Files
felhom.eu/documentation/audits/http2shell-2026-10-27/walks/immich/box-verdict-immich.json
T

313 lines
13 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"app": "immich",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"immich-server": "ghcr.io/immich-app/immich-server:v3.2.4",
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.2.4",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine"
},
"to": {
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5",
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine"
},
"observables_before": {
"pinned_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.2.4",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.2.4"
},
"installed_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.2.4",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.2.4"
},
"catalog_images": null,
"live_compose_image_lines": [
"image: ghcr.io/immich-app/immich-server:v3.2.4@sha256:d317916b28090c33eb36b308464ea391f8b7df1d850fcfea227a39ec879718c2",
"image: ghcr.io/immich-app/immich-machine-learning:v3.2.4@sha256:e16c2f166a8174901959fdf85e2e4c7bd1ebc4b37e0b6655de97c41408a260c4",
"image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0@sha256:1a078b237c1d9b420b0ee59147386b4aa60d3a07a8e6a402fc84a57e41b043a4",
"image: redis:7-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499"
],
"docker_inspect": [
"immich-server ghcr.io/immich-app/immich-server:v3.2.4@sha256:d317916b28090c33eb36b308464ea391f8b7df1d850fcfea227a39ec879718c2 running=true restarts=0",
"immich-postgres ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0@sha256:1a078b237c1d9b420b0ee59147386b4aa60d3a07a8e6a402fc84a57e41b043a4 running=true restarts=0",
"immich-machine-learning ghcr.io/immich-app/immich-machine-learning:v3.2.4@sha256:e16c2f166a8174901959fdf85e2e4c7bd1ebc4b37e0b6655de97c41408a260c4 running=true restarts=0",
"immich-redis redis:7-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"seed": "read_back",
"drill_commit": "d992f141bbb3",
"sync_waited_s": 4.5,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-10-27T22:17:33Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 20.5,
"phase": "safety-dump",
"label": "Adatbázis pillanatkép…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 22.5,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 85.0,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 94.2,
"phase": "starting",
"label": "Indítás az új verzióval…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 105.5,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 121.9,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 121.9,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"installed_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"catalog_images": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"live_compose_image_lines": [
"image: ghcr.io/immich-app/immich-server:v3.3.5",
"image: ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"image: ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"image: redis:7-alpine"
],
"docker_inspect": [
"immich-server ghcr.io/immich-app/immich-server:v3.3.5 running=true restarts=0",
"immich-postgres ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0 running=true restarts=0",
"immich-machine-learning ghcr.io/immich-app/immich-machine-learning:v3.3.5 running=true restarts=0",
"immich-redis redis:7-alpine running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"immich-server": "sha256:485d546a2e31d6a8b4db8423fcba5c109de8c218d93410af115fd1ccfc4352a6",
"immich-machine-learning": "sha256:5b28c9352c8374b8a1ed96fbdd8d6755fea6e43510ec43fdf6538aa02ea40f56",
"immich-postgres": "sha256:1a078b237c1d9b420b0ee59147386b4aa60d3a07a8e6a402fc84a57e41b043a4",
"immich-redis": "sha256:6ba19c50b56777f5c11c58eff8ddb69d0d5f27ba131cffb63f180ccfd43c66af"
},
"four_observables": {
"pinned": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"installed": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"catalog": {
"immich-machine-learning": "ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"immich-postgres": "ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"immich-redis": "redis:7-alpine",
"immich-server": "ghcr.io/immich-app/immich-server:v3.3.5"
},
"live_compose": [
"ghcr.io/immich-app/immich-machine-learning:v3.3.5",
"ghcr.io/immich-app/immich-server:v3.3.5",
"ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0",
"redis:7-alpine"
]
},
"seed_read_after": true,
"setup_gate_after": {
"browser": {
"status": "200",
"redirect": null
},
"script": {
"status": "200",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 228,
"containers": {
"immich-server": {
"samples": 57,
"anon_peak_bytes": 1359732736,
"limit_bytes": 3221225472,
"anon_peak_pct": 42.2,
"cgroup_peak_pct": 49.7,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-1494b4cdbecfdc28139124c97ae25f995d6619fcbe13f6c1469e917a18bcc896.scope"
},
"immich-postgres": {
"samples": 57,
"anon_peak_bytes": 201875456,
"limit_bytes": 805306368,
"anon_peak_pct": 25.1,
"cgroup_peak_pct": 94.7,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-8a943f33c7cd70898b9668e2922e71cf04a8f88bd67d0e0c0d3d6e8f7bbab489.scope"
},
"immich-machine-learning": {
"samples": 57,
"anon_peak_bytes": 243011584,
"limit_bytes": 2147483648,
"anon_peak_pct": 11.3,
"cgroup_peak_pct": 12.6,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-ad472ac57c05e6391116441682d0b1b3fe1b6f5908b5769e87d2931e729a6f35.scope"
},
"immich-redis": {
"samples": 57,
"anon_peak_bytes": 6139904,
"limit_bytes": 134217728,
"anon_peak_pct": 4.6,
"cgroup_peak_pct": 16.9,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-b7c6711034b950f1d086fbbb8f2613c7777dc17d7f9986d07c231d10f735d174.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 42.2
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
"log": [
"23:15:29 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['HDD_PATH']",
"23:15:29 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"23:17:15 [1] deployed, controller state=running, pinned={'immich-machine-learning': 'ghcr.io/immich-app/immich-machine-learning:v3.2.4', 'immich-postgres': 'ghcr.io/immich-app/postgres:16-vectorchord0.4.3-pgvectors0.2.0', 'immich-redis': 'redis:7-alpine', 'immich-server': 'ghcr.io/immich-app/immich-server:v3.2.4'}",
"23:17:15 gate: photos is gated — passed as the household (cookie set)",
"23:17:18 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
"23:17:19 immich: seeded album drillalbum0382044e",
"23:17:19 immich: readback found=True (http 200, control passed)",
"23:17:20 [5] drill commit d992f141bbb3: immich ghcr.io/immich-app/immich-machine-learning:v3.2.4,ghcr.io/immich-app/immich-server:v3.2.4 -> ghcr.io/immich-app/immich-machine-learning:v3.3.5,ghcr.io/immich-app/immich-server:v3.3.5 (push rc=0)",
"23:17:29 [5] the box's drill mirror now at d992f141",
"23:17:34 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"23:17:34 + 0.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"23:17:54 + 20.5s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None",
"23:17:56 + 22.5s phase=pulling label=Új verzió letöltése… err=None hold=None",
"23:18:59 + 85.0s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"23:19:08 + 94.2s phase=starting label=Indítás az új verzióval… err=None hold=None",
"23:19:19 + 105.5s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"23:19:36 + 121.9s phase=done label=Frissítve err=None hold=None",
"23:19:55 immich: readback found=True (http 200, control passed)",
"23:19:55 [7] memory soak 600 s …",
"23:30:03 [7] soak: peak 42.2% of the limit (anon), kills 0, restarts 0"
]
}