# sdme Verification Matrix Report

## System Info

| Field | Value |
|-------|-------|
| Date | 2026-03-01T12:18:30+00:00 |
| Hostname | lima-default |
| Kernel | 6.17.0-14-generic |
| systemd | systemd 257 (257.9-0ubuntu2.1) |
| sdme | 0.1.6 |

## Summary

| Result | Count |
|--------|-------|
| PASS | 179 |
| FAIL | 2 |
| SKIP | 14 |
| Total | 195 |

## Phase 1: Base OS Import

| Distro | Image | Result |
|--------|-------|--------|
| debian | docker.io/debian:stable | PASS |
| ubuntu | docker.io/ubuntu:24.04 | PASS |
| fedora | docker.io/fedora:41 | PASS |
| centos | quay.io/centos/centos:stream9 | PASS |
| almalinux | docker.io/almalinux:9 | PASS |

## Phase 2: Boot Tests

| Distro | Create | systemd | journalctl | systemctl |
|--------|--------|---------|------------|-----------|
| debian | PASS | PASS | PASS | PASS |
| ubuntu | PASS | PASS | PASS | PASS |
| fedora | PASS | PASS | PASS | PASS |
| centos | PASS | PASS | PASS | PASS |
| almalinux | PASS | PASS | PASS | PASS |

## Phase 3: OCI App Matrix

| App | Distro | Import | Boot | Service | Logs | Status | Verify |
|-----|--------|--------|------|---------|------|--------|--------|
| nginx | debian | PASS | PASS | PASS | PASS | PASS | PASS |
| mysql | debian | PASS | PASS | PASS | PASS | PASS | PASS |
| postgres | debian | PASS | PASS | PASS | PASS | PASS | PASS |
| redis | debian | PASS | PASS | PASS | PASS | PASS | PASS |
| nginx | ubuntu | FAIL | SKIP | SKIP | SKIP | SKIP | SKIP |
| mysql | ubuntu | PASS | PASS | PASS | PASS | PASS | PASS |
| postgres | ubuntu | PASS | PASS | PASS | PASS | PASS | PASS |
| redis | ubuntu | PASS | PASS | PASS | PASS | PASS | PASS |
| nginx | fedora | PASS | PASS | PASS | PASS | PASS | PASS |
| mysql | fedora | PASS | PASS | PASS | PASS | PASS | PASS |
| postgres | fedora | PASS | PASS | PASS | PASS | PASS | PASS |
| redis | fedora | PASS | PASS | PASS | PASS | PASS | PASS |
| nginx | centos | PASS | PASS | PASS | PASS | PASS | PASS |
| mysql | centos | PASS | PASS | PASS | PASS | PASS | PASS |
| postgres | centos | PASS | PASS | PASS | PASS | PASS | PASS |
| redis | centos | PASS | PASS | PASS | PASS | PASS | PASS |
| nginx | almalinux | PASS | PASS | PASS | PASS | PASS | PASS |
| mysql | almalinux | FAIL | SKIP | SKIP | SKIP | SKIP | SKIP |
| postgres | almalinux | PASS | PASS | PASS | PASS | PASS | PASS |
| redis | almalinux | PASS | PASS | PASS | PASS | PASS | PASS |

## Phase 3b: Hardened Boot Tests

| Distro | Create | systemd |
|--------|--------|---------|
| debian | PASS | PASS |
| ubuntu | PASS | PASS |
| fedora | PASS | PASS |
| centos | PASS | PASS |
| almalinux | PASS | PASS |

## Phase 3c: Hardened OCI App Matrix

| App | Distro | Boot | Service |
|-----|--------|------|---------|
| nginx | debian | PASS | PASS |
| mysql | debian | PASS | PASS |
| postgres | debian | PASS | PASS |
| redis | debian | PASS | PASS |
| nginx | ubuntu | SKIP | SKIP |
| mysql | ubuntu | PASS | PASS |
| postgres | ubuntu | PASS | PASS |
| redis | ubuntu | PASS | PASS |
| nginx | fedora | PASS | PASS |
| mysql | fedora | PASS | PASS |
| postgres | fedora | PASS | PASS |
| redis | fedora | PASS | PASS |
| nginx | centos | PASS | PASS |
| mysql | centos | PASS | PASS |
| postgres | centos | PASS | PASS |
| redis | centos | PASS | PASS |
| nginx | almalinux | PASS | PASS |
| mysql | almalinux | SKIP | SKIP |
| postgres | almalinux | PASS | PASS |
| redis | almalinux | PASS | PASS |

## Failures

### app/mysql-on-almalinux/import

```
config: /root/.config/sdme/sdmerc
pulling registry-1.docker.io/library/mysql:latest
no proxy configured
probing https://registry-1.docker.io/v2/
WWW-Authenticate: Bearer realm="https://auth.docker.io/token",service="registry.docker.io"
requesting token from https://auth.docker.io/token?service=registry.docker.io&scope=repository:library/mysql:pull
obtained bearer token (2657 chars)
fetching manifest: https://registry-1.docker.io/v2/library/mysql/manifests/latest
manifest list with 4 entries, selecting linux/arm64
selected platform manifest: sha256:a0a8658e3ccc3896b4bd0a615d274265ab0f539a48513e76de47278324f4a86b
fetching manifest: https://registry-1.docker.io/v2/library/mysql/manifests/sha256:a0a8658e3ccc3896b4bd0a615d274265ab0f539a48513e76de47278324f4a86b
image has 10 layer(s)
fetching config blob: sha256:7d4a63af4712748c241f6264839c36667b0c9cb0e844be014358eac92a2f86df
image config: entrypoint=Some(["docker-entrypoint.sh"]) cmd=Some(["mysqld"]) workdir=Some("/") user=None
image config: env (5 vars)
image config: exposed ports: 3306/tcp, 33060/tcp
image config: volumes: /var/lib/mysql
extracting layer 1/10: sha256:482e8d56575a6fbe539cfb44150fa96593766f3af0610165cb5c8a63fa68d8db
downloading blob: sha256:482e8d56575a6fbe539cfb44150fa96593766f3af0610165cb5c8a63fa68d8db
downloaded 45901980 bytes
extracting layer 2/10: sha256:25a428306dd22fae952c306042a1a41fce1d00460056c42c8c77df208706f843
downloading blob: sha256:25a428306dd22fae952c306042a1a41fce1d00460056c42c8c77df208706f843
downloaded 884 bytes
extracting layer 3/10: sha256:f07eb38f4a27725ef790ede472bc63c94ad3e5bf1fb54c902338142ce3f53a65
downloading blob: sha256:f07eb38f4a27725ef790ede472bc63c94ad3e5bf1fb54c902338142ce3f53a65
downloaded 737522 bytes
extracting layer 4/10: sha256:8c160561713a8c87e28dda3b96208206820b192537a3a59ad8b4d771fa687ab1
downloading blob: sha256:8c160561713a8c87e28dda3b96208206820b192537a3a59ad8b4d771fa687ab1
downloaded 5792729 bytes
extracting layer 5/10: sha256:da4f97373d3c563391adbf899f7251fd5b8c0a6daae2f4883a7fdafc0f5d1a5f
downloading blob: sha256:da4f97373d3c563391adbf899f7251fd5b8c0a6daae2f4883a7fdafc0f5d1a5f
downloaded 2607 bytes
extracting layer 6/10: sha256:1f28b8d4eb10dbbbe8a4d652aaa13b7b6e7e0e0b360e9e1d095a1dc96f270738
downloading blob: sha256:1f28b8d4eb10dbbbe8a4d652aaa13b7b6e7e0e0b360e9e1d095a1dc96f270738
downloaded 338 bytes
extracting layer 7/10: sha256:c3cc933cc4ee94163664d86b613bb75fd92fc86719b73afddc16920263e78229
downloading blob: sha256:c3cc933cc4ee94163664d86b613bb75fd92fc86719b73afddc16920263e78229
Error: failed to read blob sha256:c3cc933cc4ee94163664d86b613bb75fd92fc86719b73afddc16920263e78229

Caused by:
    timeout: receive response
```

### app/nginx-on-ubuntu/import

```
config: /root/.config/sdme/sdmerc
pulling registry-1.docker.io/library/nginx:latest
no proxy configured
probing https://registry-1.docker.io/v2/
WWW-Authenticate: Bearer realm="https://auth.docker.io/token",service="registry.docker.io"
requesting token from https://auth.docker.io/token?service=registry.docker.io&scope=repository:library/nginx:pull
obtained bearer token (2657 chars)
fetching manifest: https://registry-1.docker.io/v2/library/nginx/manifests/latest
manifest list with 16 entries, selecting linux/arm64
selected platform manifest: sha256:f676e65a102e4eb6b30ca6ece7300e1ad72bdd60758b8e4e5072c45b86979916
fetching manifest: https://registry-1.docker.io/v2/library/nginx/manifests/sha256:f676e65a102e4eb6b30ca6ece7300e1ad72bdd60758b8e4e5072c45b86979916
image has 7 layer(s)
fetching config blob: sha256:0000f06a0cafed8b95a6dabaec83c50aa674280ffb0e9ee3ff87521518580bcc
image config: entrypoint=Some(["/docker-entrypoint.sh"]) cmd=Some(["nginx", "-g", "daemon off;"]) workdir=None user=None
image config: env (7 vars)
image config: exposed ports: 80/tcp
image config: stop signal: SIGQUIT
extracting layer 1/7: sha256:3b66ab8c894cad95899b704e688938517870850391d1349c862c2b09214acb86
downloading blob: sha256:3b66ab8c894cad95899b704e688938517870850391d1349c862c2b09214acb86
Error: failed to read blob sha256:3b66ab8c894cad95899b704e688938517870850391d1349c862c2b09214acb86

Caused by:
    Peer disconnected
```

