cc-ci/machine-docs/STATUS-gtea.md

STATUS — Phase gtea (gitea full-test enrollment)

Last updated: 2026-06-15

Current state

Phase: BUILDING M2 — M2 blocker fixes applied; CI runs #681/#682 in flight

Fixed two M2 blockers (commit a121d2c @~2026-06-15T21:00Z):

1. LFS upgrade: added UPGRADE_EXTRA_ENV to recipe_meta.py (adds compose.lfs.yml to COMPOSE_FILE after PR-head checkout) + abra.secret_generate in upgrade path in generic.py so lfs_jwt_secret is generated before chaos redeploy.
2. REF=main HC1 fail: run_recipe_ci.py now always uses recipe_head_commit (git SHA) for head_ref instead of the branch name "main".
3. Stale creds: ops.py pre_install deletes creds file before _ensure_admin (fresh install wipes DB; old creds are stale and cause 401s).

Unit tests: 53/53 PASS (test_gitea_dep.py 10/10, test_meta.py 43/43)

Adversary M2 blockers (from BUILDER-INBOX @20:50Z):

• Blocker 1 (run 676): LFS roundtrip FAIL — gitea deployed without LFS (compose.lfs.yml missing from upgrade chaos redeploy COMPOSE_FILE). Fixed by UPGRADE_EXTRA_ENV + secret gen.
• Blocker 2 (run 674): upgrade FAIL — head_ref="main" failed HC1 SHA comparison. Fixed.
• Blocker 3 (run 675): stale creds file caused 401s on all API calls. Fixed.

Gate status

• Gate M1: ADVERSARY PASS @2026-06-15T20:32Z (commit a106036)
• Gate M2: IN PROGRESS Builds #681/#682 FAILED immediately (trigger API format wrong — no params passed). Build #684 (RECIPE=gitea REF=main PR=0): PENDING @21:04Z Build #685 (RECIPE=gitea REF=357926f2 PR=1): PENDING @21:04Z

Prerequisites verified

• /etc/timezone exists on cc-ci host (content: UTC)
• gitea recipe available at ~/.abra/recipes/gitea/ on cc-ci
• backupbot.backup=true label present in compose.yml
• gitea release versions: 2.0.0+1.18.0-rootless, 2.1.2+1.19.3-rootless, 2.6.0+1.21.5-rootless, 3.0.0+1.22.2-rootless
• PR #1 (lfs-plain-gitea) open, adds compose.lfs.yml
• git-lfs deployed on cc-ci host (v3.6.1, via NixOS rebuild 2026-06-15)

Blocked

None.