makearmy/le-app
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
le-app/docs/le-app-database-migration/phase2b-contained-runtime/ROLLBACK.md

1.1 KiB
Raw Blame History

Phase 2B-only rollback

Do not remove Phase 1 identity/workspace, Phase 2A packages, kernels, snapshots, production resources, or unrelated nftables objects.

  1. Stop user@1200.service; confirm UID 1200 has no processes. This is the only user-manager stop in scope.
  2. Stop le-app-codex-netns.service. Its ExecStop removes only lecodex-host and /run/netns/le-app-codex and deletes only the two le_app_codex* nftables tables.
  3. Remove only the Phase 2B files enumerated in MANIFEST.sha256 and /etc/le-app-codex-runtime/OPERATOR-INPUTS-APPROVED, preserving the pre-existing /srv/le-app-codex skeleton.
  4. Run systemctl daemon-reload and systemctl reset-failed le-app-codex-netns.service.
  5. Confirm there is no UID 1200 process, socket, namespace, veth, project nftables table, containment/resource drop-in, launcher, Docker user unit, daemon/client config, or Phase 2B test copy.
  6. Confirm lingering is still disabled and production/rootful Docker remains healthy and unchanged.

If a file existed before Phase 2B, stop: this rollback package intentionally has no overwrite/restore path because installation must have failed closed on pre-existence.