admin
42bf40bd2c
gates / gates (push) Successful in 29s
- Twelve steps published on both venues (catalog): first ladders for calibre-web, gitea, wger, crafty-controller, uptime-kuma, zipline (two steps); within-major emby, ghost, home-assistant, outline, rallly. immich's step v3.0.3 -> v3.2.2 re-proven at 768M (Part D). - Part C: the night leg skips a digest-only change AND the catalog never records a same-tag re-test, so a same-name upstream fix reaches no box. Row R-740; the decision in STATUS; `09` decision 30 carries a dated note (the decision itself unchanged). - Rows: 369 -> 377. Opened R-735..R-742; closed R-735, R-738, R-742; narrowed R-462, R-624, R-446, R-440, R-734, R-732. The currency audit gains §1b (and corrects its 31+1 to 30+2). Evidence: documentation/audits/more-night-apps-2026-09-30/. Report: REPORT-more-night-apps-2026-09-30.md. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
59 lines
3.9 KiB
Python
59 lines
3.9 KiB
Python
"""boxmove.py <phase> <app> <sub> [<svc> <from> <to> <fmj> <tmj>] — Part B's BOX venue on 9202 (drill catalog):
|
|
prep: deploy (reuse if installed), seed through the app's own route, read it back (C1)
|
|
move: drill commit with the mark → sync → the guarded Update → engine state + seed read back → box verdict JSON
|
|
Evidence: B/apps/<app>/box/."""
|
|
import json, os, sys, time, subprocess
|
|
import walk as w
|
|
sys.path.insert(0, '/mnt/5_hdd/felhom.eu/git/app-catalog-felhom.eu/scripts')
|
|
import upgrade_fixtures_box as fixtures, upgrade_fixtures_box28 as _f28
|
|
FX = dict(_f28.FIXTURES28); FX.update(fixtures.FIXTURES) # the box set wins, as upgrade_boxport.get() decides
|
|
phase, app, sub = sys.argv[1:4]
|
|
EVD = f"{w.EV}/box/{app}"; os.makedirs(EVD, exist_ok=True)
|
|
TOK = w.SC + "/seed-tokens-box.json"
|
|
log = open(f"{EVD}/{phase}.txt", "a", buffering=1)
|
|
def say(*a):
|
|
w.say(*a); log.write(" ".join(map(str, a)) + "\n")
|
|
w.login()
|
|
toks = json.load(open(TOK)) if os.path.exists(TOK) else {}
|
|
if phase == "prep":
|
|
say(f"deploy/reuse {app}: {w.deploy(app, sub)}")
|
|
toks[app] = FX[app].seed(w, sub, say)
|
|
if isinstance(toks[app], dict) and w.GENERATED.get(app):
|
|
# the deploy secrets THIS run generated (grafana's admin password): kept beside the seed, in the 0600 scratch
|
|
# file only, so a LATER process (boxstep/undocase) can read the app back. Found 2026-09-30: grafana's box step
|
|
# read back with the default password and got 401 — the instrument, not the product.
|
|
toks[app]["__generated"] = w.GENERATED[app]
|
|
json.dump(toks, open(TOK, "w"), default=str); os.chmod(TOK, 0o600)
|
|
say(f"C1 seed reads back BEFORE: {FX[app].verify(w, sub, toks[app], say)}")
|
|
else:
|
|
svc, frm, to, fmj, tmj = sys.argv[4:9]
|
|
st = w.stack(app); before = (st.get("app_config") or {}).get("pinned_images")
|
|
pg = lambda: w.guest(f"docker exec {svc} sh -c 'cat $PGDATA/PG_VERSION' 2>&1").strip()
|
|
say(f"before: pinned={before} PG_VERSION={pg()}")
|
|
if os.environ.get("SKIPDRILL"):
|
|
say("drill: SKIPPED — the drill commit was made by an earlier attempt")
|
|
else:
|
|
r = subprocess.run([sys.executable, os.path.join(os.path.dirname(__file__), "drillmove.py"), app, svc, frm, to, fmj, tmj], capture_output=True, text=True)
|
|
say("drill:", r.stdout.strip().splitlines()[0] if r.stdout else r.stderr[-300:])
|
|
w.sync_rescan(app, to)
|
|
since = w.guest("date -u +%Y-%m-%dT%H:%M:%SZ").strip()
|
|
res = w.press_update(app, poll=1, cap_s=1800)
|
|
for p in res.get("phases", []):
|
|
log.write(f" phase +{p['t']}s {p['phase']} | err={p['error']}\n")
|
|
time.sleep(10)
|
|
after_pg = pg(); read = FX[app].verify(w, sub, toks[app], say)
|
|
conv = w.guest(f"docker logs --since {since} felhom-controller 2>&1 | grep -E 'update {app}|CONVERT' | grep -v DEBUG | cut -c1-400")
|
|
log.write(conv + "\n")
|
|
line = next((l for l in conv.splitlines() if "CONVERTED" in l), "")
|
|
st = w.stack(app)
|
|
verdict = {"app": app, "venue": "box 9202 (drill catalog, controller 0.283.1), the product's guarded Update",
|
|
"from": before, "to": (st.get("app_config") or {}).get("pinned_images"),
|
|
"verdict": "proven" if (res.get("final_phase") == "done" and read and after_pg == str(tmj)) else "failed",
|
|
"seed_read_before": True, "seed_read_after": read, "healthy_after": st.get("state") == "running",
|
|
"engine_conversion": {"service": svc, "engine": "postgres", "from": int(fmj), "to": int(tmj),
|
|
"result": "converted" if line else "not-seen", "controller_line": line.split("] ", 2)[-1] if line else ""},
|
|
"duration_s": res.get("duration_s"), "measured_at": since,
|
|
"evidence": f"felhom.eu/documentation/audits/more-night-apps-2026-09-30/box/{app}/move.txt"}
|
|
json.dump(verdict, open(f"{EVD}/box-verdict-{app}.json", "w"), indent=2)
|
|
say(f"RESULT final_phase={res.get('final_phase')} PG_VERSION={after_pg} seed_after={read} verdict={verdict['verdict']}")
|