Files
felhom.eu/documentation/audits/security-app-updates-2026-10-27/walks/docmost/box-verdict-docmost.json
T

294 lines
10 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"app": "docmost",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"docmost": "docmost/docmost:0.96.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"to": {
"docmost": "docmost/docmost:0.97.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"observables_before": {
"pinned_images": {
"docmost": "docmost/docmost:0.96.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"installed_images": {
"docmost": "docmost/docmost:0.96.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"catalog_images": null,
"live_compose_image_lines": [
"image: docmost/docmost:0.96.0@sha256:b56947fcfd08aab8fae12a377e1792784786adbf8b96e4281f14ef4fc072685a",
"image: postgres:18-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873",
"image: redis:7-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499"
],
"docker_inspect": [
"docmost docmost/docmost:0.96.0@sha256:b56947fcfd08aab8fae12a377e1792784786adbf8b96e4281f14ef4fc072685a running=true restarts=0",
"docmost-postgres postgres:18-alpine@sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873 running=true restarts=0",
"docmost-redis redis:7-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"seed": "read_back",
"drill_commit": "1105b2da8b4c",
"sync_waited_s": 26.9,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-10-27T14:00:23Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "checking",
"label": "Ellenőrzés…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 1.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 24.6,
"phase": "safety-dump",
"label": "Adatbázis pillanatkép…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 26.6,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 127.1,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 131.2,
"phase": "starting",
"label": "Indítás az új verzióval…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 142.5,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 163.0,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 163.0,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"docmost": "docmost/docmost:0.97.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"installed_images": {
"docmost": "docmost/docmost:0.97.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"catalog_images": {
"docmost": "docmost/docmost:0.97.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"live_compose_image_lines": [
"image: docmost/docmost:0.97.0",
"image: postgres:18-alpine",
"image: redis:7-alpine"
],
"docker_inspect": [
"docmost docmost/docmost:0.97.0 running=true restarts=0",
"docmost-redis redis:7-alpine running=true restarts=0",
"docmost-postgres postgres:18-alpine running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"docmost": "sha256:40c454d74ffdd9ecb15833e4d96f3a630d59aad862a1869381ae6ee086454419",
"docmost-postgres": "sha256:10a5c69a83035ab5239f5620d708520e8b28f5aa1f2b20143e6024532edadfb5",
"docmost-redis": "sha256:6ba19c50b56777f5c11c58eff8ddb69d0d5f27ba131cffb63f180ccfd43c66af"
},
"four_observables": {
"pinned": {
"docmost": "docmost/docmost:0.97.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"installed": {
"docmost": "docmost/docmost:0.97.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"catalog": {
"docmost": "docmost/docmost:0.97.0",
"docmost-postgres": "postgres:18-alpine",
"docmost-redis": "redis:7-alpine"
},
"live_compose": [
"docmost/docmost:0.97.0",
"postgres:18-alpine",
"redis:7-alpine"
]
},
"seed_read_after": true,
"setup_gate_after": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 174,
"containers": {
"docmost": {
"samples": 58,
"anon_peak_bytes": 435372032,
"limit_bytes": 805306368,
"anon_peak_pct": 54.1,
"cgroup_peak_pct": 100.0,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-31babd6a486c29cf55bcc4c17816b835a91ad9a1c6d261d594e4c15a1a38680b.scope"
},
"docmost-redis": {
"samples": 58,
"anon_peak_bytes": 4182016,
"limit_bytes": 134217728,
"anon_peak_pct": 3.1,
"cgroup_peak_pct": 16.9,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-08f976fb643fe7db20e4a4c91934e68946492af8a0d141fa61468ccb7eb14652.scope"
},
"docmost-postgres": {
"samples": 58,
"anon_peak_bytes": 12107776,
"limit_bytes": 268435456,
"anon_peak_pct": 4.5,
"cgroup_peak_pct": 23.5,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-23db659fc0d91e0a1dbbd8f356cb0fa649c382eaf518b54172dcbb1385379a5e.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 54.1
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
"log": [
"14:57:50 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"14:59:41 [1] deployed, controller state=running, pinned={'docmost': 'docmost/docmost:0.96.0', 'docmost-postgres': 'postgres:18-alpine', 'docmost-redis': 'redis:7-alpine'}",
"14:59:41 gate: docs is gated — passed as the household (cookie set)",
"14:59:44 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
"14:59:45 docmost: /api/auth/setup http=200 rc=0",
"14:59:45 docmost: login as the seeded user http=200 ok=True",
"14:59:46 [5] drill commit 1105b2da8b4c: docmost docmost/docmost:0.96.0 -> docmost/docmost:0.97.0 (push rc=0)",
"14:59:56 [5] the box's drill mirror now at 1105b2da8",
"15:00:23 [sync] the badge needed 26.9s and 3 sync+rescan rounds to catch up to docmost/docmost:0.97.0 — R-607's window, measured",
"15:00:23 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"15:00:23 + 0.0s phase=checking label=Ellenőrzés… err=None hold=None",
"15:00:24 + 1.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"15:00:47 + 24.6s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None",
"15:00:50 + 26.6s phase=pulling label=Új verzió letöltése… err=None hold=None",
"15:02:30 + 127.1s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"15:02:34 + 131.2s phase=starting label=Indítás az új verzióval… err=None hold=None",
"15:02:45 + 142.5s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"15:03:06 + 163.0s phase=done label=Frissítve err=None hold=None",
"15:03:25 docmost: login as the seeded user http=200 ok=True",
"15:03:25 [7] memory soak 600 s …",
"15:13:34 [7] soak: peak 54.1% of the limit (anon), kills 0, restarts 0"
]
}