runtime: publish SUPPORT-261007-CLUSTER-FINAL-POSTRESTORE-DEEP-AUDIT-99784R1
This commit is contained in:
homelab-runtime-publisher
File diff suppressed because one or more lines are too long
@@ -0,0 +1,171 @@
|
||||
CHAT_OUTPUT_BEGIN
|
||||
COMMAND_ID=SUPPORT-261007-CLUSTER-FINAL-POSTRESTORE-DEEP-AUDIT-99784R1
|
||||
STATUS=OK
|
||||
RC=0
|
||||
HOST=pve01
|
||||
MODE=read-only
|
||||
COMPONENT=cluster-final-postrestore-deep-audit
|
||||
REFERENCE_REGISTER_CHECK=OK
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
COMMAND_SHA256=bab415c528af05e21a1bad7d4155810fd0eaed0c4e60d4972c71d90301c2a593
|
||||
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||
EXECUTION_STARTED=true
|
||||
CHANGE_DECLARED=false
|
||||
RESULT_CONTRACT_VALID=true
|
||||
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
|
||||
RESULT_CONTRACT_ERROR=NONE
|
||||
COMMAND_RC=0
|
||||
CHANGES_MADE=false
|
||||
ROLLBACK_STARTED=false
|
||||
ROLLBACK_RESTORED=null
|
||||
MUTATION_OUTCOME=NO_MUTATION
|
||||
SANITIZED=yes
|
||||
SECRETS_INCLUDED=no
|
||||
PRIVATE_ADDRESSES_INCLUDED=no
|
||||
RAW_EVIDENCE_SHA256=65c2b50cb0d4010426e9a7aa7f0315bc8fe4c7370545062b5472a087b3fa735d
|
||||
SANITIZED_OUTPUT_SHA256=65c2b50cb0d4010426e9a7aa7f0315bc8fe4c7370545062b5472a087b3fa735d
|
||||
OUTPUT_BEGIN
|
||||
CLUSTER_FINAL_POSTRESTORE_DEEP_AUDIT=V1
|
||||
MODE=read-only
|
||||
NO_MUTATION=true
|
||||
WINDOWS_LOCAL_INSPECT_RC=0
|
||||
WINDOWS_EVIDENCE_PRESENT=true
|
||||
WINDOWS_POSTRESTORE_DEEP_AUDIT=V1
|
||||
MODE=read-only
|
||||
NO_MUTATION=true
|
||||
WINDOWS_WATCHDOG_STARTUP_REF_COUNT=1
|
||||
WINDOWS_WATCHDOG_SHA_MATCH=true
|
||||
WINDOWS_WATCHDOG_PROCESS_COUNT=2
|
||||
WINDOWS_BRIDGE_STARTUP_REF_COUNT=2
|
||||
WINDOWS_BRIDGE_SHA_MATCH=true
|
||||
WINDOWS_64020_LISTENER_COUNT=2
|
||||
WINDOWS_64020_TOPOLOGY_OK=true
|
||||
WINDOWS_64020_TELEGRAM_OK=5/5
|
||||
WINDOWS_64020_GOOGLE_OK=5/5
|
||||
WINDOWS_64020_IOBIT_OK=5/5
|
||||
WINDOWS_64022_LISTENER_COUNT=1
|
||||
WINDOWS_64022_TOPOLOGY_OK=true
|
||||
WINDOWS_64022_HTTP_GOOGLE_OK=5/5
|
||||
WINDOWS_64022_HTTP_IOBIT_OK=5/5
|
||||
WINDOWS_WININET_PROXY_ENABLE=0
|
||||
WINDOWS_CHROME_SOCKS64020_SHORTCUT_COUNT=1
|
||||
WINDOWS_PAGEANT_PROCESS_COUNT=1
|
||||
WINDOWS_PLINK_PROCESS_COUNT=1
|
||||
WINDOWS_NETBIRD_SERVICE_RUNNING=true
|
||||
WINDOWS_APP_LANES_PASS=true
|
||||
CLUSTER_QUORATE=true
|
||||
CLUSTER_NODE_COUNT=0
|
||||
REC|ISSUE|CLUSTER_NODE_COUNT_0
|
||||
CLUSTER_GUEST_COUNT=13
|
||||
REC|CLUSTER_GUEST|TYPE=lxc|VMID=110|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=lxc|VMID=111|NODE=pve02|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=lxc|VMID=112|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=lxc|VMID=113|NODE=pve02|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=100|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=101|NODE=pve01|STATUS=stopped
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=130|NODE=pve03|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=150|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=170|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=171|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=190|NODE=pve03|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=210|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=9130|NODE=pve02|STATUS=stopped
|
||||
UNEXPECTED_STOPPED_GUEST_COUNT=0
|
||||
NODE_BEGIN=pve01
|
||||
NODE_COLLECTION_RC|NODE=pve01|RC=0
|
||||
REC|NODE|pve01|NODE_KERNEL=7.0.14-20-pve
|
||||
REC|NODE|pve01|NODE_NTP_SYNC=yes
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=pve-manager|INSTALLED=9.2.21|CANDIDATE=9.2.21|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=qemu-server|INSTALLED=9.2.10|CANDIDATE=9.2.10|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=pve-qemu-kvm|INSTALLED=11.0.3-4|CANDIDATE=11.0.3-4|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=corosync|INSTALLED=3.1.10-pve3|CANDIDATE=3.1.10-pve3|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=zfsutils-linux|INSTALLED=2.4.4-pve1|CANDIDATE=2.4.4-pve1|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=ceph-common|INSTALLED=19.2.6-pve4|CANDIDATE=19.2.6-pve4|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=netbird|INSTALLED=0.80.0|CANDIDATE=0.80.0|MATCH=true
|
||||
REC|NODE|pve01|NODE_DPKG_AUDIT_COUNT=0
|
||||
REC|NODE|pve01|NODE_FAILED_UNIT_COUNT=1
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=pve-cluster|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=pvedaemon|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=pveproxy|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=pvestatd|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=corosync|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=ssh|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=postfix|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=netbird|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|NODE_ROOT_USE_PCT=49
|
||||
REC|NODE|pve01|NODE_ZPOOL_COUNT=0
|
||||
REC|NODE|pve01|NODE_POSTFIX_QUEUE_COUNT=0
|
||||
REC|NODE|pve01|NODE_NETBIRD_LAZY=false
|
||||
REC|NODE|pve01|NODE_NETBIRD_MANAGEMENT=true
|
||||
REC|NODE|pve01|NODE_NETBIRD_SIGNAL=true
|
||||
REC|NODE|pve01|NODE_NETBIRD_CONNECTED=5
|
||||
REC|ISSUE|pve01_FAILED_UNITS_1
|
||||
NODE_BEGIN=pve02
|
||||
NODE_COLLECTION_RC|NODE=pve02|RC=0
|
||||
REC|ISSUE|pve02_DPKG_AUDIT_UNKNOWN
|
||||
REC|ISSUE|pve02_FAILED_UNITS_UNKNOWN
|
||||
REC|ISSUE|pve02_NETBIRD_MANAGEMENT
|
||||
REC|ISSUE|pve02_NETBIRD_SIGNAL
|
||||
REC|ISSUE|pve02_NETBIRD_CONNECTED_0
|
||||
NODE_BEGIN=pve03
|
||||
NODE_COLLECTION_RC|NODE=pve03|RC=0
|
||||
REC|ISSUE|pve03_DPKG_AUDIT_UNKNOWN
|
||||
REC|ISSUE|pve03_FAILED_UNITS_UNKNOWN
|
||||
REC|ISSUE|pve03_NETBIRD_MANAGEMENT
|
||||
REC|ISSUE|pve03_NETBIRD_SIGNAL
|
||||
REC|ISSUE|pve03_NETBIRD_CONNECTED_0
|
||||
PVE64020_UNIT_ACTIVE=active
|
||||
PVE64020_UNIT_ENABLED=enabled
|
||||
PVE64020_LISTENER_COUNT=1
|
||||
PVE64020_SSH_OWNER_COUNT=1
|
||||
PVE64020_TELEGRAM_OK=3/3
|
||||
PVE64020_IOBIT_OK=3/3
|
||||
PVE64020_GOOGLE_OK=3/3
|
||||
WINDOWS_APP_LANES_PASS_FINAL=true
|
||||
REC|BACKUP_UNIT|UNIT=homelab-backup-audit.service|LOAD=loaded|ACTIVE=inactive|ENABLED=static|RESULT=success
|
||||
REC|BACKUP_UNIT|UNIT=homelab-backup-retention-gc.service|LOAD=loaded|ACTIVE=inactive|ENABLED=static|RESULT=success
|
||||
REC|BACKUP_UNIT|UNIT=homelab-backup-audit.timer|LOAD=loaded|ACTIVE=active|ENABLED=enabled|RESULT=success
|
||||
REC|BACKUP_UNIT|UNIT=homelab-backup-v2.timer|LOAD=loaded|ACTIVE=active|ENABLED=enabled|RESULT=success
|
||||
BACKUP_LATEST_SUMMARY_PRESENT=true
|
||||
REC|BACKUP_LATEST|SUMMARY|AUDIT_STATUS=OK|BACKUP_STATUS=GREEN|ACTIVE_COUNT=15|ISSUE_COUNT=0|CLOUD_A=OK|CLOUD_B=OK|CLOUD_B_DRILL=OK|DR_PROVEN=YES|SOURCE_OFFHOST=OK
|
||||
PVE01_HOME_EGRESS_SHA=26ac437d63a8bcf254255cc970d7614e78bd0a67b97b5575a42a1c3ca7a301ee
|
||||
VM150_QGA_RC=0
|
||||
REC|VM150|REC|CONTAINER|NAME=snikket|STATE=true|0
|
||||
REC|VM150|REC|CONTAINER|NAME=snikket-proxy|STATE=true|0
|
||||
REC|VM150|REC|CONTAINER|NAME=snikket-certs|STATE=true|0
|
||||
REC|VM150|REC|CONTAINER|NAME=snikket-portal|STATE=true|0
|
||||
REC|VM150|FAILED_UNIT_COUNT=0
|
||||
REC|VM150|GOOGLE_RC=0
|
||||
REC|VM150|EGRESS_SHA=26ac437d63a8bcf254255cc970d7614e78bd0a67b97b5575a42a1c3ca7a301ee
|
||||
REC|VM150|LOCAL_HTTPS_CODE=404
|
||||
VM150_EGRESS_MATCH_HOME=true
|
||||
REC|SNIKKET_PUBLIC|ROLE=primary|DNS_MATCH_HOME=false|HTTPS_RC=0|HTTP=302
|
||||
REC|ISSUE|SNIKKET_primary_DNS
|
||||
REC|SNIKKET_PUBLIC|ROLE=groups|DNS_MATCH_HOME=false|HTTPS_RC=0|HTTP=301
|
||||
REC|ISSUE|SNIKKET_groups_DNS
|
||||
REC|SNIKKET_PUBLIC|ROLE=share|DNS_MATCH_HOME=false|HTTPS_RC=0|HTTP=301
|
||||
REC|ISSUE|SNIKKET_share_DNS
|
||||
VM130_QGA_RC=1
|
||||
REC|ISSUE|VM130_QGA
|
||||
awk: cannot open "/tmp/w2-99784.m4G6s6/vm130.out" (No such file or directory)
|
||||
awk: cannot open "/tmp/w2-99784.m4G6s6/vm130.out" (No such file or directory)
|
||||
awk: cannot open "/tmp/w2-99784.m4G6s6/vm130.out" (No such file or directory)
|
||||
awk: cannot open "/tmp/w2-99784.m4G6s6/vm130.out" (No such file or directory)
|
||||
REC|ISSUE|VM130_PRIORITY101_UNKNOWN
|
||||
REC|ISSUE|VM130_WG_CONFIG_NOT_ORIGINAL
|
||||
REC|ISSUE|VM130_GOOGLE
|
||||
REC|ISSUE|VM130_FAILED_UNITS_UNKNOWN
|
||||
FINAL_ISSUE_COUNT=20
|
||||
DECISION=HOLD_CLUSTER_FINAL_POSTRESTORE_DEEP_AUDIT_FINDINGS
|
||||
NEXT_GATE=TARGET_ONLY_REMAINING_ISSUES
|
||||
TASK_RESULT=CLUSTER_FINAL_POSTRESTORE_DEEP_AUDIT
|
||||
CHANGES_MADE=false
|
||||
ROLLBACK_STARTED=false
|
||||
ROLLBACK_RESTORED=null
|
||||
MUTATION_OUTCOME=NO_MUTATION
|
||||
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261007-CLUSTER-FINAL-POSTRESTORE-DEEP-AUDIT-99784R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
||||
|
||||
OUTPUT_END
|
||||
CHAT_OUTPUT_END
|
||||
+8
-8
File diff suppressed because one or more lines are too long
+133
-196
@@ -1,15 +1,15 @@
|
||||
CHAT_OUTPUT_BEGIN
|
||||
COMMAND_ID=SUPPORT-261007-WINDOWS-DACHA-64022-BRIDGE-EXACT-SOURCE-RCA-99783R1
|
||||
COMMAND_ID=SUPPORT-261007-CLUSTER-FINAL-POSTRESTORE-DEEP-AUDIT-99784R1
|
||||
STATUS=OK
|
||||
RC=0
|
||||
HOST=pve01
|
||||
MODE=read-only
|
||||
COMPONENT=windows-dacha-64022-bridge-exact-source-rca
|
||||
COMPONENT=cluster-final-postrestore-deep-audit
|
||||
REFERENCE_REGISTER_CHECK=OK
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
COMMAND_SHA256=29c3f3ddfe92bc5d9c1bb03713be42ea2a98feb62a5dfc18888c66feaec02ee3
|
||||
COMMAND_SHA256=bab415c528af05e21a1bad7d4155810fd0eaed0c4e60d4972c71d90301c2a593
|
||||
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||
EXECUTION_STARTED=true
|
||||
CHANGE_DECLARED=false
|
||||
@@ -24,211 +24,148 @@ MUTATION_OUTCOME=NO_MUTATION
|
||||
SANITIZED=yes
|
||||
SECRETS_INCLUDED=no
|
||||
PRIVATE_ADDRESSES_INCLUDED=no
|
||||
RAW_EVIDENCE_SHA256=66b16d6cb988213a72ed70a9ed3e7d0cce65c7f44b3752973ecd7e161e40042b
|
||||
SANITIZED_OUTPUT_SHA256=66b16d6cb988213a72ed70a9ed3e7d0cce65c7f44b3752973ecd7e161e40042b
|
||||
RAW_EVIDENCE_SHA256=65c2b50cb0d4010426e9a7aa7f0315bc8fe4c7370545062b5472a087b3fa735d
|
||||
SANITIZED_OUTPUT_SHA256=65c2b50cb0d4010426e9a7aa7f0315bc8fe4c7370545062b5472a087b3fa735d
|
||||
OUTPUT_BEGIN
|
||||
WINDOWS_DACHA_64022_BRIDGE_EXACT_SOURCE_RCA=V1
|
||||
CLUSTER_FINAL_POSTRESTORE_DEEP_AUDIT=V1
|
||||
MODE=read-only
|
||||
NO_MUTATION=true
|
||||
WINDOWS_LOCAL_INSPECT_RC=0
|
||||
WINDOWS_EVIDENCE_PRESENT=true
|
||||
WINDOWS_DACHA_64022_BRIDGE_EXACT_SOURCE_RCA=V1
|
||||
WINDOWS_POSTRESTORE_DEEP_AUDIT=V1
|
||||
MODE=read-only
|
||||
NO_MUTATION=true
|
||||
STARTUP_MATCH_COUNT=2
|
||||
REC|STARTUP|IDX=1|SCRIPT_RESOLVED=true|ARGS_SANITIZED=-NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "<BRIDGE_PATH>" -ListenPort 64022 -SocksPort 64020
|
||||
REC|STARTUP|IDX=2|SCRIPT_RESOLVED=true|ARGS_SANITIZED=-NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "<BRIDGE_PATH>" -ListenPort 64022 -SocksPort 64020
|
||||
BRIDGE_PATH_COUNT=1
|
||||
REC|BRIDGE_FILE|BASENAME=bridge.ps1|SHA256=d6ed793d7cfd3ec4894ff766f1c20a5de80cf3be6615a27ae4dc0f836da4cf0e|SIZE=5696|EXPECTED_SHA_MATCH=true
|
||||
EXACT_BRIDGE_SHA_MATCH_COUNT=1
|
||||
BRIDGE_LINE_COUNT=162
|
||||
SRC|001|param([int]$ListenPort=64021,[int]$SocksPort=64020)
|
||||
SRC|002|$ErrorActionPreference='Stop'
|
||||
SRC|003|$src=@"
|
||||
SRC|004|using System;
|
||||
SRC|005|using System.IO;
|
||||
SRC|006|using System.Net;
|
||||
SRC|007|using System.Net.Sockets;
|
||||
SRC|008|using System.Text;
|
||||
SRC|009|using System.Threading.Tasks;
|
||||
SRC|010|using System.Collections.Generic;
|
||||
SRC|011|
|
||||
SRC|012|public static class W2HttpSocksBridge {
|
||||
SRC|013| static int SocksPort;
|
||||
SRC|014|
|
||||
SRC|015| static byte[] ReadHeaders(NetworkStream s, out int headerEnd) {
|
||||
SRC|016| var buf = new List<byte>(4096);
|
||||
SRC|017| int state=0;
|
||||
SRC|018| while (buf.Count < 65536) {
|
||||
SRC|019| int b=s.ReadByte();
|
||||
SRC|020| if (b < 0) break;
|
||||
SRC|021| buf.Add((byte)b);
|
||||
SRC|022| if (state==0 && b==13) state=1;
|
||||
SRC|023| else if (state==1 && b==10) state=2;
|
||||
SRC|024| else if (state==2 && b==13) state=3;
|
||||
SRC|025| else if (state==3 && b==10) { headerEnd=buf.Count; return buf.ToArray(); }
|
||||
SRC|026| else state=(b==13)?1:0;
|
||||
SRC|027| }
|
||||
SRC|028| headerEnd=buf.Count;
|
||||
SRC|029| return buf.ToArray();
|
||||
SRC|030| }
|
||||
SRC|031|
|
||||
SRC|032| static TcpClient ConnectSocks(string host, int port) {
|
||||
SRC|033| var c=new TcpClient();
|
||||
SRC|034| c.Connect(IPAddress.Loopback,SocksPort);
|
||||
SRC|035| var s=c.GetStream();
|
||||
SRC|036| s.Write(new byte[]{5,1,0},0,3);
|
||||
SRC|037| byte[] r=new byte[2];
|
||||
SRC|038| if (s.Read(r,0,2)!=2 || r[0]!=5 || r[1]!=0) throw new IOException("SOCKS_GREETING");
|
||||
SRC|039| byte[] hb=Encoding.ASCII.GetBytes(host);
|
||||
SRC|040| if (hb.Length<1 || hb.Length>255) throw new IOException("SOCKS_HOST");
|
||||
SRC|041| using(var ms=new MemoryStream()) {
|
||||
SRC|042| ms.WriteByte(5); ms.WriteByte(1); ms.WriteByte(0); ms.WriteByte(3); ms.WriteByte((byte)hb.Length);
|
||||
SRC|043| ms.Write(hb,0,hb.Length); ms.WriteByte((byte)((port>>8)&255)); ms.WriteByte((byte)(port&255));
|
||||
SRC|044| var q=ms.ToArray(); s.Write(q,0,q.Length);
|
||||
SRC|045| }
|
||||
SRC|046| byte[] h4=new byte[4];
|
||||
SRC|047| if (s.Read(h4,0,4)!=4 || h4[0]!=5 || h4[1]!=0) throw new IOException("SOCKS_CONNECT");
|
||||
SRC|048| int remain=0;
|
||||
SRC|049| if (h4[3]==1) remain=4+2;
|
||||
SRC|050| else if (h4[3]==4) remain=16+2;
|
||||
SRC|051| else if (h4[3]==3) {
|
||||
SRC|052| int len=s.ReadByte(); if(len<0) throw new IOException("SOCKS_REPLY");
|
||||
SRC|053| remain=len+2;
|
||||
SRC|054| } else throw new IOException("SOCKS_ATYP");
|
||||
SRC|055| byte[] junk=new byte[remain];
|
||||
SRC|056| int off=0;
|
||||
SRC|057| while(off<remain) { int n=s.Read(junk,off,remain-off); if(n<=0) throw new IOException("SOCKS_REPLY_EOF"); off+=n; }
|
||||
SRC|058| return c;
|
||||
SRC|059| }
|
||||
SRC|060|
|
||||
SRC|061| static void ParseHostPort(string target, int defPort, out string host, out int port) {
|
||||
SRC|062| host=target; port=defPort;
|
||||
SRC|063| if(target.StartsWith("[")) {
|
||||
SRC|064| int e=target.IndexOf(']');
|
||||
SRC|065| if(e>0) {
|
||||
SRC|066| host=target.Substring(1,e-1);
|
||||
SRC|067| if(e+1<target.Length && target[e+1]==':') int.TryParse(target.Substring(e+2),out port);
|
||||
SRC|068| }
|
||||
SRC|069| return;
|
||||
SRC|070| }
|
||||
SRC|071| int k=target.LastIndexOf(':');
|
||||
SRC|072| if(k>0 && target.IndexOf(':')==k) {
|
||||
SRC|073| int p;
|
||||
SRC|074| if(int.TryParse(target.Substring(k+1),out p)) { host=target.Substring(0,k); port=p; }
|
||||
SRC|075| }
|
||||
SRC|076| }
|
||||
SRC|077|
|
||||
SRC|078| static void Relay(TcpClient a, TcpClient b) {
|
||||
SRC|079| var sa=a.GetStream(); var sb=b.GetStream();
|
||||
SRC|080| var t1=sa.CopyToAsync(sb);
|
||||
SRC|081| var t2=sb.CopyToAsync(sa);
|
||||
SRC|082| try { Task.WaitAny(t1,t2); } catch {}
|
||||
SRC|083| try { a.Close(); } catch {}
|
||||
SRC|084| try { b.Close(); } catch {}
|
||||
SRC|085| }
|
||||
SRC|086|
|
||||
SRC|087| static void Handle(TcpClient client) {
|
||||
SRC|088| TcpClient upstream=null;
|
||||
SRC|089| try {
|
||||
SRC|090| var cs=client.GetStream();
|
||||
SRC|091| int hend;
|
||||
SRC|092| byte[] raw=ReadHeaders(cs,out hend);
|
||||
SRC|093| if(raw.Length==0) return;
|
||||
SRC|094| string header=Encoding.ASCII.GetString(raw,0,hend);
|
||||
SRC|095| string[] lines=header.Split(new string[]{"\r\n"},StringSplitOptions.None);
|
||||
SRC|096| string[] first=lines[0].Split(new char[]{' '},3);
|
||||
SRC|097| if(first.Length<3) return;
|
||||
SRC|098| string method=first[0], target=first[1], version=first[2];
|
||||
SRC|099| string host=null; int port=80;
|
||||
SRC|100|
|
||||
SRC|101| if(method.Equals("CONNECT",StringComparison.OrdinalIgnoreCase)) {
|
||||
SRC|102| ParseHostPort(target,443,out host,out port);
|
||||
SRC|103| upstream=ConnectSocks(host,port);
|
||||
SRC|104| byte[] ok=Encoding.ASCII.GetBytes("HTTP/1.1 200 Connection Established\r\nProxy-Agent: Workers2\r\n\r\n");
|
||||
SRC|105| cs.Write(ok,0,ok.Length);
|
||||
SRC|106| Relay(client,upstream);
|
||||
SRC|107| return;
|
||||
SRC|108| }
|
||||
SRC|109|
|
||||
SRC|110| Uri u;
|
||||
SRC|111| string path=target;
|
||||
SRC|112| if(Uri.TryCreate(target,UriKind.Absolute,out u)) {
|
||||
SRC|113| host=u.Host; port=u.IsDefaultPort ? (u.Scheme=="https"?443:80) : u.Port;
|
||||
SRC|114| path=String.IsNullOrEmpty(u.PathAndQuery)?"/":u.PathAndQuery;
|
||||
SRC|115| } else {
|
||||
SRC|116| foreach(string line in lines) {
|
||||
SRC|117| if(line.StartsWith("Host:",StringComparison.OrdinalIgnoreCase)) {
|
||||
SRC|118| string hv=line.Substring(5).Trim();
|
||||
SRC|119| ParseHostPort(hv,80,out host,out port);
|
||||
SRC|120| break;
|
||||
SRC|121| }
|
||||
SRC|122| }
|
||||
SRC|123| }
|
||||
SRC|124| if(String.IsNullOrEmpty(host)) return;
|
||||
SRC|125| upstream=ConnectSocks(host,port);
|
||||
SRC|126| var us=upstream.GetStream();
|
||||
SRC|127| var sb=new StringBuilder();
|
||||
SRC|128| sb.Append(method).Append(" ").Append(path).Append(" ").Append(version).Append("\r\n");
|
||||
SRC|129| for(int i=1;i<lines.Length;i++) {
|
||||
SRC|130| string line=lines[i];
|
||||
SRC|131| if(line.Length==0) continue;
|
||||
SRC|132| if(line.StartsWith("Proxy-Connection:",StringComparison.OrdinalIgnoreCase)) continue;
|
||||
SRC|133| sb.Append(line).Append("\r\n");
|
||||
SRC|134| }
|
||||
SRC|135| sb.Append("\r\n");
|
||||
SRC|136| byte[] nh=Encoding.ASCII.GetBytes(sb.ToString());
|
||||
SRC|137| us.Write(nh,0,nh.Length);
|
||||
SRC|138| Relay(client,upstream);
|
||||
SRC|139| } catch {
|
||||
SRC|140| try {
|
||||
SRC|141| byte[] er=Encoding.ASCII.GetBytes("HTTP/1.1 502 Bad Gateway\r\nContent-Length:0\r\nConnection: close\r\n\r\n");
|
||||
SRC|142| client.GetStream().Write(er,0,er.Length);
|
||||
SRC|143| } catch {}
|
||||
SRC|144| try { client.Close(); } catch {}
|
||||
SRC|145| try { if(upstream!=null) upstream.Close(); } catch {}
|
||||
SRC|146| }
|
||||
SRC|147| }
|
||||
SRC|148|
|
||||
SRC|149| public static void Run(int listenPort, int socksPort) {
|
||||
SRC|150| SocksPort=socksPort;
|
||||
SRC|151| var l=new TcpListener(IPAddress.Loopback,listenPort);
|
||||
SRC|152| l.Start();
|
||||
SRC|153| while(true) {
|
||||
SRC|154| TcpClient c=l.AcceptTcpClient();
|
||||
SRC|155| Task.Run(()=>Handle(c));
|
||||
SRC|156| }
|
||||
SRC|157| }
|
||||
SRC|158|}
|
||||
SRC|159|"@
|
||||
SRC|160|Add-Type -TypeDefinition $src -Language CSharp
|
||||
SRC|161|[W2HttpSocksBridge]::Run($ListenPort,$SocksPort)
|
||||
SRC|162|
|
||||
PORT64022_LISTENER_COUNT=1
|
||||
PORT64022_OWNER_PID_COUNT=1
|
||||
OWNER_NAME=powershell.exe
|
||||
OWNER_SESSION_ID=1
|
||||
OWNER_COMMAND_SANITIZED="<PATH>" -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "<BRIDGE_PATH>" -ListenPort 64022 -SocksPort 64020
|
||||
OWNER_CMD_HAS_BRIDGE=true
|
||||
OWNER_CMD_HAS_64020=true
|
||||
OWNER_CMD_HAS_64022=true
|
||||
REC|PROTOCOL|MODE=SOCKS5|IOBIT_RC=28|GOOGLE_RC=28
|
||||
REC|PROTOCOL|MODE=SOCKS4A|IOBIT_RC=28|GOOGLE_RC=28
|
||||
REC|PROTOCOL|MODE=HTTP|IOBIT_RC=0|GOOGLE_RC=0
|
||||
CONTROL_64020_IOBIT_RC=0
|
||||
CONTROL_64020_GOOGLE_RC=0
|
||||
WINDOWS_64022_EXACT_SOURCE_COMPLETE=true
|
||||
PVE_UNIT_ACTIVE=active
|
||||
PVE_UNIT_ENABLED=enabled
|
||||
WINDOWS_WATCHDOG_STARTUP_REF_COUNT=1
|
||||
WINDOWS_WATCHDOG_SHA_MATCH=true
|
||||
WINDOWS_WATCHDOG_PROCESS_COUNT=2
|
||||
WINDOWS_BRIDGE_STARTUP_REF_COUNT=2
|
||||
WINDOWS_BRIDGE_SHA_MATCH=true
|
||||
WINDOWS_64020_LISTENER_COUNT=2
|
||||
WINDOWS_64020_TOPOLOGY_OK=true
|
||||
WINDOWS_64020_TELEGRAM_OK=5/5
|
||||
WINDOWS_64020_GOOGLE_OK=5/5
|
||||
WINDOWS_64020_IOBIT_OK=5/5
|
||||
WINDOWS_64022_LISTENER_COUNT=1
|
||||
WINDOWS_64022_TOPOLOGY_OK=true
|
||||
WINDOWS_64022_HTTP_GOOGLE_OK=5/5
|
||||
WINDOWS_64022_HTTP_IOBIT_OK=5/5
|
||||
WINDOWS_WININET_PROXY_ENABLE=0
|
||||
WINDOWS_CHROME_SOCKS64020_SHORTCUT_COUNT=1
|
||||
WINDOWS_PAGEANT_PROCESS_COUNT=1
|
||||
WINDOWS_PLINK_PROCESS_COUNT=1
|
||||
WINDOWS_NETBIRD_SERVICE_RUNNING=true
|
||||
WINDOWS_APP_LANES_PASS=true
|
||||
CLUSTER_QUORATE=true
|
||||
CLUSTER_NODE_COUNT=0
|
||||
REC|ISSUE|CLUSTER_NODE_COUNT_0
|
||||
CLUSTER_GUEST_COUNT=13
|
||||
REC|CLUSTER_GUEST|TYPE=lxc|VMID=110|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=lxc|VMID=111|NODE=pve02|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=lxc|VMID=112|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=lxc|VMID=113|NODE=pve02|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=100|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=101|NODE=pve01|STATUS=stopped
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=130|NODE=pve03|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=150|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=170|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=171|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=190|NODE=pve03|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=210|NODE=pve01|STATUS=running
|
||||
REC|CLUSTER_GUEST|TYPE=qemu|VMID=9130|NODE=pve02|STATUS=stopped
|
||||
UNEXPECTED_STOPPED_GUEST_COUNT=0
|
||||
NODE_BEGIN=pve01
|
||||
NODE_COLLECTION_RC|NODE=pve01|RC=0
|
||||
REC|NODE|pve01|NODE_KERNEL=7.0.14-20-pve
|
||||
REC|NODE|pve01|NODE_NTP_SYNC=yes
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=pve-manager|INSTALLED=9.2.21|CANDIDATE=9.2.21|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=qemu-server|INSTALLED=9.2.10|CANDIDATE=9.2.10|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=pve-qemu-kvm|INSTALLED=11.0.3-4|CANDIDATE=11.0.3-4|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=corosync|INSTALLED=3.1.10-pve3|CANDIDATE=3.1.10-pve3|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=zfsutils-linux|INSTALLED=2.4.4-pve1|CANDIDATE=2.4.4-pve1|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=ceph-common|INSTALLED=19.2.6-pve4|CANDIDATE=19.2.6-pve4|MATCH=true
|
||||
REC|NODE|pve01|REC|PACKAGE|NAME=netbird|INSTALLED=0.80.0|CANDIDATE=0.80.0|MATCH=true
|
||||
REC|NODE|pve01|NODE_DPKG_AUDIT_COUNT=0
|
||||
REC|NODE|pve01|NODE_FAILED_UNIT_COUNT=1
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=pve-cluster|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=pvedaemon|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=pveproxy|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=pvestatd|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=corosync|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=ssh|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=postfix|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|REC|SERVICE|NAME=netbird|ACTIVE=active|RESULT=success
|
||||
REC|NODE|pve01|NODE_ROOT_USE_PCT=49
|
||||
REC|NODE|pve01|NODE_ZPOOL_COUNT=0
|
||||
REC|NODE|pve01|NODE_POSTFIX_QUEUE_COUNT=0
|
||||
REC|NODE|pve01|NODE_NETBIRD_LAZY=false
|
||||
REC|NODE|pve01|NODE_NETBIRD_MANAGEMENT=true
|
||||
REC|NODE|pve01|NODE_NETBIRD_SIGNAL=true
|
||||
REC|NODE|pve01|NODE_NETBIRD_CONNECTED=5
|
||||
REC|ISSUE|pve01_FAILED_UNITS_1
|
||||
NODE_BEGIN=pve02
|
||||
NODE_COLLECTION_RC|NODE=pve02|RC=0
|
||||
REC|ISSUE|pve02_DPKG_AUDIT_UNKNOWN
|
||||
REC|ISSUE|pve02_FAILED_UNITS_UNKNOWN
|
||||
REC|ISSUE|pve02_NETBIRD_MANAGEMENT
|
||||
REC|ISSUE|pve02_NETBIRD_SIGNAL
|
||||
REC|ISSUE|pve02_NETBIRD_CONNECTED_0
|
||||
NODE_BEGIN=pve03
|
||||
NODE_COLLECTION_RC|NODE=pve03|RC=0
|
||||
REC|ISSUE|pve03_DPKG_AUDIT_UNKNOWN
|
||||
REC|ISSUE|pve03_FAILED_UNITS_UNKNOWN
|
||||
REC|ISSUE|pve03_NETBIRD_MANAGEMENT
|
||||
REC|ISSUE|pve03_NETBIRD_SIGNAL
|
||||
REC|ISSUE|pve03_NETBIRD_CONNECTED_0
|
||||
PVE64020_UNIT_ACTIVE=active
|
||||
PVE64020_UNIT_ENABLED=enabled
|
||||
PVE64020_LISTENER_COUNT=1
|
||||
DECISION=HOLD_WINDOWS_64022_EXACT_BRIDGE_SOURCE_INCOMPLETE
|
||||
NEXT_GATE=NO_MUTATION_UNTIL_EXACT_BRIDGE_PROVEN
|
||||
TASK_RESULT=WINDOWS_DACHA_64022_BRIDGE_EXACT_SOURCE_RCA
|
||||
PVE64020_SSH_OWNER_COUNT=1
|
||||
PVE64020_TELEGRAM_OK=3/3
|
||||
PVE64020_IOBIT_OK=3/3
|
||||
PVE64020_GOOGLE_OK=3/3
|
||||
WINDOWS_APP_LANES_PASS_FINAL=true
|
||||
REC|BACKUP_UNIT|UNIT=homelab-backup-audit.service|LOAD=loaded|ACTIVE=inactive|ENABLED=static|RESULT=success
|
||||
REC|BACKUP_UNIT|UNIT=homelab-backup-retention-gc.service|LOAD=loaded|ACTIVE=inactive|ENABLED=static|RESULT=success
|
||||
REC|BACKUP_UNIT|UNIT=homelab-backup-audit.timer|LOAD=loaded|ACTIVE=active|ENABLED=enabled|RESULT=success
|
||||
REC|BACKUP_UNIT|UNIT=homelab-backup-v2.timer|LOAD=loaded|ACTIVE=active|ENABLED=enabled|RESULT=success
|
||||
BACKUP_LATEST_SUMMARY_PRESENT=true
|
||||
REC|BACKUP_LATEST|SUMMARY|AUDIT_STATUS=OK|BACKUP_STATUS=GREEN|ACTIVE_COUNT=15|ISSUE_COUNT=0|CLOUD_A=OK|CLOUD_B=OK|CLOUD_B_DRILL=OK|DR_PROVEN=YES|SOURCE_OFFHOST=OK
|
||||
PVE01_HOME_EGRESS_SHA=26ac437d63a8bcf254255cc970d7614e78bd0a67b97b5575a42a1c3ca7a301ee
|
||||
VM150_QGA_RC=0
|
||||
REC|VM150|REC|CONTAINER|NAME=snikket|STATE=true|0
|
||||
REC|VM150|REC|CONTAINER|NAME=snikket-proxy|STATE=true|0
|
||||
REC|VM150|REC|CONTAINER|NAME=snikket-certs|STATE=true|0
|
||||
REC|VM150|REC|CONTAINER|NAME=snikket-portal|STATE=true|0
|
||||
REC|VM150|FAILED_UNIT_COUNT=0
|
||||
REC|VM150|GOOGLE_RC=0
|
||||
REC|VM150|EGRESS_SHA=26ac437d63a8bcf254255cc970d7614e78bd0a67b97b5575a42a1c3ca7a301ee
|
||||
REC|VM150|LOCAL_HTTPS_CODE=404
|
||||
VM150_EGRESS_MATCH_HOME=true
|
||||
REC|SNIKKET_PUBLIC|ROLE=primary|DNS_MATCH_HOME=false|HTTPS_RC=0|HTTP=302
|
||||
REC|ISSUE|SNIKKET_primary_DNS
|
||||
REC|SNIKKET_PUBLIC|ROLE=groups|DNS_MATCH_HOME=false|HTTPS_RC=0|HTTP=301
|
||||
REC|ISSUE|SNIKKET_groups_DNS
|
||||
REC|SNIKKET_PUBLIC|ROLE=share|DNS_MATCH_HOME=false|HTTPS_RC=0|HTTP=301
|
||||
REC|ISSUE|SNIKKET_share_DNS
|
||||
VM130_QGA_RC=1
|
||||
REC|ISSUE|VM130_QGA
|
||||
awk: cannot open "/tmp/w2-99784.m4G6s6/vm130.out" (No such file or directory)
|
||||
awk: cannot open "/tmp/w2-99784.m4G6s6/vm130.out" (No such file or directory)
|
||||
awk: cannot open "/tmp/w2-99784.m4G6s6/vm130.out" (No such file or directory)
|
||||
awk: cannot open "/tmp/w2-99784.m4G6s6/vm130.out" (No such file or directory)
|
||||
REC|ISSUE|VM130_PRIORITY101_UNKNOWN
|
||||
REC|ISSUE|VM130_WG_CONFIG_NOT_ORIGINAL
|
||||
REC|ISSUE|VM130_GOOGLE
|
||||
REC|ISSUE|VM130_FAILED_UNITS_UNKNOWN
|
||||
FINAL_ISSUE_COUNT=20
|
||||
DECISION=HOLD_CLUSTER_FINAL_POSTRESTORE_DEEP_AUDIT_FINDINGS
|
||||
NEXT_GATE=TARGET_ONLY_REMAINING_ISSUES
|
||||
TASK_RESULT=CLUSTER_FINAL_POSTRESTORE_DEEP_AUDIT
|
||||
CHANGES_MADE=false
|
||||
ROLLBACK_STARTED=false
|
||||
ROLLBACK_RESTORED=null
|
||||
MUTATION_OUTCOME=NO_MUTATION
|
||||
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261007-WINDOWS-DACHA-64022-BRIDGE-EXACT-SOURCE-RCA-99783R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
||||
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261007-CLUSTER-FINAL-POSTRESTORE-DEEP-AUDIT-99784R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
||||
|
||||
OUTPUT_END
|
||||
CHAT_OUTPUT_END
|
||||
|
||||
Reference in New Issue
Block a user