This commit is contained in:
@@ -9,6 +9,9 @@
|
|||||||
- [x] Verify no Ghost resources leak after the retry — no `ghos-*`/`dev-ghost` stacks, services, or volumes
|
- [x] Verify no Ghost resources leak after the retry — no `ghos-*`/`dev-ghost` stacks, services, or volumes
|
||||||
- [x] M1 current evidence Adversary-verified — PASS @2026-09-07T21:29:58Z
|
- [x] M1 current evidence Adversary-verified — PASS @2026-09-07T21:29:58Z
|
||||||
- [x] M2 current operator-ready outcome Adversary-verified — PASS @2026-09-07T21:29:58Z
|
- [x] M2 current operator-ready outcome Adversary-verified — PASS @2026-09-07T21:29:58Z
|
||||||
|
- [x] Fresh current PR#8 post-proxy retry — comment 16237, build #50, level 5/5
|
||||||
|
- [x] Fresh PR#8 cleanup and duplicate inventory — exactly one open PR, no Ghost resources
|
||||||
|
- [x] Fresh M1/M2 revalidation Adversary-verified — PASS @2026-10-13T03:14:20Z
|
||||||
|
|
||||||
## Adversary findings
|
## Adversary findings
|
||||||
|
|
||||||
|
|||||||
@@ -131,3 +131,19 @@ The authoritative host artifact `/var/lib/cc-ci-runs/1332/results.json` reports
|
|||||||
proxy subnet `10.10.0.0/16` and no matching Ghost stacks, services, volumes, or networks. The
|
proxy subnet `10.10.0.0/16` and no matching Ghost stacks, services, volumes, or networks. The
|
||||||
unauthenticated Drone API endpoint returned HTTP 401, so no claim is based on that endpoint; the
|
unauthenticated Drone API endpoint returned HTTP 401, so no claim is based on that endpoint; the
|
||||||
host artifact and Gitea result comment remain the verification sources.
|
host artifact and Gitea result comment remain the verification sources.
|
||||||
|
|
||||||
|
## 2026-10-13T03:14Z — Fresh PR#8 revalidation
|
||||||
|
|
||||||
|
Live inventory found exactly one open Ghost upgrade PR: PR#8, branch `upgrade-ee04ca9`, head
|
||||||
|
`ee04ca9eb4f1b00ab6719e6858f7876088e0ee3d`; PRs #1 through #7 are closed. The proxy network is
|
||||||
|
`10.10.0.0/16`.
|
||||||
|
|
||||||
|
Triggered `!testme` as Gitea comment `16237` at `2026-10-13T03:11:52Z`. The bridge created build
|
||||||
|
#50 and result comment `16238`. The cold artifact `/var/lib/cc-ci-runs/50/results.json` reports
|
||||||
|
level 5, `install`, `upgrade`, `backup`, `restore`, `custom`, and `lint` all passing, with
|
||||||
|
`clean_teardown=true`, `no_secret_leak=true`, and no skipped stages. The upgrade stage included
|
||||||
|
`tests.ghost.test_upgrade.test_upgrade_preserves_state`.
|
||||||
|
|
||||||
|
Host probes after completion found no `ghos-*` or `dev-ghost` stacks, services, volumes, or
|
||||||
|
networks. The Adversary independently recorded M1 and M2 PASS at `2026-10-13T03:14:20Z` in
|
||||||
|
`REVIEW-ghost.md`.
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
# STATUS — phase ghost (ghost upgrade re-evaluation)
|
# STATUS — phase ghost (ghost upgrade re-evaluation)
|
||||||
|
|
||||||
**Updated:** 2026-09-07T21:35Z
|
**Updated:** 2026-10-13T03:14:20Z
|
||||||
**Phase:** ghost
|
**Phase:** ghost
|
||||||
**Builder:** autonomic-bot
|
**Builder:** autonomic-bot
|
||||||
|
|
||||||
@@ -8,18 +8,18 @@
|
|||||||
|
|
||||||
## DONE
|
## DONE
|
||||||
|
|
||||||
Both M1 and M2 have fresh Adversary PASSes dated 2026-09-07T21:29:58Z. The current canonical
|
Both M1 and M2 have fresh Adversary PASSes dated 2026-10-13T03:14:20Z. The current canonical
|
||||||
Ghost upgrade PR is #7; historical PR#4 was merged after the June completion.
|
Ghost upgrade PR is #8; historical PR#7 is closed.
|
||||||
|
|
||||||
| Check | Result |
|
| Check | Result |
|
||||||
|---|---|
|
|---|---|
|
||||||
| Current Ghost PR | PR#7, `upgrade-808ac05`, head `14575de6209ab2c4fb29d95fe454b761070cd351` |
|
| Current Ghost PR | PR#8, `upgrade-ee04ca9`, head `ee04ca9eb4f1b00ab6719e6858f7876088e0ee3d` |
|
||||||
| Fresh post-proxy retry | Gitea comment `15814`; Drone build #1332 |
|
| Fresh post-proxy retry | Gitea comment `16237`; Drone build #50 |
|
||||||
| Build #1332 | success, level 5/5; install, upgrade, backup, restore, custom, and lint passed |
|
| Build #50 | success, level 5/5; install, upgrade, backup, restore, custom, and lint passed |
|
||||||
| PR result comment | Gitea comment `15815` reports passed and links build #1332 |
|
| PR result comment | Gitea comment `16238` reports passed and links build #50 |
|
||||||
| Post-run cleanup | no `ghos-*`/`dev-ghost` stacks, services, or volumes |
|
| Post-run cleanup | no `ghos-*`/`dev-ghost` stacks, services, or volumes |
|
||||||
| M1 Adversary PASS | `REVIEW-ghost.md`, 2026-09-07T21:29:58Z |
|
| M1 Adversary PASS | `REVIEW-ghost.md`, 2026-10-13T03:14:20Z |
|
||||||
| M2 Adversary PASS | `REVIEW-ghost.md`, 2026-09-07T21:29:58Z |
|
| M2 Adversary PASS | `REVIEW-ghost.md`, 2026-10-13T03:14:20Z |
|
||||||
|
|
||||||
### Definition-of-Done checklist (ghost phase)
|
### Definition-of-Done checklist (ghost phase)
|
||||||
|
|
||||||
@@ -32,22 +32,22 @@ Ghost upgrade PR is #7; historical PR#4 was merged after the June completion.
|
|||||||
|
|
||||||
## M1 — State inventory and clean retry
|
## M1 — State inventory and clean retry
|
||||||
|
|
||||||
**Result:** current canonical Ghost upgrade PR verified by build #1332.
|
**Result:** current canonical Ghost upgrade PR verified by build #50.
|
||||||
|
|
||||||
### Live inventory
|
### Live inventory
|
||||||
|
|
||||||
| Check | Result |
|
| Check | Result |
|
||||||
|---|---|
|
|---|---|
|
||||||
| Open Ghost PRs | PR#7 only: `upgrade-808ac05` at `14575de6209ab2c4fb29d95fe454b761070cd351` |
|
| Open Ghost PRs | PR#8 only: `upgrade-ee04ca9` at `ee04ca9eb4f1b00ab6719e6858f7876088e0ee3d` |
|
||||||
| Historical PR#4 | closed 2026-06-15; not the current upgrade PR |
|
| Historical PR#7 | closed; not the current upgrade PR |
|
||||||
| Historical duplicates | PR#3, PR#5, and PR#6 closed |
|
| Historical duplicates | PR#1 through PR#7 closed |
|
||||||
| Proxy subnet | `10.10.0.0/16` |
|
| Proxy subnet | `10.10.0.0/16` |
|
||||||
| Ghost stacks/services/volumes before retry | none |
|
| Ghost stacks/services/volumes before retry | none |
|
||||||
| Fresh retry | Gitea comment `15814` at 2026-09-07T21:29:04Z; Drone build #1332 success, level 5/5 |
|
| Fresh retry | Gitea comment `16237` at 2026-10-13T03:11:52Z; Drone build #50 success, level 5/5 |
|
||||||
|
|
||||||
### Adversary verification inputs
|
### Adversary verification inputs
|
||||||
|
|
||||||
**WHAT:** M1 is in progress. The correct live PR is `recipe-maintainers/ghost#7`, not historical PR#4. Build #1332 is the fresh post-proxy retry for its current head.
|
**WHAT:** M1 and M2 claim the current live PR `recipe-maintainers/ghost#8` and fresh post-proxy build #50.
|
||||||
|
|
||||||
**HOW:**
|
**HOW:**
|
||||||
|
|
||||||
@@ -56,12 +56,12 @@ set -a; . /srv/cc-ci/cc-ci-plan/load-env.sh; set +a
|
|||||||
curl -fsS -u "$GITEA_USERNAME:$GITEA_PASSWORD" \
|
curl -fsS -u "$GITEA_USERNAME:$GITEA_PASSWORD" \
|
||||||
"https://$GITEA_URL/api/v1/repos/recipe-maintainers/ghost/pulls?state=open" \
|
"https://$GITEA_URL/api/v1/repos/recipe-maintainers/ghost/pulls?state=open" \
|
||||||
| jq -r '.[] | [.number, .state, .head.sha, .head.ref] | @tsv'
|
| jq -r '.[] | [.number, .state, .head.sha, .head.ref] | @tsv'
|
||||||
ssh cc-ci 'docker network inspect proxy --format "{{range .IPAM.Config}}{{.Subnet}}{{end}}"; docker stack ls --format "{{.Name}}" | rg "^(ghos-|dev-ghost)" || true'
|
ssh cc-ci 'docker network inspect proxy --format "{{range .IPAM.Config}}{{.Subnet}}{{end}}"; docker stack ls --format "{{.Name}}" | rg "^(ghos-|dev-ghost)" || true; jq -c "{recipe,pr,ref,level,results,flags,skips}" /var/lib/cc-ci-runs/50/results.json'
|
||||||
```
|
```
|
||||||
|
|
||||||
**EXPECTED:** one open PR (`7`, `14575de6209ab2c4fb29d95fe454b761070cd351`, `upgrade-808ac05`), proxy subnet `10.10.0.0/16`, and no Ghost stack output. Build #1332 reports `success`, level `5`, and all lifecycle results `pass`.
|
**EXPECTED:** one open PR (`8`, `ee04ca9eb4f1b00ab6719e6858f7876088e0ee3d`, `upgrade-ee04ca9`), proxy subnet `10.10.0.0/16`, and no Ghost stack output. Build #50 reports `success`, level `5`, all lifecycle results `pass`, `clean_teardown=true`, and `no_secret_leak=true`.
|
||||||
|
|
||||||
**WHERE:** Gitea issue comment `15814`; Drone URL `https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1332`.
|
**WHERE:** Gitea issue comments `16237` and `16238`; Drone URL `https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/50`; host artifact `/var/lib/cc-ci-runs/50/results.json`; Adversary evidence in `REVIEW-ghost.md`.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
@@ -74,5 +74,6 @@ ssh cc-ci 'docker network inspect proxy --format "{{range .IPAM.Config}}{{.Subne
|
|||||||
| 519 | 2026-06-12T03:03Z | d88f5801 | ❌ FAIL | pre-proxy-fix, MySQL timing under load |
|
| 519 | 2026-06-12T03:03Z | d88f5801 | ❌ FAIL | pre-proxy-fix, MySQL timing under load |
|
||||||
| 557 | 2026-06-12T21:51Z | d88f5801 | ❌ FAIL | pre-proxy-fix |
|
| 557 | 2026-06-12T21:51Z | d88f5801 | ❌ FAIL | pre-proxy-fix |
|
||||||
| **612** | **2026-06-13T06:13Z** | **d88f5801** | **✅ PASS level 5/5** | **post-proxy-fix** |
|
| **612** | **2026-06-13T06:13Z** | **d88f5801** | **✅ PASS level 5/5** | **post-proxy-fix** |
|
||||||
|
| **50** | **2026-10-13T03:12Z** | **ee04ca9e** | **✅ PASS level 5/5** | **fresh current PR#8 retry** |
|
||||||
|
|
||||||
Proxy /16 fix: 2026-06-13T05:38Z (pvfix phase).
|
Proxy /16 fix: 2026-06-13T05:38Z (pvfix phase).
|
||||||
|
|||||||
Reference in New Issue
Block a user