CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-261005-HOME-GRAM1-NETBIRD-PEER-DNS-POLICY-RCA-99599R1
STATUS=FAIL
RC=52
HOST=pve01
MODE=read-only
COMPONENT=home-gram1-netbird-peer-dns-policy-rca
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=a57b891fd2971bb26a4c101ed2507e8c6833907b817e0de6daee5ff3a5d28e63
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=52
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=3e4f1879b00ba16d89d6709bc923bab558aa7be4cbca2319e9cfcdfef16019ad
SANITIZED_OUTPUT_SHA256=3e4f1879b00ba16d89d6709bc923bab558aa7be4cbca2319e9cfcdfef16019ad
OUTPUT_BEGIN
HOME_GRAM1_NETBIRD_PEER_DNS_POLICY_RCA=V1
NO_LOCAL_WINDOWS_MUTATION=true
NO_NETBIRD_CLIENT_MUTATION=true
NO_NETBIRD_SERVER_MUTATION=true
NO_DNS_POLICY_MUTATION=true
NO_GROUP_MUTATION=true
NO_SERVER_RESTART=true
MODE=read-only
HOST_PVE01=true
L_PEER_DIAG_OK=true
L_NB_PRESENT=true
L_NB_CONNECTED=true
L_NB_STATUS_SHA=MISSING
L_NB_DETAIL_SHA=MISSING
L_PC_HOSTNAME_SHA=MISSING
L_NB_ADAPTER_COUNT=1
L_NB_IP_COUNT=1
L_NB_IP_1_SHA=MISSING
L_NB_IP_2_SHA=MISSING
L_NB_IP_3_SHA=MISSING
L_NB_IP_4_SHA=MISSING
L_NB_IP_5_SHA=MISSING
L_STATUS_HOSTNAME_HINT_SHA=MISSING
L_STATUS_IP_HINT_SHA=MISSING
L_HOME_DNS_COUNT=1
NB_SSH_ALIAS_COUNT=0
SOURCE_1_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_2_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_3_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_4_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_5_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_6_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_7_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_8_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_9_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_10_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_11_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_12_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_13_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_14_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_15_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_16_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_17_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_18_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_19_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_20_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_21_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_22_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_23_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_24_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_25_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_26_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_27_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_28_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_29_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_30_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_31_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_32_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_33_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_34_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_35_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_36_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_37_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_38_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_39_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_40_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_41_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_42_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_43_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_44_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_45_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_46_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_47_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_48_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_49_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_50_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_51_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_52_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_53_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_54_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_55_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_56_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_57_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_58_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_59_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_60_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_61_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_62_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_63_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_64_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_65_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_66_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_67_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_68_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_69_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_70_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_71_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_72_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_73_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_74_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_75_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_76_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_77_LINE=kb/AI_CONTEXT.md:32:Production NetBird is new USA `[IP_REDACTED]`, Debian 12, hostname `nb2`, NetBird `0.73.2`. Exact deployment caveat: `/api/health` = 404 and combined `:9000/health` = 503; these are not generic readiness gates for this deployment. Old USA `[IP_REDACTED]` has Mailcow/NetBird server stopped and observer disabled, but remains in rollback window. Permanent new-USA operator SSH hardening is still P0.
SOURCE_78_LINE=kb/private/archive/2026-08-19/docs/20_NETBIRD_USA_MIGRATION_2026-08-18.md:20:- temporary hostname `nb2`
SOURCE_79_LINE=kb/runbooks/04_NETBIRD_USA.md:3:Current production: `[IP_REDACTED]`, NetBird `0.73.2`, hostname `nb2`.
SOURCE_80_LINE=kb/private/archive/2026-08-19/docs/01_CURRENT_AUTHORITATIVE_STATE.md:183:## 6. New USA NetBird production
SOURCE_MATCH_COUNT=80
NB_SSH_TRY_e16ce208_RC=255
NB_SERVER_REACHABLE=false
RCA_CLASS=NETBIRD_SERVER_NOT_REACHABLE_FROM_PVE01
DECISION=HOLD_NETBIRD_PEER_DNS_POLICY_RCA
NEXT_GATE=NETBIRD_SERVER_ACCESS_RECONCILE
TASK_RESULT=HOME_GRAM1_NETBIRD_PEER_DNS_POLICY_RCA
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION

OUTPUT_END
CHAT_OUTPUT_END
