From 0f40dcc519fb7e135a6c1f6b0b2fdb6c39309968 Mon Sep 17 00:00:00 2001 From: Inferencebot Date: Fri, 6 Nov 2026 04:11:11 +0000 Subject: [PATCH] runbook: add the standing supply-chain IoC check to the gateway verify steps --- maintenance/2026-11-08-litellm-1.108.0-librechat-1.4.8.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/maintenance/2026-11-08-litellm-1.108.0-librechat-1.4.8.md b/maintenance/2026-11-08-litellm-1.108.0-librechat-1.4.8.md index 5b93c5e..8af0142 100644 --- a/maintenance/2026-11-08-litellm-1.108.0-librechat-1.4.8.md +++ b/maintenance/2026-11-08-litellm-1.108.0-librechat-1.4.8.md @@ -122,6 +122,14 @@ CR exec --app gateway.inference.coop -- sh -c \ grep -c "x-litellm-response-cost-input" /app/.venv/lib/python3.13/site-packages/litellm/proxy/proxy_server.py' # → 1 and 1 +# 2b. supply-chain IoC check (standing policy on every LiteLLM image change): +CR exec --app gateway.inference.coop -- sh -c \ + 'ls /app/.venv/lib/python3.13/site-packages/litellm_init.pth 2>/dev/null; \ + ls /root/.config/sysmon 2>/dev/null; \ + ls /tmp/pglog 2>/dev/null; echo IOC-CLEAN' +# → must print ONLY "IOC-CLEAN" (no such files). Any hit = stop, quarantine, rotate +# the gateway env keys (master + providers live in that env). + # 3. MEMBER-SCOPE key path (master-key tests alone prove nothing — master bypasses # exactly the tables a broken migration empties): # POST /key/generate {"alias":"upgrade-verify-temp"} (master auth) → temp key