Repository navigation

Verify a backup can be read before restore_backup replaces the database - #3121

Open

cb1kenobi wants to merge 17 commits into

mainfrom

fix/restore-verify-before-purge-2965

Commits on Oct 8, 2026
- Verify a backup is readable before restore_backup replaces the database
  
  cb1kenobi
  and
  claude
  committed
  ff77a4d
- Keep the marker after any publication, and the displaced mode on recovery
  
  cb1kenobi
  and
  claude
  committed
  b1b1544
- Probe the offline restore's lock before staging too
  
  cb1kenobi
  and
  claude
  committed
  183c53a
- Refuse to restore into a database directory that is a mount point
  
  cb1kenobi
  and
  claude
  committed
  4430600
- Refuse a restore whose staging copy would not fit beside the database
  
  cb1kenobi
  and
  claude
  committed
  6665dd6
- Drop a failed publication's candidate before the rerun measures space
  
  cb1kenobi
  and
  claude
  committed
  624d78a
- Retire .replaced atomically before the marker clears
  
  cb1kenobi
  and
  claude
  committed
  9944799
- Keep a refusal's status code when a restore needs a rerun, and cover online success
  
  cb1kenobi
  and
  claude
  committed
  0979503
- Merge remote-tracking branch 'origin/main' into fix/restore-verify-before-purge-2965
  cb1kenobi
  committed
  df23f32
- Frame-review the new restore staging module, which imports the storage binding
  
  cb1kenobi
  and
  claude
  committed
  3da1cac
- Read a caught value's message and code defensively in restore staging
  
  cb1kenobi
  and
  claude
  committed
  569d858
- Verify closure before an online rerun drops a published candidate
  
  cb1kenobi
  and
  claude
  committed
  3d0e562
Commits on Oct 9, 2026
- Keep a database loaded through a rescan during online staging
  
  cb1kenobi
  and
  claude
  committed
  be52c8d
- Name a stray .replaced instead of blaming an open database for it
  
  cb1kenobi
  and
  claude
  committed
  0f1ac65
- Say what a restore marker proves, and stop logging an outage while serving
  
  cb1kenobi
  and
  claude
  committed
  bf1e140
- Merge branch 'main' into fix/restore-verify-before-purge-2965
  cb1kenobi
  authored
  5583a42
- Merge branch 'main' into fix/restore-verify-before-purge-2965
  cb1kenobi
  authored
  146e1fd

Navigation Menu

Repository navigation

Verify a backup can be read before restore_backup replaces the database - #3121

Verify a backup can be read before restore_backup replaces the database#3121
cb1kenobi wants to merge 17 commits into
mainfrom
fix/restore-verify-before-purge-2965

Commits on Oct 8, 2026

Verify a backup is readable before restore_backup replaces the database

Keep the marker after any publication, and the displaced mode on recovery

Probe the offline restore's lock before staging too

Refuse to restore into a database directory that is a mount point

Refuse a restore whose staging copy would not fit beside the database

Drop a failed publication's candidate before the rerun measures space

Retire .replaced atomically before the marker clears

Keep a refusal's status code when a restore needs a rerun, and cover online success

Merge remote-tracking branch 'origin/main' into fix/restore-verify-before-purge-2965

Frame-review the new restore staging module, which imports the storage binding

Read a caught value's message and code defensively in restore staging

Verify closure before an online rerun drops a published candidate

Commits on Oct 9, 2026

Keep a database loaded through a rescan during online staging

Name a stray .replaced instead of blaming an open database for it

Say what a restore marker proves, and stop logging an outage while serving

Merge branch 'main' into fix/restore-verify-before-purge-2965

Merge branch 'main' into fix/restore-verify-before-purge-2965