spec(janitorial): mark items 8, 9 resolved after on-host verification

Both items were operational verifications (not code changes) against
the deployed test host ovh.left4me (141.95.32.8).

Item 8: orphan idmap binds in PID 1's mount namespace.
  `sudo findmnt --task 1 -o TARGET | grep /var/lib/left4me/runtime/.*/idmap/`
  returned zero matches with left4me-server@{1,2}.service both active.
  Either swept earlier or never appeared on this host; nothing to umount.

Item 9: Optimized Settings (overlay 8) files-overlay sanity.
  Dir is left4me:left4me end-to-end; `sudo find /var/lib/left4me/overlays/8
  -type f -uid 981` returned empty. The invariant "files-overlays are
  populated by the web app as left4me, never through the sandbox helper"
  holds.

Remaining live janitorial items: 7 (conditional on the build-overlay-unit
refactor) and 10 (SourceMod 1.13 calendar reminder, ~late 2026).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
mwiegand 2026-05-15 12:14:34 +02:00
parent 8f30dd7754
commit 4aa69c2461
No known key found for this signature in database

View file

@ -161,7 +161,15 @@ doc is chosen (unit fetches script from DB), the
**Action**: if that refactor lands, remove the helper function and **Action**: if that refactor lands, remove the helper function and
the dir. ckn-bw can stop creating the directory. the dir. ckn-bw can stop creating the directory.
### 8. Legacy idmap binds on un-checked instances ### 8. Legacy idmap binds on un-checked instances [RESOLVED]
**Resolution (2026-05-15)**: verified on `ovh.left4me` (141.95.32.8). The
diagnostic `sudo findmnt --task 1 -o TARGET | grep /var/lib/left4me/runtime/.*/idmap/`
returned zero matches with both `left4me-server@1.service` and
`left4me-server@2.service` active. Either the pre-`dd918ac` stragglers
were swept earlier or never appeared on this host. No umount needed.
**What**: server@2's stale idmap binds (from the idmap-on-mount **What**: server@2's stale idmap binds (from the idmap-on-mount
era) were manually cleaned during this session's verification. era) were manually cleaned during this session's verification.
@ -184,7 +192,15 @@ are gone.
Alternative: schedule a host reboot. Reboot wipes the entire mount Alternative: schedule a host reboot. Reboot wipes the entire mount
table and gets everything clean in one step. table and gets everything clean in one step.
### 9. `Optimized Settings` files-overlay verification ### 9. `Optimized Settings` files-overlay verification [RESOLVED]
**Resolution (2026-05-15)**: verified on `ovh.left4me`. Overlay 8 dir is
`left4me:left4me`-owned end-to-end; `sudo find /var/lib/left4me/overlays/8
-type f -uid 981` (the `l4d2-sandbox` uid) returned empty. The
files-overlay invariant (populated by the web app as `left4me`, never
through the sandbox helper) holds. No action needed.
**What**: overlay id 8 (`Optimized Settings`, type `files`) wasn't **What**: overlay id 8 (`Optimized Settings`, type `files`) wasn't
included in the rebuild test during the build-time-idmap included in the rebuild test during the build-time-idmap