From 4a118eafeefb912e5043de7c0e6e110078de5506 Mon Sep 17 00:00:00 2001 From: autonomic-bot Date: Thu, 28 May 2026 20:56:31 +0100 Subject: [PATCH] =?UTF-8?q?journal(2):=20correct=20drive=20note=20?= =?UTF-8?q?=E2=80=94=20cannot=20trim=20onlyoffice=20(recipe-as-is);=20regi?= =?UTF-8?q?stry=20creds=20is=20the=20fix?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 4.8 (1M context) --- machine-docs/JOURNAL-2.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/machine-docs/JOURNAL-2.md b/machine-docs/JOURNAL-2.md index 38b9b78..532e77b 100644 --- a/machine-docs/JOURNAL-2.md +++ b/machine-docs/JOURNAL-2.md @@ -531,3 +531,16 @@ tests until the ~10-service base converges). Chain of events: Action: interrupted the stuck deploy (let abra TIMEOUT fire for clean teardown). Recording finding; notifying operator (registry creds per §1.5 + Gitea outage). Idle-retry both until recovery. + +### Correction (same session): cannot trim onlyoffice — recipe-as-is rule +Investigated the "disable onlyoffice to shrink the stack" idea from the entry above. The lasuite-drive +recipe ships a **single `compose.yml`** with collabora AND onlyoffice as unconditional services — no +`COMPOSE_FILE`/compose-profile toggle in `.env.sample`. Disabling onlyoffice would require editing the +recipe's `compose.yml`, which violates "test the recipe as-is / never modify the recipe under test" +(§7-equivalent corner-cut). So **the trim avenue is closed** — I test all 12 services. The only +legitimate levers for the rate-limit problem are: (1) **registry pull credentials** (the §1.5 operator +finding — requested), and (2) **don't `docker image prune` aggressively** between runs (it forces cold +re-pulls that burn the anonymous quota; let the cache persist). Disk pressure must instead be managed +by pruning ONLY truly-dangling images, or by the operator growing the cc-ci disk. +(Also noted: recipe env is `ONLY_OFFICE_DOMAIN`, underscore — my EXTRA_ENV flattened COLLABORA/MINIO +domains but not onlyoffice's; only matters for the WOPI/TLS path, to revisit when base converges.)