58 lines
1.7 KiB
Markdown
58 lines
1.7 KiB
Markdown
|
# Runbook: profile.sandbox-canary
|
||
|
|
|
||
|
|
Self-deploy sand-boxer to verify host health and return telemetry.
|
||
|
|
|
||
|
|
## Quick start
|
||
|
|
|
||
|
|
```bash
|
||
|
|
export SANDBOXER_HOST=coulombcore
|
||
|
|
export SANDBOXER_COMPOSE_CMD=podman-compose # CoulombCore
|
||
|
|
|
||
|
|
sandboxer create # no args — canary self-deploy + IntrospectionReport
|
||
|
|
```
|
||
|
|
|
||
|
|
## What you get on `ready`
|
||
|
|
|
||
|
|
`SandboxStatus.telemetry` contains:
|
||
|
|
|
||
|
|
- **provision_delta** — host load/memory/container counts before vs after
|
||
|
|
- **inventory** — sandbox dirs and compose projects on host
|
||
|
|
- **stale_candidates** — orphans and aged sandboxes (dry-run recommendations)
|
||
|
|
|
||
|
|
Human summary prints to stderr:
|
||
|
|
|
||
|
|
```
|
||
|
|
Telemetry: load Δ +0.12, mem avail Δ -48 MB, stale candidates: 0
|
||
|
|
```
|
||
|
|
|
||
|
|
Artifacts: `~/.local/share/sandboxer/telemetry/<sandbox_id>.json`
|
||
|
|
|
||
|
|
## Inspect without creating
|
||
|
|
|
||
|
|
```bash
|
||
|
|
sandboxer inspect host
|
||
|
|
sandboxer inspect stale --older-than 24
|
||
|
|
sandboxer reap-stale --dry-run
|
||
|
|
sandboxer reap-stale --apply --older-than 48 # destructive — review dry-run first
|
||
|
|
```
|
||
|
|
|
||
|
|
## Destroy
|
||
|
|
|
||
|
|
```bash
|
||
|
|
sandboxer destroy <sandbox_id>
|
||
|
|
```
|
||
|
|
|
||
|
|
Destroy telemetry includes **destroy_delta** (load recovery after teardown).
|
||
|
|
|
||
|
|
## Verification checklist (SAND-WP-0008-T10)
|
||
|
|
|
||
|
|
1. `sandboxer create` → `ready` + `telemetry.provision_delta`
|
||
|
|
2. `sandboxer inspect host` → metrics consistent with create report
|
||
|
|
3. Fake stale dir: `ssh host 'mkdir -p /tmp/sandboxer/fake99'` → appears in `inspect stale`
|
||
|
|
4. `sandboxer destroy` → `destroy_delta` shows load/mem recovery
|
||
|
|
|
||
|
|
## Optimization notes (activity-core follow-up)
|
||
|
|
|
||
|
|
- Schedule periodic `sandboxer create` canary on sandboxer01
|
||
|
|
- Reap policy: `--older-than 24` with human-approved `--apply`
|
||
|
|
- Disk pressure alerts when `disk_root_avail_gb` < threshold
|