runtime: publish SUPPORT-260922-SPB-HOME-INGRESS-5BLOCKER-RCA-9117R1

2026-09-22 13:10:23 +00:00
parent d612ade816
commit 4a3b584544
4 changed files with 99 additions and 104 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260922-SPB-HOME-INGRESS-5BLOCKER-RCA-9117R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "spb-home-ingress-5blocker-rca",
+  "started_at_utc": "2026-09-22T13:09:22Z",
+  "finished_at_utc": "2026-09-22T13:10:23Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "2d443f924c629924e1056b6bd4fb8927676175e6e4a9330a9fd73d84baef574b",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "17e26511f16b3406ebcf8215ce165897527ecc8e0240f25f2a844331ca926514",
+  "sanitized_output_sha256": "952ff1bc9bfb418c1ce583ae8f2631930fc091e8d6a36ec4148835db1a0f47fd",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "SPB9117_RCA={\"guest\":{\"ok\":true,\"data\":{\"hostname\":\"edge-vm\",\"containers\":[{\"name\":\"kopia\",\"image\":\"kopia/kopia:latest\",\"ports\":\"\"},{\"name\":\"homelab-registry-cache\",\"image\":\"registry:2\",\"ports\":\"\"},{\"name\":\"npmplus\",\"image\":\"zoeyvid/npmplus:2026-06-17-b1\",\"ports\":\"\"},{\"name\":\"crowdsec\",\"image\":\"crowdsecurity/crowdsec:v1.7.8-slim\",\"ports\":\"127.0.0.1:7422->7422/tcp, 127.0.0.1:8088->8080/tcp\"},{\"name\":\"dozzle\",\"image\":\"2e14180fa14c\",\"ports\":\"127.0.0.1:9999->8080/tcp\"},{\"name\":\"cadvisor\",\"image\":\"gcr.io/cadvisor/cadvisor:latest\",\"ports\":\"127.0.0.1:8081->8080/tcp\"},{\"name\":\"alloy\",\"image\":\"grafana/alloy:v1.17.0\",\"ports\":\"127.0.0.1:12345->12345/tcp\"},{\"name\":\"diun\",\"image\":\"crazymax/diun:latest\",\"ports\":\"\"},{\"name\":\"socket-proxy\",\"image\":\"lscr.io/linuxserver/socket-proxy:latest\",\"ports\":\"127.0.0.1:2375->2375/tcp\"},{\"name\":\"loki\",\"image\":\"grafana/loki:3.7.2\",\"ports\":\"127.0.0.1:3100->3100/tcp\"}],\"npmplus\":{\"ports\":{},\"mounts\":[{\"dest\":\"/data\",\"source_hash\":\"ec0ac67820f88633\",\"rw\":true}],\"networks\":[\"host\"]},\"nginx_source\":\"container\",\"matching_server_blocks\":[{\"names\":[\"taftauto.ru\",\"www.taftauto.ru\"],\"listen\":[\"0.0.0.0:80\",\"[::]:80\"],\"cert_paths\":[],\"key_path_count\":0,\"proxy_pass\":[],\"returns\":[]},{\"names\":[\"taftauto.ru\",\"www.taftauto.ru\"],\"listen\":[\"0.0.0.0:443 ssl\",\"[::]:443 ssl\"],\"cert_paths\":[\"/data/tls/router-certs/taftauto.ru/fullchain.pem\"],\"key_path_count\":1,\"proxy_pass\":[\"http://[PRIVATE_IP]:80\"],\"returns\":[]}],\"cert_meta\":{\"15faecb676e8458f\":{\"path_hash\":\"15faecb676e8458f\",\"sans\":[\"taftauto.ru\",\"www.taftauto.ru\"],\"not_before\":\"Aug 31 00:51:18 2026 GMT\",\"not_after\":\"Nov 29 00:51:17 2026 GMT\"}},\"config_hits\":{\"git-read.gram1.ru\":[],\"www.hbarhub.ru\":[],\"www.newfilya.ru\":[],\"taftauto.ru\":[{\"path_hash\":\"940e8cef89578edd\",\"basename\":\"993.conf\",\"names\":[\"taftauto.ru\",\"www.taftauto.ru\"],\"proxy\":[{\"scheme\":\"http\",\"host_hash\":\"8fec904ac188532b\",\"port\":80,\"tcp\":false}]}],\"www.taftauto.ru\":[{\"path_hash\":\"940e8cef89578edd\",\"basename\":\"993.conf\",\"names\":[\"taftauto.ru\",\"www.taftauto.ru\"],\"proxy\":[{\"scheme\":\"http\",\"host_hash\":\"8fec904ac188532b\",\"port\":80,\"tcp\":false}]}]},\"local_tls\":{\"git-read.gram1.ru\":{\"rc\":60,\"http\":0,\"tls_verify\":\"18\",\"stderr_sha\":\"6039978cbf174c90\"},\"www.hbarhub.ru\":{\"rc\":60,\"http\":0,\"tls_verify\":\"18\",\"stderr_sha\":\"6039978cbf174c90\"},\"www.newfilya.ru\":{\"rc\":60,\"http\":0,\"tls_verify\":\"18\",\"stderr_sha\":\"6039978cbf174c90\"},\"taftauto.ru\":{\"rc\":28,\"http\":0,\"tls_verify\":\"0\",\"stderr_sha\":\"eedc0b93da055ebc\"},\"www.taftauto.ru\":{\"rc\":28,\"http\":0,\"tls_verify\":\"0\",\"stderr_sha\":\"eedc0b93da055ebc\"}}}},\"public_current\":{\"git-read.gram1.ru\":{\"rc\":0,\"http\":200,\"remote_hash\":\"6d6149f42864ce03\",\"tls_verify\":\"0\",\"stderr_sha\":null},\"www.hbarhub.ru\":{\"rc\":0,\"http\":200,\"remote_hash\":\"6d6149f42864ce03\",\"tls_verify\":\"0\",\"stderr_sha\":null},\"www.newfilya.ru\":{\"rc\":0,\"http\":200,\"remote_hash\":\"6d6149f42864ce03\",\"tls_verify\":\"0\",\"stderr_sha\":null},\"taftauto.ru\":{\"rc\":28,\"http\":0,\"remote_hash\":\"6d6149f42864ce03\",\"tls_verify\":\"0\",\"stderr_sha\":\"4c090c5e3be45dc8\"},\"www.taftauto.ru\":{\"rc\":28,\"http\":0,\"remote_hash\":\"6d6149f42864ce03\",\"tls_verify\":\"0\",\"stderr_sha\":\"4c090c5e3be45dc8\"}},\"decision\":\"ANALYZE_5_BLOCKERS_THEN_FIX_HOME_EDGE_ONLY\"}\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_HOME_INGRESS_5BLOCKER_RCA\nDECISION=ANALYZE_5_BLOCKERS_THEN_FIX_HOME_EDGE_ONLY\nNEXT_GATE=READ_EXACT_9117_THEN_TARGETED_HOME_EDGE_FIX\n"
+}
@@ -0,0 +1,37 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260922-SPB-HOME-INGRESS-5BLOCKER-RCA-9117R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=spb-home-ingress-5blocker-rca
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=2d443f924c629924e1056b6bd4fb8927676175e6e4a9330a9fd73d84baef574b
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=17e26511f16b3406ebcf8215ce165897527ecc8e0240f25f2a844331ca926514
+SANITIZED_OUTPUT_SHA256=952ff1bc9bfb418c1ce583ae8f2631930fc091e8d6a36ec4148835db1a0f47fd
+OUTPUT_BEGIN
+SPB9117_RCA={"guest":{"ok":true,"data":{"hostname":"edge-vm","containers":[{"name":"kopia","image":"kopia/kopia:latest","ports":""},{"name":"homelab-registry-cache","image":"registry:2","ports":""},{"name":"npmplus","image":"zoeyvid/npmplus:2026-06-17-b1","ports":""},{"name":"crowdsec","image":"crowdsecurity/crowdsec:v1.7.8-slim","ports":"127.0.0.1:7422->7422/tcp, 127.0.0.1:8088->8080/tcp"},{"name":"dozzle","image":"2e14180fa14c","ports":"127.0.0.1:9999->8080/tcp"},{"name":"cadvisor","image":"gcr.io/cadvisor/cadvisor:latest","ports":"127.0.0.1:8081->8080/tcp"},{"name":"alloy","image":"grafana/alloy:v1.17.0","ports":"127.0.0.1:12345->12345/tcp"},{"name":"diun","image":"crazymax/diun:latest","ports":""},{"name":"socket-proxy","image":"lscr.io/linuxserver/socket-proxy:latest","ports":"127.0.0.1:2375->2375/tcp"},{"name":"loki","image":"grafana/loki:3.7.2","ports":"127.0.0.1:3100->3100/tcp"}],"npmplus":{"ports":{},"mounts":[{"dest":"/data","source_hash":"ec0ac67820f88633","rw":true}],"networks":["host"]},"nginx_source":"container","matching_server_blocks":[{"names":["taftauto.ru","www.taftauto.ru"],"listen":["0.0.0.0:80","[::]:80"],"cert_paths":[],"key_path_count":0,"proxy_pass":[],"returns":[]},{"names":["taftauto.ru","www.taftauto.ru"],"listen":["0.0.0.0:443 ssl","[::]:443 ssl"],"cert_paths":["/data/tls/router-certs/taftauto.ru/fullchain.pem"],"key_path_count":1,"proxy_pass":["http://[PRIVATE_IP]:80"],"returns":[]}],"cert_meta":{"15faecb676e8458f":{"path_hash":"15faecb676e8458f","sans":["taftauto.ru","www.taftauto.ru"],"not_before":"Aug 31 00:51:18 2026 GMT","not_after":"Nov 29 00:51:17 2026 GMT"}},"config_hits":{"git-read.gram1.ru":[],"www.hbarhub.ru":[],"www.newfilya.ru":[],"taftauto.ru":[{"path_hash":"940e8cef89578edd","basename":"993.conf","names":["taftauto.ru","www.taftauto.ru"],"proxy":[{"scheme":"http","host_hash":"8fec904ac188532b","port":80,"tcp":false}]}],"www.taftauto.ru":[{"path_hash":"940e8cef89578edd","basename":"993.conf","names":["taftauto.ru","www.taftauto.ru"],"proxy":[{"scheme":"http","host_hash":"8fec904ac188532b","port":80,"tcp":false}]}]},"local_tls":{"git-read.gram1.ru":{"rc":60,"http":0,"tls_verify":"18","stderr_sha":"6039978cbf174c90"},"www.hbarhub.ru":{"rc":60,"http":0,"tls_verify":"18","stderr_sha":"6039978cbf174c90"},"www.newfilya.ru":{"rc":60,"http":0,"tls_verify":"18","stderr_sha":"6039978cbf174c90"},"taftauto.ru":{"rc":28,"http":0,"tls_verify":"0","stderr_sha":"eedc0b93da055ebc"},"www.taftauto.ru":{"rc":28,"http":0,"tls_verify":"0","stderr_sha":"eedc0b93da055ebc"}}}},"public_current":{"git-read.gram1.ru":{"rc":0,"http":200,"remote_hash":"6d6149f42864ce03","tls_verify":"0","stderr_sha":null},"www.hbarhub.ru":{"rc":0,"http":200,"remote_hash":"6d6149f42864ce03","tls_verify":"0","stderr_sha":null},"www.newfilya.ru":{"rc":0,"http":200,"remote_hash":"6d6149f42864ce03","tls_verify":"0","stderr_sha":null},"taftauto.ru":{"rc":28,"http":0,"remote_hash":"6d6149f42864ce03","tls_verify":"0","stderr_sha":"4c090c5e3be45dc8"},"www.taftauto.ru":{"rc":28,"http":0,"remote_hash":"6d6149f42864ce03","tls_verify":"0","stderr_sha":"4c090c5e3be45dc8"}},"decision":"ANALYZE_5_BLOCKERS_THEN_FIX_HOME_EDGE_ONLY"}
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_HOME_INGRESS_5BLOCKER_RCA
+DECISION=ANALYZE_5_BLOCKERS_THEN_FIX_HOME_EDGE_ONLY
+NEXT_GATE=READ_EXACT_9117_THEN_TARGETED_HOME_EDGE_FIX
+
+OUTPUT_END
+CHAT_OUTPUT_END