Files
felhom.eu/documentation/audits/security-2026-11-02/walks/gitea/box-verdict-gitea.json
T

228 lines
7.1 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"app": "gitea",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"gitea": "gitea/gitea:28.2.0"
},
"to": {
"gitea": "gitea/gitea:28.3.0"
},
"observables_before": {
"pinned_images": {
"gitea": "gitea/gitea:28.2.0"
},
"installed_images": {
"gitea": "gitea/gitea:28.2.0"
},
"catalog_images": null,
"live_compose_image_lines": [
"image: gitea/gitea:28.2.0@sha256:30777c91280d973fa02be48b1ade735bd6859e8f6f7af3b4444d519437852504"
],
"docker_inspect": [
"gitea gitea/gitea:28.2.0@sha256:30777c91280d973fa02be48b1ade735bd6859e8f6f7af3b4444d519437852504 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"seed": "read_back",
"drill_commit": "61aedd222a9d",
"sync_waited_s": 4.5,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-11-02T21:56:24Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 3.1,
"phase": "safety-dump",
"label": "Adatbázis pillanatkép…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 4.1,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 7.2,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 10.3,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 15.4,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 15.4,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"gitea": "gitea/gitea:28.3.0"
},
"installed_images": {
"gitea": "gitea/gitea:28.3.0"
},
"catalog_images": {
"gitea": "gitea/gitea:28.3.0"
},
"live_compose_image_lines": [
"image: gitea/gitea:28.3.0"
],
"docker_inspect": [
"gitea gitea/gitea:28.3.0 running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"gitea": "sha256:8967bf9deaf3c5c4adae13519436dc1b20c646ac83fe37ae810c933a1045227d"
},
"four_observables": {
"pinned": {
"gitea": "gitea/gitea:28.3.0"
},
"installed": {
"gitea": "gitea/gitea:28.3.0"
},
"catalog": {
"gitea": "gitea/gitea:28.3.0"
},
"live_compose": [
"gitea/gitea:28.3.0"
]
},
"seed_read_after": true,
"setup_gate_after": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 60,
"containers": {
"gitea": {
"samples": 60,
"anon_peak_bytes": 102752256,
"limit_bytes": 536870912,
"anon_peak_pct": 19.1,
"anon_live_peak_bytes": 102748160,
"anon_live_peak_pct": 19.1,
"cgroup_peak_pct": 48.7,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-73520e598d3f09e58109f7360a5af17a6708d5471fa5eb6a472e957201f21459.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 19.1,
"peak_basis": "anon_live"
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
"log": [
"22:55:29 [5] the box's drill mirror now at 313eaf68",
"22:55:34 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"22:55:54 [1] deployed, controller state=running, pinned={'gitea': 'gitea/gitea:28.2.0'}",
"22:55:54 gate: git is gated — passed as the household (cookie set)",
"22:55:58 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
"22:56:03 gitea: first-run installer POST / http=200",
"22:56:09 gitea: installed through its own first-run form; the admin authenticates",
"22:56:10 gitea: create repo http=201",
"22:56:10 gitea: one commit (drill.txt) http=201",
"22:56:10 gitea: the committed file read back http=200 same=True",
"22:56:10 gitea: readback of the seeded repo http=200 ok=True",
"22:56:11 [5] drill commit 61aedd222a9d: gitea gitea/gitea:28.2.0 -> gitea/gitea:28.3.0 (push rc=0)",
"22:56:20 [5] the box's drill mirror now at 61aedd22",
"22:56:25 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"22:56:25 + 0.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"22:56:28 + 3.1s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None",
"22:56:29 + 4.1s phase=pulling label=Új verzió letöltése… err=None hold=None",
"22:56:32 + 7.2s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"22:56:35 + 10.3s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"22:56:40 + 15.4s phase=done label=Frissítve err=None hold=None",
"22:56:59 gitea: the committed file read back http=200 same=True",
"22:56:59 gitea: readback of the seeded repo http=200 ok=True",
"22:56:59 [7] memory soak 600 s …",
"23:07:05 [7] soak: peak 19.1% of the limit (anon), kills 0, restarts 0"
]
}