runtime: publish SUPPORT-260919-PVEPRO-XF2312-SECURITY-RCA-READONLY-676R1

2026-09-19 19:22:24 +00:00
parent 83a7599e8e
commit ae3d6c6f90
4 changed files with 212 additions and 155 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260919-PVEPRO-XF2312-SECURITY-RCA-READONLY-676R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "pvepro-xf2312-security-rca-readonly",
+  "started_at_utc": "2026-09-19T19:22:21Z",
+  "finished_at_utc": "2026-09-19T19:22:23Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "0a6b748e7fe834873015cec20fc2900328b87b8fad4ccf3d08d7e06b04ae89ca",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "9149640a7216136fe16435d5bd31eb7208ee797624fc0731897231d33967f94c",
+  "sanitized_output_sha256": "9149640a7216136fe16435d5bd31eb7208ee797624fc0731897231d33967f94c",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "PVE01_IDENTITY=OK\nVM100_IP_SHA256=73bd2de6f6335b5bf0ec692c69ca3a6bc0996af3318a06fc1272ad2f5f195570\nVM100_RUNNING=true\nPVE_QGA_PING_RC=0\nGUEST_QGA_TRANSPORT_RC=0\nGUEST_AUDIT_EXITCODE=0\nGUEST_OUTPUT_BEGIN\nGUEST_IDENTITY=OK\nNGINX_SITE_SHA256=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7\nNGINX_PHP_LOCATION_LINES=14\nNGINX_SENSITIVE_DENY_LOCATION_LINES=21\nNGINX_PHP_REGEX_BEFORE_DENY=true\nNGINX_TEST_RC=0\nNGINX_LOCAL_HTTP_TESTS={\"ROOT\":{\"rc\":0,\"code\":\"301\"},\"SRC_PHP\":{\"rc\":0,\"code\":\"200\"},\"SRC_DIR\":{\"rc\":0,\"code\":\"403\"},\"INTERNAL\":{\"rc\":0,\"code\":\"403\"},\"INSTALL\":{\"rc\":0,\"code\":\"403\"},\"DOTENV\":{\"rc\":0,\"code\":\"403\"}}\nMARIADB_VARIABLE_QUERY_RC=0\nMARIADB_BIND_CLASS=loopback\nMARIADB_SKIP_NETWORKING=OFF\nMARIADB_PORT=3306\nMARIADB_LISTENERS=[{\"port\":3306,\"scope\":\"wildcard\"}]\nMARIADB_BIND_CONFIG_HIT_COUNT=1\nMARIADB_BIND_CONFIG_00={\"path\":\"/etc/mysql/mariadb.conf.d/50-server.cnf\",\"line\":27,\"directive\":\"bind-address\",\"file_sha256\":\"c05b27c6fa13550e78d9d7795442041d7b83aef60b6063b55d510b23e3989add\",\"mtime_utc\":\"2026-06-27T11:11:11Z\",\"value_class\":\"loopback\"}\nXF_TABLE_COUNT=224\nXF_LOCAL_HTTP=301\nRCA_NGINX_REGEX_ORDER_CONFIRMED=true\nRCA_MARIADB_RUNTIME_WILDCARD=false\nRCA_MARIADB_CONFIG_WILDCARD=false\nRCA_MARIADB_CONFIG_LOOPBACK=true\nRCA_SECURITY_FIX_PLAN_READY=false\nTASK_COMPLETE=true\nTASK_RESULT=PVEPRO_XF2312_SECURITY_RCA_PARTIAL\nNO_MUTATION=true\nGUEST_OUTPUT_END\nPUBLIC_PLACEHOLDER_RC=0\nPUBLIC_PLACEHOLDER_SHA256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65\nPUBLIC_PLACEHOLDER_BYTES=1600\nSECURITY_RCA_CLEAN=false\nTASK_COMPLETE=true\nTASK_RESULT=PVEPRO_XF2312_SECURITY_RCA_PARTIAL\nNO_MUTATION=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-PVEPRO-XF2312-SECURITY-RCA-READONLY-676R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}
@@ -0,0 +1,72 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260919-PVEPRO-XF2312-SECURITY-RCA-READONLY-676R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=pvepro-xf2312-security-rca-readonly
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=0a6b748e7fe834873015cec20fc2900328b87b8fad4ccf3d08d7e06b04ae89ca
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=9149640a7216136fe16435d5bd31eb7208ee797624fc0731897231d33967f94c
+SANITIZED_OUTPUT_SHA256=9149640a7216136fe16435d5bd31eb7208ee797624fc0731897231d33967f94c
+OUTPUT_BEGIN
+PVE01_IDENTITY=OK
+VM100_IP_SHA256=73bd2de6f6335b5bf0ec692c69ca3a6bc0996af3318a06fc1272ad2f5f195570
+VM100_RUNNING=true
+PVE_QGA_PING_RC=0
+GUEST_QGA_TRANSPORT_RC=0
+GUEST_AUDIT_EXITCODE=0
+GUEST_OUTPUT_BEGIN
+GUEST_IDENTITY=OK
+NGINX_SITE_SHA256=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7
+NGINX_PHP_LOCATION_LINES=14
+NGINX_SENSITIVE_DENY_LOCATION_LINES=21
+NGINX_PHP_REGEX_BEFORE_DENY=true
+NGINX_TEST_RC=0
+NGINX_LOCAL_HTTP_TESTS={"ROOT":{"rc":0,"code":"301"},"SRC_PHP":{"rc":0,"code":"200"},"SRC_DIR":{"rc":0,"code":"403"},"INTERNAL":{"rc":0,"code":"403"},"INSTALL":{"rc":0,"code":"403"},"DOTENV":{"rc":0,"code":"403"}}
+MARIADB_VARIABLE_QUERY_RC=0
+MARIADB_BIND_CLASS=loopback
+MARIADB_SKIP_NETWORKING=OFF
+MARIADB_PORT=3306
+MARIADB_LISTENERS=[{"port":3306,"scope":"wildcard"}]
+MARIADB_BIND_CONFIG_HIT_COUNT=1
+MARIADB_BIND_CONFIG_00={"path":"/etc/mysql/mariadb.conf.d/50-server.cnf","line":27,"directive":"bind-address","file_sha256":"c05b27c6fa13550e78d9d7795442041d7b83aef60b6063b55d510b23e3989add","mtime_utc":"2026-06-27T11:11:11Z","value_class":"loopback"}
+XF_TABLE_COUNT=224
+XF_LOCAL_HTTP=301
+RCA_NGINX_REGEX_ORDER_CONFIRMED=true
+RCA_MARIADB_RUNTIME_WILDCARD=false
+RCA_MARIADB_CONFIG_WILDCARD=false
+RCA_MARIADB_CONFIG_LOOPBACK=true
+RCA_SECURITY_FIX_PLAN_READY=false
+TASK_COMPLETE=true
+TASK_RESULT=PVEPRO_XF2312_SECURITY_RCA_PARTIAL
+NO_MUTATION=true
+GUEST_OUTPUT_END
+PUBLIC_PLACEHOLDER_RC=0
+PUBLIC_PLACEHOLDER_SHA256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65
+PUBLIC_PLACEHOLDER_BYTES=1600
+SECURITY_RCA_CLEAN=false
+TASK_COMPLETE=true
+TASK_RESULT=PVEPRO_XF2312_SECURITY_RCA_PARTIAL
+NO_MUTATION=true
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-PVEPRO-XF2312-SECURITY-RCA-READONLY-676R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
+
+OUTPUT_END
+CHAT_OUTPUT_END
@@ -1 +1,38 @@
-{"schema_version":1,"channel":"homelab-runtime","command_id":"CONTEXT-AUTO-20260919T191701Z","status":"OK","rc":0,"host":"pve01","mode":"read-only","component":"cluster-context","started_at_utc":"2026-09-19T19:17:01Z","finished_at_utc":"2026-09-19T19:17:02Z","reference_register_checked":true,"reference_sha256":"5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66","error_register_checked":true,"error_register_sha256":"3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0","changes_made":false,"sanitized":true,"secrets_included":false,"private_addresses_included":false,"output":"AUTOMATIC_CLUSTER_CONTEXT_REFRESH=OK"}
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260919-PVEPRO-XF2312-SECURITY-RCA-READONLY-676R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "pvepro-xf2312-security-rca-readonly",
+  "started_at_utc": "2026-09-19T19:22:21Z",
+  "finished_at_utc": "2026-09-19T19:22:23Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "0a6b748e7fe834873015cec20fc2900328b87b8fad4ccf3d08d7e06b04ae89ca",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "9149640a7216136fe16435d5bd31eb7208ee797624fc0731897231d33967f94c",
+  "sanitized_output_sha256": "9149640a7216136fe16435d5bd31eb7208ee797624fc0731897231d33967f94c",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "PVE01_IDENTITY=OK\nVM100_IP_SHA256=73bd2de6f6335b5bf0ec692c69ca3a6bc0996af3318a06fc1272ad2f5f195570\nVM100_RUNNING=true\nPVE_QGA_PING_RC=0\nGUEST_QGA_TRANSPORT_RC=0\nGUEST_AUDIT_EXITCODE=0\nGUEST_OUTPUT_BEGIN\nGUEST_IDENTITY=OK\nNGINX_SITE_SHA256=d7ba4f27a59f6129159275cfa43df7dd728d9a6f134ae731a64f572047c731a7\nNGINX_PHP_LOCATION_LINES=14\nNGINX_SENSITIVE_DENY_LOCATION_LINES=21\nNGINX_PHP_REGEX_BEFORE_DENY=true\nNGINX_TEST_RC=0\nNGINX_LOCAL_HTTP_TESTS={\"ROOT\":{\"rc\":0,\"code\":\"301\"},\"SRC_PHP\":{\"rc\":0,\"code\":\"200\"},\"SRC_DIR\":{\"rc\":0,\"code\":\"403\"},\"INTERNAL\":{\"rc\":0,\"code\":\"403\"},\"INSTALL\":{\"rc\":0,\"code\":\"403\"},\"DOTENV\":{\"rc\":0,\"code\":\"403\"}}\nMARIADB_VARIABLE_QUERY_RC=0\nMARIADB_BIND_CLASS=loopback\nMARIADB_SKIP_NETWORKING=OFF\nMARIADB_PORT=3306\nMARIADB_LISTENERS=[{\"port\":3306,\"scope\":\"wildcard\"}]\nMARIADB_BIND_CONFIG_HIT_COUNT=1\nMARIADB_BIND_CONFIG_00={\"path\":\"/etc/mysql/mariadb.conf.d/50-server.cnf\",\"line\":27,\"directive\":\"bind-address\",\"file_sha256\":\"c05b27c6fa13550e78d9d7795442041d7b83aef60b6063b55d510b23e3989add\",\"mtime_utc\":\"2026-06-27T11:11:11Z\",\"value_class\":\"loopback\"}\nXF_TABLE_COUNT=224\nXF_LOCAL_HTTP=301\nRCA_NGINX_REGEX_ORDER_CONFIRMED=true\nRCA_MARIADB_RUNTIME_WILDCARD=false\nRCA_MARIADB_CONFIG_WILDCARD=false\nRCA_MARIADB_CONFIG_LOOPBACK=true\nRCA_SECURITY_FIX_PLAN_READY=false\nTASK_COMPLETE=true\nTASK_RESULT=PVEPRO_XF2312_SECURITY_RCA_PARTIAL\nNO_MUTATION=true\nGUEST_OUTPUT_END\nPUBLIC_PLACEHOLDER_RC=0\nPUBLIC_PLACEHOLDER_SHA256=87d824201388bd215fd1c5b65c7c46ac34ad1c88712d94ef0368bf5a3ddc4a65\nPUBLIC_PLACEHOLDER_BYTES=1600\nSECURITY_RCA_CLEAN=false\nTASK_COMPLETE=true\nTASK_RESULT=PVEPRO_XF2312_SECURITY_RCA_PARTIAL\nNO_MUTATION=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-PVEPRO-XF2312-SECURITY-RCA-READONLY-676R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
+}