Repository navigation
Restore DEV disk space with guarded API image retention - #830
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
DEV has no unreserved disk space left. The current read-only diagnostic (40215985792) reports 32 Docker images / 25.09 GB with 22.21 GB reclaimable, while build cache is only 9.85 MB; cache-only cleanup cannot make the frontend deploy writable.
Add an explicit plan/apply workflow for old reproducible DEV API images. Pushes and the default dispatch only print a plan. Applying requires the exact SHA-256 digest of the reviewed image/container/volume inventory. Candidates must have only strict procollab-dev-api Git SHA tags, commits reachable from the DEV checkout and creation times older than 48 hours. Protect every image used by any running or stopped container, the newest three reproducible images, untagged/foreign/mixed-tag images and unreachable commits. Remove exact reviewed tags without --force and with --no-prune; recheck state before every image and verify all protected images, containers and volumes afterward. No filesystem cleanup or volume/container deletion commands exist.
The workflow retains the existing DEV environment, verified SSH transport and host key pin, checks the DEV nginx/repository identity and matching running web/worker images, and serializes with API deployments. Six unit tests cover retention, stopped containers, young/unknown images, stale plans, a concurrent new container and the exact non-force Docker arguments. Black, flake8, YAML parsing, Node syntax and diff checks pass locally. Application code, schema and certificate behavior are unchanged.