runtime: publish NEWFI-260908-A-STAGINGEDGE-LOCALHTTPS-RCA27

2026-09-08 15:34:35 +00:00
parent f1a1c9d94f
commit 5cf60373c1
4 changed files with 135 additions and 29 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "NEWFI-260908-A-STAGINGEDGE-LOCALHTTPS-RCA27",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "newfi-stagingedge-local-https-nginx-active-config-rca-readonly",
+  "started_at_utc": "2026-09-08T15:34:33Z",
+  "finished_at_utc": "2026-09-08T15:34:34Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "99cbbccd9d763d05e084feb32df78770807a535257a60f3129113aca5a1bfbd1",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "02bd17e1d016a960eb263bcc8c071e8826f9852dff3fa170b37790725000d1dc",
+  "sanitized_output_sha256": "02bd17e1d016a960eb263bcc8c071e8826f9852dff3fa170b37790725000d1dc",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "RCA27_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-LOCALHTTPS-RCA27\nMODE=read-only\nMUTATIONS_PERFORMED=NO\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA_MATCH=true\nTRUST_MARKERS_OK=true\nCANONICAL_USER_OK=true\nEDGEVM_OVERLAY_IP_COUNT=1\nEDGEVM_IP_OK=true\nEDGEVM_HOSTKEY_MATCH=true\nEDGEVM_HOSTKEY_ALGS=ssh-ed25519\nOUTER_RCA27_GATE=true\nEDGEVM_SUDO_RC=0\nREMOTE_RCA27_RC=0\nNGINX_CONFLICT_WARNING=false\nACTIVE_STAGING_SERVER_NAME_COUNT=0\nACTIVE_STAGING_LITERAL_SOURCE_COUNT=0\nHIDDEN_STAGING_VHOST_PRESENT=false\nTEMPLATE_SERVER_BLOCK_COUNT=2\nRCA27_JSON={\"euid\":0,\"mutations_performed\":\"NO\",\"npmplus_one\":true,\"npmplus_healthy\":true,\"nginx_T_rc\":0,\"nginx_T_stderr_sha256\":\"9cb221b6993277a11765b15bdded4e9b090f1c2a8f5ed573e907ae3b6921f27c\",\"nginx_T_has_conflict_warning\":false,\"nginx_T_conflict_warning_count\":0,\"active_staging_server_name_count\":0,\"active_staging_entries\":[],\"active_prod_server_name_count\":2,\"active_staging_literal_source_count\":0,\"active_staging_literal_sources\":[],\"openssl_sni_rc\":0,\"current_default_sni_cert_has_staging\":false,\"current_default_sni_subject_sha256\":\"14cc0c313616be679868d6d887a222313440a248a5a0ec69a35be1543781159b\",\"template_exists\":true,\"template_sha_exact\":true,\"template_server_block_count\":2,\"template_server_blocks\":[{\"start\":3,\"end\":10,\"directives\":[{\"line\":4,\"text\":\"listen 0.0.0.0:80;\"},{\"line\":5,\"text\":\"listen [::]:80;\"},{\"line\":6,\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":7,\"text\":\"location / {\"},{\"line\":8,\"text\":\"return 301 https://$host$request_uri;\"}]},{\"start\":11,\"end\":33,\"directives\":[{\"line\":12,\"text\":\"listen 0.0.0.0:443 ssl;\"},{\"line\":13,\"text\":\"listen [::]:443 ssl;\"},{\"line\":14,\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":16,\"text\":\"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;\"},{\"line\":17,\"text\":\"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;\"},{\"line\":25,\"text\":\"location / {\"},{\"line\":31,\"text\":\"proxy_pass http://[PRIVATE_IP]:80;\"}]}],\"hidden_staging_vhost_present\":false,\"decision\":\"RCA_CAPTURED\"}\nRCA27_REMOTE_DECISION=RCA_CAPTURED\nRCA27_DECISION=PASS_RCA_CAPTURED\nRCA27_END=true\n"
+}
@@ -0,0 +1,59 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-LOCALHTTPS-RCA27
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=newfi-stagingedge-local-https-nginx-active-config-rca-readonly
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=99cbbccd9d763d05e084feb32df78770807a535257a60f3129113aca5a1bfbd1
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=02bd17e1d016a960eb263bcc8c071e8826f9852dff3fa170b37790725000d1dc
+SANITIZED_OUTPUT_SHA256=02bd17e1d016a960eb263bcc8c071e8826f9852dff3fa170b37790725000d1dc
+OUTPUT_BEGIN
+RCA27_BEGIN=true
+COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-LOCALHTTPS-RCA27
+MODE=read-only
+MUTATIONS_PERFORMED=NO
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+REFERENCE_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+RUNNER_SHA_MATCH=true
+TRUST_MARKERS_OK=true
+CANONICAL_USER_OK=true
+EDGEVM_OVERLAY_IP_COUNT=1
+EDGEVM_IP_OK=true
+EDGEVM_HOSTKEY_MATCH=true
+EDGEVM_HOSTKEY_ALGS=ssh-ed25519
+OUTER_RCA27_GATE=true
+EDGEVM_SUDO_RC=0
+REMOTE_RCA27_RC=0
+NGINX_CONFLICT_WARNING=false
+ACTIVE_STAGING_SERVER_NAME_COUNT=0
+ACTIVE_STAGING_LITERAL_SOURCE_COUNT=0
+HIDDEN_STAGING_VHOST_PRESENT=false
+TEMPLATE_SERVER_BLOCK_COUNT=2
+RCA27_JSON={"euid":0,"mutations_performed":"NO","npmplus_one":true,"npmplus_healthy":true,"nginx_T_rc":0,"nginx_T_stderr_sha256":"9cb221b6993277a11765b15bdded4e9b090f1c2a8f5ed573e907ae3b6921f27c","nginx_T_has_conflict_warning":false,"nginx_T_conflict_warning_count":0,"active_staging_server_name_count":0,"active_staging_entries":[],"active_prod_server_name_count":2,"active_staging_literal_source_count":0,"active_staging_literal_sources":[],"openssl_sni_rc":0,"current_default_sni_cert_has_staging":false,"current_default_sni_subject_sha256":"14cc0c313616be679868d6d887a222313440a248a5a0ec69a35be1543781159b","template_exists":true,"template_sha_exact":true,"template_server_block_count":2,"template_server_blocks":[{"start":3,"end":10,"directives":[{"line":4,"text":"listen 0.0.0.0:80;"},{"line":5,"text":"listen [::]:80;"},{"line":6,"text":"server_name newfi.ru www.newfi.ru;"},{"line":7,"text":"location / {"},{"line":8,"text":"return 301 https://$host$request_uri;"}]},{"start":11,"end":33,"directives":[{"line":12,"text":"listen 0.0.0.0:443 ssl;"},{"line":13,"text":"listen [::]:443 ssl;"},{"line":14,"text":"server_name newfi.ru www.newfi.ru;"},{"line":16,"text":"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;"},{"line":17,"text":"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;"},{"line":25,"text":"location / {"},{"line":31,"text":"proxy_pass http://[PRIVATE_IP]:80;"}]}],"hidden_staging_vhost_present":false,"decision":"RCA_CAPTURED"}
+RCA27_REMOTE_DECISION=RCA_CAPTURED
+RCA27_DECISION=PASS_RCA_CAPTURED
+RCA27_END=true
+
+OUTPUT_END
+CHAT_OUTPUT_END