runtime: publish NEWFI-260909-A-STAGINGEDGE-LAN-CERTSET-RCA58

2026-09-09 05:46:43 +00:00
parent 15431a1f99
commit 05a266a20a
4 changed files with 164 additions and 18 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "NEWFI-260909-A-STAGINGEDGE-LAN-CERTSET-RCA58",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "newfi-stagingedge-private-lan-stage-cert-localization-rca-v20",
+  "started_at_utc": "2026-09-09T05:46:38Z",
+  "finished_at_utc": "2026-09-09T05:46:42Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "0a966b5da46c6f2aadd317592fefc97e9182caf555d9ee94e2d8cccb219c91ae",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "7c9351d3144765d5a859ed3af84c393de14b8082e1b91df5c43915434ad77bec",
+  "sanitized_output_sha256": "7c9351d3144765d5a859ed3af84c393de14b8082e1b91df5c43915434ad77bec",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "RCA58_BEGIN=true\nCOMMAND_ID=NEWFI-260909-A-STAGINGEDGE-LAN-CERTSET-RCA58\nMODE=read-only\nERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nNEWFI58_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nNEWFI58_KNOWN_HOSTS_SHA256_BEFORE=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735\nNEWFI58_PRODUCTION_PRE_HTTP=200\nNEWFI58_REFERENCE_EXPECTED_EDGE_HASH_PRESENT=true\nNEWFI58_REFERENCE_EDGE_TARGET_HASH_COUNT=10\nNEWFI58_ROUTE_DEV_HASH=4447c55f4245e8fe8daaa4f46549f629e6b7d4e45a48d07830c7419e3a17a141\nNEWFI58_LAN_SCOPE_OK=true\nNEWFI58_LAN_PREFIXLEN=24\nNEWFI58_LAN_NETWORK_HASH=3bc5d8aba5c1426425a0ad3770bf77782d3f16a12d4455ad3d3a7ce324a5910a\nNEWFI58_GATEWAY_HASH=4f9da1283166a1e9f4e6bc7dd240c76aef85772177f717f92abb6e8e2bb8de90\nNEWFI58_SELF_HASH=fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9\nNEWFI58_HAIRPIN_STAGE_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074\nNEWFI58_EXTERNAL_TLS_API_RC=0\nNEWFI58_EXTERNAL_STAGE_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074\nNEWFI58_EXTERNAL_STAGE_CN=chat.gram1.ru\nNEWFI58_EXTERNAL_STAGE_AUTHORIZED=false\nNEWFI58_EXTERNAL_FP_MATCHES_HAIRPIN=true\nNEWFI58_EXTERNAL_TLS_NOW_TRUSTED_STAGE=false\nNEWFI58_LAN_SCAN_HOST_COUNT=253\nNEWFI58_LAN_443_OPEN_COUNT=2\nNEWFI58_LAN_STAGE_TLS_PROBED_COUNT=2\nNEWFI58_LAN_EXTERNAL_STAGE_FP_MATCH_COUNT=0\nNEWFI58_LAN_EXTERNAL_STAGE_FP_MATCH_HOST_HASHES=[]\nNEWFI58_LAN_MATCH_IS_GATEWAY=false\nNEWFI58_LAN_MATCH_IS_EXPECTED_EDGE=false\nNEWFI58_EXPECTED_EDGE_PORT443_VISIBLE=true\nNEWFI58_EXPECTED_EDGE_STAGE_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394\nNEWFI58_EXPECTED_EDGE_STAGE_FP_MATCH_TRUSTED=true\nNEWFI58_GATEWAY_PORT443_VISIBLE=false\nNEWFI58_GATEWAY_STAGE_FP_MATCH_EXTERNAL=false\nNEWFI58_PRODUCTION_POST_HTTP=200\nNEWFI58_KNOWN_HOSTS_UNCHANGED=true\nNEWFI58_DECISION=PUBLIC_STAGE_CERT_NOT_PRESENT_ON_PRIVATE_LAN_UPSTREAM_OR_ROUTER_WAN_TERMINATION\nNEWFI58_CHANGES_MADE=false\nNEWFI58_MUTATION_SCOPE=NONE_BOUNDED_PRIVATE_LAN_TLS_HANDSHAKES_ONLY\nNEWFI58_RCA_EXECUTION=PASS\n"
+}
@@ -0,0 +1,74 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=NEWFI-260909-A-STAGINGEDGE-LAN-CERTSET-RCA58
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=newfi-stagingedge-private-lan-stage-cert-localization-rca-v20
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=0a966b5da46c6f2aadd317592fefc97e9182caf555d9ee94e2d8cccb219c91ae
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=7c9351d3144765d5a859ed3af84c393de14b8082e1b91df5c43915434ad77bec
+SANITIZED_OUTPUT_SHA256=7c9351d3144765d5a859ed3af84c393de14b8082e1b91df5c43915434ad77bec
+OUTPUT_BEGIN
+RCA58_BEGIN=true
+COMMAND_ID=NEWFI-260909-A-STAGINGEDGE-LAN-CERTSET-RCA58
+MODE=read-only
+ERROR_REGISTER_CHECK=OK
+REFERENCE_CHECK=OK
+AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED
+NEWFI58_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
+NEWFI58_KNOWN_HOSTS_SHA256_BEFORE=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735
+NEWFI58_PRODUCTION_PRE_HTTP=200
+NEWFI58_REFERENCE_EXPECTED_EDGE_HASH_PRESENT=true
+NEWFI58_REFERENCE_EDGE_TARGET_HASH_COUNT=10
+NEWFI58_ROUTE_DEV_HASH=4447c55f4245e8fe8daaa4f46549f629e6b7d4e45a48d07830c7419e3a17a141
+NEWFI58_LAN_SCOPE_OK=true
+NEWFI58_LAN_PREFIXLEN=24
+NEWFI58_LAN_NETWORK_HASH=3bc5d8aba5c1426425a0ad3770bf77782d3f16a12d4455ad3d3a7ce324a5910a
+NEWFI58_GATEWAY_HASH=4f9da1283166a1e9f4e6bc7dd240c76aef85772177f717f92abb6e8e2bb8de90
+NEWFI58_SELF_HASH=fb345731d21c612ed2cb13088c10fd26bac959c79a7634cb55e23ee6bfb428d9
+NEWFI58_HAIRPIN_STAGE_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074
+NEWFI58_EXTERNAL_TLS_API_RC=0
+NEWFI58_EXTERNAL_STAGE_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074
+NEWFI58_EXTERNAL_STAGE_CN=chat.gram1.ru
+NEWFI58_EXTERNAL_STAGE_AUTHORIZED=false
+NEWFI58_EXTERNAL_FP_MATCHES_HAIRPIN=true
+NEWFI58_EXTERNAL_TLS_NOW_TRUSTED_STAGE=false
+NEWFI58_LAN_SCAN_HOST_COUNT=253
+NEWFI58_LAN_443_OPEN_COUNT=2
+NEWFI58_LAN_STAGE_TLS_PROBED_COUNT=2
+NEWFI58_LAN_EXTERNAL_STAGE_FP_MATCH_COUNT=0
+NEWFI58_LAN_EXTERNAL_STAGE_FP_MATCH_HOST_HASHES=[]
+NEWFI58_LAN_MATCH_IS_GATEWAY=false
+NEWFI58_LAN_MATCH_IS_EXPECTED_EDGE=false
+NEWFI58_EXPECTED_EDGE_PORT443_VISIBLE=true
+NEWFI58_EXPECTED_EDGE_STAGE_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394
+NEWFI58_EXPECTED_EDGE_STAGE_FP_MATCH_TRUSTED=true
+NEWFI58_GATEWAY_PORT443_VISIBLE=false
+NEWFI58_GATEWAY_STAGE_FP_MATCH_EXTERNAL=false
+NEWFI58_PRODUCTION_POST_HTTP=200
+NEWFI58_KNOWN_HOSTS_UNCHANGED=true
+NEWFI58_DECISION=PUBLIC_STAGE_CERT_NOT_PRESENT_ON_PRIVATE_LAN_UPSTREAM_OR_ROUTER_WAN_TERMINATION
+NEWFI58_CHANGES_MADE=false
+NEWFI58_MUTATION_SCOPE=NONE_BOUNDED_PRIVATE_LAN_TLS_HANDSHAKES_ONLY
+NEWFI58_RCA_EXECUTION=PASS
+
+OUTPUT_END
+CHAT_OUTPUT_END