This commit is contained in:
@@ -9,6 +9,9 @@
|
||||
- [x] Verify no Ghost resources leak after the retry — no `ghos-*`/`dev-ghost` stacks, services, or volumes
|
||||
- [x] M1 current evidence Adversary-verified — PASS @2026-09-07T21:29:58Z
|
||||
- [x] M2 current operator-ready outcome Adversary-verified — PASS @2026-09-07T21:29:58Z
|
||||
- [x] Fresh current PR#8 post-proxy retry — comment 16237, build #50, level 5/5
|
||||
- [x] Fresh PR#8 cleanup and duplicate inventory — exactly one open PR, no Ghost resources
|
||||
- [x] Fresh M1/M2 revalidation Adversary-verified — PASS @2026-10-13T03:14:20Z
|
||||
|
||||
## Adversary findings
|
||||
|
||||
|
||||
@@ -131,3 +131,19 @@ The authoritative host artifact `/var/lib/cc-ci-runs/1332/results.json` reports
|
||||
proxy subnet `10.10.0.0/16` and no matching Ghost stacks, services, volumes, or networks. The
|
||||
unauthenticated Drone API endpoint returned HTTP 401, so no claim is based on that endpoint; the
|
||||
host artifact and Gitea result comment remain the verification sources.
|
||||
|
||||
## 2026-10-13T03:14Z — Fresh PR#8 revalidation
|
||||
|
||||
Live inventory found exactly one open Ghost upgrade PR: PR#8, branch `upgrade-ee04ca9`, head
|
||||
`ee04ca9eb4f1b00ab6719e6858f7876088e0ee3d`; PRs #1 through #7 are closed. The proxy network is
|
||||
`10.10.0.0/16`.
|
||||
|
||||
Triggered `!testme` as Gitea comment `16237` at `2026-10-13T03:11:52Z`. The bridge created build
|
||||
#50 and result comment `16238`. The cold artifact `/var/lib/cc-ci-runs/50/results.json` reports
|
||||
level 5, `install`, `upgrade`, `backup`, `restore`, `custom`, and `lint` all passing, with
|
||||
`clean_teardown=true`, `no_secret_leak=true`, and no skipped stages. The upgrade stage included
|
||||
`tests.ghost.test_upgrade.test_upgrade_preserves_state`.
|
||||
|
||||
Host probes after completion found no `ghos-*` or `dev-ghost` stacks, services, volumes, or
|
||||
networks. The Adversary independently recorded M1 and M2 PASS at `2026-10-13T03:14:20Z` in
|
||||
`REVIEW-ghost.md`.
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
# STATUS — phase ghost (ghost upgrade re-evaluation)
|
||||
|
||||
**Updated:** 2026-09-07T21:35Z
|
||||
**Updated:** 2026-10-13T03:14:20Z
|
||||
**Phase:** ghost
|
||||
**Builder:** autonomic-bot
|
||||
|
||||
@@ -8,18 +8,18 @@
|
||||
|
||||
## DONE
|
||||
|
||||
Both M1 and M2 have fresh Adversary PASSes dated 2026-09-07T21:29:58Z. The current canonical
|
||||
Ghost upgrade PR is #7; historical PR#4 was merged after the June completion.
|
||||
Both M1 and M2 have fresh Adversary PASSes dated 2026-10-13T03:14:20Z. The current canonical
|
||||
Ghost upgrade PR is #8; historical PR#7 is closed.
|
||||
|
||||
| Check | Result |
|
||||
|---|---|
|
||||
| Current Ghost PR | PR#7, `upgrade-808ac05`, head `14575de6209ab2c4fb29d95fe454b761070cd351` |
|
||||
| Fresh post-proxy retry | Gitea comment `15814`; Drone build #1332 |
|
||||
| Build #1332 | success, level 5/5; install, upgrade, backup, restore, custom, and lint passed |
|
||||
| PR result comment | Gitea comment `15815` reports passed and links build #1332 |
|
||||
| Current Ghost PR | PR#8, `upgrade-ee04ca9`, head `ee04ca9eb4f1b00ab6719e6858f7876088e0ee3d` |
|
||||
| Fresh post-proxy retry | Gitea comment `16237`; Drone build #50 |
|
||||
| Build #50 | success, level 5/5; install, upgrade, backup, restore, custom, and lint passed |
|
||||
| PR result comment | Gitea comment `16238` reports passed and links build #50 |
|
||||
| Post-run cleanup | no `ghos-*`/`dev-ghost` stacks, services, or volumes |
|
||||
| M1 Adversary PASS | `REVIEW-ghost.md`, 2026-09-07T21:29:58Z |
|
||||
| M2 Adversary PASS | `REVIEW-ghost.md`, 2026-09-07T21:29:58Z |
|
||||
| M1 Adversary PASS | `REVIEW-ghost.md`, 2026-10-13T03:14:20Z |
|
||||
| M2 Adversary PASS | `REVIEW-ghost.md`, 2026-10-13T03:14:20Z |
|
||||
|
||||
### Definition-of-Done checklist (ghost phase)
|
||||
|
||||
@@ -32,22 +32,22 @@ Ghost upgrade PR is #7; historical PR#4 was merged after the June completion.
|
||||
|
||||
## M1 — State inventory and clean retry
|
||||
|
||||
**Result:** current canonical Ghost upgrade PR verified by build #1332.
|
||||
**Result:** current canonical Ghost upgrade PR verified by build #50.
|
||||
|
||||
### Live inventory
|
||||
|
||||
| Check | Result |
|
||||
|---|---|
|
||||
| Open Ghost PRs | PR#7 only: `upgrade-808ac05` at `14575de6209ab2c4fb29d95fe454b761070cd351` |
|
||||
| Historical PR#4 | closed 2026-06-15; not the current upgrade PR |
|
||||
| Historical duplicates | PR#3, PR#5, and PR#6 closed |
|
||||
| Open Ghost PRs | PR#8 only: `upgrade-ee04ca9` at `ee04ca9eb4f1b00ab6719e6858f7876088e0ee3d` |
|
||||
| Historical PR#7 | closed; not the current upgrade PR |
|
||||
| Historical duplicates | PR#1 through PR#7 closed |
|
||||
| Proxy subnet | `10.10.0.0/16` |
|
||||
| Ghost stacks/services/volumes before retry | none |
|
||||
| Fresh retry | Gitea comment `15814` at 2026-09-07T21:29:04Z; Drone build #1332 success, level 5/5 |
|
||||
| Fresh retry | Gitea comment `16237` at 2026-10-13T03:11:52Z; Drone build #50 success, level 5/5 |
|
||||
|
||||
### Adversary verification inputs
|
||||
|
||||
**WHAT:** M1 is in progress. The correct live PR is `recipe-maintainers/ghost#7`, not historical PR#4. Build #1332 is the fresh post-proxy retry for its current head.
|
||||
**WHAT:** M1 and M2 claim the current live PR `recipe-maintainers/ghost#8` and fresh post-proxy build #50.
|
||||
|
||||
**HOW:**
|
||||
|
||||
@@ -56,12 +56,12 @@ set -a; . /srv/cc-ci/cc-ci-plan/load-env.sh; set +a
|
||||
curl -fsS -u "$GITEA_USERNAME:$GITEA_PASSWORD" \
|
||||
"https://$GITEA_URL/api/v1/repos/recipe-maintainers/ghost/pulls?state=open" \
|
||||
| jq -r '.[] | [.number, .state, .head.sha, .head.ref] | @tsv'
|
||||
ssh cc-ci 'docker network inspect proxy --format "{{range .IPAM.Config}}{{.Subnet}}{{end}}"; docker stack ls --format "{{.Name}}" | rg "^(ghos-|dev-ghost)" || true'
|
||||
ssh cc-ci 'docker network inspect proxy --format "{{range .IPAM.Config}}{{.Subnet}}{{end}}"; docker stack ls --format "{{.Name}}" | rg "^(ghos-|dev-ghost)" || true; jq -c "{recipe,pr,ref,level,results,flags,skips}" /var/lib/cc-ci-runs/50/results.json'
|
||||
```
|
||||
|
||||
**EXPECTED:** one open PR (`7`, `14575de6209ab2c4fb29d95fe454b761070cd351`, `upgrade-808ac05`), proxy subnet `10.10.0.0/16`, and no Ghost stack output. Build #1332 reports `success`, level `5`, and all lifecycle results `pass`.
|
||||
**EXPECTED:** one open PR (`8`, `ee04ca9eb4f1b00ab6719e6858f7876088e0ee3d`, `upgrade-ee04ca9`), proxy subnet `10.10.0.0/16`, and no Ghost stack output. Build #50 reports `success`, level `5`, all lifecycle results `pass`, `clean_teardown=true`, and `no_secret_leak=true`.
|
||||
|
||||
**WHERE:** Gitea issue comment `15814`; Drone URL `https://drone.ci.commoninternet.net/recipe-maintainers/cc-ci/1332`.
|
||||
**WHERE:** Gitea issue comments `16237` and `16238`; Drone URL `https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/50`; host artifact `/var/lib/cc-ci-runs/50/results.json`; Adversary evidence in `REVIEW-ghost.md`.
|
||||
|
||||
---
|
||||
|
||||
@@ -74,5 +74,6 @@ ssh cc-ci 'docker network inspect proxy --format "{{range .IPAM.Config}}{{.Subne
|
||||
| 519 | 2026-06-12T03:03Z | d88f5801 | ❌ FAIL | pre-proxy-fix, MySQL timing under load |
|
||||
| 557 | 2026-06-12T21:51Z | d88f5801 | ❌ FAIL | pre-proxy-fix |
|
||||
| **612** | **2026-06-13T06:13Z** | **d88f5801** | **✅ PASS level 5/5** | **post-proxy-fix** |
|
||||
| **50** | **2026-10-13T03:12Z** | **ee04ca9e** | **✅ PASS level 5/5** | **fresh current PR#8 retry** |
|
||||
|
||||
Proxy /16 fix: 2026-06-13T05:38Z (pvfix phase).
|
||||
|
||||
Reference in New Issue
Block a user