simpletest/who_need_help
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Record isolated clean deployment evidence

Browse Source
This commit is contained in:
SimpleTest 2026-07-23 23:01:37 +03:00
parent 71510a2ab4
commit 591384f2b7
2 changed files with 20 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docs/operations.md
View File

@ -641,15 +641,18 @@ independent one-run PostgreSQL, Phoenix, handover, BEAM-cookie, and metrics
secrets with mode `0600`; optional GitHub OAuth and push delivery stay secrets with mode `0600`; optional GitHub OAuth and push delivery stay
disabled. disabled.
The drill uses a unique Compose project, application image, router/service The drill uses a unique Compose project, application image, Docker socket
name, internal network, PostgreSQL volume, database, and dynamic host ports. proxy image, PostGIS image, Traefik image, router/service name, internal
network, PostgreSQL volume, database, and dynamic host ports.
It requires exactly two healthy web and two running worker replicas, all It requires exactly two healthy web and two running worker replicas, all
tracked migrations, seeded categories, an idempotent repeated migration, tracked migrations, seeded categories, an idempotent repeated migration,
working readiness/home/registration/Mailpit routes, four connected BEAM working readiness/home/registration/Mailpit routes, four connected BEAM
nodes, and a cross-replica PubSub message. It then removes the exact project nodes, and a cross-replica PubSub message. It then removes the exact project
including volumes, its one-run image, and the temporary archive, and verifies including volumes, all four one-run images, and the temporary archive, and
that those scoped resources are absent. Evidence is retained under verifies that every scoped resource is absent. If Compose validation fails
`output/portability/<run-id>/`. before project creation, cleanup avoids invoking an unrenderable Compose
configuration and still verifies that the generated scope is absent. Evidence
is retained under `output/portability/<run-id>/`.
This is a local Docker portability observation. It does not establish This is a local Docker portability observation. It does not establish
production SMTP, OAuth, push-provider, TLS, database-HA, storage, capacity, or production SMTP, OAuth, push-provider, TLS, database-HA, storage, capacity, or

12
docs/verification.md
View File

@ -64,6 +64,18 @@ edit, branch, or tag was made during this audit.
checks on two web and two worker replicas. Evidence is checks on two web and two worker replicas. Evidence is
`output/upgrade-rehearsal/20260723195143-1759181`; the exact rehearsal `output/upgrade-rehearsal/20260723195143-1759181`; the exact rehearsal
containers, networks, volume, database, and image were absent afterward. containers, networks, volume, database, and image were absent afterward.
- A clean deployment from the tracked archive at commit
`71510a2ab4fb5e2fb2aa65bdf05a358e5045923b` passed on Docker Engine
29.6.2 and Compose 5.3.1. It independently built the application, Docker
socket proxy, PostGIS, and Traefik images, applied all 18 migrations twice
without changing the 14 seeded categories, started two healthy web and two
healthy worker replicas, formed a four-node BEAM cluster, passed a
cross-node PubSub probe, and returned ready HTTP plus working home,
registration, and Mailpit responses. Evidence is
`output/portability/20260723195646-1902488-616f83`. After the run, exact
checks found zero project containers, networks, volumes, and one-run images;
the temporary tracked-archive workspace was absent, while both local and
public DEV readiness remained HTTP 200.
- Two web and two worker replicas, PostGIS, Mailpit, Traefik, and the scoped - Two web and two worker replicas, PostGIS, Mailpit, Traefik, and the scoped
Docker socket proxy were running after the audit. Both web replicas and both Docker socket proxy were running after the audit. Both web replicas and both
workers were healthy; public liveness and readiness returned `ok` and workers were healthy; public liveness and readiness returned `ok` and