From 8d8541033cb60968d2cdc92572725bc83fa72ae7 Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Sat, 19 Sep 2026 19:38:04 +0000 Subject: [PATCH] runtime: publish SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1 --- ...T-260919-PVEPRO-SECURITY-REPAIR-679R1.json | 38 ++++++ ...RT-260919-PVEPRO-SECURITY-REPAIR-679R1.txt | 85 +++++++++++++ runtime/latest.json | 26 ++-- runtime/latest.txt | 116 +++++++++--------- 4 files changed, 197 insertions(+), 68 deletions(-) create mode 100644 runtime/history/SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1.json create mode 100644 runtime/history/SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1.txt diff --git a/runtime/history/SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1.json b/runtime/history/SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1.json new file mode 100644 index 00000000..d4eb19ae --- /dev/null +++ b/runtime/history/SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "change", + "component": "pvepro-security-repair", + "started_at_utc": "2026-09-19T19:37:28Z", + "finished_at_utc": "2026-09-19T19:38:04Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "0b0c8d2cc0f92fb9694bbf0c784aabc2bae9f9c38a90e9bc37eee08f8b2ec197", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": true, + "result_contract_valid": true, + "result_contract_status": "OK", + "result_contract_error": null, + "command_rc": 0, + "changes_made": true, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "MUTATED", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756", + "sanitized_output_sha256": "bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "PVE01_IDENTITY=OK\nPRE_SITE_SHA=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7\nPRE_HTTP_SRC=200\nPRE_MARIADB_SOCKET_ACTIVE=active\nPRE_MARIADB_SOCKET_ENABLED=enabled\nSECURITY_PRESTATE_OK=true\nPUBLIC_PLACEHOLDER_PRE=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600\nPRESNAPSHOT_SHUTDOWN_RC=0\nPRESECURITY_SNAPSHOT_RC=0\nSECURITY_CHANGE_TRANSPORT_RC=0\nSECURITY_CHANGE_EXITCODE=0\nSECURITY_CHANGE_OUTPUT_BEGIN\nNGINX_PRE_SHA_OK=true\nNGINX_TEST_RC=0\nNGINX_RELOAD_RC=0\nMARIADB_STOP_RC=0\nMARIADB_SOCKET_DISABLE_RC=0\nMARIADB_SOCKET_MASK_RC=0\nMARIADB_START_RC=0\nNEW_NGINX_SHA256=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e\nSECURITY_MUTATION_APPLIED=true\nSECURITY_CHANGE_OUTPUT_END\nPOSTCHECK_OUTPUT_BEGIN\nSITE_SHA=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e\nXF_SHA=d0c10d91d743e0a541d9a1b201080491dae0a8b1757866f113ef707b83403219\nACTIVE_QEMU_GUEST_AGENT=active\nACTIVE_NGINX=active\nACTIVE_PHP8_3_FPM=active\nACTIVE_MARIADB=active\nMARIADB_SOCKET_ACTIVE=inactive\nMARIADB_SOCKET_ENABLED=masked\nMARIADB_BIND_SCOPE=loopback\nMARIADB_SKIP_NETWORKING=0\nMARIADB_PORT=3306\nMARIADB_PROC_LISTENERS=[{\"family\":\"ipv4\",\"port\":3306,\"scope\":\"loopback\"}]\nGUEST_NONLOOPBACK_CONNECT=false\nGUEST_LOOPBACK_CONNECT=true\nHTTP_TESTS={\"ROOT\":\"301\",\"SRC_PHP\":\"403\",\"SRC_DIR\":\"403\",\"INTERNAL\":\"403\",\"INSTALL\":\"403\",\"DOTENV\":\"403\"}\nNGINX_TEST_RC=0\nMARIADB_PING_OK=true\nTABLES=224\nADMINS=1\nPOSTCHECK_OUTPUT_END\nPVE01_TO_VM3306_CONNECT_POST=false\nSECURITY_POSTCHECK_OK=true\nPUBLIC_PLACEHOLDER_POST=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600\nPRESECURITY_SNAPSHOT_DELETE_RC=0\nTASK_COMPLETE=true\nTASK_RESULT=PASS_PVEPRO_SECURITY_REPAIR\nMARIADB_SOCKET_ACTIVATION_DISABLED=true\nNGINX_SENSITIVE_PATHS_FIXED=true\nPUBLIC_CUTOVER=false\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1.txt b/runtime/history/SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1.txt new file mode 100644 index 00000000..034e4b3b --- /dev/null +++ b/runtime/history/SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1.txt @@ -0,0 +1,85 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=change +COMPONENT=pvepro-security-repair +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=0b0c8d2cc0f92fb9694bbf0c784aabc2bae9f9c38a90e9bc37eee08f8b2ec197 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=true +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=OK +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=true +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=MUTATED +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756 +SANITIZED_OUTPUT_SHA256=bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756 +OUTPUT_BEGIN +PVE01_IDENTITY=OK +PRE_SITE_SHA=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7 +PRE_HTTP_SRC=200 +PRE_MARIADB_SOCKET_ACTIVE=active +PRE_MARIADB_SOCKET_ENABLED=enabled +SECURITY_PRESTATE_OK=true +PUBLIC_PLACEHOLDER_PRE=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600 +PRESNAPSHOT_SHUTDOWN_RC=0 +PRESECURITY_SNAPSHOT_RC=0 +SECURITY_CHANGE_TRANSPORT_RC=0 +SECURITY_CHANGE_EXITCODE=0 +SECURITY_CHANGE_OUTPUT_BEGIN +NGINX_PRE_SHA_OK=true +NGINX_TEST_RC=0 +NGINX_RELOAD_RC=0 +MARIADB_STOP_RC=0 +MARIADB_SOCKET_DISABLE_RC=0 +MARIADB_SOCKET_MASK_RC=0 +MARIADB_START_RC=0 +NEW_NGINX_SHA256=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e +SECURITY_MUTATION_APPLIED=true +SECURITY_CHANGE_OUTPUT_END +POSTCHECK_OUTPUT_BEGIN +SITE_SHA=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e +XF_SHA=d0c10d91d743e0a541d9a1b201080491dae0a8b1757866f113ef707b83403219 +ACTIVE_QEMU_GUEST_AGENT=active +ACTIVE_NGINX=active +ACTIVE_PHP8_3_FPM=active +ACTIVE_MARIADB=active +MARIADB_SOCKET_ACTIVE=inactive +MARIADB_SOCKET_ENABLED=masked +MARIADB_BIND_SCOPE=loopback +MARIADB_SKIP_NETWORKING=0 +MARIADB_PORT=3306 +MARIADB_PROC_LISTENERS=[{"family":"ipv4","port":3306,"scope":"loopback"}] +GUEST_NONLOOPBACK_CONNECT=false +GUEST_LOOPBACK_CONNECT=true +HTTP_TESTS={"ROOT":"301","SRC_PHP":"403","SRC_DIR":"403","INTERNAL":"403","INSTALL":"403","DOTENV":"403"} +NGINX_TEST_RC=0 +MARIADB_PING_OK=true +TABLES=224 +ADMINS=1 +POSTCHECK_OUTPUT_END +PVE01_TO_VM3306_CONNECT_POST=false +SECURITY_POSTCHECK_OK=true +PUBLIC_PLACEHOLDER_POST=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600 +PRESECURITY_SNAPSHOT_DELETE_RC=0 +TASK_COMPLETE=true +TASK_RESULT=PASS_PVEPRO_SECURITY_REPAIR +MARIADB_SOCKET_ACTIVATION_DISABLED=true +NGINX_SENSITIVE_PATHS_FIXED=true +PUBLIC_CUTOVER=false +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1","status":"OK","changes_made":true,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 4a969a40..d4eb19ae 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,38 +1,38 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260919-PVEPRO-MARIADB-SOCKET-ACTIVATION-RCA-READONLY-678R1", + "command_id": "SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1", "status": "OK", "rc": 0, "host": "pve01", - "mode": "read-only", - "component": "pvepro-mariadb-socket-activation-rca-readonly", - "started_at_utc": "2026-09-19T19:31:35Z", - "finished_at_utc": "2026-09-19T19:31:38Z", + "mode": "change", + "component": "pvepro-security-repair", + "started_at_utc": "2026-09-19T19:37:28Z", + "finished_at_utc": "2026-09-19T19:38:04Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "7731c25cfc9517e71c60a7ac77a930e2000fc039f23e44a826212f9099adfc08", + "command_sha256": "0b0c8d2cc0f92fb9694bbf0c784aabc2bae9f9c38a90e9bc37eee08f8b2ec197", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, - "change_declared": false, + "change_declared": true, "result_contract_valid": true, - "result_contract_status": null, + "result_contract_status": "OK", "result_contract_error": null, "command_rc": 0, - "changes_made": false, + "changes_made": true, "rollback_started": false, "rollback_restored": null, - "mutation_outcome": "NO_MUTATION", + "mutation_outcome": "MUTATED", "sanitized": true, "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "842ab8c59208c6682acad19ee29218b99b91feb804cb393818f1a1abd63d04b9", - "sanitized_output_sha256": "842ab8c59208c6682acad19ee29218b99b91feb804cb393818f1a1abd63d04b9", + "raw_evidence_sha256": "bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756", + "sanitized_output_sha256": "bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "PVE01_IDENTITY=OK\nVM100_IP_SHA256=73bd2de6f6335b5bf0ec692c69ca3a6bc0996af3318a06fc1272ad2f5f195570\nVM100_RUNNING=true\nPVE_QGA_PING_RC=0\nPVE01_TO_VM3306_CONNECT=true\nGUEST_QGA_TRANSPORT_RC=0\nGUEST_AUDIT_EXITCODE=0\nGUEST_OUTPUT_BEGIN\nGUEST_IDENTITY=OK\nMARIADB_MAINPID_PRESENT=true\nMARIADB_EXE=/usr/sbin/mariadbd\nMARIADB_SERVICE_PROPS={\"TriggeredBy\":\"mariadb.socket\",\"Requires\":\"sysinit.target system.slice\",\"Wants\":\"\",\"After\":\"sysinit.target network.target basic.target system.slice mariadb.socket systemd-journald.socket\",\"Sockets\":\"\",\"FragmentPath\":\"/lib/systemd/system/mariadb.service\"}\nMARIADB_SOCKET_UNIT_COUNT=1\nMARIADB_SOCKET_UNIT_00={\"unit\":\"mariadb.socket\",\"LoadState\":\"loaded\",\"ActiveState\":\"active\",\"SubState\":\"running\",\"UnitFileState\":\"enabled\",\"FragmentPath\":\"/lib/systemd/system/mariadb.socket\",\"Triggers\":\"mariadb.service\",\"listen3306\":[{\"port3306\":true,\"scope\":\"wildcard\",\"kind\":\"Stream\"}]}\nSYSTEMD_LIST_SOCKETS_MATCHES=[{\"unit\":\"mariadb.service\",\"port3306\":false,\"scope\":\"n/a\"},{\"unit\":\"mariadb.service\",\"port3306\":false,\"scope\":\"n/a\"},{\"unit\":\"mariadb.service\",\"port3306\":true,\"scope\":\"wildcard\"}]\nMARIADB_PROC_LISTENERS=[{\"family\":\"ipv6\",\"port\":3306,\"scope\":\"wildcard\"}]\nMARIADB_LISTENER_INODE_SHARED_WITH_PID1_COUNT=1\nMARIADB_ENV_LISTEN_FDS_PRESENT=true\nMARIADB_ENV_LISTEN_PID_PRESENT=true\nMARIADB_ENV_LISTEN_FDNAMES_PRESENT=true\nMARIADB_EFFECTIVE_DEFAULTS=[{\"cmd\":\"mariadbd\",\"rc\":0,\"network_options\":[{\"option\":\"--bind-address\",\"value_scope\":\"loopback\"}]},{\"cmd\":\"my_print_defaults\",\"rc\":0,\"network_options\":[{\"option\":\"--bind-address\",\"value_scope\":\"loopback\"}]}]\nMARIADB_CMDLINE_NETWORK_OPTIONS=[]\nMARIADB_RUNTIME_BIND_SCOPE=loopback\nMARIADB_RUNTIME_SKIP_NETWORKING=0\nMARIADB_RUNTIME_PORT=3306\nGUEST_SELF_NONLOOPBACK_3306_CONNECT=true\nGUEST_LOOPBACK_3306_CONNECT=true\nXF_TABLE_COUNT=224\nXF_LOCAL_HTTP=301\nRCA_SOCKET_ACTIVATION_ACTIVE_WILDCARD=true\nRCA_SERVICE_SOCKET_TRIGGER_LINK=true\nRCA_LISTENER_SHARED_WITH_PID1=true\nRCA_SOCKET_ACTIVATION_CONFIRMED=true\nRCA_RUNTIME_BIND_STILL_LOOPBACK=true\nRCA_DISABLE_SOCKET_RESTART_SERVICE_PLAN_READY=true\nTASK_COMPLETE=true\nTASK_RESULT=PASS_PVEPRO_MARIADB_SOCKET_ACTIVATION_RCA\nNO_MUTATION=true\nGUEST_OUTPUT_END\nPUBLIC_PLACEHOLDER_RC=0\nPUBLIC_PLACEHOLDER_SHA256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65\nPUBLIC_PLACEHOLDER_BYTES=1600\nSOCKET_ACTIVATION_RCA_CLEAN=true\nTASK_COMPLETE=true\nTASK_RESULT=PASS_PVEPRO_MARIADB_SOCKET_ACTIVATION_RCA\nNO_MUTATION=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-PVEPRO-MARIADB-SOCKET-ACTIVATION-RCA-READONLY-678R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" + "output": "PVE01_IDENTITY=OK\nPRE_SITE_SHA=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7\nPRE_HTTP_SRC=200\nPRE_MARIADB_SOCKET_ACTIVE=active\nPRE_MARIADB_SOCKET_ENABLED=enabled\nSECURITY_PRESTATE_OK=true\nPUBLIC_PLACEHOLDER_PRE=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600\nPRESNAPSHOT_SHUTDOWN_RC=0\nPRESECURITY_SNAPSHOT_RC=0\nSECURITY_CHANGE_TRANSPORT_RC=0\nSECURITY_CHANGE_EXITCODE=0\nSECURITY_CHANGE_OUTPUT_BEGIN\nNGINX_PRE_SHA_OK=true\nNGINX_TEST_RC=0\nNGINX_RELOAD_RC=0\nMARIADB_STOP_RC=0\nMARIADB_SOCKET_DISABLE_RC=0\nMARIADB_SOCKET_MASK_RC=0\nMARIADB_START_RC=0\nNEW_NGINX_SHA256=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e\nSECURITY_MUTATION_APPLIED=true\nSECURITY_CHANGE_OUTPUT_END\nPOSTCHECK_OUTPUT_BEGIN\nSITE_SHA=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e\nXF_SHA=d0c10d91d743e0a541d9a1b201080491dae0a8b1757866f113ef707b83403219\nACTIVE_QEMU_GUEST_AGENT=active\nACTIVE_NGINX=active\nACTIVE_PHP8_3_FPM=active\nACTIVE_MARIADB=active\nMARIADB_SOCKET_ACTIVE=inactive\nMARIADB_SOCKET_ENABLED=masked\nMARIADB_BIND_SCOPE=loopback\nMARIADB_SKIP_NETWORKING=0\nMARIADB_PORT=3306\nMARIADB_PROC_LISTENERS=[{\"family\":\"ipv4\",\"port\":3306,\"scope\":\"loopback\"}]\nGUEST_NONLOOPBACK_CONNECT=false\nGUEST_LOOPBACK_CONNECT=true\nHTTP_TESTS={\"ROOT\":\"301\",\"SRC_PHP\":\"403\",\"SRC_DIR\":\"403\",\"INTERNAL\":\"403\",\"INSTALL\":\"403\",\"DOTENV\":\"403\"}\nNGINX_TEST_RC=0\nMARIADB_PING_OK=true\nTABLES=224\nADMINS=1\nPOSTCHECK_OUTPUT_END\nPVE01_TO_VM3306_CONNECT_POST=false\nSECURITY_POSTCHECK_OK=true\nPUBLIC_PLACEHOLDER_POST=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600\nPRESECURITY_SNAPSHOT_DELETE_RC=0\nTASK_COMPLETE=true\nTASK_RESULT=PASS_PVEPRO_SECURITY_REPAIR\nMARIADB_SOCKET_ACTIVATION_DISABLED=true\nNGINX_SENSITIVE_PATHS_FIXED=true\nPUBLIC_CUTOVER=false\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 21797f2e..034e4b3b 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,79 +1,85 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260919-PVEPRO-MARIADB-SOCKET-ACTIVATION-RCA-READONLY-678R1 +COMMAND_ID=SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1 STATUS=OK RC=0 HOST=pve01 -MODE=read-only -COMPONENT=pvepro-mariadb-socket-activation-rca-readonly +MODE=change +COMPONENT=pvepro-security-repair REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=7731c25cfc9517e71c60a7ac77a930e2000fc039f23e44a826212f9099adfc08 +COMMAND_SHA256=0b0c8d2cc0f92fb9694bbf0c784aabc2bae9f9c38a90e9bc37eee08f8b2ec197 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true -CHANGE_DECLARED=false +CHANGE_DECLARED=true RESULT_CONTRACT_VALID=true -RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_STATUS=OK RESULT_CONTRACT_ERROR=NONE COMMAND_RC=0 -CHANGES_MADE=false +CHANGES_MADE=true ROLLBACK_STARTED=false ROLLBACK_RESTORED=null -MUTATION_OUTCOME=NO_MUTATION +MUTATION_OUTCOME=MUTATED SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=842ab8c59208c6682acad19ee29218b99b91feb804cb393818f1a1abd63d04b9 -SANITIZED_OUTPUT_SHA256=842ab8c59208c6682acad19ee29218b99b91feb804cb393818f1a1abd63d04b9 +RAW_EVIDENCE_SHA256=bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756 +SANITIZED_OUTPUT_SHA256=bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756 OUTPUT_BEGIN PVE01_IDENTITY=OK -VM100_IP_SHA256=73bd2de6f6335b5bf0ec692c69ca3a6bc0996af3318a06fc1272ad2f5f195570 -VM100_RUNNING=true -PVE_QGA_PING_RC=0 -PVE01_TO_VM3306_CONNECT=true -GUEST_QGA_TRANSPORT_RC=0 -GUEST_AUDIT_EXITCODE=0 -GUEST_OUTPUT_BEGIN -GUEST_IDENTITY=OK -MARIADB_MAINPID_PRESENT=true -MARIADB_EXE=/usr/sbin/mariadbd -MARIADB_SERVICE_PROPS={"TriggeredBy":"mariadb.socket","Requires":"sysinit.target system.slice","Wants":"","After":"sysinit.target network.target basic.target system.slice mariadb.socket systemd-journald.socket","Sockets":"","FragmentPath":"/lib/systemd/system/mariadb.service"} -MARIADB_SOCKET_UNIT_COUNT=1 -MARIADB_SOCKET_UNIT_00={"unit":"mariadb.socket","LoadState":"loaded","ActiveState":"active","SubState":"running","UnitFileState":"enabled","FragmentPath":"/lib/systemd/system/mariadb.socket","Triggers":"mariadb.service","listen3306":[{"port3306":true,"scope":"wildcard","kind":"Stream"}]} -SYSTEMD_LIST_SOCKETS_MATCHES=[{"unit":"mariadb.service","port3306":false,"scope":"n/a"},{"unit":"mariadb.service","port3306":false,"scope":"n/a"},{"unit":"mariadb.service","port3306":true,"scope":"wildcard"}] -MARIADB_PROC_LISTENERS=[{"family":"ipv6","port":3306,"scope":"wildcard"}] -MARIADB_LISTENER_INODE_SHARED_WITH_PID1_COUNT=1 -MARIADB_ENV_LISTEN_FDS_PRESENT=true -MARIADB_ENV_LISTEN_PID_PRESENT=true -MARIADB_ENV_LISTEN_FDNAMES_PRESENT=true -MARIADB_EFFECTIVE_DEFAULTS=[{"cmd":"mariadbd","rc":0,"network_options":[{"option":"--bind-address","value_scope":"loopback"}]},{"cmd":"my_print_defaults","rc":0,"network_options":[{"option":"--bind-address","value_scope":"loopback"}]}] -MARIADB_CMDLINE_NETWORK_OPTIONS=[] -MARIADB_RUNTIME_BIND_SCOPE=loopback -MARIADB_RUNTIME_SKIP_NETWORKING=0 -MARIADB_RUNTIME_PORT=3306 -GUEST_SELF_NONLOOPBACK_3306_CONNECT=true -GUEST_LOOPBACK_3306_CONNECT=true -XF_TABLE_COUNT=224 -XF_LOCAL_HTTP=301 -RCA_SOCKET_ACTIVATION_ACTIVE_WILDCARD=true -RCA_SERVICE_SOCKET_TRIGGER_LINK=true -RCA_LISTENER_SHARED_WITH_PID1=true -RCA_SOCKET_ACTIVATION_CONFIRMED=true -RCA_RUNTIME_BIND_STILL_LOOPBACK=true -RCA_DISABLE_SOCKET_RESTART_SERVICE_PLAN_READY=true +PRE_SITE_SHA=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7 +PRE_HTTP_SRC=200 +PRE_MARIADB_SOCKET_ACTIVE=active +PRE_MARIADB_SOCKET_ENABLED=enabled +SECURITY_PRESTATE_OK=true +PUBLIC_PLACEHOLDER_PRE=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600 +PRESNAPSHOT_SHUTDOWN_RC=0 +PRESECURITY_SNAPSHOT_RC=0 +SECURITY_CHANGE_TRANSPORT_RC=0 +SECURITY_CHANGE_EXITCODE=0 +SECURITY_CHANGE_OUTPUT_BEGIN +NGINX_PRE_SHA_OK=true +NGINX_TEST_RC=0 +NGINX_RELOAD_RC=0 +MARIADB_STOP_RC=0 +MARIADB_SOCKET_DISABLE_RC=0 +MARIADB_SOCKET_MASK_RC=0 +MARIADB_START_RC=0 +NEW_NGINX_SHA256=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e +SECURITY_MUTATION_APPLIED=true +SECURITY_CHANGE_OUTPUT_END +POSTCHECK_OUTPUT_BEGIN +SITE_SHA=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e +XF_SHA=d0c10d91d743e0a541d9a1b201080491dae0a8b1757866f113ef707b83403219 +ACTIVE_QEMU_GUEST_AGENT=active +ACTIVE_NGINX=active +ACTIVE_PHP8_3_FPM=active +ACTIVE_MARIADB=active +MARIADB_SOCKET_ACTIVE=inactive +MARIADB_SOCKET_ENABLED=masked +MARIADB_BIND_SCOPE=loopback +MARIADB_SKIP_NETWORKING=0 +MARIADB_PORT=3306 +MARIADB_PROC_LISTENERS=[{"family":"ipv4","port":3306,"scope":"loopback"}] +GUEST_NONLOOPBACK_CONNECT=false +GUEST_LOOPBACK_CONNECT=true +HTTP_TESTS={"ROOT":"301","SRC_PHP":"403","SRC_DIR":"403","INTERNAL":"403","INSTALL":"403","DOTENV":"403"} +NGINX_TEST_RC=0 +MARIADB_PING_OK=true +TABLES=224 +ADMINS=1 +POSTCHECK_OUTPUT_END +PVE01_TO_VM3306_CONNECT_POST=false +SECURITY_POSTCHECK_OK=true +PUBLIC_PLACEHOLDER_POST=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600 +PRESECURITY_SNAPSHOT_DELETE_RC=0 TASK_COMPLETE=true -TASK_RESULT=PASS_PVEPRO_MARIADB_SOCKET_ACTIVATION_RCA -NO_MUTATION=true -GUEST_OUTPUT_END -PUBLIC_PLACEHOLDER_RC=0 -PUBLIC_PLACEHOLDER_SHA256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65 -PUBLIC_PLACEHOLDER_BYTES=1600 -SOCKET_ACTIVATION_RCA_CLEAN=true -TASK_COMPLETE=true -TASK_RESULT=PASS_PVEPRO_MARIADB_SOCKET_ACTIVATION_RCA -NO_MUTATION=true -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-PVEPRO-MARIADB-SOCKET-ACTIVATION-RCA-READONLY-678R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} +TASK_RESULT=PASS_PVEPRO_SECURITY_REPAIR +MARIADB_SOCKET_ACTIVATION_DISABLED=true +NGINX_SENSITIVE_PATHS_FIXED=true +PUBLIC_CUTOVER=false +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1","status":"OK","changes_made":true,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END