96070fdc92
A-mirror-1 resolved: build #113 hedgedoc@441c411c SUCCESS @2026-06-02T00:30Z. test_hedgedoc_has_branding (cc-ci): pass + test_hedgedoc_root_serves (cc-ci): pass. clean_teardown=true, no_secret_leak=true. Ph1+Ph2+Ph3 all verified PASS. Phase 4 operator deploy: CLEARED (Adversary done).
6.1 KiB
REVIEW — cc-ci Adversary, mirror+enroll phase
Phase: mirror + enroll ALL recipes
SSOT: /srv/cc-ci/cc-ci-plan/plan-mirror-enroll-all-recipes.md
Adversary: independent Adversary loop in /srv/cc-ci/cc-ci-adv
Pre-flight snapshot @2026-06-02T00:18Z (independent cold probe)
Performed independent cold-start survey before Builder claims any gate.
Mirror state (cold-verified via Gitea API)
| Recipe | Mirror exists? | Source |
|---|---|---|
| lasuite-drive | NO (404) | upstream git.coopcloud.tech 200 ✓ |
| mailu | NO (404) | upstream git.coopcloud.tech 200 ✓ |
| mumble | NO (404) | upstream git.coopcloud.tech 200 ✓ |
| bluesky-pds | YES (200) | — |
| discourse | YES (200) | — |
| ghost | YES (200) | — |
| immich | YES (200) | — |
| mattermost-lts | YES (200) | — |
| plausible | YES (200) | — |
Matches plan's current-state table exactly.
Live bridge POLL_REPOS (cold-verified via docker service inspect on cc-ci)
recipe-maintainers/cc-ci,recipe-maintainers/custom-html,recipe-maintainers/custom-html-tiny,
recipe-maintainers/keycloak,recipe-maintainers/cryptpad,recipe-maintainers/matrix-synapse,
recipe-maintainers/lasuite-docs,recipe-maintainers/lasuite-meet,recipe-maintainers/n8n,
recipe-maintainers/hedgedoc,recipe-maintainers/uptime-kuma
Enrolled: 10 recipes + cc-ci meta. NOT enrolled: bluesky-pds, discourse, ghost, immich, lasuite-drive, mailu, mattermost-lts, mumble, plausible (9 recipes).
tests/ directory state (cold-verified on builder-clone)
All 9 unenrolled recipes HAVE tests/<recipe>/ in builder-clone ✓:
bluesky-pds, discourse, ghost, immich, lasuite-drive, mailu, mattermost-lts, mumble, plausible
hedgedoc: NO tests/hedgedoc/ (enrolled but untested — plan Phase 2 must author suite) ✓
Verdicts / Gate records
Gate: Ph1+Ph2+Ph3 CLAIMED @2026-06-02T00:25Z — VERDICT: FULL PASS @2026-06-02T00:50Z
Cold-verified from /srv/cc-ci/cc-ci-adv (fresh git pull). Initial verdict @00:40Z had Ph2 PARTIAL (A-mirror-1 gap); Builder resolved by posting !testme at 00:30Z; A-mirror-1 CLOSED @00:50Z.
Phase 4 operator deploy: CLEARED — Adversary verification complete for Ph1+Ph2+Ph3.
Ph1 — 3 mirrors created: PASS ✓
| Mirror | HTTP | empty | default_branch | Mirror HEAD SHA | Upstream HEAD SHA | Match |
|---|---|---|---|---|---|---|
| lasuite-drive | 200 | false | main | f4135d78 | f4135d78 | ✓ |
| mailu | 200 | false | main | 23309a1a | 23309a1a | ✓ |
| mumble | 200 | false | main | 9fa5e949 | 9fa5e949 | ✓ |
Content verified: lasuite-drive contains compose.yml, .env.sample etc.; mumble contains compose.yml, README.md etc. — real recipe content, not empty repos.
Ph3 — 9 recipes enrolled in POLL_REPOS: PASS ✓
POLL_REPOS count: 20 repos (cc-ci + 19 recipes)
All 9 new recipes present in nix/modules/bridge.nix:
bluesky-pds ✓, discourse ✓, ghost ✓, immich ✓, lasuite-drive ✓, mailu ✓, mattermost-lts ✓, mumble ✓, plausible ✓
All 9 have tests/<recipe>/ in the repo ✓ (bluesky-pds: 9 files, discourse: 8, ghost: 9, immich: 8, lasuite-drive: 10, mailu: 3, mattermost-lts: 8, mumble: 7, plausible: 8)
Ph2 — hedgedoc test suite: PASS ✓ (A-mirror-1 CLOSED)
Files authored and present:
tests/hedgedoc/recipe_meta.py(HEALTH_PATH=/, HEALTH_OK=(200,302), DEPLOY_TIMEOUT=600) ✓tests/hedgedoc/functional/test_health_check.py(GET / → 200 or 302) ✓tests/hedgedoc/functional/test_branding.py(brand markers OR asset markers) ✓tests/hedgedoc/PARITY.md(scope + deferred) ✓
A-mirror-1 CLOSED: Builder posted !testme on hedgedoc PR#1 at 2026-06-02T00:30:30Z (after test authoring at 00:25Z). Bridge triggered Drone build #113 (hedgedoc@441c411c) at 00:30:46Z.
Build #113 RESULTS (cold-verified via ci.commoninternet.net/runs/113/results.json):
- install: pass (generic test_serving) ✓
- upgrade: pass (generic test_upgrade_reconverges) ✓
- backup: pass (generic test_backup_artifact) ✓
- restore: pass (generic test_restore_healthy) ✓
- custom: pass — test_hedgedoc_has_branding (cc-ci): pass ✓, test_hedgedoc_root_serves (cc-ci): pass ✓
New test files explicitly ran as source: cc-ci. clean_teardown: true, no_secret_leak: true.
Commit status: cc-ci/testme state=success target=.../113 ✓
Adversary notes builder-break-it:
- !testmexyz was posted on hedgedoc PR#1 at 2026-05-28T01:20Z → no build triggered ✓ (correct)
Break-it probes @2026-06-02T00:25Z
BP-mirror-1: Bridge auth (non-org-member rejection)
GET /orgs/recipe-maintainers/members/nonexistentuser12345 → 404 ✓ (correctly rejected)
Auth enforcement confirmed working at this snapshot.
BP-mirror-2: Bridge current POLL_REPOS (live vs config)
Live bridge task 9mtdhzx7eylfleg6qd94tseua started with correct POLL_REPOS including:
custom-html-tiny, lasuite-meet, uptime-kuma — all additions from Phases 3/5 ✓
Note: docker service inspect showed TWO POLL_REPOS env var entries in service JSON.
The LAST one (uptime-kuma included) is the current spec; the earlier was from a pre-update
spec snapshot. Running container correctly uses the full list (confirmed via service log).
BP-mirror-3: Box cleanliness
docker stack ls on cc-ci shows exactly 5 legitimate stacks:
backups, ccci-bridge, ccci-dashboard, drone, traefik. No orphaned test app stacks ✓
Disk: 35G used / 150G total (25%) — healthy headroom for mirror creation work ✓
BP-mirror-4: hedgedoc PR #1 open (pre-existing probe PR)
recipe-maintainers/hedgedoc/pulls/1 is still open — it's the Phase 1d DG6 generic suite
probe (ci/testme-probe branch). This PR predates the mirror phase. When the Builder
authors the hedgedoc test suite (Phase 2), this open PR is a natural place to run !testme.
No action needed now; noted as context for Phase 2 verification.
BP-mirror-5: Upstream recipe availability for 3 missing mirrors
git.coopcloud.tech/coop-cloud/lasuite-drive→ 200 ✓git.coopcloud.tech/coop-cloud/mailu→ 200 ✓git.coopcloud.tech/coop-cloud/mumble→ 200 ✓ All three exist upstream; mirror creation (Phase 1) should proceed without obstruction.