Pass Nextcloud backup restore drill for Forgejo (T09)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 9s

Decrypt production forgejo-dump artifact, restore 14 repos in isolated
namespace, and harden restore script for large chunked copy and drill mailer stub.
This commit is contained in:
tegwick 2026-07-07 22:44:55 +02:00
parent 8ea13a065b
commit 1da9c3269b
3 changed files with 74 additions and 15 deletions

View file

@ -450,11 +450,13 @@ Acceptance:
post-restore API checks: health 200, `coulomb/glas-harness` and
`coulomb/key-cape` on `main`, 3 org repos visible. Evidence:
`docs/forgejo-restore-drill-evidence.md`. Assets: `infra/forgejo-restore-drill/`,
`tools/forgejo-restore-drill.sh`. **Target decided (T02 Option A).** **Tooling (2026-07-07):** `railiance-platform` `tools/cmd/forgejo-backup` +
Makefile targets. Fixed websocket EOF on large dumps (use `kubectl cp` after
in-pod dump). **First scheduled-path backup:** 20260707T180844Z (~686M, 14 repos).
Daily cron installed (02:15 UTC). Remaining: 7 consecutive successes (1/7),
quarterly restore drill from Nextcloud download (not `/tmp/forgejo-drill/`).
`tools/forgejo-restore-drill.sh`. **Target decided (T02 Option A).** **Tooling (2026-07-08):** `railiance-platform` `tools/cmd/forgejo-backup` +
Makefile targets. **First scheduled backup:** 20260707T180844Z (~686M, 14 repos).
Daily cron 02:15 UTC. **Nextcloud restore drill passed 2026-07-08** — decrypt
uploaded `.age` artifact, chunked copy, 14 org repos restored in
`forgejo-restore-drill` (evidence: `docs/forgejo-restore-drill-evidence.md`).
Remaining: 7 consecutive backup successes (gate counting); Nextcloud file-drop
is upload-only — read-lane TBD for DR without workstation cache.
**Done when:** a fresh backup restores to a working isolated Forgejo instance
with repository, package, and user recovery checks passing **and** scheduled
@ -594,12 +596,10 @@ T05+T08 ──► T10 migration ladder ──► T11 production cutover ──
T03 isolated probe: CANCELLED (superseded by T05 + in-production pilots)
```
**Current focus (2026-07-08):** T05/T06/T07/T08 **done**; T10 tiers 02.5 **complete**
(tier-2.5 hub `remote_url` patched). Tier-3 `state-hub` stabilization; backup
7-day gate **1/7**. Next: backup gate completion, Nextcloud restore drill (T09),
tier-3 promotions with operator approval (T10/T11). `ops-warden` hub patch
pending approval. Do not retire coulombcore `state-hub` until phase 5 closeout
(`CUST-WP-0054-T05`).
**Current focus (2026-07-08):** T05/T06/T07/T08 **done**; T09 **restore drill from
offsite backup passed**; backup 7-day gate counting. T10 tiers 02.5 complete.
Next: complete 7-day backup gate, tier-3 promotions with operator approval
(T10/T11). `ops-warden` hub patch pending approval.
**Absorbed by `CUST-WP-0054-T04`:** forge + CI on railiance01; workstation
build retirement; staged repo promotion before State Hub primary move (T05).