coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record verified Forgejo Scaleway backup and recovery
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-06 01:03:02 +02:00
parent be45c4e3fd
commit 4a9d6e6c7f
8 changed files with 114 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

18
docs/backup-credential-recovery.md
View file

@ -127,3 +127,21 @@ prove that every restored package can be installed or every image pulled.
Package-consumer acceptance and broader disaster-recovery guarantees remain
with their owning assurance tasks. Full backups share the account's 10 GiB
quota; a newly measured archive size must inform the separate retention decision.
## WSL attended-login browser repair
If this host has no `xdg-open`, `x-www-browser` or `www-browser`, the installed
Bao browser launcher cannot open its login page. Warden contains that output,
so this presents as a failed callback before the owner command starts. Use:
```bash
python3 scripts/openbao-attended-exec.py -- /absolute/path/to/reviewed-silent-command
```
The wrapper keeps Warden's `openbao-platform-admin-login --exec` envelope and
adds a repository-scoped launcher only when all native providers are absent.
The launcher allows only the Keycloak HTTPS host and exact local OIDC callback;
it sends the URL to Windows PowerShell through stdin without recording it.
No token helper or captured Warden output may be inspected. A receipt written
by the owner command proves handoff; session cleanup is assessed separately
from the final Warden exit status.

10
docs/backup-provider-coverage.md
View file

@ -9,7 +9,7 @@ Backup, 10 GiB quota. Provider selection does not establish asset coverage.
| apps-pg | Scaleway Barman base backups + WAL, `platform-pg/apps-pg/` | Fresh isolated physical restore passed in 42.64 seconds; Nextcloud logical copy is separate |
| platform-pg | Scaleway Barman base backups + WAL, `platform-pg/` | Earlier package restore evidence; independent logical Nextcloud copy |
| platform-pg-2 | Scaleway Barman base backups + WAL, `platform-pg/platform-pg-2/` | Earlier package restore evidence; independent logical Nextcloud copy |
| forgejo-db | No native Barman destination observed | Logical SQL/full archive helper targets Nextcloud; primary coverage needs implementation |
| forgejo-db | Scaleway Barman base backups + WAL, `platform-pg/forgejo-db/`; daily 02:35 UTC, 30-day retention | Fresh isolated physical restore passed in 45.08 seconds; full archive coverage remains separate |
| Forgejo repositories/packages/blobs | No reviewed Scaleway archive destination found | Corrected full-archive capture; 5.35 GB verified encrypted artifact staged; secondary download/application restore still pending |
| net-kingdom-pg / state-hub-db | No native Barman destination observed | Do not infer protection from the shared cells' healthy backup status |
| OpenBao / S1 host configuration | Not evaluated by this database restore | Their own encrypted snapshot/host backup and recovery contracts still apply |
@ -37,11 +37,15 @@ or assume a top-level `forgejo/` prefix is permitted. Before extending coverage:
3. Use a streaming multipart S3 uploader for growing archives, with abort/cleanup
and immutable object naming. Verify completion and content, then recover by
GET from Scaleway into the isolated Forgejo procedure.
4. Set native forgejo-db Barman coverage through its owning package/source,
with a separate tested recovery and no production in-place restore.
4. Native forgejo-db Barman coverage and isolated recovery are complete in
RPF-WP-0038-T02/T03. See `docs/evidence/forgejo-scaleway-restore-2026-09-06.json`.
5. Record provider-native retention and primary failure reporting separately
from the 10 GiB secondary budget. No retained backup deletion is implicit.
WP-0029 remains the secondary credential incident: old Bernd-share invalidation
and replacement recovery. The full primary coverage gap belongs to S3 assurance
(RPF-WP-0036-T03), with forge requirements and package/storage-owner inputs.
RPF-WP-0038-T04 tracks the remaining primary full-archive delivery and application
recovery contract. Native database recovery verified 142 repository records,
six users and 2,040 package blob records; it did not recover the blob files.

13
docs/evidence/forgejo-scaleway-activation-2026-09-06.json Normal file
View file

@ -0,0 +1,13 @@
{
"schema": "platform.forgejo-primary-backup.v1",
"status": "verified",
"backup_contract_applied": true,
"started_at": "2026-09-05T22:50:09.663787+00:00",
"backup_name": "forgejo-db-daily-20260905225013",
"backup_id": "20260905T225115",
"backup_phase": "completed",
"production_ready": true,
"continuous_archiving": true,
"destination": "s3://railiance-platform-pg-backup/platform-pg/forgejo-db/",
"retention": "30d"
}

22
docs/evidence/forgejo-scaleway-restore-2026-09-06.json Normal file
View file

@ -0,0 +1,22 @@
{
"schema": "platform.scaleway-primary-restore.v1",
"status": "verified",
"namespace": "forgejo-db-recovery-ad1aff99",
"primary_destination": "s3://railiance-platform-pg-backup/platform-pg/forgejo-db/",
"last_successful_backup": "2026-09-05T22:51:32Z",
"source": "Scaleway Barman base backup and WAL",
"started_at": "2026-09-05T22:54:35.917727+00:00",
"stage": "database_acceptance",
"restore_seconds": 45.08,
"databases": [
"app",
"forgejo",
"postgres"
],
"repository_count": 142,
"user_count": 6,
"package_blob_count": 2040,
"production_ready": true,
"cleanup": true,
"finished_at": "2026-09-05T22:55:54.893587+00:00"
}