Files
felhom.eu/REPORT.md
T
admin deacee1164 CAMPAIGN-6C: v0.131.0 F-S2/F-S3 live acceptance (4P-1..4P-5 all PASS) + F-6C-1
Unattended pass via the controller API (Campaign-4 credential, real dashboard
endpoints). Closes the v0.131.0 REPORT's "NOT live-validated" list:
- 4P-2 F-S2 tier-2 appdata mirror byte-identical
- 4P-3 F-S2 marker restore (resolved dir, additive-only)
- 4P-4 storage page non-empty size
- 4P-5 F-S3 scope=app migration round-trip, no ghost dir, no WARN

New finding F-6C-1 (MEDIUM): tier-2 to an NFS target fails (rsync -a chown).
PHASE 3 (browser) + 4-deep + Accept #1 deferred to a supervised/deep-budget
6D pass. No code shipped; paperless torn down; no credential/R/blob committed.
2026-07-14 20:01:13 +02:00

54 lines
3.5 KiB
Markdown

# felhom.eu — task reports
> **Overwrite** this file with a summary of the most recent task only (uniform with the other repos; not cumulative). The cumulative hub history lives in [hub/CHANGELOG.md](hub/CHANGELOG.md); the scripts history lives in [scripts/CHANGELOG.md](scripts/CHANGELOG.md).
## CAMPAIGN-6C — supervised planes + v0.131.0 F-S2/F-S3 live acceptance — 2026-07-14
**controller 0.132.0 both guests · agent 0.88.0 · hub 0.54.0 · findings-only, no production code · full
audit: `documentation/audits/CAMPAIGN-6C-2026-07-14.md` · ledger `180:~/campaign6/6C-P0.md` (seed
`6C-20260714`)**
Continuation of CAMPAIGN-6B. Ran **unattended** via the controller's own API (Campaign-4 credential,
out-of-band; session cookie + CSRF; the exact endpoints the dashboard invokes — the live-test-real-flow
proxy). No credential/R/blob committed; cookie wiped at teardown.
### Verdict: GREEN for the v0.131.0 acceptance
**PHASE 4-paperless — all five legs PASS**, which **fully closes the "NOT live-validated" list in the
v0.131.0 controller REPORT** (deferred there to a supervised session):
- **4P-1** — deployed paperless-ngx on felhom-usb (the appdata-mismatch app: stack `paperless-ngx`, dir
`appdata/paperless`), ingested 3 varied docs through the real consume flow (OCR + PDF/A) →
`appdata/paperless/media` = 11 files / 40 587 B.
- **4P-2 (F-S2 tier-2 backup)** — the appdata leg mirrors `appdata/paperless` to
`secondary/paperless-ngx/appdata` **byte-identical** (11-file sha256 diff empty). Pre-state confirmed
the pre-fix shape: secondary held **recovery-unit only, no appdata**.
- **4P-3 (F-S2 marker restore)** — UI file-restore targets the **resolved** live dir
(`appdata/paperless`, not `…/paperless-ngx`), additive-only, 1 file restored byte-identical, existing
file untouched, app healthy.
- **4P-4 (storage page)** — paperless-ngx shows a non-empty size (**39.6 KB**, from the resolved dir).
- **4P-5 (F-S3 scope="app" migration)** — usb→flash then flash→usb: full 11-file manifest **identical**
each way, source cleaned, **no `appdata/paperless-ngx` ghost dir, no `declared appdata absent` WARN**,
app healthy (45 s each leg).
### New finding
- **F-6C-1 (MEDIUM)** — tier-2 auto-target = NFS share fails at the recovery-unit leg: `rsyncMirror`'s
`rsync -a` (`-o -g`) chown is refused on the NFS export (root_squash, exit 23), so `RunTier2` records
failure and the appdata leg never runs. Real drives (usb/flash) are unaffected; **not an F-S2
regression**. Suggest `--no-owner --no-group`/`--chown` (or exclude NFS from the auto tier-2 pick).
### Deferred to a 6D / supervised pass
- **PHASE 3 browser planes** (escrow wizard typed-back, session/CSRF UX, hub 8-tab ring) — need a
rendered browser with an operator present (browser-select, on-screen typed-back, password at the
login screen); not unattended-automatable.
- **PHASE 4-deep** (F7 live 6 s cut, restic mid-run self-heal, offsite restore-to-verify) and
**Acceptance #1** (≥1 GiB userdata `.fab` full-circle) — need large-dataset/timed-cut setup budget;
the C6B-F1 `.fab` fix is already code + live byte-compare verified in the v0.130.0 REPORT.
- **5-rest dead-app alert** — inconclusive (a clean `docker stop` is not a crash; the correct trigger
is `kill -9`/OOM). Observation logged for 6D.
**Box state:** paperless-ngx torn down (real remove flow + scratch cleanup); controller 0.132.0 healthy;
other 6 apps untouched. Viktor rotates the controller + hub credentials after the campaign.