Files
felhom.eu/documentation/audits/security-app-updates-2026-10-27/walks/romm/box-verdict-romm.json
T

289 lines
9.5 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"app": "romm",
"walk": "security",
"box_walk_version": 1,
"verdict": "proven",
"venue": "box 9202 (drill catalog), the guarded Update",
"from": {
"romm": "rommapp/romm:5.3.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"to": {
"romm": "rommapp/romm:5.4.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"observables_before": {
"pinned_images": {
"romm": "rommapp/romm:5.3.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"installed_images": {
"romm": "rommapp/romm:5.3.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"catalog_images": {
"romm": "rommapp/romm:5.3.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"live_compose_image_lines": [
"image: rommapp/romm:5.3.1@sha256:0d66b4ea152a237c7f24b95e87459f46d3c596a7c0b35a82f26bc971487278b3",
"image: mariadb:11.8@sha256:79d59758afc91b89b120b0a8904d637f5a3b3e1c4900f29b740d6d46c72fef68",
"image: redis:7-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499"
],
"docker_inspect": [
"romm rommapp/romm:5.3.1@sha256:0d66b4ea152a237c7f24b95e87459f46d3c596a7c0b35a82f26bc971487278b3 running=true restarts=0",
"romm-db mariadb:11.8@sha256:79d59758afc91b89b120b0a8904d637f5a3b3e1c4900f29b740d6d46c72fef68 running=true restarts=0",
"romm-redis redis:7-alpine@sha256:858f009f9709ce576febc734aa78b8f6d624b82571f9ddb6bda4377c833b3499 running=true restarts=0"
]
},
"setup_gate_before": {
"browser": {
"status": "302",
"redirect": "https://felhom.enkisfelhom.hu/__gate/start?…"
},
"script": {
"status": "401",
"redirect": null
}
},
"seed": "read_back",
"drill_commit": "369e96ff4a04",
"sync_waited_s": 4.5,
"badge_before": {
"hu": [
{
"title": "Újabb változat érhető el ehhez az alkalmazáshoz. A frissítés indításához nyomd meg a Frissítés gombot.",
"text": "Frissítés elérhető — ma"
}
],
"en": [
{
"title": "A newer version of this app is available. Select the Update button to start it.",
"text": "Update available — today"
}
]
},
"measured_at": "2026-10-27T13:14:00Z",
"update": {
"accepted": true,
"http": "202",
"phases": [
{
"t": 0.0,
"phase": "backing-up",
"label": "Biztonsági mentés készül a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 24.6,
"phase": "safety-dump",
"label": "Adatbázis pillanatkép…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 26.7,
"phase": "pulling",
"label": "Új verzió letöltése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 62.5,
"phase": "copying",
"label": "Az adatok másolása a frissítés előtt…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 88.1,
"phase": "starting",
"label": "Indítás az új verzióval…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 99.4,
"phase": "verifying",
"label": "Működés ellenőrzése…",
"updating": true,
"error": null,
"hold": null
},
{
"t": 130.2,
"phase": "done",
"label": "Frissítve",
"updating": false,
"error": null,
"hold": null
}
],
"duration_s": 130.2,
"final_phase": "done",
"update_error": null,
"hold_reason": null,
"state": "running"
},
"observables_after": {
"pinned_images": {
"romm": "rommapp/romm:5.4.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"installed_images": {
"romm": "rommapp/romm:5.4.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"catalog_images": {
"romm": "rommapp/romm:5.4.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"live_compose_image_lines": [
"image: rommapp/romm:5.4.1",
"image: mariadb:11.8",
"image: redis:7-alpine"
],
"docker_inspect": [
"romm rommapp/romm:5.4.1 running=true restarts=0",
"romm-db mariadb:11.8 running=true restarts=0",
"romm-redis redis:7-alpine running=true restarts=0"
]
},
"badge_after": {
"hu": [
{
"title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
"text": "Naprakész"
}
],
"en": [
{
"title": "This app is running the newest version available.",
"text": "Up to date"
}
]
},
"state_after": "running",
"hold_after": null,
"to_digests": {
"romm": "sha256:8677fb7b81b1d3db20b849e989a1dadc2a11159e51eb34a2acdcb01102274edf",
"romm-db": "sha256:c4124d1afa875e47f2892edf26b482fa54f796e2f342d3717a04ca091a22a9bd",
"romm-redis": "sha256:6ba19c50b56777f5c11c58eff8ddb69d0d5f27ba131cffb63f180ccfd43c66af"
},
"four_observables": {
"pinned": {
"romm": "rommapp/romm:5.4.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"installed": {
"romm": "rommapp/romm:5.4.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"catalog": {
"romm": "rommapp/romm:5.4.1",
"romm-db": "mariadb:11.8",
"romm-redis": "redis:7-alpine"
},
"live_compose": [
"mariadb:11.8",
"redis:7-alpine",
"rommapp/romm:5.4.1"
]
},
"seed_read_after": true,
"setup_gate_after": {
"browser": {
"status": "200",
"redirect": null
},
"script": {
"status": "200",
"redirect": null
}
},
"memory": {
"soak_s": 600,
"interval_s": 10,
"samples": 174,
"containers": {
"romm": {
"samples": 58,
"anon_peak_bytes": 635965440,
"limit_bytes": 1073741824,
"anon_peak_pct": 59.2,
"cgroup_peak_pct": 69.4,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-098d13eab9ce0b2d469ebb4245aa74eaf4b844646d0c5ae4780d69af5da801c7.scope"
},
"romm-db": {
"samples": 58,
"anon_peak_bytes": 113971200,
"limit_bytes": 402653184,
"anon_peak_pct": 28.3,
"cgroup_peak_pct": 34.6,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-a2a19b142b5efde311ca0b05c96aa9d7dc7bb4a983d8717e94e0b21395c3a137.scope"
},
"romm-redis": {
"samples": 58,
"anon_peak_bytes": 13832192,
"limit_bytes": 134217728,
"anon_peak_pct": 10.3,
"cgroup_peak_pct": 23.0,
"oom_kill_delta": 0,
"oom_killed_flag": false,
"restarts_delta": 0,
"running_all_samples": true,
"cgroup": "/sys/fs/cgroup/system.slice/docker-2dbb1526a65b4698077190d39cffc4314a09095fce57ee8ff3f350c4101f40d1.scope"
}
},
"oom_kills": 0,
"restarts": 0,
"peak_pct": 59.2
},
"why": "the security-fix step ran on the box through the guarded Update; healthy, TO on all four observables, no undo, no hold, a clean soak, seed read back",
"log": [
"14:11:48 [1] required fields filled beyond DOMAIN/SUBDOMAIN: ['HDD_PATH']",
"14:11:48 [1] deploy -> 202 {'ok': True, 'message': 'Telepítés elindítva – az állapot a kártyán követhető'}",
"14:13:29 [1] deployed, controller state=running, pinned={'romm': 'rommapp/romm:5.3.1', 'romm-db': 'mariadb:11.8', 'romm-redis': 'redis:7-alpine'}",
"14:13:29 gate: arcade is gated — passed as the household (cookie set)",
"14:13:34 [2] setup gate as installed: {'browser': {'status': '302', 'redirect': 'https://felhom.enkisfelhom.hu/__gate/start?…'}, 'script': {'status': '401', 'redirect': None}}",
"14:13:41 romm: POST /api/users http=201",
"14:13:42 romm: login as the seeded user http=200 ok=True",
"14:13:44 [5] drill commit 369e96ff4a04: romm rommapp/romm:5.3.1 -> rommapp/romm:5.4.1 (push rc=0)",
"14:13:56 [5] the box's drill mirror now at 369e96ff",
"14:14:01 [6] Update -> 202 {'ok': True, 'data': {'accepted': True, 'completed': False}, 'message': 'Frissítés elindult – az állapot a kártyán követhető'}",
"14:14:01 + 0.0s phase=backing-up label=Biztonsági mentés készül a frissítés előtt… err=None hold=None",
"14:14:25 + 24.6s phase=safety-dump label=Adatbázis pillanatkép… err=None hold=None",
"14:14:27 + 26.7s phase=pulling label=Új verzió letöltése… err=None hold=None",
"14:15:03 + 62.5s phase=copying label=Az adatok másolása a frissítés előtt… err=None hold=None",
"14:15:29 + 88.1s phase=starting label=Indítás az új verzióval… err=None hold=None",
"14:15:40 + 99.4s phase=verifying label=Működés ellenőrzése… err=None hold=None",
"14:16:11 + 130.2s phase=done label=Frissítve err=None hold=None",
"14:16:32 romm: login as the seeded user http=200 ok=True",
"14:16:32 [7] memory soak 600 s …",
"14:26:40 [7] soak: peak 59.2% of the limit (anon), kills 0, restarts 0"
]
}