Merge: a catalog the server cannot damage for long, and backups on both sides

Browse Source

fix/corrupt-remote-catalog-deadlock. The catalog on the server had been
malformed since 7 September and every device declined to overwrite it,
so collections and people stopped syncing everywhere at once; the
damage came from two devices assembling chunks in one upload directory.
Each chunked upload now has its own directory, the server keeps three
generations of the catalog behind the current one, every push is
verified before and after, a damaged copy that arrived whole is merged
from the generation before it rather than pinned in place, and the
catalog is backed up daily as NFR-R2 always asked.

...

This commit is contained in:

dtourolle

2026-09-13 20:04:55 +02:00

parent c1e0f09be7 eeee3d920a

commit 5e67f026ec

6 changed files with 856 additions and 73 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

docs/traceability.md

+24 -24

File diff suppressed because one or more lines are too long