docs(ops): show escrow gaps in reboot quick check [skip ci]

This commit is contained in:
ogt
2026-06-26 06:36:51 +08:00
parent b2945ab9f7
commit bae6423d72
3 changed files with 12 additions and 0 deletions

View File

@@ -345,6 +345,14 @@ if [[ "$RUN_BACKUP" -eq 1 ]]; then
ok "credential escrow missing is 0"
elif grep -Eq 'escrow_missing=[1-9]|ESCROW_MISSING_COUNT[ =][1-9]' "$backup_tmp"; then
boundary_warn "credential escrow still missing; DR_COMPLETE is forbidden"
escrow_status_tmp="$(mktemp -t post-start-escrow-status.XXXXXX)"
if ssh_read "wooo@192.168.0.110" '/backup/scripts/mark-credential-escrow-verified.sh --status' >"$escrow_status_tmp" 2>&1; then
evidence_warn "credential escrow missing items follow"
else
evidence_warn "credential escrow missing item readback failed"
fi
cat "$escrow_status_tmp"
rm -f "$escrow_status_tmp"
else
evidence_warn "credential escrow count not found"
fi