wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

fix(cd): keep backup pressure receipts on controlled profile
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 1s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 38s
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Your Name
2026-07-01 23:38:32 +08:00
parent fffebf9597
commit 670cf9afd6
2 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
.gitea/workflows/cd.yaml
View File

@@ -534,6 +534,8 @@ jobs:
;;
ops/monitoring/alerts-unified.yml)
;;
ops/monitoring/alerts.yml)
;;
scripts/dev/awoooi-navigation-coverage-guard.py)
;;
scripts/ci/wait-host-web-build-pressure.sh)
@@ -544,18 +546,28 @@ jobs:
# require the host Docker socket.
scripts/backup/backup-awoooi-frequent.sh)
;;
scripts/backup/backup-status.sh)
;;
scripts/backup/gitea-repo-bundle-backup.sh)
;;
scripts/backup/tests/test_backup_status_contract.py)
;;
scripts/ops/backup-alert-label-contract-check.py)
;;
scripts/ops/backup-health-textfile-exporter.py)
;;
scripts/ops/tests/test_backup_health_textfile_exporter.py)
;;
scripts/ops/tests/test_host_pressure_alert_contract.py)
;;
scripts/reboot-recovery/deploy-to-110.sh)
;;
scripts/reboot-recovery/deploy-to-188.sh)
;;
scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh)
;;
scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh)
;;
scripts/reboot-recovery/awoooi-startup.sh)
;;
scripts/reboot-recovery/awoooi-startup.service)
@@ -774,9 +786,11 @@ jobs:
../../scripts/reboot-recovery/momo-source-arrival-gate.py \
../../scripts/reboot-recovery/reboot-auto-recovery-slo-scorecard.py \
../../scripts/ops/backup-health-textfile-exporter.py \
../../scripts/ops/backup-alert-label-contract-check.py \
../../scripts/security/gitea-private-inventory-p0-scorecard.py \
../../scripts/security/gitea-authenticated-inventory-payload-validator.py
python3.11 -c "import yaml; yaml.safe_load(open('../../ops/monitoring/alerts-unified.yml')); print('alerts-unified YAML OK')"
python3.11 -c "import yaml; yaml.safe_load(open('../../ops/monitoring/alerts.yml')); print('alerts YAML OK')"
bash -n \
../../ops/runner/check-awoooi-110-controlled-cd-lane-readiness.sh \
../../ops/runner/check-awoooi-non110-runner-readiness.sh \
@@ -801,7 +815,9 @@ jobs:
../../scripts/reboot-recovery/repair-110-ssh-publickey-auth-local.sh \
../../scripts/reboot-recovery/verify-cold-start-monitor-deploy.sh \
../../scripts/backup/backup-awoooi-frequent.sh \
../../scripts/backup/backup-status.sh \
../../scripts/backup/gitea-repo-bundle-backup.sh
bash -n ../../scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh
DATABASE_URL="${DATABASE_URL:-postgresql+asyncpg://ci:ci@localhost/ci}" \
PYTHONFAULTHANDLER=1 python3.11 -m pytest \
tests/test_agent_replay_normalizer.py \
@@ -847,7 +863,9 @@ jobs:
../../ops/runner/test_install_awoooi_non110_runner_user_service.py \
../../ops/runner/test_check_awoooi_110_controlled_cd_lane_readiness.py \
../../ops/runner/test_verify_awoooi_non110_cd_closure.py \
../../scripts/backup/tests/test_backup_status_contract.py \
../../scripts/ops/tests/test_backup_health_textfile_exporter.py \
../../scripts/ops/tests/test_host_pressure_alert_contract.py \
../../scripts/reboot-recovery/tests/test_dr_escrow_evidence_checklist.py \
../../scripts/reboot-recovery/tests/test_cold_start_monitor_bounded_probes.py \
../../scripts/reboot-recovery/tests/test_momo_source_arrival_gate.py \

12
ops/runner/test_cd_controlled_runtime_profile.py
View File

@@ -104,11 +104,19 @@ def test_backup_freshness_sources_stay_on_controlled_runtime_profile() -> None:
text = _workflow_text()
expected_sources = [
"scripts/backup/backup-awoooi-frequent.sh)",
"scripts/backup/backup-status.sh)",
"scripts/backup/gitea-repo-bundle-backup.sh)",
"scripts/backup/tests/test_backup_status_contract.py)",
"scripts/ops/backup-alert-label-contract-check.py)",
"scripts/ops/backup-health-textfile-exporter.py)",
"scripts/ops/tests/test_backup_health_textfile_exporter.py)",
"scripts/ops/tests/test_host_pressure_alert_contract.py)",
"../../scripts/backup/backup-awoooi-frequent.sh",
"../../scripts/backup/backup-status.sh",
"../../scripts/backup/tests/test_backup_status_contract.py",
"../../scripts/ops/backup-alert-label-contract-check.py",
"../../scripts/ops/tests/test_backup_health_textfile_exporter.py",
"../../scripts/ops/tests/test_host_pressure_alert_contract.py",
]
for source in expected_sources:
assert source in text
@@ -697,6 +705,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
"docs/runbooks/FULL-STACK-COLD-START-SOP.md)",
"docs/workplans/2026-06-04-reboot-cold-start-backup-recovery-workplan.md)",
"ops/monitoring/alerts-unified.yml)",
"ops/monitoring/alerts.yml)",
"ops/runner/awoooi-cd-lane-drain.service)",
"ops/runner/check-awoooi-110-controlled-cd-lane-readiness.sh)",
"ops/runner/test_check_awoooi_110_controlled_cd_lane_readiness.py)",
@@ -704,6 +713,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
"scripts/ops/backup-health-textfile-exporter.py)",
"scripts/reboot-recovery/deploy-to-110.sh)",
"scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh)",
"scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh)",
"scripts/reboot-recovery/post-start-quick-check.sh)",
"scripts/reboot-recovery/reboot-recovery-readiness-audit.sh)",
"scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh)",
@@ -726,9 +736,11 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
"../../scripts/ops/backup-health-textfile-exporter.py",
"../../scripts/backup/gitea-repo-bundle-backup.sh",
"../../ops/monitoring/alerts-unified.yml",
"../../ops/monitoring/alerts.yml",
"../../ops/runner/check-awoooi-110-controlled-cd-lane-readiness.sh",
"../../scripts/reboot-recovery/deploy-to-110.sh",
"../../scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh",
"../../scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh",
"../../scripts/reboot-recovery/post-start-quick-check.sh",
"../../scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh",
"../../scripts/reboot-recovery/full-stack-cold-start-check.sh",