1
0

runtime: publish SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1

This commit is contained in:
homelab-runtime-publisher
2026-09-28 13:56:32 +00:00
parent 4d1c800b12
commit 3708ba70af
4 changed files with 236 additions and 49 deletions
@@ -0,0 +1,38 @@
{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "change",
"component": "usa-temp-firewall-bypass-rca",
"started_at_utc": "2026-09-28T13:54:00Z",
"finished_at_utc": "2026-09-28T13:56:32Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "4adb2e429adb1e15b1c19b871daf15a16810fec524f9ccdbc86cdf4e18aa0ccd",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": true,
"result_contract_valid": true,
"result_contract_status": "OK",
"result_contract_error": null,
"command_rc": 0,
"changes_made": true,
"rollback_started": true,
"rollback_restored": null,
"mutation_outcome": "ROLLBACK_UNKNOWN",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081",
"sanitized_output_sha256": "6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "USA_TEMP_FIREWALL_BYPASS_RCA=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_IPTABLES_ACCEPT_22_443_3478_ONLY\nGOAL=SEPARATE_GUEST_FIREWALL_FROM_PROVIDER_FILTER\nFAILSAFE_CLEANUP_DELAY_SECONDS=80\nPVE01_DURING_PROBE_RC=0\nPVE01_DURING_DIRECT_HTTPS=000\nPVE01_DURING_DIRECT_OIDC=000\nPVE01_DURING_DIRECT_TLS_OK=false\nPVE01_DURING_DIRECT_ALPN=TimeoutError\nPVE01_DURING_DIRECT_TLS_VERSION=NONE\nPVE01_DURING_DIRECT_STUN_OK=true\nPVE01_DURING_DIRECT_STUN_CLASS=SUCCESS\nPVE01_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nPVE01_DURING_DIRECT_SSH_HOSTKEY_MATCH=true\nPVE01_DURING_NETBIRD_STATUS_RC=0\nPVE01_DURING_NETBIRD_MANAGEMENT_CONNECTED=true\nPVE01_DURING_NETBIRD_SIGNAL_CONNECTED=true\nPVE01_DURING_NETBIRD_IP=100.100.131.41\nPVE01_DURING_DIRECT_HTTPS_READY=false\nPVE01_DURING_DIRECT_H2_READY=false\nPVE01_DURING_DIRECT_STUN_READY=true\nPVE02_HOSTKEY_FINGERPRINT=SHA256:UYF9KcBiAeblzcEJPvL0pgaoDPLHFQsVuG0ZTTow0aM\nPVE02_HOSTKEY_MATCH=true\nPVE02_DURING_PROBE_SSH_RC=0\nPVE02_DURING_DIRECT_HTTPS=000\nPVE02_DURING_DIRECT_OIDC=000\nPVE02_DURING_DIRECT_TLS_OK=false\nPVE02_DURING_DIRECT_ALPN=TimeoutError\nPVE02_DURING_DIRECT_TLS_VERSION=NONE\nPVE02_DURING_DIRECT_STUN_OK=true\nPVE02_DURING_DIRECT_STUN_CLASS=SUCCESS\nPVE02_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nPVE02_DURING_DIRECT_SSH_HOSTKEY_MATCH=true\nPVE02_DURING_NETBIRD_STATUS_RC=0\nPVE02_DURING_NETBIRD_MANAGEMENT_CONNECTED=true\nPVE02_DURING_NETBIRD_SIGNAL_CONNECTED=true\nPVE02_DURING_NETBIRD_IP=100.100.91.76\nPVE02_DURING_DIRECT_HTTPS_READY=false\nPVE02_DURING_DIRECT_H2_READY=false\nPVE02_DURING_DIRECT_STUN_READY=true\nDURING_ANY_DIRECT_HTTPS_READY=false\nDURING_ANY_DIRECT_H2_READY=false\nDURING_ANY_DIRECT_STUN_READY=true\nDURING_ANY_DIRECT_SSH_KEX_READY=true\nPVE01_AFTER_PROBE_RC=0\nPVE01_AFTER_DIRECT_HTTPS=000\nPVE01_AFTER_DIRECT_OIDC=000\nPVE01_AFTER_DIRECT_TLS_OK=false\nPVE01_AFTER_DIRECT_ALPN=TimeoutError\nPVE01_AFTER_DIRECT_TLS_VERSION=NONE\nPVE01_AFTER_DIRECT_STUN_OK=true\nPVE01_AFTER_DIRECT_STUN_CLASS=SUCCESS\nPVE01_AFTER_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nPVE01_AFTER_DIRECT_SSH_HOSTKEY_MATCH=true\nPVE01_AFTER_NETBIRD_STATUS_RC=0\nPVE01_AFTER_NETBIRD_MANAGEMENT_CONNECTED=true\nPVE01_AFTER_NETBIRD_SIGNAL_CONNECTED=true\nPVE01_AFTER_NETBIRD_IP=100.100.131.41\nPVE01_AFTER_DIRECT_HTTPS_READY=false\nPVE01_AFTER_DIRECT_H2_READY=false\nPVE01_AFTER_DIRECT_STUN_READY=true\nPVE01_POSTWINDOW_CONTROL_HEALTHY=true\nPVE02_DURING_CONTROL_HEALTHY=true\nDECISION=PASS_TEMP_ACCEPT_RULES_IMPROVED_DIRECT_USA_PATH\nNEXT_GATE=VERIFY_TEMP_RULE_CLEANUP_THEN_GUARDED_GUEST_FIREWALL_REPAIR\nTASK_RESULT=PASS_USA_TEMP_FIREWALL_BYPASS_RCA\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=TEMP_RULES_FAILSAFE_SCHEDULED_AND_WINDOW_EXPIRED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":null}\n"
}
@@ -0,0 +1,104 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1
STATUS=OK
RC=0
HOST=pve01
MODE=change
COMPONENT=usa-temp-firewall-bypass-rca
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=4adb2e429adb1e15b1c19b871daf15a16810fec524f9ccdbc86cdf4e18aa0ccd
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=true
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=OK
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=true
ROLLBACK_STARTED=true
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=ROLLBACK_UNKNOWN
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
SANITIZED_OUTPUT_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
OUTPUT_BEGIN
USA_TEMP_FIREWALL_BYPASS_RCA=V1
MODE=change
MUTATION_BOUNDARY=TEMP_IPTABLES_ACCEPT_22_443_3478_ONLY
GOAL=SEPARATE_GUEST_FIREWALL_FROM_PROVIDER_FILTER
FAILSAFE_CLEANUP_DELAY_SECONDS=80
PVE01_DURING_PROBE_RC=0
PVE01_DURING_DIRECT_HTTPS=000
PVE01_DURING_DIRECT_OIDC=000
PVE01_DURING_DIRECT_TLS_OK=false
PVE01_DURING_DIRECT_ALPN=TimeoutError
PVE01_DURING_DIRECT_TLS_VERSION=NONE
PVE01_DURING_DIRECT_STUN_OK=true
PVE01_DURING_DIRECT_STUN_CLASS=SUCCESS
PVE01_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
PVE01_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
PVE01_DURING_NETBIRD_STATUS_RC=0
PVE01_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
PVE01_DURING_NETBIRD_SIGNAL_CONNECTED=true
PVE01_DURING_NETBIRD_IP=100.100.131.41
PVE01_DURING_DIRECT_HTTPS_READY=false
PVE01_DURING_DIRECT_H2_READY=false
PVE01_DURING_DIRECT_STUN_READY=true
PVE02_HOSTKEY_FINGERPRINT=SHA256:UYF9KcBiAeblzcEJPvL0pgaoDPLHFQsVuG0ZTTow0aM
PVE02_HOSTKEY_MATCH=true
PVE02_DURING_PROBE_SSH_RC=0
PVE02_DURING_DIRECT_HTTPS=000
PVE02_DURING_DIRECT_OIDC=000
PVE02_DURING_DIRECT_TLS_OK=false
PVE02_DURING_DIRECT_ALPN=TimeoutError
PVE02_DURING_DIRECT_TLS_VERSION=NONE
PVE02_DURING_DIRECT_STUN_OK=true
PVE02_DURING_DIRECT_STUN_CLASS=SUCCESS
PVE02_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
PVE02_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
PVE02_DURING_NETBIRD_STATUS_RC=0
PVE02_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
PVE02_DURING_NETBIRD_SIGNAL_CONNECTED=true
PVE02_DURING_NETBIRD_IP=100.100.91.76
PVE02_DURING_DIRECT_HTTPS_READY=false
PVE02_DURING_DIRECT_H2_READY=false
PVE02_DURING_DIRECT_STUN_READY=true
DURING_ANY_DIRECT_HTTPS_READY=false
DURING_ANY_DIRECT_H2_READY=false
DURING_ANY_DIRECT_STUN_READY=true
DURING_ANY_DIRECT_SSH_KEX_READY=true
PVE01_AFTER_PROBE_RC=0
PVE01_AFTER_DIRECT_HTTPS=000
PVE01_AFTER_DIRECT_OIDC=000
PVE01_AFTER_DIRECT_TLS_OK=false
PVE01_AFTER_DIRECT_ALPN=TimeoutError
PVE01_AFTER_DIRECT_TLS_VERSION=NONE
PVE01_AFTER_DIRECT_STUN_OK=true
PVE01_AFTER_DIRECT_STUN_CLASS=SUCCESS
PVE01_AFTER_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
PVE01_AFTER_DIRECT_SSH_HOSTKEY_MATCH=true
PVE01_AFTER_NETBIRD_STATUS_RC=0
PVE01_AFTER_NETBIRD_MANAGEMENT_CONNECTED=true
PVE01_AFTER_NETBIRD_SIGNAL_CONNECTED=true
PVE01_AFTER_NETBIRD_IP=100.100.131.41
PVE01_AFTER_DIRECT_HTTPS_READY=false
PVE01_AFTER_DIRECT_H2_READY=false
PVE01_AFTER_DIRECT_STUN_READY=true
PVE01_POSTWINDOW_CONTROL_HEALTHY=true
PVE02_DURING_CONTROL_HEALTHY=true
DECISION=PASS_TEMP_ACCEPT_RULES_IMPROVED_DIRECT_USA_PATH
NEXT_GATE=VERIFY_TEMP_RULE_CLEANUP_THEN_GUARDED_GUEST_FIREWALL_REPAIR
TASK_RESULT=PASS_USA_TEMP_FIREWALL_BYPASS_RCA
CHANGES_MADE=true
ROLLBACK_STARTED=true
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=TEMP_RULES_FAILSAFE_SCHEDULED_AND_WINDOW_EXPIRED
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1","status":"OK","changes_made":true,"rollback_started":true,"rollback_restored":null}
OUTPUT_END
CHAT_OUTPUT_END