mirror of
https://github.com/kuhyx/testsAndMisc.git
synced 2026-11-11 20:34:02 +01:00
Krzysztof kuhy Rudnicki
334c0cd904
Some checks are pending
dependency freshness / dependencies on newest stable (push) Waiting to run
md-naming / markdown naming convention (push) Waiting to run
Pre-commit checks / pre-commit (push) Waiting to run
Shell tests / shell-tests (push) Waiting to run
Shell tests / arch-tests (push) Waiting to run
`write_nftables_ruleset` emitted a forward chain with `policy drop` and no rules at all. That chain runs at the same netfilter hook as Docker's own DOCKER-USER/DOCKER-FORWARD chains, so it vetoed them: every bridged container lost outbound networking while the host itself stayed online, so nothing looked broken. It cost the Signal bot three silent hours today. signal-cli lost its connection to Signal at 15:32:50 and looped on reconnect for 2.5h, while the bot kept answering /healthz with 200 -- `/v1/groups` still served from local state, so every surface said healthy. `flush ruleset` also deletes Docker's own tables, and dockerd only rebuilds them on its next network event, so restore_docker_rules() now restarts docker right after a successful apply. Verified in vmbox (Arch guest, docker installed, alpine probe): BASELINE=reachable -> OLD=blocked -> NEW=reachable, sshd active throughout. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KbjfWdAyHbCubac7wJKJZW |
||
|---|---|---|
| .. | ||
| tests | ||
| aw_autostart.sh | ||
| aw_install.sh | ||
| aw_service.sh | ||
| dns_dhcp.sh | ||
| dns_firewall.sh | ||
| dns_units.sh | ||
| dot_resolver_install.sh | ||
| dwm_config.sh | ||
| gitea_network.sh | ||
| kcd2_autorebuild.sh | ||
| kcd2_expose.sh | ||
| kcd2_serve.sh | ||
| local_llm_model.sh | ||
| mobile_service.sh | ||
| nc_discover.sh | ||
| nc_flash.sh | ||
| nc_image.sh | ||
| nc_packages.sh | ||
| nc_php.sh | ||
| nc_remote_flash.sh | ||
| nc_remote.sh | ||
| nc_services.sh | ||
| pi_flash_exec.sh | ||
| pi_flash_image.sh | ||
| pi_flash_remote.sh | ||
| rpi_nc_ca.sh | ||
| rpi_nc_deps.sh | ||
| rpi_nc_fixes.sh | ||
| rpi_nc_install.sh | ||
| rpi_nc_ssl_remote.sh | ||
| rpi_nc_ssl.sh | ||
| rpi_nc_system.sh | ||
| searxng_expose.sh | ||
| searxng_limiter.sh | ||
| searxng_settings.sh | ||
| searxng_stack.sh | ||
| searxng_start.sh | ||
| searxng_status.sh | ||
| syncyomi_expose.sh | ||
| syncyomi_stack.sh | ||
| unreal_mcp_repo.sh | ||
| website_admin.sh | ||
| website_build.sh | ||
| wg_firewall.sh | ||
| wg_keys.sh | ||
| wg_sshd.sh | ||