runtime: publish SUPPORT-260928-USA-DIRECT-SSH-CLEANUP-AUDIT-99057R1
This commit is contained in:
homelab-runtime-publisher
+108
-82
@@ -1,104 +1,130 @@
|
||||
CHAT_OUTPUT_BEGIN
|
||||
COMMAND_ID=SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1
|
||||
COMMAND_ID=SUPPORT-260928-USA-DIRECT-SSH-CLEANUP-AUDIT-99057R1
|
||||
STATUS=OK
|
||||
RC=0
|
||||
HOST=pve01
|
||||
MODE=change
|
||||
COMPONENT=usa-temp-firewall-bypass-rca
|
||||
MODE=read-only
|
||||
COMPONENT=usa-direct-ssh-cleanup-audit
|
||||
REFERENCE_REGISTER_CHECK=OK
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
COMMAND_SHA256=4adb2e429adb1e15b1c19b871daf15a16810fec524f9ccdbc86cdf4e18aa0ccd
|
||||
COMMAND_SHA256=63d5688af6e15bc10d01f2cb02820458daa9f9186034ebed89f40bb7d5333132
|
||||
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||
EXECUTION_STARTED=true
|
||||
CHANGE_DECLARED=true
|
||||
CHANGE_DECLARED=false
|
||||
RESULT_CONTRACT_VALID=true
|
||||
RESULT_CONTRACT_STATUS=OK
|
||||
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
|
||||
RESULT_CONTRACT_ERROR=NONE
|
||||
COMMAND_RC=0
|
||||
CHANGES_MADE=true
|
||||
ROLLBACK_STARTED=true
|
||||
CHANGES_MADE=false
|
||||
ROLLBACK_STARTED=false
|
||||
ROLLBACK_RESTORED=null
|
||||
MUTATION_OUTCOME=ROLLBACK_UNKNOWN
|
||||
MUTATION_OUTCOME=NO_MUTATION
|
||||
SANITIZED=yes
|
||||
SECRETS_INCLUDED=no
|
||||
PRIVATE_ADDRESSES_INCLUDED=no
|
||||
RAW_EVIDENCE_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
|
||||
SANITIZED_OUTPUT_SHA256=6926cc5d596e09ae2decbf3b0fa210f362f6198d5b34de64db3a4bc8f391e081
|
||||
RAW_EVIDENCE_SHA256=9f3df5d6a51d987662f2fe3ee016eb9dbab2bf237c3e964b6ae99f61d2a3f637
|
||||
SANITIZED_OUTPUT_SHA256=9f3df5d6a51d987662f2fe3ee016eb9dbab2bf237c3e964b6ae99f61d2a3f637
|
||||
OUTPUT_BEGIN
|
||||
USA_TEMP_FIREWALL_BYPASS_RCA=V1
|
||||
MODE=change
|
||||
MUTATION_BOUNDARY=TEMP_IPTABLES_ACCEPT_22_443_3478_ONLY
|
||||
GOAL=SEPARATE_GUEST_FIREWALL_FROM_PROVIDER_FILTER
|
||||
FAILSAFE_CLEANUP_DELAY_SECONDS=80
|
||||
PVE01_DURING_PROBE_RC=0
|
||||
PVE01_DURING_DIRECT_HTTPS=000
|
||||
PVE01_DURING_DIRECT_OIDC=000
|
||||
PVE01_DURING_DIRECT_TLS_OK=false
|
||||
PVE01_DURING_DIRECT_ALPN=TimeoutError
|
||||
PVE01_DURING_DIRECT_TLS_VERSION=NONE
|
||||
PVE01_DURING_DIRECT_STUN_OK=true
|
||||
PVE01_DURING_DIRECT_STUN_CLASS=SUCCESS
|
||||
PVE01_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
|
||||
PVE01_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
|
||||
PVE01_DURING_NETBIRD_STATUS_RC=0
|
||||
PVE01_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
|
||||
PVE01_DURING_NETBIRD_SIGNAL_CONNECTED=true
|
||||
PVE01_DURING_NETBIRD_IP=100.100.131.41
|
||||
PVE01_DURING_DIRECT_HTTPS_READY=false
|
||||
PVE01_DURING_DIRECT_H2_READY=false
|
||||
PVE01_DURING_DIRECT_STUN_READY=true
|
||||
PVE02_HOSTKEY_FINGERPRINT=SHA256:UYF9KcBiAeblzcEJPvL0pgaoDPLHFQsVuG0ZTTow0aM
|
||||
PVE02_HOSTKEY_MATCH=true
|
||||
PVE02_DURING_PROBE_SSH_RC=0
|
||||
PVE02_DURING_DIRECT_HTTPS=000
|
||||
PVE02_DURING_DIRECT_OIDC=000
|
||||
PVE02_DURING_DIRECT_TLS_OK=false
|
||||
PVE02_DURING_DIRECT_ALPN=TimeoutError
|
||||
PVE02_DURING_DIRECT_TLS_VERSION=NONE
|
||||
PVE02_DURING_DIRECT_STUN_OK=true
|
||||
PVE02_DURING_DIRECT_STUN_CLASS=SUCCESS
|
||||
PVE02_DURING_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
|
||||
PVE02_DURING_DIRECT_SSH_HOSTKEY_MATCH=true
|
||||
PVE02_DURING_NETBIRD_STATUS_RC=0
|
||||
PVE02_DURING_NETBIRD_MANAGEMENT_CONNECTED=true
|
||||
PVE02_DURING_NETBIRD_SIGNAL_CONNECTED=true
|
||||
PVE02_DURING_NETBIRD_IP=100.100.91.76
|
||||
PVE02_DURING_DIRECT_HTTPS_READY=false
|
||||
PVE02_DURING_DIRECT_H2_READY=false
|
||||
PVE02_DURING_DIRECT_STUN_READY=true
|
||||
DURING_ANY_DIRECT_HTTPS_READY=false
|
||||
DURING_ANY_DIRECT_H2_READY=false
|
||||
DURING_ANY_DIRECT_STUN_READY=true
|
||||
DURING_ANY_DIRECT_SSH_KEX_READY=true
|
||||
PVE01_AFTER_PROBE_RC=0
|
||||
PVE01_AFTER_DIRECT_HTTPS=000
|
||||
PVE01_AFTER_DIRECT_OIDC=000
|
||||
PVE01_AFTER_DIRECT_TLS_OK=false
|
||||
PVE01_AFTER_DIRECT_ALPN=TimeoutError
|
||||
PVE01_AFTER_DIRECT_TLS_VERSION=NONE
|
||||
PVE01_AFTER_DIRECT_STUN_OK=true
|
||||
PVE01_AFTER_DIRECT_STUN_CLASS=SUCCESS
|
||||
PVE01_AFTER_DIRECT_SSH_HOSTKEY=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
|
||||
PVE01_AFTER_DIRECT_SSH_HOSTKEY_MATCH=true
|
||||
PVE01_AFTER_NETBIRD_STATUS_RC=0
|
||||
PVE01_AFTER_NETBIRD_MANAGEMENT_CONNECTED=true
|
||||
PVE01_AFTER_NETBIRD_SIGNAL_CONNECTED=true
|
||||
PVE01_AFTER_NETBIRD_IP=100.100.131.41
|
||||
PVE01_AFTER_DIRECT_HTTPS_READY=false
|
||||
PVE01_AFTER_DIRECT_H2_READY=false
|
||||
PVE01_AFTER_DIRECT_STUN_READY=true
|
||||
PVE01_POSTWINDOW_CONTROL_HEALTHY=true
|
||||
PVE02_DURING_CONTROL_HEALTHY=true
|
||||
DECISION=PASS_TEMP_ACCEPT_RULES_IMPROVED_DIRECT_USA_PATH
|
||||
NEXT_GATE=VERIFY_TEMP_RULE_CLEANUP_THEN_GUARDED_GUEST_FIREWALL_REPAIR
|
||||
TASK_RESULT=PASS_USA_TEMP_FIREWALL_BYPASS_RCA
|
||||
CHANGES_MADE=true
|
||||
ROLLBACK_STARTED=true
|
||||
USA_DIRECT_SSH_CLEANUP_AUDIT=V1
|
||||
MODE=read-only
|
||||
MUTATION_BOUNDARY=NONE
|
||||
GOAL=VERIFY_99056_CLEANUP_AND_REGAIN_DIRECT_USA_OPERATOR_ACCESS
|
||||
PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0
|
||||
PVE01_OPERATOR_KEY_MATCH=true
|
||||
USA_SSH_KEYSCAN_RC=0
|
||||
USA_HOSTKEY_FINGERPRINT=SHA256:805Q9eh/fePUci42dfY58I6q0lFiiPHn0/M+mckypmE
|
||||
USA_HOSTKEY_MATCH=true
|
||||
USA_DIRECT_OPERATOR_SSH_RC=0
|
||||
USA_DIRECT_OPERATOR_AUTH=true
|
||||
AUDIT_VERSION=9
|
||||
AUDIT_HOSTNAME=pvepro
|
||||
AUDIT_UID=0
|
||||
AUDIT_USER=root
|
||||
AUDIT_KERNEL=6.1.0-53-amd64
|
||||
AUDIT_UPTIME_SECONDS=13513
|
||||
AUDIT_OS_ID=debian
|
||||
AUDIT_OS_VERSION_ID=12
|
||||
AUDIT_99056_IPTABLES_RULE_COUNT=0
|
||||
AUDIT_IPTABLES_PRESENT=true
|
||||
AUDIT_IPTABLES_VERSION=iptables v1.8.9 (nf_tables)
|
||||
AUDIT_IPTABLES_INPUT_POLICY=ACCEPT
|
||||
AUDIT_IPTABLES_FORWARD_POLICY=DROP
|
||||
AUDIT_IPTABLES_MOLDOVA_REF_COUNT=0
|
||||
AUDIT_IPTABLES_MOLDOVA_443_REF_COUNT=0
|
||||
AUDIT_IPTABLES_MOLDOVA_3478_REF_COUNT=0
|
||||
AUDIT_IPTABLES_443_ACCEPT_COUNT=1
|
||||
AUDIT_IPTABLES_443_DROP_REJECT_COUNT=0
|
||||
AUDIT_IPTABLES_3478_ACCEPT_COUNT=1
|
||||
AUDIT_IPTABLES_3478_DROP_REJECT_COUNT=0
|
||||
AUDIT_99056_RUN_FILE_COUNT=0
|
||||
AUDIT_99056_SYSTEMD_UNIT_COUNT=0
|
||||
AUDIT_NFT_PRESENT=true
|
||||
AUDIT_NFT_INPUT_POLICY_DROP_COUNT=0
|
||||
AUDIT_NFT_FORWARD_POLICY_DROP_COUNT=1
|
||||
AUDIT_NFT_MOLDOVA_REF_COUNT=0
|
||||
AUDIT_NFT_MOLDOVA_443_REF_COUNT=0
|
||||
AUDIT_NFT_MOLDOVA_3478_REF_COUNT=0
|
||||
AUDIT_NFT_443_DROP_REJECT_COUNT=0
|
||||
AUDIT_NFT_3478_DROP_REJECT_COUNT=0
|
||||
AUDIT_NFT_MOLDOVA_MATCH_HINT=NONE
|
||||
AUDIT_UFW_PRESENT=false
|
||||
AUDIT_UFW_ACTIVE=false
|
||||
AUDIT_UFW_MOLDOVA_REF_COUNT=0
|
||||
AUDIT_UFW_443_ALLOW_COUNT=0
|
||||
AUDIT_UFW_3478_ALLOW_COUNT=0
|
||||
AUDIT_IPSET_PRESENT=false
|
||||
AUDIT_IPSET_MOLDOVA_MEMBER_COUNT=0
|
||||
AUDIT_TCP_22_LISTEN=true
|
||||
AUDIT_TCP_80_LISTEN=true
|
||||
AUDIT_TCP_443_LISTEN=true
|
||||
AUDIT_TCP_33073_LISTEN=false
|
||||
AUDIT_TCP_33080_LISTEN=false
|
||||
AUDIT_TCP_10000_LISTEN=false
|
||||
AUDIT_UDP_3478_LISTEN=true
|
||||
AUDIT_LOOPBACK_HTTPS_NB_PVEPRO=000
|
||||
AUDIT_LOOPBACK_OIDC_NB_PVEPRO=000
|
||||
AUDIT_DOCKER_PRESENT=true
|
||||
AUDIT_DOCKER_VERSION=Docker version 29.7.2, build a7dcaa6
|
||||
AUDIT_DOCKER_ACTIVE=true
|
||||
AUDIT_COMPOSE_V2=true
|
||||
AUDIT_COMPOSE_VERSION=Docker Compose version v5.5.0
|
||||
AUDIT_COMPOSE_PATH=/opt/netbird/docker-compose.yml
|
||||
AUDIT_COMPOSE_EXISTS=true
|
||||
AUDIT_COMPOSE_SHA256=d6e9a3fa91ae603357baa1139c7f46ba9f812a0c34e5bbcee70b1a5a78cbd7b9
|
||||
AUDIT_COMPOSE_DIR=/opt/netbird
|
||||
AUDIT_ENV_EXISTS=false
|
||||
AUDIT_ENV_SHA256=NONE
|
||||
AUDIT_COMPOSE_CONFIG_VALID=true
|
||||
AUDIT_COMPOSE_SERVICES=netbird-server,traefik,dashboard
|
||||
AUDIT_COMPOSE_IMAGES=netbirdio/dashboard:latest,netbirdio/netbird-server:latest,traefik:v3.6
|
||||
AUDIT_COMPOSE_VOLUMES=netbird_traefik_letsencrypt,netbird_data
|
||||
AUDIT_RENDERED_MOLDOVA_REF_COUNT=0
|
||||
AUDIT_NETBIRD_CLIENT_PRESENT=false
|
||||
AUDIT_NETBIRD_CLIENT_VERSION=NONE
|
||||
AUDIT_NETBIRD_SERVICE_ACTIVE=false
|
||||
AUDIT_NETBIRD_SERVICE_ENABLED=false
|
||||
AUDIT_NETBIRD_WT0_PRESENT=false
|
||||
AUDIT_NETBIRD_APT_INSTALLED=NONE
|
||||
AUDIT_NETBIRD_APT_CANDIDATE=NONE
|
||||
AUDIT_OPT_NETBIRD_MOLDOVA_REF_COUNT=0
|
||||
AUDIT_OPT_NETBIRD_MOLDOVA_REF_FILES=NONE
|
||||
AUDIT_OPT_AVAILABLE_KB=34350608
|
||||
AUDIT_BACKUP_DIR_EXISTS=false
|
||||
AUDIT_CHANGES_MADE=false
|
||||
USA_99056_CLEANUP_VERIFIED=true
|
||||
USA_GUEST_MOLDOVA_REFERENCE_COUNT=0
|
||||
USA_GUEST_PORT_DROP_REJECT_COUNT=0
|
||||
USA_GUEST_NFT_DROP_POLICY_COUNT=1
|
||||
DECISION=HOLD_DIRECT_SSH_REGAINED_BUT_LOCAL_STACK_NOT_FULLY_READY
|
||||
NEXT_GATE=REPAIR_LOCAL_NETBIRD_STACK_BEFORE_EXTERNAL_CUTOVER
|
||||
TASK_RESULT=PASS_USA_DIRECT_SSH_CLEANUP_AUDIT
|
||||
CHANGES_MADE=false
|
||||
ROLLBACK_STARTED=false
|
||||
ROLLBACK_RESTORED=null
|
||||
MUTATION_OUTCOME=TEMP_RULES_FAILSAFE_SCHEDULED_AND_WINDOW_EXPIRED
|
||||
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-TEMP-FIREWALL-BYPASS-RCA-99056R1","status":"OK","changes_made":true,"rollback_started":true,"rollback_restored":null}
|
||||
MUTATION_OUTCOME=NO_MUTATION
|
||||
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-DIRECT-SSH-CLEANUP-AUDIT-99057R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
|
||||
|
||||
OUTPUT_END
|
||||
CHAT_OUTPUT_END
|
||||
|
||||
Reference in New Issue
Block a user