runtime: publish SUPPORT-260922-SPB-HOME-INGRESS-CERT-VHOST-FIX-9123R1

2026-09-22 14:03:29 +00:00
parent 2c24b3292d
commit 91e577b7bf
4 changed files with 113 additions and 37 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260922-SPB-HOME-INGRESS-CERT-VHOST-FIX-9123R1",
+  "status": "FAIL",
+  "rc": 76,
+  "host": "pve01",
+  "mode": "change",
+  "component": "spb-home-ingress-cert-vhost-fix",
+  "started_at_utc": "2026-09-22T14:03:25Z",
+  "finished_at_utc": "2026-09-22T14:03:29Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "fbcb4259c7383951413ad138ffac6c866a9b89f23e6a2a3a3d15b96ae602a946",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": false,
+  "result_contract_status": null,
+  "result_contract_error": "INVALID_CONTRACT:ValueError",
+  "command_rc": 46,
+  "changes_made": null,
+  "rollback_started": null,
+  "rollback_restored": null,
+  "mutation_outcome": "UNKNOWN",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "ef0e7c0fe3c4a7aa29d15ee109d164fd9c85355601ad5532b8acac3178f1070d",
+  "sanitized_output_sha256": "ef0e7c0fe3c4a7aa29d15ee109d164fd9c85355601ad5532b8acac3178f1070d",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "SPB9121_CHANGE={\"preflight\":{\"sha_gate\":\"PASS\",\"data_mount_hash\":\"ec0ac67820f88633\",\"certbot_layout\":\"PASS\",\"new_objects_absent\":\"PASS\",\"nginx_test\":\"PASS\",\"gitread_policy\":\"PASS\",\"gitread_backend_hash\":\"160a494a6106d479\"},\"certs\":{\"git-read.gram1.ru\":{\"certbot_rc\":1,\"stdout_sha\":null,\"stderr_sha\":\"04e28386d4c46be6\"}},\"vhosts\":{},\"probes\":{},\"changes_made\":false,\"rollback_started\":true,\"rollback_restored\":true,\"status\":\"FAIL\",\"rollback\":{\"started\":true,\"reason\":\"CERTBOT_FAIL_git-read.gram1.ru\",\"removed_files\":[],\"cert_delete\":{},\"reload\":{\"test_rc\":0,\"reload_rc\":0,\"stderr_sha\":null},\"restored\":true}}\nTASK_COMPLETE=true\nTASK_RESULT=FAIL_SPB_HOME_INGRESS_CERT_VHOST_FIX\nDECISION=HOLD_SPB_ON_AND_READ_ROLLBACK_RESULT\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260922-SPB-HOME-INGRESS-CERT-VHOST-FIX-9123R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":true,\"rollback_restored\":true}\n"
+}
@@ -0,0 +1,37 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260922-SPB-HOME-INGRESS-CERT-VHOST-FIX-9123R1
+STATUS=FAIL
+RC=76
+HOST=pve01
+MODE=change
+COMPONENT=spb-home-ingress-cert-vhost-fix
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=fbcb4259c7383951413ad138ffac6c866a9b89f23e6a2a3a3d15b96ae602a946
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=false
+RESULT_CONTRACT_STATUS=UNKNOWN
+RESULT_CONTRACT_ERROR=INVALID_CONTRACT:ValueError
+COMMAND_RC=46
+CHANGES_MADE=unknown
+ROLLBACK_STARTED=unknown
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=UNKNOWN
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=ef0e7c0fe3c4a7aa29d15ee109d164fd9c85355601ad5532b8acac3178f1070d
+SANITIZED_OUTPUT_SHA256=ef0e7c0fe3c4a7aa29d15ee109d164fd9c85355601ad5532b8acac3178f1070d
+OUTPUT_BEGIN
+SPB9121_CHANGE={"preflight":{"sha_gate":"PASS","data_mount_hash":"ec0ac67820f88633","certbot_layout":"PASS","new_objects_absent":"PASS","nginx_test":"PASS","gitread_policy":"PASS","gitread_backend_hash":"160a494a6106d479"},"certs":{"git-read.gram1.ru":{"certbot_rc":1,"stdout_sha":null,"stderr_sha":"04e28386d4c46be6"}},"vhosts":{},"probes":{},"changes_made":false,"rollback_started":true,"rollback_restored":true,"status":"FAIL","rollback":{"started":true,"reason":"CERTBOT_FAIL_git-read.gram1.ru","removed_files":[],"cert_delete":{},"reload":{"test_rc":0,"reload_rc":0,"stderr_sha":null},"restored":true}}
+TASK_COMPLETE=true
+TASK_RESULT=FAIL_SPB_HOME_INGRESS_CERT_VHOST_FIX
+DECISION=HOLD_SPB_ON_AND_READ_ROLLBACK_RESULT
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260922-SPB-HOME-INGRESS-CERT-VHOST-FIX-9123R1","status":"FAIL","changes_made":false,"rollback_started":true,"rollback_restored":true}
+
+OUTPUT_END
+CHAT_OUTPUT_END
@@ -1,38 +1,38 @@
 {
  "schema_version": 1,
  "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260922-SPB-GITREAD-SNIPPET-DRIFT-RCA-9122R1",
-  "status": "OK",
-  "rc": 0,
+  "command_id": "SUPPORT-260922-SPB-HOME-INGRESS-CERT-VHOST-FIX-9123R1",
+  "status": "FAIL",
+  "rc": 76,
  "host": "pve01",
-  "mode": "read-only",
-  "component": "spb-gitread-snippet-drift-rca",
-  "started_at_utc": "2026-09-22T13:59:16Z",
-  "finished_at_utc": "2026-09-22T13:59:17Z",
+  "mode": "change",
+  "component": "spb-home-ingress-cert-vhost-fix",
+  "started_at_utc": "2026-09-22T14:03:25Z",
+  "finished_at_utc": "2026-09-22T14:03:29Z",
  "reference_register_checked": true,
  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
  "error_register_checked": true,
  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "faafc4a3bab807c589cc6774fee10385bfcc9af9ff6d6eb87d9049f4e66cc3bd",
+  "command_sha256": "fbcb4259c7383951413ad138ffac6c866a9b89f23e6a2a3a3d15b96ae602a946",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
-  "change_declared": false,
-  "result_contract_valid": true,
+  "change_declared": true,
+  "result_contract_valid": false,
  "result_contract_status": null,
-  "result_contract_error": null,
-  "command_rc": 0,
-  "changes_made": false,
-  "rollback_started": false,
+  "result_contract_error": "INVALID_CONTRACT:ValueError",
+  "command_rc": 46,
+  "changes_made": null,
+  "rollback_started": null,
  "rollback_restored": null,
-  "mutation_outcome": "NO_MUTATION",
+  "mutation_outcome": "UNKNOWN",
  "sanitized": true,
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "ba058d7b36075cc7e213d7e502821daaefcea82fcdc064f8cd3a9f4e6a3be123",
-  "sanitized_output_sha256": "ba058d7b36075cc7e213d7e502821daaefcea82fcdc064f8cd3a9f4e6a3be123",
+  "raw_evidence_sha256": "ef0e7c0fe3c4a7aa29d15ee109d164fd9c85355601ad5532b8acac3178f1070d",
+  "sanitized_output_sha256": "ef0e7c0fe3c4a7aa29d15ee109d164fd9c85355601ad5532b8acac3178f1070d",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SPB9122_RCA={\"guest\":{\"ok\":true,\"data\":{\"target\":{\"exists\":true,\"sha256\":\"b0770ada2d594e28567560f2b4729524ea5cdf2a2eb16b87110a601eb00f9c22\",\"old_sha_matches\":false,\"bytes\":729,\"mode\":\"0o644\",\"uid\":0,\"gid\":0,\"mtime_utc\":\"2026-08-16T05:20:09.535400+00:00\",\"ctime_utc\":\"2026-08-16T05:20:09.535400+00:00\",\"semantic\":[\"location ^~ /.well-known/homelab-git-read/ {\",\"if ($host != \\\"git.gram1.ru\\\") { return 404; }\",\"allow all;\",\"limit_except GET HEAD { deny all; }\",\"proxy_pass http://[PRIVATE_IP];\",\"proxy_pass_request_headers off;\",\"proxy_set_header Host git-read.internal;\",\"proxy_set_header X-Forwarded-Proto https;\",\"proxy_set_header Connection \\\"\\\";\",\"add_header X-Robots-Tag \\\"noindex, nofollow, noarchive\\\" always;\",\"add_header Cache-Control \\\"no-store\\\" always;\"],\"host_conditions\":[\"git.gram1.ru\"],\"proxy_pass_count\":1,\"wellknown_present\":true,\"get_head_only\":true,\"headers_stripped\":true,\"no_store\":true,\"noindex\":true},\"copies\":[],\"matching_old_sha\":[],\"same_semantics\":[]}}}\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_GITREAD_SNIPPET_DRIFT_RCA\nDECISION=READ_EXACT_9122_THEN_REBASE_OR_HOLD\n"
+  "output": "SPB9121_CHANGE={\"preflight\":{\"sha_gate\":\"PASS\",\"data_mount_hash\":\"ec0ac67820f88633\",\"certbot_layout\":\"PASS\",\"new_objects_absent\":\"PASS\",\"nginx_test\":\"PASS\",\"gitread_policy\":\"PASS\",\"gitread_backend_hash\":\"160a494a6106d479\"},\"certs\":{\"git-read.gram1.ru\":{\"certbot_rc\":1,\"stdout_sha\":null,\"stderr_sha\":\"04e28386d4c46be6\"}},\"vhosts\":{},\"probes\":{},\"changes_made\":false,\"rollback_started\":true,\"rollback_restored\":true,\"status\":\"FAIL\",\"rollback\":{\"started\":true,\"reason\":\"CERTBOT_FAIL_git-read.gram1.ru\",\"removed_files\":[],\"cert_delete\":{},\"reload\":{\"test_rc\":0,\"reload_rc\":0,\"stderr_sha\":null},\"restored\":true}}\nTASK_COMPLETE=true\nTASK_RESULT=FAIL_SPB_HOME_INGRESS_CERT_VHOST_FIX\nDECISION=HOLD_SPB_ON_AND_READ_ROLLBACK_RESULT\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260922-SPB-HOME-INGRESS-CERT-VHOST-FIX-9123R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":true,\"rollback_restored\":true}\n"
 }
@@ -1,36 +1,37 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260922-SPB-GITREAD-SNIPPET-DRIFT-RCA-9122R1
-STATUS=OK
-RC=0
+COMMAND_ID=SUPPORT-260922-SPB-HOME-INGRESS-CERT-VHOST-FIX-9123R1
+STATUS=FAIL
+RC=76
 HOST=pve01
-MODE=read-only
-COMPONENT=spb-gitread-snippet-drift-rca
+MODE=change
+COMPONENT=spb-home-ingress-cert-vhost-fix
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=faafc4a3bab807c589cc6774fee10385bfcc9af9ff6d6eb87d9049f4e66cc3bd
+COMMAND_SHA256=fbcb4259c7383951413ad138ffac6c866a9b89f23e6a2a3a3d15b96ae602a946
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=false
-RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=NOT_APPLICABLE
-RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=0
-CHANGES_MADE=false
-ROLLBACK_STARTED=false
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=false
+RESULT_CONTRACT_STATUS=UNKNOWN
+RESULT_CONTRACT_ERROR=INVALID_CONTRACT:ValueError
+COMMAND_RC=46
+CHANGES_MADE=unknown
+ROLLBACK_STARTED=unknown
 ROLLBACK_RESTORED=null
-MUTATION_OUTCOME=NO_MUTATION
+MUTATION_OUTCOME=UNKNOWN
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=ba058d7b36075cc7e213d7e502821daaefcea82fcdc064f8cd3a9f4e6a3be123
-SANITIZED_OUTPUT_SHA256=ba058d7b36075cc7e213d7e502821daaefcea82fcdc064f8cd3a9f4e6a3be123
+RAW_EVIDENCE_SHA256=ef0e7c0fe3c4a7aa29d15ee109d164fd9c85355601ad5532b8acac3178f1070d
+SANITIZED_OUTPUT_SHA256=ef0e7c0fe3c4a7aa29d15ee109d164fd9c85355601ad5532b8acac3178f1070d
 OUTPUT_BEGIN
-SPB9122_RCA={"guest":{"ok":true,"data":{"target":{"exists":true,"sha256":"b0770ada2d594e28567560f2b4729524ea5cdf2a2eb16b87110a601eb00f9c22","old_sha_matches":false,"bytes":729,"mode":"0o644","uid":0,"gid":0,"mtime_utc":"2026-08-16T05:20:09.535400+00:00","ctime_utc":"2026-08-16T05:20:09.535400+00:00","semantic":["location ^~ /.well-known/homelab-git-read/ {","if ($host != \"git.gram1.ru\") { return 404; }","allow all;","limit_except GET HEAD { deny all; }","proxy_pass http://[PRIVATE_IP];","proxy_pass_request_headers off;","proxy_set_header Host git-read.internal;","proxy_set_header X-Forwarded-Proto https;","proxy_set_header Connection \"\";","add_header X-Robots-Tag \"noindex, nofollow, noarchive\" always;","add_header Cache-Control \"no-store\" always;"],"host_conditions":["git.gram1.ru"],"proxy_pass_count":1,"wellknown_present":true,"get_head_only":true,"headers_stripped":true,"no_store":true,"noindex":true},"copies":[],"matching_old_sha":[],"same_semantics":[]}}}
+SPB9121_CHANGE={"preflight":{"sha_gate":"PASS","data_mount_hash":"ec0ac67820f88633","certbot_layout":"PASS","new_objects_absent":"PASS","nginx_test":"PASS","gitread_policy":"PASS","gitread_backend_hash":"160a494a6106d479"},"certs":{"git-read.gram1.ru":{"certbot_rc":1,"stdout_sha":null,"stderr_sha":"04e28386d4c46be6"}},"vhosts":{},"probes":{},"changes_made":false,"rollback_started":true,"rollback_restored":true,"status":"FAIL","rollback":{"started":true,"reason":"CERTBOT_FAIL_git-read.gram1.ru","removed_files":[],"cert_delete":{},"reload":{"test_rc":0,"reload_rc":0,"stderr_sha":null},"restored":true}}
 TASK_COMPLETE=true
-TASK_RESULT=PASS_SPB_GITREAD_SNIPPET_DRIFT_RCA
-DECISION=READ_EXACT_9122_THEN_REBASE_OR_HOLD
+TASK_RESULT=FAIL_SPB_HOME_INGRESS_CERT_VHOST_FIX
+DECISION=HOLD_SPB_ON_AND_READ_ROLLBACK_RESULT
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260922-SPB-HOME-INGRESS-CERT-VHOST-FIX-9123R1","status":"FAIL","changes_made":false,"rollback_started":true,"rollback_restored":true}

 OUTPUT_END
 CHAT_OUTPUT_END