runtime: publish SUPPORT-260928-USA-NOVNC-OUTBOUND-AUDIT-TO-RELAY-99052R1

2026-09-28 13:02:03 +00:00
parent ee72e1467d
commit 2a334f40f6
4 changed files with 141 additions and 37 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260928-USA-NOVNC-OUTBOUND-AUDIT-TO-RELAY-99052R1",
+  "status": "FAIL",
+  "rc": 23,
+  "host": "pve01",
+  "mode": "change",
+  "component": "usa-novnc-outbound-audit-to-relay",
+  "started_at_utc": "2026-09-28T12:59:28Z",
+  "finished_at_utc": "2026-09-28T13:02:02Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "473419ebe6e8bf9357da3b5cdd2a5a8d0da0bf05e70398db8fe2d11e57bfc241",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "FAIL",
+  "result_contract_error": null,
+  "command_rc": 23,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "bedab48bb88c6e4e1d20e4065014da6d7a09f4f5a59d737d75319a96babc3aeb",
+  "sanitized_output_sha256": "bedab48bb88c6e4e1d20e4065014da6d7a09f4f5a59d737d75319a96babc3aeb",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "USA_NOVNC_OUTBOUND_AUDIT_TO_RELAY=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_RELAY_RECEIVER_AND_SOURCE_SCOPED_FIREWALL_RULE_ONLY\nGOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_AND_NETBIRD_FACTS\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nPVE01_TO_RELAY_SETUP_RC=0\nRELAY_SETUP_FIREWALL_MODE=NONE\nRELAY_SETUP_RECEIVER_READY=true\nPVE01_TO_RELAY_WAIT_RC=23\nRELAY_CAPTURE_FOUND=false\nRELAY_TEMP_FIREWALL_RULE_REMOVED=NOT_PRESENT\nRELAY_RECEIVER_AFTER_CLEANUP=CLOSED\nAUDIT_COMBINED_GUEST_FIREWALL_RELAY_REF_COUNT=0\nAUDIT_COMBINED_CONFIG_RELAY_REF_COUNT=0\nGUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false\nUSA_TCP443_LISTENER_CONFIRMED=false\nUSA_UDP3478_LISTENER_CONFIRMED=false\nUSA_NETBIRD_CLIENT_PRESENT=false\nDECISION=HOLD_OUTBOUND_AUDIT_CAPTURE_FAILED\nNEXT_GATE=RECONCILE_USA_TO_RELAY_OUTBOUND_PATH\nTASK_RESULT=HOLD_USA_NOVNC_OUTBOUND_AUDIT_TO_RELAY\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_RELAY_RECEIVER_AND_RULE_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-NOVNC-OUTBOUND-AUDIT-TO-RELAY-99052R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n"
+}
@@ -0,0 +1,61 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260928-USA-NOVNC-OUTBOUND-AUDIT-TO-RELAY-99052R1
+STATUS=FAIL
+RC=23
+HOST=pve01
+MODE=change
+COMPONENT=usa-novnc-outbound-audit-to-relay
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=473419ebe6e8bf9357da3b5cdd2a5a8d0da0bf05e70398db8fe2d11e57bfc241
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=23
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=ROLLED_BACK
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=bedab48bb88c6e4e1d20e4065014da6d7a09f4f5a59d737d75319a96babc3aeb
+SANITIZED_OUTPUT_SHA256=bedab48bb88c6e4e1d20e4065014da6d7a09f4f5a59d737d75319a96babc3aeb
+OUTPUT_BEGIN
+USA_NOVNC_OUTBOUND_AUDIT_TO_RELAY=V1
+MODE=change
+MUTATION_BOUNDARY=TEMP_RELAY_RECEIVER_AND_SOURCE_SCOPED_FIREWALL_RULE_ONLY
+GOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_AND_NETBIRD_FACTS
+PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0
+PVE01_OPERATOR_KEY_MATCH=true
+RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY
+RELAY_HOSTKEY_MATCH=true
+PVE01_TO_RELAY_SETUP_RC=0
+RELAY_SETUP_FIREWALL_MODE=NONE
+RELAY_SETUP_RECEIVER_READY=true
+PVE01_TO_RELAY_WAIT_RC=23
+RELAY_CAPTURE_FOUND=false
+RELAY_TEMP_FIREWALL_RULE_REMOVED=NOT_PRESENT
+RELAY_RECEIVER_AFTER_CLEANUP=CLOSED
+AUDIT_COMBINED_GUEST_FIREWALL_RELAY_REF_COUNT=0
+AUDIT_COMBINED_CONFIG_RELAY_REF_COUNT=0
+GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false
+USA_TCP443_LISTENER_CONFIRMED=false
+USA_UDP3478_LISTENER_CONFIRMED=false
+USA_NETBIRD_CLIENT_PRESENT=false
+DECISION=HOLD_OUTBOUND_AUDIT_CAPTURE_FAILED
+NEXT_GATE=RECONCILE_USA_TO_RELAY_OUTBOUND_PATH
+TASK_RESULT=HOLD_USA_NOVNC_OUTBOUND_AUDIT_TO_RELAY
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=TEMP_RELAY_RECEIVER_AND_RULE_REMOVED
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-NOVNC-OUTBOUND-AUDIT-TO-RELAY-99052R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
+
+OUTPUT_END
+CHAT_OUTPUT_END
@@ -1,19 +1,19 @@
 {
  "schema_version": 1,
  "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260928-USA-DASHBOARD-STATICROOT-DISCOVERY-AUDIT-99051R1",
+  "command_id": "SUPPORT-260928-USA-NOVNC-OUTBOUND-AUDIT-TO-RELAY-99052R1",
  "status": "FAIL",
  "rc": 23,
  "host": "pve01",
  "mode": "change",
-  "component": "usa-dashboard-staticroot-discovery-audit",
-  "started_at_utc": "2026-09-28T12:48:50Z",
-  "finished_at_utc": "2026-09-28T12:49:48Z",
+  "component": "usa-novnc-outbound-audit-to-relay",
+  "started_at_utc": "2026-09-28T12:59:28Z",
+  "finished_at_utc": "2026-09-28T13:02:02Z",
  "reference_register_checked": true,
  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
  "error_register_checked": true,
  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "bb136db2ad3357524dfce65d2edb8eb17bc27e4174211be014ea10f5b9b6333a",
+  "command_sha256": "473419ebe6e8bf9357da3b5cdd2a5a8d0da0bf05e70398db8fe2d11e57bfc241",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
@@ -23,16 +23,16 @@
  "result_contract_error": null,
  "command_rc": 23,
  "changes_made": true,
-  "rollback_started": false,
-  "rollback_restored": null,
-  "mutation_outcome": "MUTATED",
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
  "sanitized": true,
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "b77df2237e9b03e2550fc848d54f9f446e755fa765a5c307908b66c950f78942",
-  "sanitized_output_sha256": "b77df2237e9b03e2550fc848d54f9f446e755fa765a5c307908b66c950f78942",
+  "raw_evidence_sha256": "bedab48bb88c6e4e1d20e4065014da6d7a09f4f5a59d737d75319a96babc3aeb",
+  "sanitized_output_sha256": "bedab48bb88c6e4e1d20e4065014da6d7a09f4f5a59d737d75319a96babc3aeb",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "USA_DASHBOARD_STATICROOT_DISCOVERY_AUDIT=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_SAFE_AUDIT_FILE_IN_DASHBOARD_STATIC_ROOT_ONLY\nNOVNC_MATCH_COUNT=1\nAUDIT_SCRIPT_CREATED=true\nAUDIT_EXECUTED=true\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nPVE01_TO_RELAY_FETCH_RC=0\nRELAY_DASH_AUDIT_HTTP_CODE=404\nRELAY_DASH_AUDIT_FETCH_OK=false\nRELAY_DIRECT_ROOT_HTTPS=200\nAUDIT_COMBINED_FIREWALL_RELAY_IP_REF_COUNT=0\nAUDIT_COMBINED_CONFIG_RELAY_IP_REF_COUNT=0\nDECISION=HOLD_DASHBOARD_STATICROOT_DISCOVERY_OR_FETCH_FAILED\nNEXT_GATE=USE_DIRECT_NO_VNC_AUDIT_SUMMARY_FALLBACK\nTASK_RESULT=HOLD_USA_DASHBOARD_STATICROOT_DISCOVERY_AUDIT\nCHANGES_MADE=true\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=TEMP_SAFE_FILE_SELF_CLEANUP_SCHEDULED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-DASHBOARD-STATICROOT-DISCOVERY-AUDIT-99051R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":false,\"rollback_restored\":null}\n"
+  "output": "USA_NOVNC_OUTBOUND_AUDIT_TO_RELAY=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_RELAY_RECEIVER_AND_SOURCE_SCOPED_FIREWALL_RULE_ONLY\nGOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_AND_NETBIRD_FACTS\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nPVE01_TO_RELAY_SETUP_RC=0\nRELAY_SETUP_FIREWALL_MODE=NONE\nRELAY_SETUP_RECEIVER_READY=true\nPVE01_TO_RELAY_WAIT_RC=23\nRELAY_CAPTURE_FOUND=false\nRELAY_TEMP_FIREWALL_RULE_REMOVED=NOT_PRESENT\nRELAY_RECEIVER_AFTER_CLEANUP=CLOSED\nAUDIT_COMBINED_GUEST_FIREWALL_RELAY_REF_COUNT=0\nAUDIT_COMBINED_CONFIG_RELAY_REF_COUNT=0\nGUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false\nUSA_TCP443_LISTENER_CONFIRMED=false\nUSA_UDP3478_LISTENER_CONFIRMED=false\nUSA_NETBIRD_CLIENT_PRESENT=false\nDECISION=HOLD_OUTBOUND_AUDIT_CAPTURE_FAILED\nNEXT_GATE=RECONCILE_USA_TO_RELAY_OUTBOUND_PATH\nTASK_RESULT=HOLD_USA_NOVNC_OUTBOUND_AUDIT_TO_RELAY\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_RELAY_RECEIVER_AND_RULE_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-NOVNC-OUTBOUND-AUDIT-TO-RELAY-99052R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n"
 }
@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260928-USA-DASHBOARD-STATICROOT-DISCOVERY-AUDIT-99051R1
+COMMAND_ID=SUPPORT-260928-USA-NOVNC-OUTBOUND-AUDIT-TO-RELAY-99052R1
 STATUS=FAIL
 RC=23
 HOST=pve01
 MODE=change
-COMPONENT=usa-dashboard-staticroot-discovery-audit
+COMPONENT=usa-novnc-outbound-audit-to-relay
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=bb136db2ad3357524dfce65d2edb8eb17bc27e4174211be014ea10f5b9b6333a
+COMMAND_SHA256=473419ebe6e8bf9357da3b5cdd2a5a8d0da0bf05e70398db8fe2d11e57bfc241
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=true
@@ -18,39 +18,44 @@ RESULT_CONTRACT_STATUS=FAIL
 RESULT_CONTRACT_ERROR=NONE
 COMMAND_RC=23
 CHANGES_MADE=true
-ROLLBACK_STARTED=false
-ROLLBACK_RESTORED=null
-MUTATION_OUTCOME=MUTATED
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=ROLLED_BACK
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=b77df2237e9b03e2550fc848d54f9f446e755fa765a5c307908b66c950f78942
-SANITIZED_OUTPUT_SHA256=b77df2237e9b03e2550fc848d54f9f446e755fa765a5c307908b66c950f78942
+RAW_EVIDENCE_SHA256=bedab48bb88c6e4e1d20e4065014da6d7a09f4f5a59d737d75319a96babc3aeb
+SANITIZED_OUTPUT_SHA256=bedab48bb88c6e4e1d20e4065014da6d7a09f4f5a59d737d75319a96babc3aeb
 OUTPUT_BEGIN
-USA_DASHBOARD_STATICROOT_DISCOVERY_AUDIT=V1
+USA_NOVNC_OUTBOUND_AUDIT_TO_RELAY=V1
 MODE=change
-MUTATION_BOUNDARY=TEMP_SAFE_AUDIT_FILE_IN_DASHBOARD_STATIC_ROOT_ONLY
-NOVNC_MATCH_COUNT=1
-AUDIT_SCRIPT_CREATED=true
-AUDIT_EXECUTED=true
+MUTATION_BOUNDARY=TEMP_RELAY_RECEIVER_AND_SOURCE_SCOPED_FIREWALL_RULE_ONLY
+GOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_AND_NETBIRD_FACTS
 PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0
 PVE01_OPERATOR_KEY_MATCH=true
 RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY
 RELAY_HOSTKEY_MATCH=true
-PVE01_TO_RELAY_FETCH_RC=0
-RELAY_DASH_AUDIT_HTTP_CODE=404
-RELAY_DASH_AUDIT_FETCH_OK=false
-RELAY_DIRECT_ROOT_HTTPS=200
-AUDIT_COMBINED_FIREWALL_RELAY_IP_REF_COUNT=0
-AUDIT_COMBINED_CONFIG_RELAY_IP_REF_COUNT=0
-DECISION=HOLD_DASHBOARD_STATICROOT_DISCOVERY_OR_FETCH_FAILED
-NEXT_GATE=USE_DIRECT_NO_VNC_AUDIT_SUMMARY_FALLBACK
-TASK_RESULT=HOLD_USA_DASHBOARD_STATICROOT_DISCOVERY_AUDIT
+PVE01_TO_RELAY_SETUP_RC=0
+RELAY_SETUP_FIREWALL_MODE=NONE
+RELAY_SETUP_RECEIVER_READY=true
+PVE01_TO_RELAY_WAIT_RC=23
+RELAY_CAPTURE_FOUND=false
+RELAY_TEMP_FIREWALL_RULE_REMOVED=NOT_PRESENT
+RELAY_RECEIVER_AFTER_CLEANUP=CLOSED
+AUDIT_COMBINED_GUEST_FIREWALL_RELAY_REF_COUNT=0
+AUDIT_COMBINED_CONFIG_RELAY_REF_COUNT=0
+GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false
+USA_TCP443_LISTENER_CONFIRMED=false
+USA_UDP3478_LISTENER_CONFIRMED=false
+USA_NETBIRD_CLIENT_PRESENT=false
+DECISION=HOLD_OUTBOUND_AUDIT_CAPTURE_FAILED
+NEXT_GATE=RECONCILE_USA_TO_RELAY_OUTBOUND_PATH
+TASK_RESULT=HOLD_USA_NOVNC_OUTBOUND_AUDIT_TO_RELAY
 CHANGES_MADE=true
-ROLLBACK_STARTED=false
-ROLLBACK_RESTORED=null
-MUTATION_OUTCOME=TEMP_SAFE_FILE_SELF_CLEANUP_SCHEDULED
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-DASHBOARD-STATICROOT-DISCOVERY-AUDIT-99051R1","status":"FAIL","changes_made":true,"rollback_started":false,"rollback_restored":null}
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=TEMP_RELAY_RECEIVER_AND_RULE_REMOVED
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-NOVNC-OUTBOUND-AUDIT-TO-RELAY-99052R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}

 OUTPUT_END
 CHAT_OUTPUT_END