runtime: publish SUPPORT-261008-CT112-PVE-CLUSTER-HOSTKEY-ANCHOR-99852R1

2026-10-08 03:50:08 +00:00
parent b12aa70932
commit 6f66d99bed
4 changed files with 133 additions and 26 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-261008-CT112-PVE-CLUSTER-HOSTKEY-ANCHOR-99852R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "ct112-pve-cluster-hostkey-anchor",
+  "started_at_utc": "2026-10-08T03:50:07Z",
+  "finished_at_utc": "2026-10-08T03:50:07Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "b0c2ada0cce62024026d61d8f37096d47ed0d4f61ae8ae8f382bb56c9d2e2ac0",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "c34ecd0b61970ed1ec011a156b9f3265f960b9ab2dd579d5ba42832902d6f1e3",
+  "sanitized_output_sha256": "c34ecd0b61970ed1ec011a156b9f3265f960b9ab2dd579d5ba42832902d6f1e3",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "CT112_PVE_CLUSTER_HOSTKEY_ANCHOR=V1\nMODE=read-only\nNO_PRODUCTION_OR_BACKUP_OR_VM_CHANGE=true\nPRODUCTION_WRITE_AUTHORIZED=false\nINDEPENDENT_OOB_HOSTKEY_ATTESTED=false\nSSH_TRANSPORT=LEGACY_DYNAMIC_FINGERPRINT_READONLY_ONLY\nNODE_ID_MATCH=true\nHOST_ED25519_COMMITMENT_MATCHES_EXACT_GITEA_99851=true\nCLUSTER_PIN_SOURCE=PVE_NODE_PIN\nCLUSTER_PIN_FILE_PRESENT=true\nCLUSTER_PIN_FORMAT_PARSE=PASS\nCLUSTER_PIN_UNKNOWN_ALGORITHM_COUNT=0\nCLUSTER_PIN_ALGORITHM_COUNT=1\nPVE_CLUSTER_ED25519_HOSTKEY_PIN_RESULT=NO_CLUSTER_PIN\nPVE_CLUSTER_RSA_HOSTKEY_PIN_RESULT=MATCH\nPVE_CLUSTER_ECDSA_HOSTKEY_PIN_RESULT=NO_CLUSTER_PIN\nPVE_CLUSTER_AT_LEAST_ONE_HISTORIC_PIN_MATCH=true\nPVE_CLUSTER_ANY_PIN_CONTRADICTION=false\nCLUSTER_PIN_REACHABILITY_LIMIT=PVE_CLUSTER_DATA_NOT_OFFBAND_PROOF\nINDEPENDENT_OOB_HOSTKEY_ATTESTED=false\nDECISION=PASS_PVE_HISTORIC_KEY_MATCH_NO_WRITE\nNEXT_GATE=CORROBORATE_CLIENT_KEY_AND_INDEPENDENT_PROVENANCE\nDIAGNOSTIC_COMPLETED=true\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_PRODUCTION_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261008-CT112-PVE-CLUSTER-HOSTKEY-ANCHOR-99852R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nCT112_PVE_CLUSTER_HOSTKEY_PYTHON_RC=0\n"
+}
@@ -0,0 +1,62 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-261008-CT112-PVE-CLUSTER-HOSTKEY-ANCHOR-99852R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=ct112-pve-cluster-hostkey-anchor
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=b0c2ada0cce62024026d61d8f37096d47ed0d4f61ae8ae8f382bb56c9d2e2ac0
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=c34ecd0b61970ed1ec011a156b9f3265f960b9ab2dd579d5ba42832902d6f1e3
+SANITIZED_OUTPUT_SHA256=c34ecd0b61970ed1ec011a156b9f3265f960b9ab2dd579d5ba42832902d6f1e3
+OUTPUT_BEGIN
+CT112_PVE_CLUSTER_HOSTKEY_ANCHOR=V1
+MODE=read-only
+NO_PRODUCTION_OR_BACKUP_OR_VM_CHANGE=true
+PRODUCTION_WRITE_AUTHORIZED=false
+INDEPENDENT_OOB_HOSTKEY_ATTESTED=false
+SSH_TRANSPORT=LEGACY_DYNAMIC_FINGERPRINT_READONLY_ONLY
+NODE_ID_MATCH=true
+HOST_ED25519_COMMITMENT_MATCHES_EXACT_GITEA_99851=true
+CLUSTER_PIN_SOURCE=PVE_NODE_PIN
+CLUSTER_PIN_FILE_PRESENT=true
+CLUSTER_PIN_FORMAT_PARSE=PASS
+CLUSTER_PIN_UNKNOWN_ALGORITHM_COUNT=0
+CLUSTER_PIN_ALGORITHM_COUNT=1
+PVE_CLUSTER_ED25519_HOSTKEY_PIN_RESULT=NO_CLUSTER_PIN
+PVE_CLUSTER_RSA_HOSTKEY_PIN_RESULT=MATCH
+PVE_CLUSTER_ECDSA_HOSTKEY_PIN_RESULT=NO_CLUSTER_PIN
+PVE_CLUSTER_AT_LEAST_ONE_HISTORIC_PIN_MATCH=true
+PVE_CLUSTER_ANY_PIN_CONTRADICTION=false
+CLUSTER_PIN_REACHABILITY_LIMIT=PVE_CLUSTER_DATA_NOT_OFFBAND_PROOF
+INDEPENDENT_OOB_HOSTKEY_ATTESTED=false
+DECISION=PASS_PVE_HISTORIC_KEY_MATCH_NO_WRITE
+NEXT_GATE=CORROBORATE_CLIENT_KEY_AND_INDEPENDENT_PROVENANCE
+DIAGNOSTIC_COMPLETED=true
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_PRODUCTION_MUTATION
+END_MARKER=true
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261008-CT112-PVE-CLUSTER-HOSTKEY-ANCHOR-99852R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+CT112_PVE_CLUSTER_HOSTKEY_PYTHON_RC=0
+
+OUTPUT_END
+CHAT_OUTPUT_END
@@ -1,19 +1,19 @@
 {
  "schema_version": 1,
  "channel": "homelab-runtime",
-  "command_id": "SUPPORT-261008-CT112-GITEA-HOSTKEY-ANCHOR-99851R1",
+  "command_id": "SUPPORT-261008-CT112-PVE-CLUSTER-HOSTKEY-ANCHOR-99852R1",
  "status": "OK",
  "rc": 0,
  "host": "pve01",
  "mode": "read-only",
-  "component": "ct112-gitea-hostkey-anchor",
-  "started_at_utc": "2026-10-08T03:43:51Z",
-  "finished_at_utc": "2026-10-08T03:43:51Z",
+  "component": "ct112-pve-cluster-hostkey-anchor",
+  "started_at_utc": "2026-10-08T03:50:07Z",
+  "finished_at_utc": "2026-10-08T03:50:07Z",
  "reference_register_checked": true,
  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
  "error_register_checked": true,
  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "3917bb82e356edb572a69a3adb266f5a76edba983d1448a0d64913a1eb309b3f",
+  "command_sha256": "b0c2ada0cce62024026d61d8f37096d47ed0d4f61ae8ae8f382bb56c9d2e2ac0",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
@@ -30,9 +30,9 @@
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "b84bfb56e53e7fafdbbd8c03d5160a6f733eab681707f046158d90408f834d68",
-  "sanitized_output_sha256": "b84bfb56e53e7fafdbbd8c03d5160a6f733eab681707f046158d90408f834d68",
+  "raw_evidence_sha256": "c34ecd0b61970ed1ec011a156b9f3265f960b9ab2dd579d5ba42832902d6f1e3",
+  "sanitized_output_sha256": "c34ecd0b61970ed1ec011a156b9f3265f960b9ab2dd579d5ba42832902d6f1e3",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "CT112_GITEA_HOSTKEY_COMMITMENT=V1\nMODE=read-only\nNO_PRODUCTION_OR_BACKUP_OR_VM_CHANGE=true\nSSH_TRANSPORT_DURING_READONLY=DYNAMIC_FINGERPRINT_UNATTESTED\nPRODUCTION_WRITE_AUTHORIZED=false\nNODE_ID_MATCH=true\nSERVER_ED25519_PUBLIC_KEY_COMMITMENT_SHA256=4bba2d1ae5bc2d9851c2832909fc8740a715d14c59640ed3cccb7bd21e8a4735\nCOMMITMENT_CONSTRUCTION=SHA256_OF_SHA256_OF_OPENSSH_ED25519_BLOB\nPUBKEY_OWNER_ROOT_AND_NOT_WORLD_WRITABLE=true\nOPENSSH_KEYGEN_INDEPENDENT_ALGORITHM_MATCH=true\nSSH_DAEMON_ED25519_KEY_DECLARED=true\nINDEPENDENT_ATTESTATION_COMPLETED=false\nGITEA_PUBLICATION_PROVENANCE_PENDING_VERIFICATION=true\nNEXT_GATE=CHECK_GITEA_EXACT_RESULT_PUBLISHER_AND_PIN_CLIENT_HOSTKEY_BEFORE_WRITE\nDECISION=PASS_PUBLIC_KEY_COMMITMENT_ONLY_NO_WRITE_AUTHORIZATION\nDIAGNOSTIC_COMPLETED=true\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_PRODUCTION_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261008-CT112-GITEA-HOSTKEY-ANCHOR-99851R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nCT112_HOSTKEY_PYTHON_RC=0\n"
+  "output": "CT112_PVE_CLUSTER_HOSTKEY_ANCHOR=V1\nMODE=read-only\nNO_PRODUCTION_OR_BACKUP_OR_VM_CHANGE=true\nPRODUCTION_WRITE_AUTHORIZED=false\nINDEPENDENT_OOB_HOSTKEY_ATTESTED=false\nSSH_TRANSPORT=LEGACY_DYNAMIC_FINGERPRINT_READONLY_ONLY\nNODE_ID_MATCH=true\nHOST_ED25519_COMMITMENT_MATCHES_EXACT_GITEA_99851=true\nCLUSTER_PIN_SOURCE=PVE_NODE_PIN\nCLUSTER_PIN_FILE_PRESENT=true\nCLUSTER_PIN_FORMAT_PARSE=PASS\nCLUSTER_PIN_UNKNOWN_ALGORITHM_COUNT=0\nCLUSTER_PIN_ALGORITHM_COUNT=1\nPVE_CLUSTER_ED25519_HOSTKEY_PIN_RESULT=NO_CLUSTER_PIN\nPVE_CLUSTER_RSA_HOSTKEY_PIN_RESULT=MATCH\nPVE_CLUSTER_ECDSA_HOSTKEY_PIN_RESULT=NO_CLUSTER_PIN\nPVE_CLUSTER_AT_LEAST_ONE_HISTORIC_PIN_MATCH=true\nPVE_CLUSTER_ANY_PIN_CONTRADICTION=false\nCLUSTER_PIN_REACHABILITY_LIMIT=PVE_CLUSTER_DATA_NOT_OFFBAND_PROOF\nINDEPENDENT_OOB_HOSTKEY_ATTESTED=false\nDECISION=PASS_PVE_HISTORIC_KEY_MATCH_NO_WRITE\nNEXT_GATE=CORROBORATE_CLIENT_KEY_AND_INDEPENDENT_PROVENANCE\nDIAGNOSTIC_COMPLETED=true\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_PRODUCTION_MUTATION\nEND_MARKER=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261008-CT112-PVE-CLUSTER-HOSTKEY-ANCHOR-99852R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nCT112_PVE_CLUSTER_HOSTKEY_PYTHON_RC=0\n"
 }
@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-261008-CT112-GITEA-HOSTKEY-ANCHOR-99851R1
+COMMAND_ID=SUPPORT-261008-CT112-PVE-CLUSTER-HOSTKEY-ANCHOR-99852R1
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=ct112-gitea-hostkey-anchor
+COMPONENT=ct112-pve-cluster-hostkey-anchor
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=3917bb82e356edb572a69a3adb266f5a76edba983d1448a0d64913a1eb309b3f
+COMMAND_SHA256=b0c2ada0cce62024026d61d8f37096d47ed0d4f61ae8ae8f382bb56c9d2e2ac0
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,32 +24,39 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=b84bfb56e53e7fafdbbd8c03d5160a6f733eab681707f046158d90408f834d68
-SANITIZED_OUTPUT_SHA256=b84bfb56e53e7fafdbbd8c03d5160a6f733eab681707f046158d90408f834d68
+RAW_EVIDENCE_SHA256=c34ecd0b61970ed1ec011a156b9f3265f960b9ab2dd579d5ba42832902d6f1e3
+SANITIZED_OUTPUT_SHA256=c34ecd0b61970ed1ec011a156b9f3265f960b9ab2dd579d5ba42832902d6f1e3
 OUTPUT_BEGIN
-CT112_GITEA_HOSTKEY_COMMITMENT=V1
+CT112_PVE_CLUSTER_HOSTKEY_ANCHOR=V1
 MODE=read-only
 NO_PRODUCTION_OR_BACKUP_OR_VM_CHANGE=true
-SSH_TRANSPORT_DURING_READONLY=DYNAMIC_FINGERPRINT_UNATTESTED
 PRODUCTION_WRITE_AUTHORIZED=false
+INDEPENDENT_OOB_HOSTKEY_ATTESTED=false
+SSH_TRANSPORT=LEGACY_DYNAMIC_FINGERPRINT_READONLY_ONLY
 NODE_ID_MATCH=true
-SERVER_ED25519_PUBLIC_KEY_COMMITMENT_SHA256=4bba2d1ae5bc2d9851c2832909fc8740a715d14c59640ed3cccb7bd21e8a4735
-COMMITMENT_CONSTRUCTION=SHA256_OF_SHA256_OF_OPENSSH_ED25519_BLOB
-PUBKEY_OWNER_ROOT_AND_NOT_WORLD_WRITABLE=true
-OPENSSH_KEYGEN_INDEPENDENT_ALGORITHM_MATCH=true
-SSH_DAEMON_ED25519_KEY_DECLARED=true
-INDEPENDENT_ATTESTATION_COMPLETED=false
-GITEA_PUBLICATION_PROVENANCE_PENDING_VERIFICATION=true
-NEXT_GATE=CHECK_GITEA_EXACT_RESULT_PUBLISHER_AND_PIN_CLIENT_HOSTKEY_BEFORE_WRITE
-DECISION=PASS_PUBLIC_KEY_COMMITMENT_ONLY_NO_WRITE_AUTHORIZATION
+HOST_ED25519_COMMITMENT_MATCHES_EXACT_GITEA_99851=true
+CLUSTER_PIN_SOURCE=PVE_NODE_PIN
+CLUSTER_PIN_FILE_PRESENT=true
+CLUSTER_PIN_FORMAT_PARSE=PASS
+CLUSTER_PIN_UNKNOWN_ALGORITHM_COUNT=0
+CLUSTER_PIN_ALGORITHM_COUNT=1
+PVE_CLUSTER_ED25519_HOSTKEY_PIN_RESULT=NO_CLUSTER_PIN
+PVE_CLUSTER_RSA_HOSTKEY_PIN_RESULT=MATCH
+PVE_CLUSTER_ECDSA_HOSTKEY_PIN_RESULT=NO_CLUSTER_PIN
+PVE_CLUSTER_AT_LEAST_ONE_HISTORIC_PIN_MATCH=true
+PVE_CLUSTER_ANY_PIN_CONTRADICTION=false
+CLUSTER_PIN_REACHABILITY_LIMIT=PVE_CLUSTER_DATA_NOT_OFFBAND_PROOF
+INDEPENDENT_OOB_HOSTKEY_ATTESTED=false
+DECISION=PASS_PVE_HISTORIC_KEY_MATCH_NO_WRITE
+NEXT_GATE=CORROBORATE_CLIENT_KEY_AND_INDEPENDENT_PROVENANCE
 DIAGNOSTIC_COMPLETED=true
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
 MUTATION_OUTCOME=NO_PRODUCTION_MUTATION
 END_MARKER=true
-HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261008-CT112-GITEA-HOSTKEY-ANCHOR-99851R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
-CT112_HOSTKEY_PYTHON_RC=0
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261008-CT112-PVE-CLUSTER-HOSTKEY-ANCHOR-99852R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+CT112_PVE_CLUSTER_HOSTKEY_PYTHON_RC=0

 OUTPUT_END
 CHAT_OUTPUT_END