38 lines
2.9 KiB
Markdown
38 lines
2.9 KiB
Markdown
# B6 ★8 — the clock wrong at boot: −2 years, then +2 years, then the real time (2026-10-21 07:15–07:58 real UTC)
|
||
|
||
Method (`00-expected.txt`): NTP dropped at the VM's tap (314 packets dropped in all — positive control); clean restarts
|
||
with the RTC set; clock control = the box's HTTP Date header (`01-run.txt`).
|
||
|
||
## −2 years (RTC 2024-10-21)
|
||
|
||
- **The box came up at 2026-04-13 19:38, not 2024** — the operating system will not run before its own build date and
|
||
raised the clock to it. So the real test was „6 months behind".
|
||
- The hub and the registry refuse the box: „x509: certificate … not yet valid". The dashboard says only **„Hub nem
|
||
elérhető"** — not that the clock is wrong, although the log knows the exact reason.
|
||
- **Paperless crash-looped and the box stopped it** with a restore hold („crash_loop — 7 in 10m0s; STOPPING it"); its
|
||
warning event could not reach the hub, so nobody was told. Its log was empty when read (`03-…`).
|
||
- Nothing was deleted; no backup ran.
|
||
|
||
## +2 years (RTC 2028-10-21)
|
||
|
||
- Every tier looked 2 years old: a local whole-box catch-up ran at once (`vzdump-lxc-9201-2028_10_21-09_34_16`, 4.6 GB).
|
||
The weekly PBS tier had not started when the clock was put back. Hub and registry refused the box („certificate has
|
||
expired"). No deletion: off-site retention is the hub's (decision 68), local keep-daily 3 kept all three archives.
|
||
|
||
## Back to the real time (07:43:47 real) — two lasting effects
|
||
|
||
1. **The box's WireGuard tunnel to ep0 is dead** (`07-…`, `08-ep0-wg-handshakes.txt`): every PBS call from the agent
|
||
times out; the agent answers the controller so slowly that the backups page says „A host-ügynök jelenleg nem
|
||
elérhető" 10+ minutes after the return. ep0's side, read-only: Tester4's last handshake was 07:40:47 — while its
|
||
clock said 2028 — and none since, while the other peers shook hands 21–96 s ago. WireGuard refuses a handshake whose
|
||
timestamp is older than the last one it accepted, so the tunnel stays dead until the real date passes 2028 or the
|
||
peer is reset on ep0. **→ R-1204.** Not reset (ep0 is read-only in this run).
|
||
2. **The local whole-box tier's newest archive is dated 2028-10-21.** By the code (`localapi/server.go:1187`), the due
|
||
rule answers „within cadence" until then — the D3/T11 shape (R-1189 a). The live answer was not read: the controller
|
||
asks only inside its night window, and the box dies in B7 before tonight.
|
||
- Paperless stayed stopped after the return with a clear sentence („leállítottuk, mert újra és újra összeomlott … Az
|
||
Indítás gombbal újra megpróbálhatod"); one Start → running in 1 minute. **→ R-1202** (with the „Hub nem elérhető" text).
|
||
|
||
**Verdict: FINDINGS.** A box that runs once with its clock ahead loses its DR tunnel (R-1204, P2) and, by the code, its
|
||
whole-box schedule (R-1189 a); a box with its clock behind stops an app silently and blames the hub (R-1202, P3).
|