diff --git a/runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1.json b/runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1.json new file mode 100644 index 00000000..e714a117 --- /dev/null +++ b/runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "infra-dr-backupv2-spb-tls-reissue-bootstrap-proof", + "started_at_utc": "2026-09-13T16:04:00Z", + "finished_at_utc": "2026-09-13T16:04:03Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074", + "sanitized_output_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "SPB317_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1\nANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61\nMODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nCERT_OR_KEY_CONTENTS_READ=NO\nCERTBOT_EXECUTIONS=0\nRCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY\nERROR_REGISTER_FRESH_READ=OK\nREFERENCE_FRESH_READ=OK\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_ACTIVE_CONFIG_FILE_COUNT=34\nSPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0\nSPB_ACTIVE_CONFIG_MISSING_COUNT=0\nSPB_ACTIVE_CONFIG_PREPOST_STABLE=YES\nSPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400\nSPB_SERVER_BLOCK_COUNT=32\nSPB_CERT_REF_COUNT=15\nSPB_KEY_REF_COUNT=15\nSPB_LE_LINEAGE_COUNT=15\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_RENEWAL_UNREADABLE_COUNT=0\nSPB_HTTP_BOOTSTRAP_NAME_COUNT=31\nSPB_OTHER_TLS_REF_COUNT=0\nSPB_SNAKEOIL_PAIR_COUNT=0\nSPB_SNAKEOIL_REGENERATABLE=NO\nSPB_NGINX_TEST_RC=1\nSPB_NGINX_STDERR_BYTES=548\nSPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463\nSPB_NGINX_ANCHOR316_MATCH=NO\nSPB_NGINX_SERVICE_ACTIVE=YES\nSPB_CERT_KIND_COUNTS={\"letsencrypt\":15}\nSPB_KEY_KIND_COUNTS={\"letsencrypt\":15}\nSPB_CERT_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_KEY_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_RENEWAL_AUTH_COUNTS={\"webroot\":15}\nSPB_HTTP_BOOTSTRAP_MISSING_NAMES=[]\nSPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=[\"chat.gram1.ru\",\"git-read.gram1.ru\",\"git.gram1.ru\",\"groups.chat.gram1.ru\",\"share.chat.gram1.ru\"]\nSPB_LINEAGES_WITHOUT_SERVER_NAMES=[]\nSPB_WILDCARD_NAMES=[]\nSPB_MULTI_LINEAGE_NAMES=[]\nSPB_POLICY_HOLD_REASONS=[\"HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE\",\"NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE\",\"NGINX_DIAGNOSTIC_DRIFT\",\"SNAKEOIL_PAIR_CARDINALITY\"]\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS\nSPB_REISSUE_BOOTSTRAP_READY=NO\nSPB_POLICY_READY=NO\nROLE_HOLDS=[{\"reason\":\"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nSPB317_END=\n" +} diff --git a/runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1.txt b/runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1.txt new file mode 100644 index 00000000..0db5e77a --- /dev/null +++ b/runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1.txt @@ -0,0 +1,92 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=infra-dr-backupv2-spb-tls-reissue-bootstrap-proof +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074 +SANITIZED_OUTPUT_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074 +OUTPUT_BEGIN +SPB317_BEGIN= +COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1 +ANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61 +MODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF +CHANGES_MADE=false +LIVE_TAR_DB_DATA_ALLOWED=NO +CLOUD_WRITE_ATTEMPTS=0 +EXTERNAL_MUTATIONS=0 +SYSTEMD_MUTATIONS=0 +CERT_OR_KEY_CONTENTS_READ=NO +CERTBOT_EXECUTIONS=0 +RCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY +ERROR_REGISTER_FRESH_READ=OK +REFERENCE_FRESH_READ=OK +RUNNER_SHA256=PASS +FORWARDED_AGENT_READY=YES +SPB_HOSTKEY_PIN=PASS +SPB_ACCESS=PASS +SPB_REMOTE_UID=1000 +SPB_ACTIVE_CONFIG_FILE_COUNT=34 +SPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0 +SPB_ACTIVE_CONFIG_MISSING_COUNT=0 +SPB_ACTIVE_CONFIG_PREPOST_STABLE=YES +SPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400 +SPB_SERVER_BLOCK_COUNT=32 +SPB_CERT_REF_COUNT=15 +SPB_KEY_REF_COUNT=15 +SPB_LE_LINEAGE_COUNT=15 +SPB_RENEWAL_CONFIG_COUNT=15 +SPB_RENEWAL_UNREADABLE_COUNT=0 +SPB_HTTP_BOOTSTRAP_NAME_COUNT=31 +SPB_OTHER_TLS_REF_COUNT=0 +SPB_SNAKEOIL_PAIR_COUNT=0 +SPB_SNAKEOIL_REGENERATABLE=NO +SPB_NGINX_TEST_RC=1 +SPB_NGINX_STDERR_BYTES=548 +SPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463 +SPB_NGINX_ANCHOR316_MATCH=NO +SPB_NGINX_SERVICE_ACTIVE=YES +SPB_CERT_KIND_COUNTS={"letsencrypt":15} +SPB_KEY_KIND_COUNTS={"letsencrypt":15} +SPB_CERT_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15} +SPB_KEY_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15} +SPB_RENEWAL_AUTH_COUNTS={"webroot":15} +SPB_HTTP_BOOTSTRAP_MISSING_NAMES=[] +SPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=["chat.gram1.ru","git-read.gram1.ru","git.gram1.ru","groups.chat.gram1.ru","share.chat.gram1.ru"] +SPB_LINEAGES_WITHOUT_SERVER_NAMES=[] +SPB_WILDCARD_NAMES=[] +SPB_MULTI_LINEAGE_NAMES=[] +SPB_POLICY_HOLD_REASONS=["HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE","NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE","NGINX_DIAGNOSTIC_DRIFT","SNAKEOIL_PAIR_CARDINALITY"] +SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE +SPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS +SPB_REISSUE_BOOTSTRAP_READY=NO +SPB_POLICY_READY=NO +ROLE_HOLDS=[{"reason":"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY","role":"SPB_INGRESS"}] +POLICY_CLOSURE_COMPLETE=NO +STATUS=OK +PHASE=COMPLETE +NEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED +SPB317_END= + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index c2fb1458..e714a117 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1", + "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", - "component": "infra-dr-backupv2-spb-nginx-tls-failure-classifier", - "started_at_utc": "2026-09-13T15:46:56Z", - "finished_at_utc": "2026-09-13T15:47:00Z", + "component": "infra-dr-backupv2-spb-tls-reissue-bootstrap-proof", + "started_at_utc": "2026-09-13T16:04:00Z", + "finished_at_utc": "2026-09-13T16:04:03Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "a3473c7f472ba6ccf6bbe87d10cb5ce777d3f94ab43482ffa0fb9b5be2fbf274", + "command_sha256": "88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b", - "sanitized_output_sha256": "f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b", + "raw_evidence_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074", + "sanitized_output_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "SPB316_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1\nANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef\nMODE=READ_ONLY_SPB_NGINX_TLS_FAILURE_CLASSIFIER\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nAUXILIARY_OR_REJECTED_VPS_PROBED=0\nERROR_REGISTER_FRESH_READ=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_FRESH_READ=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_NGINX_TEST_RC=1\nSPB_NGINX_STDERR_BYTES=548\nSPB_NGINX_STDERR_SHA256=fadd50e27b14a485257554b196f46881479adc3074f518af221c51ca89cee423\nSPB_CERT_REF_COUNT=16\nSPB_KEY_REF_COUNT=16\nSPB_KEY_REF_UNREADABLE=16\nSPB_CERT_REF_UNREADABLE=16\nSPB_INCLUDE_MATCH_COUNT=34\nSPB_INCLUDE_UNREADABLE=0\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_CERTBOT_PRESENT=YES\nSPB_TRACE_STATE=USED\nSPB_TRACE_EXTRA_EACCES_COUNT=1\nSPB_PERMISSION_PATH_COUNT=1\nSPB_TLS_KEY_PERMISSION_COUNT=0\nSPB_TLS_CERT_PERMISSION_COUNT=1\nSPB_CONFIG_INCLUDE_PERMISSION_COUNT=0\nSPB_EXPECTED_RUNTIME_PERMISSION_COUNT=0\nSPB_OTHER_PERMISSION_COUNT=0\nSPB_NONPERMISSION_FATAL_COUNT=0\nSPB_NGINX_FAILURE_CLASS=TLS_CERT_PERMISSION\nSPB_REISSUE_TLS_POLICY_COMPATIBLE=NO\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING\nSPB_POLICY_READY=NO\nROLE_HOLDS=[{\"reason\":\"SPB_NGINX_TLS_CERT_PERMISSION\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nSPB316_END=\n" + "output": "SPB317_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1\nANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61\nMODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nCERT_OR_KEY_CONTENTS_READ=NO\nCERTBOT_EXECUTIONS=0\nRCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY\nERROR_REGISTER_FRESH_READ=OK\nREFERENCE_FRESH_READ=OK\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_ACTIVE_CONFIG_FILE_COUNT=34\nSPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0\nSPB_ACTIVE_CONFIG_MISSING_COUNT=0\nSPB_ACTIVE_CONFIG_PREPOST_STABLE=YES\nSPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400\nSPB_SERVER_BLOCK_COUNT=32\nSPB_CERT_REF_COUNT=15\nSPB_KEY_REF_COUNT=15\nSPB_LE_LINEAGE_COUNT=15\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_RENEWAL_UNREADABLE_COUNT=0\nSPB_HTTP_BOOTSTRAP_NAME_COUNT=31\nSPB_OTHER_TLS_REF_COUNT=0\nSPB_SNAKEOIL_PAIR_COUNT=0\nSPB_SNAKEOIL_REGENERATABLE=NO\nSPB_NGINX_TEST_RC=1\nSPB_NGINX_STDERR_BYTES=548\nSPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463\nSPB_NGINX_ANCHOR316_MATCH=NO\nSPB_NGINX_SERVICE_ACTIVE=YES\nSPB_CERT_KIND_COUNTS={\"letsencrypt\":15}\nSPB_KEY_KIND_COUNTS={\"letsencrypt\":15}\nSPB_CERT_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_KEY_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_RENEWAL_AUTH_COUNTS={\"webroot\":15}\nSPB_HTTP_BOOTSTRAP_MISSING_NAMES=[]\nSPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=[\"chat.gram1.ru\",\"git-read.gram1.ru\",\"git.gram1.ru\",\"groups.chat.gram1.ru\",\"share.chat.gram1.ru\"]\nSPB_LINEAGES_WITHOUT_SERVER_NAMES=[]\nSPB_WILDCARD_NAMES=[]\nSPB_MULTI_LINEAGE_NAMES=[]\nSPB_POLICY_HOLD_REASONS=[\"HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE\",\"NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE\",\"NGINX_DIAGNOSTIC_DRIFT\",\"SNAKEOIL_PAIR_CARDINALITY\"]\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS\nSPB_REISSUE_BOOTSTRAP_READY=NO\nSPB_POLICY_READY=NO\nROLE_HOLDS=[{\"reason\":\"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nSPB317_END=\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index dc8b49b4..0db5e77a 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1 +COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1 STATUS=OK RC=0 HOST=pve01 MODE=read-only -COMPONENT=infra-dr-backupv2-spb-nginx-tls-failure-classifier +COMPONENT=infra-dr-backupv2-spb-tls-reissue-bootstrap-proof REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=a3473c7f472ba6ccf6bbe87d10cb5ce777d3f94ab43482ffa0fb9b5be2fbf274 +COMMAND_SHA256=88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false @@ -24,59 +24,69 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b -SANITIZED_OUTPUT_SHA256=f003fbd39d97bca796f7a0517b27162ef3d6ca89c64771eba4444d5dbc80a44b +RAW_EVIDENCE_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074 +SANITIZED_OUTPUT_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074 OUTPUT_BEGIN -SPB316_BEGIN= -COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-NGINX-TLS-FAILURE-CLASSIFIER-316R1 -ANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef -MODE=READ_ONLY_SPB_NGINX_TLS_FAILURE_CLASSIFIER +SPB317_BEGIN= +COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1 +ANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61 +MODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF CHANGES_MADE=false LIVE_TAR_DB_DATA_ALLOWED=NO CLOUD_WRITE_ATTEMPTS=0 EXTERNAL_MUTATIONS=0 SYSTEMD_MUTATIONS=0 -AUXILIARY_OR_REJECTED_VPS_PROBED=0 +CERT_OR_KEY_CONTENTS_READ=NO +CERTBOT_EXECUTIONS=0 +RCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY ERROR_REGISTER_FRESH_READ=OK -ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 REFERENCE_FRESH_READ=OK -REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 RUNNER_SHA256=PASS FORWARDED_AGENT_READY=YES SPB_HOSTKEY_PIN=PASS SPB_ACCESS=PASS SPB_REMOTE_UID=1000 +SPB_ACTIVE_CONFIG_FILE_COUNT=34 +SPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0 +SPB_ACTIVE_CONFIG_MISSING_COUNT=0 +SPB_ACTIVE_CONFIG_PREPOST_STABLE=YES +SPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400 +SPB_SERVER_BLOCK_COUNT=32 +SPB_CERT_REF_COUNT=15 +SPB_KEY_REF_COUNT=15 +SPB_LE_LINEAGE_COUNT=15 +SPB_RENEWAL_CONFIG_COUNT=15 +SPB_RENEWAL_UNREADABLE_COUNT=0 +SPB_HTTP_BOOTSTRAP_NAME_COUNT=31 +SPB_OTHER_TLS_REF_COUNT=0 +SPB_SNAKEOIL_PAIR_COUNT=0 +SPB_SNAKEOIL_REGENERATABLE=NO SPB_NGINX_TEST_RC=1 SPB_NGINX_STDERR_BYTES=548 -SPB_NGINX_STDERR_SHA256=fadd50e27b14a485257554b196f46881479adc3074f518af221c51ca89cee423 -SPB_CERT_REF_COUNT=16 -SPB_KEY_REF_COUNT=16 -SPB_KEY_REF_UNREADABLE=16 -SPB_CERT_REF_UNREADABLE=16 -SPB_INCLUDE_MATCH_COUNT=34 -SPB_INCLUDE_UNREADABLE=0 -SPB_RENEWAL_CONFIG_COUNT=15 -SPB_CERTBOT_PRESENT=YES -SPB_TRACE_STATE=USED -SPB_TRACE_EXTRA_EACCES_COUNT=1 -SPB_PERMISSION_PATH_COUNT=1 -SPB_TLS_KEY_PERMISSION_COUNT=0 -SPB_TLS_CERT_PERMISSION_COUNT=1 -SPB_CONFIG_INCLUDE_PERMISSION_COUNT=0 -SPB_EXPECTED_RUNTIME_PERMISSION_COUNT=0 -SPB_OTHER_PERMISSION_COUNT=0 -SPB_NONPERMISSION_FATAL_COUNT=0 -SPB_NGINX_FAILURE_CLASS=TLS_CERT_PERMISSION -SPB_REISSUE_TLS_POLICY_COMPATIBLE=NO +SPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463 +SPB_NGINX_ANCHOR316_MATCH=NO +SPB_NGINX_SERVICE_ACTIVE=YES +SPB_CERT_KIND_COUNTS={"letsencrypt":15} +SPB_KEY_KIND_COUNTS={"letsencrypt":15} +SPB_CERT_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15} +SPB_KEY_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15} +SPB_RENEWAL_AUTH_COUNTS={"webroot":15} +SPB_HTTP_BOOTSTRAP_MISSING_NAMES=[] +SPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=["chat.gram1.ru","git-read.gram1.ru","git.gram1.ru","groups.chat.gram1.ru","share.chat.gram1.ru"] +SPB_LINEAGES_WITHOUT_SERVER_NAMES=[] +SPB_WILDCARD_NAMES=[] +SPB_MULTI_LINEAGE_NAMES=[] +SPB_POLICY_HOLD_REASONS=["HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE","NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE","NGINX_DIAGNOSTIC_DRIFT","SNAKEOIL_PAIR_CARDINALITY"] SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE -SPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_HTTP_HTTPS_ROUTING +SPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS +SPB_REISSUE_BOOTSTRAP_READY=NO SPB_POLICY_READY=NO -ROLE_HOLDS=[{"reason":"SPB_NGINX_TLS_CERT_PERMISSION","role":"SPB_INGRESS"}] +ROLE_HOLDS=[{"reason":"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY","role":"SPB_INGRESS"}] POLICY_CLOSURE_COMPLETE=NO STATUS=OK PHASE=COMPLETE NEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED -SPB316_END= +SPB317_END= OUTPUT_END CHAT_OUTPUT_END