Files
felhom.eu/documentation/audits/runtime-fixes-2026-10-28/walks/dawarich/box-verdict-dawarich.json
T

313 lines
12 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"app": "dawarich",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"dawarich": "freikin/dawarich:1.15.3",
"dawarich-sidekiq": "freikin/dawarich:1.15.3",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine"
},
"to": {
"dawarich": "freikin/dawarich:1.19.0",
"dawarich-sidekiq": "freikin/dawarich:1.19.0",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine"
},
"observables_before": {
"pinned_images": {
"dawarich": "freikin/dawarich:1.15.3",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine",
"dawarich-sidekiq": "freikin/dawarich:1.15.3"
},
"installed_images": {
"dawarich": "freikin/dawarich:1.15.3",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine",
"dawarich-sidekiq": "freikin/dawarich:1.15.3"
},
"catalog_images": null,
"live_compose_image_lines": [
"image: freikin/dawarich:1.15.3@sha256:589e3606b11b61c3fa2d9661832cb73645a9b93a9cc7d807a071e2bc6c584498",
"image: freikin/dawarich:1.15.3@sha256:589e3606b11b61c3fa2d9661832cb73645a9b93a9cc7d807a071e2bc6c584498",
"image: postgis/postgis:17-3.5-alpine@sha256:894f570c0cf0664ed5576a8fd5d5bfb8fb1b19d592885b686c3a88c8bd90c41f",
"image: redis:7.4-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499"
],
"docker_inspect": [
"dawarich-sidekiq freikin/dawarich:1.15.3@sha256:589e3606b11b61c3fa2d9661832cb73645a9b93a9cc7d807a071e2bc6c584498 running=true restarts=0",
"dawarich freikin/dawarich:1.15.3@sha256:589e3606b11b61c3fa2d9661832cb73645a9b93a9cc7d807a071e2bc6c584498 running=true restarts=0",
"dawarich-db postgis/postgis:17-3.5-alpine@sha256:894f570c0cf0664ed5576a8fd5d5bfb8fb1b19d592885b686c3a88c8bd90c41f running=true restarts=0",
"dawarich-redis redis:7.4-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"seed": "read_back",
"drill_commit": "301ca71080d3",
"sync_waited_s": 4.5,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-10-28T09:52:40Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 55.3,
"phase": "safety-dump",
"label": "Adatbázis pillanatkép…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 59.4,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 111.6,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 128.0,
"phase": "starting",
"label": "Indítás az új verzióval…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 171.0,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 176.2,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 176.2,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"dawarich": "freikin/dawarich:1.19.0",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine",
"dawarich-sidekiq": "freikin/dawarich:1.19.0"
},
"installed_images": {
"dawarich": "freikin/dawarich:1.19.0",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine",
"dawarich-sidekiq": "freikin/dawarich:1.19.0"
},
"catalog_images": {
"dawarich": "freikin/dawarich:1.19.0",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine",
"dawarich-sidekiq": "freikin/dawarich:1.19.0"
},
"live_compose_image_lines": [
"image: freikin/dawarich:1.19.0",
"image: freikin/dawarich:1.19.0",
"image: postgis/postgis:17-3.5-alpine",
"image: redis:7.4-alpine"
],
"docker_inspect": [
"dawarich-sidekiq freikin/dawarich:1.19.0 running=true restarts=0",
"dawarich freikin/dawarich:1.19.0 running=true restarts=0",
"dawarich-db postgis/postgis:17-3.5-alpine running=true restarts=0",
"dawarich-redis redis:7.4-alpine running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"dawarich": "sha256:d9385242202ae385a5d8064f41a59a0b58218399e60e7e499d2a6afb449bc304",
"dawarich-sidekiq": "sha256:d9385242202ae385a5d8064f41a59a0b58218399e60e7e499d2a6afb449bc304",
"dawarich-db": "sha256:894f570c0cf0664ed5576a8fd5d5bfb8fb1b19d592885b686c3a88c8bd90c41f",
"dawarich-redis": "sha256:6ba19c50b56777f5c11c58eff8ddb69d0d5f27ba131cffb63f180ccfd43c66af"
},
"four_observables": {
"pinned": {
"dawarich": "freikin/dawarich:1.19.0",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine",
"dawarich-sidekiq": "freikin/dawarich:1.19.0"
},
"installed": {
"dawarich": "freikin/dawarich:1.19.0",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine",
"dawarich-sidekiq": "freikin/dawarich:1.19.0"
},
"catalog": {
"dawarich": "freikin/dawarich:1.19.0",
"dawarich-db": "postgis/postgis:17-3.5-alpine",
"dawarich-redis": "redis:7.4-alpine",
"dawarich-sidekiq": "freikin/dawarich:1.19.0"
},
"live_compose": [
"freikin/dawarich:1.19.0",
"postgis/postgis:17-3.5-alpine",
"redis:7.4-alpine"
]
},
"seed_read_after": true,
"setup_gate_after": {
"browser": {
"status": "404",
"redirect": null
},
"script": {
"status": "404",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 228,
"containers": {
"dawarich-sidekiq": {
"samples": 57,
"anon_peak_bytes": 291639296,
"limit_bytes": 1073741824,
"anon_peak_pct": 27.2,
"cgroup_peak_pct": 37.8,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-e662a6461d398d98e924f598b29df426108e493135acbb655349a7ca85e7bac7.scope"
},
"dawarich": {
"samples": 57,
"anon_peak_bytes": 310546432,
"limit_bytes": 1073741824,
"anon_peak_pct": 28.9,
"cgroup_peak_pct": 59.4,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-269ba6973ec9ece909d4fd99ab1611cb21be5502d0b8275dc438850c0ba10ac8.scope"
},
"dawarich-db": {
"samples": 57,
"anon_peak_bytes": 119009280,
"limit_bytes": 536870912,
"anon_peak_pct": 22.2,
"cgroup_peak_pct": 39.1,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-c9ced1d77e3add6838bce5b19f098da1d97c07d285233b0c5935a2ab2ea75065.scope"
},
"dawarich-redis": {
"samples": 57,
"anon_peak_bytes": 8167424,
"limit_bytes": 134217728,
"anon_peak_pct": 6.1,
"cgroup_peak_pct": 20.3,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-f4865bec0c894b2bc7bd94149356d749e421c5e42e0539da798846bf8a7ed2f3.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 28.9
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
"log": [
"10:49:07 [5] the box's drill mirror now at 2af95d7c3",
"10:49:11 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['ADMIN_PASSWORD']",
"10:49:12 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"10:52:02 [1] deployed, controller state=running, pinned={'dawarich': 'freikin/dawarich:1.15.3', 'dawarich-db': 'postgis/postgis:17-3.5-alpine', 'dawarich-redis': 'redis:7.4-alpine', 'dawarich-sidekiq': 'freikin/dawarich:1.15.3'}",
"10:52:02 gate: timeline is gated — passed as the household (cookie set)",
"10:52:07 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
"10:52:16 dawarich: POST /api/v1/overland/batches http=201 (47.4436,19.1707 at 2026-09-12T22:48:00Z)",
"10:52:25 dawarich: readback http=200 found=True (controls: no key 401, wrong 401, empty range [])",
"10:52:27 [5] drill commit 301ca71080d3: dawarich freikin/dawarich:1.15.3,freikin/dawarich:1.15.3 -> freikin/dawarich:1.19.0,freikin/dawarich:1.19.0 (push rc=0)",
"10:52:36 [5] the box's drill mirror now at 301ca7108",
"10:52:40 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"10:52:41 + 0.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"10:53:36 + 55.3s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None",
"10:53:40 + 59.4s phase=pulling label=Új verzió letöltése… err=None hold=None",
"10:54:32 + 111.6s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"10:54:48 + 128.0s phase=starting label=Indítás az új verzióval… err=None hold=None",
"10:55:31 + 171.0s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"10:55:37 + 176.2s phase=done label=Frissítve err=None hold=None",
"10:56:05 dawarich: readback http=200 found=True (controls: no key 401, wrong 401, empty range [])",
"10:56:05 [7] memory soak 600 s …",
"11:06:14 [7] soak: peak 28.9% of the limit (anon), kills 0, restarts 0"
]
}