Files
felhom.eu/documentation/audits/runtime-fixes-2026-10-28/walks/karakeep/box-verdict-karakeep.json
T

290 lines
11 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"app": "karakeep",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.33.2",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"to": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.34.1",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"observables_before": {
"pinned_images": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.33.2",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"installed_images": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.33.2",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"catalog_images": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.33.2",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"live_compose_image_lines": [
"image: ghcr.io/karakeep-app/karakeep:0.33.2@sha256:b069e4307dec06ea06d16989c6861c30a1ff208568be44ed5fb5d422cd3e950c",
"image: ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1@sha256:5b19bbb160e9ff60681a3abd97e1c4ec9f64212301410de658c3900ab7ef31e7",
"image: getmeili/meilisearch:v1.41.0@sha256:860fa4baed04ae1c235de870edab0c8006227546dea1bbb6411fbfc5e27cf1db"
],
"docker_inspect": [
"karakeep ghcr.io/karakeep-app/karakeep:0.33.2@sha256:b069e4307dec06ea06d16989c6861c30a1ff208568be44ed5fb5d422cd3e950c running=true restarts=0",
"karakeep-meilisearch getmeili/meilisearch:v1.41.0@sha256:860fa4baed04ae1c235de870edab0c8006227546dea1bbb6411fbfc5e27cf1db running=true restarts=0",
"karakeep-chrome ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1@sha256:5b19bbb160e9ff60681a3abd97e1c4ec9f64212301410de658c3900ab7ef31e7 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"seed": "read_back",
"drill_commit": "e8612bd845c4",
"sync_waited_s": 4.5,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-10-28T08:26:56Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 12.3,
"phase": "safety-dump",
"label": "Adatbázis pillanatkép…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 13.4,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 67.7,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 76.9,
"phase": "starting",
"label": "Indítás az új verzióval…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 83.0,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 93.3,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 93.3,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.34.1",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"installed_images": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.34.1",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"catalog_images": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.34.1",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"live_compose_image_lines": [
"image: ghcr.io/karakeep-app/karakeep:0.34.1",
"image: ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"image: getmeili/meilisearch:v1.41.0"
],
"docker_inspect": [
"karakeep ghcr.io/karakeep-app/karakeep:0.34.1 running=true restarts=0",
"karakeep-meilisearch getmeili/meilisearch:v1.41.0 running=true restarts=0",
"karakeep-chrome ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1 running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"karakeep": "sha256:69ae5315c618b7c14c1af3e34c6e211acdb231793af424ecd1cab0b70691d987",
"karakeep-chrome": "sha256:5b19bbb160e9ff60681a3abd97e1c4ec9f64212301410de658c3900ab7ef31e7",
"karakeep-meilisearch": "sha256:860fa4baed04ae1c235de870edab0c8006227546dea1bbb6411fbfc5e27cf1db"
},
"four_observables": {
"pinned": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.34.1",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"installed": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.34.1",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"catalog": {
"karakeep": "ghcr.io/karakeep-app/karakeep:0.34.1",
"karakeep-chrome": "ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"karakeep-meilisearch": "getmeili/meilisearch:v1.41.0"
},
"live_compose": [
"getmeili/meilisearch:v1.41.0",
"ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1",
"ghcr.io/karakeep-app/karakeep:0.34.1"
]
},
"seed_read_after": true,
"setup_gate_after": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 174,
"containers": {
"karakeep": {
"samples": 58,
"anon_peak_bytes": 476987392,
"limit_bytes": 1610612736,
"anon_peak_pct": 29.6,
"cgroup_peak_pct": 35.9,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-570f3c919afe2768148f63e8232148f054a31becfa4e2bada4586d67b16a06d9.scope"
},
"karakeep-meilisearch": {
"samples": 58,
"anon_peak_bytes": 18882560,
"limit_bytes": 536870912,
"anon_peak_pct": 3.5,
"cgroup_peak_pct": 4.9,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-8190168785f017f894c51a37758ad618ba6aa782d20e54ca79b9c212c266f9cc.scope"
},
"karakeep-chrome": {
"samples": 58,
"anon_peak_bytes": 36986880,
"limit_bytes": 805306368,
"anon_peak_pct": 4.6,
"cgroup_peak_pct": 5.9,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-3548090e97767f2bef3bc5badb04d254f839925340720d7d59439f7b780db60c.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 29.6
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
"log": [
"09:19:55 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"09:21:35 [1] deployed, controller state=running, pinned={'karakeep': 'ghcr.io/karakeep-app/karakeep:0.33.2', 'karakeep-chrome': 'ghcr.io/karakeep-app/karakeep-chrome:151.0.7922.47-r1', 'karakeep-meilisearch': 'getmeili/meilisearch:v1.41.0'}",
"09:21:35 gate: bookmarks is gated — passed as the household (cookie set)",
"09:26:38 app never answered on bookmarks/ (last rc=0 code=307)",
"09:26:42 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
"09:26:42 karakeep: users.create (the first account) http=200 role=admin",
"09:26:42 karakeep: POST /api/v1/bookmarks http=201",
"09:26:43 karakeep: readback http=200 found=True (controls: no key 401, wrong 401, absent 404)",
"09:26:43 [5] drill commit e8612bd845c4: karakeep ghcr.io/karakeep-app/karakeep:0.33.2 -> ghcr.io/karakeep-app/karakeep:0.34.1 (push rc=0)",
"09:26:52 [5] the box's drill mirror now at e8612bd84",
"09:26:57 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"09:26:57 + 0.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"09:27:09 + 12.3s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None",
"09:27:10 + 13.4s phase=pulling label=Új verzió letöltése… err=None hold=None",
"09:28:04 + 67.7s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"09:28:14 + 76.9s phase=starting label=Indítás az új verzióval… err=None hold=None",
"09:28:20 + 83.0s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"09:28:30 + 93.3s phase=done label=Frissítve err=None hold=None",
"09:28:49 karakeep: readback http=200 found=True (controls: no key 401, wrong 401, absent 404)",
"09:28:49 [7] memory soak 600 s …",
"09:38:56 [7] soak: peak 29.6% of the limit (anon), kills 0, restarts 0"
]
}