ops: record host recovery and scheduled maintenance

[figassis]

Summary

• Record installed host maintenance scripts and systemd units; schedule 2026-10-04 02:00 UTC maintenance independently of Jean.
• Enable Docker init for persistent host Jean services, with recreation deferred to the maintenance window and deployed image IDs preserved.
• Record disk cleanup, package updates, verification commands, and postboot checks without copying host secrets.

Verification

• Host root filesystem dropped from 99% to below 60% before final image export.
• Apt upgrade/autoremove completed; dpkg audit clean; no pending repository upgrades.
• Compose validation, systemd unit verification, shell syntax checks, idempotency guard tests, and new-container smoke test passed.
• make docker-build completed successfully and produced jean:dev.
• Actual reboot, kernel activation, and zombie removal remain pending the scheduled maintenance window.

Operational caveats

• Recent unused images were retained for concurrent development sessions; old unused images and build cache were pruned.
• Containerd-only restart restored new container starts after binary upgrade; persistent Jean uptime was unchanged.
• Two temporary kinaxixi-eng717 app containers disappeared during concurrent activity; cause not established.

[coderabbitai]

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 57 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: e192ed8b-3b6e-424a-825b-a154dbab49c9

📥 Commits

Reviewing files that changed from the base of the PR and between e31c0fe and 172e807.

📒 Files selected for processing (7)

• .ai/todo.md
• docs/operations/host-maintenance.md
• docs/operations/host-maintenance.sh
• docs/operations/host-postboot.sh
• docs/operations/jean-host-maintenance.service
• docs/operations/jean-host-maintenance.timer
• docs/operations/jean-host-postboot.service

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}