homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity

runtime: publish SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1

Browse Source
This commit is contained in:
homelab-runtime-publisher
2026-09-28 13:56:32 +00:00
parent 4d1c800b12
commit 3708ba70af
4 changed files with 236 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runtime/latest.txt
+80 -35
View File
@@ -1,59 +1,104 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1
STATUS=FAIL
RC=23
COMMAND_ID=SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1
STATUS=OK
RC=0
HOST=pve01
MODE=change
COMPONENT=usa-audit-ssh-upload-to-relay
COMPONENT=usa-temp-firewall-bypass-rca
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=bfa04acad9c16e857534fb85a25e211c9bdff0edd5f85a9e819aed37acf5add8
COMMAND_SHA256=4adb2e429adb1e15b1c19b871daf15a16810fec524f9ccdbc86cdf4e18aa0ccd
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=true
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=FAIL
RESULT_CONTRACT_STATUS=OK
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=23
COMMAND_RC=0
CHANGES_MADE=true
ROLLBACK_STARTED=true
ROLLBACK_RESTORED=true
MUTATION_OUTCOME=ROLLED_BACK
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=ROLLBACK_UNKNOWN
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3
SANITIZED_OUTPUT_SHA256=c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3
RAW_EVIDENCE_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
SANITIZED_OUTPUT_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
OUTPUT_BEGIN
USA_AUDIT_SSH_UPLOAD_TO_RELAY=V1
USA_TEMP_FIREWALL_BYPASS_RCA=V1
MODE=change
MUTATION_BOUNDARY=TEMP_FORCED_COMMAND_RELAY_AUTHKEY_AND_CAPTURE_FILE_ONLY
GOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_NETBIRD_FACTS
PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0
PVE01_OPERATOR_KEY_MATCH=true
RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY
RELAY_HOSTKEY_MATCH=true
PVE01_TO_RELAY_CAPTURE_RC=23
RELAY_TEMP_UPLOAD_KEY_INSTALLED=true
RELAY_AUTHKEY_CREATED_FILE=false
RELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507
RELAY_CAPTURE_FOUND=false
RELAY_AUTHKEY_ROLLBACK_OK=true
RELAY_CAPTURE_AFTER_CLEANUP=ABSENT
AUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false
USA_NETBIRD_CLIENT_PRESENT=false
USA_UDP3478_LISTENER=false
USA_TCP443_LISTENER=false
DECISION=HOLD_USA_OUTBOUND_SSH_UPLOAD_NOT_CAPTURED
NEXT_GATE=CLASSIFY_USA_TO_RELAY_SSH_AUTH_OR_EGRESS
TASK_RESULT=HOLD_USA_AUDIT_SSH_UPLOAD_TO_RELAY
MUTATION_BOUNDARY=TEMP_IPTABLES_ACCEPT_22_443_3478_ONLY
GOAL=SEPARATE_GUEST_FIREWALL_FROM_PROVIDER_FILTER
FAILSAFE_CLEANUP_DELAY_SECONDS=80
PVE01_DURING_PROBE_RC=0
PVE01_DURING_DIRECT_HTTPS=000
PVE01_DURING_DIRECT_OIDC=000
PVE01_DURING_DIRECT_TLS_OK=false
PVE01_DURING_DIRECT_ALPN=TimeoutError
PVE01_DURING_DIRECT_TLS_VERSION=NONE
PVE01_DURING_DIRECT_STUN_OK=true
PVE01_DURING_DIRECT_STUN_CLASS=SUCCESS
PVE01_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
PVE01_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
PVE01_DURING_NETBIRD_STATUS_RC=0
PVE01_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
PVE01_DURING_NETBIRD_SIGNAL_CONNECTED=true
PVE01_DURING_NETBIRD_IP=100.100.131.41
PVE01_DURING_DIRECT_HTTPS_READY=false
PVE01_DURING_DIRECT_H2_READY=false
PVE01_DURING_DIRECT_STUN_READY=true
PVE02_HOSTKEY_FINGERPRINT=SHA256:UYF9KcBiAeblzcEJPvL0pgaoDPLHFQsVuG0ZTTow0aM
PVE02_HOSTKEY_MATCH=true
PVE02_DURING_PROBE_SSH_RC=0
PVE02_DURING_DIRECT_HTTPS=000
PVE02_DURING_DIRECT_OIDC=000
PVE02_DURING_DIRECT_TLS_OK=false
PVE02_DURING_DIRECT_ALPN=TimeoutError
PVE02_DURING_DIRECT_TLS_VERSION=NONE
PVE02_DURING_DIRECT_STUN_OK=true
PVE02_DURING_DIRECT_STUN_CLASS=SUCCESS
PVE02_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
PVE02_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
PVE02_DURING_NETBIRD_STATUS_RC=0
PVE02_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
PVE02_DURING_NETBIRD_SIGNAL_CONNECTED=true
PVE02_DURING_NETBIRD_IP=100.100.91.76
PVE02_DURING_DIRECT_HTTPS_READY=false
PVE02_DURING_DIRECT_H2_READY=false
PVE02_DURING_DIRECT_STUN_READY=true
DURING_ANY_DIRECT_HTTPS_READY=false
DURING_ANY_DIRECT_H2_READY=false
DURING_ANY_DIRECT_STUN_READY=true
DURING_ANY_DIRECT_SSH_KEX_READY=true
PVE01_AFTER_PROBE_RC=0
PVE01_AFTER_DIRECT_HTTPS=000
PVE01_AFTER_DIRECT_OIDC=000
PVE01_AFTER_DIRECT_TLS_OK=false
PVE01_AFTER_DIRECT_ALPN=TimeoutError
PVE01_AFTER_DIRECT_TLS_VERSION=NONE
PVE01_AFTER_DIRECT_STUN_OK=true
PVE01_AFTER_DIRECT_STUN_CLASS=SUCCESS
PVE01_AFTER_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
PVE01_AFTER_DIRECT_SSH_HOSTKEY_MATCH=true
PVE01_AFTER_NETBIRD_STATUS_RC=0
PVE01_AFTER_NETBIRD_MANAGEMENT_CONNECTED=true
PVE01_AFTER_NETBIRD_SIGNAL_CONNECTED=true
PVE01_AFTER_NETBIRD_IP=100.100.131.41
PVE01_AFTER_DIRECT_HTTPS_READY=false
PVE01_AFTER_DIRECT_H2_READY=false
PVE01_AFTER_DIRECT_STUN_READY=true
PVE01_POSTWINDOW_CONTROL_HEALTHY=true
PVE02_DURING_CONTROL_HEALTHY=true
DECISION=PASS_TEMP_ACCEPT_RULES_IMPROVED_DIRECT_USA_PATH
NEXT_GATE=VERIFY_TEMP_RULE_CLEANUP_THEN_GUARDED_GUEST_FIREWALL_REPAIR
TASK_RESULT=PASS_USA_TEMP_FIREWALL_BYPASS_RCA
CHANGES_MADE=true
ROLLBACK_STARTED=true
ROLLBACK_RESTORED=true
MUTATION_OUTCOME=TEMP_RELAY_KEY_AND_CAPTURE_REMOVED
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=TEMP_RULES_FAILSAFE_SCHEDULED_AND_WINDOW_EXPIRED
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1","status":"OK","changes_made":true,"rollback_started":true,"rollback_restored":null}
OUTPUT_END
CHAT_OUTPUT_END