From 5474c6408607fddf95f8974e5272b7b9796f09ee Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Tue, 6 Oct 2026 17:00:10 +0000 Subject: [PATCH] runtime: publish SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1 --- ...006-SNIKKET-WG-ALTERNATES-RCA-99732R1.json | 38 +++++++ ...1006-SNIKKET-WG-ALTERNATES-RCA-99732R1.txt | 105 ++++++++++++++++++ runtime/latest.json | 28 ++--- runtime/latest.txt | 105 +++++++++++++----- 4 files changed, 237 insertions(+), 39 deletions(-) create mode 100644 runtime/history/SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1.json create mode 100644 runtime/history/SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1.txt diff --git a/runtime/history/SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1.json b/runtime/history/SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1.json new file mode 100644 index 00000000..e52815e5 --- /dev/null +++ b/runtime/history/SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "snikket-wg-alternates-rca", + "started_at_utc": "2026-10-06T17:00:02Z", + "finished_at_utc": "2026-10-06T17:00:09Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "34d72f7b70ea1b2b16ffc83acac889361bb8eb0bc6cfb2f99c61bfed4bd35d4c", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "2ceffd095430a12bbfb4472070f98e860493e9cfb03ab170e84a531985e14705", + "sanitized_output_sha256": "2ceffd095430a12bbfb4472070f98e860493e9cfb03ab170e84a531985e14705", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "SNIKKET_WG_ALTERNATES_RCA=V1\nMODE=read-only\nNO_MUTATION=true\nVM130_QGA_TRANSPORT_RC=0\nQGA_EXIT=0\nHOST=edge-vm\nEXPECTED_SNIKKET_EGRESS_SHA=c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\nWG_BEGIN=taftauto-wg-client\nWG_CFG_SHA=b4cd0c7e3ff6c59ff6390d7d671902c3168716931cf69bffcee633ff7eaa00e7\nWG_CFG_MODE=600\nWG_UNIT_ACTIVE=inactive\nWG_UNIT_ENABLED=disabled\nWG_IFACE_PRESENT=false\nREC|CFG|NAME=taftauto-wg-client|KEY=MTU|VALUE=1420\nREC|CFG|NAME=taftauto-wg-client|KEY=Endpoint|HOST_SHA=26ac437d63a8bcf25425|TYPE=PUBLIC_IP|PORT=51824\nREC|CFG|NAME=taftauto-wg-client|KEY=AllowedIPs|COUNT=2|DEFAULT4=false|DEFAULT6=false\nREC|CFG|NAME=taftauto-wg-client|KEY=PersistentKeepalive|VALUE=25\nWG_END=taftauto-wg-client\nWG_BEGIN=wg-edge01\nWG_CFG_SHA=42b046d580b2ccd6af8f3573fba4882c71c92b2938f3fed8edf58258bbc89615\nWG_CFG_MODE=600\nWG_UNIT_ACTIVE=active\nWG_UNIT_ENABLED=enabled\nWG_IFACE_PRESENT=true\nREC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip route replace IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED\nREC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip route del IP_REDACTED via IP_REDACTED dev eth0 2>/dev/null || true\nREC|CFG|NAME=wg-edge01|KEY=Table|VALUE=off\nREC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip route replace table 17777 default dev wg-edge01\nREC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip route del table 17777 default dev wg-edge01 2>/dev/null || true\nREC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip rule add priority 101 from IP_REDACTED lookup 17777\nREC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip rule del priority 101 from IP_REDACTED lookup 17777 2>/dev/null || true\nREC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=nft -f /etc/wireguard/snikket-edge-ingress.nft\nREC|HOOK_FILE|NAME=wg-edge01|BASENAME=snikket-edge-ingress.nft|SHA=07eaa0b0995608a1605397269c4b424e1620d9354ecd17e22a3989304adca7e3\nREC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=nft delete table ip snikket_edge_prod 2>/dev/null || true\nREC|CFG|NAME=wg-edge01|KEY=AllowedIPs|COUNT=1|DEFAULT4=true|DEFAULT6=false\nREC|CFG|NAME=wg-edge01|KEY=Endpoint|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820\nREC|CFG|NAME=wg-edge01|KEY=PersistentKeepalive|VALUE=25\nWG_PEER_COUNT=1\nWG_HANDSHAKE_AGE=-1\nWG_RX_BYTES=0\nWG_TX_BYTES=44400\nWG_INTERFACE_IPIFY_RC=28\nWG_INTERFACE_EGRESS_SHA=NONE\nWG_INTERFACE_EGRESS_MATCH_EXPECTED=false\nWG_END=wg-edge01\nWG_BEGIN=wg-taftauto\nWG_CFG_SHA=6a2fd7f892bf3a0b2daac097ceea5582a36cd07931633088644c4887ddcaaf40\nWG_CFG_MODE=600\nWG_UNIT_ACTIVE=active\nWG_UNIT_ENABLED=enabled\nWG_IFACE_PRESENT=true\nREC|CFG|NAME=wg-taftauto|KEY=AllowedIPs|COUNT=1|DEFAULT4=false|DEFAULT6=false\nWG_PEER_COUNT=1\nWG_HANDSHAKE_AGE=36\nWG_RX_BYTES=118664\nWG_TX_BYTES=32152\nWG_INTERFACE_IPIFY_RC=SKIP_NO_DEFAULT4\nWG_INTERFACE_EGRESS_SHA=NONE\nWG_INTERFACE_EGRESS_MATCH_EXPECTED=false\nWG_END=wg-taftauto\nNFT_SNIKKET_TABLE_COUNT=1\nREC|NFT_TABLE|table ip snikket_edge_prod\nFAILED_UNIT_COUNT=0\nREC|GUEST_ERR|curl: (28) Connection timed out after 5001 milliseconds\nCLUSTER_QUORATE=true\nDECISION=PASS_SNIKKET_WG_ALTERNATES_RCA\nNEXT_GATE=SNIKKET_WG_ALTERNATE_TARGETED_REPAIR\nTASK_RESULT=SNIKKET_WG_ALTERNATES_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1.txt b/runtime/history/SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1.txt new file mode 100644 index 00000000..350f8fbd --- /dev/null +++ b/runtime/history/SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1.txt @@ -0,0 +1,105 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=snikket-wg-alternates-rca +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=34d72f7b70ea1b2b16ffc83acac889361bb8eb0bc6cfb2f99c61bfed4bd35d4c +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=2ceffd095430a12bbfb4472070f98e860493e9cfb03ab170e84a531985e14705 +SANITIZED_OUTPUT_SHA256=2ceffd095430a12bbfb4472070f98e860493e9cfb03ab170e84a531985e14705 +OUTPUT_BEGIN +SNIKKET_WG_ALTERNATES_RCA=V1 +MODE=read-only +NO_MUTATION=true +VM130_QGA_TRANSPORT_RC=0 +QGA_EXIT=0 +HOST=edge-vm +EXPECTED_SNIKKET_EGRESS_SHA=c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13 +WG_BEGIN=taftauto-wg-client +WG_CFG_SHA=b4cd0c7e3ff6c59ff6390d7d671902c3168716931cf69bffcee633ff7eaa00e7 +WG_CFG_MODE=600 +WG_UNIT_ACTIVE=inactive +WG_UNIT_ENABLED=disabled +WG_IFACE_PRESENT=false +REC|CFG|NAME=taftauto-wg-client|KEY=MTU|VALUE=1420 +REC|CFG|NAME=taftauto-wg-client|KEY=Endpoint|HOST_SHA=26ac437d63a8bcf25425|TYPE=PUBLIC_IP|PORT=51824 +REC|CFG|NAME=taftauto-wg-client|KEY=AllowedIPs|COUNT=2|DEFAULT4=false|DEFAULT6=false +REC|CFG|NAME=taftauto-wg-client|KEY=PersistentKeepalive|VALUE=25 +WG_END=taftauto-wg-client +WG_BEGIN=wg-edge01 +WG_CFG_SHA=42b046d580b2ccd6af8f3573fba4882c71c92b2938f3fed8edf58258bbc89615 +WG_CFG_MODE=600 +WG_UNIT_ACTIVE=active +WG_UNIT_ENABLED=enabled +WG_IFACE_PRESENT=true +REC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip route replace IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED +REC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip route del IP_REDACTED via IP_REDACTED dev eth0 2>/dev/null || true +REC|CFG|NAME=wg-edge01|KEY=Table|VALUE=off +REC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip route replace table 17777 default dev wg-edge01 +REC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip route del table 17777 default dev wg-edge01 2>/dev/null || true +REC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip rule add priority 101 from IP_REDACTED lookup 17777 +REC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip rule del priority 101 from IP_REDACTED lookup 17777 2>/dev/null || true +REC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=nft -f /etc/wireguard/snikket-edge-ingress.nft +REC|HOOK_FILE|NAME=wg-edge01|BASENAME=snikket-edge-ingress.nft|SHA=07eaa0b0995608a1605397269c4b424e1620d9354ecd17e22a3989304adca7e3 +REC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=nft delete table ip snikket_edge_prod 2>/dev/null || true +REC|CFG|NAME=wg-edge01|KEY=AllowedIPs|COUNT=1|DEFAULT4=true|DEFAULT6=false +REC|CFG|NAME=wg-edge01|KEY=Endpoint|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820 +REC|CFG|NAME=wg-edge01|KEY=PersistentKeepalive|VALUE=25 +WG_PEER_COUNT=1 +WG_HANDSHAKE_AGE=-1 +WG_RX_BYTES=0 +WG_TX_BYTES=44400 +WG_INTERFACE_IPIFY_RC=28 +WG_INTERFACE_EGRESS_SHA=NONE +WG_INTERFACE_EGRESS_MATCH_EXPECTED=false +WG_END=wg-edge01 +WG_BEGIN=wg-taftauto +WG_CFG_SHA=6a2fd7f892bf3a0b2daac097ceea5582a36cd07931633088644c4887ddcaaf40 +WG_CFG_MODE=600 +WG_UNIT_ACTIVE=active +WG_UNIT_ENABLED=enabled +WG_IFACE_PRESENT=true +REC|CFG|NAME=wg-taftauto|KEY=AllowedIPs|COUNT=1|DEFAULT4=false|DEFAULT6=false +WG_PEER_COUNT=1 +WG_HANDSHAKE_AGE=36 +WG_RX_BYTES=118664 +WG_TX_BYTES=32152 +WG_INTERFACE_IPIFY_RC=SKIP_NO_DEFAULT4 +WG_INTERFACE_EGRESS_SHA=NONE +WG_INTERFACE_EGRESS_MATCH_EXPECTED=false +WG_END=wg-taftauto +NFT_SNIKKET_TABLE_COUNT=1 +REC|NFT_TABLE|table ip snikket_edge_prod +FAILED_UNIT_COUNT=0 +REC|GUEST_ERR|curl: (28) Connection timed out after 5001 milliseconds +CLUSTER_QUORATE=true +DECISION=PASS_SNIKKET_WG_ALTERNATES_RCA +NEXT_GATE=SNIKKET_WG_ALTERNATE_TARGETED_REPAIR +TASK_RESULT=SNIKKET_WG_ALTERNATES_RCA +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index aa4bb98d..e52815e5 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,27 +1,27 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-261006-SNIKKET-WG-FAILOVER-REPAIR-99731R1", - "status": "FAIL", - "rc": 1, + "command_id": "SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1", + "status": "OK", + "rc": 0, "host": "pve01", - "mode": "change", - "component": "snikket-wg-failover-repair", - "started_at_utc": "2026-10-06T16:55:23Z", - "finished_at_utc": "2026-10-06T16:55:28Z", + "mode": "read-only", + "component": "snikket-wg-alternates-rca", + "started_at_utc": "2026-10-06T17:00:02Z", + "finished_at_utc": "2026-10-06T17:00:09Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "f0f6e526598c3a8cbe95fa1d5f824fd0f11c73c803b99163af432b6d70d5a3b9", + "command_sha256": "34d72f7b70ea1b2b16ffc83acac889361bb8eb0bc6cfb2f99c61bfed4bd35d4c", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, - "change_declared": true, + "change_declared": false, "result_contract_valid": true, - "result_contract_status": "FAIL", + "result_contract_status": null, "result_contract_error": null, - "command_rc": 1, + "command_rc": 0, "changes_made": false, "rollback_started": false, "rollback_restored": null, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "12cfc3b5f71ff8f78e91bf7caf557e8060fc833c59a8f01ebcbabb8d8369a645", - "sanitized_output_sha256": "12cfc3b5f71ff8f78e91bf7caf557e8060fc833c59a8f01ebcbabb8d8369a645", + "raw_evidence_sha256": "2ceffd095430a12bbfb4472070f98e860493e9cfb03ab170e84a531985e14705", + "sanitized_output_sha256": "2ceffd095430a12bbfb4472070f98e860493e9cfb03ab170e84a531985e14705", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "SNIKKET_WG_FAILOVER_REPAIR=V1\nMODE=change\nSCOPE=EXISTING_HEALTHY_WG_FAILOVER_FOR_VM150\nNO_NEW_VPN=true\nNO_WG_CONFIG_EDIT=true\nNO_VM_POWER_MUTATION=true\nNO_NETBIRD_MUTATION=true\nNO_PVE_FIREWALL_MUTATION=true\nNO_PACKAGE_MUTATION=true\nVM150_SRC_SHA=4e29a2729bbc40663066bdae0c5a3d627070fba621f5c8c70639f4782afbc67d\nVM150_GW_SHA=bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834\nSNIKKET_DOMAIN_SHA=04cb4a04e408d91abb9c63701ae969abf16d8a12b6f4f144c5edf2c28e03256b\nFAIL_REASON=NO_SAFE_HEALTHY_WG_CANDIDATE\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-SNIKKET-WG-FAILOVER-REPAIR-99731R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" + "output": "SNIKKET_WG_ALTERNATES_RCA=V1\nMODE=read-only\nNO_MUTATION=true\nVM130_QGA_TRANSPORT_RC=0\nQGA_EXIT=0\nHOST=edge-vm\nEXPECTED_SNIKKET_EGRESS_SHA=c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13\nWG_BEGIN=taftauto-wg-client\nWG_CFG_SHA=b4cd0c7e3ff6c59ff6390d7d671902c3168716931cf69bffcee633ff7eaa00e7\nWG_CFG_MODE=600\nWG_UNIT_ACTIVE=inactive\nWG_UNIT_ENABLED=disabled\nWG_IFACE_PRESENT=false\nREC|CFG|NAME=taftauto-wg-client|KEY=MTU|VALUE=1420\nREC|CFG|NAME=taftauto-wg-client|KEY=Endpoint|HOST_SHA=26ac437d63a8bcf25425|TYPE=PUBLIC_IP|PORT=51824\nREC|CFG|NAME=taftauto-wg-client|KEY=AllowedIPs|COUNT=2|DEFAULT4=false|DEFAULT6=false\nREC|CFG|NAME=taftauto-wg-client|KEY=PersistentKeepalive|VALUE=25\nWG_END=taftauto-wg-client\nWG_BEGIN=wg-edge01\nWG_CFG_SHA=42b046d580b2ccd6af8f3573fba4882c71c92b2938f3fed8edf58258bbc89615\nWG_CFG_MODE=600\nWG_UNIT_ACTIVE=active\nWG_UNIT_ENABLED=enabled\nWG_IFACE_PRESENT=true\nREC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip route replace IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED\nREC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip route del IP_REDACTED via IP_REDACTED dev eth0 2>/dev/null || true\nREC|CFG|NAME=wg-edge01|KEY=Table|VALUE=off\nREC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip route replace table 17777 default dev wg-edge01\nREC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip route del table 17777 default dev wg-edge01 2>/dev/null || true\nREC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip rule add priority 101 from IP_REDACTED lookup 17777\nREC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip rule del priority 101 from IP_REDACTED lookup 17777 2>/dev/null || true\nREC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=nft -f /etc/wireguard/snikket-edge-ingress.nft\nREC|HOOK_FILE|NAME=wg-edge01|BASENAME=snikket-edge-ingress.nft|SHA=07eaa0b0995608a1605397269c4b424e1620d9354ecd17e22a3989304adca7e3\nREC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=nft delete table ip snikket_edge_prod 2>/dev/null || true\nREC|CFG|NAME=wg-edge01|KEY=AllowedIPs|COUNT=1|DEFAULT4=true|DEFAULT6=false\nREC|CFG|NAME=wg-edge01|KEY=Endpoint|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820\nREC|CFG|NAME=wg-edge01|KEY=PersistentKeepalive|VALUE=25\nWG_PEER_COUNT=1\nWG_HANDSHAKE_AGE=-1\nWG_RX_BYTES=0\nWG_TX_BYTES=44400\nWG_INTERFACE_IPIFY_RC=28\nWG_INTERFACE_EGRESS_SHA=NONE\nWG_INTERFACE_EGRESS_MATCH_EXPECTED=false\nWG_END=wg-edge01\nWG_BEGIN=wg-taftauto\nWG_CFG_SHA=6a2fd7f892bf3a0b2daac097ceea5582a36cd07931633088644c4887ddcaaf40\nWG_CFG_MODE=600\nWG_UNIT_ACTIVE=active\nWG_UNIT_ENABLED=enabled\nWG_IFACE_PRESENT=true\nREC|CFG|NAME=wg-taftauto|KEY=AllowedIPs|COUNT=1|DEFAULT4=false|DEFAULT6=false\nWG_PEER_COUNT=1\nWG_HANDSHAKE_AGE=36\nWG_RX_BYTES=118664\nWG_TX_BYTES=32152\nWG_INTERFACE_IPIFY_RC=SKIP_NO_DEFAULT4\nWG_INTERFACE_EGRESS_SHA=NONE\nWG_INTERFACE_EGRESS_MATCH_EXPECTED=false\nWG_END=wg-taftauto\nNFT_SNIKKET_TABLE_COUNT=1\nREC|NFT_TABLE|table ip snikket_edge_prod\nFAILED_UNIT_COUNT=0\nREC|GUEST_ERR|curl: (28) Connection timed out after 5001 milliseconds\nCLUSTER_QUORATE=true\nDECISION=PASS_SNIKKET_WG_ALTERNATES_RCA\nNEXT_GATE=SNIKKET_WG_ALTERNATE_TARGETED_REPAIR\nTASK_RESULT=SNIKKET_WG_ALTERNATES_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index c29243b0..350f8fbd 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,22 +1,22 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-261006-SNIKKET-WG-FAILOVER-REPAIR-99731R1 -STATUS=FAIL -RC=1 +COMMAND_ID=SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1 +STATUS=OK +RC=0 HOST=pve01 -MODE=change -COMPONENT=snikket-wg-failover-repair +MODE=read-only +COMPONENT=snikket-wg-alternates-rca REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=f0f6e526598c3a8cbe95fa1d5f824fd0f11c73c803b99163af432b6d70d5a3b9 +COMMAND_SHA256=34d72f7b70ea1b2b16ffc83acac889361bb8eb0bc6cfb2f99c61bfed4bd35d4c DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true -CHANGE_DECLARED=true +CHANGE_DECLARED=false RESULT_CONTRACT_VALID=true -RESULT_CONTRACT_STATUS=FAIL +RESULT_CONTRACT_STATUS=NOT_APPLICABLE RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=1 +COMMAND_RC=0 CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null @@ -24,27 +24,82 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=12cfc3b5f71ff8f78e91bf7caf557e8060fc833c59a8f01ebcbabb8d8369a645 -SANITIZED_OUTPUT_SHA256=12cfc3b5f71ff8f78e91bf7caf557e8060fc833c59a8f01ebcbabb8d8369a645 +RAW_EVIDENCE_SHA256=2ceffd095430a12bbfb4472070f98e860493e9cfb03ab170e84a531985e14705 +SANITIZED_OUTPUT_SHA256=2ceffd095430a12bbfb4472070f98e860493e9cfb03ab170e84a531985e14705 OUTPUT_BEGIN -SNIKKET_WG_FAILOVER_REPAIR=V1 -MODE=change -SCOPE=EXISTING_HEALTHY_WG_FAILOVER_FOR_VM150 -NO_NEW_VPN=true -NO_WG_CONFIG_EDIT=true -NO_VM_POWER_MUTATION=true -NO_NETBIRD_MUTATION=true -NO_PVE_FIREWALL_MUTATION=true -NO_PACKAGE_MUTATION=true -VM150_SRC_SHA=4e29a2729bbc40663066bdae0c5a3d627070fba621f5c8c70639f4782afbc67d -VM150_GW_SHA=bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834 -SNIKKET_DOMAIN_SHA=04cb4a04e408d91abb9c63701ae969abf16d8a12b6f4f144c5edf2c28e03256b -FAIL_REASON=NO_SAFE_HEALTHY_WG_CANDIDATE +SNIKKET_WG_ALTERNATES_RCA=V1 +MODE=read-only +NO_MUTATION=true +VM130_QGA_TRANSPORT_RC=0 +QGA_EXIT=0 +HOST=edge-vm +EXPECTED_SNIKKET_EGRESS_SHA=c76b6b888b15b83623f3fc36fe6617dc24550f6b09b0d8f73c92ea22016e3a13 +WG_BEGIN=taftauto-wg-client +WG_CFG_SHA=b4cd0c7e3ff6c59ff6390d7d671902c3168716931cf69bffcee633ff7eaa00e7 +WG_CFG_MODE=600 +WG_UNIT_ACTIVE=inactive +WG_UNIT_ENABLED=disabled +WG_IFACE_PRESENT=false +REC|CFG|NAME=taftauto-wg-client|KEY=MTU|VALUE=1420 +REC|CFG|NAME=taftauto-wg-client|KEY=Endpoint|HOST_SHA=26ac437d63a8bcf25425|TYPE=PUBLIC_IP|PORT=51824 +REC|CFG|NAME=taftauto-wg-client|KEY=AllowedIPs|COUNT=2|DEFAULT4=false|DEFAULT6=false +REC|CFG|NAME=taftauto-wg-client|KEY=PersistentKeepalive|VALUE=25 +WG_END=taftauto-wg-client +WG_BEGIN=wg-edge01 +WG_CFG_SHA=42b046d580b2ccd6af8f3573fba4882c71c92b2938f3fed8edf58258bbc89615 +WG_CFG_MODE=600 +WG_UNIT_ACTIVE=active +WG_UNIT_ENABLED=enabled +WG_IFACE_PRESENT=true +REC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip route replace IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED +REC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip route del IP_REDACTED via IP_REDACTED dev eth0 2>/dev/null || true +REC|CFG|NAME=wg-edge01|KEY=Table|VALUE=off +REC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip route replace table 17777 default dev wg-edge01 +REC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip route del table 17777 default dev wg-edge01 2>/dev/null || true +REC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=ip rule add priority 101 from IP_REDACTED lookup 17777 +REC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=ip rule del priority 101 from IP_REDACTED lookup 17777 2>/dev/null || true +REC|HOOK|NAME=wg-edge01|KEY=PostUp|VALUE=nft -f /etc/wireguard/snikket-edge-ingress.nft +REC|HOOK_FILE|NAME=wg-edge01|BASENAME=snikket-edge-ingress.nft|SHA=07eaa0b0995608a1605397269c4b424e1620d9354ecd17e22a3989304adca7e3 +REC|HOOK|NAME=wg-edge01|KEY=PostDown|VALUE=nft delete table ip snikket_edge_prod 2>/dev/null || true +REC|CFG|NAME=wg-edge01|KEY=AllowedIPs|COUNT=1|DEFAULT4=true|DEFAULT6=false +REC|CFG|NAME=wg-edge01|KEY=Endpoint|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820 +REC|CFG|NAME=wg-edge01|KEY=PersistentKeepalive|VALUE=25 +WG_PEER_COUNT=1 +WG_HANDSHAKE_AGE=-1 +WG_RX_BYTES=0 +WG_TX_BYTES=44400 +WG_INTERFACE_IPIFY_RC=28 +WG_INTERFACE_EGRESS_SHA=NONE +WG_INTERFACE_EGRESS_MATCH_EXPECTED=false +WG_END=wg-edge01 +WG_BEGIN=wg-taftauto +WG_CFG_SHA=6a2fd7f892bf3a0b2daac097ceea5582a36cd07931633088644c4887ddcaaf40 +WG_CFG_MODE=600 +WG_UNIT_ACTIVE=active +WG_UNIT_ENABLED=enabled +WG_IFACE_PRESENT=true +REC|CFG|NAME=wg-taftauto|KEY=AllowedIPs|COUNT=1|DEFAULT4=false|DEFAULT6=false +WG_PEER_COUNT=1 +WG_HANDSHAKE_AGE=36 +WG_RX_BYTES=118664 +WG_TX_BYTES=32152 +WG_INTERFACE_IPIFY_RC=SKIP_NO_DEFAULT4 +WG_INTERFACE_EGRESS_SHA=NONE +WG_INTERFACE_EGRESS_MATCH_EXPECTED=false +WG_END=wg-taftauto +NFT_SNIKKET_TABLE_COUNT=1 +REC|NFT_TABLE|table ip snikket_edge_prod +FAILED_UNIT_COUNT=0 +REC|GUEST_ERR|curl: (28) Connection timed out after 5001 milliseconds +CLUSTER_QUORATE=true +DECISION=PASS_SNIKKET_WG_ALTERNATES_RCA +NEXT_GATE=SNIKKET_WG_ALTERNATE_TARGETED_REPAIR +TASK_RESULT=SNIKKET_WG_ALTERNATES_RCA CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null MUTATION_OUTCOME=NO_MUTATION -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-SNIKKET-WG-FAILOVER-REPAIR-99731R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null} +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-SNIKKET-WG-ALTERNATES-RCA-99732R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END