incus list -c config:image.description reports the image a container
was CREATED from (2019 for most of this fleet) and says nothing about
dist-upgrades since — misleading as an inventory. The script now sets
user.os / user.os-checked from /etc/os-release on every pass, leaving
image.* intact as provenance. -o refreshes the metadata without
upgrading anything.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- filter type=container (a running VM without apt/agent would hang)
- skip containers without apt-get instead of erroring
- flock against overlapping runs, csv parsing, apt-get instead of apt
- capture stderr into the log, report per-container failures and
exit non-zero so cron/monitoring can alert
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>