CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260918-INFRA-VPS-THIRD-IDENTITY-RECONCILE-BOUNDED-READONLY-517R1R2
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=infra-vps-third-identity-reconcile-bounded-readonly
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=6b246ed59b370e91656f99009cad29540e5ea5c9b3da9d3199e85413a244603c
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=99d5650c717c021955cabcfd26b14bf29245dfe5df98544fafe1e23857133a2e
SANITIZED_OUTPUT_SHA256=ef912a3560b14376c7f8bd1e55f8a4f3f035b4bcc93cbecf873eeadf279beb24
OUTPUT_BEGIN
VPS517R1R2_SAFE_REPORT={"archive_matches":[],"audit_script":{"bytes":2161,"fqdns":["netbird.vpn.gram1.ru"],"hits":[{"line":4,"text":"VPS_IP=\"${VPS_IP:-[IP_SHA256:f743a81d85de4022]}\""},{"line":5,"text":"VPS_ALIAS=\"${VPS_ALIAS:-netbird.vpn.gram1.ru}\""},{"line":13,"text":"alias_ip=\"$(getent hosts \"$VPS_ALIAS\" 2>/dev/null | awk '{print $1}' | head -n1 || true)\""},{"line":14,"text":"ssh-keygen -F \"$VPS_IP\" -f [SENSITIVE_PATH] > \"$TMP/old-ip-known-hosts.txt\" 2>/dev/null || true"},{"line":15,"text":"ssh-keygen -F \"$VPS_ALIAS\" -f [SENSITIVE_PATH] > \"$TMP/old-alias-known-hosts.txt\" 2>/dev/null || true"},{"line":17,"text":"awk '/ssh-|ecdsa-/{print}' \"$TMP/old-ip-known-hosts.txt\" \"$TMP/old-alias-known-hosts.txt\" > \"$TMP/old-known-hosts.raw\" || true"},{"line":18,"text":"ssh-keygen -lf \"$TMP/old-known-hosts.raw\" > \"$TMP/old-fingerprints.txt\" 2>/dev/null || true"},{"line":20,"text":"ssh-keyscan -T 10 -t ed25519,rsa,ecdsa \"$VPS_IP\" > \"$TMP/current-known-hosts\" 2>/dev/null || true"},{"line":21,"text":"ssh-keygen -lf \"$TMP/current-known-hosts\" > \"$TMP/current-fingerprints.txt\" 2>/dev/null || true"},{"line":23,"text":"backup=\"$(find /mnt/staging/netbird-vps-backups/snapshots -maxdepth 2 -type f -name 'netbird-vps-backup.tgz' 2>/dev/null | sort | tail -n1 || true)\""},{"line":24,"text":"backup_hostkeys=NO"},{"line":28,"text":"  if tar -tzf \"$backup\" | grep -Eq 'ssh_host_.*_key\\.pub$'; then"},{"line":29,"text":"    backup_hostkeys=YES"},{"line":32,"text":"    done < <(tar -tzf \"$backup\" | grep -E 'ssh_host_.*_key\\.pub$')"},{"line":33,"text":"    ssh-keygen -lf \"$TMP/backup-hostkeys.pub\" > \"$TMP/backup-fingerprints.txt\" 2>/dev/null || true"},{"line":41,"text":"[ \"$backup_hostkeys\" = \"YES\" ] && trust=\"BLOCKED_HOSTKEY_MISMATCH\""},{"line":45,"text":"printf 'STATUS=%s TS=%s TYPE=vps-identity-audit VPS_IP=%s ALIAS=%s ALIAS_IP=%s SSH_TRUST=%s BACKUP_HOSTKEYS=%s KNOWN_HOSTS_UNCHANGED=YES SECRET_PRINTED=REDACTED\\n' \\"},{"line":46,"text":"  \"$status\" \"$TS\" \"$VPS_IP\" \"$VPS_ALIAS\" \"${alias_ip:-NONE}\" \"$trust\" \"$backup_hostkeys\" > \"$H\""}],"present":true,"sha256":"b709691c52ae48432b70e197eb4810b6c374a05911cee3b9fdba4ecc67c76c3a"},"backup_artifacts":[],"command_id":"SUPPORT-260918-INFRA-VPS-THIRD-IDENTITY-RECONCILE-BOUNDED-READONLY-517R1R2","correlations":[],"decision":"HOLD_THIRD_VPS_IDENTITY_NOT_UNIQUE","e3q":[{"endpoint_ip_hashes":[],"known_ips":[{"fps":[],"hits":0,"ip_hash":"cb4c52b8c38c6512aa6733c5d0ea510c76a499fbcb8c1c129d331908e88f2528"},{"fps":[],"hits":0,"ip_hash":"cbcf39fece4356231e47ae8708d84f7c3e2a6effd8e5c71451548c094453c0e5"}],"known_name":{"fps":[],"hits":0},"last_seen":null,"name":"e3qxxx-183-106.netbird.selfhosted","peer_ip_hashes":["cb4c52b8c38c6512aa6733c5d0ea510c76a499fbcb8c1c129d331908e88f2528","cbcf39fece4356231e47ae8708d84f7c3e2a6effd8e5c71451548c094453c0e5"],"ssh_g":{"hostname_kind":"NAME","hostname_value":"e3qxxx-183-106.netbird.selfhosted","identityfiles":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk"],"ok":true,"port":"22","user":"root"},"status":"Connecting"},{"endpoint_ip_hashes":[],"known_ips":[{"fps":[],"hits":0,"ip_hash":"97466ca985f4a2f69684aee45965bd2d11a92507761287e0fef56038c1a5dbb9"},{"fps":[],"hits":0,"ip_hash":"8c7543543fdd2a16f1408d0c1df50ed2d8bcb79d5e09b63ae1fdf202e1fbb4b3"}],"known_name":{"fps":[],"hits":0},"last_seen":null,"name":"e3qxxx.netbird.selfhosted","peer_ip_hashes":["97466ca985f4a2f69684aee45965bd2d11a92507761287e0fef56038c1a5dbb9","8c7543543fdd2a16f1408d0c1df50ed2d8bcb79d5e09b63ae1fdf202e1fbb4b3"],"ssh_g":{"hostname_kind":"NAME","hostname_value":"e3qxxx.netbird.selfhosted","identityfiles":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk"],"ok":true,"port":"22","user":"root"},"status":"Connecting"}],"external_ssh_attempts":0,"mode":"read-only","mutations":0,"netbird_status_rc":0,"netbird_stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","schema_version":1,"scores":[{"evidence":[],"name":"e3qxxx-183-106.netbird.selfhosted","score":0},{"evidence":[],"name":"e3qxxx.netbird.selfhosted","score":0}],"services":[{"known_ips":[{"fps":["SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo"],"hits":1,"ip_hash":"5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440"},{"fps":[],"hits":0,"ip_hash":"b6e30f30da48eb8124523d7eb9e71dc270a8f1345bb41c460d0ff7ec4dc8be2f"}],"known_name":{"fps":["SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo"],"hits":1},"name":"netbird.vpn.gram1.ru","resolved_ip_hashes":["5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440","b6e30f30da48eb8124523d7eb9e71dc270a8f1345bb41c460d0ff7ec4dc8be2f"],"ssh_g":{"hostname_kind":"NAME","hostname_value":"netbird.vpn.gram1.ru","identityfiles":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk"],"ok":true,"port":"22","user":"root"}},{"known_ips":[{"fps":["SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo","SHA256:kHDkbbCVkREqGue9V6a0raId0yddPstv1Dha96NgkVY","SHA256:kxsTiPQXtlpwGeokTR+9at+ZP2gqqITgC6s9OkPuquY"],"hits":3,"ip_hash":"bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834"},{"fps":[],"hits":0,"ip_hash":"a5ce7076fd5a5b356fe1bdacc4ff2cf610b0e0f956e686539e5e9dfcecb023cb"}],"known_name":{"fps":[],"hits":0},"name":"backup.gram1.ru","resolved_ip_hashes":["bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834","a5ce7076fd5a5b356fe1bdacc4ff2cf610b0e0f956e686539e5e9dfcecb023cb"],"ssh_g":{"hostname_kind":"NAME","hostname_value":"backup.gram1.ru","identityfiles":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk"],"ok":true,"port":"22","user":"root"}},{"known_ips":[{"fps":["SHA256:2FBYDI2YEYcdzkiAAC306AtebdfeH6NWR5WJZAeH+5E"],"hits":1,"ip_hash":"b980955f01148169b9b74541d4d8ece284de73daa9b31a6aaba2a56c9d531179"},{"fps":[],"hits":0,"ip_hash":"950bcfe548181e4a19ff0236f84126d24165986627fa97a7c45c9ee4b5f95c44"}],"known_name":{"fps":["SHA256:2FBYDI2YEYcdzkiAAC306AtebdfeH6NWR5WJZAeH+5E"],"hits":1},"name":"mail.netbird.selfhosted","resolved_ip_hashes":["b980955f01148169b9b74541d4d8ece284de73daa9b31a6aaba2a56c9d531179","950bcfe548181e4a19ff0236f84126d24165986627fa97a7c45c9ee4b5f95c44"],"ssh_g":{"hostname_kind":"NAME","hostname_value":"mail.netbird.selfhosted","identityfiles":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk"],"ok":true,"port":"22","user":"root"}},{"known_ips":[{"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"hits":1,"ip_hash":"0f61feb58699a097fdfae741ce53e84cd9eae29e8c8d893a0822f20af9231d4c"},{"fps":[],"hits":0,"ip_hash":"d7ae4b440c214f6114944cb388d09b4fa11a0b8ede45358684225e4094485afe"}],"known_name":{"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"hits":1},"name":"relay.netbird.selfhosted","resolved_ip_hashes":["0f61feb58699a097fdfae741ce53e84cd9eae29e8c8d893a0822f20af9231d4c","d7ae4b440c214f6114944cb388d09b4fa11a0b8ede45358684225e4094485afe"],"ssh_g":{"hostname_kind":"NAME","hostname_value":"relay.netbird.selfhosted","identityfiles":["id_rsa","id_ecdsa","id_ecdsa_sk","id_ed25519","id_ed25519_sk"],"ok":true,"port":"22","user":"root"}}]}
VPS517R1R2_DECISION=HOLD_THIRD_VPS_IDENTITY_NOT_UNIQUE
VPS517R1R2_NEXT_GATE=READONLY_3VPS_LIVE_INVENTORY_IF_PASS_ELSE_REVIEW
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-THIRD-IDENTITY-RECONCILE-BOUNDED-READONLY-517R1R2","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}

OUTPUT_END
CHAT_OUTPUT_END
