Thore Cimbal
4758e35150
Decision by sorb: narrow the target set to what is operated rather than tidying the registry. A repository now counts only while at least one of its tags is running, which drops element-desktop-build and windows-vm and 61 of their 62 critical findings with them. Of those 62, exactly two had a fix available; they are build artefacts nobody runs, so remediation was never the right answer. The narrowing stays derived rather than maintained: the running set is the one the derivation already builds, so there is no second list to keep in step (ADR-0026). Order now matters. The registry selection needs the running estate to tell a rollback target from a build artefact, so it runs after the other two sources and is skipped when they yield nothing. That last part changes behaviour deliberately. A derivation where both estate sources answer successfully but empty used to count as complete and merely unusable; it now reports the registry as failed. If nothing is running at all, that is an outage rather than a normal state, and it should say so instead of hanging on a single boolean. The test carries the new contract with that reasoning written next to it, plus a counter-case proving the registry does run when the estate is known.
threadnet-operating
Der Betriebs-/Monitoring-Stack für den Operating-Host CFGMON: Prometheus,
Loki, Grafana, Alloy, Alertmanager und der CVE-Exporter — vollständig als Code,
ein docker compose up -d stellt ihn auf einem frischen Host wieder her.
→ monitoring/README.md ist die eigentliche
Betriebsanleitung (Deployment, Config-Fallen, Alerting, CVE-Pipeline).
Wo was liegt
| Pfad | Inhalt |
|---|---|
monitoring/ |
der Stack: Compose, Prometheus, Loki, Grafana, Alertmanager, Alloy |
monitoring/cve/ |
CVE-Exporter (Trivy-Scan → Prometheus-Metriken), ADR-0003 |
monitoring/grafana/ |
Datasources und Dashboards als Code |
Offene Punkte
Kein Backlog in diesem Repo. Offene Punkte sind Issues im
management-Projekt
(ADR-0005) —
sie betreffen meist mehrere Hosts, eine Liste je Repo würde auseinanderlaufen.
Für diesen Stack einschlägig sind unter anderem
#8 Remote-Write und Loki ohne Auth,
#9 Grafana-Credentials und
#10 Gitea-Backups off-host;
Bestand und Historie zum Host stehen in
hosts/cfgmon.md.
Kanonisch ist git.lab (ADR-0001,
ADR-0002).
Von außerhalb des Labs ist derselbe Stand über den Push-Mirror
sorb/management lesbar — dorthin
aber nie pushen, der Mirror überschreibt.