From 6aab29d04ee4b9ebea9285bf85b52c50be8adab2 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Fri, 18 Sep 2026 11:36:42 +0000 Subject: [PATCH] runtime: publish SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1 --- ...ED-BACKUP-ACCESS-RCA-READONLY-517R5R1.json | 38 +++++++++++++++++++ ...TED-BACKUP-ACCESS-RCA-READONLY-517R5R1.txt | 36 ++++++++++++++++++ runtime/latest.json | 16 ++++---- runtime/latest.txt | 18 ++++----- 4 files changed, 91 insertions(+), 17 deletions(-) create mode 100644 runtime/history/SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1.json create mode 100644 runtime/history/SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1.txt diff --git a/runtime/history/SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1.json b/runtime/history/SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1.json new file mode 100644 index 00000000..025d2b42 --- /dev/null +++ b/runtime/history/SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "infra-vps-nested-backup-access-rca-readonly", + "started_at_utc": "2026-09-18T11:36:40Z", + "finished_at_utc": "2026-09-18T11:36:41Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "56b16fefc6047ad4aa5f3a2caee8016d8961011c6e73b6a7e5e6f9de082c0f3b", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "74ed6bbd6639b96733d914c34b7addbf13736271c1f8000221b20b729f2e50ee", + "sanitized_output_sha256": "c5815c28c91af01291933bafdb3ee079385607b31cae310bc1744f24cb7721c1", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "VPS517R5R1_SAFE_REPORT={\"changes_made\":false,\"changeset_evidence\":[{\"bytes\":2150,\"hits\":[{\"line\":56,\"text\":\" \\\"authorized_keys\\\",\"}],\"path\":\"/var/lib/homelab-change-sets/stage4h-final-acceptance-task-contract-v1/20260714T182929Z/task.json\",\"sha256\":\"eaf46f109e83ae6a13610c411c1ab0e2fbd695c21297fdc9cac1d64b3d462d34\"},{\"bytes\":2595,\"hits\":[{\"line\":38,\"text\":\" \\\"description\\\": \\\"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\\\",\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-policies.before.json\",\"sha256\":\"ce6d46a01dfe14adc8b2a35a683f2771e4324b04fea611dd4f4bd0458b09d1af\"},{\"bytes\":77451,\"hits\":[{\"line\":140,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"},{\"line\":141,\"text\":\"\\u0424\\u0430\\u043a\\u0442: inventory 158 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b [SENSITIVE_PATH] \\u0438 backup-\\u0444\\u0430\\u0439\\u043b\\u044b \\u0441 \\u0440\\u0435\\u0436\\u0438\\u043c\\u043e\\u043c 777 \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":142,\"text\":\"\\u041d\\u0443\\u0436\\u043d\\u043e \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u044f\\u0442\\u044c \\u043d\\u0430 [SENSITIVE_PATH]=700 \\u0438 authorized_keys/authorized_keys.bak*=600, \\u0437\\u0430\\u0442\\u0435\\u043c \\u0444\\u0438\\u043a\\u0441\\u0438\\u0440\\u043e\\u0432\\u0430\\u0442\\u044c before/after proof.\"},{\"line\":144,\"text\":\"35. \\u041e\\u0448\\u0438\\u0431\\u043a\\u0430 \\u043f\\u0440\\u043e\\u0432\\u0435\\u0440\\u043a\\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \\u043d\\u0435 \\u0434\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u0435\\u043d\\u0438\\u0435 \\u043f\\u0440\\u0430\\u0432.\"},{\"line\":145,\"text\":\"\\u0424\\u0430\\u043a\\u0442: AFTER \\u0432\\u0441\\u0451 \\u0435\\u0449\\u0451 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b 777 \\u0434\\u043b\\u044f [SENSITIVE_PATH] \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":146,\"text\":\"\\u0412\\u043e\\u0437\\u043c\\u043e\\u0436\\u043d\\u0430\\u044f \\u043f\\u0440\\u0438\\u0447\\u0438\\u043d\\u0430: authorized_keys \\u044f\\u0432\\u043b\\u044f\\u0435\\u0442\\u0441\\u044f symlink, \\u0430 stat \\u0431\\u0435\\u0437 -L \\u043f\\u043e\\u043a\\u0430\\u0437\\u044b\\u0432\\u0430\\u0435\\u0442 \\u0440\\u0435\\u0436\\u0438\\u043c \\u0441\\u0441\\u044b\\u043b\\u043a\\u0438 777.\"},{\"line\":662,\"text\":\"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers.\"},{\"line\":663,\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.new.md\",\"sha256\":\"6fd516bc953cae5f2c28194b4c2393898abc439b4401e1d6fb177ae7607ecb51\"},{\"bytes\":76486,\"hits\":[{\"line\":140,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"},{\"line\":141,\"text\":\"\\u0424\\u0430\\u043a\\u0442: inventory 158 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b [SENSITIVE_PATH] \\u0438 backup-\\u0444\\u0430\\u0439\\u043b\\u044b \\u0441 \\u0440\\u0435\\u0436\\u0438\\u043c\\u043e\\u043c 777 \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":142,\"text\":\"\\u041d\\u0443\\u0436\\u043d\\u043e \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u044f\\u0442\\u044c \\u043d\\u0430 [SENSITIVE_PATH]=700 \\u0438 authorized_keys/authorized_keys.bak*=600, \\u0437\\u0430\\u0442\\u0435\\u043c \\u0444\\u0438\\u043a\\u0441\\u0438\\u0440\\u043e\\u0432\\u0430\\u0442\\u044c before/after proof.\"},{\"line\":144,\"text\":\"35. \\u041e\\u0448\\u0438\\u0431\\u043a\\u0430 \\u043f\\u0440\\u043e\\u0432\\u0435\\u0440\\u043a\\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \\u043d\\u0435 \\u0434\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u0435\\u043d\\u0438\\u0435 \\u043f\\u0440\\u0430\\u0432.\"},{\"line\":145,\"text\":\"\\u0424\\u0430\\u043a\\u0442: AFTER \\u0432\\u0441\\u0451 \\u0435\\u0449\\u0451 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b 777 \\u0434\\u043b\\u044f [SENSITIVE_PATH] \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":146,\"text\":\"\\u0412\\u043e\\u0437\\u043c\\u043e\\u0436\\u043d\\u0430\\u044f \\u043f\\u0440\\u0438\\u0447\\u0438\\u043d\\u0430: authorized_keys \\u044f\\u0432\\u043b\\u044f\\u0435\\u0442\\u0441\\u044f symlink, \\u0430 stat \\u0431\\u0435\\u0437 -L \\u043f\\u043e\\u043a\\u0430\\u0437\\u044b\\u0432\\u0430\\u0435\\u0442 \\u0440\\u0435\\u0436\\u0438\\u043c \\u0441\\u0441\\u044b\\u043b\\u043a\\u0438 777.\"},{\"line\":662,\"text\":\"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers.\"},{\"line\":663,\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.before.md\",\"sha256\":\"750cb4d51300df08a00173c1dea6987078529a87b7eaad2cb89bc9c78fcf2d20\"},{\"bytes\":26777,\"hits\":[{\"line\":73,\"text\":\"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])\"},{\"line\":74,\"text\":\"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)\"}],\"path\":\"/var/lib/homelab-change-sets/crypto-portfolio-ui-retention-sync-closure-resume-v3/20260713T081210Z/main.sh\",\"sha256\":\"00f74e2a2be46cd31c83ce89f1657545c1bfa866e53952359802d0ab121df79e\"},{\"bytes\":318,\"hits\":[{\"line\":1,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-ops-bootstrap-audit-v1/20260715T214930Z/error-register-tail.txt\",\"sha256\":\"a940f28541fe6b47a44a0e61c0c74ca2c5e47d9f9d7631e869787a779de226c5\"},{\"bytes\":2865,\"hits\":[{\"line\":38,\"text\":\" \\\"description\\\": \\\"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\\\",\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-candidate-v1/20260715T060858Z/error-policies.candidate.json\",\"sha256\":\"075ba849b67ec5f4b39179ecfe83ea98b3a493aee3987d0530de88d4447ded95\"},{\"bytes\":32437,\"hits\":[{\"line\":80,\"text\":\"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])\"},{\"line\":81,\"text\":\"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)\"}],\"path\":\"/var/lib/homelab-change-sets/crypto-portfolio-ui-production-closure/20260713T075748Z/main.sh\",\"sha256\":\"452b1c98604fc800cd1f395b787242dce7d5f6534b565381f910e4d2d1d480f3\"},{\"bytes\":2595,\"hits\":[{\"line\":38,\"text\":\" \\\"description\\\": \\\"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\\\",\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-policies.before.json\",\"sha256\":\"ce6d46a01dfe14adc8b2a35a683f2771e4324b04fea611dd4f4bd0458b09d1af\"},{\"bytes\":77979,\"hits\":[{\"line\":140,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"},{\"line\":141,\"text\":\"\\u0424\\u0430\\u043a\\u0442: inventory 158 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b [SENSITIVE_PATH] \\u0438 backup-\\u0444\\u0430\\u0439\\u043b\\u044b \\u0441 \\u0440\\u0435\\u0436\\u0438\\u043c\\u043e\\u043c 777 \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":142,\"text\":\"\\u041d\\u0443\\u0436\\u043d\\u043e \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u044f\\u0442\\u044c \\u043d\\u0430 [SENSITIVE_PATH]=700 \\u0438 authorized_keys/authorized_keys.bak*=600, \\u0437\\u0430\\u0442\\u0435\\u043c \\u0444\\u0438\\u043a\\u0441\\u0438\\u0440\\u043e\\u0432\\u0430\\u0442\\u044c before/after proof.\"},{\"line\":144,\"text\":\"35. \\u041e\\u0448\\u0438\\u0431\\u043a\\u0430 \\u043f\\u0440\\u043e\\u0432\\u0435\\u0440\\u043a\\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \\u043d\\u0435 \\u0434\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u0435\\u043d\\u0438\\u0435 \\u043f\\u0440\\u0430\\u0432.\"},{\"line\":145,\"text\":\"\\u0424\\u0430\\u043a\\u0442: AFTER \\u0432\\u0441\\u0451 \\u0435\\u0449\\u0451 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b 777 \\u0434\\u043b\\u044f [SENSITIVE_PATH] \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":146,\"text\":\"\\u0412\\u043e\\u0437\\u043c\\u043e\\u0436\\u043d\\u0430\\u044f \\u043f\\u0440\\u0438\\u0447\\u0438\\u043d\\u0430: authorized_keys \\u044f\\u0432\\u043b\\u044f\\u0435\\u0442\\u0441\\u044f symlink, \\u0430 stat \\u0431\\u0435\\u0437 -L \\u043f\\u043e\\u043a\\u0430\\u0437\\u044b\\u0432\\u0430\\u0435\\u0442 \\u0440\\u0435\\u0436\\u0438\\u043c \\u0441\\u0441\\u044b\\u043b\\u043a\\u0438 777.\"},{\"line\":662,\"text\":\"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers.\"},{\"line\":663,\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.new.md\",\"sha256\":\"ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc\"},{\"bytes\":76486,\"hits\":[{\"line\":140,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"},{\"line\":141,\"text\":\"\\u0424\\u0430\\u043a\\u0442: inventory 158 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b [SENSITIVE_PATH] \\u0438 backup-\\u0444\\u0430\\u0439\\u043b\\u044b \\u0441 \\u0440\\u0435\\u0436\\u0438\\u043c\\u043e\\u043c 777 \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":142,\"text\":\"\\u041d\\u0443\\u0436\\u043d\\u043e \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u044f\\u0442\\u044c \\u043d\\u0430 [SENSITIVE_PATH]=700 \\u0438 authorized_keys/authorized_keys.bak*=600, \\u0437\\u0430\\u0442\\u0435\\u043c \\u0444\\u0438\\u043a\\u0441\\u0438\\u0440\\u043e\\u0432\\u0430\\u0442\\u044c before/after proof.\"},{\"line\":144,\"text\":\"35. \\u041e\\u0448\\u0438\\u0431\\u043a\\u0430 \\u043f\\u0440\\u043e\\u0432\\u0435\\u0440\\u043a\\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \\u043d\\u0435 \\u0434\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u0435\\u043d\\u0438\\u0435 \\u043f\\u0440\\u0430\\u0432.\"},{\"line\":145,\"text\":\"\\u0424\\u0430\\u043a\\u0442: AFTER \\u0432\\u0441\\u0451 \\u0435\\u0449\\u0451 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b 777 \\u0434\\u043b\\u044f [SENSITIVE_PATH] \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":146,\"text\":\"\\u0412\\u043e\\u0437\\u043c\\u043e\\u0436\\u043d\\u0430\\u044f \\u043f\\u0440\\u0438\\u0447\\u0438\\u043d\\u0430: authorized_keys \\u044f\\u0432\\u043b\\u044f\\u0435\\u0442\\u0441\\u044f symlink, \\u0430 stat \\u0431\\u0435\\u0437 -L \\u043f\\u043e\\u043a\\u0430\\u0437\\u044b\\u0432\\u0430\\u0435\\u0442 \\u0440\\u0435\\u0436\\u0438\\u043c \\u0441\\u0441\\u044b\\u043b\\u043a\\u0438 777.\"},{\"line\":662,\"text\":\"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers.\"},{\"line\":663,\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.before.md\",\"sha256\":\"750cb4d51300df08a00173c1dea6987078529a87b7eaad2cb89bc9c78fcf2d20\"},{\"bytes\":23331,\"hits\":[{\"line\":104,\"text\":\"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])\"},{\"line\":105,\"text\":\"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)\"}],\"path\":\"/var/lib/homelab-change-sets/crypto-portfolio-ui-retention-sync-closure-resume/20260713T080320Z/main.sh\",\"sha256\":\"9a4ce646203394e1b978efd40471d6ffa7b85212f4fb6a463f1c48b5f192194b\"}],\"cloud_reads\":0,\"cloud_writes\":0,\"command_id\":\"SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1\",\"decision\":\"PASS_NESTED_BACKUP_OR_CHANGESET_ACCESS_EVIDENCE_FOUND\",\"exact_files\":[{\"bytes\":2811,\"hits\":[{\"line\":5,\"text\":\"KH=\\\"[SENSITIVE_PATH] -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\" \\\"TS='$TS' REMOTE_ARCH='$REMOTE_ARCH' bash -s\\\" <<'REMOTE'\"},{\"line\":48,\"text\":\"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\":\\\"$REMOTE_ARCH\\\" \\\"$DEST/netbird-vps-backup.tgz\\\" >/dev/null\"},{\"line\":49,\"text\":\"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\":\\\"$REMOTE_ARCH.sha256\\\" \\\"$DEST/netbird-vps-backup.tgz.sha256.remote\\\" >/dev/null\"},{\"line\":50,\"text\":\"ssh -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\" \\\"rm -f '$REMOTE_ARCH' '$REMOTE_ARCH.sha256'\\\" >/dev/null\"}],\"path\":\"/root/netbird-vps-backup.sh\",\"present\":true,\"sha256\":\"a4546d7fff40e4f7cf935e5072847e11dd02758b1075421d7e27591faf8ac6d7\"},{\"bytes\":117,\"hits\":[],\"path\":\"[SENSITIVE_PATH] -o StrictHostKeyChecking=accept-new \\\\\"},{\"line\":52,\"text\":\" -o StrictHostKeyChecking=accept-new \\\\\"},{\"line\":108,\"text\":\" -o StrictHostKeyChecking=accept-new \\\\\"}],\"path\":\"/usr/local/sbin/homelab-gitea-secondary-backup\",\"present\":true,\"sha256\":\"5e3ad06f4d7777078a557ee53c75793d29966f82e1a1f2f6cb8f4857739d9b67\"},{\"bytes\":487,\"hits\":[],\"path\":\"/etc/hosts\",\"present\":true,\"sha256\":\"c3b9101ad96911d55328b70e12e87f9b17e4ef89fce47dc619478e113c4855ec\"}],\"external_ssh_attempts\":0,\"known_hosts_queries\":[{\"file\":\"[SENSITIVE_PATH] -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\" \\\"TS='$TS' REMOTE_ARCH='$REMOTE_ARCH' bash -s\\\" <<'REMOTE'\"},{\"line\":48,\"path\":\"/root/netbird-vps-backup.sh\",\"text\":\"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\":\\\"$REMOTE_ARCH\\\" \\\"$DEST/netbird-vps-backup.tgz\\\" >/dev/null\"},{\"line\":49,\"path\":\"/root/netbird-vps-backup.sh\",\"text\":\"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\":\\\"$REMOTE_ARCH.sha256\\\" \\\"$DEST/netbird-vps-backup.tgz.sha256.remote\\\" >/dev/null\"},{\"line\":50,\"path\":\"/root/netbird-vps-backup.sh\",\"text\":\"ssh -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\" \\\"rm -f '$REMOTE_ARCH' '$REMOTE_ARCH.sha256'\\\" >/dev/null\"},{\"line\":663,\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.new.md\",\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"},{\"line\":663,\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.before.md\",\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"},{\"line\":663,\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.new.md\",\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"},{\"line\":663,\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.before.md\",\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"nested_key_artifact_count\":0,\"nested_key_artifacts\":[],\"us_netbird_known_hosts_hits\":0}}\nVPS517R5R1_DECISION=PASS_NESTED_BACKUP_OR_CHANGESET_ACCESS_EVIDENCE_FOUND\nVPS517R5R1_NEXT_GATE=USE_EXACT_RECOVERED_ROUTE_OR_TARGETED_CLOUD_ESCROW_READ\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1.txt b/runtime/history/SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1.txt new file mode 100644 index 00000000..544930e3 --- /dev/null +++ b/runtime/history/SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1.txt @@ -0,0 +1,36 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=infra-vps-nested-backup-access-rca-readonly +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=56b16fefc6047ad4aa5f3a2caee8016d8961011c6e73b6a7e5e6f9de082c0f3b +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=74ed6bbd6639b96733d914c34b7addbf13736271c1f8000221b20b729f2e50ee +SANITIZED_OUTPUT_SHA256=c5815c28c91af01291933bafdb3ee079385607b31cae310bc1744f24cb7721c1 +OUTPUT_BEGIN +VPS517R5R1_SAFE_REPORT={"changes_made":false,"changeset_evidence":[{"bytes":2150,"hits":[{"line":56,"text":" \"authorized_keys\","}],"path":"/var/lib/homelab-change-sets/stage4h-final-acceptance-task-contract-v1/20260714T182929Z/task.json","sha256":"eaf46f109e83ae6a13610c411c1ab0e2fbd695c21297fdc9cac1d64b3d462d34"},{"bytes":2595,"hits":[{"line":38,"text":" \"description\": \"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\","}],"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-policies.before.json","sha256":"ce6d46a01dfe14adc8b2a35a683f2771e4324b04fea611dd4f4bd0458b09d1af"},{"bytes":77451,"hits":[{"line":140,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."},{"line":141,"text":"\u0424\u0430\u043a\u0442: inventory 158 \u043f\u043e\u043a\u0430\u0437\u0430\u043b [SENSITIVE_PATH] \u0438 backup-\u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c 777 \u043d\u0430 pve01/pve02/pve03."},{"line":142,"text":"\u041d\u0443\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 [SENSITIVE_PATH]=700 \u0438 authorized_keys/authorized_keys.bak*=600, \u0437\u0430\u0442\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c before/after proof."},{"line":144,"text":"35. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432."},{"line":145,"text":"\u0424\u0430\u043a\u0442: AFTER \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u043a\u0430\u0437\u0430\u043b 777 \u0434\u043b\u044f [SENSITIVE_PATH] \u043d\u0430 pve01/pve02/pve03."},{"line":146,"text":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430: authorized_keys \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f symlink, \u0430 stat \u0431\u0435\u0437 -L \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043c \u0441\u0441\u044b\u043b\u043a\u0438 777."},{"line":662,"text":"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers."},{"line":663,"text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.new.md","sha256":"6fd516bc953cae5f2c28194b4c2393898abc439b4401e1d6fb177ae7607ecb51"},{"bytes":76486,"hits":[{"line":140,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."},{"line":141,"text":"\u0424\u0430\u043a\u0442: inventory 158 \u043f\u043e\u043a\u0430\u0437\u0430\u043b [SENSITIVE_PATH] \u0438 backup-\u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c 777 \u043d\u0430 pve01/pve02/pve03."},{"line":142,"text":"\u041d\u0443\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 [SENSITIVE_PATH]=700 \u0438 authorized_keys/authorized_keys.bak*=600, \u0437\u0430\u0442\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c before/after proof."},{"line":144,"text":"35. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432."},{"line":145,"text":"\u0424\u0430\u043a\u0442: AFTER \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u043a\u0430\u0437\u0430\u043b 777 \u0434\u043b\u044f [SENSITIVE_PATH] \u043d\u0430 pve01/pve02/pve03."},{"line":146,"text":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430: authorized_keys \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f symlink, \u0430 stat \u0431\u0435\u0437 -L \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043c \u0441\u0441\u044b\u043b\u043a\u0438 777."},{"line":662,"text":"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers."},{"line":663,"text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.before.md","sha256":"750cb4d51300df08a00173c1dea6987078529a87b7eaad2cb89bc9c78fcf2d20"},{"bytes":26777,"hits":[{"line":73,"text":"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])"},{"line":74,"text":"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)"}],"path":"/var/lib/homelab-change-sets/crypto-portfolio-ui-retention-sync-closure-resume-v3/20260713T081210Z/main.sh","sha256":"00f74e2a2be46cd31c83ce89f1657545c1bfa866e53952359802d0ab121df79e"},{"bytes":318,"hits":[{"line":1,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."}],"path":"/var/lib/homelab-change-sets/homelab-ops-bootstrap-audit-v1/20260715T214930Z/error-register-tail.txt","sha256":"a940f28541fe6b47a44a0e61c0c74ca2c5e47d9f9d7631e869787a779de226c5"},{"bytes":2865,"hits":[{"line":38,"text":" \"description\": \"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\","}],"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-candidate-v1/20260715T060858Z/error-policies.candidate.json","sha256":"075ba849b67ec5f4b39179ecfe83ea98b3a493aee3987d0530de88d4447ded95"},{"bytes":32437,"hits":[{"line":80,"text":"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])"},{"line":81,"text":"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)"}],"path":"/var/lib/homelab-change-sets/crypto-portfolio-ui-production-closure/20260713T075748Z/main.sh","sha256":"452b1c98604fc800cd1f395b787242dce7d5f6534b565381f910e4d2d1d480f3"},{"bytes":2595,"hits":[{"line":38,"text":" \"description\": \"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\","}],"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-policies.before.json","sha256":"ce6d46a01dfe14adc8b2a35a683f2771e4324b04fea611dd4f4bd0458b09d1af"},{"bytes":77979,"hits":[{"line":140,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."},{"line":141,"text":"\u0424\u0430\u043a\u0442: inventory 158 \u043f\u043e\u043a\u0430\u0437\u0430\u043b [SENSITIVE_PATH] \u0438 backup-\u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c 777 \u043d\u0430 pve01/pve02/pve03."},{"line":142,"text":"\u041d\u0443\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 [SENSITIVE_PATH]=700 \u0438 authorized_keys/authorized_keys.bak*=600, \u0437\u0430\u0442\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c before/after proof."},{"line":144,"text":"35. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432."},{"line":145,"text":"\u0424\u0430\u043a\u0442: AFTER \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u043a\u0430\u0437\u0430\u043b 777 \u0434\u043b\u044f [SENSITIVE_PATH] \u043d\u0430 pve01/pve02/pve03."},{"line":146,"text":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430: authorized_keys \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f symlink, \u0430 stat \u0431\u0435\u0437 -L \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043c \u0441\u0441\u044b\u043b\u043a\u0438 777."},{"line":662,"text":"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers."},{"line":663,"text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.new.md","sha256":"ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc"},{"bytes":76486,"hits":[{"line":140,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."},{"line":141,"text":"\u0424\u0430\u043a\u0442: inventory 158 \u043f\u043e\u043a\u0430\u0437\u0430\u043b [SENSITIVE_PATH] \u0438 backup-\u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c 777 \u043d\u0430 pve01/pve02/pve03."},{"line":142,"text":"\u041d\u0443\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 [SENSITIVE_PATH]=700 \u0438 authorized_keys/authorized_keys.bak*=600, \u0437\u0430\u0442\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c before/after proof."},{"line":144,"text":"35. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432."},{"line":145,"text":"\u0424\u0430\u043a\u0442: AFTER \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u043a\u0430\u0437\u0430\u043b 777 \u0434\u043b\u044f [SENSITIVE_PATH] \u043d\u0430 pve01/pve02/pve03."},{"line":146,"text":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430: authorized_keys \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f symlink, \u0430 stat \u0431\u0435\u0437 -L \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043c \u0441\u0441\u044b\u043b\u043a\u0438 777."},{"line":662,"text":"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers."},{"line":663,"text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.before.md","sha256":"750cb4d51300df08a00173c1dea6987078529a87b7eaad2cb89bc9c78fcf2d20"},{"bytes":23331,"hits":[{"line":104,"text":"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])"},{"line":105,"text":"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)"}],"path":"/var/lib/homelab-change-sets/crypto-portfolio-ui-retention-sync-closure-resume/20260713T080320Z/main.sh","sha256":"9a4ce646203394e1b978efd40471d6ffa7b85212f4fb6a463f1c48b5f192194b"}],"cloud_reads":0,"cloud_writes":0,"command_id":"SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1","decision":"PASS_NESTED_BACKUP_OR_CHANGESET_ACCESS_EVIDENCE_FOUND","exact_files":[{"bytes":2811,"hits":[{"line":5,"text":"KH=\"[SENSITIVE_PATH] -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\" \"TS='$TS' REMOTE_ARCH='$REMOTE_ARCH' bash -s\" <<'REMOTE'"},{"line":48,"text":"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\":\"$REMOTE_ARCH\" \"$DEST/netbird-vps-backup.tgz\" >/dev/null"},{"line":49,"text":"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\":\"$REMOTE_ARCH.sha256\" \"$DEST/netbird-vps-backup.tgz.sha256.remote\" >/dev/null"},{"line":50,"text":"ssh -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\" \"rm -f '$REMOTE_ARCH' '$REMOTE_ARCH.sha256'\" >/dev/null"}],"path":"/root/netbird-vps-backup.sh","present":true,"sha256":"a4546d7fff40e4f7cf935e5072847e11dd02758b1075421d7e27591faf8ac6d7"},{"bytes":117,"hits":[],"path":"[SENSITIVE_PATH] -o StrictHostKeyChecking=accept-new \\"},{"line":52,"text":" -o StrictHostKeyChecking=accept-new \\"},{"line":108,"text":" -o StrictHostKeyChecking=accept-new \\"}],"path":"/usr/local/sbin/homelab-gitea-secondary-backup","present":true,"sha256":"5e3ad06f4d7777078a557ee53c75793d29966f82e1a1f2f6cb8f4857739d9b67"},{"bytes":487,"hits":[],"path":"/etc/hosts","present":true,"sha256":"c3b9101ad96911d55328b70e12e87f9b17e4ef89fce47dc619478e113c4855ec"}],"external_ssh_attempts":0,"known_hosts_queries":[{"file":"[SENSITIVE_PATH] -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\" \"TS='$TS' REMOTE_ARCH='$REMOTE_ARCH' bash -s\" <<'REMOTE'"},{"line":48,"path":"/root/netbird-vps-backup.sh","text":"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\":\"$REMOTE_ARCH\" \"$DEST/netbird-vps-backup.tgz\" >/dev/null"},{"line":49,"path":"/root/netbird-vps-backup.sh","text":"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\":\"$REMOTE_ARCH.sha256\" \"$DEST/netbird-vps-backup.tgz.sha256.remote\" >/dev/null"},{"line":50,"path":"/root/netbird-vps-backup.sh","text":"ssh -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\" \"rm -f '$REMOTE_ARCH' '$REMOTE_ARCH.sha256'\" >/dev/null"},{"line":663,"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.new.md","text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."},{"line":663,"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.before.md","text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."},{"line":663,"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.new.md","text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."},{"line":663,"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.before.md","text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"nested_key_artifact_count":0,"nested_key_artifacts":[],"us_netbird_known_hosts_hits":0}} +VPS517R5R1_DECISION=PASS_NESTED_BACKUP_OR_CHANGESET_ACCESS_EVIDENCE_FOUND +VPS517R5R1_NEXT_GATE=USE_EXACT_RECOVERED_ROUTE_OR_TARGETED_CLOUD_ESCROW_READ +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 473f05fe..025d2b42 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260918-INFRA-VPS-BACKUP-SSH-ACCESS-RECOVERY-DEEP-READONLY-517R5", + "command_id": "SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1", "status": "OK", "rc": 0, "host": "pve01", "mode": "read-only", - "component": "infra-vps-backup-ssh-access-recovery-deep-readonly", - "started_at_utc": "2026-09-18T11:32:32Z", - "finished_at_utc": "2026-09-18T11:32:39Z", + "component": "infra-vps-nested-backup-access-rca-readonly", + "started_at_utc": "2026-09-18T11:36:40Z", + "finished_at_utc": "2026-09-18T11:36:41Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "3633352884dbb7f34e440df30f9c7a041424039b871c7c2e27d1b1d41eceac14", + "command_sha256": "56b16fefc6047ad4aa5f3a2caee8016d8961011c6e73b6a7e5e6f9de082c0f3b", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "6d43902ba7eed6c2c7dd6863ccf602db8a8a0d474b691a813afba3132047801a", - "sanitized_output_sha256": "d55805086fa656730bfe4da2dcba5658f3724004714145df6d143242cf007f4f", + "raw_evidence_sha256": "74ed6bbd6639b96733d914c34b7addbf13736271c1f8000221b20b729f2e50ee", + "sanitized_output_sha256": "c5815c28c91af01291933bafdb3ee079385607b31cae310bc1744f24cb7721c1", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "VPS517R5_SAFE_REPORT={\"archive_inspections\":[{\"bytes\":9925721,\"errors\":[],\"member_count\":79,\"path\":\"/mnt/staging/homelab-control-refresh-cr0067-v1/control-bootstrap-v2-pve01-20260822T000213Z/control-bootstrap-v2-pve01-20260822T000213Z.tar.gz\",\"sha256\":\"0d6adae10f4fdf507764036a5f4781072bf6ca38be9a0710d5fb7c1c57689d8d\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":10260480,\"errors\":[],\"member_count\":1339,\"path\":\"/mnt/staging/homelab-control-refresh-cr0067-v1/control-bootstrap-v2-pve01-20260822T000213Z/control-validate/control/source/homelab-configs-current.tar\",\"sha256\":\"66222dc234479869193d2b7f3f75daf52c8d8a3bbe1dfc7110dd69d37e4c54ba\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":4574340,\"errors\":[],\"member_count\":87,\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/control-bootstrap-v2-pve01-20260810T234954Z.tar.gz\",\"sha256\":\"87ef9e7ea3c8cebe68a772fc08d4e047f4e9f059acf3ce8d0b5b0016cb1782d1\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":3044006,\"errors\":[],\"member_count\":84,\"path\":\"/mnt/staging/homelab-standalone-cloud-b-20260810T225720Z-3703345/control-bootstrap-pve01-20260810T211046Z.tar.gz\",\"sha256\":\"c1a6cb64b022a0909a837103f1cf30fd7ece38e0390ae59457ca136a312ac4eb\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":32522644,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260701T013054Z/netbird-vps-backup.tgz\",\"sha256\":\"0226dd820cb9ede0ea9e8ea4af6cef656ffa54cfb819048c222a88f4c14d8db9\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260701T013054Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260701T013054Z/ss-udp.txt\",\"size\":500,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260701T013054Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260701T013054Z/ss-tcp.txt\",\"size\":1547,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260701T013054Z/compose-ps.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260701T013054Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260701T013054Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260701T013054Z/volumes/netbird_netbird_data_.tgz\",\"size\":33723664,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260701T013054Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32522643,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260630T014000Z/netbird-vps-backup.tgz\",\"sha256\":\"e10fffedaebfc722691faa8d5c1c688835cf6ab9427126c1c6a6db13668d4f72\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260630T014000Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260630T014000Z/ss-udp.txt\",\"size\":500,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260630T014000Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260630T014000Z/ss-tcp.txt\",\"size\":1547,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260630T014000Z/compose-ps.txt\",\"size\":246,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260630T014000Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260630T014000Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260630T014000Z/volumes/netbird_netbird_data_.tgz\",\"size\":33723664,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260630T014000Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32522667,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260629T013250Z/netbird-vps-backup.tgz\",\"sha256\":\"fcf25ed23a7107a76d388d728432d7020b051882b581486cd3ad8cc536cfff9b\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260629T013250Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260629T013250Z/ss-udp.txt\",\"size\":500,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260629T013250Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260629T013250Z/ss-tcp.txt\",\"size\":1547,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260629T013250Z/compose-ps.txt\",\"size\":243,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260629T013250Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260629T013250Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260629T013250Z/volumes/netbird_netbird_data_.tgz\",\"size\":33723664,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260629T013250Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32521510,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260628T013400Z/netbird-vps-backup.tgz\",\"sha256\":\"a3274f7105fdd08a6166c8e7488afd4a32c8a85e97a1d3ec2d2116e5b6aa978b\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260628T013400Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260628T013400Z/ss-udp.txt\",\"size\":500,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260628T013400Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260628T013400Z/ss-tcp.txt\",\"size\":1547,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260628T013400Z/compose-ps.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260628T013400Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260628T013400Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260628T013400Z/volumes/netbird_netbird_data_.tgz\",\"size\":33724626,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260628T013400Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32520505,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260627T013448Z/netbird-vps-backup.tgz\",\"sha256\":\"787a7df99e1abf3c6d9d7eecdf09bc60870db144dbd3f26a485a167050e8fb40\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260627T013448Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260627T013448Z/ss-udp.txt\",\"size\":500,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260627T013448Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260627T013448Z/ss-tcp.txt\",\"size\":1547,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260627T013448Z/compose-ps.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260627T013448Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260627T013448Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260627T013448Z/volumes/netbird_netbird_data_.tgz\",\"size\":33724483,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260627T013448Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32520381,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260626T013139Z/netbird-vps-backup.tgz\",\"sha256\":\"abc3c083bce5e29fd69cd2e98b515bc1d867686872a354973de341f63426379c\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260626T013139Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260626T013139Z/ss-udp.txt\",\"size\":500,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260626T013139Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260626T013139Z/ss-tcp.txt\",\"size\":1547,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260626T013139Z/compose-ps.txt\",\"size\":246,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260626T013139Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260626T013139Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260626T013139Z/volumes/netbird_netbird_data_.tgz\",\"size\":33724423,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260626T013139Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32521584,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260625T013019Z/netbird-vps-backup.tgz\",\"sha256\":\"7662ce75d51990adc567f9e65517065197fdc44703abb2c202b85e7fee4889ab\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260625T013019Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260625T013019Z/ss-udp.txt\",\"size\":500,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260625T013019Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260625T013019Z/ss-tcp.txt\",\"size\":1547,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260625T013019Z/compose-ps.txt\",\"size\":243,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260625T013019Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260625T013019Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260625T013019Z/volumes/netbird_netbird_data_.tgz\",\"size\":33725023,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260625T013019Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32521261,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260624T013316Z/netbird-vps-backup.tgz\",\"sha256\":\"0cf6fd427bcf58f8a39addc3e468269da09d7b9044083ac6f808c6e2320a2962\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260624T013316Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260624T013316Z/ss-udp.txt\",\"size\":510,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260624T013316Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260624T013316Z/ss-tcp.txt\",\"size\":1573,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260624T013316Z/compose-ps.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260624T013316Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260624T013316Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260624T013316Z/volumes/netbird_netbird_data_.tgz\",\"size\":33724527,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260624T013316Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32523127,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260623T012735Z/netbird-vps-backup.tgz\",\"sha256\":\"3cd9632901cce9966b7dffe678e208efa6f6da556a49889bec5bc7537a1be555\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260623T012735Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260623T012735Z/ss-udp.txt\",\"size\":510,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260623T012735Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260623T012735Z/ss-tcp.txt\",\"size\":1573,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260623T012735Z/compose-ps.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260623T012735Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260623T012735Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260623T012735Z/volumes/netbird_netbird_data_.tgz\",\"size\":33725344,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260623T012735Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32524693,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260622T013530Z/netbird-vps-backup.tgz\",\"sha256\":\"e9b0bfc29ff4c1509495270fa902577c2e544d058a5e4960a33103a5a461dc70\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260622T013530Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260622T013530Z/ss-udp.txt\",\"size\":510,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260622T013530Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260622T013530Z/ss-tcp.txt\",\"size\":1573,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260622T013530Z/compose-ps.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260622T013530Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260622T013530Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260622T013530Z/volumes/netbird_netbird_data_.tgz\",\"size\":33725165,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260622T013530Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32525035,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260621T013330Z/netbird-vps-backup.tgz\",\"sha256\":\"b7a9f697aa1a4b9138daa595d7e680467a2b8aeabb8d108e76fa174af4ef34c0\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260621T013330Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260621T013330Z/ss-udp.txt\",\"size\":510,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260621T013330Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260621T013330Z/ss-tcp.txt\",\"size\":1573,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260621T013330Z/compose-ps.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260621T013330Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260621T013330Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260621T013330Z/volumes/netbird_netbird_data_.tgz\",\"size\":33725242,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260621T013330Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32524223,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260620T013220Z/netbird-vps-backup.tgz\",\"sha256\":\"996bfcb3e0af4bb01fda8c92369b39e8dbabaf5a9e89f701c8fe4bcdef6aed38\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260620T013220Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260620T013220Z/ss-udp.txt\",\"size\":510,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260620T013220Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260620T013220Z/ss-tcp.txt\",\"size\":1573,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260620T013220Z/compose-ps.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260620T013220Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260620T013220Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260620T013220Z/volumes/netbird_netbird_data_.tgz\",\"size\":33726202,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260620T013220Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32523842,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260619T013500Z/netbird-vps-backup.tgz\",\"sha256\":\"2a9c6556baa665ff26854ebdf8636ae17f809d6e34d17282d24bf1baf30b3779\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260619T013500Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260619T013500Z/ss-udp.txt\",\"size\":510,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260619T013500Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260619T013500Z/ss-tcp.txt\",\"size\":1573,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260619T013500Z/compose-ps.txt\",\"size\":246,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260619T013500Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260619T013500Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260619T013500Z/volumes/netbird_netbird_data_.tgz\",\"size\":33725130,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260619T013500Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32523362,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260618T013930Z/netbird-vps-backup.tgz\",\"sha256\":\"a83aac57456099e44415bd070ee5a08d70115a0bc87d340f75269c375a4016d2\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260618T013930Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260618T013930Z/ss-udp.txt\",\"size\":500,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260618T013930Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260618T013930Z/ss-tcp.txt\",\"size\":1547,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260618T013930Z/compose-ps.txt\",\"size\":246,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260618T013930Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260618T013930Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260618T013930Z/volumes/netbird_netbird_data_.tgz\",\"size\":33724927,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260618T013930Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":32509192,\"errors\":[],\"member_count\":9,\"path\":\"/mnt/staging/netbird-vps-backups/snapshots/20260617T074922Z/netbird-vps-backup.tgz\",\"sha256\":\"8e0c6538268b4e5dc463e008e59acb9d77873873915bec74ac2a85a9d1523a84\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backup-work-20260617T074922Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260617T074922Z/ss-udp.txt\",\"size\":500,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260617T074922Z/root-netbird.tgz\",\"size\":13331,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260617T074922Z/ss-tcp.txt\",\"size\":1547,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260617T074922Z/compose-ps.txt\",\"size\":249,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260617T074922Z/volumes\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backup-work-20260617T074922Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz\",\"size\":11496,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260617T074922Z/volumes/netbird_netbird_data_.tgz\",\"size\":33710197,\"type\":\"file\"},{\"name\":\"netbird-vps-backup-work-20260617T074922Z/docker-volumes.txt\",\"size\":57,\"type\":\"file\"}]},{\"bytes\":115865600,\"errors\":[],\"member_count\":15805,\"path\":\"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar\",\"sha256\":\"55970712f09921ed4e400505f545f55167188690314d0b9961e60f8cb04735ce\",\"ssh_like_members\":[{\"key_analysis\":{\"alg\":null,\"bytes\":1858,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"443a326138292937f5b5004749dcbc699c4249310b71f2309aa2e278856fbac7\",\"stderr_bytes\":69,\"stderr_sha256\":\"613f31c46b59982991c89514f7fa8979efb6ef275d452166ae7d391d9d14540b\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/apple.pem\",\"size\":1858,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":1897,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"1341ecb1ea5c148a7d908c79248c05c720ae69d65ac3e98ecc339cb1b3aa815a\",\"stderr_bytes\":74,\"stderr_sha256\":\"bb1304fed35884ce64f94908c7a2318fd621f8a20c1505dfc74caf2a06521ad0\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/globalSign.pem\",\"size\":1897,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":6159,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"a1ec70c9797f9026ce79948c989a37b6368349e6ae30bc042747c0827f817fb8\",\"stderr_bytes\":78,\"stderr_sha256\":\"f5b148a6c2828055cda04865246539e32e44c049c4c646a60e064292d1581665\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/googleHardware.pem\",\"size\":6159,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":2322,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"64ae3831c582fa272d7f211aeb34894ad049d06824290d6ef24726734cd00de8\",\"stderr_bytes\":73,\"stderr_sha256\":\"499d942d79bb9b4da1f19c69a777fc9b31d214e7b23d304bdc7928d38c62114b\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/hypersecu.pem\",\"size\":2322,\"type\":\"file\"},{\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/microsoftTpmCollection.pem\",\"size\":1687827,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":1718,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"d86e93f3f8b5dcd19caaecdb1c3d3a1b4c811c9f1e31c830784fa5e3b3fbd4c7\",\"stderr_bytes\":68,\"stderr_sha256\":\"289d1e88a63e74a033011088a1a5843e9c0181575190a18c2b51313181776831\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/solo.pem\",\"size\":1718,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":1952,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"14b0aa3abc16593e70080b33b4fb1177dc148af8181a6a81c34e3347f4475f5f\",\"stderr_bytes\":70,\"stderr_sha256\":\"3c63c6e71268e85492fa0a7dc0c3bcdc81cae48b4e8f54e11ff5e78b6daa7479\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/yubico.pem\",\"size\":1952,\"type\":\"file\"}],\"target_named_members\":[]},{\"bytes\":115865600,\"errors\":[],\"member_count\":15805,\"path\":\"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar\",\"sha256\":\"55970712f09921ed4e400505f545f55167188690314d0b9961e60f8cb04735ce\",\"ssh_like_members\":[{\"key_analysis\":{\"alg\":null,\"bytes\":1858,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"443a326138292937f5b5004749dcbc699c4249310b71f2309aa2e278856fbac7\",\"stderr_bytes\":69,\"stderr_sha256\":\"efa9b149f8f7b235f2a5e63919e566bc9ed3cc59081a3e615e1ca9c7b7b528ff\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/apple.pem\",\"size\":1858,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":1897,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"1341ecb1ea5c148a7d908c79248c05c720ae69d65ac3e98ecc339cb1b3aa815a\",\"stderr_bytes\":74,\"stderr_sha256\":\"86fadc916cb13634152b6634facfb7935120f9224e215139f5f067d80f6046d9\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/globalSign.pem\",\"size\":1897,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":6159,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"a1ec70c9797f9026ce79948c989a37b6368349e6ae30bc042747c0827f817fb8\",\"stderr_bytes\":78,\"stderr_sha256\":\"1537ac5544c18d29ddb9dd0fc21555f4728f81c906d7d25cf7848b5af127d3a1\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/googleHardware.pem\",\"size\":6159,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":2322,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"64ae3831c582fa272d7f211aeb34894ad049d06824290d6ef24726734cd00de8\",\"stderr_bytes\":73,\"stderr_sha256\":\"eba77c0178223cd11cfea1da34a073e64604e529035bf26d26ad2d1a4511d0b9\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/hypersecu.pem\",\"size\":2322,\"type\":\"file\"},{\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/microsoftTpmCollection.pem\",\"size\":1687827,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":1718,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"d86e93f3f8b5dcd19caaecdb1c3d3a1b4c811c9f1e31c830784fa5e3b3fbd4c7\",\"stderr_bytes\":68,\"stderr_sha256\":\"150930443027294035507561281a7ed09bbbf741feed3a38bfd8bd8d74c7bc1b\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/solo.pem\",\"size\":1718,\"type\":\"file\"},{\"key_analysis\":{\"alg\":null,\"bytes\":1952,\"derive_rc\":255,\"encrypted_or_passphrase\":true,\"fp\":null,\"private_material_present\":true,\"sha256\":\"14b0aa3abc16593e70080b33b4fb1177dc148af8181a6a81c34e3347f4475f5f\",\"stderr_bytes\":70,\"stderr_sha256\":\"871776a06ef9117c6f6a840f31f3990a888dec5414ee1434192e513f176a38a2\"},\"name\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/yubico.pem\",\"size\":1952,\"type\":\"file\"}],\"target_named_members\":[]},{\"bytes\":112640,\"errors\":[],\"member_count\":83,\"path\":\"/mnt/staging/backup-v2-vps-spb-restore/R322-20260913T172410Z-708c0acd3987b0b5/replica-1/nginx-tree.tar\",\"sha256\":\"951c26553c7f0d056fc6799d1216dd777f2250cf5399d8d9b2068c30aa7bcae4\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":143360,\"errors\":[],\"member_count\":5,\"path\":\"/mnt/staging/backup-v2-vps-spb-restore/R322-20260913T172410Z-708c0acd3987b0b5/replica-1/spb-ingress-bundle.tar\",\"sha256\":\"69bce002b40607593c9b03c3793a698bf2949522af8fe0da8696d9cbc452f385\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":15858,\"errors\":[],\"member_count\":5,\"path\":\"/mnt/staging/backup-v2-vps-spb-restore/R322-20260913T172410Z-708c0acd3987b0b5/replica-1/spb-ingress-bundle.tar.zst\",\"sha256\":\"058e7b8486c7432e72ff83e89947853dc23e4d2d43d740eff1fad3d51e40357a\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":13,\"errors\":[],\"member_count\":0,\"path\":\"/mnt/staging/backup-v2-guests/G266-20260912T072514Z-b27cf8664060529b8aad29eb9e92664d/producer/guest-110.tar.zst\",\"sha256\":\"f96deff1816083fdff8bc3e46c3fe6ca46a6bb49f4d5a00627616c13237a512c\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":10260480,\"errors\":[],\"member_count\":1339,\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/control-extract/control/source/homelab-configs-current.tar\",\"sha256\":\"66222dc234479869193d2b7f3f75daf52c8d8a3bbe1dfc7110dd69d37e4c54ba\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":6646,\"errors\":[],\"member_count\":43,\"path\":\"/mnt/staging/dr-drills/p2-critical-bootstrap-retry-20260618T200504Z/extract/components/homelab-health-20260618T200433Z.tar.gz\",\"sha256\":\"7a09a05411ed3263dffdec3574e9d4f1919b3b7aa774815809dd57f43e4773cd\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"./netbird-vps-restore.txt\",\"size\":357,\"type\":\"file\"},{\"name\":\"./netbird-vps-offhost.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"./netbird-vps-backup.txt\",\"size\":312,\"type\":\"file\"}]},{\"bytes\":150436174,\"errors\":[],\"member_count\":301,\"path\":\"/mnt/staging/dr-drills/p2-critical-bootstrap-retry-20260618T200504Z/extract/components/pve02-offhost-small-20260618T200433Z.tar.gz\",\"sha256\":\"29564c0613448a27804c74182b3eadbefc133ed5bad9c6d900ac502f14b05f13\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backups-from-pve01\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z/netbird-vps-backup.tgz.sha256.remote\",\"size\":112,\"type\":\"file\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z/netbird-vps-backup.tgz\",\"size\":32523362,\"type\":\"file\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/latest\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z/netbird-vps-backup.tgz.sha256.remote\",\"size\":112,\"type\":\"file\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z/netbird-vps-backup.tgz\",\"size\":32509192,\"type\":\"file\"}]},{\"bytes\":60703,\"errors\":[],\"member_count\":57,\"path\":\"/mnt/staging/dr-drills/p2-critical-bootstrap-retry-20260618T200504Z/extract/components/homelab-configs-20ed8ba-20260618T200433Z.tar.gz\",\"sha256\":\"6b264b1e0334b825d39277905b5a2777ae363a6df8019c39d743eae131151af0\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":150517713,\"errors\":[],\"member_count\":6,\"path\":\"/mnt/staging/dr-drills/p2-critical-bootstrap-20260618T195749Z/download/p0-critical-baseline-20260618T191329Z.tar.gz\",\"sha256\":\"f413fcbd5641ac14b146c7d2d997b9ccfbb302467a5f22fdf0bebb8e3e9aba6c\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":6540,\"errors\":[],\"member_count\":42,\"path\":\"/mnt/staging/dr-drills/p2-critical-bootstrap-20260618T195749Z/extract/components/homelab-health-20260618T191329Z.tar.gz\",\"sha256\":\"97f40007a8b4dd73e38a0deeb1aa52c0bf7f59e692da9f793cf03b82e6f5abe4\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"./netbird-vps-restore.txt\",\"size\":357,\"type\":\"file\"},{\"name\":\"./netbird-vps-offhost.txt\",\"size\":240,\"type\":\"file\"},{\"name\":\"./netbird-vps-backup.txt\",\"size\":312,\"type\":\"file\"}]},{\"bytes\":57020,\"errors\":[],\"member_count\":56,\"path\":\"/mnt/staging/dr-drills/p2-critical-bootstrap-20260618T195749Z/extract/components/homelab-configs-3c148a3-20260618T191329Z.tar.gz\",\"sha256\":\"8b03b10d74be02632bbf5f01f1e679a80aab43bfa7e1928c23b6eed19cb19a56\",\"ssh_like_members\":[],\"target_named_members\":[]},{\"bytes\":150436174,\"errors\":[],\"member_count\":301,\"path\":\"/mnt/staging/dr-drills/p2-critical-bootstrap-20260618T195749Z/extract/components/pve02-offhost-small-20260618T191329Z.tar.gz\",\"sha256\":\"29564c0613448a27804c74182b3eadbefc133ed5bad9c6d900ac502f14b05f13\",\"ssh_like_members\":[],\"target_named_members\":[{\"name\":\"netbird-vps-backups-from-pve01\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z/netbird-vps-backup.tgz.sha256.remote\",\"size\":112,\"type\":\"file\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z/netbird-vps-backup.tgz\",\"size\":32523362,\"type\":\"file\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/latest\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z\",\"size\":0,\"type\":\"other\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z/netbird-vps-backup.tgz.sha256.remote\",\"size\":112,\"type\":\"file\"},{\"name\":\"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z/netbird-vps-backup.tgz\",\"size\":32509192,\"type\":\"file\"}]}],\"changes_made\":false,\"cloud_reads\":0,\"cloud_writes\":0,\"command_id\":\"SUPPORT-260918-INFRA-VPS-BACKUP-SSH-ACCESS-RECOVERY-DEEP-READONLY-517R5\",\"correlations\":{\"candidate_key_fingerprint_count\":1,\"matches_removed_old_moba_fingerprint\":[],\"netbird_vps_archive_count\":15,\"private_key_candidate_count\":12,\"private_key_candidates\":[{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/apple.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/globalSign.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/googleHardware.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/hypersecu.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/solo.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/yubico.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/apple.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/globalSign.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/googleHardware.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/hypersecu.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/solo.pem\",\"source\":\"archive\"},{\"archive\":\"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar\",\"encrypted_or_passphrase\":true,\"format\":\"OPENSSH_OR_PEM\",\"fp\":null,\"member\":\"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/yubico.pem\",\"source\":\"archive\"}],\"pve01_removed_since_old_moba_backup_fps\":[]},\"decision\":\"PASS_BACKUP_CONTAINS_PRIVATE_KEY_CANDIDATES_NEEDS_ACCESS_CORRELATION\",\"direct_key_artifacts\":[{\"bytes\":142,\"path\":\"/var/lib/homelab-backup-v2/router/trust/known_hosts\",\"public_algorithms\":[\"ssh-ed25519\"],\"public_fingerprints\":[\"SHA256:2Tw4CU4kvwtXSIiym+699Y6W2VJVWzRUD4opXrSfOIs\"],\"public_key_rows\":1,\"sha256\":\"02d4e1dad1620937b7a67416a73aa182f9e80ea9c4b11f777161bc7455cf234d\"}],\"external_ssh_attempts\":0,\"mode\":\"read-only\",\"pve01_key_baseline\":{\"[SENSITIVE_PATH] \\\"[SENSITIVE_PATH] \\\"known_hosts\\\",\"},{\"line\":166,\"text\":\" \\\"all_active_skladchik_ssh_requires_strict_known_hosts\\\": true,\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/task.json\",\"sha256\":\"d3108777e5094468aa3e633740ce8a56c90ca957a9a62932be896bbe784680b0\"},{\"bytes\":770,\"hits\":[{\"line\":6,\"text\":\"interactive prompt through strict known_hosts SSH, verifies monitor counts and\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/README.txt\",\"sha256\":\"7e2e699c9e4a3418a6fc357585be6e3d911480071a6dd653b2ea908163da1eb4\"},{\"bytes\":2867,\"hits\":[{\"line\":10,\"text\":\"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] [SENSITIVE_PATH] >\\\"$LOCAL_STAGE/original-known-hosts.sha256\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/prepare.sh\",\"sha256\":\"f95ecba71c1d569a002aab3cf0a61475585d4301df5359103e85b4ddbaded519\"},{\"bytes\":2809,\"hits\":[{\"line\":12,\"text\":\"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] grep -Fq 'UserKnownHostsFile=[SENSITIVE_PATH] \\\"$FILE\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/dry-run.sh\",\"sha256\":\"15202467ebe014537a8e57db35ac1064821279efef344c9325082eab1f929a34\"},{\"bytes\":3132,\"hits\":[{\"line\":11,\"text\":\"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] grep -Fq 'UserKnownHostsFile=[SENSITIVE_PATH] \\\"$LIVE\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/verify.sh\",\"sha256\":\"e93bb56ad833118c955a33d794fd9bbfe72d062f1933f63af1a13a3968fcad40\"},{\"bytes\":2153,\"hits\":[{\"line\":10,\"text\":\"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] TS=20260624T130206Z TYPE=vps-identity-peer-discovery RESULT=BLOCKED_NO_VERIFIED_PEER KNOWN_HOSTS_UNCHANGED=YES SECRET_PRINTED=REDACTED\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/vps-identity-peer-discovery.txt\",\"sha256\":\"b914b2da940214356bd92083226e693b2248b7c89d0b2954f8563349b63759c7\"},{\"bytes\":242,\"hits\":[{\"line\":2,\"text\":\"SERVICE=netbird-vps-offhost\"},{\"line\":5,\"text\":\"DST=/mnt/staging/offhost/netbird-vps-backups-from-pve01\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/netbird-vps-offhost.txt\",\"sha256\":\"04ddca2c2a89ab344726695210540c4ca1358033f2edd22e2c97f1ab0aff4e0b\"},{\"bytes\":433,\"hits\":[{\"line\":1,\"text\":\"STATUS=OK TS=2026-07-07T15:55:43Z TYPE=netbird-vps-trust-clean-seal BAD=0 WARN=0 MODE=CLEAN_SEAL_NO_AWK_TAIL TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=100.100.60.182 PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH INDEPENDENT_RUNNER_AVAILABLE=no DEPLOY_DECISION=NO_DEPLOY KNOWN_HOSTS_CHANGED=no PRIVATE_KEYS_READ=no PROBE_DEPLOYED=no REPORT=/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/netbird-vps-trust-clean-seal.txt\",\"sha256\":\"092eaa2c4f3a5f623e9440135d36e6bae7d8ae46a03d380d14a5e95657812b61\"},{\"bytes\":408,\"hits\":[{\"line\":1,\"text\":\"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=100.100.60.182 PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/netbird-vps-trust-closure.txt\",\"sha256\":\"6db8ee1ffbd2c371959917cac5ded56af3ec1829b01bd9c190e3334d6593a4a0\"},{\"bytes\":236,\"hits\":[{\"line\":1,\"text\":\"STATUS=OK TS=20260810T170828Z TYPE=vps-identity-audit VPS_IP=188.127.235.6 ALIAS=netbird.vpn.gram1.ru ALIAS_IP=100.100.60.182 SSH_TRUST=BLOCKED_NO_BACKED_UP_HOST_KEYS BACKUP_HOSTKEYS=NO KNOWN_HOSTS_UNCHANGED=YES SECRET_PRINTED=REDACTED\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/vps-identity-audit.txt\",\"sha256\":\"b339bdbf27bc8b7fd3b5e3e352151097d3facf525ab7ae6e2623cddfd1eb3178\"},{\"bytes\":8501,\"hits\":[{\"line\":3,\"text\":\" \\\"overall_health_line\\\": \\\"STATUS=OK TS=2026-07-08T09:50:07Z TYPE=overall-health BAD=0 backup-framework.txt=OK drift-check.txt=OK service-registry.txt=OK dependency-map.txt=OK golden-state.txt=OK cluster-passport.txt=OK final-readiness.txt=OK safe-autoheal.txt=OK kuma-monitor-policy.txt=OK backup-sla.txt=OK backup-coverage-matrix.txt=OK extended-appbackup.txt=OK residual-review.txt=OK forum-snuffleupagus.txt=OK incident-journal.txt=OK duty-admin-v2.txt=OK node-loss-readiness.txt=OK node-loss-runbooks.txt=OK power-loss-readiness.txt=OK power-loss-runbook.txt=OK ungated-health-backlog.txt=OK pve03-root-cleanup.txt=OK pve03-staging-retention.txt=OK pve03-staging-retention-proof.txt=OK pve03-staging-retention-cleanup.txt=OK pve03-failed-unit-cleanup.txt=OK remote-git-sops-age-readiness.txt=OK remote-git-sops-age-policy.txt=OK desired-state-remote-target-trace.txt=OK desired-state-remote-target.txt=OK desired-state.txt=OK runbooks.txt=OK alerting.txt=OK secret-exposure.txt=OK capacity-risk.txt=OK vm-local-dumps-retention.txt=OK vm-local-dumps-cloud.txt=OK vm-backup-policy.txt=OK vm170-vm171-full-strategy.txt=OK external-probe-vps.txt=OK netbird-vps-trust.txt=OK netbird-vps-trust-closure.txt=OK external-probe-runner-decision.txt=OK netbird-vps-trust-clean-seal.txt=OK live-tail-audit.txt=OK vm-backup.txt=OK\\\",\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/app-states/latest-safety-net-control-plane.json\",\"sha256\":\"619da0dd797aaf966a37756bcedc3133abccd87dd52cea1e3ef4a602010f953c\"},{\"bytes\":1535,\"hits\":[{\"line\":1,\"text\":\"STATUS=WARN TS=2026-08-05T05:11:14Z TYPE=overall-health BAD=13 backup-framework.txt=FAIL drift-check.txt=WARN service-registry.txt=OK dependency-map.txt=OK golden-state.txt=OK cluster-passport.txt=WARN final-readiness.txt=WARN safe-autoheal.txt=OK kuma-monitor-policy.txt=OK backup-sla.txt=FAIL backup-coverage-matrix.txt=FAIL extended-appbackup.txt=FAIL residual-review.txt=OK forum-snuffleupagus.txt=OK incident-journal.txt=OK duty-admin-v2.txt=OK node-loss-readiness.txt=OK node-loss-runbooks.txt=OK power-loss-readiness.txt=OK power-loss-runbook.txt=OK ungated-health-backlog.txt=OK pve03-root-cleanup.txt=OK pve03-staging-retention.txt=OK pve03-staging-retention-proof.txt=OK pve03-staging-retention-cleanup.txt=OK pve03-failed-unit-cleanup.txt=OK remote-git-sops-age-readiness.txt=OK remote-git-sops-age-policy.txt=OK desired-state-remote-target-trace.txt=OK desired-state-remote-target.txt=OK desired-state.txt=OK runbooks.txt=OK alerting.txt=OK secret-exposure.txt=OK capacity-risk.txt=OK vm-local-dumps-retention.txt=FAIL vm-local-dumps-cloud.txt=FAIL vm-backup-policy.txt=FAIL vm170-vm171-full-strategy.txt=OK external-probe-vps.txt=OK netbird-vps-trust.txt=OK netbird-vps-trust-closure.txt=OK external-probe-runner-decision.txt=OK netbird-vps-trust-clean-seal.txt=OK live-tail-audit.txt=OK vm-backup.txt=OK cluster-admin-observer.txt=WARN cluster-admin-restricted-probes.txt=WARN cluster-admin-full-observer.txt=WARN cluster-admin-vm-mail-cloud-backup.txt=OK cluster-admin-webpanel-sync.txt=OK cluster-admin-webpanel.txt=OK\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/control-extract/control/source/homelab-ops-dirty-overlay/observed/source-snapshots/overall.txt\",\"sha256\":\"0ec7f8bcad6d2578f209b222be1135e7fa03f801e1e07bdbb634ba5f536a101b\"},{\"bytes\":1514,\"hits\":[{\"line\":1,\"text\":\"STATUS=WARN TS=2026-07-15T05:11:34Z TYPE=overall-health BAD=3 backup-framework.txt=OK drift-check.txt=WARN service-registry.txt=OK dependency-map.txt=OK golden-state.txt=OK cluster-passport.txt=OK final-readiness.txt=OK safe-autoheal.txt=OK kuma-monitor-policy.txt=OK backup-sla.txt=OK backup-coverage-matrix.txt=OK extended-appbackup.txt=OK residual-review.txt=OK forum-snuffleupagus.txt=OK incident-journal.txt=OK duty-admin-v2.txt=OK node-loss-readiness.txt=OK node-loss-runbooks.txt=OK power-loss-readiness.txt=OK power-loss-runbook.txt=OK ungated-health-backlog.txt=OK pve03-root-cleanup.txt=OK pve03-staging-retention.txt=OK pve03-staging-retention-proof.txt=OK pve03-staging-retention-cleanup.txt=OK pve03-failed-unit-cleanup.txt=OK remote-git-sops-age-readiness.txt=OK remote-git-sops-age-policy.txt=OK desired-state-remote-target-trace.txt=OK desired-state-remote-target.txt=OK desired-state.txt=OK runbooks.txt=OK alerting.txt=OK secret-exposure.txt=OK capacity-risk.txt=OK vm-local-dumps-retention.txt=OK vm-local-dumps-cloud.txt=OK vm-backup-policy.txt=OK vm170-vm171-full-strategy.txt=OK external-probe-vps.txt=OK netbird-vps-trust.txt=OK netbird-vps-trust-closure.txt=OK external-probe-runner-decision.txt=OK netbird-vps-trust-clean-seal.txt=OK live-tail-audit.txt=OK vm-backup.txt=OK cluster-admin-observer.txt=OK cluster-admin-restricted-probes.txt=WARN cluster-admin-full-observer.txt=WARN cluster-admin-vm-mail-cloud-backup.txt=OK cluster-admin-webpanel-sync.txt=OK cluster-admin-webpanel.txt=OK\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/observed/source-snapshots/overall.txt\",\"sha256\":\"1273abb92f4518e490111a8c6ff75f065c721135930bc6353a6b98943e27515e\"},{\"bytes\":29485,\"hits\":[{\"line\":145,\"text\":\" \\\"required_control\\\": \\\"Skladchik reauthentication must run only through a versioned homelab-admin task using StrictHostKeyChecking=yes, the canonical known_hosts file, a pinned edge script hash, a hidden interactive prompt and a root-only rollback snapshot.\\\",\"},{\"line\":157,\"text\":\" \\\"required_control\\\": \\\"Every active Skladchik SSH caller and its desired-state copy must be versioned, deployed and verified with StrictHostKeyChecking=yes and the canonical known_hosts file.\\\",\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/errors/regression-cases.json\",\"sha256\":\"8051e3e761493a1b7088a0f3ed7e0aa9218673f453ca88171178364d26701f64\"},{\"bytes\":1928,\"hits\":[{\"line\":49,\"text\":\" \\\"known_hosts\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/changes/CR-2026-0018/plan.json\",\"sha256\":\"6956807d81729b997b6f12419c0f4b2b1f9cc3608148a6d1c4143713c9724b07\"},{\"bytes\":1340,\"hits\":[{\"line\":6,\"text\":\" \\\"scope\\\": \\\"controlled Skladchik monitor reauthentication with strict known_hosts\\\",\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/changes/CR-2026-0007/plan.json\",\"sha256\":\"9a1cd77ebb9a880869aa24711408a88abadddd3ac4e43b04510e8ac13ba545c2\"},{\"bytes\":9360,\"hits\":[{\"line\":14,\"text\":\" \\\"[SENSITIVE_PATH] \\\"known_hosts\\\",\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/backup-vm-cloud-quorum-cutover-v1/task.json\",\"sha256\":\"150a2d8e9e654e9c3e13b110b0ac4ce25480e11dd6c5f66248d5d3599c237389\"},{\"bytes\":2890,\"hits\":[{\"line\":7,\"text\":\"SSH_BASE=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] scp -o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] \\\"$REMOTE_INSTALL\\\" \\\"root@192.168.50.$H:/tmp/homelab-vm-cloud-quorum-remote-install.cr0019\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/backup-vm-cloud-quorum-cutover-v1/phases/rollback.sh\",\"sha256\":\"74d347b24079db9809abdf98f8e75b161597c432f06d4c967f099ece78187750\"},{\"bytes\":3151,\"hits\":[{\"line\":5,\"text\":\"SSH_BASE=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] \\\"known_hosts\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/backup-cloud-quorum-foundation-v1/task.json\",\"sha256\":\"ba639c142591b39ee00c069d02f663b9d54ed722a9a5a82f09a8dd181cae9a20\"},{\"bytes\":6750,\"hits\":[{\"line\":140,\"text\":\" \\\"known_hosts\\\",\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/homelab-logrotate-namespace-latch-clearance-v1/task.json\",\"sha256\":\"3a8fdfb6b4b64880012fcc3bc6fee4be6f101377310325541f9776de6d1623f7\"},{\"bytes\":8892,\"hits\":[{\"line\":121,\"text\":\" \\\"network, DNS and known_hosts\\\",\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/backup-scheduler-rpo-hardening-v1/task.json\",\"sha256\":\"c6ec31f14a61309fd19d304b7c21dc53117b6cc69ccaff318de6f9b59ae56d99\"},{\"bytes\":13579,\"hits\":[{\"line\":14,\"text\":\" \\\"[SENSITIVE_PATH] \\\"known_hosts\\\",\"},{\"line\":166,\"text\":\" \\\"all_active_skladchik_ssh_requires_strict_known_hosts\\\": true,\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/task.json\",\"sha256\":\"d3108777e5094468aa3e633740ce8a56c90ca957a9a62932be896bbe784680b0\"},{\"bytes\":770,\"hits\":[{\"line\":6,\"text\":\"interactive prompt through strict known_hosts SSH, verifies monitor counts and\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/README.txt\",\"sha256\":\"7e2e699c9e4a3418a6fc357585be6e3d911480071a6dd653b2ea908163da1eb4\"},{\"bytes\":2867,\"hits\":[{\"line\":10,\"text\":\"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] [SENSITIVE_PATH] >\\\"$LOCAL_STAGE/original-known-hosts.sha256\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/prepare.sh\",\"sha256\":\"f95ecba71c1d569a002aab3cf0a61475585d4301df5359103e85b4ddbaded519\"},{\"bytes\":2809,\"hits\":[{\"line\":12,\"text\":\"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] grep -Fq 'UserKnownHostsFile=[SENSITIVE_PATH] \\\"$FILE\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/dry-run.sh\",\"sha256\":\"15202467ebe014537a8e57db35ac1064821279efef344c9325082eab1f929a34\"},{\"bytes\":3132,\"hits\":[{\"line\":11,\"text\":\"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] grep -Fq 'UserKnownHostsFile=[SENSITIVE_PATH] \\\"$LIVE\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/verify.sh\",\"sha256\":\"e93bb56ad833118c955a33d794fd9bbfe72d062f1933f63af1a13a3968fcad40\"},{\"bytes\":2153,\"hits\":[{\"line\":10,\"text\":\"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] \\\"[SENSITIVE_PATH] \\\"known_hosts\\\",\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/cluster-cloud-quorum-vm160-canary-v1/task.json\",\"sha256\":\"636254d2526f0f62184d47cdb4c30c2831b11869c2000c557666f60b55d7691b\"},{\"bytes\":3665,\"hits\":[{\"line\":8,\"text\":\"SSH_BASE=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] [SENSITIVE_PATH] > \\\"$LOCAL_STAGE/original-known-hosts.sha256\\\"\"}],\"path\":\"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/cluster-cloud-quorum-vm160-canary-v1/phases/prepare.sh\",\"sha256\":\"ae589aaad30d2f062fd3455c54b880c4a7c2790f4b3919f4c30cb07de76e6765\"},{\"bytes\":1972,\"hits\":[{\"line\":8,\"text\":\"SSH_BASE=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH]\nVPS517R5_DECISION=PASS_BACKUP_CONTAINS_PRIVATE_KEY_CANDIDATES_NEEDS_ACCESS_CORRELATION\nVPS517R5_NEXT_GATE=USE_RECOVERED_KEY_LOCALLY_IF_MATCH_ELSE_TARGET_CLOUD_BACKUP_READ_ONLY_RESTORE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-BACKUP-SSH-ACCESS-RECOVERY-DEEP-READONLY-517R5\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" + "output": "VPS517R5R1_SAFE_REPORT={\"changes_made\":false,\"changeset_evidence\":[{\"bytes\":2150,\"hits\":[{\"line\":56,\"text\":\" \\\"authorized_keys\\\",\"}],\"path\":\"/var/lib/homelab-change-sets/stage4h-final-acceptance-task-contract-v1/20260714T182929Z/task.json\",\"sha256\":\"eaf46f109e83ae6a13610c411c1ab0e2fbd695c21297fdc9cac1d64b3d462d34\"},{\"bytes\":2595,\"hits\":[{\"line\":38,\"text\":\" \\\"description\\\": \\\"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\\\",\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-policies.before.json\",\"sha256\":\"ce6d46a01dfe14adc8b2a35a683f2771e4324b04fea611dd4f4bd0458b09d1af\"},{\"bytes\":77451,\"hits\":[{\"line\":140,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"},{\"line\":141,\"text\":\"\\u0424\\u0430\\u043a\\u0442: inventory 158 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b [SENSITIVE_PATH] \\u0438 backup-\\u0444\\u0430\\u0439\\u043b\\u044b \\u0441 \\u0440\\u0435\\u0436\\u0438\\u043c\\u043e\\u043c 777 \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":142,\"text\":\"\\u041d\\u0443\\u0436\\u043d\\u043e \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u044f\\u0442\\u044c \\u043d\\u0430 [SENSITIVE_PATH]=700 \\u0438 authorized_keys/authorized_keys.bak*=600, \\u0437\\u0430\\u0442\\u0435\\u043c \\u0444\\u0438\\u043a\\u0441\\u0438\\u0440\\u043e\\u0432\\u0430\\u0442\\u044c before/after proof.\"},{\"line\":144,\"text\":\"35. \\u041e\\u0448\\u0438\\u0431\\u043a\\u0430 \\u043f\\u0440\\u043e\\u0432\\u0435\\u0440\\u043a\\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \\u043d\\u0435 \\u0434\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u0435\\u043d\\u0438\\u0435 \\u043f\\u0440\\u0430\\u0432.\"},{\"line\":145,\"text\":\"\\u0424\\u0430\\u043a\\u0442: AFTER \\u0432\\u0441\\u0451 \\u0435\\u0449\\u0451 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b 777 \\u0434\\u043b\\u044f [SENSITIVE_PATH] \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":146,\"text\":\"\\u0412\\u043e\\u0437\\u043c\\u043e\\u0436\\u043d\\u0430\\u044f \\u043f\\u0440\\u0438\\u0447\\u0438\\u043d\\u0430: authorized_keys \\u044f\\u0432\\u043b\\u044f\\u0435\\u0442\\u0441\\u044f symlink, \\u0430 stat \\u0431\\u0435\\u0437 -L \\u043f\\u043e\\u043a\\u0430\\u0437\\u044b\\u0432\\u0430\\u0435\\u0442 \\u0440\\u0435\\u0436\\u0438\\u043c \\u0441\\u0441\\u044b\\u043b\\u043a\\u0438 777.\"},{\"line\":662,\"text\":\"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers.\"},{\"line\":663,\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.new.md\",\"sha256\":\"6fd516bc953cae5f2c28194b4c2393898abc439b4401e1d6fb177ae7607ecb51\"},{\"bytes\":76486,\"hits\":[{\"line\":140,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"},{\"line\":141,\"text\":\"\\u0424\\u0430\\u043a\\u0442: inventory 158 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b [SENSITIVE_PATH] \\u0438 backup-\\u0444\\u0430\\u0439\\u043b\\u044b \\u0441 \\u0440\\u0435\\u0436\\u0438\\u043c\\u043e\\u043c 777 \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":142,\"text\":\"\\u041d\\u0443\\u0436\\u043d\\u043e \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u044f\\u0442\\u044c \\u043d\\u0430 [SENSITIVE_PATH]=700 \\u0438 authorized_keys/authorized_keys.bak*=600, \\u0437\\u0430\\u0442\\u0435\\u043c \\u0444\\u0438\\u043a\\u0441\\u0438\\u0440\\u043e\\u0432\\u0430\\u0442\\u044c before/after proof.\"},{\"line\":144,\"text\":\"35. \\u041e\\u0448\\u0438\\u0431\\u043a\\u0430 \\u043f\\u0440\\u043e\\u0432\\u0435\\u0440\\u043a\\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \\u043d\\u0435 \\u0434\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u0435\\u043d\\u0438\\u0435 \\u043f\\u0440\\u0430\\u0432.\"},{\"line\":145,\"text\":\"\\u0424\\u0430\\u043a\\u0442: AFTER \\u0432\\u0441\\u0451 \\u0435\\u0449\\u0451 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b 777 \\u0434\\u043b\\u044f [SENSITIVE_PATH] \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":146,\"text\":\"\\u0412\\u043e\\u0437\\u043c\\u043e\\u0436\\u043d\\u0430\\u044f \\u043f\\u0440\\u0438\\u0447\\u0438\\u043d\\u0430: authorized_keys \\u044f\\u0432\\u043b\\u044f\\u0435\\u0442\\u0441\\u044f symlink, \\u0430 stat \\u0431\\u0435\\u0437 -L \\u043f\\u043e\\u043a\\u0430\\u0437\\u044b\\u0432\\u0430\\u0435\\u0442 \\u0440\\u0435\\u0436\\u0438\\u043c \\u0441\\u0441\\u044b\\u043b\\u043a\\u0438 777.\"},{\"line\":662,\"text\":\"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers.\"},{\"line\":663,\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.before.md\",\"sha256\":\"750cb4d51300df08a00173c1dea6987078529a87b7eaad2cb89bc9c78fcf2d20\"},{\"bytes\":26777,\"hits\":[{\"line\":73,\"text\":\"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])\"},{\"line\":74,\"text\":\"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)\"}],\"path\":\"/var/lib/homelab-change-sets/crypto-portfolio-ui-retention-sync-closure-resume-v3/20260713T081210Z/main.sh\",\"sha256\":\"00f74e2a2be46cd31c83ce89f1657545c1bfa866e53952359802d0ab121df79e\"},{\"bytes\":318,\"hits\":[{\"line\":1,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-ops-bootstrap-audit-v1/20260715T214930Z/error-register-tail.txt\",\"sha256\":\"a940f28541fe6b47a44a0e61c0c74ca2c5e47d9f9d7631e869787a779de226c5\"},{\"bytes\":2865,\"hits\":[{\"line\":38,\"text\":\" \\\"description\\\": \\\"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\\\",\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-candidate-v1/20260715T060858Z/error-policies.candidate.json\",\"sha256\":\"075ba849b67ec5f4b39179ecfe83ea98b3a493aee3987d0530de88d4447ded95\"},{\"bytes\":32437,\"hits\":[{\"line\":80,\"text\":\"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])\"},{\"line\":81,\"text\":\"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)\"}],\"path\":\"/var/lib/homelab-change-sets/crypto-portfolio-ui-production-closure/20260713T075748Z/main.sh\",\"sha256\":\"452b1c98604fc800cd1f395b787242dce7d5f6534b565381f910e4d2d1d480f3\"},{\"bytes\":2595,\"hits\":[{\"line\":38,\"text\":\" \\\"description\\\": \\\"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\\\",\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-policies.before.json\",\"sha256\":\"ce6d46a01dfe14adc8b2a35a683f2771e4324b04fea611dd4f4bd0458b09d1af\"},{\"bytes\":77979,\"hits\":[{\"line\":140,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"},{\"line\":141,\"text\":\"\\u0424\\u0430\\u043a\\u0442: inventory 158 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b [SENSITIVE_PATH] \\u0438 backup-\\u0444\\u0430\\u0439\\u043b\\u044b \\u0441 \\u0440\\u0435\\u0436\\u0438\\u043c\\u043e\\u043c 777 \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":142,\"text\":\"\\u041d\\u0443\\u0436\\u043d\\u043e \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u044f\\u0442\\u044c \\u043d\\u0430 [SENSITIVE_PATH]=700 \\u0438 authorized_keys/authorized_keys.bak*=600, \\u0437\\u0430\\u0442\\u0435\\u043c \\u0444\\u0438\\u043a\\u0441\\u0438\\u0440\\u043e\\u0432\\u0430\\u0442\\u044c before/after proof.\"},{\"line\":144,\"text\":\"35. \\u041e\\u0448\\u0438\\u0431\\u043a\\u0430 \\u043f\\u0440\\u043e\\u0432\\u0435\\u0440\\u043a\\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \\u043d\\u0435 \\u0434\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u0435\\u043d\\u0438\\u0435 \\u043f\\u0440\\u0430\\u0432.\"},{\"line\":145,\"text\":\"\\u0424\\u0430\\u043a\\u0442: AFTER \\u0432\\u0441\\u0451 \\u0435\\u0449\\u0451 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b 777 \\u0434\\u043b\\u044f [SENSITIVE_PATH] \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":146,\"text\":\"\\u0412\\u043e\\u0437\\u043c\\u043e\\u0436\\u043d\\u0430\\u044f \\u043f\\u0440\\u0438\\u0447\\u0438\\u043d\\u0430: authorized_keys \\u044f\\u0432\\u043b\\u044f\\u0435\\u0442\\u0441\\u044f symlink, \\u0430 stat \\u0431\\u0435\\u0437 -L \\u043f\\u043e\\u043a\\u0430\\u0437\\u044b\\u0432\\u0430\\u0435\\u0442 \\u0440\\u0435\\u0436\\u0438\\u043c \\u0441\\u0441\\u044b\\u043b\\u043a\\u0438 777.\"},{\"line\":662,\"text\":\"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers.\"},{\"line\":663,\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.new.md\",\"sha256\":\"ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc\"},{\"bytes\":76486,\"hits\":[{\"line\":140,\"text\":\"33. Security finding: root authorized_keys \\u043d\\u0430 PVE-\\u043d\\u043e\\u0434\\u0430\\u0445 \\u0438\\u043c\\u0435\\u043b \\u043f\\u0440\\u0430\\u0432\\u0430 777.\"},{\"line\":141,\"text\":\"\\u0424\\u0430\\u043a\\u0442: inventory 158 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b [SENSITIVE_PATH] \\u0438 backup-\\u0444\\u0430\\u0439\\u043b\\u044b \\u0441 \\u0440\\u0435\\u0436\\u0438\\u043c\\u043e\\u043c 777 \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":142,\"text\":\"\\u041d\\u0443\\u0436\\u043d\\u043e \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u044f\\u0442\\u044c \\u043d\\u0430 [SENSITIVE_PATH]=700 \\u0438 authorized_keys/authorized_keys.bak*=600, \\u0437\\u0430\\u0442\\u0435\\u043c \\u0444\\u0438\\u043a\\u0441\\u0438\\u0440\\u043e\\u0432\\u0430\\u0442\\u044c before/after proof.\"},{\"line\":144,\"text\":\"35. \\u041e\\u0448\\u0438\\u0431\\u043a\\u0430 \\u043f\\u0440\\u043e\\u0432\\u0435\\u0440\\u043a\\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \\u043d\\u0435 \\u0434\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b \\u0438\\u0441\\u043f\\u0440\\u0430\\u0432\\u043b\\u0435\\u043d\\u0438\\u0435 \\u043f\\u0440\\u0430\\u0432.\"},{\"line\":145,\"text\":\"\\u0424\\u0430\\u043a\\u0442: AFTER \\u0432\\u0441\\u0451 \\u0435\\u0449\\u0451 \\u043f\\u043e\\u043a\\u0430\\u0437\\u0430\\u043b 777 \\u0434\\u043b\\u044f [SENSITIVE_PATH] \\u043d\\u0430 pve01/pve02/pve03.\"},{\"line\":146,\"text\":\"\\u0412\\u043e\\u0437\\u043c\\u043e\\u0436\\u043d\\u0430\\u044f \\u043f\\u0440\\u0438\\u0447\\u0438\\u043d\\u0430: authorized_keys \\u044f\\u0432\\u043b\\u044f\\u0435\\u0442\\u0441\\u044f symlink, \\u0430 stat \\u0431\\u0435\\u0437 -L \\u043f\\u043e\\u043a\\u0430\\u0437\\u044b\\u0432\\u0430\\u0435\\u0442 \\u0440\\u0435\\u0436\\u0438\\u043c \\u0441\\u0441\\u044b\\u043b\\u043a\\u0438 777.\"},{\"line\":662,\"text\":\"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers.\"},{\"line\":663,\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.before.md\",\"sha256\":\"750cb4d51300df08a00173c1dea6987078529a87b7eaad2cb89bc9c78fcf2d20\"},{\"bytes\":23331,\"hits\":[{\"line\":104,\"text\":\"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])\"},{\"line\":105,\"text\":\"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)\"}],\"path\":\"/var/lib/homelab-change-sets/crypto-portfolio-ui-retention-sync-closure-resume/20260713T080320Z/main.sh\",\"sha256\":\"9a4ce646203394e1b978efd40471d6ffa7b85212f4fb6a463f1c48b5f192194b\"}],\"cloud_reads\":0,\"cloud_writes\":0,\"command_id\":\"SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1\",\"decision\":\"PASS_NESTED_BACKUP_OR_CHANGESET_ACCESS_EVIDENCE_FOUND\",\"exact_files\":[{\"bytes\":2811,\"hits\":[{\"line\":5,\"text\":\"KH=\\\"[SENSITIVE_PATH] -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\" \\\"TS='$TS' REMOTE_ARCH='$REMOTE_ARCH' bash -s\\\" <<'REMOTE'\"},{\"line\":48,\"text\":\"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\":\\\"$REMOTE_ARCH\\\" \\\"$DEST/netbird-vps-backup.tgz\\\" >/dev/null\"},{\"line\":49,\"text\":\"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\":\\\"$REMOTE_ARCH.sha256\\\" \\\"$DEST/netbird-vps-backup.tgz.sha256.remote\\\" >/dev/null\"},{\"line\":50,\"text\":\"ssh -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\" \\\"rm -f '$REMOTE_ARCH' '$REMOTE_ARCH.sha256'\\\" >/dev/null\"}],\"path\":\"/root/netbird-vps-backup.sh\",\"present\":true,\"sha256\":\"a4546d7fff40e4f7cf935e5072847e11dd02758b1075421d7e27591faf8ac6d7\"},{\"bytes\":117,\"hits\":[],\"path\":\"[SENSITIVE_PATH] -o StrictHostKeyChecking=accept-new \\\\\"},{\"line\":52,\"text\":\" -o StrictHostKeyChecking=accept-new \\\\\"},{\"line\":108,\"text\":\" -o StrictHostKeyChecking=accept-new \\\\\"}],\"path\":\"/usr/local/sbin/homelab-gitea-secondary-backup\",\"present\":true,\"sha256\":\"5e3ad06f4d7777078a557ee53c75793d29966f82e1a1f2f6cb8f4857739d9b67\"},{\"bytes\":487,\"hits\":[],\"path\":\"/etc/hosts\",\"present\":true,\"sha256\":\"c3b9101ad96911d55328b70e12e87f9b17e4ef89fce47dc619478e113c4855ec\"}],\"external_ssh_attempts\":0,\"known_hosts_queries\":[{\"file\":\"[SENSITIVE_PATH] -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\" \\\"TS='$TS' REMOTE_ARCH='$REMOTE_ARCH' bash -s\\\" <<'REMOTE'\"},{\"line\":48,\"path\":\"/root/netbird-vps-backup.sh\",\"text\":\"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\":\\\"$REMOTE_ARCH\\\" \\\"$DEST/netbird-vps-backup.tgz\\\" >/dev/null\"},{\"line\":49,\"path\":\"/root/netbird-vps-backup.sh\",\"text\":\"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\":\\\"$REMOTE_ARCH.sha256\\\" \\\"$DEST/netbird-vps-backup.tgz.sha256.remote\\\" >/dev/null\"},{\"line\":50,\"path\":\"/root/netbird-vps-backup.sh\",\"text\":\"ssh -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\\\"$KH\\\" root@\\\"$VPS_IP\\\" \\\"rm -f '$REMOTE_ARCH' '$REMOTE_ARCH.sha256'\\\" >/dev/null\"},{\"line\":663,\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.new.md\",\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"},{\"line\":663,\"path\":\"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.before.md\",\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"},{\"line\":663,\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.new.md\",\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"},{\"line\":663,\"path\":\"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.before.md\",\"text\":\"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA.\"}],\"nested_key_artifact_count\":0,\"nested_key_artifacts\":[],\"us_netbird_known_hosts_hits\":0}}\nVPS517R5R1_DECISION=PASS_NESTED_BACKUP_OR_CHANGESET_ACCESS_EVIDENCE_FOUND\nVPS517R5R1_NEXT_GATE=USE_EXACT_RECOVERED_ROUTE_OR_TARGETED_CLOUD_ESCROW_READ\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 9a07b351..544930e3 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,15 +1,15 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260918-INFRA-VPS-BACKUP-SSH-ACCESS-RECOVERY-DEEP-READONLY-517R5 +COMMAND_ID=SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1 STATUS=OK RC=0 HOST=pve01 MODE=read-only -COMPONENT=infra-vps-backup-ssh-access-recovery-deep-readonly +COMPONENT=infra-vps-nested-backup-access-rca-readonly REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=3633352884dbb7f34e440df30f9c7a041424039b871c7c2e27d1b1d41eceac14 +COMMAND_SHA256=56b16fefc6047ad4aa5f3a2caee8016d8961011c6e73b6a7e5e6f9de082c0f3b DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGE_DECLARED=false @@ -24,13 +24,13 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=6d43902ba7eed6c2c7dd6863ccf602db8a8a0d474b691a813afba3132047801a -SANITIZED_OUTPUT_SHA256=d55805086fa656730bfe4da2dcba5658f3724004714145df6d143242cf007f4f +RAW_EVIDENCE_SHA256=74ed6bbd6639b96733d914c34b7addbf13736271c1f8000221b20b729f2e50ee +SANITIZED_OUTPUT_SHA256=c5815c28c91af01291933bafdb3ee079385607b31cae310bc1744f24cb7721c1 OUTPUT_BEGIN -VPS517R5_SAFE_REPORT={"archive_inspections":[{"bytes":9925721,"errors":[],"member_count":79,"path":"/mnt/staging/homelab-control-refresh-cr0067-v1/control-bootstrap-v2-pve01-20260822T000213Z/control-bootstrap-v2-pve01-20260822T000213Z.tar.gz","sha256":"0d6adae10f4fdf507764036a5f4781072bf6ca38be9a0710d5fb7c1c57689d8d","ssh_like_members":[],"target_named_members":[]},{"bytes":10260480,"errors":[],"member_count":1339,"path":"/mnt/staging/homelab-control-refresh-cr0067-v1/control-bootstrap-v2-pve01-20260822T000213Z/control-validate/control/source/homelab-configs-current.tar","sha256":"66222dc234479869193d2b7f3f75daf52c8d8a3bbe1dfc7110dd69d37e4c54ba","ssh_like_members":[],"target_named_members":[]},{"bytes":4574340,"errors":[],"member_count":87,"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/control-bootstrap-v2-pve01-20260810T234954Z.tar.gz","sha256":"87ef9e7ea3c8cebe68a772fc08d4e047f4e9f059acf3ce8d0b5b0016cb1782d1","ssh_like_members":[],"target_named_members":[]},{"bytes":3044006,"errors":[],"member_count":84,"path":"/mnt/staging/homelab-standalone-cloud-b-20260810T225720Z-3703345/control-bootstrap-pve01-20260810T211046Z.tar.gz","sha256":"c1a6cb64b022a0909a837103f1cf30fd7ece38e0390ae59457ca136a312ac4eb","ssh_like_members":[],"target_named_members":[]},{"bytes":32522644,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260701T013054Z/netbird-vps-backup.tgz","sha256":"0226dd820cb9ede0ea9e8ea4af6cef656ffa54cfb819048c222a88f4c14d8db9","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260701T013054Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260701T013054Z/ss-udp.txt","size":500,"type":"file"},{"name":"netbird-vps-backup-work-20260701T013054Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260701T013054Z/ss-tcp.txt","size":1547,"type":"file"},{"name":"netbird-vps-backup-work-20260701T013054Z/compose-ps.txt","size":240,"type":"file"},{"name":"netbird-vps-backup-work-20260701T013054Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260701T013054Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260701T013054Z/volumes/netbird_netbird_data_.tgz","size":33723664,"type":"file"},{"name":"netbird-vps-backup-work-20260701T013054Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32522643,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260630T014000Z/netbird-vps-backup.tgz","sha256":"e10fffedaebfc722691faa8d5c1c688835cf6ab9427126c1c6a6db13668d4f72","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260630T014000Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260630T014000Z/ss-udp.txt","size":500,"type":"file"},{"name":"netbird-vps-backup-work-20260630T014000Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260630T014000Z/ss-tcp.txt","size":1547,"type":"file"},{"name":"netbird-vps-backup-work-20260630T014000Z/compose-ps.txt","size":246,"type":"file"},{"name":"netbird-vps-backup-work-20260630T014000Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260630T014000Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260630T014000Z/volumes/netbird_netbird_data_.tgz","size":33723664,"type":"file"},{"name":"netbird-vps-backup-work-20260630T014000Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32522667,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260629T013250Z/netbird-vps-backup.tgz","sha256":"fcf25ed23a7107a76d388d728432d7020b051882b581486cd3ad8cc536cfff9b","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260629T013250Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260629T013250Z/ss-udp.txt","size":500,"type":"file"},{"name":"netbird-vps-backup-work-20260629T013250Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260629T013250Z/ss-tcp.txt","size":1547,"type":"file"},{"name":"netbird-vps-backup-work-20260629T013250Z/compose-ps.txt","size":243,"type":"file"},{"name":"netbird-vps-backup-work-20260629T013250Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260629T013250Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260629T013250Z/volumes/netbird_netbird_data_.tgz","size":33723664,"type":"file"},{"name":"netbird-vps-backup-work-20260629T013250Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32521510,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260628T013400Z/netbird-vps-backup.tgz","sha256":"a3274f7105fdd08a6166c8e7488afd4a32c8a85e97a1d3ec2d2116e5b6aa978b","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260628T013400Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260628T013400Z/ss-udp.txt","size":500,"type":"file"},{"name":"netbird-vps-backup-work-20260628T013400Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260628T013400Z/ss-tcp.txt","size":1547,"type":"file"},{"name":"netbird-vps-backup-work-20260628T013400Z/compose-ps.txt","size":240,"type":"file"},{"name":"netbird-vps-backup-work-20260628T013400Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260628T013400Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260628T013400Z/volumes/netbird_netbird_data_.tgz","size":33724626,"type":"file"},{"name":"netbird-vps-backup-work-20260628T013400Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32520505,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260627T013448Z/netbird-vps-backup.tgz","sha256":"787a7df99e1abf3c6d9d7eecdf09bc60870db144dbd3f26a485a167050e8fb40","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260627T013448Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260627T013448Z/ss-udp.txt","size":500,"type":"file"},{"name":"netbird-vps-backup-work-20260627T013448Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260627T013448Z/ss-tcp.txt","size":1547,"type":"file"},{"name":"netbird-vps-backup-work-20260627T013448Z/compose-ps.txt","size":240,"type":"file"},{"name":"netbird-vps-backup-work-20260627T013448Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260627T013448Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260627T013448Z/volumes/netbird_netbird_data_.tgz","size":33724483,"type":"file"},{"name":"netbird-vps-backup-work-20260627T013448Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32520381,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260626T013139Z/netbird-vps-backup.tgz","sha256":"abc3c083bce5e29fd69cd2e98b515bc1d867686872a354973de341f63426379c","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260626T013139Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260626T013139Z/ss-udp.txt","size":500,"type":"file"},{"name":"netbird-vps-backup-work-20260626T013139Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260626T013139Z/ss-tcp.txt","size":1547,"type":"file"},{"name":"netbird-vps-backup-work-20260626T013139Z/compose-ps.txt","size":246,"type":"file"},{"name":"netbird-vps-backup-work-20260626T013139Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260626T013139Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260626T013139Z/volumes/netbird_netbird_data_.tgz","size":33724423,"type":"file"},{"name":"netbird-vps-backup-work-20260626T013139Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32521584,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260625T013019Z/netbird-vps-backup.tgz","sha256":"7662ce75d51990adc567f9e65517065197fdc44703abb2c202b85e7fee4889ab","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260625T013019Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260625T013019Z/ss-udp.txt","size":500,"type":"file"},{"name":"netbird-vps-backup-work-20260625T013019Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260625T013019Z/ss-tcp.txt","size":1547,"type":"file"},{"name":"netbird-vps-backup-work-20260625T013019Z/compose-ps.txt","size":243,"type":"file"},{"name":"netbird-vps-backup-work-20260625T013019Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260625T013019Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260625T013019Z/volumes/netbird_netbird_data_.tgz","size":33725023,"type":"file"},{"name":"netbird-vps-backup-work-20260625T013019Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32521261,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260624T013316Z/netbird-vps-backup.tgz","sha256":"0cf6fd427bcf58f8a39addc3e468269da09d7b9044083ac6f808c6e2320a2962","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260624T013316Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260624T013316Z/ss-udp.txt","size":510,"type":"file"},{"name":"netbird-vps-backup-work-20260624T013316Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260624T013316Z/ss-tcp.txt","size":1573,"type":"file"},{"name":"netbird-vps-backup-work-20260624T013316Z/compose-ps.txt","size":240,"type":"file"},{"name":"netbird-vps-backup-work-20260624T013316Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260624T013316Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260624T013316Z/volumes/netbird_netbird_data_.tgz","size":33724527,"type":"file"},{"name":"netbird-vps-backup-work-20260624T013316Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32523127,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260623T012735Z/netbird-vps-backup.tgz","sha256":"3cd9632901cce9966b7dffe678e208efa6f6da556a49889bec5bc7537a1be555","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260623T012735Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260623T012735Z/ss-udp.txt","size":510,"type":"file"},{"name":"netbird-vps-backup-work-20260623T012735Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260623T012735Z/ss-tcp.txt","size":1573,"type":"file"},{"name":"netbird-vps-backup-work-20260623T012735Z/compose-ps.txt","size":240,"type":"file"},{"name":"netbird-vps-backup-work-20260623T012735Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260623T012735Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260623T012735Z/volumes/netbird_netbird_data_.tgz","size":33725344,"type":"file"},{"name":"netbird-vps-backup-work-20260623T012735Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32524693,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260622T013530Z/netbird-vps-backup.tgz","sha256":"e9b0bfc29ff4c1509495270fa902577c2e544d058a5e4960a33103a5a461dc70","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260622T013530Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260622T013530Z/ss-udp.txt","size":510,"type":"file"},{"name":"netbird-vps-backup-work-20260622T013530Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260622T013530Z/ss-tcp.txt","size":1573,"type":"file"},{"name":"netbird-vps-backup-work-20260622T013530Z/compose-ps.txt","size":240,"type":"file"},{"name":"netbird-vps-backup-work-20260622T013530Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260622T013530Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260622T013530Z/volumes/netbird_netbird_data_.tgz","size":33725165,"type":"file"},{"name":"netbird-vps-backup-work-20260622T013530Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32525035,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260621T013330Z/netbird-vps-backup.tgz","sha256":"b7a9f697aa1a4b9138daa595d7e680467a2b8aeabb8d108e76fa174af4ef34c0","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260621T013330Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260621T013330Z/ss-udp.txt","size":510,"type":"file"},{"name":"netbird-vps-backup-work-20260621T013330Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260621T013330Z/ss-tcp.txt","size":1573,"type":"file"},{"name":"netbird-vps-backup-work-20260621T013330Z/compose-ps.txt","size":240,"type":"file"},{"name":"netbird-vps-backup-work-20260621T013330Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260621T013330Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260621T013330Z/volumes/netbird_netbird_data_.tgz","size":33725242,"type":"file"},{"name":"netbird-vps-backup-work-20260621T013330Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32524223,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260620T013220Z/netbird-vps-backup.tgz","sha256":"996bfcb3e0af4bb01fda8c92369b39e8dbabaf5a9e89f701c8fe4bcdef6aed38","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260620T013220Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260620T013220Z/ss-udp.txt","size":510,"type":"file"},{"name":"netbird-vps-backup-work-20260620T013220Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260620T013220Z/ss-tcp.txt","size":1573,"type":"file"},{"name":"netbird-vps-backup-work-20260620T013220Z/compose-ps.txt","size":240,"type":"file"},{"name":"netbird-vps-backup-work-20260620T013220Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260620T013220Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260620T013220Z/volumes/netbird_netbird_data_.tgz","size":33726202,"type":"file"},{"name":"netbird-vps-backup-work-20260620T013220Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32523842,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260619T013500Z/netbird-vps-backup.tgz","sha256":"2a9c6556baa665ff26854ebdf8636ae17f809d6e34d17282d24bf1baf30b3779","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260619T013500Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260619T013500Z/ss-udp.txt","size":510,"type":"file"},{"name":"netbird-vps-backup-work-20260619T013500Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260619T013500Z/ss-tcp.txt","size":1573,"type":"file"},{"name":"netbird-vps-backup-work-20260619T013500Z/compose-ps.txt","size":246,"type":"file"},{"name":"netbird-vps-backup-work-20260619T013500Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260619T013500Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260619T013500Z/volumes/netbird_netbird_data_.tgz","size":33725130,"type":"file"},{"name":"netbird-vps-backup-work-20260619T013500Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32523362,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260618T013930Z/netbird-vps-backup.tgz","sha256":"a83aac57456099e44415bd070ee5a08d70115a0bc87d340f75269c375a4016d2","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260618T013930Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260618T013930Z/ss-udp.txt","size":500,"type":"file"},{"name":"netbird-vps-backup-work-20260618T013930Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260618T013930Z/ss-tcp.txt","size":1547,"type":"file"},{"name":"netbird-vps-backup-work-20260618T013930Z/compose-ps.txt","size":246,"type":"file"},{"name":"netbird-vps-backup-work-20260618T013930Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260618T013930Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260618T013930Z/volumes/netbird_netbird_data_.tgz","size":33724927,"type":"file"},{"name":"netbird-vps-backup-work-20260618T013930Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":32509192,"errors":[],"member_count":9,"path":"/mnt/staging/netbird-vps-backups/snapshots/20260617T074922Z/netbird-vps-backup.tgz","sha256":"8e0c6538268b4e5dc463e008e59acb9d77873873915bec74ac2a85a9d1523a84","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backup-work-20260617T074922Z","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260617T074922Z/ss-udp.txt","size":500,"type":"file"},{"name":"netbird-vps-backup-work-20260617T074922Z/root-netbird.tgz","size":13331,"type":"file"},{"name":"netbird-vps-backup-work-20260617T074922Z/ss-tcp.txt","size":1547,"type":"file"},{"name":"netbird-vps-backup-work-20260617T074922Z/compose-ps.txt","size":249,"type":"file"},{"name":"netbird-vps-backup-work-20260617T074922Z/volumes","size":0,"type":"other"},{"name":"netbird-vps-backup-work-20260617T074922Z/volumes/netbird_netbird_traefik_letsencrypt_.tgz","size":11496,"type":"file"},{"name":"netbird-vps-backup-work-20260617T074922Z/volumes/netbird_netbird_data_.tgz","size":33710197,"type":"file"},{"name":"netbird-vps-backup-work-20260617T074922Z/docker-volumes.txt","size":57,"type":"file"}]},{"bytes":115865600,"errors":[],"member_count":15805,"path":"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar","sha256":"55970712f09921ed4e400505f545f55167188690314d0b9961e60f8cb04735ce","ssh_like_members":[{"key_analysis":{"alg":null,"bytes":1858,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"443a326138292937f5b5004749dcbc699c4249310b71f2309aa2e278856fbac7","stderr_bytes":69,"stderr_sha256":"613f31c46b59982991c89514f7fa8979efb6ef275d452166ae7d391d9d14540b"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/apple.pem","size":1858,"type":"file"},{"key_analysis":{"alg":null,"bytes":1897,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"1341ecb1ea5c148a7d908c79248c05c720ae69d65ac3e98ecc339cb1b3aa815a","stderr_bytes":74,"stderr_sha256":"bb1304fed35884ce64f94908c7a2318fd621f8a20c1505dfc74caf2a06521ad0"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/globalSign.pem","size":1897,"type":"file"},{"key_analysis":{"alg":null,"bytes":6159,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"a1ec70c9797f9026ce79948c989a37b6368349e6ae30bc042747c0827f817fb8","stderr_bytes":78,"stderr_sha256":"f5b148a6c2828055cda04865246539e32e44c049c4c646a60e064292d1581665"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/googleHardware.pem","size":6159,"type":"file"},{"key_analysis":{"alg":null,"bytes":2322,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"64ae3831c582fa272d7f211aeb34894ad049d06824290d6ef24726734cd00de8","stderr_bytes":73,"stderr_sha256":"499d942d79bb9b4da1f19c69a777fc9b31d214e7b23d304bdc7928d38c62114b"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/hypersecu.pem","size":2322,"type":"file"},{"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/microsoftTpmCollection.pem","size":1687827,"type":"file"},{"key_analysis":{"alg":null,"bytes":1718,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"d86e93f3f8b5dcd19caaecdb1c3d3a1b4c811c9f1e31c830784fa5e3b3fbd4c7","stderr_bytes":68,"stderr_sha256":"289d1e88a63e74a033011088a1a5843e9c0181575190a18c2b51313181776831"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/solo.pem","size":1718,"type":"file"},{"key_analysis":{"alg":null,"bytes":1952,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"14b0aa3abc16593e70080b33b4fb1177dc148af8181a6a81c34e3347f4475f5f","stderr_bytes":70,"stderr_sha256":"3c63c6e71268e85492fa0a7dc0c3bcdc81cae48b4e8f54e11ff5e78b6daa7479"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/yubico.pem","size":1952,"type":"file"}],"target_named_members":[]},{"bytes":115865600,"errors":[],"member_count":15805,"path":"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar","sha256":"55970712f09921ed4e400505f545f55167188690314d0b9961e60f8cb04735ce","ssh_like_members":[{"key_analysis":{"alg":null,"bytes":1858,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"443a326138292937f5b5004749dcbc699c4249310b71f2309aa2e278856fbac7","stderr_bytes":69,"stderr_sha256":"efa9b149f8f7b235f2a5e63919e566bc9ed3cc59081a3e615e1ca9c7b7b528ff"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/apple.pem","size":1858,"type":"file"},{"key_analysis":{"alg":null,"bytes":1897,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"1341ecb1ea5c148a7d908c79248c05c720ae69d65ac3e98ecc339cb1b3aa815a","stderr_bytes":74,"stderr_sha256":"86fadc916cb13634152b6634facfb7935120f9224e215139f5f067d80f6046d9"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/globalSign.pem","size":1897,"type":"file"},{"key_analysis":{"alg":null,"bytes":6159,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"a1ec70c9797f9026ce79948c989a37b6368349e6ae30bc042747c0827f817fb8","stderr_bytes":78,"stderr_sha256":"1537ac5544c18d29ddb9dd0fc21555f4728f81c906d7d25cf7848b5af127d3a1"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/googleHardware.pem","size":6159,"type":"file"},{"key_analysis":{"alg":null,"bytes":2322,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"64ae3831c582fa272d7f211aeb34894ad049d06824290d6ef24726734cd00de8","stderr_bytes":73,"stderr_sha256":"eba77c0178223cd11cfea1da34a073e64604e529035bf26d26ad2d1a4511d0b9"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/hypersecu.pem","size":2322,"type":"file"},{"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/microsoftTpmCollection.pem","size":1687827,"type":"file"},{"key_analysis":{"alg":null,"bytes":1718,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"d86e93f3f8b5dcd19caaecdb1c3d3a1b4c811c9f1e31c830784fa5e3b3fbd4c7","stderr_bytes":68,"stderr_sha256":"150930443027294035507561281a7ed09bbbf741feed3a38bfd8bd8d74c7bc1b"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/solo.pem","size":1718,"type":"file"},{"key_analysis":{"alg":null,"bytes":1952,"derive_rc":255,"encrypted_or_passphrase":true,"fp":null,"private_material_present":true,"sha256":"14b0aa3abc16593e70080b33b4fb1177dc148af8181a6a81c34e3347f4475f5f","stderr_bytes":70,"stderr_sha256":"871776a06ef9117c6f6a840f31f3990a888dec5414ee1434192e513f176a38a2"},"name":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/yubico.pem","size":1952,"type":"file"}],"target_named_members":[]},{"bytes":112640,"errors":[],"member_count":83,"path":"/mnt/staging/backup-v2-vps-spb-restore/R322-20260913T172410Z-708c0acd3987b0b5/replica-1/nginx-tree.tar","sha256":"951c26553c7f0d056fc6799d1216dd777f2250cf5399d8d9b2068c30aa7bcae4","ssh_like_members":[],"target_named_members":[]},{"bytes":143360,"errors":[],"member_count":5,"path":"/mnt/staging/backup-v2-vps-spb-restore/R322-20260913T172410Z-708c0acd3987b0b5/replica-1/spb-ingress-bundle.tar","sha256":"69bce002b40607593c9b03c3793a698bf2949522af8fe0da8696d9cbc452f385","ssh_like_members":[],"target_named_members":[]},{"bytes":15858,"errors":[],"member_count":5,"path":"/mnt/staging/backup-v2-vps-spb-restore/R322-20260913T172410Z-708c0acd3987b0b5/replica-1/spb-ingress-bundle.tar.zst","sha256":"058e7b8486c7432e72ff83e89947853dc23e4d2d43d740eff1fad3d51e40357a","ssh_like_members":[],"target_named_members":[]},{"bytes":13,"errors":[],"member_count":0,"path":"/mnt/staging/backup-v2-guests/G266-20260912T072514Z-b27cf8664060529b8aad29eb9e92664d/producer/guest-110.tar.zst","sha256":"f96deff1816083fdff8bc3e46c3fe6ca46a6bb49f4d5a00627616c13237a512c","ssh_like_members":[],"target_named_members":[]},{"bytes":10260480,"errors":[],"member_count":1339,"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/control-extract/control/source/homelab-configs-current.tar","sha256":"66222dc234479869193d2b7f3f75daf52c8d8a3bbe1dfc7110dd69d37e4c54ba","ssh_like_members":[],"target_named_members":[]},{"bytes":6646,"errors":[],"member_count":43,"path":"/mnt/staging/dr-drills/p2-critical-bootstrap-retry-20260618T200504Z/extract/components/homelab-health-20260618T200433Z.tar.gz","sha256":"7a09a05411ed3263dffdec3574e9d4f1919b3b7aa774815809dd57f43e4773cd","ssh_like_members":[],"target_named_members":[{"name":"./netbird-vps-restore.txt","size":357,"type":"file"},{"name":"./netbird-vps-offhost.txt","size":240,"type":"file"},{"name":"./netbird-vps-backup.txt","size":312,"type":"file"}]},{"bytes":150436174,"errors":[],"member_count":301,"path":"/mnt/staging/dr-drills/p2-critical-bootstrap-retry-20260618T200504Z/extract/components/pve02-offhost-small-20260618T200433Z.tar.gz","sha256":"29564c0613448a27804c74182b3eadbefc133ed5bad9c6d900ac502f14b05f13","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backups-from-pve01","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z/netbird-vps-backup.tgz.sha256.remote","size":112,"type":"file"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z/netbird-vps-backup.tgz","size":32523362,"type":"file"},{"name":"netbird-vps-backups-from-pve01/snapshots/latest","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z/netbird-vps-backup.tgz.sha256.remote","size":112,"type":"file"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z/netbird-vps-backup.tgz","size":32509192,"type":"file"}]},{"bytes":60703,"errors":[],"member_count":57,"path":"/mnt/staging/dr-drills/p2-critical-bootstrap-retry-20260618T200504Z/extract/components/homelab-configs-20ed8ba-20260618T200433Z.tar.gz","sha256":"6b264b1e0334b825d39277905b5a2777ae363a6df8019c39d743eae131151af0","ssh_like_members":[],"target_named_members":[]},{"bytes":150517713,"errors":[],"member_count":6,"path":"/mnt/staging/dr-drills/p2-critical-bootstrap-20260618T195749Z/download/p0-critical-baseline-20260618T191329Z.tar.gz","sha256":"f413fcbd5641ac14b146c7d2d997b9ccfbb302467a5f22fdf0bebb8e3e9aba6c","ssh_like_members":[],"target_named_members":[]},{"bytes":6540,"errors":[],"member_count":42,"path":"/mnt/staging/dr-drills/p2-critical-bootstrap-20260618T195749Z/extract/components/homelab-health-20260618T191329Z.tar.gz","sha256":"97f40007a8b4dd73e38a0deeb1aa52c0bf7f59e692da9f793cf03b82e6f5abe4","ssh_like_members":[],"target_named_members":[{"name":"./netbird-vps-restore.txt","size":357,"type":"file"},{"name":"./netbird-vps-offhost.txt","size":240,"type":"file"},{"name":"./netbird-vps-backup.txt","size":312,"type":"file"}]},{"bytes":57020,"errors":[],"member_count":56,"path":"/mnt/staging/dr-drills/p2-critical-bootstrap-20260618T195749Z/extract/components/homelab-configs-3c148a3-20260618T191329Z.tar.gz","sha256":"8b03b10d74be02632bbf5f01f1e679a80aab43bfa7e1928c23b6eed19cb19a56","ssh_like_members":[],"target_named_members":[]},{"bytes":150436174,"errors":[],"member_count":301,"path":"/mnt/staging/dr-drills/p2-critical-bootstrap-20260618T195749Z/extract/components/pve02-offhost-small-20260618T191329Z.tar.gz","sha256":"29564c0613448a27804c74182b3eadbefc133ed5bad9c6d900ac502f14b05f13","ssh_like_members":[],"target_named_members":[{"name":"netbird-vps-backups-from-pve01","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z/netbird-vps-backup.tgz.sha256.remote","size":112,"type":"file"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260618T013930Z/netbird-vps-backup.tgz","size":32523362,"type":"file"},{"name":"netbird-vps-backups-from-pve01/snapshots/latest","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z","size":0,"type":"other"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z/netbird-vps-backup.tgz.sha256.remote","size":112,"type":"file"},{"name":"netbird-vps-backups-from-pve01/snapshots/20260617T074922Z/netbird-vps-backup.tgz","size":32509192,"type":"file"}]}],"changes_made":false,"cloud_reads":0,"cloud_writes":0,"command_id":"SUPPORT-260918-INFRA-VPS-BACKUP-SSH-ACCESS-RECOVERY-DEEP-READONLY-517R5","correlations":{"candidate_key_fingerprint_count":1,"matches_removed_old_moba_fingerprint":[],"netbird_vps_archive_count":15,"private_key_candidate_count":12,"private_key_candidates":[{"archive":"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/apple.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/globalSign.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/googleHardware.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/hypersecu.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/solo.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R351-20260914T003932Z-90e81461bd68/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/yubico.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/apple.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/globalSign.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/googleHardware.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/hypersecu.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/solo.pem","source":"archive"},{"archive":"/mnt/staging/backup-v2-xenforo-restore/R350-20260914T003018Z-0ae2d9cad407/replica-1/bundle.tar","encrypted_or_passphrase":true,"format":"OPENSSH_OR_PEM","fp":null,"member":"backup-v2/xenforo/codevipe/app/src/vendor/lbuchs/webauthn/_test/rootCertificates/yubico.pem","source":"archive"}],"pve01_removed_since_old_moba_backup_fps":[]},"decision":"PASS_BACKUP_CONTAINS_PRIVATE_KEY_CANDIDATES_NEEDS_ACCESS_CORRELATION","direct_key_artifacts":[{"bytes":142,"path":"/var/lib/homelab-backup-v2/router/trust/known_hosts","public_algorithms":["ssh-ed25519"],"public_fingerprints":["SHA256:2Tw4CU4kvwtXSIiym+699Y6W2VJVWzRUD4opXrSfOIs"],"public_key_rows":1,"sha256":"02d4e1dad1620937b7a67416a73aa182f9e80ea9c4b11f777161bc7455cf234d"}],"external_ssh_attempts":0,"mode":"read-only","pve01_key_baseline":{"[SENSITIVE_PATH] \"[SENSITIVE_PATH] \"known_hosts\","},{"line":166,"text":" \"all_active_skladchik_ssh_requires_strict_known_hosts\": true,"}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/task.json","sha256":"d3108777e5094468aa3e633740ce8a56c90ca957a9a62932be896bbe784680b0"},{"bytes":770,"hits":[{"line":6,"text":"interactive prompt through strict known_hosts SSH, verifies monitor counts and"}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/README.txt","sha256":"7e2e699c9e4a3418a6fc357585be6e3d911480071a6dd653b2ea908163da1eb4"},{"bytes":2867,"hits":[{"line":10,"text":"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] [SENSITIVE_PATH] >\"$LOCAL_STAGE/original-known-hosts.sha256\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/prepare.sh","sha256":"f95ecba71c1d569a002aab3cf0a61475585d4301df5359103e85b4ddbaded519"},{"bytes":2809,"hits":[{"line":12,"text":"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] grep -Fq 'UserKnownHostsFile=[SENSITIVE_PATH] \"$FILE\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/dry-run.sh","sha256":"15202467ebe014537a8e57db35ac1064821279efef344c9325082eab1f929a34"},{"bytes":3132,"hits":[{"line":11,"text":"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] grep -Fq 'UserKnownHostsFile=[SENSITIVE_PATH] \"$LIVE\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/verify.sh","sha256":"e93bb56ad833118c955a33d794fd9bbfe72d062f1933f63af1a13a3968fcad40"},{"bytes":2153,"hits":[{"line":10,"text":"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] TS=20260624T130206Z TYPE=vps-identity-peer-discovery RESULT=BLOCKED_NO_VERIFIED_PEER KNOWN_HOSTS_UNCHANGED=YES SECRET_PRINTED=REDACTED"}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/vps-identity-peer-discovery.txt","sha256":"b914b2da940214356bd92083226e693b2248b7c89d0b2954f8563349b63759c7"},{"bytes":242,"hits":[{"line":2,"text":"SERVICE=netbird-vps-offhost"},{"line":5,"text":"DST=/mnt/staging/offhost/netbird-vps-backups-from-pve01"}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/netbird-vps-offhost.txt","sha256":"04ddca2c2a89ab344726695210540c4ca1358033f2edd22e2c97f1ab0aff4e0b"},{"bytes":433,"hits":[{"line":1,"text":"STATUS=OK TS=2026-07-07T15:55:43Z TYPE=netbird-vps-trust-clean-seal BAD=0 WARN=0 MODE=CLEAN_SEAL_NO_AWK_TAIL TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=100.100.60.182 PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH INDEPENDENT_RUNNER_AVAILABLE=no DEPLOY_DECISION=NO_DEPLOY KNOWN_HOSTS_CHANGED=no PRIVATE_KEYS_READ=no PROBE_DEPLOYED=no REPORT=/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md"}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/netbird-vps-trust-clean-seal.txt","sha256":"092eaa2c4f3a5f623e9440135d36e6bae7d8ae46a03d380d14a5e95657812b61"},{"bytes":408,"hits":[{"line":1,"text":"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=100.100.60.182 PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md"}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/netbird-vps-trust-closure.txt","sha256":"6db8ee1ffbd2c371959917cac5ded56af3ec1829b01bd9c190e3334d6593a4a0"},{"bytes":236,"hits":[{"line":1,"text":"STATUS=OK TS=20260810T170828Z TYPE=vps-identity-audit VPS_IP=188.127.235.6 ALIAS=netbird.vpn.gram1.ru ALIAS_IP=100.100.60.182 SSH_TRUST=BLOCKED_NO_BACKED_UP_HOST_KEYS BACKUP_HOSTKEYS=NO KNOWN_HOSTS_UNCHANGED=YES SECRET_PRINTED=REDACTED"}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/health/vps-identity-audit.txt","sha256":"b339bdbf27bc8b7fd3b5e3e352151097d3facf525ab7ae6e2623cddfd1eb3178"},{"bytes":8501,"hits":[{"line":3,"text":" \"overall_health_line\": \"STATUS=OK TS=2026-07-08T09:50:07Z TYPE=overall-health BAD=0 backup-framework.txt=OK drift-check.txt=OK service-registry.txt=OK dependency-map.txt=OK golden-state.txt=OK cluster-passport.txt=OK final-readiness.txt=OK safe-autoheal.txt=OK kuma-monitor-policy.txt=OK backup-sla.txt=OK backup-coverage-matrix.txt=OK extended-appbackup.txt=OK residual-review.txt=OK forum-snuffleupagus.txt=OK incident-journal.txt=OK duty-admin-v2.txt=OK node-loss-readiness.txt=OK node-loss-runbooks.txt=OK power-loss-readiness.txt=OK power-loss-runbook.txt=OK ungated-health-backlog.txt=OK pve03-root-cleanup.txt=OK pve03-staging-retention.txt=OK pve03-staging-retention-proof.txt=OK pve03-staging-retention-cleanup.txt=OK pve03-failed-unit-cleanup.txt=OK remote-git-sops-age-readiness.txt=OK remote-git-sops-age-policy.txt=OK desired-state-remote-target-trace.txt=OK desired-state-remote-target.txt=OK desired-state.txt=OK runbooks.txt=OK alerting.txt=OK secret-exposure.txt=OK capacity-risk.txt=OK vm-local-dumps-retention.txt=OK vm-local-dumps-cloud.txt=OK vm-backup-policy.txt=OK vm170-vm171-full-strategy.txt=OK external-probe-vps.txt=OK netbird-vps-trust.txt=OK netbird-vps-trust-closure.txt=OK external-probe-runner-decision.txt=OK netbird-vps-trust-clean-seal.txt=OK live-tail-audit.txt=OK vm-backup.txt=OK\","}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/source-restore/homelab-desired-state/app-states/latest-safety-net-control-plane.json","sha256":"619da0dd797aaf966a37756bcedc3133abccd87dd52cea1e3ef4a602010f953c"},{"bytes":1535,"hits":[{"line":1,"text":"STATUS=WARN TS=2026-08-05T05:11:14Z TYPE=overall-health BAD=13 backup-framework.txt=FAIL drift-check.txt=WARN service-registry.txt=OK dependency-map.txt=OK golden-state.txt=OK cluster-passport.txt=WARN final-readiness.txt=WARN safe-autoheal.txt=OK kuma-monitor-policy.txt=OK backup-sla.txt=FAIL backup-coverage-matrix.txt=FAIL extended-appbackup.txt=FAIL residual-review.txt=OK forum-snuffleupagus.txt=OK incident-journal.txt=OK duty-admin-v2.txt=OK node-loss-readiness.txt=OK node-loss-runbooks.txt=OK power-loss-readiness.txt=OK power-loss-runbook.txt=OK ungated-health-backlog.txt=OK pve03-root-cleanup.txt=OK pve03-staging-retention.txt=OK pve03-staging-retention-proof.txt=OK pve03-staging-retention-cleanup.txt=OK pve03-failed-unit-cleanup.txt=OK remote-git-sops-age-readiness.txt=OK remote-git-sops-age-policy.txt=OK desired-state-remote-target-trace.txt=OK desired-state-remote-target.txt=OK desired-state.txt=OK runbooks.txt=OK alerting.txt=OK secret-exposure.txt=OK capacity-risk.txt=OK vm-local-dumps-retention.txt=FAIL vm-local-dumps-cloud.txt=FAIL vm-backup-policy.txt=FAIL vm170-vm171-full-strategy.txt=OK external-probe-vps.txt=OK netbird-vps-trust.txt=OK netbird-vps-trust-closure.txt=OK external-probe-runner-decision.txt=OK netbird-vps-trust-clean-seal.txt=OK live-tail-audit.txt=OK vm-backup.txt=OK cluster-admin-observer.txt=WARN cluster-admin-restricted-probes.txt=WARN cluster-admin-full-observer.txt=WARN cluster-admin-vm-mail-cloud-backup.txt=OK cluster-admin-webpanel-sync.txt=OK cluster-admin-webpanel.txt=OK"}],"path":"/mnt/staging/homelab-standalone-cloud-b-v2-20260810T230558Z-3729339/control-extract/control/source/homelab-ops-dirty-overlay/observed/source-snapshots/overall.txt","sha256":"0ec7f8bcad6d2578f209b222be1135e7fa03f801e1e07bdbb634ba5f536a101b"},{"bytes":1514,"hits":[{"line":1,"text":"STATUS=WARN TS=2026-07-15T05:11:34Z TYPE=overall-health BAD=3 backup-framework.txt=OK drift-check.txt=WARN service-registry.txt=OK dependency-map.txt=OK golden-state.txt=OK cluster-passport.txt=OK final-readiness.txt=OK safe-autoheal.txt=OK kuma-monitor-policy.txt=OK backup-sla.txt=OK backup-coverage-matrix.txt=OK extended-appbackup.txt=OK residual-review.txt=OK forum-snuffleupagus.txt=OK incident-journal.txt=OK duty-admin-v2.txt=OK node-loss-readiness.txt=OK node-loss-runbooks.txt=OK power-loss-readiness.txt=OK power-loss-runbook.txt=OK ungated-health-backlog.txt=OK pve03-root-cleanup.txt=OK pve03-staging-retention.txt=OK pve03-staging-retention-proof.txt=OK pve03-staging-retention-cleanup.txt=OK pve03-failed-unit-cleanup.txt=OK remote-git-sops-age-readiness.txt=OK remote-git-sops-age-policy.txt=OK desired-state-remote-target-trace.txt=OK desired-state-remote-target.txt=OK desired-state.txt=OK runbooks.txt=OK alerting.txt=OK secret-exposure.txt=OK capacity-risk.txt=OK vm-local-dumps-retention.txt=OK vm-local-dumps-cloud.txt=OK vm-backup-policy.txt=OK vm170-vm171-full-strategy.txt=OK external-probe-vps.txt=OK netbird-vps-trust.txt=OK netbird-vps-trust-closure.txt=OK external-probe-runner-decision.txt=OK netbird-vps-trust-clean-seal.txt=OK live-tail-audit.txt=OK vm-backup.txt=OK cluster-admin-observer.txt=OK cluster-admin-restricted-probes.txt=WARN cluster-admin-full-observer.txt=WARN cluster-admin-vm-mail-cloud-backup.txt=OK cluster-admin-webpanel-sync.txt=OK cluster-admin-webpanel.txt=OK"}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/observed/source-snapshots/overall.txt","sha256":"1273abb92f4518e490111a8c6ff75f065c721135930bc6353a6b98943e27515e"},{"bytes":29485,"hits":[{"line":145,"text":" \"required_control\": \"Skladchik reauthentication must run only through a versioned homelab-admin task using StrictHostKeyChecking=yes, the canonical known_hosts file, a pinned edge script hash, a hidden interactive prompt and a root-only rollback snapshot.\","},{"line":157,"text":" \"required_control\": \"Every active Skladchik SSH caller and its desired-state copy must be versioned, deployed and verified with StrictHostKeyChecking=yes and the canonical known_hosts file.\","}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/errors/regression-cases.json","sha256":"8051e3e761493a1b7088a0f3ed7e0aa9218673f453ca88171178364d26701f64"},{"bytes":1928,"hits":[{"line":49,"text":" \"known_hosts\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/changes/CR-2026-0018/plan.json","sha256":"6956807d81729b997b6f12419c0f4b2b1f9cc3608148a6d1c4143713c9724b07"},{"bytes":1340,"hits":[{"line":6,"text":" \"scope\": \"controlled Skladchik monitor reauthentication with strict known_hosts\","}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/changes/CR-2026-0007/plan.json","sha256":"9a1cd77ebb9a880869aa24711408a88abadddd3ac4e43b04510e8ac13ba545c2"},{"bytes":9360,"hits":[{"line":14,"text":" \"[SENSITIVE_PATH] \"known_hosts\","}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/backup-vm-cloud-quorum-cutover-v1/task.json","sha256":"150a2d8e9e654e9c3e13b110b0ac4ce25480e11dd6c5f66248d5d3599c237389"},{"bytes":2890,"hits":[{"line":7,"text":"SSH_BASE=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] scp -o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] \"$REMOTE_INSTALL\" \"root@192.168.50.$H:/tmp/homelab-vm-cloud-quorum-remote-install.cr0019\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/backup-vm-cloud-quorum-cutover-v1/phases/rollback.sh","sha256":"74d347b24079db9809abdf98f8e75b161597c432f06d4c967f099ece78187750"},{"bytes":3151,"hits":[{"line":5,"text":"SSH_BASE=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] \"known_hosts\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/backup-cloud-quorum-foundation-v1/task.json","sha256":"ba639c142591b39ee00c069d02f663b9d54ed722a9a5a82f09a8dd181cae9a20"},{"bytes":6750,"hits":[{"line":140,"text":" \"known_hosts\","}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/homelab-logrotate-namespace-latch-clearance-v1/task.json","sha256":"3a8fdfb6b4b64880012fcc3bc6fee4be6f101377310325541f9776de6d1623f7"},{"bytes":8892,"hits":[{"line":121,"text":" \"network, DNS and known_hosts\","}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/backup-scheduler-rpo-hardening-v1/task.json","sha256":"c6ec31f14a61309fd19d304b7c21dc53117b6cc69ccaff318de6f9b59ae56d99"},{"bytes":13579,"hits":[{"line":14,"text":" \"[SENSITIVE_PATH] \"known_hosts\","},{"line":166,"text":" \"all_active_skladchik_ssh_requires_strict_known_hosts\": true,"}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/task.json","sha256":"d3108777e5094468aa3e633740ce8a56c90ca957a9a62932be896bbe784680b0"},{"bytes":770,"hits":[{"line":6,"text":"interactive prompt through strict known_hosts SSH, verifies monitor counts and"}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/README.txt","sha256":"7e2e699c9e4a3418a6fc357585be6e3d911480071a6dd653b2ea908163da1eb4"},{"bytes":2867,"hits":[{"line":10,"text":"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] [SENSITIVE_PATH] >\"$LOCAL_STAGE/original-known-hosts.sha256\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/prepare.sh","sha256":"f95ecba71c1d569a002aab3cf0a61475585d4301df5359103e85b4ddbaded519"},{"bytes":2809,"hits":[{"line":12,"text":"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] grep -Fq 'UserKnownHostsFile=[SENSITIVE_PATH] \"$FILE\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/dry-run.sh","sha256":"15202467ebe014537a8e57db35ac1064821279efef344c9325082eab1f929a34"},{"bytes":3132,"hits":[{"line":11,"text":"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] grep -Fq 'UserKnownHostsFile=[SENSITIVE_PATH] \"$LIVE\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/skladchik-reports-monitor-controlled-reauth-v1/phases/verify.sh","sha256":"e93bb56ad833118c955a33d794fd9bbfe72d062f1933f63af1a13a3968fcad40"},{"bytes":2153,"hits":[{"line":10,"text":"SSH=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] \"[SENSITIVE_PATH] \"known_hosts\","}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/cluster-cloud-quorum-vm160-canary-v1/task.json","sha256":"636254d2526f0f62184d47cdb4c30c2831b11869c2000c557666f60b55d7691b"},{"bytes":3665,"hits":[{"line":8,"text":"SSH_BASE=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] [SENSITIVE_PATH] > \"$LOCAL_STAGE/original-known-hosts.sha256\""}],"path":"/mnt/staging/homelab-standalone-cloud-b-control-v2-20260811T000336Z-3938878/source-restore/homelab-ops/tasks/cluster-cloud-quorum-vm160-canary-v1/phases/prepare.sh","sha256":"ae589aaad30d2f062fd3455c54b880c4a7c2790f4b3919f4c30cb07de76e6765"},{"bytes":1972,"hits":[{"line":8,"text":"SSH_BASE=(-o BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] BatchMode=yes -o ConnectTimeout=12 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=[SENSITIVE_PATH] -VPS517R5_DECISION=PASS_BACKUP_CONTAINS_PRIVATE_KEY_CANDIDATES_NEEDS_ACCESS_CORRELATION -VPS517R5_NEXT_GATE=USE_RECOVERED_KEY_LOCALLY_IF_MATCH_ELSE_TARGET_CLOUD_BACKUP_READ_ONLY_RESTORE -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-BACKUP-SSH-ACCESS-RECOVERY-DEEP-READONLY-517R5","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} +VPS517R5R1_SAFE_REPORT={"changes_made":false,"changeset_evidence":[{"bytes":2150,"hits":[{"line":56,"text":" \"authorized_keys\","}],"path":"/var/lib/homelab-change-sets/stage4h-final-acceptance-task-contract-v1/20260714T182929Z/task.json","sha256":"eaf46f109e83ae6a13610c411c1ab0e2fbd695c21297fdc9cac1d64b3d462d34"},{"bytes":2595,"hits":[{"line":38,"text":" \"description\": \"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\","}],"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-policies.before.json","sha256":"ce6d46a01dfe14adc8b2a35a683f2771e4324b04fea611dd4f4bd0458b09d1af"},{"bytes":77451,"hits":[{"line":140,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."},{"line":141,"text":"\u0424\u0430\u043a\u0442: inventory 158 \u043f\u043e\u043a\u0430\u0437\u0430\u043b [SENSITIVE_PATH] \u0438 backup-\u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c 777 \u043d\u0430 pve01/pve02/pve03."},{"line":142,"text":"\u041d\u0443\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 [SENSITIVE_PATH]=700 \u0438 authorized_keys/authorized_keys.bak*=600, \u0437\u0430\u0442\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c before/after proof."},{"line":144,"text":"35. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432."},{"line":145,"text":"\u0424\u0430\u043a\u0442: AFTER \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u043a\u0430\u0437\u0430\u043b 777 \u0434\u043b\u044f [SENSITIVE_PATH] \u043d\u0430 pve01/pve02/pve03."},{"line":146,"text":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430: authorized_keys \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f symlink, \u0430 stat \u0431\u0435\u0437 -L \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043c \u0441\u0441\u044b\u043b\u043a\u0438 777."},{"line":662,"text":"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers."},{"line":663,"text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.new.md","sha256":"6fd516bc953cae5f2c28194b4c2393898abc439b4401e1d6fb177ae7607ecb51"},{"bytes":76486,"hits":[{"line":140,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."},{"line":141,"text":"\u0424\u0430\u043a\u0442: inventory 158 \u043f\u043e\u043a\u0430\u0437\u0430\u043b [SENSITIVE_PATH] \u0438 backup-\u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c 777 \u043d\u0430 pve01/pve02/pve03."},{"line":142,"text":"\u041d\u0443\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 [SENSITIVE_PATH]=700 \u0438 authorized_keys/authorized_keys.bak*=600, \u0437\u0430\u0442\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c before/after proof."},{"line":144,"text":"35. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432."},{"line":145,"text":"\u0424\u0430\u043a\u0442: AFTER \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u043a\u0430\u0437\u0430\u043b 777 \u0434\u043b\u044f [SENSITIVE_PATH] \u043d\u0430 pve01/pve02/pve03."},{"line":146,"text":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430: authorized_keys \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f symlink, \u0430 stat \u0431\u0435\u0437 -L \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043c \u0441\u0441\u044b\u043b\u043a\u0438 777."},{"line":662,"text":"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers."},{"line":663,"text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.before.md","sha256":"750cb4d51300df08a00173c1dea6987078529a87b7eaad2cb89bc9c78fcf2d20"},{"bytes":26777,"hits":[{"line":73,"text":"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])"},{"line":74,"text":"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)"}],"path":"/var/lib/homelab-change-sets/crypto-portfolio-ui-retention-sync-closure-resume-v3/20260713T081210Z/main.sh","sha256":"00f74e2a2be46cd31c83ce89f1657545c1bfa866e53952359802d0ab121df79e"},{"bytes":318,"hits":[{"line":1,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."}],"path":"/var/lib/homelab-change-sets/homelab-ops-bootstrap-audit-v1/20260715T214930Z/error-register-tail.txt","sha256":"a940f28541fe6b47a44a0e61c0c74ca2c5e47d9f9d7631e869787a779de226c5"},{"bytes":2865,"hits":[{"line":38,"text":" \"description\": \"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\","}],"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-candidate-v1/20260715T060858Z/error-policies.candidate.json","sha256":"075ba849b67ec5f4b39179ecfe83ea98b3a493aee3987d0530de88d4447ded95"},{"bytes":32437,"hits":[{"line":80,"text":"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])"},{"line":81,"text":"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)"}],"path":"/var/lib/homelab-change-sets/crypto-portfolio-ui-production-closure/20260713T075748Z/main.sh","sha256":"452b1c98604fc800cd1f395b787242dce7d5f6534b565381f910e4d2d1d480f3"},{"bytes":2595,"hits":[{"line":38,"text":" \"description\": \"accept-new, StrictHostKeyChecking=no and unverified ssh-keyscan are forbidden.\","}],"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-policies.before.json","sha256":"ce6d46a01dfe14adc8b2a35a683f2771e4324b04fea611dd4f4bd0458b09d1af"},{"bytes":77979,"hits":[{"line":140,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."},{"line":141,"text":"\u0424\u0430\u043a\u0442: inventory 158 \u043f\u043e\u043a\u0430\u0437\u0430\u043b [SENSITIVE_PATH] \u0438 backup-\u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c 777 \u043d\u0430 pve01/pve02/pve03."},{"line":142,"text":"\u041d\u0443\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 [SENSITIVE_PATH]=700 \u0438 authorized_keys/authorized_keys.bak*=600, \u0437\u0430\u0442\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c before/after proof."},{"line":144,"text":"35. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432."},{"line":145,"text":"\u0424\u0430\u043a\u0442: AFTER \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u043a\u0430\u0437\u0430\u043b 777 \u0434\u043b\u044f [SENSITIVE_PATH] \u043d\u0430 pve01/pve02/pve03."},{"line":146,"text":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430: authorized_keys \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f symlink, \u0430 stat \u0431\u0435\u0437 -L \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043c \u0441\u0441\u044b\u043b\u043a\u0438 777."},{"line":662,"text":"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers."},{"line":663,"text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.new.md","sha256":"ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc"},{"bytes":76486,"hits":[{"line":140,"text":"33. Security finding: root authorized_keys \u043d\u0430 PVE-\u043d\u043e\u0434\u0430\u0445 \u0438\u043c\u0435\u043b \u043f\u0440\u0430\u0432\u0430 777."},{"line":141,"text":"\u0424\u0430\u043a\u0442: inventory 158 \u043f\u043e\u043a\u0430\u0437\u0430\u043b [SENSITIVE_PATH] \u0438 backup-\u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c 777 \u043d\u0430 pve01/pve02/pve03."},{"line":142,"text":"\u041d\u0443\u0436\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 [SENSITIVE_PATH]=700 \u0438 authorized_keys/authorized_keys.bak*=600, \u0437\u0430\u0442\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c before/after proof."},{"line":144,"text":"35. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438: 160_PVE_ROOT_AUTHORIZED_KEYS_PERMISSIONS_FIXED \u043d\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432."},{"line":145,"text":"\u0424\u0430\u043a\u0442: AFTER \u0432\u0441\u0451 \u0435\u0449\u0451 \u043f\u043e\u043a\u0430\u0437\u0430\u043b 777 \u0434\u043b\u044f [SENSITIVE_PATH] \u043d\u0430 pve01/pve02/pve03."},{"line":146,"text":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u043f\u0440\u0438\u0447\u0438\u043d\u0430: authorized_keys \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f symlink, \u0430 stat \u0431\u0435\u0437 -L \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0435\u0436\u0438\u043c \u0441\u0441\u044b\u043b\u043a\u0438 777."},{"line":662,"text":"- Do not treat e3qxxx.netbird.selfhosted / 100.100.125.70 and e3qxxx-183-106.netbird.selfhosted / 100.100.183.106 as VPS egress nodes; they are user mobile peers."},{"line":663,"text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.before.md","sha256":"750cb4d51300df08a00173c1dea6987078529a87b7eaad2cb89bc9c78fcf2d20"},{"bytes":23331,"hits":[{"line":104,"text":"SSH=(ssh -n -T -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes debian@[PRIVATE_IP])"},{"line":105,"text":"SCP=(scp -q -o BatchMode=yes -o ConnectTimeout=8 -o StrictHostKeyChecking=yes)"}],"path":"/var/lib/homelab-change-sets/crypto-portfolio-ui-retention-sync-closure-resume/20260713T080320Z/main.sh","sha256":"9a4ce646203394e1b978efd40471d6ffa7b85212f4fb6a463f1c48b5f192194b"}],"cloud_reads":0,"cloud_writes":0,"command_id":"SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1","decision":"PASS_NESTED_BACKUP_OR_CHANGESET_ACCESS_EVIDENCE_FOUND","exact_files":[{"bytes":2811,"hits":[{"line":5,"text":"KH=\"[SENSITIVE_PATH] -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\" \"TS='$TS' REMOTE_ARCH='$REMOTE_ARCH' bash -s\" <<'REMOTE'"},{"line":48,"text":"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\":\"$REMOTE_ARCH\" \"$DEST/netbird-vps-backup.tgz\" >/dev/null"},{"line":49,"text":"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\":\"$REMOTE_ARCH.sha256\" \"$DEST/netbird-vps-backup.tgz.sha256.remote\" >/dev/null"},{"line":50,"text":"ssh -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\" \"rm -f '$REMOTE_ARCH' '$REMOTE_ARCH.sha256'\" >/dev/null"}],"path":"/root/netbird-vps-backup.sh","present":true,"sha256":"a4546d7fff40e4f7cf935e5072847e11dd02758b1075421d7e27591faf8ac6d7"},{"bytes":117,"hits":[],"path":"[SENSITIVE_PATH] -o StrictHostKeyChecking=accept-new \\"},{"line":52,"text":" -o StrictHostKeyChecking=accept-new \\"},{"line":108,"text":" -o StrictHostKeyChecking=accept-new \\"}],"path":"/usr/local/sbin/homelab-gitea-secondary-backup","present":true,"sha256":"5e3ad06f4d7777078a557ee53c75793d29966f82e1a1f2f6cb8f4857739d9b67"},{"bytes":487,"hits":[],"path":"/etc/hosts","present":true,"sha256":"c3b9101ad96911d55328b70e12e87f9b17e4ef89fce47dc619478e113c4855ec"}],"external_ssh_attempts":0,"known_hosts_queries":[{"file":"[SENSITIVE_PATH] -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\" \"TS='$TS' REMOTE_ARCH='$REMOTE_ARCH' bash -s\" <<'REMOTE'"},{"line":48,"path":"/root/netbird-vps-backup.sh","text":"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\":\"$REMOTE_ARCH\" \"$DEST/netbird-vps-backup.tgz\" >/dev/null"},{"line":49,"path":"/root/netbird-vps-backup.sh","text":"scp -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\":\"$REMOTE_ARCH.sha256\" \"$DEST/netbird-vps-backup.tgz.sha256.remote\" >/dev/null"},{"line":50,"path":"/root/netbird-vps-backup.sh","text":"ssh -o BatchMode=yes -o ConnectTimeout=10 -o StrictHostKeyChecking=yes -o UserKnownHostsFile=\"$KH\" root@\"$VPS_IP\" \"rm -f '$REMOTE_ARCH' '$REMOTE_ARCH.sha256'\" >/dev/null"},{"line":663,"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.new.md","text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."},{"line":663,"path":"/var/lib/homelab-change-sets/homelab-admin-pg-char-guard-install-v1/20260715T061637Z/error-register.before.md","text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."},{"line":663,"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.new.md","text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."},{"line":663,"path":"/var/lib/homelab-change-sets/homelab-admin-err014-install-v2/20260715T062705Z/error-register.before.md","text":"- Correct egress candidates are relay.pvepro.ru / relay.netbird.selfhosted / 100.100.19.1 for Moldova and mail.pvepro.ru / mail.netbird.selfhosted / 100.100.147.204 for USA."}],"nested_key_artifact_count":0,"nested_key_artifacts":[],"us_netbird_known_hosts_hits":0}} +VPS517R5R1_DECISION=PASS_NESTED_BACKUP_OR_CHANGESET_ACCESS_EVIDENCE_FOUND +VPS517R5R1_NEXT_GATE=USE_EXACT_RECOVERED_ROUTE_OR_TARGETED_CLOUD_ESCROW_READ +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260918-INFRA-VPS-NESTED-BACKUP-ACCESS-RCA-READONLY-517R5R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END