mirror of
https://github.com/kuhyx/testsAndMisc.git
synced 2026-11-11 15:34:06 +01:00
Krzysztof kuhy Rudnicki
334c0cd904
Some checks are pending
dependency freshness / dependencies on newest stable (push) Waiting to run
md-naming / markdown naming convention (push) Waiting to run
Pre-commit checks / pre-commit (push) Waiting to run
Shell tests / shell-tests (push) Waiting to run
Shell tests / arch-tests (push) Waiting to run
`write_nftables_ruleset` emitted a forward chain with `policy drop` and no rules at all. That chain runs at the same netfilter hook as Docker's own DOCKER-USER/DOCKER-FORWARD chains, so it vetoed them: every bridged container lost outbound networking while the host itself stayed online, so nothing looked broken. It cost the Signal bot three silent hours today. signal-cli lost its connection to Signal at 15:32:50 and looped on reconnect for 2.5h, while the bot kept answering /healthz with 200 -- `/v1/groups` still served from local state, so every surface said healthy. `flush ruleset` also deletes Docker's own tables, and dockerd only rebuilds them on its next network event, so restore_docker_rules() now restarts docker right after a successful apply. Verified in vmbox (Arch guest, docker installed, alpine probe): BASELINE=reachable -> OLD=blocked -> NEW=reachable, sshd active throughout. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KbjfWdAyHbCubac7wJKJZW |
||
|---|---|---|
| .. | ||
| android-ui-hint-labels-2026-08-27.json | ||
| app-icons-bowl-star-2026-08-29.json | ||
| artifact-prune-mode-2026-08-23.json | ||
| cap-artifact-growth-2026-08-23.json | ||
| ci-green-hint-push-2026-08-29.json | ||
| ci-mirror-serialise-under-pressure-2026-08-23.json | ||
| delete-hippo-2026-08-23.json | ||
| dependency-freshness-gate-2026-08-28.json | ||
| extract-digital-wellbeing-2026-08-23.json | ||
| extract-hosts-blocker-2026-08-23.json | ||
| fix-bats-diag-path-2026-08-23.json | ||
| fix-music-parallelism-drift-guard-2026-08-23.json | ||
| fix-precommit-utils-checkout-2026-08-25.json | ||
| flatten-linux-configuration-2026-08-23.json | ||
| focus-owner-icon-registration-2026-08-24.json | ||
| hosts-guard-rollback-fresh-install-2026-08-24.json | ||
| hosts-guard-tests-2026-08-23.json | ||
| installer-cross-repo-fix-2026-08-24.json | ||
| live-state-installed-scripts-2026-08-23.json | ||
| md-naming-namespaces-2026-08-24.json | ||
| nftables-docker-forward-2026-08-29.json | ||
| nvidia-config-allowlist-2026-08-23.json | ||
| nvidia-config-seams-restore-2026-08-23.json | ||
| nvidia-config-tests-2026-08-23.json | ||
| precommit-workflow-dispatch-2026-08-23.json | ||
| prettier-endurain-readme-2026-08-23.json | ||
| prune-superpowers-artifacts-2026-08-23.json | ||
| python-314-lint-target-2026-08-29.json | ||
| python-tests-minimal-deps-2026-08-23.json | ||
| python-tests-path-filter-symlink-2026-08-23.json | ||
| quarantine-arch-sysctl-cases-2026-08-22.json | ||
| register-betting-sim-icon-2026-08-28.json | ||
| repair-stale-live-references-2026-08-23.json | ||
| restructure-step0-safety-net-2026-08-23.json | ||
| shell-coverage-bar-back-to-presence-2026-08-23.json | ||
| skip-duplicated-pytest-in-precommit-ci-2026-08-23.json | ||
| split-boot-repair-2026-08-23.json | ||
| suite-speedup-2026-08-23.json | ||
| syncyomi-local-fork-build-2026-08-28.json | ||
| template.json | ||
| thorium-repairs-tests-2026-08-23.json | ||
| token-audit-batching-axis-2026-08-28.json | ||
| ubuntu-perf-fixes-tests-2026-08-23.json | ||
| website-admin-editor-unit-2026-08-29.json | ||
| website-blog-directory-index-2026-08-29.json | ||
| website-force-recreate-2026-08-29.json | ||
| wire-shell-coverage-ratchet-2026-08-23.json | ||
| wire-structure-gates-2026-08-23.json | ||