pdurlej/platform

Fork 0

fix(cutover): remount shelfmark data import #587

Merged

pdurlej merged 1 commit from codex/m01-remount-shelfmark-data into main

2026-05-29 00:26:12 +02:00

codex commented

2026-05-29 00:25:01 +02:00

Collaborator

Canary status: missing — fire canary 3+3 manually before merge

Summary

M01 stateful remount batch for shelfmark.

This PR moves Shelfmark data defaults to the prepared legacy-import path:

/opt/pdurlej-platform/runtime/legacy-import/data/shelfmark

It covers:

/books from downloads
/config from config

The old legacy path remains available as an explicit rollback env var for one rollback cycle.

Canary Context Pack

Product story

M01 needs active services to stop depending on /opt/vps-home-platform-infra before quarantine/destructive cleanup. shelfmark is a small, healthy, tailnet service with low-volume state and an existing healthcheck, making it a controlled first stateful remount after config-only batches.

What changed

compose/apps/compose.yaml: shelfmark mounts now default to copied legacy-import data root.
modules/shelfmark/runbook.md: documents data source and rollback env var.

Why it changed

The legacy root must stop being the default runtime source. This keeps the old path as rollback material while making the canonical release root independent of the legacy project tree.

Files touched

compose/apps/compose.yaml
modules/shelfmark/runbook.md

Relevant context

M01 RS2000 closeout critical path
Prior remount batches applied cleanly: ntfy, dashboard, searxng, coredns, matrix-well-known
This is stateful, so it is split as its own PR

Runtime evidence

Prep copy already run on RS2000 before this PR:

scripts/cutover/prepare-legacy-import.sh --dry-run --path data/shelfmark/config
scripts/cutover/prepare-legacy-import.sh --yes --path data/shelfmark/config
target_size 2.1M /opt/pdurlej-platform/runtime/legacy-import/data/shelfmark/config

scripts/cutover/prepare-legacy-import.sh --dry-run --path data/shelfmark/downloads
scripts/cutover/prepare-legacy-import.sh --yes --path data/shelfmark/downloads
target_size 4.0K /opt/pdurlej-platform/runtime/legacy-import/data/shelfmark/downloads

No service restart was performed for this PR.

Known constraints

This does not delete or quarantine legacy paths.
This does not change Shelfmark data contents intentionally.
This does not recreate the container before merge.

Explicit out-of-scope

destructive cleanup
quarantine/tombstone
NP family data
Matrix/Synapse data
Traefik ACME/certs

Requested decision

Approve this as the first small stateful remount if checks are green or pending-only Actions are handled by admin force-merge under operator authorization.

Merge blockers

copied Shelfmark targets missing on RS2000
compose syntax failure
local validation failure
reviewer identifies a rollback risk not covered by rollback env var

Validation

git diff --check: passed
PYTHONPATH=control-plane uv run --project control-plane python -m platformctl.cli validate all --json: passed, exit 0

Spec sources read

compose/apps/compose.yaml — mount declaration
modules/shelfmark/runbook.md — operator rollback/runbook update

Non-goals

No DB, no service, no webhooks, no issue/comment mutation, no destructive cleanup.

Canary status: missing — fire canary 3+3 manually before merge ## Summary M01 stateful remount batch for `shelfmark`. This PR moves Shelfmark data defaults to the prepared `legacy-import` path: `/opt/pdurlej-platform/runtime/legacy-import/data/shelfmark` It covers: - `/books` from `downloads` - `/config` from `config` The old legacy path remains available as an explicit rollback env var for one rollback cycle. ## Canary Context Pack ### Product story M01 needs active services to stop depending on `/opt/vps-home-platform-infra` before quarantine/destructive cleanup. `shelfmark` is a small, healthy, tailnet service with low-volume state and an existing healthcheck, making it a controlled first stateful remount after config-only batches. ### What changed - `compose/apps/compose.yaml`: `shelfmark` mounts now default to copied `legacy-import` data root. - `modules/shelfmark/runbook.md`: documents data source and rollback env var. ### Why it changed The legacy root must stop being the default runtime source. This keeps the old path as rollback material while making the canonical release root independent of the legacy project tree. ### Files touched - `compose/apps/compose.yaml` - `modules/shelfmark/runbook.md` ### Relevant context - M01 RS2000 closeout critical path - Prior remount batches applied cleanly: `ntfy`, `dashboard`, `searxng`, `coredns`, `matrix-well-known` - This is stateful, so it is split as its own PR ### Runtime evidence Prep copy already run on RS2000 before this PR: ```text scripts/cutover/prepare-legacy-import.sh --dry-run --path data/shelfmark/config scripts/cutover/prepare-legacy-import.sh --yes --path data/shelfmark/config target_size 2.1M /opt/pdurlej-platform/runtime/legacy-import/data/shelfmark/config scripts/cutover/prepare-legacy-import.sh --dry-run --path data/shelfmark/downloads scripts/cutover/prepare-legacy-import.sh --yes --path data/shelfmark/downloads target_size 4.0K /opt/pdurlej-platform/runtime/legacy-import/data/shelfmark/downloads ``` No service restart was performed for this PR. ### Known constraints - This does not delete or quarantine legacy paths. - This does not change Shelfmark data contents intentionally. - This does not recreate the container before merge. ### Explicit out-of-scope - destructive cleanup - quarantine/tombstone - NP family data - Matrix/Synapse data - Traefik ACME/certs ### Requested decision Approve this as the first small stateful remount if checks are green or pending-only Actions are handled by admin force-merge under operator authorization. ### Merge blockers - copied Shelfmark targets missing on RS2000 - compose syntax failure - local validation failure - reviewer identifies a rollback risk not covered by rollback env var ## Validation - `git diff --check`: passed - `PYTHONPATH=control-plane uv run --project control-plane python -m platformctl.cli validate all --json`: passed, exit 0 ## Spec sources read - `compose/apps/compose.yaml` — mount declaration - `modules/shelfmark/runbook.md` — operator rollback/runbook update ## Non-goals No DB, no service, no webhooks, no issue/comment mutation, no destructive cleanup.

codex added this to the 01 - RS2000 closeout and legacy cleanup milestone

2026-05-29 00:25:01 +02:00

codex added the

risk/runtime

cutover-gate

phase/03

class/security-sensitive

labels