1
0

runtime: publish NEWFI-260908-A-STAGINGEDGE-APPLY28

This commit is contained in:
homelab-runtime-publisher
2026-09-08 15:43:13 +00:00
parent 5cf60373c1
commit 1ad83729b6
4 changed files with 149 additions and 56 deletions
@@ -0,0 +1,38 @@
{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY28",
"status": "FAIL",
"rc": 1,
"host": "pve01",
"mode": "change",
"component": "newfi-stagingedge-canonical-route-dns-renewal-reload-sni-proof",
"started_at_utc": "2026-09-08T15:42:59Z",
"finished_at_utc": "2026-09-08T15:43:13Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "d8c309c449b7939e0bec3b57211544d2cffbdc9d4d3ee163f2935386d4461b29",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": true,
"result_contract_valid": true,
"result_contract_status": "FAIL",
"result_contract_error": null,
"command_rc": 1,
"changes_made": true,
"rollback_started": true,
"rollback_restored": true,
"mutation_outcome": "ROLLED_BACK",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "715a87163ba837c069dbe054767b9f5c6dc5507ce36995d405b05f6b0ce9dd93",
"sanitized_output_sha256": "715a87163ba837c069dbe054767b9f5c6dc5507ce36995d405b05f6b0ce9dd93",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "APPLY28_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY28\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nVM_BACKEND_IP_SHA256=52051fb856fa9ba24a7bae92f1580040b1fd6a37785e6e16bf317214ae7bc4b5\nPRODUCTION_PRE_HTTP=200\nREMOTE_PREFLIGHT_RC=0\nCANDIDATE_ROUTE_SHA256=5d893ac76690ef5916403fd40d512c4aa49771f238bdbcbf93099c87e294e392\nREMOTE_APPLY_RC=0\nREMOTE_APPLY_REASON=ROUTE_DNS_RENEWAL_ACTIVE\nREMOTE_APPLY_CHANGED=true\nREMOTE_APPLY_ROLLBACK_RESTORED=null\nREMOTE_APPLY_SNI_ACTIVE=true\nREMOTE_APPLY_SNI_PROBE_COUNT=2\nREFERENCE_PUBLIC_IPV4_COUNT=0\nPUBLIC_STAGING_HTTPS_503_PROOF=false\nPRODUCTION_POST_HTTP=200\nOUTER_ROLLBACK_RC=0\nOUTER_ROLLBACK_RESTORED=true\nAPPLY28_REASON=PUBLIC_OR_PRODUCTION_POSTVERIFY_FAILED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY28\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n"
}
@@ -0,0 +1,57 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY28
STATUS=FAIL
RC=1
HOST=pve01
MODE=change
COMPONENT=newfi-stagingedge-canonical-route-dns-renewal-reload-sni-proof
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=d8c309c449b7939e0bec3b57211544d2cffbdc9d4d3ee163f2935386d4461b29
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=true
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=FAIL
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=1
CHANGES_MADE=true
ROLLBACK_STARTED=true
ROLLBACK_RESTORED=true
MUTATION_OUTCOME=ROLLED_BACK
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=715a87163ba837c069dbe054767b9f5c6dc5507ce36995d405b05f6b0ce9dd93
SANITIZED_OUTPUT_SHA256=715a87163ba837c069dbe054767b9f5c6dc5507ce36995d405b05f6b0ce9dd93
OUTPUT_BEGIN
APPLY28_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY28
MODE=change
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
REFERENCE_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
VM_BACKEND_IP_SHA256=52051fb856fa9ba24a7bae92f1580040b1fd6a37785e6e16bf317214ae7bc4b5
PRODUCTION_PRE_HTTP=200
REMOTE_PREFLIGHT_RC=0
CANDIDATE_ROUTE_SHA256=5d893ac76690ef5916403fd40d512c4aa49771f238bdbcbf93099c87e294e392
REMOTE_APPLY_RC=0
REMOTE_APPLY_REASON=ROUTE_DNS_RENEWAL_ACTIVE
REMOTE_APPLY_CHANGED=true
REMOTE_APPLY_ROLLBACK_RESTORED=null
REMOTE_APPLY_SNI_ACTIVE=true
REMOTE_APPLY_SNI_PROBE_COUNT=2
REFERENCE_PUBLIC_IPV4_COUNT=0
PUBLIC_STAGING_HTTPS_503_PROOF=false
PRODUCTION_POST_HTTP=200
OUTER_ROLLBACK_RC=0
OUTER_ROLLBACK_RESTORED=true
APPLY28_REASON=PUBLIC_OR_PRODUCTION_POSTVERIFY_FAILED
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY28","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
OUTPUT_END
CHAT_OUTPUT_END
+18 -18
View File
@@ -1,38 +1,38 @@
{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "NEWFI-260908-A-STAGINGEDGE-LOCALHTTPS-RCA27",
"status": "OK",
"rc": 0,
"command_id": "NEWFI-260908-A-STAGINGEDGE-APPLY28",
"status": "FAIL",
"rc": 1,
"host": "pve01",
"mode": "read-only",
"component": "newfi-stagingedge-local-https-nginx-active-config-rca-readonly",
"started_at_utc": "2026-09-08T15:34:33Z",
"finished_at_utc": "2026-09-08T15:34:34Z",
"mode": "change",
"component": "newfi-stagingedge-canonical-route-dns-renewal-reload-sni-proof",
"started_at_utc": "2026-09-08T15:42:59Z",
"finished_at_utc": "2026-09-08T15:43:13Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "99cbbccd9d763d05e084feb32df78770807a535257a60f3129113aca5a1bfbd1",
"command_sha256": "d8c309c449b7939e0bec3b57211544d2cffbdc9d4d3ee163f2935386d4461b29",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": false,
"change_declared": true,
"result_contract_valid": true,
"result_contract_status": null,
"result_contract_status": "FAIL",
"result_contract_error": null,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
"mutation_outcome": "NO_MUTATION",
"command_rc": 1,
"changes_made": true,
"rollback_started": true,
"rollback_restored": true,
"mutation_outcome": "ROLLED_BACK",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "02bd17e1d016a960eb263bcc8c071e8826f9852dff3fa170b37790725000d1dc",
"sanitized_output_sha256": "02bd17e1d016a960eb263bcc8c071e8826f9852dff3fa170b37790725000d1dc",
"raw_evidence_sha256": "715a87163ba837c069dbe054767b9f5c6dc5507ce36995d405b05f6b0ce9dd93",
"sanitized_output_sha256": "715a87163ba837c069dbe054767b9f5c6dc5507ce36995d405b05f6b0ce9dd93",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "RCA27_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-LOCALHTTPS-RCA27\nMODE=read-only\nMUTATIONS_PERFORMED=NO\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA_MATCH=true\nTRUST_MARKERS_OK=true\nCANONICAL_USER_OK=true\nEDGEVM_OVERLAY_IP_COUNT=1\nEDGEVM_IP_OK=true\nEDGEVM_HOSTKEY_MATCH=true\nEDGEVM_HOSTKEY_ALGS=ssh-ed25519\nOUTER_RCA27_GATE=true\nEDGEVM_SUDO_RC=0\nREMOTE_RCA27_RC=0\nNGINX_CONFLICT_WARNING=false\nACTIVE_STAGING_SERVER_NAME_COUNT=0\nACTIVE_STAGING_LITERAL_SOURCE_COUNT=0\nHIDDEN_STAGING_VHOST_PRESENT=false\nTEMPLATE_SERVER_BLOCK_COUNT=2\nRCA27_JSON={\"euid\":0,\"mutations_performed\":\"NO\",\"npmplus_one\":true,\"npmplus_healthy\":true,\"nginx_T_rc\":0,\"nginx_T_stderr_sha256\":\"9cb221b6993277a11765b15bdded4e9b090f1c2a8f5ed573e907ae3b6921f27c\",\"nginx_T_has_conflict_warning\":false,\"nginx_T_conflict_warning_count\":0,\"active_staging_server_name_count\":0,\"active_staging_entries\":[],\"active_prod_server_name_count\":2,\"active_staging_literal_source_count\":0,\"active_staging_literal_sources\":[],\"openssl_sni_rc\":0,\"current_default_sni_cert_has_staging\":false,\"current_default_sni_subject_sha256\":\"14cc0c313616be679868d6d887a222313440a248a5a0ec69a35be1543781159b\",\"template_exists\":true,\"template_sha_exact\":true,\"template_server_block_count\":2,\"template_server_blocks\":[{\"start\":3,\"end\":10,\"directives\":[{\"line\":4,\"text\":\"listen 0.0.0.0:80;\"},{\"line\":5,\"text\":\"listen [::]:80;\"},{\"line\":6,\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":7,\"text\":\"location / {\"},{\"line\":8,\"text\":\"return 301 https://$host$request_uri;\"}]},{\"start\":11,\"end\":33,\"directives\":[{\"line\":12,\"text\":\"listen 0.0.0.0:443 ssl;\"},{\"line\":13,\"text\":\"listen [::]:443 ssl;\"},{\"line\":14,\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":16,\"text\":\"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;\"},{\"line\":17,\"text\":\"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;\"},{\"line\":25,\"text\":\"location / {\"},{\"line\":31,\"text\":\"proxy_pass http://[PRIVATE_IP]:80;\"}]}],\"hidden_staging_vhost_present\":false,\"decision\":\"RCA_CAPTURED\"}\nRCA27_REMOTE_DECISION=RCA_CAPTURED\nRCA27_DECISION=PASS_RCA_CAPTURED\nRCA27_END=true\n"
"output": "APPLY28_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY28\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nVM_BACKEND_IP_SHA256=52051fb856fa9ba24a7bae92f1580040b1fd6a37785e6e16bf317214ae7bc4b5\nPRODUCTION_PRE_HTTP=200\nREMOTE_PREFLIGHT_RC=0\nCANDIDATE_ROUTE_SHA256=5d893ac76690ef5916403fd40d512c4aa49771f238bdbcbf93099c87e294e392\nREMOTE_APPLY_RC=0\nREMOTE_APPLY_REASON=ROUTE_DNS_RENEWAL_ACTIVE\nREMOTE_APPLY_CHANGED=true\nREMOTE_APPLY_ROLLBACK_RESTORED=null\nREMOTE_APPLY_SNI_ACTIVE=true\nREMOTE_APPLY_SNI_PROBE_COUNT=2\nREFERENCE_PUBLIC_IPV4_COUNT=0\nPUBLIC_STAGING_HTTPS_503_PROOF=false\nPRODUCTION_POST_HTTP=200\nOUTER_ROLLBACK_RC=0\nOUTER_ROLLBACK_RESTORED=true\nAPPLY28_REASON=PUBLIC_OR_PRODUCTION_POSTVERIFY_FAILED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"NEWFI-260908-A-STAGINGEDGE-APPLY28\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n"
}
+36 -38
View File
@@ -1,59 +1,57 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-LOCALHTTPS-RCA27
STATUS=OK
RC=0
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY28
STATUS=FAIL
RC=1
HOST=pve01
MODE=read-only
COMPONENT=newfi-stagingedge-local-https-nginx-active-config-rca-readonly
MODE=change
COMPONENT=newfi-stagingedge-canonical-route-dns-renewal-reload-sni-proof
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=99cbbccd9d763d05e084feb32df78770807a535257a60f3129113aca5a1bfbd1
COMMAND_SHA256=d8c309c449b7939e0bec3b57211544d2cffbdc9d4d3ee163f2935386d4461b29
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
CHANGE_DECLARED=true
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_STATUS=FAIL
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
COMMAND_RC=1
CHANGES_MADE=true
ROLLBACK_STARTED=true
ROLLBACK_RESTORED=true
MUTATION_OUTCOME=ROLLED_BACK
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=02bd17e1d016a960eb263bcc8c071e8826f9852dff3fa170b37790725000d1dc
SANITIZED_OUTPUT_SHA256=02bd17e1d016a960eb263bcc8c071e8826f9852dff3fa170b37790725000d1dc
RAW_EVIDENCE_SHA256=715a87163ba837c069dbe054767b9f5c6dc5507ce36995d405b05f6b0ce9dd93
SANITIZED_OUTPUT_SHA256=715a87163ba837c069dbe054767b9f5c6dc5507ce36995d405b05f6b0ce9dd93
OUTPUT_BEGIN
RCA27_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-LOCALHTTPS-RCA27
MODE=read-only
MUTATIONS_PERFORMED=NO
APPLY28_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-APPLY28
MODE=change
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
REFERENCE_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
RUNNER_SHA_MATCH=true
TRUST_MARKERS_OK=true
CANONICAL_USER_OK=true
EDGEVM_OVERLAY_IP_COUNT=1
EDGEVM_IP_OK=true
EDGEVM_HOSTKEY_MATCH=true
EDGEVM_HOSTKEY_ALGS=ssh-ed25519
OUTER_RCA27_GATE=true
EDGEVM_SUDO_RC=0
REMOTE_RCA27_RC=0
NGINX_CONFLICT_WARNING=false
ACTIVE_STAGING_SERVER_NAME_COUNT=0
ACTIVE_STAGING_LITERAL_SOURCE_COUNT=0
HIDDEN_STAGING_VHOST_PRESENT=false
TEMPLATE_SERVER_BLOCK_COUNT=2
RCA27_JSON={"euid":0,"mutations_performed":"NO","npmplus_one":true,"npmplus_healthy":true,"nginx_T_rc":0,"nginx_T_stderr_sha256":"9cb221b6993277a11765b15bdded4e9b090f1c2a8f5ed573e907ae3b6921f27c","nginx_T_has_conflict_warning":false,"nginx_T_conflict_warning_count":0,"active_staging_server_name_count":0,"active_staging_entries":[],"active_prod_server_name_count":2,"active_staging_literal_source_count":0,"active_staging_literal_sources":[],"openssl_sni_rc":0,"current_default_sni_cert_has_staging":false,"current_default_sni_subject_sha256":"14cc0c313616be679868d6d887a222313440a248a5a0ec69a35be1543781159b","template_exists":true,"template_sha_exact":true,"template_server_block_count":2,"template_server_blocks":[{"start":3,"end":10,"directives":[{"line":4,"text":"listen 0.0.0.0:80;"},{"line":5,"text":"listen [::]:80;"},{"line":6,"text":"server_name newfi.ru www.newfi.ru;"},{"line":7,"text":"location / {"},{"line":8,"text":"return 301 https://$host$request_uri;"}]},{"start":11,"end":33,"directives":[{"line":12,"text":"listen 0.0.0.0:443 ssl;"},{"line":13,"text":"listen [::]:443 ssl;"},{"line":14,"text":"server_name newfi.ru www.newfi.ru;"},{"line":16,"text":"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;"},{"line":17,"text":"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;"},{"line":25,"text":"location / {"},{"line":31,"text":"proxy_pass http://[PRIVATE_IP]:80;"}]}],"hidden_staging_vhost_present":false,"decision":"RCA_CAPTURED"}
RCA27_REMOTE_DECISION=RCA_CAPTURED
RCA27_DECISION=PASS_RCA_CAPTURED
RCA27_END=true
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
VM_BACKEND_IP_SHA256=52051fb856fa9ba24a7bae92f1580040b1fd6a37785e6e16bf317214ae7bc4b5
PRODUCTION_PRE_HTTP=200
REMOTE_PREFLIGHT_RC=0
CANDIDATE_ROUTE_SHA256=5d893ac76690ef5916403fd40d512c4aa49771f238bdbcbf93099c87e294e392
REMOTE_APPLY_RC=0
REMOTE_APPLY_REASON=ROUTE_DNS_RENEWAL_ACTIVE
REMOTE_APPLY_CHANGED=true
REMOTE_APPLY_ROLLBACK_RESTORED=null
REMOTE_APPLY_SNI_ACTIVE=true
REMOTE_APPLY_SNI_PROBE_COUNT=2
REFERENCE_PUBLIC_IPV4_COUNT=0
PUBLIC_STAGING_HTTPS_503_PROOF=false
PRODUCTION_POST_HTTP=200
OUTER_ROLLBACK_RC=0
OUTER_ROLLBACK_RESTORED=true
APPLY28_REASON=PUBLIC_OR_PRODUCTION_POSTVERIFY_FAILED
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"NEWFI-260908-A-STAGINGEDGE-APPLY28","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
OUTPUT_END
CHAT_OUTPUT_END