From 4d1c800b1277874fd81b3c1e49c1c0ca615ee8e2 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Mon, 28 Sep 2026 13:36:19 +0000 Subject: [PATCH] runtime: publish SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1 --- ...USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.json | 38 ++++++++++++ ...-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.txt | 59 +++++++++++++++++++ runtime/latest.json | 16 ++--- runtime/latest.txt | 38 ++++++------ 4 files changed, 124 insertions(+), 27 deletions(-) create mode 100644 runtime/history/SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.json create mode 100644 runtime/history/SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.txt diff --git a/runtime/history/SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.json b/runtime/history/SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.json new file mode 100644 index 00000000..9ddb9e72 --- /dev/null +++ b/runtime/history/SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1", + "status": "FAIL", + "rc": 23, + "host": "pve01", + "mode": "change", + "component": "usa-audit-ssh-upload-to-relay", + "started_at_utc": "2026-09-28T13:33:45Z", + "finished_at_utc": "2026-09-28T13:36:18Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "bfa04acad9c16e857534fb85a25e211c9bdff0edd5f85a9e819aed37acf5add8", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": true, + "result_contract_valid": true, + "result_contract_status": "FAIL", + "result_contract_error": null, + "command_rc": 23, + "changes_made": true, + "rollback_started": true, + "rollback_restored": true, + "mutation_outcome": "ROLLED_BACK", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3", + "sanitized_output_sha256": "c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "USA_AUDIT_SSH_UPLOAD_TO_RELAY=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_FORCED_COMMAND_RELAY_AUTHKEY_AND_CAPTURE_FILE_ONLY\nGOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_NETBIRD_FACTS\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nPVE01_TO_RELAY_CAPTURE_RC=23\nRELAY_TEMP_UPLOAD_KEY_INSTALLED=true\nRELAY_AUTHKEY_CREATED_FILE=false\nRELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507\nRELAY_CAPTURE_FOUND=false\nRELAY_AUTHKEY_ROLLBACK_OK=true\nRELAY_CAPTURE_AFTER_CLEANUP=ABSENT\nAUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false\nUSA_NETBIRD_CLIENT_PRESENT=false\nUSA_UDP3478_LISTENER=false\nUSA_TCP443_LISTENER=false\nDECISION=HOLD_USA_OUTBOUND_SSH_UPLOAD_NOT_CAPTURED\nNEXT_GATE=CLASSIFY_USA_TO_RELAY_SSH_AUTH_OR_EGRESS\nTASK_RESULT=HOLD_USA_AUDIT_SSH_UPLOAD_TO_RELAY\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_RELAY_KEY_AND_CAPTURE_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n" +} diff --git a/runtime/history/SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.txt b/runtime/history/SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.txt new file mode 100644 index 00000000..d63944c6 --- /dev/null +++ b/runtime/history/SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1.txt @@ -0,0 +1,59 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1 +STATUS=FAIL +RC=23 +HOST=pve01 +MODE=change +COMPONENT=usa-audit-ssh-upload-to-relay +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=bfa04acad9c16e857534fb85a25e211c9bdff0edd5f85a9e819aed37acf5add8 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=true +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=FAIL +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=23 +CHANGES_MADE=true +ROLLBACK_STARTED=true +ROLLBACK_RESTORED=true +MUTATION_OUTCOME=ROLLED_BACK +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3 +SANITIZED_OUTPUT_SHA256=c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3 +OUTPUT_BEGIN +USA_AUDIT_SSH_UPLOAD_TO_RELAY=V1 +MODE=change +MUTATION_BOUNDARY=TEMP_FORCED_COMMAND_RELAY_AUTHKEY_AND_CAPTURE_FILE_ONLY +GOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_NETBIRD_FACTS +PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0 +PVE01_OPERATOR_KEY_MATCH=true +RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY +RELAY_HOSTKEY_MATCH=true +PVE01_TO_RELAY_CAPTURE_RC=23 +RELAY_TEMP_UPLOAD_KEY_INSTALLED=true +RELAY_AUTHKEY_CREATED_FILE=false +RELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507 +RELAY_CAPTURE_FOUND=false +RELAY_AUTHKEY_ROLLBACK_OK=true +RELAY_CAPTURE_AFTER_CLEANUP=ABSENT +AUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false +USA_NETBIRD_CLIENT_PRESENT=false +USA_UDP3478_LISTENER=false +USA_TCP443_LISTENER=false +DECISION=HOLD_USA_OUTBOUND_SSH_UPLOAD_NOT_CAPTURED +NEXT_GATE=CLASSIFY_USA_TO_RELAY_SSH_AUTH_OR_EGRESS +TASK_RESULT=HOLD_USA_AUDIT_SSH_UPLOAD_TO_RELAY +CHANGES_MADE=true +ROLLBACK_STARTED=true +ROLLBACK_RESTORED=true +MUTATION_OUTCOME=TEMP_RELAY_KEY_AND_CAPTURE_REMOVED +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 39078ffa..9ddb9e72 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1", + "command_id": "SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1", "status": "FAIL", "rc": 23, "host": "pve01", "mode": "change", - "component": "usa-reverse-ssh-audit-bridge", - "started_at_utc": "2026-09-28T13:21:36Z", - "finished_at_utc": "2026-09-28T13:23:02Z", + "component": "usa-audit-ssh-upload-to-relay", + "started_at_utc": "2026-09-28T13:33:45Z", + "finished_at_utc": "2026-09-28T13:36:18Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "db28576fc12cd01e513678dfd566d95ef99b973e85821ee4c44f6bc5b59beb6b", + "command_sha256": "bfa04acad9c16e857534fb85a25e211c9bdff0edd5f85a9e819aed37acf5add8", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359", - "sanitized_output_sha256": "34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359", + "raw_evidence_sha256": "c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3", + "sanitized_output_sha256": "c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "USA_REVERSE_SSH_AUDIT_BRIDGE=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_RELAY_AUTHKEY_AND_REVERSE_SSH_SESSION_ONLY\nGOAL=FULL_USA_AUDIT_WITHOUT_PUBLIC_INBOUND_SSH\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nPVE01_TO_RELAY_TEMPKEY_SETUP_RC=0\nRELAY_AUTHKEY_TEMP_INSTALLED=true\nRELAY_AUTHKEY_CREATED_FILE=false\nRELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507\nPVE01_OPERATOR_AGENT_ADD_RC=0\nPVE01_TO_RELAY_TUNNEL_AUDIT_RC=23\nRELAY_REVERSE_LISTENER_READY=false\nRELAY_REVERSE_LISTENER_AFTER_CLEANUP=CLOSED\nRELAY_AUTHKEY_ROLLBACK_OK=true\nAUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false\nUSA_NETBIRD_CLIENT_PRESENT=false\nDECISION=HOLD_REVERSE_SSH_AUDIT_INCOMPLETE\nNEXT_GATE=CLASSIFY_TUNNEL_OR_STACK_FAILURE\nTASK_RESULT=HOLD_USA_REVERSE_SSH_AUDIT_BRIDGE\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_RELAY_KEY_AND_TUNNEL_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n" + "output": "USA_AUDIT_SSH_UPLOAD_TO_RELAY=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_FORCED_COMMAND_RELAY_AUTHKEY_AND_CAPTURE_FILE_ONLY\nGOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_NETBIRD_FACTS\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nPVE01_TO_RELAY_CAPTURE_RC=23\nRELAY_TEMP_UPLOAD_KEY_INSTALLED=true\nRELAY_AUTHKEY_CREATED_FILE=false\nRELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507\nRELAY_CAPTURE_FOUND=false\nRELAY_AUTHKEY_ROLLBACK_OK=true\nRELAY_CAPTURE_AFTER_CLEANUP=ABSENT\nAUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false\nUSA_NETBIRD_CLIENT_PRESENT=false\nUSA_UDP3478_LISTENER=false\nUSA_TCP443_LISTENER=false\nDECISION=HOLD_USA_OUTBOUND_SSH_UPLOAD_NOT_CAPTURED\nNEXT_GATE=CLASSIFY_USA_TO_RELAY_SSH_AUTH_OR_EGRESS\nTASK_RESULT=HOLD_USA_AUDIT_SSH_UPLOAD_TO_RELAY\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_RELAY_KEY_AND_CAPTURE_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index c7031997..d63944c6 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1 +COMMAND_ID=SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1 STATUS=FAIL RC=23 HOST=pve01 MODE=change -COMPONENT=usa-reverse-ssh-audit-bridge +COMPONENT=usa-audit-ssh-upload-to-relay REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=db28576fc12cd01e513678dfd566d95ef99b973e85821ee4c44f6bc5b59beb6b +COMMAND_SHA256=bfa04acad9c16e857534fb85a25e211c9bdff0edd5f85a9e819aed37acf5add8 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=true @@ -24,36 +24,36 @@ MUTATION_OUTCOME=ROLLED_BACK SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359 -SANITIZED_OUTPUT_SHA256=34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359 +RAW_EVIDENCE_SHA256=c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3 +SANITIZED_OUTPUT_SHA256=c688f980860eb7e04d99fa55a91b89ea527d384bd83d666845d66f13f68c2fc3 OUTPUT_BEGIN -USA_REVERSE_SSH_AUDIT_BRIDGE=V1 +USA_AUDIT_SSH_UPLOAD_TO_RELAY=V1 MODE=change -MUTATION_BOUNDARY=TEMP_RELAY_AUTHKEY_AND_REVERSE_SSH_SESSION_ONLY -GOAL=FULL_USA_AUDIT_WITHOUT_PUBLIC_INBOUND_SSH +MUTATION_BOUNDARY=TEMP_FORCED_COMMAND_RELAY_AUTHKEY_AND_CAPTURE_FILE_ONLY +GOAL=COLLECT_USA_GUEST_FIREWALL_COMPOSE_NETBIRD_FACTS PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0 PVE01_OPERATOR_KEY_MATCH=true RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY RELAY_HOSTKEY_MATCH=true -PVE01_TO_RELAY_TEMPKEY_SETUP_RC=0 -RELAY_AUTHKEY_TEMP_INSTALLED=true +PVE01_TO_RELAY_CAPTURE_RC=23 +RELAY_TEMP_UPLOAD_KEY_INSTALLED=true RELAY_AUTHKEY_CREATED_FILE=false RELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507 -PVE01_OPERATOR_AGENT_ADD_RC=0 -PVE01_TO_RELAY_TUNNEL_AUDIT_RC=23 -RELAY_REVERSE_LISTENER_READY=false -RELAY_REVERSE_LISTENER_AFTER_CLEANUP=CLOSED +RELAY_CAPTURE_FOUND=false RELAY_AUTHKEY_ROLLBACK_OK=true +RELAY_CAPTURE_AFTER_CLEANUP=ABSENT AUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false USA_NETBIRD_CLIENT_PRESENT=false -DECISION=HOLD_REVERSE_SSH_AUDIT_INCOMPLETE -NEXT_GATE=CLASSIFY_TUNNEL_OR_STACK_FAILURE -TASK_RESULT=HOLD_USA_REVERSE_SSH_AUDIT_BRIDGE +USA_UDP3478_LISTENER=false +USA_TCP443_LISTENER=false +DECISION=HOLD_USA_OUTBOUND_SSH_UPLOAD_NOT_CAPTURED +NEXT_GATE=CLASSIFY_USA_TO_RELAY_SSH_AUTH_OR_EGRESS +TASK_RESULT=HOLD_USA_AUDIT_SSH_UPLOAD_TO_RELAY CHANGES_MADE=true ROLLBACK_STARTED=true ROLLBACK_RESTORED=true -MUTATION_OUTCOME=TEMP_RELAY_KEY_AND_TUNNEL_REMOVED -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true} +MUTATION_OUTCOME=TEMP_RELAY_KEY_AND_CAPTURE_REMOVED +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-AUDIT-SSH-UPLOAD-TO-RELAY-99055R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true} OUTPUT_END CHAT_OUTPUT_END