CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260919-NETBIRD-MOLDOVA-FIREWALL-PATH-RCA-READONLY-610R2
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=netbird-moldova-firewall-path-rca-readonly
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=b71cc94cbc71e9bbd2e51cbfc989c47a106bd17d04ede98ea5a97c741020ea2a
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=f3cfe4d8536ad376981cf875f37f2d61735ede8cefb46ee68dc9884d1aac198d
SANITIZED_OUTPUT_SHA256=f3cfe4d8536ad376981cf875f37f2d61735ede8cefb46ee68dc9884d1aac198d
OUTPUT_BEGIN
PVE1_OPERATOR_KEY_MATCH=True
MOLDOVA_KNOWNHOST_MATCH=True
MOLDOVA_SSH_RC=0
AUDIT_REMOTE=BEGIN
HOSTNAME=relay
UID=1000
USER=ops
GROUPS=ops sudo
SUDO_N=True
IDENTITY_REMOTE_OK=True
DEFAULT_ROUTE_DEVS=eth0
NFTABLES_ACTIVE=active
NFTABLES_ENABLED=enabled
FIREWALLD_ACTIVE=inactive
NETFILTER_PERSISTENT_ACTIVE=inactive
NETBIRD_ACTIVE=active
NFTABLES_SYSTEMD_SHOW=ExecStart={ path=/usr/sbin/nft ; argv[]=/usr/sbin/nft -f /etc/nftables.conf ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 } FragmentPath=/lib/systemd/system/nftables.service
NETBIRD_SYSTEMD_SHOW=ExecStart={ path=/usr/bin/netbird ; argv[]=/usr/bin/netbird service run --log-level info --daemon-addr unix:///var/run/netbird.sock --log-file /var/log/netbird/client.log ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 } FragmentPath=/etc/systemd/system/netbird.service
NFTABLES_CONF_PRESENT=True
NFTABLES_CONF_SHA256=dbde07925ede154b7d584f6401166c4c044aa7bd4375afe7b558cba68cef9472
NFTABLES_CONF_CHECK_RC=0
NFT_CONFIG_FILE_COUNT=1
NFT_CONFIG_FILE_00=/etc/nftables.conf|dbde07925ede154b7d584f6401166c4c044aa7bd4375afe7b558cba68cef9472
NFT_JSON_RC=0
INPUT_BASE_CHAIN_COUNT=3
INPUT_BASE_00=family=inet table=filter chain=input type=filter priority=0 policy=drop
INPUT_BASE_01=family=ip table=netbird chain=netbird-acl-input-filter type=filter priority=0 policy=accept
INPUT_BASE_02=family=ip6 table=netbird chain=netbird-acl-input-filter type=filter priority=0 policy=accept
INPUT_REACHABLE_CHAIN_COUNT=5
NFT_RULE_00=family=inet table=filter chain=input handle=5 dports=- iif=- ct=established,related verdict=accept jump=- comment=-
NFT_RULE_01=family=inet table=filter chain=input handle=8 dports=22 iif=- ct=- verdict=accept jump=- comment=-
NFT_RULE_02=family=ip table=netbird chain=netbird-acl-input-filter handle=16 dports=- iif=wt0 ct=- verdict=- jump=jump:netbird-acl-input-rules comment=-
NFT_RULE_03=family=ip table=netbird chain=netbird-acl-input-filter handle=17 dports=- iif=wt0 ct=- verdict=drop jump=- comment=-
NFT_RULE_04=family=ip table=netbird chain=netbird-acl-input-rules handle=14 dports=- iif=- ct=established,related verdict=accept jump=- comment=-
NFT_RULE_05=family=ip6 table=netbird chain=netbird-acl-input-filter handle=16 dports=- iif=wt0 ct=- verdict=- jump=jump:netbird-acl-input-rules comment=-
NFT_RULE_06=family=ip6 table=netbird chain=netbird-acl-input-filter handle=17 dports=- iif=wt0 ct=- verdict=drop jump=- comment=-
NFT_RULE_07=family=ip6 table=netbird chain=netbird-acl-input-rules handle=14 dports=- iif=- ct=established,related verdict=accept jump=- comment=-
NFT_RULE_RELEVANT_COUNT=8
DROP_BASE_COUNT=1
DROP_BASE_00=family=inet table=filter chain=input ssh_accept_handles=8 port443_accept_handles=NONE terminal_drop_handles=NONE jumps=NONE
NFT_CONFIG_CTX_00=/etc/nftables.conf:5:type filter hook input priority filter; policy drop;
NFT_CONFIG_CTX_01=/etc/nftables.conf:10:tcp dport 22 accept
NFT_CONFIG_CTX_02=/etc/nftables.conf:11:udp dport 51822 accept
NFT_CONFIG_CTX_03=/etc/nftables.conf:14:type filter hook forward priority filter; policy drop;
NFT_CONFIG_CONTEXT_COUNT=4
FIREWALL_WRITER_FILE_COUNT=0
FIREWALL_MUTATION_PATH_PROVEN=True
AUDIT_REMOTE=END
TASK_COMPLETE=true
TASK_RESULT=MOLDOVA_FIREWALL_PATH_EVIDENCE_COLLECTED
NO_MUTATION=true
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-NETBIRD-MOLDOVA-FIREWALL-PATH-RCA-READONLY-610R2","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}

OUTPUT_END
CHAT_OUTPUT_END
