Recover stopped HA leases and empty allocator sources #29

Merged
Alex merged 4 commits from fix/28-restore-management into fix/25-remove-legacy-dhcp-dns 2026-10-21 19:13:06 +02:00
Owner

Pending backup restore previously attempted normal native lease capture before management interfaces were restored, so an old HA address could prevent the agent from starting. The recovery path now inspects stopped lease stores under the existing durable restore fence, preserving ordinary live-capture HA safety checks.

A separate RZ prerequisite failure involved a verified exactly empty stopped legacy allocator source with no factory marker. A truthful empty-source retirement proof now permits native startup without forged factory/upgrade provenance. Tests cover before/after behavior, running-service rejection, missing/nonempty files, and consumed/corrupt native receipts. The unchanged original RZ empty file and completed protected handoff were verified on-device.

This PR targets the issue25 branch so its tested combined tree can subsequently land in main through PR #27. Partially addresses #28; keep #28 open for documented deferred startup/restore availability failures.

Validation

Final combined source: b5975f128a305fea919386e4b3150977058a50842f3a1916e511fc5096f98530, based on main 05f7e29 (including PR #30). Full make check passed: Go race tests, vet, 325 UI tests, and Svelte zero errors/warnings. Combined make check-build passed. Independent static review of implementation, regression tests, integration, scripts and existing evidence found no substantive findings.

Scope7, Minis-Forum and RZ-VM run the exact final source binary, SHA256 ea904ab327cb16077d888faefa33b23aee1df71e4bf9279695a04be27f254d77. API readiness, full configuration equality and no pending transaction passed on each. Authorized SQLite purge/backup restore completed on all three. Scope7 cold reboot restored management automatically; RZ restored and rebooted successfully. Minis-Forum required an agent restart after link readiness; that remaining startup problem is documented in #28. Final binary updates preserved configuration without another purge or native-service stop.

Staticcheck 2026.2.1 was executed separately: exit 1, 108 existing diagnostics versus 112 on clean main, zero new diagnostics. The Makefile's optional lint probe skipped staticcheck because the task-private tool was outside PATH; the explicit run and baseline comparison supply its actual result. The user explicitly accepted this inherited-check exception and authorized merge. Follow-up tracking: #31. Broader availability findings remain deferred in #28, which must stay open.

Pending backup restore previously attempted normal native lease capture before management interfaces were restored, so an old HA address could prevent the agent from starting. The recovery path now inspects stopped lease stores under the existing durable restore fence, preserving ordinary live-capture HA safety checks. A separate RZ prerequisite failure involved a verified exactly empty stopped legacy allocator source with no factory marker. A truthful empty-source retirement proof now permits native startup without forged factory/upgrade provenance. Tests cover before/after behavior, running-service rejection, missing/nonempty files, and consumed/corrupt native receipts. The unchanged original RZ empty file and completed protected handoff were verified on-device. This PR targets the issue25 branch so its tested combined tree can subsequently land in main through PR #27. Partially addresses #28; keep #28 open for documented deferred startup/restore availability failures. ## Validation Final combined source: `b5975f128a305fea919386e4b3150977058a50842f3a1916e511fc5096f98530`, based on main `05f7e29` (including PR #30). Full `make check` passed: Go race tests, vet, 325 UI tests, and Svelte zero errors/warnings. Combined `make check-build` passed. Independent static review of implementation, regression tests, integration, scripts and existing evidence found no substantive findings. Scope7, Minis-Forum and RZ-VM run the exact final source binary, SHA256 `ea904ab327cb16077d888faefa33b23aee1df71e4bf9279695a04be27f254d77`. API readiness, full configuration equality and no pending transaction passed on each. Authorized SQLite purge/backup restore completed on all three. Scope7 cold reboot restored management automatically; RZ restored and rebooted successfully. Minis-Forum required an agent restart after link readiness; that remaining startup problem is documented in #28. Final binary updates preserved configuration without another purge or native-service stop. Staticcheck 2026.2.1 was executed separately: **exit 1**, 108 existing diagnostics versus 112 on clean main, zero new diagnostics. The Makefile's optional lint probe skipped staticcheck because the task-private tool was outside PATH; the explicit run and baseline comparison supply its actual result. The user explicitly accepted this inherited-check exception and authorized merge. Follow-up tracking: #31. Broader availability findings remain deferred in #28, which must stay open.
Alex changed title from [WIP] Inspect stopped HA leases during restore startup to [WIP] Recover stopped HA leases and empty allocator sources 2026-10-21 18:52:34 +02:00
Alex changed title from [WIP] Recover stopped HA leases and empty allocator sources to Recover stopped HA leases and empty allocator sources 2026-10-21 19:07:37 +02:00
Alex merged commit 498ac17df5 into fix/25-remove-legacy-dhcp-dns 2026-10-21 19:13:06 +02:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Alex/kaido-core!29
No description provided.