdict-termix.json
T

222 lines
6.9 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"app": "termix",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"termix": "ghcr.io/lukegus/termix:2.8.0"
},
"to": {
"termix": "ghcr.io/lukegus/termix:2.9.2"
},
"observables_before": {
"pinned_images": {
"termix": "ghcr.io/lukegus/termix:2.8.0"
},
"installed_images": {
"termix": "ghcr.io/lukegus/termix:2.8.0"
},
"catalog_images": {
"termix": "ghcr.io/lukegus/termix:2.8.0"
},
"live_compose_image_lines": [
"image: ghcr.io/lukegus/termix:2.8.0@sha256:25e8a0eb39f45c9ac5e8e7615fd84a0380018ea012317bc665b86458d900b4b9"
],
"docker_inspect": [
"termix ghcr.io/lukegus/termix:2.8.0@sha256:25e8a0eb39f45c9ac5e8e7615fd84a0380018ea012317bc665b86458d900b4b9 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"seed": "read_back",
"drill_commit": "071db0085d6f",
"sync_waited_s": 4.4,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-10-28T12:53:47Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 13.3,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 33.8,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 42.0,
"phase": "starting",
"label": "Indítás az új verzióval…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 43.0,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 68.7,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 68.7,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"termix": "ghcr.io/lukegus/termix:2.9.2"
},
"installed_images": {
"termix": "ghcr.io/lukegus/termix:2.9.2"
},
"catalog_images": {
"termix": "ghcr.io/lukegus/termix:2.9.2"
},
"live_compose_image_lines": [
"image: ghcr.io/lukegus/termix:2.9.2"
],
"docker_inspect": [
"termix ghcr.io/lukegus/termix:2.9.2 running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"termix": "sha256:d64c841a560c54aa7c27b0e6bbd2fbf8b51073565040d2a6bfbc127f0a72cf1e"
},
"four_observables": {
"pinned": {
"termix": "ghcr.io/lukegus/termix:2.9.2"
},
"installed": {
"termix": "ghcr.io/lukegus/termix:2.9.2"
},
"catalog": {
"termix": "ghcr.io/lukegus/termix:2.9.2"
},
"live_compose": [
"ghcr.io/lukegus/termix:2.9.2"
]
},
"seed_read_after": true,
"setup_gate_after": {
"browser": {
"status": "200",
"redirect": null
},
"script": {
"status": "200",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 60,
"containers": {
"termix": {
"samples": 60,
"anon_peak_bytes": 118284288,
"limit_bytes": 268435456,
"anon_peak_pct": 44.1,
"cgroup_peak_pct": 100.0,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-2d522faa2de6d34c156c32c7950dfde9764bdb5e8a09f08c6c2d68d918f8f733.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 44.1
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
"log": [
"13:52:43 [5] the box's drill mirror now at e410bac1c",
"13:52:48 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"13:53:28 [1] deployed, controller state=running, pinned={'termix': 'ghcr.io/lukegus/termix:2.8.0'}",
"13:53:28 gate: termix is gated — passed as the household (cookie set)",
"13:53:31 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
"13:53:31 termix: seeded user drilla57e7f53 via /users/create",
"13:53:32 termix: readback found=True (http 200, control refused as it must)",
"13:53:33 [5] drill commit 071db0085d6f: termix ghcr.io/lukegus/termix:2.8.0 -> ghcr.io/lukegus/termix:2.9.2 (push rc=0)",
"13:53:42 [5] the box's drill mirror now at 071db0085",
"13:53:47 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"13:53:47 + 0.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"13:54:00 + 13.3s phase=pulling label=Új verzió letöltése… err=None hold=None",
"13:54:21 + 33.8s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"13:54:29 + 42.0s phase=starting label=Indítás az új verzióval… err=None hold=None",
"13:54:30 + 43.0s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"13:54:56 + 68.7s phase=done label=Frissítve err=None hold=None",
"13:55:14 termix: readback found=True (http 200, control refused as it must)",
"13:55:14 [7] memory soak 600 s …",
"14:05:20 [7] soak: peak 44.1% of the limit (anon), kills 0, restarts 0"
]
}