mirror of
https://github.com/kuhyx/testsAndMisc.git
synced 2026-11-12 22:10:53 +01:00
Krzysztof kuhy Rudnicki
0cea82cab5
`verify` gated on the two invariants whose breach cut every bridged container off the internet on 2026-08-29 and again after the 2026-08-30 reboot -- but nothing invoked it, so it reported drift only when a human thought to ask, and the outage it exists for is exactly the one nobody thinks to ask about. nftables-drift.service now runs it after nftables.service, docker.service and network-online.target at every boot, plus a daily Persistent timer. A breach is a failed unit in `systemctl --failed`, not a log line: a self-check that detects a failure has to gate, not warn. Proven in ~/utils/vmbox across two real reboots -- drifted /etc leaves the unit failed with the diff and the missing docker0 accept in its journal, matching /etc leaves it active with no false positive -- then installed and run green on the host. Not yet observed across a host reboot. Also bumps the gatelock pin to v0.7.3, which is what turned main's dependency-freshness job red; CI_GREEN_SKIP is set because this commit is that fix. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015d48t4qsQLBJnDwDeo2Nom |
||
|---|---|---|
| .. | ||
| lib | ||
| systemd | ||
| control_from_mobile.sh | ||
| install_unreal_mcp_kvick.sh | ||
| install_unreal_mcp.sh | ||
| keepass_consolidate.sh | ||
| keepass_sync.sh | ||
| keepass-open.sh | ||
| migrate_github_to_gitea.sh | ||
| raspberry_pi_flash_sd.sh | ||
| raspberry_pi_nextcloud.sh | ||
| setup_activitywatch.sh | ||
| setup_dns_blocker.sh | ||
| setup_dot_resolver.sh | ||
| setup_dwm.sh | ||
| setup_gitea.sh | ||
| setup_kcd2_dice_solver.sh | ||
| setup_keepass_sync.sh | ||
| setup_local_llm.sh | ||
| setup_nextcloud_raspberry.sh | ||
| setup_personal_website.sh | ||
| setup_phone_wireguard.sh | ||
| setup_searxng.sh | ||
| setup_syncyomi_guard.sh | ||
| setup_syncyomi.sh | ||
| setup_wireguard_ssh.sh | ||