From 13862e59e2a89e3e07c053f4e3fdebd72b1763bc Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Tue, 8 Sep 2026 17:58:30 +0000 Subject: [PATCH] runtime: publish NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41 --- ...60908-A-STAGINGEDGE-EXTERNALTLS-RCA41.json | 38 ++++++ ...260908-A-STAGINGEDGE-EXTERNALTLS-RCA41.txt | 123 ++++++++++++++++++ runtime/latest.json | 22 ++-- runtime/latest.txt | 110 ++++++++++++++-- 4 files changed, 268 insertions(+), 25 deletions(-) create mode 100644 runtime/history/NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41.json create mode 100644 runtime/history/NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41.txt diff --git a/runtime/history/NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41.json b/runtime/history/NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41.json new file mode 100644 index 00000000..f8b633f7 --- /dev/null +++ b/runtime/history/NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "newfi-stagingedge-certset-collector-rca-v5", + "started_at_utc": "2026-09-08T17:58:26Z", + "finished_at_utc": "2026-09-08T17:58:29Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "2e772b629d122fdb15caf7959e5984282e2ebf61276c17abbc413e565351d67f", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d", + "sanitized_output_sha256": "5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nNEWFI41_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nNEWFI41_TRUST_FILE_PRESENT=true\nNEWFI41_TRUST_FILE_SHA256=5ff80132df401240519f48091ed62c139183c325000ef7dd253e7f676a539b2c\nNEWFI41_TRUSTED_NETBIRD_IDENTITY_MARKER_PRESENT=true\nNEWFI41_PUBLIC_VPS_REJECTED_MARKER_PRESENT=false\nNEWFI41_KNOWN_HOSTS_SHA256_BEFORE=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735\nNEWFI41_NETBIRD_JSON_RC=0\nNEWFI41_NETBIRD_JSON_EDGE_IPV4_COUNT=0\nNEWFI41_NETBIRD_DETAIL_RC=0\nNEWFI41_NETBIRD_DETAIL_EDGE_IPV4_COUNT=1\nNEWFI41_GETENT_EDGEVM_RC=0\nNEWFI41_GETENT_EDGEVM_IPV4_COUNT=1\nNEWFI41_SSH_G_EDGEVM_RC=0\nNEWFI41_SSH_G_EDGEVM_IPV4_COUNT=0\nNEWFI41_EDGE_CANDIDATE_IPV4_COUNT=4\nNEWFI41_LIVE_ED25519_MATCHES_EXISTING_KNOWN_HOST_COUNT=4\nNEWFI41_EDGE_SSH_SUCCESS_COUNT=1\nNEWFI41_TRUSTED_NETBIRD_IDENTITY=edge-vm\nNEWFI41_EDGE_SSH_SERVER_IP_SHA256=5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440\nNEWFI41_EDGE_SSH_HOSTNAME_SHA256=ebb24cf2960c2243b155740605cba8127cedb6e016de2d44b914019d3fdbe085\nNEWFI41_EDGE_SSH_HOSTNAME_EDGEVM=true\nNEWFI41_EDGE_SSH_TRUST=PASS\nNEWFI41_EDGE_SSH_USER=debian\nNEWFI41_VM211_QGA_SCOPE=DEFERRED_TO_FINAL_CLOSURE_ALREADY_PROVEN_BY_APPLY34_AND_PREFLIGHT20\nNEWFI41_EDGE_IMAGE_RAW_SHA256=d16df105013397a10fa5200e967d82c9e9144b1e81737fe30f91165f65a35402\nNEWFI41_EDGE_IMAGE_EQUIVALENT=true\nNEWFI41_EDGE_HEALTH=healthy\nNEWFI41_NGINX_TEST_RC=0\nNEWFI41_PROD_ROUTE_SHA256=dd443098bf4452f629597e9dd5cf26f844b2a6a64e6882ee401bb6925a6281b0\nNEWFI41_STAGE_ROUTE_SHA256=5d893ac76690ef5916403fd40d512c4aa49771f238bdbcbf93099c87e294e392\nNEWFI41_ACTIVE_STAGE_SERVER_NAME_COUNT=2\nNEWFI41_ACTIVE_STAGE_CERT_REF=true\nNEWFI41_STAGE_ROUTE_SERVER_NAME=true\nNEWFI41_STAGE_ROUTE_PROD_RESIDUE=false\nNEWFI41_STAGE_ROUTE_CERT_REF=true\nNEWFI41_STAGE_ROUTE_KEY_REF=true\nNEWFI41_STAGE_CERT_CN=newfi-staging.gram1.ru\nNEWFI41_STAGE_CERT_SAN_OK=true\nNEWFI41_STAGE_CERT_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394\nNEWFI41_LOOPBACK_STAGE_CN=newfi-staging.gram1.ru\nNEWFI41_LOOPBACK_STAGE_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394\nNEWFI41_LOOPBACK_STAGE_FP_MATCH_FILE=true\nNEWFI41_LOOPBACK_STAGE_HTTP_RC=0\nNEWFI41_LOOPBACK_STAGE_HTTP=503\nNEWFI41_LOOPBACK_CHAT_CN=chat.gram1.ru\nNEWFI41_LOOPBACK_CHAT_FP=17C9572BF00B99ED6EDE780A0A0AA9E3D74A6211066B47C9A4D4811A4573E4B3\nNEWFI41_LOOPBACK_GIT_CN=git.gram1.ru\nNEWFI41_LOOPBACK_GIT_FP=707ED656033C03C4B42FDED83F9700C10CEFFD2D2E2D98A756C8B19CDF1DAB63\nNEWFI41_INTERFACE_STAGE_TLS_COUNT=12\nNEWFI41_TRUSTED_EDGE_INTERNAL_STAGE_OK=true\nNEWFI41_PUBLIC_HAIRPIN_FORENSIC_ONLY=true\nNEWFI41_PUBLIC_STAGE_TLS_OK=true\nNEWFI41_PUBLIC_STAGE_TLS_RC=0\nNEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru\nNEWFI41_PUBLIC_STAGE_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074\nNEWFI41_PUBLIC_STAGE_SAN_OK=false\nNEWFI41_PUBLIC_STAGE_HTTP_RC=0\nNEWFI41_PUBLIC_STAGE_HTTP=503\nNEWFI41_PUBLIC_CHAT_TLS_OK=true\nNEWFI41_PUBLIC_CHAT_TLS_RC=0\nNEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru\nNEWFI41_PUBLIC_CHAT_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074\nNEWFI41_PUBLIC_CHAT_HTTP_RC=0\nNEWFI41_PUBLIC_CHAT_HTTP=302\nNEWFI41_PUBLIC_GIT_TLS_OK=true\nNEWFI41_PUBLIC_GIT_TLS_RC=0\nNEWFI41_PUBLIC_GIT_CN=git.gram1.ru\nNEWFI41_PUBLIC_GIT_FP=ECB69D0FA839FED04DC23EE243F9F8673CBFCD0A0088BFD3EF7D8B943314D6CB\nNEWFI41_PUBLIC_GIT_HTTP_RC=0\nNEWFI41_PUBLIC_GIT_HTTP=200\nNEWFI41_PRODUCTION_HTTPS_RC=0\nNEWFI41_PRODUCTION_HTTPS_HTTP=200\nNEWFI41_KNOWN_HOSTS_SHA256_AFTER=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735\nNEWFI41_KNOWN_HOSTS_UNCHANGED=true\nNEWFI41_TRUSTED_EDGE_STAGE_SELF_CONSISTENT=true\nNEWFI41_PUBLIC_STAGE_CERT_MATCHES_TRUSTED_STAGE=false\nNEWFI41_PUBLIC_STAGE_CERT_EQUALS_PUBLIC_CHAT=true\nNEWFI41_PUBLIC_STAGE_CERT_EQUALS_TRUSTED_EDGE_CHAT=false\nNEWFI41_PUBLIC_CHAT_CERT_MATCHES_TRUSTED_EDGE_CHAT=false\nNEWFI41_PUBLIC_GIT_CERT_MATCHES_TRUSTED_EDGE_GIT=false\nNEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru\nNEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru\nNEWFI41_PUBLIC_GIT_CN=git.gram1.ru\nNEWFI41_EXTERNAL_WEB_EVIDENCE_CONTEXT=INDEPENDENT_TLS_CHECK_REPORTED_CHAT_CN_MISMATCH_AND_MULTI_NODE_HTTP_503\nNEWFI41_DECISION=HOLD_PUBLIC_INGRESS_CERT_SET_DIFFERS_FROM_TRUSTED_EDGE_STAGING_NOT_DEPLOYED_THERE\nNEWFI41_CHANGES_MADE=false\nNEWFI41_MUTATION_SCOPE=NONE_READ_ONLY\nNEWFI41_RCA_EXECUTION=PASS\n" +} diff --git a/runtime/history/NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41.txt b/runtime/history/NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41.txt new file mode 100644 index 00000000..7c0be597 --- /dev/null +++ b/runtime/history/NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41.txt @@ -0,0 +1,123 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=newfi-stagingedge-certset-collector-rca-v5 +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=2e772b629d122fdb15caf7959e5984282e2ebf61276c17abbc413e565351d67f +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d +SANITIZED_OUTPUT_SHA256=5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d +OUTPUT_BEGIN +ERROR_REGISTER_CHECK=OK +REFERENCE_CHECK=OK +AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED +NEWFI41_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +NEWFI41_TRUST_FILE_PRESENT=true +NEWFI41_TRUST_FILE_SHA256=5ff80132df401240519f48091ed62c139183c325000ef7dd253e7f676a539b2c +NEWFI41_TRUSTED_NETBIRD_IDENTITY_MARKER_PRESENT=true +NEWFI41_PUBLIC_VPS_REJECTED_MARKER_PRESENT=false +NEWFI41_KNOWN_HOSTS_SHA256_BEFORE=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735 +NEWFI41_NETBIRD_JSON_RC=0 +NEWFI41_NETBIRD_JSON_EDGE_IPV4_COUNT=0 +NEWFI41_NETBIRD_DETAIL_RC=0 +NEWFI41_NETBIRD_DETAIL_EDGE_IPV4_COUNT=1 +NEWFI41_GETENT_EDGEVM_RC=0 +NEWFI41_GETENT_EDGEVM_IPV4_COUNT=1 +NEWFI41_SSH_G_EDGEVM_RC=0 +NEWFI41_SSH_G_EDGEVM_IPV4_COUNT=0 +NEWFI41_EDGE_CANDIDATE_IPV4_COUNT=4 +NEWFI41_LIVE_ED25519_MATCHES_EXISTING_KNOWN_HOST_COUNT=4 +NEWFI41_EDGE_SSH_SUCCESS_COUNT=1 +NEWFI41_TRUSTED_NETBIRD_IDENTITY=edge-vm +NEWFI41_EDGE_SSH_SERVER_IP_SHA256=5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440 +NEWFI41_EDGE_SSH_HOSTNAME_SHA256=ebb24cf2960c2243b155740605cba8127cedb6e016de2d44b914019d3fdbe085 +NEWFI41_EDGE_SSH_HOSTNAME_EDGEVM=true +NEWFI41_EDGE_SSH_TRUST=PASS +NEWFI41_EDGE_SSH_USER=debian +NEWFI41_VM211_QGA_SCOPE=DEFERRED_TO_FINAL_CLOSURE_ALREADY_PROVEN_BY_APPLY34_AND_PREFLIGHT20 +NEWFI41_EDGE_IMAGE_RAW_SHA256=d16df105013397a10fa5200e967d82c9e9144b1e81737fe30f91165f65a35402 +NEWFI41_EDGE_IMAGE_EQUIVALENT=true +NEWFI41_EDGE_HEALTH=healthy +NEWFI41_NGINX_TEST_RC=0 +NEWFI41_PROD_ROUTE_SHA256=dd443098bf4452f629597e9dd5cf26f844b2a6a64e6882ee401bb6925a6281b0 +NEWFI41_STAGE_ROUTE_SHA256=5d893ac76690ef5916403fd40d512c4aa49771f238bdbcbf93099c87e294e392 +NEWFI41_ACTIVE_STAGE_SERVER_NAME_COUNT=2 +NEWFI41_ACTIVE_STAGE_CERT_REF=true +NEWFI41_STAGE_ROUTE_SERVER_NAME=true +NEWFI41_STAGE_ROUTE_PROD_RESIDUE=false +NEWFI41_STAGE_ROUTE_CERT_REF=true +NEWFI41_STAGE_ROUTE_KEY_REF=true +NEWFI41_STAGE_CERT_CN=newfi-staging.gram1.ru +NEWFI41_STAGE_CERT_SAN_OK=true +NEWFI41_STAGE_CERT_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394 +NEWFI41_LOOPBACK_STAGE_CN=newfi-staging.gram1.ru +NEWFI41_LOOPBACK_STAGE_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394 +NEWFI41_LOOPBACK_STAGE_FP_MATCH_FILE=true +NEWFI41_LOOPBACK_STAGE_HTTP_RC=0 +NEWFI41_LOOPBACK_STAGE_HTTP=503 +NEWFI41_LOOPBACK_CHAT_CN=chat.gram1.ru +NEWFI41_LOOPBACK_CHAT_FP=17C9572BF00B99ED6EDE780A0A0AA9E3D74A6211066B47C9A4D4811A4573E4B3 +NEWFI41_LOOPBACK_GIT_CN=git.gram1.ru +NEWFI41_LOOPBACK_GIT_FP=707ED656033C03C4B42FDED83F9700C10CEFFD2D2E2D98A756C8B19CDF1DAB63 +NEWFI41_INTERFACE_STAGE_TLS_COUNT=12 +NEWFI41_TRUSTED_EDGE_INTERNAL_STAGE_OK=true +NEWFI41_PUBLIC_HAIRPIN_FORENSIC_ONLY=true +NEWFI41_PUBLIC_STAGE_TLS_OK=true +NEWFI41_PUBLIC_STAGE_TLS_RC=0 +NEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru +NEWFI41_PUBLIC_STAGE_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074 +NEWFI41_PUBLIC_STAGE_SAN_OK=false +NEWFI41_PUBLIC_STAGE_HTTP_RC=0 +NEWFI41_PUBLIC_STAGE_HTTP=503 +NEWFI41_PUBLIC_CHAT_TLS_OK=true +NEWFI41_PUBLIC_CHAT_TLS_RC=0 +NEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru +NEWFI41_PUBLIC_CHAT_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074 +NEWFI41_PUBLIC_CHAT_HTTP_RC=0 +NEWFI41_PUBLIC_CHAT_HTTP=302 +NEWFI41_PUBLIC_GIT_TLS_OK=true +NEWFI41_PUBLIC_GIT_TLS_RC=0 +NEWFI41_PUBLIC_GIT_CN=git.gram1.ru +NEWFI41_PUBLIC_GIT_FP=ECB69D0FA839FED04DC23EE243F9F8673CBFCD0A0088BFD3EF7D8B943314D6CB +NEWFI41_PUBLIC_GIT_HTTP_RC=0 +NEWFI41_PUBLIC_GIT_HTTP=200 +NEWFI41_PRODUCTION_HTTPS_RC=0 +NEWFI41_PRODUCTION_HTTPS_HTTP=200 +NEWFI41_KNOWN_HOSTS_SHA256_AFTER=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735 +NEWFI41_KNOWN_HOSTS_UNCHANGED=true +NEWFI41_TRUSTED_EDGE_STAGE_SELF_CONSISTENT=true +NEWFI41_PUBLIC_STAGE_CERT_MATCHES_TRUSTED_STAGE=false +NEWFI41_PUBLIC_STAGE_CERT_EQUALS_PUBLIC_CHAT=true +NEWFI41_PUBLIC_STAGE_CERT_EQUALS_TRUSTED_EDGE_CHAT=false +NEWFI41_PUBLIC_CHAT_CERT_MATCHES_TRUSTED_EDGE_CHAT=false +NEWFI41_PUBLIC_GIT_CERT_MATCHES_TRUSTED_EDGE_GIT=false +NEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru +NEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru +NEWFI41_PUBLIC_GIT_CN=git.gram1.ru +NEWFI41_EXTERNAL_WEB_EVIDENCE_CONTEXT=INDEPENDENT_TLS_CHECK_REPORTED_CHAT_CN_MISMATCH_AND_MULTI_NODE_HTTP_503 +NEWFI41_DECISION=HOLD_PUBLIC_INGRESS_CERT_SET_DIFFERS_FROM_TRUSTED_EDGE_STAGING_NOT_DEPLOYED_THERE +NEWFI41_CHANGES_MADE=false +NEWFI41_MUTATION_SCOPE=NONE_READ_ONLY +NEWFI41_RCA_EXECUTION=PASS + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 923ffd33..f8b633f7 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SIGNALBOT-260908-ACT6-RESTART-ATTRIBUTION-RCA-043ACT6RCA3", - "status": "FAIL", - "rc": 3, + "command_id": "NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41", + "status": "OK", + "rc": 0, "host": "pve01", "mode": "read-only", - "component": "signalbot-cr0116-act6-restart-attribution-rca3", - "started_at_utc": "2026-09-08T17:56:38Z", - "finished_at_utc": "2026-09-08T17:56:39Z", + "component": "newfi-stagingedge-certset-collector-rca-v5", + "started_at_utc": "2026-09-08T17:58:26Z", + "finished_at_utc": "2026-09-08T17:58:29Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "a11cb6c667d0c7c716d49d744bc6e4e55efe5050380f42b5a9fcbbdcca5da3b1", + "command_sha256": "2e772b629d122fdb15caf7959e5984282e2ebf61276c17abbc413e565351d67f", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -21,7 +21,7 @@ "result_contract_valid": true, "result_contract_status": null, "result_contract_error": null, - "command_rc": 3, + "command_rc": 0, "changes_made": false, "rollback_started": false, "rollback_restored": null, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "0ce534d2e3b759afbda193d01a606a6e0704098f542f6fcbe43828b1038f9204", - "sanitized_output_sha256": "0ce534d2e3b759afbda193d01a606a6e0704098f542f6fcbe43828b1038f9204", + "raw_evidence_sha256": "5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d", + "sanitized_output_sha256": "5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nSB043R3_AUTHORITY_META={\"31_HOMELAB_REFERENCE.md\":{\"bytes\":201129,\"sha256\":\"5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\"},\"HOMELAB_ASSISTANT_ERROR_REGISTER.md\":{\"bytes\":302058,\"sha256\":\"3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\"}}\nSB043R3_RUNNER={\"expected_sha256\":\"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\",\"matches_expected\":true,\"sha256\":\"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\"}\nSB043R3_QGA_PAYLOAD={\"bytes\":19684,\"expected_sha256\":\"1491619cf3bb96ae7bf2b57ea51bab975da7b9ec624b9807bfcf6eeac612e75d\",\"limit_guard\":921600,\"sha256\":\"1491619cf3bb96ae7bf2b57ea51bab975da7b9ec624b9807bfcf6eeac612e75d\"}\nSB043R3_QM_EXEC={\"outer_rc\":0,\"stderr_bytes\":0,\"stderr_sha256\":null}\nSB043R3_QGA_RESULT_META={\"err_truncated\":false,\"exitcode\":0,\"out_truncated\":false,\"state\":\"EXITED\"}\nSB043R3_DECISION=HOLD_GUEST_MARKER_MISMATCH\n" + "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nNEWFI41_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nNEWFI41_TRUST_FILE_PRESENT=true\nNEWFI41_TRUST_FILE_SHA256=5ff80132df401240519f48091ed62c139183c325000ef7dd253e7f676a539b2c\nNEWFI41_TRUSTED_NETBIRD_IDENTITY_MARKER_PRESENT=true\nNEWFI41_PUBLIC_VPS_REJECTED_MARKER_PRESENT=false\nNEWFI41_KNOWN_HOSTS_SHA256_BEFORE=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735\nNEWFI41_NETBIRD_JSON_RC=0\nNEWFI41_NETBIRD_JSON_EDGE_IPV4_COUNT=0\nNEWFI41_NETBIRD_DETAIL_RC=0\nNEWFI41_NETBIRD_DETAIL_EDGE_IPV4_COUNT=1\nNEWFI41_GETENT_EDGEVM_RC=0\nNEWFI41_GETENT_EDGEVM_IPV4_COUNT=1\nNEWFI41_SSH_G_EDGEVM_RC=0\nNEWFI41_SSH_G_EDGEVM_IPV4_COUNT=0\nNEWFI41_EDGE_CANDIDATE_IPV4_COUNT=4\nNEWFI41_LIVE_ED25519_MATCHES_EXISTING_KNOWN_HOST_COUNT=4\nNEWFI41_EDGE_SSH_SUCCESS_COUNT=1\nNEWFI41_TRUSTED_NETBIRD_IDENTITY=edge-vm\nNEWFI41_EDGE_SSH_SERVER_IP_SHA256=5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440\nNEWFI41_EDGE_SSH_HOSTNAME_SHA256=ebb24cf2960c2243b155740605cba8127cedb6e016de2d44b914019d3fdbe085\nNEWFI41_EDGE_SSH_HOSTNAME_EDGEVM=true\nNEWFI41_EDGE_SSH_TRUST=PASS\nNEWFI41_EDGE_SSH_USER=debian\nNEWFI41_VM211_QGA_SCOPE=DEFERRED_TO_FINAL_CLOSURE_ALREADY_PROVEN_BY_APPLY34_AND_PREFLIGHT20\nNEWFI41_EDGE_IMAGE_RAW_SHA256=d16df105013397a10fa5200e967d82c9e9144b1e81737fe30f91165f65a35402\nNEWFI41_EDGE_IMAGE_EQUIVALENT=true\nNEWFI41_EDGE_HEALTH=healthy\nNEWFI41_NGINX_TEST_RC=0\nNEWFI41_PROD_ROUTE_SHA256=dd443098bf4452f629597e9dd5cf26f844b2a6a64e6882ee401bb6925a6281b0\nNEWFI41_STAGE_ROUTE_SHA256=5d893ac76690ef5916403fd40d512c4aa49771f238bdbcbf93099c87e294e392\nNEWFI41_ACTIVE_STAGE_SERVER_NAME_COUNT=2\nNEWFI41_ACTIVE_STAGE_CERT_REF=true\nNEWFI41_STAGE_ROUTE_SERVER_NAME=true\nNEWFI41_STAGE_ROUTE_PROD_RESIDUE=false\nNEWFI41_STAGE_ROUTE_CERT_REF=true\nNEWFI41_STAGE_ROUTE_KEY_REF=true\nNEWFI41_STAGE_CERT_CN=newfi-staging.gram1.ru\nNEWFI41_STAGE_CERT_SAN_OK=true\nNEWFI41_STAGE_CERT_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394\nNEWFI41_LOOPBACK_STAGE_CN=newfi-staging.gram1.ru\nNEWFI41_LOOPBACK_STAGE_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394\nNEWFI41_LOOPBACK_STAGE_FP_MATCH_FILE=true\nNEWFI41_LOOPBACK_STAGE_HTTP_RC=0\nNEWFI41_LOOPBACK_STAGE_HTTP=503\nNEWFI41_LOOPBACK_CHAT_CN=chat.gram1.ru\nNEWFI41_LOOPBACK_CHAT_FP=17C9572BF00B99ED6EDE780A0A0AA9E3D74A6211066B47C9A4D4811A4573E4B3\nNEWFI41_LOOPBACK_GIT_CN=git.gram1.ru\nNEWFI41_LOOPBACK_GIT_FP=707ED656033C03C4B42FDED83F9700C10CEFFD2D2E2D98A756C8B19CDF1DAB63\nNEWFI41_INTERFACE_STAGE_TLS_COUNT=12\nNEWFI41_TRUSTED_EDGE_INTERNAL_STAGE_OK=true\nNEWFI41_PUBLIC_HAIRPIN_FORENSIC_ONLY=true\nNEWFI41_PUBLIC_STAGE_TLS_OK=true\nNEWFI41_PUBLIC_STAGE_TLS_RC=0\nNEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru\nNEWFI41_PUBLIC_STAGE_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074\nNEWFI41_PUBLIC_STAGE_SAN_OK=false\nNEWFI41_PUBLIC_STAGE_HTTP_RC=0\nNEWFI41_PUBLIC_STAGE_HTTP=503\nNEWFI41_PUBLIC_CHAT_TLS_OK=true\nNEWFI41_PUBLIC_CHAT_TLS_RC=0\nNEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru\nNEWFI41_PUBLIC_CHAT_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074\nNEWFI41_PUBLIC_CHAT_HTTP_RC=0\nNEWFI41_PUBLIC_CHAT_HTTP=302\nNEWFI41_PUBLIC_GIT_TLS_OK=true\nNEWFI41_PUBLIC_GIT_TLS_RC=0\nNEWFI41_PUBLIC_GIT_CN=git.gram1.ru\nNEWFI41_PUBLIC_GIT_FP=ECB69D0FA839FED04DC23EE243F9F8673CBFCD0A0088BFD3EF7D8B943314D6CB\nNEWFI41_PUBLIC_GIT_HTTP_RC=0\nNEWFI41_PUBLIC_GIT_HTTP=200\nNEWFI41_PRODUCTION_HTTPS_RC=0\nNEWFI41_PRODUCTION_HTTPS_HTTP=200\nNEWFI41_KNOWN_HOSTS_SHA256_AFTER=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735\nNEWFI41_KNOWN_HOSTS_UNCHANGED=true\nNEWFI41_TRUSTED_EDGE_STAGE_SELF_CONSISTENT=true\nNEWFI41_PUBLIC_STAGE_CERT_MATCHES_TRUSTED_STAGE=false\nNEWFI41_PUBLIC_STAGE_CERT_EQUALS_PUBLIC_CHAT=true\nNEWFI41_PUBLIC_STAGE_CERT_EQUALS_TRUSTED_EDGE_CHAT=false\nNEWFI41_PUBLIC_CHAT_CERT_MATCHES_TRUSTED_EDGE_CHAT=false\nNEWFI41_PUBLIC_GIT_CERT_MATCHES_TRUSTED_EDGE_GIT=false\nNEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru\nNEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru\nNEWFI41_PUBLIC_GIT_CN=git.gram1.ru\nNEWFI41_EXTERNAL_WEB_EVIDENCE_CONTEXT=INDEPENDENT_TLS_CHECK_REPORTED_CHAT_CN_MISMATCH_AND_MULTI_NODE_HTTP_503\nNEWFI41_DECISION=HOLD_PUBLIC_INGRESS_CERT_SET_DIFFERS_FROM_TRUSTED_EDGE_STAGING_NOT_DEPLOYED_THERE\nNEWFI41_CHANGES_MADE=false\nNEWFI41_MUTATION_SCOPE=NONE_READ_ONLY\nNEWFI41_RCA_EXECUTION=PASS\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index bbb54d5e..7c0be597 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,22 +1,22 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SIGNALBOT-260908-ACT6-RESTART-ATTRIBUTION-RCA-043ACT6RCA3 -STATUS=FAIL -RC=3 +COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-EXTERNALTLS-RCA41 +STATUS=OK +RC=0 HOST=pve01 MODE=read-only -COMPONENT=signalbot-cr0116-act6-restart-attribution-rca3 +COMPONENT=newfi-stagingedge-certset-collector-rca-v5 REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=a11cb6c667d0c7c716d49d744bc6e4e55efe5050380f42b5a9fcbbdcca5da3b1 +COMMAND_SHA256=2e772b629d122fdb15caf7959e5984282e2ebf61276c17abbc413e565351d67f DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false RESULT_CONTRACT_VALID=true RESULT_CONTRACT_STATUS=NOT_APPLICABLE RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=3 +COMMAND_RC=0 CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null @@ -24,18 +24,100 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=0ce534d2e3b759afbda193d01a606a6e0704098f542f6fcbe43828b1038f9204 -SANITIZED_OUTPUT_SHA256=0ce534d2e3b759afbda193d01a606a6e0704098f542f6fcbe43828b1038f9204 +RAW_EVIDENCE_SHA256=5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d +SANITIZED_OUTPUT_SHA256=5143a47507dc7a21f07db8a7e8f12a6df970a9ec65f684f7a29204d4b06b7a9d OUTPUT_BEGIN ERROR_REGISTER_CHECK=OK REFERENCE_CHECK=OK AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED -SB043R3_AUTHORITY_META={"31_HOMELAB_REFERENCE.md":{"bytes":201129,"sha256":"5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66"},"HOMELAB_ASSISTANT_ERROR_REGISTER.md":{"bytes":302058,"sha256":"3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0"}} -SB043R3_RUNNER={"expected_sha256":"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d","matches_expected":true,"sha256":"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d"} -SB043R3_QGA_PAYLOAD={"bytes":19684,"expected_sha256":"1491619cf3bb96ae7bf2b57ea51bab975da7b9ec624b9807bfcf6eeac612e75d","limit_guard":921600,"sha256":"1491619cf3bb96ae7bf2b57ea51bab975da7b9ec624b9807bfcf6eeac612e75d"} -SB043R3_QM_EXEC={"outer_rc":0,"stderr_bytes":0,"stderr_sha256":null} -SB043R3_QGA_RESULT_META={"err_truncated":false,"exitcode":0,"out_truncated":false,"state":"EXITED"} -SB043R3_DECISION=HOLD_GUEST_MARKER_MISMATCH +NEWFI41_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +NEWFI41_TRUST_FILE_PRESENT=true +NEWFI41_TRUST_FILE_SHA256=5ff80132df401240519f48091ed62c139183c325000ef7dd253e7f676a539b2c +NEWFI41_TRUSTED_NETBIRD_IDENTITY_MARKER_PRESENT=true +NEWFI41_PUBLIC_VPS_REJECTED_MARKER_PRESENT=false +NEWFI41_KNOWN_HOSTS_SHA256_BEFORE=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735 +NEWFI41_NETBIRD_JSON_RC=0 +NEWFI41_NETBIRD_JSON_EDGE_IPV4_COUNT=0 +NEWFI41_NETBIRD_DETAIL_RC=0 +NEWFI41_NETBIRD_DETAIL_EDGE_IPV4_COUNT=1 +NEWFI41_GETENT_EDGEVM_RC=0 +NEWFI41_GETENT_EDGEVM_IPV4_COUNT=1 +NEWFI41_SSH_G_EDGEVM_RC=0 +NEWFI41_SSH_G_EDGEVM_IPV4_COUNT=0 +NEWFI41_EDGE_CANDIDATE_IPV4_COUNT=4 +NEWFI41_LIVE_ED25519_MATCHES_EXISTING_KNOWN_HOST_COUNT=4 +NEWFI41_EDGE_SSH_SUCCESS_COUNT=1 +NEWFI41_TRUSTED_NETBIRD_IDENTITY=edge-vm +NEWFI41_EDGE_SSH_SERVER_IP_SHA256=5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440 +NEWFI41_EDGE_SSH_HOSTNAME_SHA256=ebb24cf2960c2243b155740605cba8127cedb6e016de2d44b914019d3fdbe085 +NEWFI41_EDGE_SSH_HOSTNAME_EDGEVM=true +NEWFI41_EDGE_SSH_TRUST=PASS +NEWFI41_EDGE_SSH_USER=debian +NEWFI41_VM211_QGA_SCOPE=DEFERRED_TO_FINAL_CLOSURE_ALREADY_PROVEN_BY_APPLY34_AND_PREFLIGHT20 +NEWFI41_EDGE_IMAGE_RAW_SHA256=d16df105013397a10fa5200e967d82c9e9144b1e81737fe30f91165f65a35402 +NEWFI41_EDGE_IMAGE_EQUIVALENT=true +NEWFI41_EDGE_HEALTH=healthy +NEWFI41_NGINX_TEST_RC=0 +NEWFI41_PROD_ROUTE_SHA256=dd443098bf4452f629597e9dd5cf26f844b2a6a64e6882ee401bb6925a6281b0 +NEWFI41_STAGE_ROUTE_SHA256=5d893ac76690ef5916403fd40d512c4aa49771f238bdbcbf93099c87e294e392 +NEWFI41_ACTIVE_STAGE_SERVER_NAME_COUNT=2 +NEWFI41_ACTIVE_STAGE_CERT_REF=true +NEWFI41_STAGE_ROUTE_SERVER_NAME=true +NEWFI41_STAGE_ROUTE_PROD_RESIDUE=false +NEWFI41_STAGE_ROUTE_CERT_REF=true +NEWFI41_STAGE_ROUTE_KEY_REF=true +NEWFI41_STAGE_CERT_CN=newfi-staging.gram1.ru +NEWFI41_STAGE_CERT_SAN_OK=true +NEWFI41_STAGE_CERT_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394 +NEWFI41_LOOPBACK_STAGE_CN=newfi-staging.gram1.ru +NEWFI41_LOOPBACK_STAGE_FP=DC4C504F85E7CD803996BDC84CA2276E1AAE6C0A8FF6E7029CEB589C53FE2394 +NEWFI41_LOOPBACK_STAGE_FP_MATCH_FILE=true +NEWFI41_LOOPBACK_STAGE_HTTP_RC=0 +NEWFI41_LOOPBACK_STAGE_HTTP=503 +NEWFI41_LOOPBACK_CHAT_CN=chat.gram1.ru +NEWFI41_LOOPBACK_CHAT_FP=17C9572BF00B99ED6EDE780A0A0AA9E3D74A6211066B47C9A4D4811A4573E4B3 +NEWFI41_LOOPBACK_GIT_CN=git.gram1.ru +NEWFI41_LOOPBACK_GIT_FP=707ED656033C03C4B42FDED83F9700C10CEFFD2D2E2D98A756C8B19CDF1DAB63 +NEWFI41_INTERFACE_STAGE_TLS_COUNT=12 +NEWFI41_TRUSTED_EDGE_INTERNAL_STAGE_OK=true +NEWFI41_PUBLIC_HAIRPIN_FORENSIC_ONLY=true +NEWFI41_PUBLIC_STAGE_TLS_OK=true +NEWFI41_PUBLIC_STAGE_TLS_RC=0 +NEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru +NEWFI41_PUBLIC_STAGE_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074 +NEWFI41_PUBLIC_STAGE_SAN_OK=false +NEWFI41_PUBLIC_STAGE_HTTP_RC=0 +NEWFI41_PUBLIC_STAGE_HTTP=503 +NEWFI41_PUBLIC_CHAT_TLS_OK=true +NEWFI41_PUBLIC_CHAT_TLS_RC=0 +NEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru +NEWFI41_PUBLIC_CHAT_FP=2AE225ABE13B04C25C2CBA36332F4DE326AEC5600552C2ACAA2F1D857B4AF074 +NEWFI41_PUBLIC_CHAT_HTTP_RC=0 +NEWFI41_PUBLIC_CHAT_HTTP=302 +NEWFI41_PUBLIC_GIT_TLS_OK=true +NEWFI41_PUBLIC_GIT_TLS_RC=0 +NEWFI41_PUBLIC_GIT_CN=git.gram1.ru +NEWFI41_PUBLIC_GIT_FP=ECB69D0FA839FED04DC23EE243F9F8673CBFCD0A0088BFD3EF7D8B943314D6CB +NEWFI41_PUBLIC_GIT_HTTP_RC=0 +NEWFI41_PUBLIC_GIT_HTTP=200 +NEWFI41_PRODUCTION_HTTPS_RC=0 +NEWFI41_PRODUCTION_HTTPS_HTTP=200 +NEWFI41_KNOWN_HOSTS_SHA256_AFTER=ab01de61ca5030ad158f1aef377364100531473de1e10a529089174f6890d735 +NEWFI41_KNOWN_HOSTS_UNCHANGED=true +NEWFI41_TRUSTED_EDGE_STAGE_SELF_CONSISTENT=true +NEWFI41_PUBLIC_STAGE_CERT_MATCHES_TRUSTED_STAGE=false +NEWFI41_PUBLIC_STAGE_CERT_EQUALS_PUBLIC_CHAT=true +NEWFI41_PUBLIC_STAGE_CERT_EQUALS_TRUSTED_EDGE_CHAT=false +NEWFI41_PUBLIC_CHAT_CERT_MATCHES_TRUSTED_EDGE_CHAT=false +NEWFI41_PUBLIC_GIT_CERT_MATCHES_TRUSTED_EDGE_GIT=false +NEWFI41_PUBLIC_STAGE_CN=chat.gram1.ru +NEWFI41_PUBLIC_CHAT_CN=chat.gram1.ru +NEWFI41_PUBLIC_GIT_CN=git.gram1.ru +NEWFI41_EXTERNAL_WEB_EVIDENCE_CONTEXT=INDEPENDENT_TLS_CHECK_REPORTED_CHAT_CN_MISMATCH_AND_MULTI_NODE_HTTP_503 +NEWFI41_DECISION=HOLD_PUBLIC_INGRESS_CERT_SET_DIFFERS_FROM_TRUSTED_EDGE_STAGING_NOT_DEPLOYED_THERE +NEWFI41_CHANGES_MADE=false +NEWFI41_MUTATION_SCOPE=NONE_READ_ONLY +NEWFI41_RCA_EXECUTION=PASS OUTPUT_END CHAT_OUTPUT_END