recipe-maintainers/cc-ci
0
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases Wiki Activity

claim(ghost): revalidate current upgrade run
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
autonomic-bot
2026-10-27 03:06:33 +00:00
parent 8356c4aee7
commit a50fdd81a1
3 changed files with 37 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
machine-docs/BACKLOG-ghost.md
+2
View File
@@ -14,6 +14,8 @@
- [x] Fresh M1/M2 revalidation Adversary-verified — PASS @2026-10-13T03:14:20Z - [x] Fresh M1/M2 revalidation Adversary-verified — PASS @2026-10-13T03:14:20Z
- [x] Fresh PR#8 retry after level-4 lint uncertainty — comment 16297, build #66, level 5/5 - [x] Fresh PR#8 retry after level-4 lint uncertainty — comment 16297, build #66, level 5/5
- [x] Fresh M1/M2 revalidation for build #66 — Adversary PASS @2026-10-20T03:22:00Z; operator classification comment #16299 added - [x] Fresh M1/M2 revalidation for build #66 — Adversary PASS @2026-10-20T03:22:00Z; operator classification comment #16299 added
- [x] Fresh current-head PR#8 retry — comment 16382, build #94, level 5/5
- [ ] Fresh M1/M2 revalidation for build #94 — awaiting Adversary PASS
## Adversary findings ## Adversary findings
machine-docs/JOURNAL-ghost.md
+16
View File
@@ -194,3 +194,19 @@ Adversary verified the sole open PR #8, current-head build #66 at level 5/5 with
unintentional skips, historical failure separation, operator-facing result, and absence of Ghost unintentional skips, historical failure separation, operator-facing result, and absence of Ghost
resource leaks. The prior level-4 lint VETO is explicitly cleared. STATUS-ghost.md now records resource leaks. The prior level-4 lint VETO is explicitly cleared. STATUS-ghost.md now records
`## DONE`; no recipe PR was merged. `## DONE`; no recipe PR was merged.
## 2026-10-27T03:08Z — Fresh current-head retry
The live PR inventory showed exactly one open Ghost upgrade PR, #8 at head
`6121a9876f4813414f20873d5eb23f8fedb64295` on `upgrade-ee04ca9`. Bootstrap checks passed: SSH access,
NixOS, authenticated Gitea API, wildcard DNS, and proxy subnet `10.10.0.0/16`.
Posted `!testme` as Gitea comment `16382`. The bridge created Drone build #94 with
`RECIPE=ghost`, `PR=8`, `REF=6121a9876f4813414f20873d5eb23f8fedb64295`, and `SRC=recipe-maintainers/ghost`.
Build #94 completed successfully. Host artifact `/var/lib/cc-ci-runs/94/results.json` reports level 5,
install/upgrade/backup/restore/custom/lint all `pass`, `clean_teardown=true`, `no_secret_leak=true`,
and no unintentional skips. Result comment `16383` reports the pass.
Post-run probes found no `ghos-*` or `dev-ghost` stacks, services, volumes, or networks. The previous
Adversary PASSes are older than 24 hours, so M1 and M2 are claimed again in STATUS-ghost.md and await
fresh independent verification. No recipe or cc-ci test change was made.
machine-docs/STATUS-ghost.md
+19 -19
View File
@@ -1,28 +1,28 @@
# STATUS — phase ghost (ghost upgrade re-evaluation) # STATUS — phase ghost (ghost upgrade re-evaluation)
**Updated:** 2026-10-20T03:26:00Z **Updated:** 2026-10-27T03:08:00Z
**Phase:** ghost **Phase:** ghost
**Builder:** autonomic-bot **Builder:** autonomic-bot
--- ---
Gate: M1 and M2 CLAIMED, awaiting Adversary. The previous M2 VETO for level-4 build #55 is Gate: M1 and M2 CLAIMED, awaiting Adversary. Fresh current-head verification is build #94 below.
superseded by the fresh level-5 build #66 below.
## DONE ## Completion pending fresh Adversary PASS
M1 and M2 have fresh Adversary PASSes in `REVIEW-ghost.md` at 2026-10-20T03:22:00Z. The previous M1/M2 PASSes are older than 24 hours. Builder has not written `## DONE` for this
revalidation; fresh Adversary PASSes for M1 and M2 are required.
| Check | Result | | Check | Result |
|---|---| |---|---|
| Current Ghost PR | PR#8, `upgrade-ee04ca9`, head `dbe40ecb7b0084050a71baf4dcf971b65aac125e` | | Current Ghost PR | PR#8, `upgrade-ee04ca9`, head `6121a9876f4813414f20873d5eb23f8fedb64295` |
| Fresh post-proxy retry | Gitea comment `16297`; Drone build #66 | | Fresh post-proxy retry | Gitea comment `16382`; Drone build #94 |
| Build #66 | success, level 5/5; install, upgrade, backup, restore, custom, and lint passed | | Build #94 | success, level 5/5; install, upgrade, backup, restore, custom, and lint passed |
| PR result comment | Gitea comment `16298` reports passed and links build #66 | | PR result comment | Gitea comment `16383` reports passed and links build #94 |
| Operator classification comment | Gitea comment `16299` explains historical infra/load confounds and operator readiness | | Operator classification comment | Gitea comment `16299` explains historical infra/load confounds and operator readiness |
| Post-run cleanup | no `ghos-*`/`dev-ghost` stacks, services, or volumes | | Post-run cleanup | no `ghos-*`/`dev-ghost` stacks, services, or volumes |
| M1 Adversary PASS | pending fresh verification of build #66 | | M1 Adversary PASS | pending fresh verification of build #94 |
| M2 Adversary PASS | pending fresh verification of build #66 | | M2 Adversary PASS | pending fresh verification of build #94 |
### Definition-of-Done checklist (ghost phase) ### Definition-of-Done checklist (ghost phase)
@@ -31,26 +31,26 @@ M1 and M2 have fresh Adversary PASSes in `REVIEW-ghost.md` at 2026-10-20T03:22:0
- [x] 2026-06-12 failures are classified separately from current recipe evidence - [x] 2026-06-12 failures are classified separately from current recipe evidence
- [x] Historical duplicate PRs are closed; no current duplicate exists - [x] Historical duplicate PRs are closed; no current duplicate exists
- [x] No Ghost resources remain after the fresh retry - [x] No Ghost resources remain after the fresh retry
- [x] M1 and M2 have fresh Adversary PASSes for build #66 - [ ] M1 and M2 have fresh Adversary PASSes for build #94
## M1 — State inventory and clean retry ## M1 — State inventory and clean retry
**Result:** current canonical Ghost upgrade PR verified by build #66; Adversary re-verification pending. **Result:** current canonical Ghost upgrade PR verified by build #94; Adversary re-verification pending.
### Live inventory ### Live inventory
| Check | Result | | Check | Result |
|---|---| |---|---|
| Open Ghost PRs | PR#8 only: `upgrade-ee04ca9` at `dbe40ecb7b0084050a71baf4dcf971b65aac125e` | | Open Ghost PRs | PR#8 only: `upgrade-ee04ca9` at `6121a9876f4813414f20873d5eb23f8fedb64295` |
| Historical PR#7 | closed; not the current upgrade PR | | Historical PR#7 | closed; not the current upgrade PR |
| Historical duplicates | PR#1 through PR#7 closed | | Historical duplicates | PR#1 through PR#7 closed |
| Proxy subnet | `10.10.0.0/16` | | Proxy subnet | `10.10.0.0/16` |
| Ghost stacks/services/volumes before retry | none | | Ghost stacks/services/volumes before retry | none |
| Fresh retry | Gitea comment `16297` at 2026-10-20T03:09:52Z; Drone build #66 success, level 5/5 | | Fresh retry | Gitea comment `16382` at 2026-10-27T03:03:31Z; Drone build #94 success, level 5/5 |
### Adversary verification inputs ### Adversary verification inputs
**WHAT:** M1 and M2 claim the current live PR `recipe-maintainers/ghost#8` and fresh post-proxy build #66. **WHAT:** M1 and M2 claim the current live PR `recipe-maintainers/ghost#8` and fresh post-proxy build #94.
**HOW:** **HOW:**
@@ -59,12 +59,12 @@ set -a; . /srv/cc-ci/cc-ci-plan/load-env.sh; set +a
curl -fsS -u "$GITEA_USERNAME:$GITEA_PASSWORD" \ curl -fsS -u "$GITEA_USERNAME:$GITEA_PASSWORD" \
"https://$GITEA_URL/api/v1/repos/recipe-maintainers/ghost/pulls?state=open" \ "https://$GITEA_URL/api/v1/repos/recipe-maintainers/ghost/pulls?state=open" \
| jq -r '.[] | [.number, .state, .head.sha, .head.ref] | @tsv' | jq -r '.[] | [.number, .state, .head.sha, .head.ref] | @tsv'
ssh cc-ci 'docker network inspect proxy --format "{{range .IPAM.Config}}{{.Subnet}}{{end}}"; docker stack ls --format "{{.Name}}" | rg "^(ghos-|dev-ghost)" || true; docker service ls --format "{{.Name}}" | rg "(^|[-_])(ghos-|dev-ghost)" || true; docker volume ls --format "{{.Name}}" | rg "(^|[-_])(ghos-|dev-ghost)" || true; jq -c "{recipe,pr,ref,level,results,lint,flags,skips}" /var/lib/cc-ci-runs/66/results.json' ssh cc-ci 'docker network inspect proxy --format "{{range .IPAM.Config}}{{.Subnet}}{{end}}"; docker stack ls --format "{{.Name}}" | rg "^(ghos-|dev-ghost)" || true; docker service ls --format "{{.Name}}" | rg "(^|[-_])(ghos-|dev-ghost)" || true; docker volume ls --format "{{.Name}}" | rg "(^|[-_])(ghos-|dev-ghost)" || true; jq -c "{recipe,pr,ref,level,results,lint,flags,skips}" /var/lib/cc-ci-runs/94/results.json'
``` ```
**EXPECTED:** one open PR (`8`, `dbe40ecb7b0084050a71baf4dcf971b65aac125e`, `upgrade-ee04ca9`), proxy subnet `10.10.0.0/16`, and no Ghost resource output. Build #66 reports `success`, level `5`, all lifecycle results and lint `pass`, `clean_teardown=true`, `no_secret_leak=true`, and no skipped stages. **EXPECTED:** one open PR (`8`, `6121a9876f4813414f20873d5eb23f8fedb64295`, `upgrade-ee04ca9`), proxy subnet `10.10.0.0/16`, and no Ghost resource output. Build #94 reports `success`, level `5`, all lifecycle results and lint `pass`, `clean_teardown=true`, `no_secret_leak=true`, and no skipped stages.
**WHERE:** Gitea issue comments `16297` and `16298`; Drone URL `https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/66`; host artifact `/var/lib/cc-ci-runs/66/results.json`; Adversary evidence in `REVIEW-ghost.md`. **WHERE:** Gitea issue comments `16382` and `16383`; Drone URL `https://drone.ci.autonomic.zone/recipe-maintainers/cc-ci/94`; host artifact `/var/lib/cc-ci-runs/94/results.json`; Adversary evidence in `REVIEW-ghost.md`.
--- ---