Skip to content

dev2-edge: restore_live extracts again; re-probes really re-probe - #253

Merged
ralyodio merged 1 commit into
masterfrom
edge-box-restore-fix
Nov 9, 2026
Merged

ralyodio merged 1 commit into
masterfrom
edge-box-restore-fix

Conversation

@ralyodio

@ralyodio ralyodio commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

Found applying #252 on dev2:

  • restore_live: dev2-edge: route unrouted Moshpit names to the c0mpute edge #252 put tf.extractall inside the new "remove the :80 file" branch, after the tar was closed, so a failed re-apply raised TarFile is closed and restored nothing. The live state stayed healthy (the sweep flagged only alt.2600, whose answer changed by design), but the safety net was off.
  • edge-sweep: edge-box's probe_one runs it with /dev/null and EDGE_SWEEP_ONE, but the usage check ([ -f ]) ran first and rejected /dev/null, so every re-probe reported 000/000/000. Pre-existing; it made changed names look dead in the failure report. The single-name path now runs before the usage check.

vitest dev2-edge 15/15; EDGE_SWEEP_ONE=example.com edge-sweep /dev/null now answers.

🤖 Generated with Claude Code

…probe

restore_live ran extractall inside the new 'remove the :80 file' branch, after
the tar was closed, so a failed re-apply restored nothing (#252). And
probe_one called edge-sweep with /dev/null, which the usage check rejected
before EDGE_SWEEP_ONE was looked at, so every re-probe read 000/000/000.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Nov 9, 2026

Copy link
Copy Markdown

ThreatCrush Security Scan

41 finding(s)

HIGH/CRITICAL: 15 | MEDIUM: 12 | LOW: 14

Severity Rule Location
HIGH py-ssrf-outbound-request dev2/dev2-site:151
HIGH py-ssrf-outbound-request dev2/dev2-site:1099
HIGH py-ssrf-outbound-request dev2/dev2-site:1903
HIGH sh-remote-script-execution root-ubuntu.sh:3262
HIGH sh-remote-script-execution root-ubuntu.sh:3263
HIGH sh-remote-script-execution root-ubuntu.sh:5168
HIGH sh-remote-script-execution root-ubuntu.sh:5172
HIGH sh-remote-script-execution root-w3bs-os.sh:3639
HIGH sh-remote-script-execution root-w3bs-os.sh:3640
HIGH sh-remote-script-execution root-w3bs-os.sh:5569
HIGH sh-remote-script-execution root-w3bs-os.sh:5579
HIGH sh-remote-script-execution root-w3bs-os.sh:5586
HIGH sh-remote-script-execution root-w3bs-os.sh:5602
HIGH sh-remote-script-execution root-w3bs-os.sh:5607
HIGH sh-plaintext-download root-w3bs-os.sh:6289
MEDIUM sql-template-interpolation dev2/dev2-site:1334
MEDIUM sql-template-interpolation dev2/dev2-site:1411
MEDIUM sh-remote-script-execution root-ubuntu.sh:5376
MEDIUM redos-nested-quantifier src/domain-free.ts:56
MEDIUM redos-nested-quantifier src/emoji.ts:167
MEDIUM redos-nested-quantifier src/icon.ts:166
MEDIUM redos-nested-quantifier src/mail.ts:1060
MEDIUM sql-template-interpolation src/users-dump.ts:487
MEDIUM sql-string-concatenation src/users-dump.ts:507
MEDIUM sql-template-interpolation src/users-dump.ts:540
MEDIUM sql-string-concatenation src/users-dump.ts:574
MEDIUM redos-nested-quantifier src/wcag.ts:556
LOW secret-generic-credential src/credentials.ts:41
LOW secret-generic-credential src/credentials.ts:58
LOW secret-generic-credential src/credentials.ts:61
LOW secret-generic-credential src/credentials.ts:66
LOW secret-generic-credential src/user-export.ts:689
LOW secret-generic-credential src/user-export.ts:695
LOW secret-generic-api-key test/credentials.test.ts:208
LOW secret-generic-credential test/mail.test.ts:141
LOW secret-generic-credential test/proxy.test.ts:69
LOW secret-generic-credential test/proxy.test.ts:85
LOW secret-generic-credential test/shorten.test.ts:36
LOW secret-database-url test/users-dump.test.ts:108
LOW secret-database-url test/users-dump.test.ts:119
LOW secret-database-url test/users-dump.test.ts:120

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit 15c0e2d into master Nov 9, 2026
5 checks passed
@ralyodio
ralyodio deleted the edge-box-restore-fix branch November 9, 2026 10:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant