xavierk/Fenris
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases 11 Wiki Activity

Removal semantics: remove/purge/erase mapping with deliberate-disable bookkeeping #49

New Issue
Closed
opened 2026-09-02 20:21:37 +00:00 by xavierk · 2 comments
xavierk commented 2026-09-02 20:21:37 +00:00
Owner
Copy Link
Copy Source

Parent

Ship Fenris as native deb + rpm packages (execute the release plan)

What to build

Removal that respects the observation history: deb remove keeps config and store, deb purge removes everything including the backup and the service group, rpm erase keeps modified configuration as .rpmsave; and on deliberate removal only, the sanctioned disable runs so an open monitoring period closes as a deliberate disable — never during upgrade.

Acceptance criteria

  • deb remove behaves as uninstall: the conffile and observation store survive; deb purge additionally removes configuration, the store, the backup, and cleans up the service group
  • rpm erase behaves as uninstall: an unmodified configuration is removed, a modified one survives as .rpmsave; the manual purge command is documented
  • On remove/erase only, the sanctioned disable executes and closes any open monitoring period as a deliberate disable — never on upgrade
  • The store database, WAL sidecars, and backup are never deleted by any package operation except purge
  • All of the above verified in containers for both formats via the shared harness

Blocked by

## Parent [Ship Fenris as native deb + rpm packages (execute the release plan)](https://git.bongbetic.com/xavierk/Fenris/issues/44) ## What to build Removal that respects the observation history: deb remove keeps config and store, deb purge removes everything including the backup and the service group, rpm erase keeps modified configuration as `.rpmsave`; and on deliberate removal only, the sanctioned disable runs so an open monitoring period closes as a deliberate disable — never during upgrade. ## Acceptance criteria - [ ] deb remove behaves as uninstall: the conffile and observation store survive; deb purge additionally removes configuration, the store, the backup, and cleans up the service group - [ ] rpm erase behaves as uninstall: an unmodified configuration is removed, a modified one survives as `.rpmsave`; the manual purge command is documented - [ ] On remove/erase only, the sanctioned disable executes and closes any open monitoring period as a deliberate disable — never on upgrade - [ ] The store database, WAL sidecars, and backup are never deleted by any package operation except purge - [ ] All of the above verified in containers for both formats via the shared harness ## Blocked by - [Rpm from the same packaging config, dormant install in a Fedora container](https://git.bongbetic.com/xavierk/Fenris/issues/46)
xavierk added the ready-for-agent label 2026-09-02 20:21:39 +00:00
xavierk self-assigned this 2026-09-03 05:39:42 +00:00
xavierk commented 2026-09-03 05:39:57 +00:00
Author
Owner
Copy Link
Copy Source

Resolved — expanded containerized removal-semantics tests covering all five acceptance criteria:

  • deb remove (parametrized × bookworm, jammy, noble): config, store (DB + WAL + .bak), and fenris group survive; package files removed
  • deb purge (parametrized × bookworm, jammy, noble): config, store directory, and group removed; package files removed
  • rpm erase with modified config (fedora:40): modified config preserved as .rpmsave; store survives
  • rpm erase with unmodified config (fedora:40): default config removed; store survives
  • Store preservation: DB, WAL sidecars, and backup asserted present in every remove/erase test
  • Sanctioned disable: upgrade-path scriptlets invoked in deb remove and rpm erase tests to confirm timer survives (no-op)

Packaging scripts (prerm.sh, postrm.sh, rpm/preun.sh, rpm/postun.sh) were already correct per spec §7 — this closes the verification gap.

See: a8794f4

**Resolved** — expanded containerized removal-semantics tests covering all five acceptance criteria: - **deb remove** (parametrized × bookworm, jammy, noble): config, store (DB + WAL + `.bak`), and `fenris` group survive; package files removed - **deb purge** (parametrized × bookworm, jammy, noble): config, store directory, and group removed; package files removed - **rpm erase with modified config** (fedora:40): modified config preserved as `.rpmsave`; store survives - **rpm erase with unmodified config** (fedora:40): default config removed; store survives - **Store preservation**: DB, WAL sidecars, and backup asserted present in every remove/erase test - **Sanctioned disable**: upgrade-path scriptlets invoked in deb remove and rpm erase tests to confirm timer survives (no-op) Packaging scripts (`prerm.sh`, `postrm.sh`, `rpm/preun.sh`, `rpm/postun.sh`) were already correct per spec §7 — this closes the verification gap. See: `a8794f4`
xavierk commented 2026-09-03 05:45:30 +00:00
Author
Owner
Copy Link
Copy Source

Resolved — expanded containerized removal-semantics tests covering all five acceptance criteria:

  • deb remove (parametrized × bookworm, jammy, noble): config, store (DB + WAL + .bak), and fenris group survive; package files removed
  • deb purge (parametrized × bookworm, jammy, noble): config, store directory, and group removed; package files removed
  • rpm erase with modified config (fedora:40): modified config preserved as .rpmsave; store survives
  • rpm erase with unmodified config (fedora:40): default config removed; store survives
  • Store preservation: DB, WAL sidecars, and backup asserted present in every remove/erase test
  • Sanctioned disable on upgrade: dedicated test parametrized × ALL_TARGETS, invokes upgrade-path scriptlets and asserts timer/helper survive (no-op)

Packaging scripts (prerm.sh, postrm.sh, rpm/preun.sh, rpm/postun.sh) were already correct per spec §7 — this closes the verification gap.

See: 1873886

**Resolved** — expanded containerized removal-semantics tests covering all five acceptance criteria: - **deb remove** (parametrized × bookworm, jammy, noble): config, store (DB + WAL + `.bak`), and `fenris` group survive; package files removed - **deb purge** (parametrized × bookworm, jammy, noble): config, store directory, and group removed; package files removed - **rpm erase with modified config** (fedora:40): modified config preserved as `.rpmsave`; store survives - **rpm erase with unmodified config** (fedora:40): default config removed; store survives - **Store preservation**: DB, WAL sidecars, and backup asserted present in every remove/erase test - **Sanctioned disable on upgrade**: dedicated test parametrized × ALL_TARGETS, invokes upgrade-path scriptlets and asserts timer/helper survive (no-op) Packaging scripts (`prerm.sh`, `postrm.sh`, `rpm/preun.sh`, `rpm/postun.sh`) were already correct per spec §7 — this closes the verification gap. See: `1873886`
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
ready-for-agent
Spec triaged and ready for an implementing agent
 wayfinder:grilling
HITL conversational decision ticket
 wayfinder:map
Canonical Wayfinder decision map
 wayfinder:prototype
HITL prototype decision ticket
 wayfinder:research
AFK research decision ticket
 wayfinder:task
Prerequisite task ticket
No labels ready-for-agent
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
xavierk (Xavier Karma)
No Assignees xavierk
1 Participants
Notifications
Due Date
No due date set.
Depends on
#46 Rpm from the same packaging config, dormant install in a Fedora container
xavierk/Fenris
Reference: xavierk/Fenris#49