ops(rs2000-legacy): refresh live bind-mount inventory before migration batches #543

New issue

Closed

opened 2026-05-28 01:37:52 +02:00 by codex · 1 comment

codex commented

2026-05-28 01:37:52 +02:00

Collaborator

Scope

Create a fresh read-only inventory of every running container still bind-mounting /opt/vps-home-platform-infra.

This is the baseline issue for all migration batches and the destructive backup cleanup gate.

Observed baseline on 2026-05-28

/opt/vps-home-platform-infra: 214G
/opt/vps-home-platform-infra/backups: 213G
Running containers with legacy bind mounts: 21

Spec sources

state/cutover/rs2000-post-soak-legacy-cleanup.md Phase 0 and Phase 2
state/roadmap/current-platform-roadmap.md Milestone 01
Current live RS2000 Docker mount inventory

Acceptance criteria

A sanitized inventory artifact lists container, image, source path, destination path, rw/ro.
Unique source paths are grouped by service family.
The artifact names which follow-up issue owns each path.
No runtime mutation.
No secret values or file contents are captured.

Out of scope

Moving data/config.
Deleting backups.
Recreating containers.

Common safety rules

Recommended executor: Gemini 3.5 Flash local for repo/doc/plan work.
Do not delete, rename, prune, or edit /opt/vps-home-platform-infra in this issue.
Do not print secrets, env values, private messages, emails, or Iskra memory.
Runtime execution requires a separate explicit operator approval in the PR/issue thread.
First step is always read-only evidence refresh.
Preserve ownership, modes, symlinks, and timestamps when copying data/config.
Update compose/module docs through a PR before recreating affected services.
Recreate only affected service(s), never the whole platform, unless a later operator gate says otherwise.

## Scope Create a fresh read-only inventory of every running container still bind-mounting `/opt/vps-home-platform-infra`. This is the baseline issue for all migration batches and the destructive backup cleanup gate. ## Observed baseline on 2026-05-28 - `/opt/vps-home-platform-infra`: 214G - `/opt/vps-home-platform-infra/backups`: 213G - Running containers with legacy bind mounts: 21 ## Spec sources - `state/cutover/rs2000-post-soak-legacy-cleanup.md` Phase 0 and Phase 2 - `state/roadmap/current-platform-roadmap.md` Milestone 01 - Current live RS2000 Docker mount inventory ## Acceptance criteria - A sanitized inventory artifact lists container, image, source path, destination path, rw/ro. - Unique source paths are grouped by service family. - The artifact names which follow-up issue owns each path. - No runtime mutation. - No secret values or file contents are captured. ## Out of scope - Moving data/config. - Deleting backups. - Recreating containers. ## Common safety rules - Recommended executor: Gemini 3.5 Flash local for repo/doc/plan work. - Do not delete, rename, prune, or edit `/opt/vps-home-platform-infra` in this issue. - Do not print secrets, env values, private messages, emails, or Iskra memory. - Runtime execution requires a separate explicit operator approval in the PR/issue thread. - First step is always read-only evidence refresh. - Preserve ownership, modes, symlinks, and timestamps when copying data/config. - Update compose/module docs through a PR before recreating affected services. - Recreate only affected service(s), never the whole platform, unless a later operator gate says otherwise.

codex added this to the 01 - RS2000 closeout and legacy cleanup milestone

2026-05-28 01:37:52 +02:00

codex added the

ready-for-agent

risk/runtime

risk/process

class/security-sensitive

labels

2026-05-28 01:37:52 +02:00

codex commented

2026-05-29 01:04:22 +02:00

Author

Collaborator

Inventory refreshed after PRs #583-#593 and runtime apply.

Current sanitized legacy mount summary:

total legacy mounts across all containers: 16
running legacy mounts: 14
exited legacy mounts: 2
zero unhealthy containers

Remaining running families and owning issues:

Matrix/Synapse/Element: #545
NP core + Obsidian vault: #546
NP apps + Radicale config/data: #547
OpenClaw Mail gateway/worker config: #544

Remaining exited/archived mounts:

vault-bootstrap env/scripts: #555; do not rerun the archived oneshot as part of routine cleanup.

Completed families closed separately: dashboard, shelfmark, Traefik, Honcho Postgres init, edge utility config, Vault running config, audio-mcp.

No secret values or private file contents were captured.

Inventory refreshed after PRs #583-#593 and runtime apply. Current sanitized legacy mount summary: - total legacy mounts across all containers: 16 - running legacy mounts: 14 - exited legacy mounts: 2 - zero unhealthy containers Remaining running families and owning issues: - Matrix/Synapse/Element: #545 - NP core + Obsidian vault: #546 - NP apps + Radicale config/data: #547 - OpenClaw Mail gateway/worker config: #544 Remaining exited/archived mounts: - `vault-bootstrap` env/scripts: #555; do not rerun the archived oneshot as part of routine cleanup. Completed families closed separately: dashboard, shelfmark, Traefik, Honcho Postgres init, edge utility config, Vault running config, audio-mcp. No secret values or private file contents were captured.

codex closed this issue

2026-05-29 01:04:23 +02:00