cayce/cayce-ops
1
0
Fork 0
Code Issues 1 Pull Requests 25 Actions 5 Packages Projects Releases 2 Wiki Activity

Tanda B punto 3: RESTORE.md + prueba de restauración E2E #15

Open
cayce wants to merge 0 commits from restore-runbook into main
pull from: restore-runbook
merge into: :main
Conversation 0 Commits - Files Changed -
cayce commented 2026-10-28 21:07:58 +00:00
Owner
Copy Link
Copy Source

Runbook completo de restauración desde cero + prueba E2E ejecutada en la VPS: integridad sin clave privada, roundtrip de descifrado, pg_restore a BD scratch con 5000/5000 filas, zip y tar válidos. Sin tocar producción (no existe BD de producción de cayce-ops).

Runbook completo de restauración desde cero + prueba E2E ejecutada en la VPS: integridad sin clave privada, roundtrip de descifrado, pg_restore a BD scratch con 5000/5000 filas, zip y tar válidos. Sin tocar producción (no existe BD de producción de cayce-ops).
cayce added 1 commit 2026-10-28 21:07:58 +00:00
backup: RESTORE.md runbook + E2E restore test evidence (Tanda B, point 3)
ci / lint-test-leaks (pull_request) Canceled after 0s
Details
d7156358f6 
RESTORE.md documents the exact from-zero recovery on a fresh VPS:
download+verify (sha256 over encrypted artifacts, no private key needed
on the pull side), decrypt on the operator Mac, Postgres pg_restore,
Gitea unzip+migrate, Caddy/systemd/.env config restore, repo re-clone,
backup pipeline reinstall with the SAME age recipient, and a
post-restore checklist.

E2E test executed on the VPS (no production touched — cayce-ops has no
production DB; a probe DB was created and dropped):
- manifest.sha256: 3/3 artifacts OK (verified WITHOUT any private key)
- age decrypt roundtrip with a throwaway keypair (destroyed afterwards)
- pg_restore TOC valid; full restore into a scratch DB: 5000/5000 rows
- gitea zip valid, config tar valid (34 entries)
- all test material removed: probe DB dropped, throwaway key deleted,
  recipient file removed, test backup deleted (was encrypted to the
  destroyed throwaway key)
Some required checks failed
ci / lint-test-leaks (pull_request) Canceled after 0s
Details
This branch is already included in the target branch. There is nothing to merge.
This branch is out-of-date with the base branch
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin restore-runbook:restore-runbook
git checkout restore-runbook
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
pattern cayce (Cayce)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: cayce/cayce-ops#15