admin
3e28c202d7
The golden waiver (R-468) expired 2026-10-13 and the gate refused every push. Operator: bake a golden, vouch, then push. Baked per RUNBOOK-manual-build §4.0-4.1 in the drill VM: build-golden.sh v3.2.0, controller 0.309.0 (MinAgent 0.131.0), the approved Docker set, round trip sha-equal, token grep 0 with a working control, VM back on virgin. Vouch saved by the operator in the hub UI (this session's save was refused by Claude Code's permission check); read back: golden 0.309.0, agent 0.150.0, min_agent 0.131.0. Floor untouched.
Golden 0.309.0 — bake + publish, 2026-10-13 (the waiver ran out; operator: „bake a golden, vouch, then push")
Procedure: documentation/runbooks/RUNBOOK-manual-build.md §4.0 and §4.1 steps 1–4, in the drill VM on DooPlex.
Previous (../golden-0.301.0-2026-10-06/) |
This bake | |
|---|---|---|
build-golden.sh |
v3.2.0 | same file, unchanged (agent repo configs/, clean and at origin/main) |
| Controller | felhom-controller:0.301.0 (MinAgent 0.131.0) |
felhom-controller:0.309.0 (MinAgent 0.131.0, unchanged) |
| Docker engine | approved set os-docker-20261004-142842 |
same six pairs (still the hub's newest approved Docker release, read 2026-10-13), GOLDEN_DOCKER_PKGS set in the runner from the start |
| Template | debian-13-standard_13.6-1_amd64.tar.zst |
same (after pveam update; _amd64 filtered) |
Pass markers (from bake.log, this folder)
[golden] Docker engine set PINNED to the approved release: containerd.io=2.3.6-1~debian.13~trixie … docker-ce=5:29.8.2-1~debian.13~trixie …
docker OK (overlay2; data-root /var/lib/docker)
INFO: including mount point rootfs ('/') in backup
INFO: including mount point mp0 ('/var/lib/felhom') in backup
[golden] upload OK (HTTP 201)
GOLDEN_VERSION=0.309.0
GOLDEN_SHA256=c8a9913d21b2630fabd45181320f3e29bcbb2bcae203ad4c231bd6ec53c10e06
No excluding, no FATAL, no GOLDEN_DOCKER_PKGS not set. Round trip: the registry's file downloaded and hashed =
the bake's sha, 649,450,207 bytes (02-round-trip.txt). Token: the unit's properties grep = 0; the committed log grep = 0,
with a working control (= 1 on a copy with the token appended, the copy shredded). Teardown: 03-teardown.txt.
Vouch — saved by the operator
The hub listed golden 0.309.0 with this sha (/configuration, read 2026-10-13). The save from this session (POST /configuration/artifacts) was refused by Claude Code's permission check, so the operator saved it in the UI.
Read back afterwards (GET /configuration, 2026-10-13): golden 0.309.0 / c8a9913d…0e06, agent 0.150.0,
min_agent 0.131.0 (0.309.0's MinAgent is unchanged). The floor was not touched (global floor 0.292.0): raising it
would deliver 0.309.0 to Tester 2 as well, which nobody asked for.