runtime: publish NEWFI-260908-A-STAGINGDNS-APPLY2

2026-09-08 05:12:47 +00:00
parent 0b70599bdc
commit 7a89cb069e
4 changed files with 144 additions and 30 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "NEWFI-260908-A-STAGINGDNS-APPLY2",
+  "status": "BLOCKED",
+  "rc": 2,
+  "host": "pve01",
+  "mode": "change",
+  "component": "newfi-staging-cloudflare-edge-credential-dns-apply",
+  "started_at_utc": "2026-09-08T05:12:38Z",
+  "finished_at_utc": "2026-09-08T05:12:46Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "bf03fcfd32ee6364f10812970dea507df2d9304bf75627a198781d726bcc5f55",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "BLOCKED",
+  "result_contract_error": null,
+  "command_rc": 2,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c",
+  "sanitized_output_sha256": "bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "STAGINGDNS_APPLY2_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY2\nCOMPONENT=newfi-staging-cloudflare-edge-credential-dns-apply\nMODE=change\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nDISCOVERY1_HISTORY_SHA256=edf7a289f77b6580795698fdc7d82355903d24c8df42d76bf84ec8a36117b873\nPRIOR_DNS_APPLY1_HISTORY_SHA256=6ad59df4172788261d87a978a610e4b290ea86ba802cb7ebf4030100730aa633\nPORTAL_PRODUCT_STATE_GATE=PASS\nPUBLIC_DNS_PRESTATE={\"1.1.1.1/A\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63750\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t862\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"1.1.1.1/AAAA\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3743\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"1.1.1.1/CNAME\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33703\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/A\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22886\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1600\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/AAAA\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32030\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 1232\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0},\"8.8.8.8/CNAME\":{\"err\":\"\",\"out\":\";; Got answer:\\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6932\\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\\n\\n;; OPT PSEUDOSECTION:\\n; EDNS: version: 0, flags:; udp: 512\\n;; AUTHORITY SECTION:\\ngram1.ru.\\t\\t1800\\tIN\\tSOA\\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800\",\"rc\":0}}\nCLOUDFLARE_TOKEN_DISCOVERY={\"candidate_count\":0,\"scanned_files\":1486}\nEDGE_VM_IDENTITY={\"name\":\"edge-vm\",\"node\":\"pve03\",\"vmid\":130}\nEDGE_CLOUDFLARE_TOKEN_SCAN={\"candidate_count\":3,\"rc\":0,\"source_paths\":[\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\",\"/opt/npmplus/secure/taftauto_cf_certbot.ini\",\"/opt/npmplus/secure/forum_cf_token.env\"]}\nEDGE_CLOUDFLARE_ZONE_ACCESS_VALID_COUNT=1\nCLOUDFLARE_TOKEN_SELECTED={\"source_paths\":[\"/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before\"],\"valid_token_count\":1,\"zone_id_sha256\":\"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7\"}\nREFERENCE_DNS_RECORD={\"content\":\"185.225.35.6\",\"name\":\"git.gram1.ru\",\"proxied\":false,\"ttl\":1}\nREFERENCE_DNS_RECORD={\"count\":0,\"name\":\"uptime.gram1.ru\",\"state\":\"SKIP\"}\nREFERENCE_DNS_RECORD={\"count\":0,\"name\":\"gotify.gram1.ru\",\"state\":\"SKIP\"}\nREFERENCE_DNS_RECORD={\"count\":0,\"name\":\"home.gram1.ru\",\"state\":\"SKIP\"}\nDNS_BLOCKED_REASON=INSUFFICIENT_EDGE_DNS_REFERENCES\nFINAL_DECISION=BLOCKED_NEWFI_STAGING_DNS_INSUFFICIENT_EDGE_DNS_REFERENCES\nHOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"NEWFI-260908-A-STAGINGDNS-APPLY2\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"BLOCKED\",\"version\":1}\n"
+}
@@ -0,0 +1,58 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY2
+STATUS=BLOCKED
+RC=2
+HOST=pve01
+MODE=change
+COMPONENT=newfi-staging-cloudflare-edge-credential-dns-apply
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=bf03fcfd32ee6364f10812970dea507df2d9304bf75627a198781d726bcc5f55
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=BLOCKED
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=2
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c
+SANITIZED_OUTPUT_SHA256=bce41f2b0e086861c7528ac944e63d5f105cc1be50dabec87955e7bfa43aa39c
+OUTPUT_BEGIN
+STAGINGDNS_APPLY2_BEGIN=true
+COMMAND_ID=NEWFI-260908-A-STAGINGDNS-APPLY2
+COMPONENT=newfi-staging-cloudflare-edge-credential-dns-apply
+MODE=change
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+REFERENCE_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED
+RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
+DISCOVERY1_HISTORY_SHA256=edf7a289f77b6580795698fdc7d82355903d24c8df42d76bf84ec8a36117b873
+PRIOR_DNS_APPLY1_HISTORY_SHA256=6ad59df4172788261d87a978a610e4b290ea86ba802cb7ebf4030100730aa633
+PORTAL_PRODUCT_STATE_GATE=PASS
+PUBLIC_DNS_PRESTATE={"1.1.1.1/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63750\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t862\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3743\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"1.1.1.1/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33703\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/A":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22886\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1600\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/AAAA":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32030\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 1232\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0},"8.8.8.8/CNAME":{"err":"","out":";; Got answer:\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6932\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version: 0, flags:; udp: 512\n;; AUTHORITY SECTION:\ngram1.ru.\t\t1800\tIN\tSOA\tsara.ns.cloudflare.com. dns.cloudflare.com. 2413993701 10000 2400 604800 1800","rc":0}}
+CLOUDFLARE_TOKEN_DISCOVERY={"candidate_count":0,"scanned_files":1486}
+EDGE_VM_IDENTITY={"name":"edge-vm","node":"pve03","vmid":130}
+EDGE_CLOUDFLARE_TOKEN_SCAN={"candidate_count":3,"rc":0,"source_paths":["/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before","/opt/npmplus/secure/taftauto_cf_certbot.ini","/opt/npmplus/secure/forum_cf_token.env"]}
+EDGE_CLOUDFLARE_ZONE_ACCESS_VALID_COUNT=1
+CLOUDFLARE_TOKEN_SELECTED={"source_paths":["/root/cert38-narrow-migration-20260904T074428Z/credentials-38.before"],"valid_token_count":1,"zone_id_sha256":"5a88f12ebe16612b4e42f11ee57b4b95ca4a13c4abb8f0009f09babfbec927e7"}
+REFERENCE_DNS_RECORD={"content":"185.225.35.6","name":"git.gram1.ru","proxied":false,"ttl":1}
+REFERENCE_DNS_RECORD={"count":0,"name":"uptime.gram1.ru","state":"SKIP"}
+REFERENCE_DNS_RECORD={"count":0,"name":"gotify.gram1.ru","state":"SKIP"}
+REFERENCE_DNS_RECORD={"count":0,"name":"home.gram1.ru","state":"SKIP"}
+DNS_BLOCKED_REASON=INSUFFICIENT_EDGE_DNS_REFERENCES
+FINAL_DECISION=BLOCKED_NEWFI_STAGING_DNS_INSUFFICIENT_EDGE_DNS_REFERENCES
+HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"NEWFI-260908-A-STAGINGDNS-APPLY2","rollback_restored":null,"rollback_started":false,"status":"BLOCKED","version":1}
+
+OUTPUT_END
+CHAT_OUTPUT_END