runtime: publish SUPPORT-260928-USA-443-PACKET-PATH-RCA-99060R1

2026-09-28 14:39:38 +00:00
parent 2d378c72e7
commit 7d61849899
4 changed files with 260 additions and 156 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260928-USA-443-PACKET-PATH-RCA-99060R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "change",
+  "component": "usa-443-packet-path-rca",
+  "started_at_utc": "2026-09-28T14:39:20Z",
+  "finished_at_utc": "2026-09-28T14:39:37Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "95b75df4c43dbcd8d865999309738d5498584401b24e3c1953d59666054cf189",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "OK",
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "7ecde7aaf918b97217e12c29835981339641a1041f05433a1dc1842098d7a76e",
+  "sanitized_output_sha256": "7ecde7aaf918b97217e12c29835981339641a1041f05433a1dc1842098d7a76e",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "USA_443_PACKET_PATH_RCA=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_TCPDUMP_TEXT_CAPTURE_UNDER_RUN_ONLY\nGOAL=COMPARE_BAD_PVE_TLS_PATH_WITH_GOOD_MOLDOVA_TLS_PATH\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nUSA_HOSTKEY_FINGERPRINT=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nUSA_HOSTKEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nUSA_CAPTURE_START_RC=0\nCAPTURE_TCPDUMP_PRESENT=true\nCAPTURE_DEFAULT_DEV_FOUND=true\nCAPTURE_READY=true\nPVE01_DIRECT_HTTPS_RC=28\nPVE01_DIRECT_HTTPS_CODE=000\nPVE01_TO_RELAY_PROBE_SSH_RC=0\nRELAY_PROBE_RC=0\nRELAY_PROBE_CODE=200\nUSA_CAPTURE_SUMMARY_RC=0\nCAPTURE_TEXT_PRESENT=true\nCAPTURE_PVE_SOURCE_KNOWN=true\nCAPTURE_PVE_IN_PACKETS=3\nCAPTURE_PVE_OUT_PACKETS=3\nCAPTURE_PVE_IN_DATA_PACKETS=1\nCAPTURE_PVE_OUT_DATA_PACKETS=0\nCAPTURE_PVE_IN_DATA_BYTES=1448\nCAPTURE_PVE_OUT_DATA_BYTES=0\nCAPTURE_PVE_IN_MAX_DATA=1448\nCAPTURE_PVE_OUT_MAX_DATA=0\nCAPTURE_PVE_SYN_IN=1\nCAPTURE_PVE_SYN_OUT=1\nCAPTURE_PVE_RST_IN=0\nCAPTURE_PVE_RST_OUT=0\nCAPTURE_PVE_FIN_IN=0\nCAPTURE_PVE_FIN_OUT=0\nCAPTURE_RELAY_IN_PACKETS=53\nCAPTURE_RELAY_OUT_PACKETS=41\nCAPTURE_RELAY_IN_DATA_PACKETS=19\nCAPTURE_RELAY_OUT_DATA_PACKETS=33\nCAPTURE_RELAY_IN_DATA_BYTES=2202\nCAPTURE_RELAY_OUT_DATA_BYTES=13394\nCAPTURE_RELAY_IN_MAX_DATA=517\nCAPTURE_RELAY_OUT_MAX_DATA=2896\nCAPTURE_RELAY_SYN_IN=1\nCAPTURE_RELAY_SYN_OUT=1\nCAPTURE_RELAY_RST_IN=1\nCAPTURE_RELAY_RST_OUT=0\nCAPTURE_RELAY_FIN_IN=1\nCAPTURE_RELAY_FIN_OUT=1\nCAPTURE_TEMP_FILES_AFTER_CLEANUP=0\nPVE_TLS_CLIENT_PAYLOAD_REACHED_USA=true\nPVE_TLS_SERVER_PAYLOAD_LEFT_USA=false\nRELAY_TLS_CLIENT_PAYLOAD_REACHED_USA=true\nRELAY_TLS_SERVER_PAYLOAD_LEFT_USA=true\nRELAY_REFERENCE_HTTPS_200=true\nDECISION=PASS_PVE_TLS_REACHES_USA_BUT_SERVER_PATH_SOURCE_SELECTIVE\nNEXT_GATE=TRAEFIK_NFT_SOURCE_SELECTIVE_443_RCA\nTASK_RESULT=PASS_USA_443_PACKET_PATH_RCA\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_CAPTURE_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-443-PACKET-PATH-RCA-99060R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n"
+}
@@ -0,0 +1,96 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260928-USA-443-PACKET-PATH-RCA-99060R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=change
+COMPONENT=usa-443-packet-path-rca
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=95b75df4c43dbcd8d865999309738d5498584401b24e3c1953d59666054cf189
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=OK
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=ROLLED_BACK
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=7ecde7aaf918b97217e12c29835981339641a1041f05433a1dc1842098d7a76e
+SANITIZED_OUTPUT_SHA256=7ecde7aaf918b97217e12c29835981339641a1041f05433a1dc1842098d7a76e
+OUTPUT_BEGIN
+USA_443_PACKET_PATH_RCA=V1
+MODE=change
+MUTATION_BOUNDARY=TEMP_TCPDUMP_TEXT_CAPTURE_UNDER_RUN_ONLY
+GOAL=COMPARE_BAD_PVE_TLS_PATH_WITH_GOOD_MOLDOVA_TLS_PATH
+PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0
+PVE01_OPERATOR_KEY_MATCH=true
+USA_HOSTKEY_FINGERPRINT=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
+USA_HOSTKEY_MATCH=true
+RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY
+RELAY_HOSTKEY_MATCH=true
+USA_CAPTURE_START_RC=0
+CAPTURE_TCPDUMP_PRESENT=true
+CAPTURE_DEFAULT_DEV_FOUND=true
+CAPTURE_READY=true
+PVE01_DIRECT_HTTPS_RC=28
+PVE01_DIRECT_HTTPS_CODE=000
+PVE01_TO_RELAY_PROBE_SSH_RC=0
+RELAY_PROBE_RC=0
+RELAY_PROBE_CODE=200
+USA_CAPTURE_SUMMARY_RC=0
+CAPTURE_TEXT_PRESENT=true
+CAPTURE_PVE_SOURCE_KNOWN=true
+CAPTURE_PVE_IN_PACKETS=3
+CAPTURE_PVE_OUT_PACKETS=3
+CAPTURE_PVE_IN_DATA_PACKETS=1
+CAPTURE_PVE_OUT_DATA_PACKETS=0
+CAPTURE_PVE_IN_DATA_BYTES=1448
+CAPTURE_PVE_OUT_DATA_BYTES=0
+CAPTURE_PVE_IN_MAX_DATA=1448
+CAPTURE_PVE_OUT_MAX_DATA=0
+CAPTURE_PVE_SYN_IN=1
+CAPTURE_PVE_SYN_OUT=1
+CAPTURE_PVE_RST_IN=0
+CAPTURE_PVE_RST_OUT=0
+CAPTURE_PVE_FIN_IN=0
+CAPTURE_PVE_FIN_OUT=0
+CAPTURE_RELAY_IN_PACKETS=53
+CAPTURE_RELAY_OUT_PACKETS=41
+CAPTURE_RELAY_IN_DATA_PACKETS=19
+CAPTURE_RELAY_OUT_DATA_PACKETS=33
+CAPTURE_RELAY_IN_DATA_BYTES=2202
+CAPTURE_RELAY_OUT_DATA_BYTES=13394
+CAPTURE_RELAY_IN_MAX_DATA=517
+CAPTURE_RELAY_OUT_MAX_DATA=2896
+CAPTURE_RELAY_SYN_IN=1
+CAPTURE_RELAY_SYN_OUT=1
+CAPTURE_RELAY_RST_IN=1
+CAPTURE_RELAY_RST_OUT=0
+CAPTURE_RELAY_FIN_IN=1
+CAPTURE_RELAY_FIN_OUT=1
+CAPTURE_TEMP_FILES_AFTER_CLEANUP=0
+PVE_TLS_CLIENT_PAYLOAD_REACHED_USA=true
+PVE_TLS_SERVER_PAYLOAD_LEFT_USA=false
+RELAY_TLS_CLIENT_PAYLOAD_REACHED_USA=true
+RELAY_TLS_SERVER_PAYLOAD_LEFT_USA=true
+RELAY_REFERENCE_HTTPS_200=true
+DECISION=PASS_PVE_TLS_REACHES_USA_BUT_SERVER_PATH_SOURCE_SELECTIVE
+NEXT_GATE=TRAEFIK_NFT_SOURCE_SELECTIVE_443_RCA
+TASK_RESULT=PASS_USA_443_PACKET_PATH_RCA
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=TEMP_CAPTURE_REMOVED
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-443-PACKET-PATH-RCA-99060R1","status":"OK","changes_made":true,"rollback_started":true,"rollback_restored":true}
+
+OUTPUT_END
+CHAT_OUTPUT_END
@@ -1 +1,38 @@
-{"schema_version":1,"channel":"homelab-runtime","command_id":"CONTEXT-AUTO-20260928T141701Z","status":"OK","rc":0,"host":"pve01","mode":"read-only","component":"cluster-context","started_at_utc":"2026-09-28T14:17:01Z","finished_at_utc":"2026-09-28T14:17:02Z","reference_register_checked":true,"reference_sha256":"5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66","error_register_checked":true,"error_register_sha256":"3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0","changes_made":false,"sanitized":true,"secrets_included":false,"private_addresses_included":false,"output":"AUTOMATIC_CLUSTER_CONTEXT_REFRESH=OK"}
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260928-USA-443-PACKET-PATH-RCA-99060R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "change",
+  "component": "usa-443-packet-path-rca",
+  "started_at_utc": "2026-09-28T14:39:20Z",
+  "finished_at_utc": "2026-09-28T14:39:37Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "95b75df4c43dbcd8d865999309738d5498584401b24e3c1953d59666054cf189",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "OK",
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "7ecde7aaf918b97217e12c29835981339641a1041f05433a1dc1842098d7a76e",
+  "sanitized_output_sha256": "7ecde7aaf918b97217e12c29835981339641a1041f05433a1dc1842098d7a76e",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "USA_443_PACKET_PATH_RCA=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_TCPDUMP_TEXT_CAPTURE_UNDER_RUN_ONLY\nGOAL=COMPARE_BAD_PVE_TLS_PATH_WITH_GOOD_MOLDOVA_TLS_PATH\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nUSA_HOSTKEY_FINGERPRINT=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE\nUSA_HOSTKEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nUSA_CAPTURE_START_RC=0\nCAPTURE_TCPDUMP_PRESENT=true\nCAPTURE_DEFAULT_DEV_FOUND=true\nCAPTURE_READY=true\nPVE01_DIRECT_HTTPS_RC=28\nPVE01_DIRECT_HTTPS_CODE=000\nPVE01_TO_RELAY_PROBE_SSH_RC=0\nRELAY_PROBE_RC=0\nRELAY_PROBE_CODE=200\nUSA_CAPTURE_SUMMARY_RC=0\nCAPTURE_TEXT_PRESENT=true\nCAPTURE_PVE_SOURCE_KNOWN=true\nCAPTURE_PVE_IN_PACKETS=3\nCAPTURE_PVE_OUT_PACKETS=3\nCAPTURE_PVE_IN_DATA_PACKETS=1\nCAPTURE_PVE_OUT_DATA_PACKETS=0\nCAPTURE_PVE_IN_DATA_BYTES=1448\nCAPTURE_PVE_OUT_DATA_BYTES=0\nCAPTURE_PVE_IN_MAX_DATA=1448\nCAPTURE_PVE_OUT_MAX_DATA=0\nCAPTURE_PVE_SYN_IN=1\nCAPTURE_PVE_SYN_OUT=1\nCAPTURE_PVE_RST_IN=0\nCAPTURE_PVE_RST_OUT=0\nCAPTURE_PVE_FIN_IN=0\nCAPTURE_PVE_FIN_OUT=0\nCAPTURE_RELAY_IN_PACKETS=53\nCAPTURE_RELAY_OUT_PACKETS=41\nCAPTURE_RELAY_IN_DATA_PACKETS=19\nCAPTURE_RELAY_OUT_DATA_PACKETS=33\nCAPTURE_RELAY_IN_DATA_BYTES=2202\nCAPTURE_RELAY_OUT_DATA_BYTES=13394\nCAPTURE_RELAY_IN_MAX_DATA=517\nCAPTURE_RELAY_OUT_MAX_DATA=2896\nCAPTURE_RELAY_SYN_IN=1\nCAPTURE_RELAY_SYN_OUT=1\nCAPTURE_RELAY_RST_IN=1\nCAPTURE_RELAY_RST_OUT=0\nCAPTURE_RELAY_FIN_IN=1\nCAPTURE_RELAY_FIN_OUT=1\nCAPTURE_TEMP_FILES_AFTER_CLEANUP=0\nPVE_TLS_CLIENT_PAYLOAD_REACHED_USA=true\nPVE_TLS_SERVER_PAYLOAD_LEFT_USA=false\nRELAY_TLS_CLIENT_PAYLOAD_REACHED_USA=true\nRELAY_TLS_SERVER_PAYLOAD_LEFT_USA=true\nRELAY_REFERENCE_HTTPS_200=true\nDECISION=PASS_PVE_TLS_REACHES_USA_BUT_SERVER_PATH_SOURCE_SELECTIVE\nNEXT_GATE=TRAEFIK_NFT_SOURCE_SELECTIVE_443_RCA\nTASK_RESULT=PASS_USA_443_PACKET_PATH_RCA\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_CAPTURE_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-443-PACKET-PATH-RCA-99060R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n"
+}