v1 server release line: RC13 source, acceptance criteria (ADR-015) and glossary #54

Open

toasterson wants to merge 43 commits from v1-main-merge into main

pull from: v1-main-merge

merge into: OpenIndiana:main

OpenIndiana:main

OpenIndiana:feat/separate-depots

OpenIndiana:feat/historical-import

OpenIndiana:v1-integration-20260923

OpenIndiana:v1-pkg5-smoke-20260923

OpenIndiana:v1-retention-20260923

OpenIndiana:v1-repo-cli-20260923

OpenIndiana:v1-cli-surface-20260923

OpenIndiana:v1-tls-20260923

OpenIndiana:v1-atomic-import-20260923

OpenIndiana:v1-otel-20260923

OpenIndiana:v1-release-pipeline-20260923

OpenIndiana:research/oidc-providers

OpenIndiana:research/illumos-crypto-stack

OpenIndiana:research/otlp-stack

OpenIndiana:research/pkg5-publication-model

OpenIndiana:claude/ecstatic-allen-0a5f4a

Conversation 0 Commits 43 Files changed 171 +47500 -4323

toasterson commented 2026-09-27 13:10:12 +00:00

Owner

Copy link

Brings the Release 1 server line onto main. This is the RC13 source (f6691a0, published as v1.0.0-rc.13, installed on oirepo6) plus the acceptance write-down from wayfinder ticket #25.

Supersedes the nine v1 pull requests #43, #44, #45, #46, #47, #48, #49, #50 and #51: feat/historical-import is a strict superset of v1-integration-20260923 (no file is removed between them), so this one PR replaces the stack.

What is added on top of RC13:

• ADR-015 v1.0 release acceptance criteria (target-depot live gate with one reboot, historical import as a capability gate, Hipster 2020.04 / 2023.10 / current client matrix, unified pkg6repo import family before the tag, status/0 as a v1.0 gate, tag from main).
• ADR-005, ADR-006 and ADR-008 move from Proposed to Accepted.
• CONTEXT.md glossary for the repository-server context.

Merge criteria: both Solstice CI jobs green on this head. v1.0.0 is tagged from main after the remaining ADR-015 gates (items 2 to 5) pass in a further release candidate.

🤖 Generated with Claude Code

Brings the Release 1 server line onto `main`. This is the RC13 source (`f6691a0`, published as `v1.0.0-rc.13`, installed on oirepo6) plus the acceptance write-down from wayfinder ticket #25. Supersedes the nine v1 pull requests #43, #44, #45, #46, #47, #48, #49, #50 and #51: `feat/historical-import` is a strict superset of `v1-integration-20260923` (no file is removed between them), so this one PR replaces the stack. What is added on top of RC13: - ADR-015 v1.0 release acceptance criteria (target-depot live gate with one reboot, historical import as a capability gate, Hipster 2020.04 / 2023.10 / current client matrix, unified `pkg6repo import` family before the tag, `status/0` as a v1.0 gate, tag from `main`). - ADR-005, ADR-006 and ADR-008 move from Proposed to Accepted. - `CONTEXT.md` glossary for the repository-server context. Merge criteria: both Solstice CI jobs green on this head. `v1.0.0` is tagged from `main` after the remaining ADR-015 gates (items 2 to 5) pass in a further release candidate. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

toasterson added 43 commits 2026-09-27 13:10:12 +00:00

Keep pkg5 obsoletion visible and restrict depot HTTP to reads 059db39d44

Build tagged release candidates and package the illumos depot 4cd8aad678

Export depot telemetry over bounded OTLP HTTP 9dd36eb69f

Import pkg5 archives through atomic repository generations ffbb578475

Merge v1-release-pipeline-20260923 into the atomic pkg5 import line ... ff9567fc39

Conflict: pkg6repo/src/e2e_tests.rs. The release branch rewrote the e2e
tests as a self-contained integration target; this line had already
removed `pkg6repo obsolete-package` (ADR-004). Take the rewritten file
and drop its test_e2e_obsoleted_packages, which drove the removed
command; tests.rs still asserts the command stays gone.

Release gate: lower the pkg6repo::e2e_tests minimum to the remaining 5
tests and require the atomic importer suites (libips atomic_pkg5_import,
pkg6repo import_pkg5_cli, pkg6depotd atomic_import_http_tests) and the
read-only HTTP suite, with script self-tests for the importer suites.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge v1-otel-20260923 into the v1 integration line ... fae83561e2

No textual conflicts; Cargo.lock merged cleanly and passes
`cargo metadata --locked`.

Semantic reconciliation: the telemetry route classifier kept an `index`
operation label, but this line no longer routes /{publisher}/index/0
(ADR-004 read-only surface). Drop HttpOperation::Index so the label set
matches the routes; the route template now classifies as unmatched.

Release gate: require pkg6depotd::telemetry_otlp (10 tests) and raise
config_fail_closed to 11 and packaged_config to 2 for the telemetry
config tests; self-tests cover the telemetry suite as well.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Renumber the atomic pkg5 import ADR to 007 ... 13ba9d7708

The release pipeline (ADR-005) and OTLP export (ADR-006) decisions were
written in parallel with the atomic importer, which also took 005. Give
the importer ADR-007 and update its references (plan, CLAUDE.md,
obsoleted packages doc). Note the importer and telemetry suites in the
release process description of the test inventory.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

ci: Bound the report-only clippy log ... 50fa6ec237

The Linux job streamed every clippy warning with its source snippet into
the job log. Run clippy through .forgejo/scripts/clippy-report.sh
instead: diagnostics are captured as JSON and the step prints a
heartbeat, per-lint counts, one line per unique warning (capped at 300),
every error diagnostic in full and cargo's stderr tail on failure. The
step keeps clippy's exit status. A fake-cargo self-test runs first.

The release workflow does not run clippy and is unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Serve depot HTTPS with ACME HTTP and DNS challenges 4031e6ae7a

Merge v1-tls-20260923 into the v1 integration line ... 7729974490

Direct HTTPS with certificate files or ACME (http-01, dns-01 via
Cloudflare/Gandi) now coexists with OTLP telemetry and graceful shutdown.

- lib.rs: load_config validates telemetry and TLS, both fail closed.
  serve() installs the SIGHUP handler first, then serves plain HTTP or
  TLS; both paths use SIGTERM/SIGINT drain before the telemetry flush.
- http/server.rs: one generic serve_until drains any axum Listener;
  run_tls_until wraps it with TlsListener. The auto-merge had dropped
  the drain body from run_until.
- pkg6depotd.8: config-test exits non-zero on invalid TELEMETRY or TLS
  settings and makes no ACME request.
- Config literals in HEAD-side tests gain tls: None.
- packaged_config: TLS examples are parsed with OTLP export enabled.
- TLS ADR renumbered to ADR-008 (release 005, OTel 006, atomic 007).
- Release inventory gates tls_config=7, tls_acme=19, tls_depot_e2e=3,
  packaged_config=3 and the pkg6depotd library suite=35.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs: add checked operator mdBook for v1 depot 328b592723

cli: reject unsupported depot and client operations 2795a7c579

cli: make repository and receive commands fail explicitly f0ec530ead

release: ship server and operator binaries in v1 tarballs 4722b69e0c

Merge reviewed v1 depot and client CLI cleanup 2dc4509748

Merge reviewed repository and receive command cleanup 92c66e7e0f

feat: policy retirement snapshots and explicit import exclusions cd22b951cb

Merge reviewed retirement and snapshot policy ... e2d7cc52bf

# Conflicts:
#	pkg6depotd/src/http/server.rs
#	pkg6depotd/src/lib.rs
#	pkg6repo/src/main.rs

test: verify pkg5 clients against installed depot package 0c17c6ce5b

build: prepare unified prerelease native gates fed23a8792

fix: preserve access gaps across interrupted depot shutdown 394c0e3244

test: verify pkg5 clients and manual pages in release package 48f8b64aea

fix: preserve pkg5 catalog and release FMRI compatibility ca42462105

fix: avoid Hipster pkgtree collision in IPS package ebcc192148

test: match pkg5 upgrade publication and listing semantics a5d3cc5e1e

test: inspect protected IPS config with root in live package test 2ff3e08cdc

ci: install manual reader in disposable IPS package test VM ef92cee2fb

test: avoid pipefail false failures on long package output 6df21d2ca0

fix: reject invalid SMF config before marking depot online 55cb6a068b

test: run live pkg5 upgrade without backup BE in Solstice 3371770f38

test: handle absent pkg5 lost+found in live uninstall check ce82d704dc

test: diagnose SMF restarter during live IPS lifecycle f8c456f2cd

test: add unprivileged pkg5 release smoke for OpenIndiana a1d715b3db

chore: prepare v1.0.0-rc.11 480dbaef64

ci: publish illumos release assets from oibuild temporarily dfbb618a7a

fix: resolve IPS package dependencies against baseline image 58d4b28c4f

fix: stream large pkg5 catalog rebuilds within zone memory b11e6a113c

chore: prepare v1.0.0-rc.12 candidate cfd4713d82

fix: sign catalog JSON using pkg5 ASCII escapes 18f09bc489

feat: import flat pkg5 sources with atomic import limits 690be9016d

fix: isolate release self-test fixtures from verified tag state 89df76ec08

feat: stage large historical pkg5 repositories for atomic publication f6691a0349

docs: record v1.0 acceptance criteria (ADR-015) and the server glossary ... 6cafcddafd

ADR-015 fixes the six open acceptance points from wayfinder ticket #25:
the oirepo6 target-native evidence plus one reboot replaces the suspended
disposable-VM gate, historical import is a capability gate rather than a
completion gate, the client matrix is Hipster 2020.04 / 2023.10 / current,
the import commands become one `pkg6repo import` family before the tag,
status/0 is a v1.0 gate, and v1.0.0 is tagged from main.

ADR-005, ADR-006 and ADR-008 move from Proposed to Accepted: their
designs are implemented and running on oirepo6 as RC13.

CONTEXT.md is the glossary for the repository-server context introduced
by the v1 work (generation, archive vs source import, retirement vs
obsoletion vs purge, protected snapshot, keep exception).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

toasterson referenced this pull request 2026-09-27 13:12:35 +00:00

WIP: Build tagged release candidates and an illumos IPS depot package #43

toasterson referenced this pull request 2026-09-27 13:12:40 +00:00

WIP: Export bounded depot telemetry over OTLP/HTTP #44

toasterson referenced this pull request 2026-09-27 13:12:44 +00:00

WIP: Import pkg5 archives through atomic repository generations #45

toasterson referenced this pull request 2026-09-27 13:12:49 +00:00

v1 deployable pkg6 depot: pkg5 imports, retention, TLS, telemetry and release pipeline #46

toasterson referenced this pull request 2026-09-27 13:12:54 +00:00

WIP: Serve depot HTTPS with ACME HTTP and DNS challenges #47

toasterson referenced this pull request 2026-09-27 13:12:58 +00:00

v1 CLI: remove false-success commands and guard publisher paths #48

toasterson referenced this pull request 2026-09-27 13:13:03 +00:00

v1 repository tools: remove misleading commands and guard receives #49

toasterson referenced this pull request 2026-09-27 13:13:08 +00:00

v1 retirement, protected snapshots and fail-closed import exclusions #50

toasterson referenced this pull request 2026-09-27 13:13:12 +00:00

release gate: exercise native pkg5 clients against installed depot #51

toasterson referenced this pull request 2026-09-27 13:13:25 +00:00

Define what 'v1.0 server release' must include and its acceptance criteria #25

toasterson referenced this pull request 2026-09-27 13:13:30 +00:00

Decide telemetry scope for v1: which OTLP signals, exporter, and whether it gates the release #29

toasterson referenced this pull request 2026-09-27 13:13:34 +00:00

Decide the documentation format, location and minimum content for the server release #30

toasterson referenced this pull request 2026-09-27 13:14:17 +00:00

Wayfinder map: Release 1 (server only) #24

All checks were successful

Hide checks

CI / Linux (fmt / clippy / nextest / e2e / docs) (pull_request) Successful in 11m22s

Details

CI / illumos (OpenIndiana) build + nextest (pull_request) Successful in 19m17s

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin v1-main-merge:v1-main-merge

git switch v1-main-merge

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff v1-main-merge

git switch v1-main-merge

git rebase main

git switch main

git merge --ff-only v1-main-merge

git switch v1-main-merge

git rebase main

git switch main

git merge --no-ff v1-main-merge

git switch main

git merge --squash v1-main-merge

git switch main

git merge --ff-only v1-main-merge

git switch main

git merge v1-main-merge

git push origin main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

Compat/Breaking

Breaking change that won't be backward compatible

  

Crazy Idea

Something that went through my mind which is not part of the core use case but fun

  

Kind/Bug

Something is not working

  

Kind/Documentation

Documentation changes

  

Kind/Enhancement

Improve existing functionality

  

Kind/Feature

New functionality

  

Kind/Security

This is security issue

  

Kind/Testing

Issue or pull request related to testing

  

Priority/Critical

The priority is critical

  

Priority/High

The priority is high

  

Priority/Low

The priority is low

  

Priority/Medium

The priority is medium

  

Reviewed/Confirmed

Issue has been confirmed

  

Reviewed/Duplicate

This issue or pull request already exists

  

Reviewed/Invalid

Invalid issue

  

Reviewed/Won't Fix

This issue won't be fixed

  

Status/Abandoned

Somebody has started to work on this but abandoned work

  

Status/Blocked

Something is blocking this issue or pull request

  

Status/Need More Info

Feedback is required to reproduce issue or to continue work

  

needs-info

Waiting on reporter for more information

  

needs-triage

Maintainer needs to evaluate this issue

  

ready-for-agent

Fully specified, ready for an AFK agent

  

ready-for-human

Requires human implementation

  

wayfinder:grilling

Wayfinder decision ticket: grilling

  

wayfinder:map

Wayfinder map issue (parent of decision tickets)

  

wayfinder:prototype

Wayfinder decision ticket: prototype

  

wayfinder:research

Wayfinder decision ticket: research

  

wayfinder:task

Wayfinder ticket: task that unblocks a decision

  

wontfix

Will not be actioned

No labels

Compat/Breaking

Crazy Idea

Kind/Bug

Kind/Documentation

Kind/Enhancement

Kind/Feature

Kind/Security

Kind/Testing

Priority/Critical

Priority/High

Priority/Low

Priority/Medium

Reviewed/Confirmed

Reviewed/Duplicate

Reviewed/Invalid

Reviewed/Won't Fix

Status/Abandoned

Status/Blocked

Status/Need More Info

needs-info

needs-triage

ready-for-agent

ready-for-human

wayfinder:grilling

wayfinder:map

wayfinder:prototype

wayfinder:research

wayfinder:task

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

OpenIndiana/ips!54

No description provided.