pdurlej/platform

Fork 0

docs(ops): record rs2000 ubuntu update preflight #706

Merged

pdurlej merged 1 commit from codex/608-rs2000-ubuntu-preflight into main

2026-06-04 11:25:14 +02:00

codex commented

2026-06-04 11:17:55 +02:00

Collaborator

Canary status: not required — docs/evidence-only preflight report

Summary

Records a read-only RS2000 Ubuntu update/reboot preflight for issue #608.

This PR does not apply packages, enable ESM, restart services, mutate Docker, or reboot the host.

What changed

Added state/reports/rs2000-ubuntu-update-preflight-2026-06-04.md.
Captured sanitized package, reboot-required, ESM, Docker health, and critical endpoint evidence.
Recorded gates for package apply, reboot, and post-reboot smoke.

Key findings

Ubuntu 24.04.4 LTS, kernel 6.8.0-110-generic.
Reboot is still required.
Upgradeable packages observed: 5.
Critical containers checked were running/healthy.
Docker unhealthy container count: 0.
Forgejo health: HTTP 200.
Infisical health: HTTP 200.
Zombie process count: 12.
Ubuntu Pro is not attached; ESM remains disabled.

Decision

Status is not ready for update/reboot execution because the M02 Synology hot-backup gate is not yet green. This is planning evidence only.

Runtime evidence

Read-only SSH commands only:

apt list --upgradable
apt-get -s upgrade
apt-get -s dist-upgrade
pro status
docker ps
docker inspect for critical containers
curl health checks for Forgejo and Infisical
free, /proc/loadavg, ps

Out of scope

No apt upgrade.
No package removal.
No ESM enablement.
No service restart.
No Docker mutation.
No reboot.
No distro upgrade.
No module/image upgrades.

Validation

git diff --check — passed.

Refs #608. Does not close #608; execution remains operator-gated.

Canary status: not required — docs/evidence-only preflight report ## Summary Records a read-only RS2000 Ubuntu update/reboot preflight for issue #608. This PR does not apply packages, enable ESM, restart services, mutate Docker, or reboot the host. ## What changed - Added `state/reports/rs2000-ubuntu-update-preflight-2026-06-04.md`. - Captured sanitized package, reboot-required, ESM, Docker health, and critical endpoint evidence. - Recorded gates for package apply, reboot, and post-reboot smoke. ## Key findings - Ubuntu 24.04.4 LTS, kernel `6.8.0-110-generic`. - Reboot is still required. - Upgradeable packages observed: 5. - Critical containers checked were running/healthy. - Docker unhealthy container count: 0. - Forgejo health: HTTP 200. - Infisical health: HTTP 200. - Zombie process count: 12. - Ubuntu Pro is not attached; ESM remains disabled. ## Decision Status is **not ready for update/reboot execution** because the M02 Synology hot-backup gate is not yet green. This is planning evidence only. ## Runtime evidence Read-only SSH commands only: - `apt list --upgradable` - `apt-get -s upgrade` - `apt-get -s dist-upgrade` - `pro status` - `docker ps` - `docker inspect` for critical containers - `curl` health checks for Forgejo and Infisical - `free`, `/proc/loadavg`, `ps` ## Out of scope - No `apt upgrade`. - No package removal. - No ESM enablement. - No service restart. - No Docker mutation. - No reboot. - No distro upgrade. - No module/image upgrades. ## Validation - `git diff --check` — passed. Refs #608. Does not close #608; execution remains operator-gated.

codex added 1 commit

2026-06-04 11:17:55 +02:00

docs(ops): record rs2000 ubuntu update preflight

base-is-main / guard (pull_request) Successful in 2s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

patchwarden-client-dry-run / collect-diff (pull_request) Successful in 3s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s

Details

canary-required / canary (pull_request) Has been skipped

Details

patchwarden-client-dry-run / dry-run (pull_request) Successful in 30s

Details

patchwarden-pr-sanity / sanity (pull_request) Successful in 54s

Details

6e161b9d5e

codex commented

2026-06-04 11:21:18 +02:00

Author

Collaborator

Patchwarden PR sanity

Status: eligible_sanity_clean
PR: 706
Commit: 6e161b9d5ef54d2b34c775722182409158440f5e
Security-sensitive label: missing
Authority: advisory model review plus deterministic blockers only
3+3 canary: still alive; this does not replace it

Deterministic findings

No deterministic findings.

Model reviewers

`global-glm` / `glm-5.1:cloud`

Status: ok
Verdict: OK
Findings: none

`global-deepseek` / `deepseek-v4-pro:cloud`

Status: ok
Verdict: OK
Findings: none

`redteam` / `kimi-k2.6:cloud`

Status: ok
Verdict: OK
Findings: none

Policy notes

GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot.
Optional red-team model is enabled only when PLATFORMCTL_PR_SANITY_REDTEAM_MODEL is configured.
Auto-merge is not enabled here.

# Patchwarden PR sanity - Status: `eligible_sanity_clean` - PR: `706` - Commit: `6e161b9d5ef54d2b34c775722182409158440f5e` - Security-sensitive label: `missing` - Authority: advisory model review plus deterministic blockers only - 3+3 canary: still alive; this does not replace it ## Deterministic findings No deterministic findings. ## Model reviewers ### `global-glm` / `glm-5.1:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `global-deepseek` / `deepseek-v4-pro:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `redteam` / `kimi-k2.6:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ## Policy notes - GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot. - Optional red-team model is enabled only when `PLATFORMCTL_PR_SANITY_REDTEAM_MODEL` is configured. - Auto-merge is not enabled here.