diff --git a/runtime/history/SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2.json b/runtime/history/SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2.json new file mode 100644 index 00000000..a840c08c --- /dev/null +++ b/runtime/history/SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "infra-vps-operatorkey-live-inventory-readonly", + "started_at_utc": "2026-09-18T10:38:13Z", + "finished_at_utc": "2026-09-18T10:38:18Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "2b04d760d83c71736712af31eec02d9521186fad1cea62cee04aae6c24e0982f", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "859127146da1889178cb574bbc478ab5aea13e1591c41c3d53e8841195d33987", + "sanitized_output_sha256": "859127146da1889178cb574bbc478ab5aea13e1591c41c3d53e8841195d33987", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "VPS517R2R2_SAFE_REPORT={\"active_regions\":[\"USA\",\"Moldova\",\"Piter\"],\"assets\":[{\"auth_debug\":{\"lines\":[\"debug1: identity file [KEY_PATH] type 3\",\"debug1: identity file [KEY_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host '85.121.4.192' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [KEY_PATH] ED25519 SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0 explicit\",\"debug1: Authentications that can continue: publickey\",\"root@85.121.4.192: Permission denied (publickey).\"],\"rc\":255},\"blocked_reason\":\"OPERATOR_KEY_AUTH_FAILED\",\"existing_trust\":[{\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"hits\":1,\"query\":\"relay.pvepro.ru\",\"source\":\"current\"},{\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"hits\":1,\"query\":\"relay.netbird.selfhosted\",\"source\":\"current\"}],\"host\":\"relay.pvepro.ru\",\"id\":\"usa\",\"inventory_ok\":false,\"ip_hash\":\"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd\",\"keyscan\":{\"algs\":[\"ecdsa-sha2-nistp256\",\"ssh-ed25519\",\"ssh-rsa\"],\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"SHA256:J/5Kp48TdNA/RdlTFGEX4nr71yM6uc5ub5Iahr4xAWE\",\"SHA256:nen1KYo/PIGw45nlakIZpa/SSo/llm3tokCz0hFzboE\"],\"rc\":0,\"stderr_bytes\":0},\"label\":\"USA\",\"matched_trust_fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"plan\":\"P2-US\",\"ssh_rc\":255,\"ssh_stderr_bytes\":51,\"ssh_stderr_sha256\":\"c9efb639bd45f47e4131a54a9e4f7b6c0df13ba308ea6a89d2d187572c365c72\",\"trust_approved\":true},{\"blocked_reason\":\"CURRENT_HOSTKEY_NOT_IN_EXISTING_TRUST\",\"existing_trust\":[{\"fps\":[\"SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\",\"SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k\",\"SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw\"],\"hits\":3,\"query\":\"46.16.34.129\",\"source\":\"current\"}],\"host\":\"nb2.pvepro.ru\",\"id\":\"moldova\",\"inventory_ok\":false,\"ip_hash\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\",\"keyscan\":{\"algs\":[\"ecdsa-sha2-nistp256\",\"ssh-ed25519\",\"ssh-rsa\"],\"fps\":[\"SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\",\"SHA256:Q0Cfx2w9lGpHnMNIQtkJnq8z4mX34UCbR3BTQNuwJ9o\",\"SHA256:lUdLDguDrTStHVyMWsZmysgRJKxzjtU72Q7KUrazNoY\"],\"rc\":0,\"stderr_bytes\":0},\"label\":\"Moldova\",\"matched_trust_fps\":[],\"plan\":null,\"trust_approved\":false},{\"blocked_reason\":\"CURRENT_HOSTKEY_NOT_IN_EXISTING_TRUST\",\"existing_trust\":[],\"host\":\"edge01-admin-2026\",\"id\":\"piter\",\"inventory_ok\":false,\"ip_hash\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\",\"keyscan\":{\"algs\":[\"ecdsa-sha2-nistp256\",\"ssh-ed25519\",\"ssh-rsa\"],\"fps\":[\"SHA256:EQAivUSt0LFK9Ra0nE+2nmxxUQMiCN1FDt2rf8OC3tA\",\"SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8\",\"SHA256:eqX0bApeLb6GImvXPuomOVxZ3hen0uK2Z9NSNQ+r5cQ\"],\"rc\":0,\"stderr_bytes\":0},\"label\":\"Piter\",\"matched_trust_fps\":[],\"plan\":null,\"trust_approved\":false}],\"auth_failed_count\":1,\"changes_made\":false,\"command_id\":\"SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2\",\"decision\":\"HOLD_ACTIVE_3VPS_INVENTORY_NO_AUTH_SUCCESS\",\"dedicated_known_hosts_present\":true,\"inventory_count\":0,\"mail_excluded\":true,\"mode\":\"read-only\",\"operator_key\":{\"present\":true,\"public\":{\"fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\",\"rc\":0}},\"schema_version\":1,\"source_evidence\":[],\"trust_blocked_count\":2}\nVPS517R2R2_DECISION=HOLD_ACTIVE_3VPS_INVENTORY_NO_AUTH_SUCCESS\nVPS517R2R2_NEXT_GATE=FINAL_COST_ANALYSIS_IF_3OF3_ELSE_USE_EXACT_TRUST_AUTH_EVIDENCE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2.txt b/runtime/history/SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2.txt new file mode 100644 index 00000000..f84c9777 --- /dev/null +++ b/runtime/history/SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2.txt @@ -0,0 +1,36 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=infra-vps-operatorkey-live-inventory-readonly +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=2b04d760d83c71736712af31eec02d9521186fad1cea62cee04aae6c24e0982f +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=859127146da1889178cb574bbc478ab5aea13e1591c41c3d53e8841195d33987 +SANITIZED_OUTPUT_SHA256=859127146da1889178cb574bbc478ab5aea13e1591c41c3d53e8841195d33987 +OUTPUT_BEGIN +VPS517R2R2_SAFE_REPORT={"active_regions":["USA","Moldova","Piter"],"assets":[{"auth_debug":{"lines":["debug1: identity file [KEY_PATH] type 3","debug1: identity file [KEY_PATH] type -1","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519","debug1: kex: host key algorithm: ssh-ed25519","debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","debug1: Host '85.121.4.192' is known and matches the ED25519 host key.","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug1: Authentications that can continue: publickey","debug1: Offering public key: [KEY_PATH] ED25519 SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0 explicit","debug1: Authentications that can continue: publickey","root@85.121.4.192: Permission denied (publickey)."],"rc":255},"blocked_reason":"OPERATOR_KEY_AUTH_FAILED","existing_trust":[{"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"hits":1,"query":"relay.pvepro.ru","source":"current"},{"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"hits":1,"query":"relay.netbird.selfhosted","source":"current"}],"host":"relay.pvepro.ru","id":"usa","inventory_ok":false,"ip_hash":"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd","keyscan":{"algs":["ecdsa-sha2-nistp256","ssh-ed25519","ssh-rsa"],"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","SHA256:J/5Kp48TdNA/RdlTFGEX4nr71yM6uc5ub5Iahr4xAWE","SHA256:nen1KYo/PIGw45nlakIZpa/SSo/llm3tokCz0hFzboE"],"rc":0,"stderr_bytes":0},"label":"USA","matched_trust_fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"plan":"P2-US","ssh_rc":255,"ssh_stderr_bytes":51,"ssh_stderr_sha256":"c9efb639bd45f47e4131a54a9e4f7b6c0df13ba308ea6a89d2d187572c365c72","trust_approved":true},{"blocked_reason":"CURRENT_HOSTKEY_NOT_IN_EXISTING_TRUST","existing_trust":[{"fps":["SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g","SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k","SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw"],"hits":3,"query":"46.16.34.129","source":"current"}],"host":"nb2.pvepro.ru","id":"moldova","inventory_ok":false,"ip_hash":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16","keyscan":{"algs":["ecdsa-sha2-nistp256","ssh-ed25519","ssh-rsa"],"fps":["SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE","SHA256:Q0Cfx2w9lGpHnMNIQtkJnq8z4mX34UCbR3BTQNuwJ9o","SHA256:lUdLDguDrTStHVyMWsZmysgRJKxzjtU72Q7KUrazNoY"],"rc":0,"stderr_bytes":0},"label":"Moldova","matched_trust_fps":[],"plan":null,"trust_approved":false},{"blocked_reason":"CURRENT_HOSTKEY_NOT_IN_EXISTING_TRUST","existing_trust":[],"host":"edge01-admin-2026","id":"piter","inventory_ok":false,"ip_hash":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5","keyscan":{"algs":["ecdsa-sha2-nistp256","ssh-ed25519","ssh-rsa"],"fps":["SHA256:EQAivUSt0LFK9Ra0nE+2nmxxUQMiCN1FDt2rf8OC3tA","SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8","SHA256:eqX0bApeLb6GImvXPuomOVxZ3hen0uK2Z9NSNQ+r5cQ"],"rc":0,"stderr_bytes":0},"label":"Piter","matched_trust_fps":[],"plan":null,"trust_approved":false}],"auth_failed_count":1,"changes_made":false,"command_id":"SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2","decision":"HOLD_ACTIVE_3VPS_INVENTORY_NO_AUTH_SUCCESS","dedicated_known_hosts_present":true,"inventory_count":0,"mail_excluded":true,"mode":"read-only","operator_key":{"present":true,"public":{"fp":"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0","rc":0}},"schema_version":1,"source_evidence":[],"trust_blocked_count":2} +VPS517R2R2_DECISION=HOLD_ACTIVE_3VPS_INVENTORY_NO_AUTH_SUCCESS +VPS517R2R2_NEXT_GATE=FINAL_COST_ANALYSIS_IF_3OF3_ELSE_USE_EXACT_TRUST_AUTH_EVIDENCE +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 938dca74..a840c08c 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1", + "command_id": "SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", - "component": "infra-vps-ssh-auth-routes-rca-readonly", - "started_at_utc": "2026-09-18T10:35:45Z", - "finished_at_utc": "2026-09-18T10:35:47Z", + "component": "infra-vps-operatorkey-live-inventory-readonly", + "started_at_utc": "2026-09-18T10:38:13Z", + "finished_at_utc": "2026-09-18T10:38:18Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "6d3929a38769781a3664917da603f2d2fa8d771d331e1851092ceea5d7d1a567", + "command_sha256": "2b04d760d83c71736712af31eec02d9521186fad1cea62cee04aae6c24e0982f", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "d4c5803db9a3ba2d9c88fe2e72ff386d116915130a297525a2632b6e68289626", - "sanitized_output_sha256": "eeea2690fa056a6b3a8752fd6a312af873e9a416cc32b9cb07bdbd41ad6a9bd2", + "raw_evidence_sha256": "859127146da1889178cb574bbc478ab5aea13e1591c41c3d53e8841195d33987", + "sanitized_output_sha256": "859127146da1889178cb574bbc478ab5aea13e1591c41c3d53e8841195d33987", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "VPS517R2R1_SAFE_REPORT={\"agent\":{\"keys\":[],\"rc\":2,\"ssh_auth_sock_present\":false,\"stderr_bytes\":58,\"stderr_sha256\":\"84b8eb561e5d34d856acb140340cdbe4f49d4a59bb36aea28d920e7e1d806a29\"},\"changes_made\":false,\"command_id\":\"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1\",\"decision\":\"PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED\",\"key_inventory\":[{\"bytes\":4788,\"mode\":\"0o600\",\"name\":\"authorized_keys\"},{\"bytes\":4788,\"derive_public_rc\":255,\"derive_public_stderr_bytes\":100,\"derive_public_stderr_sha256\":\"dba521506253f9f23dc439713e0de86f7f5efea288f4b58cbc4c9711716cae50\",\"mode\":\"0o600\",\"name\":\"authorized_keys.bak.remove-old-moba-rsa.20260617T160022Z\"},{\"bytes\":117,\"mode\":\"0o640\",\"name\":\"config\"},{\"bytes\":399,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg\",\"mode\":\"0o600\",\"name\":\"homelab-gitea-vm170\"},{\"bytes\":92,\"mode\":\"0o644\",\"name\":\"homelab-gitea-vm170.pub\",\"public_fp\":\"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg\"},{\"bytes\":432,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4\",\"mode\":\"0o600\",\"name\":\"homelab-ops-builder-status-ed25519\"},{\"bytes\":114,\"mode\":\"0o644\",\"name\":\"homelab-ops-builder-status-ed25519.pub\",\"public_fp\":\"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4\"},{\"bytes\":411,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"mode\":\"0o600\",\"name\":\"id_ed25519\"},{\"bytes\":100,\"mode\":\"0o644\",\"name\":\"id_ed25519.pub\",\"public_fp\":\"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\"},{\"bytes\":432,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\",\"mode\":\"0o600\",\"name\":\"id_ed25519_netbird_operator\"},{\"bytes\":115,\"mode\":\"0o644\",\"name\":\"id_ed25519_netbird_operator.pub\",\"public_fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\"},{\"bytes\":3369,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"mode\":\"0o600\",\"name\":\"id_rsa\"},{\"bytes\":736,\"mode\":\"0o644\",\"name\":\"id_rsa.pub\",\"public_fp\":\"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\"},{\"bytes\":15381,\"mode\":\"0o600\",\"name\":\"known_hosts\"},{\"bytes\":5327,\"mode\":\"0o600\",\"name\":\"known_hosts.bak.20260617T094043\"},{\"bytes\":5032,\"mode\":\"0o600\",\"name\":\"known_hosts.before-edge-refresh-20260615T194432Z\"},{\"bytes\":14837,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T040756Z\"},{\"bytes\":14766,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T042857\"},{\"bytes\":14778,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T042946\"},{\"bytes\":16158,\"mode\":\"0o600\",\"name\":\"known_hosts.old\"},{\"bytes\":16158,\"mode\":\"0o600\",\"name\":\"known_hosts.pre-vm160-20260903T200235Z\"},{\"bytes\":1283,\"mode\":\"0o600\",\"name\":\"known_hosts_netbird_vps\"},{\"bytes\":419,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s\",\"mode\":\"0o600\",\"name\":\"router-backup-ed25519\"},{\"bytes\":110,\"mode\":\"0o644\",\"name\":\"router-backup-ed25519.pub\",\"public_fp\":\"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s\"},{\"bytes\":419,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o\",\"mode\":\"0o600\",\"name\":\"snikket-recovery-ed25519\"},{\"bytes\":104,\"mode\":\"0o644\",\"name\":\"snikket-recovery-ed25519.pub\",\"public_fp\":\"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o\"}],\"known_host_archives\":[{\"nb2\":[{\"fps\":[\"SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\",\"SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k\",\"SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw\"],\"hits\":3,\"query\":\"46.16.34.129\"}],\"path\":\"[SENSITIVE_PATH] Connecting to relay.pvepro.ru [[RELAY_IP]] port 22.\",\"debug1: Connection established.\",\"debug1: identity file [SENSITIVE_PATH] type 0\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type 3\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host 'relay.pvepro.ru' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"root@relay.pvepro.ru: Permission denied (publickey).\"],\"stderr_sha256\":\"7dd610853ce49195c76e2fa140f6693cb78d131a69b71ef19a0da59ea129f674\"},{\"host\":\"relay.netbird.selfhosted\",\"rc\":255,\"stderr_bytes\":13787,\"stderr_lines\":[\"debug1: Connecting to relay.netbird.selfhosted [[PRIVATE_IPV6]] port 22.\",\"debug1: Connection established.\",\"debug1: identity file [SENSITIVE_PATH] type 0\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type 3\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host 'relay.netbird.selfhosted' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"root@relay.netbird.selfhosted: Permission denied (publickey).\"],\"stderr_sha256\":\"66a781b909f930a0f27e1b66500e57d5b96b21ae031ade35a06286af93d81cd0\"}],\"remote_login_attempts\":2,\"schema_version\":1,\"source_hits\":[],\"ssh_config\":[],\"targets\":{\"edge01\":{\"ip_hash\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\",\"known_current\":[{\"file\":\"[SENSITIVE_PATH]\nVPS517R2R1_DECISION=PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED\nVPS517R2R1_NEXT_GATE=BUILD_EXACT_AUTH_INVENTORY_OR_REQUEST_PROVIDER_HOSTKEY_CONFIRMATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" + "output": "VPS517R2R2_SAFE_REPORT={\"active_regions\":[\"USA\",\"Moldova\",\"Piter\"],\"assets\":[{\"auth_debug\":{\"lines\":[\"debug1: identity file [KEY_PATH] type 3\",\"debug1: identity file [KEY_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host '85.121.4.192' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [KEY_PATH] ED25519 SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0 explicit\",\"debug1: Authentications that can continue: publickey\",\"root@85.121.4.192: Permission denied (publickey).\"],\"rc\":255},\"blocked_reason\":\"OPERATOR_KEY_AUTH_FAILED\",\"existing_trust\":[{\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"hits\":1,\"query\":\"relay.pvepro.ru\",\"source\":\"current\"},{\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"hits\":1,\"query\":\"relay.netbird.selfhosted\",\"source\":\"current\"}],\"host\":\"relay.pvepro.ru\",\"id\":\"usa\",\"inventory_ok\":false,\"ip_hash\":\"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd\",\"keyscan\":{\"algs\":[\"ecdsa-sha2-nistp256\",\"ssh-ed25519\",\"ssh-rsa\"],\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"SHA256:J/5Kp48TdNA/RdlTFGEX4nr71yM6uc5ub5Iahr4xAWE\",\"SHA256:nen1KYo/PIGw45nlakIZpa/SSo/llm3tokCz0hFzboE\"],\"rc\":0,\"stderr_bytes\":0},\"label\":\"USA\",\"matched_trust_fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"plan\":\"P2-US\",\"ssh_rc\":255,\"ssh_stderr_bytes\":51,\"ssh_stderr_sha256\":\"c9efb639bd45f47e4131a54a9e4f7b6c0df13ba308ea6a89d2d187572c365c72\",\"trust_approved\":true},{\"blocked_reason\":\"CURRENT_HOSTKEY_NOT_IN_EXISTING_TRUST\",\"existing_trust\":[{\"fps\":[\"SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\",\"SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k\",\"SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw\"],\"hits\":3,\"query\":\"46.16.34.129\",\"source\":\"current\"}],\"host\":\"nb2.pvepro.ru\",\"id\":\"moldova\",\"inventory_ok\":false,\"ip_hash\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\",\"keyscan\":{\"algs\":[\"ecdsa-sha2-nistp256\",\"ssh-ed25519\",\"ssh-rsa\"],\"fps\":[\"SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\",\"SHA256:Q0Cfx2w9lGpHnMNIQtkJnq8z4mX34UCbR3BTQNuwJ9o\",\"SHA256:lUdLDguDrTStHVyMWsZmysgRJKxzjtU72Q7KUrazNoY\"],\"rc\":0,\"stderr_bytes\":0},\"label\":\"Moldova\",\"matched_trust_fps\":[],\"plan\":null,\"trust_approved\":false},{\"blocked_reason\":\"CURRENT_HOSTKEY_NOT_IN_EXISTING_TRUST\",\"existing_trust\":[],\"host\":\"edge01-admin-2026\",\"id\":\"piter\",\"inventory_ok\":false,\"ip_hash\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\",\"keyscan\":{\"algs\":[\"ecdsa-sha2-nistp256\",\"ssh-ed25519\",\"ssh-rsa\"],\"fps\":[\"SHA256:EQAivUSt0LFK9Ra0nE+2nmxxUQMiCN1FDt2rf8OC3tA\",\"SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8\",\"SHA256:eqX0bApeLb6GImvXPuomOVxZ3hen0uK2Z9NSNQ+r5cQ\"],\"rc\":0,\"stderr_bytes\":0},\"label\":\"Piter\",\"matched_trust_fps\":[],\"plan\":null,\"trust_approved\":false}],\"auth_failed_count\":1,\"changes_made\":false,\"command_id\":\"SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2\",\"decision\":\"HOLD_ACTIVE_3VPS_INVENTORY_NO_AUTH_SUCCESS\",\"dedicated_known_hosts_present\":true,\"inventory_count\":0,\"mail_excluded\":true,\"mode\":\"read-only\",\"operator_key\":{\"present\":true,\"public\":{\"fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\",\"rc\":0}},\"schema_version\":1,\"source_evidence\":[],\"trust_blocked_count\":2}\nVPS517R2R2_DECISION=HOLD_ACTIVE_3VPS_INVENTORY_NO_AUTH_SUCCESS\nVPS517R2R2_NEXT_GATE=FINAL_COST_ANALYSIS_IF_3OF3_ELSE_USE_EXACT_TRUST_AUTH_EVIDENCE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index bccd4e48..f84c9777 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1 +COMMAND_ID=SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2 STATUS=OK RC=0 HOST=pve01 MODE=read-only -COMPONENT=infra-vps-ssh-auth-routes-rca-readonly +COMPONENT=infra-vps-operatorkey-live-inventory-readonly REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=6d3929a38769781a3664917da603f2d2fa8d771d331e1851092ceea5d7d1a567 +COMMAND_SHA256=2b04d760d83c71736712af31eec02d9521186fad1cea62cee04aae6c24e0982f DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false @@ -24,13 +24,13 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=d4c5803db9a3ba2d9c88fe2e72ff386d116915130a297525a2632b6e68289626 -SANITIZED_OUTPUT_SHA256=eeea2690fa056a6b3a8752fd6a312af873e9a416cc32b9cb07bdbd41ad6a9bd2 +RAW_EVIDENCE_SHA256=859127146da1889178cb574bbc478ab5aea13e1591c41c3d53e8841195d33987 +SANITIZED_OUTPUT_SHA256=859127146da1889178cb574bbc478ab5aea13e1591c41c3d53e8841195d33987 OUTPUT_BEGIN -VPS517R2R1_SAFE_REPORT={"agent":{"keys":[],"rc":2,"ssh_auth_sock_present":false,"stderr_bytes":58,"stderr_sha256":"84b8eb561e5d34d856acb140340cdbe4f49d4a59bb36aea28d920e7e1d806a29"},"changes_made":false,"command_id":"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1","decision":"PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED","key_inventory":[{"bytes":4788,"mode":"0o600","name":"authorized_keys"},{"bytes":4788,"derive_public_rc":255,"derive_public_stderr_bytes":100,"derive_public_stderr_sha256":"dba521506253f9f23dc439713e0de86f7f5efea288f4b58cbc4c9711716cae50","mode":"0o600","name":"authorized_keys.bak.remove-old-moba-rsa.20260617T160022Z"},{"bytes":117,"mode":"0o640","name":"config"},{"bytes":399,"derive_public_rc":0,"derived_public_fp":"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg","mode":"0o600","name":"homelab-gitea-vm170"},{"bytes":92,"mode":"0o644","name":"homelab-gitea-vm170.pub","public_fp":"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg"},{"bytes":432,"derive_public_rc":0,"derived_public_fp":"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4","mode":"0o600","name":"homelab-ops-builder-status-ed25519"},{"bytes":114,"mode":"0o644","name":"homelab-ops-builder-status-ed25519.pub","public_fp":"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4"},{"bytes":411,"derive_public_rc":0,"derived_public_fp":"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M","mode":"0o600","name":"id_ed25519"},{"bytes":100,"mode":"0o644","name":"id_ed25519.pub","public_fp":"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M"},{"bytes":432,"derive_public_rc":0,"derived_public_fp":"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0","mode":"0o600","name":"id_ed25519_netbird_operator"},{"bytes":115,"mode":"0o644","name":"id_ed25519_netbird_operator.pub","public_fp":"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0"},{"bytes":3369,"derive_public_rc":0,"derived_public_fp":"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4","mode":"0o600","name":"id_rsa"},{"bytes":736,"mode":"0o644","name":"id_rsa.pub","public_fp":"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4"},{"bytes":15381,"mode":"0o600","name":"known_hosts"},{"bytes":5327,"mode":"0o600","name":"known_hosts.bak.20260617T094043"},{"bytes":5032,"mode":"0o600","name":"known_hosts.before-edge-refresh-20260615T194432Z"},{"bytes":14837,"mode":"0o600","name":"known_hosts.before-vm150-20260816T040756Z"},{"bytes":14766,"mode":"0o600","name":"known_hosts.before-vm150-20260816T042857"},{"bytes":14778,"mode":"0o600","name":"known_hosts.before-vm150-20260816T042946"},{"bytes":16158,"mode":"0o600","name":"known_hosts.old"},{"bytes":16158,"mode":"0o600","name":"known_hosts.pre-vm160-20260903T200235Z"},{"bytes":1283,"mode":"0o600","name":"known_hosts_netbird_vps"},{"bytes":419,"derive_public_rc":0,"derived_public_fp":"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s","mode":"0o600","name":"router-backup-ed25519"},{"bytes":110,"mode":"0o644","name":"router-backup-ed25519.pub","public_fp":"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s"},{"bytes":419,"derive_public_rc":0,"derived_public_fp":"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o","mode":"0o600","name":"snikket-recovery-ed25519"},{"bytes":104,"mode":"0o644","name":"snikket-recovery-ed25519.pub","public_fp":"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o"}],"known_host_archives":[{"nb2":[{"fps":["SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g","SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k","SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw"],"hits":3,"query":"46.16.34.129"}],"path":"[SENSITIVE_PATH] Connecting to relay.pvepro.ru [[RELAY_IP]] port 22.","debug1: Connection established.","debug1: identity file [SENSITIVE_PATH] type 0","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type 3","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519","debug1: kex: host key algorithm: ssh-ed25519","debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","debug1: Host 'relay.pvepro.ru' is known and matches the ED25519 host key.","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug1: Authentications that can continue: publickey","debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","root@relay.pvepro.ru: Permission denied (publickey)."],"stderr_sha256":"7dd610853ce49195c76e2fa140f6693cb78d131a69b71ef19a0da59ea129f674"},{"host":"relay.netbird.selfhosted","rc":255,"stderr_bytes":13787,"stderr_lines":["debug1: Connecting to relay.netbird.selfhosted [[PRIVATE_IPV6]] port 22.","debug1: Connection established.","debug1: identity file [SENSITIVE_PATH] type 0","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type 3","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug1: identity file [SENSITIVE_PATH] type -1","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519","debug1: kex: host key algorithm: ssh-ed25519","debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","debug1: Host 'relay.netbird.selfhosted' is known and matches the ED25519 host key.","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug1: Authentications that can continue: publickey","debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M","debug1: Authentications that can continue: publickey","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","debug3: no such identity: [SENSITIVE_PATH] No such file or directory","root@relay.netbird.selfhosted: Permission denied (publickey)."],"stderr_sha256":"66a781b909f930a0f27e1b66500e57d5b96b21ae031ade35a06286af93d81cd0"}],"remote_login_attempts":2,"schema_version":1,"source_hits":[],"ssh_config":[],"targets":{"edge01":{"ip_hash":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5","known_current":[{"file":"[SENSITIVE_PATH] -VPS517R2R1_DECISION=PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED -VPS517R2R1_NEXT_GATE=BUILD_EXACT_AUTH_INVENTORY_OR_REQUEST_PROVIDER_HOSTKEY_CONFIRMATION -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} +VPS517R2R2_SAFE_REPORT={"active_regions":["USA","Moldova","Piter"],"assets":[{"auth_debug":{"lines":["debug1: identity file [KEY_PATH] type 3","debug1: identity file [KEY_PATH] type -1","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519","debug1: kex: host key algorithm: ssh-ed25519","debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","debug1: Host '85.121.4.192' is known and matches the ED25519 host key.","debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256","debug1: Authentications that can continue: publickey","debug1: Offering public key: [KEY_PATH] ED25519 SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0 explicit","debug1: Authentications that can continue: publickey","root@85.121.4.192: Permission denied (publickey)."],"rc":255},"blocked_reason":"OPERATOR_KEY_AUTH_FAILED","existing_trust":[{"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"hits":1,"query":"relay.pvepro.ru","source":"current"},{"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"hits":1,"query":"relay.netbird.selfhosted","source":"current"}],"host":"relay.pvepro.ru","id":"usa","inventory_ok":false,"ip_hash":"731a154cebb02c619b63295a7316e8484883299059110ff4200455a92aa396fd","keyscan":{"algs":["ecdsa-sha2-nistp256","ssh-ed25519","ssh-rsa"],"fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY","SHA256:J/5Kp48TdNA/RdlTFGEX4nr71yM6uc5ub5Iahr4xAWE","SHA256:nen1KYo/PIGw45nlakIZpa/SSo/llm3tokCz0hFzboE"],"rc":0,"stderr_bytes":0},"label":"USA","matched_trust_fps":["SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY"],"plan":"P2-US","ssh_rc":255,"ssh_stderr_bytes":51,"ssh_stderr_sha256":"c9efb639bd45f47e4131a54a9e4f7b6c0df13ba308ea6a89d2d187572c365c72","trust_approved":true},{"blocked_reason":"CURRENT_HOSTKEY_NOT_IN_EXISTING_TRUST","existing_trust":[{"fps":["SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g","SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k","SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw"],"hits":3,"query":"46.16.34.129","source":"current"}],"host":"nb2.pvepro.ru","id":"moldova","inventory_ok":false,"ip_hash":"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16","keyscan":{"algs":["ecdsa-sha2-nistp256","ssh-ed25519","ssh-rsa"],"fps":["SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE","SHA256:Q0Cfx2w9lGpHnMNIQtkJnq8z4mX34UCbR3BTQNuwJ9o","SHA256:lUdLDguDrTStHVyMWsZmysgRJKxzjtU72Q7KUrazNoY"],"rc":0,"stderr_bytes":0},"label":"Moldova","matched_trust_fps":[],"plan":null,"trust_approved":false},{"blocked_reason":"CURRENT_HOSTKEY_NOT_IN_EXISTING_TRUST","existing_trust":[],"host":"edge01-admin-2026","id":"piter","inventory_ok":false,"ip_hash":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5","keyscan":{"algs":["ecdsa-sha2-nistp256","ssh-ed25519","ssh-rsa"],"fps":["SHA256:EQAivUSt0LFK9Ra0nE+2nmxxUQMiCN1FDt2rf8OC3tA","SHA256:Ef+HsZb8lIXoadvYBXuGKIL3H7NyJMmf9EYCoJRoSv8","SHA256:eqX0bApeLb6GImvXPuomOVxZ3hen0uK2Z9NSNQ+r5cQ"],"rc":0,"stderr_bytes":0},"label":"Piter","matched_trust_fps":[],"plan":null,"trust_approved":false}],"auth_failed_count":1,"changes_made":false,"command_id":"SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2","decision":"HOLD_ACTIVE_3VPS_INVENTORY_NO_AUTH_SUCCESS","dedicated_known_hosts_present":true,"inventory_count":0,"mail_excluded":true,"mode":"read-only","operator_key":{"present":true,"public":{"fp":"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0","rc":0}},"schema_version":1,"source_evidence":[],"trust_blocked_count":2} +VPS517R2R2_DECISION=HOLD_ACTIVE_3VPS_INVENTORY_NO_AUTH_SUCCESS +VPS517R2R2_NEXT_GATE=FINAL_COST_ANALYSIS_IF_3OF3_ELSE_USE_EXACT_TRUST_AUTH_EVIDENCE +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-OPERATORKEY-LIVE-INVENTORY-READONLY-517R2R2","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END