Fix Loki plaintext Garage S3 + rclone flatpak glob #2

Merged

founder merged 1 commit from codex/fix-loki-garage-and-rclone into main

2026-07-18 08:11:49 +00:00

founder commented

2026-07-18 08:10:16 +00:00

Owner

Loki crash-looped since the KSE-0177 Garage cutover (HTTPS AWS client vs plaintext-HTTP Garage on 127.0.0.1:3900), taking down the whole log plane. Derive insecure from the endpoint scheme; also set reject_old_samples: false so shippers can replay backlogs after an outage. Fix the rclone flatpak install glob that failed Build (Linux).

Verified live: Loki now active + ready, store-release + 1Password-events shippers drained clean. This deploy makes the runtime hotfix durable.

🤖 Generated with Claude Code

Loki crash-looped since the KSE-0177 Garage cutover (HTTPS AWS client vs plaintext-HTTP Garage on 127.0.0.1:3900), taking down the whole log plane. Derive `insecure` from the endpoint scheme; also set `reject_old_samples: false` so shippers can replay backlogs after an outage. Fix the rclone flatpak install glob that failed Build (Linux). Verified live: Loki now active + ready, store-release + 1Password-events shippers drained clean. This deploy makes the runtime hotfix durable. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

founder added 1 commit

2026-07-18 08:10:16 +00:00

fix: Loki plaintext Garage S3 + rclone flatpak install glob

Build: Linux / Build (keystore-forge x86_64) (pull_request) Has been cancelled

Details

Build: Linux / Build (Linux x86_64) (pull_request) Has been cancelled

Details

e34fc9f2c9

Loki was crash-looping since the KSE-0177 Garage cutover: its AWS S3 client
defaulted to HTTPS against the plaintext-HTTP Garage endpoint on
127.0.0.1:3900 ("server gave HTTP response to HTTPS client"), so the
compactor failed to init and took the whole log plane down (store-release,
fly-logs, 1Password-events shippers all push to a dead Loki). Derive
insecure from the endpoint scheme so a http:// endpoint disables TLS.

Also stop rejecting old samples at ingest: shippers replay backlogs after a
Loki outage, and reject_old_samples wedged the 1Password shipper permanently
on entries older than the retention window.

Fix the rclone flatpak module: flatpak-builder archive sources strip the
leading path component, so the install glob rclone-v1.74.3-linux-*/rclone
never matched ("cannot stat"), failing Build (Linux) in build-release.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>