46 lines
3.3 KiB
Markdown
46 lines
3.3 KiB
Markdown
# Verification report - RustProxy 0.27.2
|
|
|
|
## Scope
|
|
|
|
RustProxy 0.27.2 is a focused repair for managed ACME/Certbot execution while keeping SQLite schema 8 and the saved configuration format unchanged.
|
|
|
|
0.27.1 created the private environment under `<data-dir>/acme-python.installing`, installed Certbot there, validated it, and then renamed the directory to `<data-dir>/acme-python`. pip console scripts contain an absolute interpreter path, so `bin/certbot` could retain a shebang pointing at the removed staging directory and fail with `OSError` during issuance/renewal.
|
|
|
|
0.27.2 validates and launches managed Certbot through the final venv interpreter with `python -I -m certbot`. Existing 0.27.1 environments can therefore be reused without deleting `/var/lib/rustproxy/acme-python`. The system/distribution Certbot fallback remains unchanged.
|
|
|
|
The 0.27.1 first-administrator, runtime-status and route/list sorting behavior remains unchanged.
|
|
|
|
## Regression coverage
|
|
|
|
Static/source contracts cover the managed runtime path and pinned package set, distro fallback markers and the new module-based Certbot launch path. A dedicated relocation regression reproduces the stale-shebang failure after renaming a venv and verifies that module execution through the final interpreter remains valid. Existing release-smoke, language/OpenAPI, source-module, security, web-server, browser-service and Docker-agent gates remain part of the Rust-independent verification set.
|
|
|
|
## Verification status in this workspace
|
|
|
|
Rust/Cargo is not installed in this workspace. Rust-independent checks are run here; compiler/type/runtime gates remain explicitly open until this source is checked on a Rust-enabled release host.
|
|
|
|
| Check | Status |
|
|
|---|---|
|
|
| managed ACME relocated-venv regression (`release_smoke.py`) | PASS |
|
|
| changed administration JavaScript syntax (`node --check`) | PASS |
|
|
| language/OpenAPI JSON parse | PASS |
|
|
| `python3 scripts/langs_check.py` | PASS |
|
|
| `python3 scripts/memory_contracts.py` | PASS |
|
|
| `python3 scripts/web_server_contracts.py` | PASS |
|
|
| `python3 scripts/security_contracts.py` | PASS |
|
|
| `python3 scripts/security_dependency_contracts.py` | PASS |
|
|
| `python3 scripts/source_module_contracts.py` | PASS |
|
|
| `python3 scripts/rust_module_contracts.py` | PASS |
|
|
| `python3 scripts/docs_check.py` | PASS |
|
|
| `python3 scripts/release_smoke.py` | PASS |
|
|
| `node scripts/web_service_ui_test.mjs` | PASS |
|
|
| `go test ./...` in `docker-agent` | PASS |
|
|
| `python3 scripts/check_source.py` | PASS; explicitly reports Rust parsing/types/runtime as not verified |
|
|
| `./dev.sh test` | Rust-independent gates PASS; wrapper exits 127 at the Rust stage because Cargo is unavailable |
|
|
| `./dev.sh check` | BLOCKED: Rust/Cargo toolchain unavailable |
|
|
| `cargo fmt --check` | BLOCKED: Rust/Cargo toolchain unavailable |
|
|
| `cargo clippy --all-targets --all-features -- -D warnings` | BLOCKED: Rust/Cargo toolchain unavailable |
|
|
| `cargo test --all-targets --all-features` | BLOCKED: Rust/Cargo toolchain unavailable |
|
|
| complete release build | BLOCKED at Rust compilation: Rust/Cargo toolchain unavailable |
|
|
|
|
The 0.27.2 source archive must not be described as compiler-verified or production-ready until the Rust-enabled release-host gates pass. Static/source contracts do not substitute for Rust parsing, type checking, Clippy, unit tests or real protocol runtime tests.
|