runtime: publish SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1
This commit is contained in:
@@ -0,0 +1,38 @@
|
|||||||
|
{
|
||||||
|
"schema_version": 1,
|
||||||
|
"channel": "homelab-runtime",
|
||||||
|
"command_id": "SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1",
|
||||||
|
"status": "OK",
|
||||||
|
"rc": 0,
|
||||||
|
"host": "pve01",
|
||||||
|
"mode": "change",
|
||||||
|
"component": "pvepro-security-repair",
|
||||||
|
"started_at_utc": "2026-09-19T19:37:28Z",
|
||||||
|
"finished_at_utc": "2026-09-19T19:38:04Z",
|
||||||
|
"reference_register_checked": true,
|
||||||
|
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
|
||||||
|
"error_register_checked": true,
|
||||||
|
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
|
||||||
|
"command_sha256": "0b0c8d2cc0f92fb9694bbf0c784aabc2bae9f9c38a90e9bc37eee08f8b2ec197",
|
||||||
|
"duplicate_failed_command_blocked": false,
|
||||||
|
"block_reason": null,
|
||||||
|
"execution_started": true,
|
||||||
|
"change_declared": true,
|
||||||
|
"result_contract_valid": true,
|
||||||
|
"result_contract_status": "OK",
|
||||||
|
"result_contract_error": null,
|
||||||
|
"command_rc": 0,
|
||||||
|
"changes_made": true,
|
||||||
|
"rollback_started": false,
|
||||||
|
"rollback_restored": null,
|
||||||
|
"mutation_outcome": "MUTATED",
|
||||||
|
"sanitized": true,
|
||||||
|
"secrets_included": false,
|
||||||
|
"private_addresses_included": false,
|
||||||
|
"raw_evidence_retained_locally": true,
|
||||||
|
"raw_evidence_sha256": "bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756",
|
||||||
|
"sanitized_output_sha256": "bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756",
|
||||||
|
"output_truncated_in_json": false,
|
||||||
|
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
|
||||||
|
"output": "PVE01_IDENTITY=OK\nPRE_SITE_SHA=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7\nPRE_HTTP_SRC=200\nPRE_MARIADB_SOCKET_ACTIVE=active\nPRE_MARIADB_SOCKET_ENABLED=enabled\nSECURITY_PRESTATE_OK=true\nPUBLIC_PLACEHOLDER_PRE=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600\nPRESNAPSHOT_SHUTDOWN_RC=0\nPRESECURITY_SNAPSHOT_RC=0\nSECURITY_CHANGE_TRANSPORT_RC=0\nSECURITY_CHANGE_EXITCODE=0\nSECURITY_CHANGE_OUTPUT_BEGIN\nNGINX_PRE_SHA_OK=true\nNGINX_TEST_RC=0\nNGINX_RELOAD_RC=0\nMARIADB_STOP_RC=0\nMARIADB_SOCKET_DISABLE_RC=0\nMARIADB_SOCKET_MASK_RC=0\nMARIADB_START_RC=0\nNEW_NGINX_SHA256=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e\nSECURITY_MUTATION_APPLIED=true\nSECURITY_CHANGE_OUTPUT_END\nPOSTCHECK_OUTPUT_BEGIN\nSITE_SHA=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e\nXF_SHA=d0c10d91d743e0a541d9a1b201080491dae0a8b1757866f113ef707b83403219\nACTIVE_QEMU_GUEST_AGENT=active\nACTIVE_NGINX=active\nACTIVE_PHP8_3_FPM=active\nACTIVE_MARIADB=active\nMARIADB_SOCKET_ACTIVE=inactive\nMARIADB_SOCKET_ENABLED=masked\nMARIADB_BIND_SCOPE=loopback\nMARIADB_SKIP_NETWORKING=0\nMARIADB_PORT=3306\nMARIADB_PROC_LISTENERS=[{\"family\":\"ipv4\",\"port\":3306,\"scope\":\"loopback\"}]\nGUEST_NONLOOPBACK_CONNECT=false\nGUEST_LOOPBACK_CONNECT=true\nHTTP_TESTS={\"ROOT\":\"301\",\"SRC_PHP\":\"403\",\"SRC_DIR\":\"403\",\"INTERNAL\":\"403\",\"INSTALL\":\"403\",\"DOTENV\":\"403\"}\nNGINX_TEST_RC=0\nMARIADB_PING_OK=true\nTABLES=224\nADMINS=1\nPOSTCHECK_OUTPUT_END\nPVE01_TO_VM3306_CONNECT_POST=false\nSECURITY_POSTCHECK_OK=true\nPUBLIC_PLACEHOLDER_POST=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600\nPRESECURITY_SNAPSHOT_DELETE_RC=0\nTASK_COMPLETE=true\nTASK_RESULT=PASS_PVEPRO_SECURITY_REPAIR\nMARIADB_SOCKET_ACTIVATION_DISABLED=true\nNGINX_SENSITIVE_PATHS_FIXED=true\nPUBLIC_CUTOVER=false\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":false,\"rollback_restored\":null}\n"
|
||||||
|
}
|
||||||
@@ -0,0 +1,85 @@
|
|||||||
|
CHAT_OUTPUT_BEGIN
|
||||||
|
COMMAND_ID=SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1
|
||||||
|
STATUS=OK
|
||||||
|
RC=0
|
||||||
|
HOST=pve01
|
||||||
|
MODE=change
|
||||||
|
COMPONENT=pvepro-security-repair
|
||||||
|
REFERENCE_REGISTER_CHECK=OK
|
||||||
|
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||||
|
ERROR_REGISTER_CHECK=OK
|
||||||
|
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||||
|
COMMAND_SHA256=0b0c8d2cc0f92fb9694bbf0c784aabc2bae9f9c38a90e9bc37eee08f8b2ec197
|
||||||
|
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||||
|
EXECUTION_STARTED=true
|
||||||
|
CHANGE_DECLARED=true
|
||||||
|
RESULT_CONTRACT_VALID=true
|
||||||
|
RESULT_CONTRACT_STATUS=OK
|
||||||
|
RESULT_CONTRACT_ERROR=NONE
|
||||||
|
COMMAND_RC=0
|
||||||
|
CHANGES_MADE=true
|
||||||
|
ROLLBACK_STARTED=false
|
||||||
|
ROLLBACK_RESTORED=null
|
||||||
|
MUTATION_OUTCOME=MUTATED
|
||||||
|
SANITIZED=yes
|
||||||
|
SECRETS_INCLUDED=no
|
||||||
|
PRIVATE_ADDRESSES_INCLUDED=no
|
||||||
|
RAW_EVIDENCE_SHA256=bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756
|
||||||
|
SANITIZED_OUTPUT_SHA256=bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756
|
||||||
|
OUTPUT_BEGIN
|
||||||
|
PVE01_IDENTITY=OK
|
||||||
|
PRE_SITE_SHA=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7
|
||||||
|
PRE_HTTP_SRC=200
|
||||||
|
PRE_MARIADB_SOCKET_ACTIVE=active
|
||||||
|
PRE_MARIADB_SOCKET_ENABLED=enabled
|
||||||
|
SECURITY_PRESTATE_OK=true
|
||||||
|
PUBLIC_PLACEHOLDER_PRE=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600
|
||||||
|
PRESNAPSHOT_SHUTDOWN_RC=0
|
||||||
|
PRESECURITY_SNAPSHOT_RC=0
|
||||||
|
SECURITY_CHANGE_TRANSPORT_RC=0
|
||||||
|
SECURITY_CHANGE_EXITCODE=0
|
||||||
|
SECURITY_CHANGE_OUTPUT_BEGIN
|
||||||
|
NGINX_PRE_SHA_OK=true
|
||||||
|
NGINX_TEST_RC=0
|
||||||
|
NGINX_RELOAD_RC=0
|
||||||
|
MARIADB_STOP_RC=0
|
||||||
|
MARIADB_SOCKET_DISABLE_RC=0
|
||||||
|
MARIADB_SOCKET_MASK_RC=0
|
||||||
|
MARIADB_START_RC=0
|
||||||
|
NEW_NGINX_SHA256=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e
|
||||||
|
SECURITY_MUTATION_APPLIED=true
|
||||||
|
SECURITY_CHANGE_OUTPUT_END
|
||||||
|
POSTCHECK_OUTPUT_BEGIN
|
||||||
|
SITE_SHA=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e
|
||||||
|
XF_SHA=d0c10d91d743e0a541d9a1b201080491dae0a8b1757866f113ef707b83403219
|
||||||
|
ACTIVE_QEMU_GUEST_AGENT=active
|
||||||
|
ACTIVE_NGINX=active
|
||||||
|
ACTIVE_PHP8_3_FPM=active
|
||||||
|
ACTIVE_MARIADB=active
|
||||||
|
MARIADB_SOCKET_ACTIVE=inactive
|
||||||
|
MARIADB_SOCKET_ENABLED=masked
|
||||||
|
MARIADB_BIND_SCOPE=loopback
|
||||||
|
MARIADB_SKIP_NETWORKING=0
|
||||||
|
MARIADB_PORT=3306
|
||||||
|
MARIADB_PROC_LISTENERS=[{"family":"ipv4","port":3306,"scope":"loopback"}]
|
||||||
|
GUEST_NONLOOPBACK_CONNECT=false
|
||||||
|
GUEST_LOOPBACK_CONNECT=true
|
||||||
|
HTTP_TESTS={"ROOT":"301","SRC_PHP":"403","SRC_DIR":"403","INTERNAL":"403","INSTALL":"403","DOTENV":"403"}
|
||||||
|
NGINX_TEST_RC=0
|
||||||
|
MARIADB_PING_OK=true
|
||||||
|
TABLES=224
|
||||||
|
ADMINS=1
|
||||||
|
POSTCHECK_OUTPUT_END
|
||||||
|
PVE01_TO_VM3306_CONNECT_POST=false
|
||||||
|
SECURITY_POSTCHECK_OK=true
|
||||||
|
PUBLIC_PLACEHOLDER_POST=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600
|
||||||
|
PRESECURITY_SNAPSHOT_DELETE_RC=0
|
||||||
|
TASK_COMPLETE=true
|
||||||
|
TASK_RESULT=PASS_PVEPRO_SECURITY_REPAIR
|
||||||
|
MARIADB_SOCKET_ACTIVATION_DISABLED=true
|
||||||
|
NGINX_SENSITIVE_PATHS_FIXED=true
|
||||||
|
PUBLIC_CUTOVER=false
|
||||||
|
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1","status":"OK","changes_made":true,"rollback_started":false,"rollback_restored":null}
|
||||||
|
|
||||||
|
OUTPUT_END
|
||||||
|
CHAT_OUTPUT_END
|
||||||
+13
-13
@@ -1,38 +1,38 @@
|
|||||||
{
|
{
|
||||||
"schema_version": 1,
|
"schema_version": 1,
|
||||||
"channel": "homelab-runtime",
|
"channel": "homelab-runtime",
|
||||||
"command_id": "SUPPORT-260919-PVEPRO-MARIADB-SOCKET-ACTIVATION-RCA-READONLY-678R1",
|
"command_id": "SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1",
|
||||||
"status": "OK",
|
"status": "OK",
|
||||||
"rc": 0,
|
"rc": 0,
|
||||||
"host": "pve01",
|
"host": "pve01",
|
||||||
"mode": "read-only",
|
"mode": "change",
|
||||||
"component": "pvepro-mariadb-socket-activation-rca-readonly",
|
"component": "pvepro-security-repair",
|
||||||
"started_at_utc": "2026-09-19T19:31:35Z",
|
"started_at_utc": "2026-09-19T19:37:28Z",
|
||||||
"finished_at_utc": "2026-09-19T19:31:38Z",
|
"finished_at_utc": "2026-09-19T19:38:04Z",
|
||||||
"reference_register_checked": true,
|
"reference_register_checked": true,
|
||||||
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
|
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
|
||||||
"error_register_checked": true,
|
"error_register_checked": true,
|
||||||
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
|
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
|
||||||
"command_sha256": "7731c25cfc9517e71c60a7ac77a930e2000fc039f23e44a826212f9099adfc08",
|
"command_sha256": "0b0c8d2cc0f92fb9694bbf0c784aabc2bae9f9c38a90e9bc37eee08f8b2ec197",
|
||||||
"duplicate_failed_command_blocked": false,
|
"duplicate_failed_command_blocked": false,
|
||||||
"block_reason": null,
|
"block_reason": null,
|
||||||
"execution_started": true,
|
"execution_started": true,
|
||||||
"change_declared": false,
|
"change_declared": true,
|
||||||
"result_contract_valid": true,
|
"result_contract_valid": true,
|
||||||
"result_contract_status": null,
|
"result_contract_status": "OK",
|
||||||
"result_contract_error": null,
|
"result_contract_error": null,
|
||||||
"command_rc": 0,
|
"command_rc": 0,
|
||||||
"changes_made": false,
|
"changes_made": true,
|
||||||
"rollback_started": false,
|
"rollback_started": false,
|
||||||
"rollback_restored": null,
|
"rollback_restored": null,
|
||||||
"mutation_outcome": "NO_MUTATION",
|
"mutation_outcome": "MUTATED",
|
||||||
"sanitized": true,
|
"sanitized": true,
|
||||||
"secrets_included": false,
|
"secrets_included": false,
|
||||||
"private_addresses_included": false,
|
"private_addresses_included": false,
|
||||||
"raw_evidence_retained_locally": true,
|
"raw_evidence_retained_locally": true,
|
||||||
"raw_evidence_sha256": "842ab8c59208c6682acad19ee29218b99b91feb804cb393818f1a1abd63d04b9",
|
"raw_evidence_sha256": "bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756",
|
||||||
"sanitized_output_sha256": "842ab8c59208c6682acad19ee29218b99b91feb804cb393818f1a1abd63d04b9",
|
"sanitized_output_sha256": "bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756",
|
||||||
"output_truncated_in_json": false,
|
"output_truncated_in_json": false,
|
||||||
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
|
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
|
||||||
"output": "PVE01_IDENTITY=OK\nVM100_IP_SHA256=73bd2de6f6335b5bf0ec692c69ca3a6bc0996af3318a06fc1272ad2f5f195570\nVM100_RUNNING=true\nPVE_QGA_PING_RC=0\nPVE01_TO_VM3306_CONNECT=true\nGUEST_QGA_TRANSPORT_RC=0\nGUEST_AUDIT_EXITCODE=0\nGUEST_OUTPUT_BEGIN\nGUEST_IDENTITY=OK\nMARIADB_MAINPID_PRESENT=true\nMARIADB_EXE=/usr/sbin/mariadbd\nMARIADB_SERVICE_PROPS={\"TriggeredBy\":\"mariadb.socket\",\"Requires\":\"sysinit.target system.slice\",\"Wants\":\"\",\"After\":\"sysinit.target network.target basic.target system.slice mariadb.socket systemd-journald.socket\",\"Sockets\":\"\",\"FragmentPath\":\"/lib/systemd/system/mariadb.service\"}\nMARIADB_SOCKET_UNIT_COUNT=1\nMARIADB_SOCKET_UNIT_00={\"unit\":\"mariadb.socket\",\"LoadState\":\"loaded\",\"ActiveState\":\"active\",\"SubState\":\"running\",\"UnitFileState\":\"enabled\",\"FragmentPath\":\"/lib/systemd/system/mariadb.socket\",\"Triggers\":\"mariadb.service\",\"listen3306\":[{\"port3306\":true,\"scope\":\"wildcard\",\"kind\":\"Stream\"}]}\nSYSTEMD_LIST_SOCKETS_MATCHES=[{\"unit\":\"mariadb.service\",\"port3306\":false,\"scope\":\"n/a\"},{\"unit\":\"mariadb.service\",\"port3306\":false,\"scope\":\"n/a\"},{\"unit\":\"mariadb.service\",\"port3306\":true,\"scope\":\"wildcard\"}]\nMARIADB_PROC_LISTENERS=[{\"family\":\"ipv6\",\"port\":3306,\"scope\":\"wildcard\"}]\nMARIADB_LISTENER_INODE_SHARED_WITH_PID1_COUNT=1\nMARIADB_ENV_LISTEN_FDS_PRESENT=true\nMARIADB_ENV_LISTEN_PID_PRESENT=true\nMARIADB_ENV_LISTEN_FDNAMES_PRESENT=true\nMARIADB_EFFECTIVE_DEFAULTS=[{\"cmd\":\"mariadbd\",\"rc\":0,\"network_options\":[{\"option\":\"--bind-address\",\"value_scope\":\"loopback\"}]},{\"cmd\":\"my_print_defaults\",\"rc\":0,\"network_options\":[{\"option\":\"--bind-address\",\"value_scope\":\"loopback\"}]}]\nMARIADB_CMDLINE_NETWORK_OPTIONS=[]\nMARIADB_RUNTIME_BIND_SCOPE=loopback\nMARIADB_RUNTIME_SKIP_NETWORKING=0\nMARIADB_RUNTIME_PORT=3306\nGUEST_SELF_NONLOOPBACK_3306_CONNECT=true\nGUEST_LOOPBACK_3306_CONNECT=true\nXF_TABLE_COUNT=224\nXF_LOCAL_HTTP=301\nRCA_SOCKET_ACTIVATION_ACTIVE_WILDCARD=true\nRCA_SERVICE_SOCKET_TRIGGER_LINK=true\nRCA_LISTENER_SHARED_WITH_PID1=true\nRCA_SOCKET_ACTIVATION_CONFIRMED=true\nRCA_RUNTIME_BIND_STILL_LOOPBACK=true\nRCA_DISABLE_SOCKET_RESTART_SERVICE_PLAN_READY=true\nTASK_COMPLETE=true\nTASK_RESULT=PASS_PVEPRO_MARIADB_SOCKET_ACTIVATION_RCA\nNO_MUTATION=true\nGUEST_OUTPUT_END\nPUBLIC_PLACEHOLDER_RC=0\nPUBLIC_PLACEHOLDER_SHA256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65\nPUBLIC_PLACEHOLDER_BYTES=1600\nSOCKET_ACTIVATION_RCA_CLEAN=true\nTASK_COMPLETE=true\nTASK_RESULT=PASS_PVEPRO_MARIADB_SOCKET_ACTIVATION_RCA\nNO_MUTATION=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-PVEPRO-MARIADB-SOCKET-ACTIVATION-RCA-READONLY-678R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
|
"output": "PVE01_IDENTITY=OK\nPRE_SITE_SHA=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7\nPRE_HTTP_SRC=200\nPRE_MARIADB_SOCKET_ACTIVE=active\nPRE_MARIADB_SOCKET_ENABLED=enabled\nSECURITY_PRESTATE_OK=true\nPUBLIC_PLACEHOLDER_PRE=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600\nPRESNAPSHOT_SHUTDOWN_RC=0\nPRESECURITY_SNAPSHOT_RC=0\nSECURITY_CHANGE_TRANSPORT_RC=0\nSECURITY_CHANGE_EXITCODE=0\nSECURITY_CHANGE_OUTPUT_BEGIN\nNGINX_PRE_SHA_OK=true\nNGINX_TEST_RC=0\nNGINX_RELOAD_RC=0\nMARIADB_STOP_RC=0\nMARIADB_SOCKET_DISABLE_RC=0\nMARIADB_SOCKET_MASK_RC=0\nMARIADB_START_RC=0\nNEW_NGINX_SHA256=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e\nSECURITY_MUTATION_APPLIED=true\nSECURITY_CHANGE_OUTPUT_END\nPOSTCHECK_OUTPUT_BEGIN\nSITE_SHA=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e\nXF_SHA=d0c10d91d743e0a541d9a1b201080491dae0a8b1757866f113ef707b83403219\nACTIVE_QEMU_GUEST_AGENT=active\nACTIVE_NGINX=active\nACTIVE_PHP8_3_FPM=active\nACTIVE_MARIADB=active\nMARIADB_SOCKET_ACTIVE=inactive\nMARIADB_SOCKET_ENABLED=masked\nMARIADB_BIND_SCOPE=loopback\nMARIADB_SKIP_NETWORKING=0\nMARIADB_PORT=3306\nMARIADB_PROC_LISTENERS=[{\"family\":\"ipv4\",\"port\":3306,\"scope\":\"loopback\"}]\nGUEST_NONLOOPBACK_CONNECT=false\nGUEST_LOOPBACK_CONNECT=true\nHTTP_TESTS={\"ROOT\":\"301\",\"SRC_PHP\":\"403\",\"SRC_DIR\":\"403\",\"INTERNAL\":\"403\",\"INSTALL\":\"403\",\"DOTENV\":\"403\"}\nNGINX_TEST_RC=0\nMARIADB_PING_OK=true\nTABLES=224\nADMINS=1\nPOSTCHECK_OUTPUT_END\nPVE01_TO_VM3306_CONNECT_POST=false\nSECURITY_POSTCHECK_OK=true\nPUBLIC_PLACEHOLDER_POST=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600\nPRESECURITY_SNAPSHOT_DELETE_RC=0\nTASK_COMPLETE=true\nTASK_RESULT=PASS_PVEPRO_SECURITY_REPAIR\nMARIADB_SOCKET_ACTIVATION_DISABLED=true\nNGINX_SENSITIVE_PATHS_FIXED=true\nPUBLIC_CUTOVER=false\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1\",\"status\":\"OK\",\"changes_made\":true,\"rollback_started\":false,\"rollback_restored\":null}\n"
|
||||||
}
|
}
|
||||||
|
|||||||
+61
-55
@@ -1,79 +1,85 @@
|
|||||||
CHAT_OUTPUT_BEGIN
|
CHAT_OUTPUT_BEGIN
|
||||||
COMMAND_ID=SUPPORT-260919-PVEPRO-MARIADB-SOCKET-ACTIVATION-RCA-READONLY-678R1
|
COMMAND_ID=SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1
|
||||||
STATUS=OK
|
STATUS=OK
|
||||||
RC=0
|
RC=0
|
||||||
HOST=pve01
|
HOST=pve01
|
||||||
MODE=read-only
|
MODE=change
|
||||||
COMPONENT=pvepro-mariadb-socket-activation-rca-readonly
|
COMPONENT=pvepro-security-repair
|
||||||
REFERENCE_REGISTER_CHECK=OK
|
REFERENCE_REGISTER_CHECK=OK
|
||||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||||
ERROR_REGISTER_CHECK=OK
|
ERROR_REGISTER_CHECK=OK
|
||||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||||
COMMAND_SHA256=7731c25cfc9517e71c60a7ac77a930e2000fc039f23e44a826212f9099adfc08
|
COMMAND_SHA256=0b0c8d2cc0f92fb9694bbf0c784aabc2bae9f9c38a90e9bc37eee08f8b2ec197
|
||||||
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||||
EXECUTION_STARTED=true
|
EXECUTION_STARTED=true
|
||||||
CHANGE_DECLARED=false
|
CHANGE_DECLARED=true
|
||||||
RESULT_CONTRACT_VALID=true
|
RESULT_CONTRACT_VALID=true
|
||||||
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
|
RESULT_CONTRACT_STATUS=OK
|
||||||
RESULT_CONTRACT_ERROR=NONE
|
RESULT_CONTRACT_ERROR=NONE
|
||||||
COMMAND_RC=0
|
COMMAND_RC=0
|
||||||
CHANGES_MADE=false
|
CHANGES_MADE=true
|
||||||
ROLLBACK_STARTED=false
|
ROLLBACK_STARTED=false
|
||||||
ROLLBACK_RESTORED=null
|
ROLLBACK_RESTORED=null
|
||||||
MUTATION_OUTCOME=NO_MUTATION
|
MUTATION_OUTCOME=MUTATED
|
||||||
SANITIZED=yes
|
SANITIZED=yes
|
||||||
SECRETS_INCLUDED=no
|
SECRETS_INCLUDED=no
|
||||||
PRIVATE_ADDRESSES_INCLUDED=no
|
PRIVATE_ADDRESSES_INCLUDED=no
|
||||||
RAW_EVIDENCE_SHA256=842ab8c59208c6682acad19ee29218b99b91feb804cb393818f1a1abd63d04b9
|
RAW_EVIDENCE_SHA256=bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756
|
||||||
SANITIZED_OUTPUT_SHA256=842ab8c59208c6682acad19ee29218b99b91feb804cb393818f1a1abd63d04b9
|
SANITIZED_OUTPUT_SHA256=bde317fb58cc0a78c609b8ef1038bbe54390b8dec74b6512e0cc282eedffd756
|
||||||
OUTPUT_BEGIN
|
OUTPUT_BEGIN
|
||||||
PVE01_IDENTITY=OK
|
PVE01_IDENTITY=OK
|
||||||
VM100_IP_SHA256=73bd2de6f6335b5bf0ec692c69ca3a6bc0996af3318a06fc1272ad2f5f195570
|
PRE_SITE_SHA=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7
|
||||||
VM100_RUNNING=true
|
PRE_HTTP_SRC=200
|
||||||
PVE_QGA_PING_RC=0
|
PRE_MARIADB_SOCKET_ACTIVE=active
|
||||||
PVE01_TO_VM3306_CONNECT=true
|
PRE_MARIADB_SOCKET_ENABLED=enabled
|
||||||
GUEST_QGA_TRANSPORT_RC=0
|
SECURITY_PRESTATE_OK=true
|
||||||
GUEST_AUDIT_EXITCODE=0
|
PUBLIC_PLACEHOLDER_PRE=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600
|
||||||
GUEST_OUTPUT_BEGIN
|
PRESNAPSHOT_SHUTDOWN_RC=0
|
||||||
GUEST_IDENTITY=OK
|
PRESECURITY_SNAPSHOT_RC=0
|
||||||
MARIADB_MAINPID_PRESENT=true
|
SECURITY_CHANGE_TRANSPORT_RC=0
|
||||||
MARIADB_EXE=/usr/sbin/mariadbd
|
SECURITY_CHANGE_EXITCODE=0
|
||||||
MARIADB_SERVICE_PROPS={"TriggeredBy":"mariadb.socket","Requires":"sysinit.target system.slice","Wants":"","After":"sysinit.target network.target basic.target system.slice mariadb.socket systemd-journald.socket","Sockets":"","FragmentPath":"/lib/systemd/system/mariadb.service"}
|
SECURITY_CHANGE_OUTPUT_BEGIN
|
||||||
MARIADB_SOCKET_UNIT_COUNT=1
|
NGINX_PRE_SHA_OK=true
|
||||||
MARIADB_SOCKET_UNIT_00={"unit":"mariadb.socket","LoadState":"loaded","ActiveState":"active","SubState":"running","UnitFileState":"enabled","FragmentPath":"/lib/systemd/system/mariadb.socket","Triggers":"mariadb.service","listen3306":[{"port3306":true,"scope":"wildcard","kind":"Stream"}]}
|
NGINX_TEST_RC=0
|
||||||
SYSTEMD_LIST_SOCKETS_MATCHES=[{"unit":"mariadb.service","port3306":false,"scope":"n/a"},{"unit":"mariadb.service","port3306":false,"scope":"n/a"},{"unit":"mariadb.service","port3306":true,"scope":"wildcard"}]
|
NGINX_RELOAD_RC=0
|
||||||
MARIADB_PROC_LISTENERS=[{"family":"ipv6","port":3306,"scope":"wildcard"}]
|
MARIADB_STOP_RC=0
|
||||||
MARIADB_LISTENER_INODE_SHARED_WITH_PID1_COUNT=1
|
MARIADB_SOCKET_DISABLE_RC=0
|
||||||
MARIADB_ENV_LISTEN_FDS_PRESENT=true
|
MARIADB_SOCKET_MASK_RC=0
|
||||||
MARIADB_ENV_LISTEN_PID_PRESENT=true
|
MARIADB_START_RC=0
|
||||||
MARIADB_ENV_LISTEN_FDNAMES_PRESENT=true
|
NEW_NGINX_SHA256=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e
|
||||||
MARIADB_EFFECTIVE_DEFAULTS=[{"cmd":"mariadbd","rc":0,"network_options":[{"option":"--bind-address","value_scope":"loopback"}]},{"cmd":"my_print_defaults","rc":0,"network_options":[{"option":"--bind-address","value_scope":"loopback"}]}]
|
SECURITY_MUTATION_APPLIED=true
|
||||||
MARIADB_CMDLINE_NETWORK_OPTIONS=[]
|
SECURITY_CHANGE_OUTPUT_END
|
||||||
MARIADB_RUNTIME_BIND_SCOPE=loopback
|
POSTCHECK_OUTPUT_BEGIN
|
||||||
MARIADB_RUNTIME_SKIP_NETWORKING=0
|
SITE_SHA=a521698e3eea97ad84fa9f2c34a3fcc5f028e1d9fd4fe045e9ef80998f316f9e
|
||||||
MARIADB_RUNTIME_PORT=3306
|
XF_SHA=d0c10d91d743e0a541d9a1b201080491dae0a8b1757866f113ef707b83403219
|
||||||
GUEST_SELF_NONLOOPBACK_3306_CONNECT=true
|
ACTIVE_QEMU_GUEST_AGENT=active
|
||||||
GUEST_LOOPBACK_3306_CONNECT=true
|
ACTIVE_NGINX=active
|
||||||
XF_TABLE_COUNT=224
|
ACTIVE_PHP8_3_FPM=active
|
||||||
XF_LOCAL_HTTP=301
|
ACTIVE_MARIADB=active
|
||||||
RCA_SOCKET_ACTIVATION_ACTIVE_WILDCARD=true
|
MARIADB_SOCKET_ACTIVE=inactive
|
||||||
RCA_SERVICE_SOCKET_TRIGGER_LINK=true
|
MARIADB_SOCKET_ENABLED=masked
|
||||||
RCA_LISTENER_SHARED_WITH_PID1=true
|
MARIADB_BIND_SCOPE=loopback
|
||||||
RCA_SOCKET_ACTIVATION_CONFIRMED=true
|
MARIADB_SKIP_NETWORKING=0
|
||||||
RCA_RUNTIME_BIND_STILL_LOOPBACK=true
|
MARIADB_PORT=3306
|
||||||
RCA_DISABLE_SOCKET_RESTART_SERVICE_PLAN_READY=true
|
MARIADB_PROC_LISTENERS=[{"family":"ipv4","port":3306,"scope":"loopback"}]
|
||||||
|
GUEST_NONLOOPBACK_CONNECT=false
|
||||||
|
GUEST_LOOPBACK_CONNECT=true
|
||||||
|
HTTP_TESTS={"ROOT":"301","SRC_PHP":"403","SRC_DIR":"403","INTERNAL":"403","INSTALL":"403","DOTENV":"403"}
|
||||||
|
NGINX_TEST_RC=0
|
||||||
|
MARIADB_PING_OK=true
|
||||||
|
TABLES=224
|
||||||
|
ADMINS=1
|
||||||
|
POSTCHECK_OUTPUT_END
|
||||||
|
PVE01_TO_VM3306_CONNECT_POST=false
|
||||||
|
SECURITY_POSTCHECK_OK=true
|
||||||
|
PUBLIC_PLACEHOLDER_POST=rc=0|sha256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65|bytes=1600
|
||||||
|
PRESECURITY_SNAPSHOT_DELETE_RC=0
|
||||||
TASK_COMPLETE=true
|
TASK_COMPLETE=true
|
||||||
TASK_RESULT=PASS_PVEPRO_MARIADB_SOCKET_ACTIVATION_RCA
|
TASK_RESULT=PASS_PVEPRO_SECURITY_REPAIR
|
||||||
NO_MUTATION=true
|
MARIADB_SOCKET_ACTIVATION_DISABLED=true
|
||||||
GUEST_OUTPUT_END
|
NGINX_SENSITIVE_PATHS_FIXED=true
|
||||||
PUBLIC_PLACEHOLDER_RC=0
|
PUBLIC_CUTOVER=false
|
||||||
PUBLIC_PLACEHOLDER_SHA256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65
|
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-PVEPRO-SECURITY-REPAIR-679R1","status":"OK","changes_made":true,"rollback_started":false,"rollback_restored":null}
|
||||||
PUBLIC_PLACEHOLDER_BYTES=1600
|
|
||||||
SOCKET_ACTIVATION_RCA_CLEAN=true
|
|
||||||
TASK_COMPLETE=true
|
|
||||||
TASK_RESULT=PASS_PVEPRO_MARIADB_SOCKET_ACTIVATION_RCA
|
|
||||||
NO_MUTATION=true
|
|
||||||
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-PVEPRO-MARIADB-SOCKET-ACTIVATION-RCA-READONLY-678R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
|
||||||
|
|
||||||
OUTPUT_END
|
OUTPUT_END
|
||||||
CHAT_OUTPUT_END
|
CHAT_OUTPUT_END
|
||||||
|
|||||||
Reference in New Issue
Block a user