diff --git a/runtime/history/SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1.json b/runtime/history/SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1.json new file mode 100644 index 00000000..65516916 --- /dev/null +++ b/runtime/history/SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "netbird-management-server-audit-readonly", + "started_at_utc": "2026-09-19T03:37:40Z", + "finished_at_utc": "2026-09-19T03:38:03Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "05748fa27e7bddef0ad5c6f6ce477b5291d901459a89061d4b508da45ea607cc", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e", + "sanitized_output_sha256": "b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nUSA_IDENTITY_GATES={\"inventory\":true,\"key\":true,\"moldova_hostkey\":true,\"usa_hostkey\":true}\nPVE1_TRANSPORT_RC=0\nPVE1_RECEIPT_VALID=true\nPVE1_OBSERVATION={\"role\":\"PVE1\",\"diagnostic_only\":true,\"endpoints\":[{\"label\":\"PVE1\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":false,\"dns_count\":1,\"dns_hashes\":[\"1fc73136d6d7\"],\"connect_hash\":\"1fc73136d6d7\",\"tcp_ms\":172,\"error\":\"TLS_TIMEOUT\",\"elapsed_ms\":15192}],\"grpc\":[],\"complete\":true}\nEDGE_TRANSPORT_RC=0\nEDGE_RECEIPT_VALID=true\nEDGE_OBSERVATION={\"role\":\"EDGE\",\"diagnostic_only\":true,\"endpoints\":[{\"label\":\"EDGE\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":true,\"dns_count\":1,\"dns_hashes\":[\"1fc73136d6d7\"],\"connect_hash\":\"1fc73136d6d7\",\"tcp_ms\":239,\"tls_ms\":498,\"tls_version\":\"TLSv1.3\",\"alpn\":\"h2\",\"certificate_sha256\":\"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf\",\"elapsed_ms\":498}],\"grpc\":[{\"label\":\"EDGE\",\"command_rc\":0,\"http_meta\":[\"200\",\"2\"],\"grpc_status\":\"0\",\"content_type\":\"application/grpc\"}],\"complete\":true}\nUSA_TRANSPORT_RC=0\nUSA_RECEIPT_VALID=true\nUSA_OBSERVATION={\"role\":\"USA\",\"diagnostic_only\":true,\"server\":{\"uid\":0,\"expected_hostname\":true,\"identity_ok\":true,\"listen_443\":{\"rc\":0,\"lines\":[\"LISTEN 0 4096 [ADDR:1fc73136d6d7]:443 [ADDR:19e362559721]:* users:((\\\"docker-proxy\\\",pid=997,fd=8))\"]},\"docker_rc\":0,\"containers\":[{\"name\":\"netbird-traefik\",\"image\":\"traefik:v3.6\",\"status\":\"Up 3 weeks\",\"ports\":\"\\\"netbird_netbird\\\"|{\\\"443/tcp\\\":[{\\\"HostIp\\\":\\\"[ADDR:1fc73136d6d7]\\\",\\\"HostPort\\\":\\\"443\\\"}],\\\"80/tcp\\\":[{\\\"HostIp\\\":\\\"[ADDR:1fc73136d6d7]\\\",\\\"HostPort\\\":\\\"80\\\"}]}\",\"inspect_rc\":0,\"logs_rc\":0,\"log_counts\":{\"deadline\":0,\"x509\":0,\"handshake\":0,\"refused\":0,\"grpc\":192,\"panic\":0}},{\"name\":\"netbird-dashboard\",\"image\":\"netbirdio/dashboard:latest\",\"status\":\"Up 3 weeks\",\"ports\":\"\\\"netbird_netbird\\\"|{\\\"443/tcp\\\":null,\\\"80/tcp\\\":null}\",\"inspect_rc\":0,\"logs_rc\":0,\"log_counts\":{\"deadline\":0,\"x509\":0,\"handshake\":0,\"refused\":0,\"grpc\":0,\"panic\":0}},{\"name\":\"netbird-server\",\"image\":\"netbirdio/netbird-server:latest\",\"status\":\"Up 3 weeks\",\"ports\":\"\\\"netbird_netbird\\\"|{\\\"3478/udp\\\":[{\\\"HostIp\\\":\\\"[ADDR:1fc73136d6d7]\\\",\\\"HostPort\\\":\\\"3478\\\"}]}\",\"inspect_rc\":0,\"logs_rc\":0,\"log_counts\":{\"deadline\":0,\"x509\":0,\"handshake\":0,\"refused\":0,\"grpc\":0,\"panic\":0}}],\"firewalls\":[{\"tool\":\"IPTABLES_FILTER\",\"rc\":0,\"lines\":[\"# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026\",\"*filter\",\":INPUT ACCEPT [0:0]\",\":FORWARD DROP [0:0]\",\":OUTPUT ACCEPT [0:0]\",\":DOCKER - [0:0]\",\":DOCKER-BRIDGE - [0:0]\",\":DOCKER-CT - [0:0]\",\":DOCKER-FORWARD - [0:0]\",\":DOCKER-INTERNAL - [0:0]\",\":DOCKER-USER - [0:0]\",\"[34669180:3550258849] -A FORWARD -j DOCKER-USER\",\"[34669180:3550258849] -A FORWARD -j DOCKER-FORWARD\",\"[85783:4117309] -A DOCKER -d [ADDR:be20ca75510c] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p udp -m udp --dport 3478 -j ACCEPT\",\"[83245:4960506] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 443 -j ACCEPT\",\"[55635:3113546] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 80 -j ACCEPT\",\"[0:0] -A DOCKER ! -i br-eda2ddba3837 -o br-eda2ddba3837 -j DROP\",\"[0:0] -A DOCKER ! -i docker0 -o docker0 -j DROP\",\"[224663:12191361] -A DOCKER-BRIDGE -o br-eda2ddba3837 -j DOCKER\",\"[0:0] -A DOCKER-BRIDGE -o docker0 -j DOCKER\",\"[18547195:1763740123] -A DOCKER-CT -o br-eda2ddba3837 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\",\"[0:0] -A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\",\"[34669180:3550258849] -A DOCKER-FORWARD -j DOCKER-CT\",\"[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-INTERNAL\",\"[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-BRIDGE\",\"[15897322:1774327365] -A DOCKER-FORWARD -i br-eda2ddba3837 -j ACCEPT\",\"[0:0] -A DOCKER-FORWARD -i docker0 -j ACCEPT\",\"COMMIT\",\"# Completed on Sat Sep 19 [IPV6] 2026\"],\"selected_lines\":29,\"truncated\":false},{\"tool\":\"IPTABLES_NAT\",\"rc\":0,\"lines\":[\"# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026\",\"*nat\",\":PREROUTING ACCEPT [0:0]\",\":INPUT ACCEPT [0:0]\",\":OUTPUT ACCEPT [0:0]\",\":POSTROUTING ACCEPT [0:0]\",\":DOCKER - [0:0]\",\"[3101282:183411842] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER\",\"[0:0] -A OUTPUT ! -d [ADDR:4a7ea1593dd4] -m addrtype --dst-type LOCAL -j DOCKER\",\"[0:0] -A POSTROUTING -s [ADDR:3538188866fb] ! -o docker0 -j MASQUERADE\",\"[1290:77668] -A POSTROUTING -s [ADDR:c41135b9d022] ! -o br-eda2ddba3837 -j MASQUERADE\",\"[55635:3113546] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 80 -j DNAT --to-destination [ADDR:5d71fd96b350]:80\",\"[83245:4960506] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 443 -j DNAT --to-destination [ADDR:5d71fd96b350]:443\",\"[85694:4113877] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p udp -m udp --dport 3478 -j DNAT --to-destination [ADDR:5ca1cde58f6a]:3478\",\"COMMIT\",\"# Completed on Sat Sep 19 [IPV6] 2026\"],\"selected_lines\":16,\"truncated\":false},{\"tool\":\"NFT\",\"rc\":0,\"lines\":[\"table ip nat {\",\"\\tchain DOCKER {\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:1fc73136d6d7] tcp dport 80 counter packets 55635 bytes 3113546 dnat to [ADDR:5d71fd96b350]:80\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:1fc73136d6d7] tcp dport 443 counter packets 83245 bytes 4960506 dnat to [ADDR:5d71fd96b350]:443\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:1fc73136d6d7] udp dport 3478 counter packets 85694 bytes 4113877 dnat to [ADDR:5ca1cde58f6a]:3478\",\"\\tchain PREROUTING {\",\"\\t\\ttype nat hook prerouting priority dstnat; policy accept;\",\"\\t\\tfib daddr type local counter packets 3101282 bytes 183411842 jump DOCKER\",\"\\tchain OUTPUT {\",\"\\t\\ttype nat hook output priority -100; policy accept;\",\"\\t\\tip daddr != [ADDR:4a7ea1593dd4] fib daddr type local counter packets 0 bytes 0 jump DOCKER\",\"\\tchain POSTROUTING {\",\"\\t\\ttype nat hook postrouting priority srcnat; policy accept;\",\"table ip filter {\",\"\\tchain DOCKER {\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5ca1cde58f6a] udp dport 3478 counter packets 85783 bytes 4117309 accept\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d71fd96b350] tcp dport 443 counter packets 83245 bytes 4960506 accept\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d71fd96b350] tcp dport 80 counter packets 55635 bytes 3113546 accept\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" counter packets 0 bytes 0 drop\",\"\\t\\tiifname != \\\"docker0\\\" oifname \\\"docker0\\\" counter packets 0 bytes 0 drop\",\"\\tchain DOCKER-FORWARD {\",\"\\t\\tcounter packets 34669180 bytes 3550258849 jump DOCKER-CT\",\"\\t\\tcounter packets 16121985 bytes 1786518726 jump DOCKER-INTERNAL\",\"\\t\\tcounter packets 16121985 bytes 1786518726 jump DOCKER-BRIDGE\",\"\\t\\tiifname \\\"br-eda2ddba3837\\\" counter packets 15897322 bytes 1774327365 accept\",\"\\t\\tiifname \\\"docker0\\\" counter packets 0 bytes 0 accept\",\"\\tchain DOCKER-BRIDGE {\",\"\\t\\toifname \\\"br-eda2ddba3837\\\" counter packets 224663 bytes 12191361 jump DOCKER\",\"\\t\\toifname \\\"docker0\\\" counter packets 0 bytes 0 jump DOCKER\",\"\\tchain DOCKER-CT {\",\"\\t\\toifname \\\"br-eda2ddba3837\\\" ct state related,established counter packets 18547195 bytes 1763740123 accept\",\"\\t\\toifname \\\"docker0\\\" ct state related,established counter packets 0 bytes 0 accept\",\"\\tchain DOCKER-INTERNAL {\",\"\\tchain FORWARD {\",\"\\t\\ttype filter hook forward priority filter; policy drop;\",\"\\t\\tcounter packets 34669180 bytes 3550258849 jump DOCKER-USER\",\"\\t\\tcounter packets 34669180 bytes 3550258849 jump DOCKER-FORWARD\",\"\\tchain DOCKER-USER {\",\"table ip6 nat {\",\"\\tchain DOCKER {\",\"\\tchain PREROUTING {\",\"\\t\\ttype nat hook prerouting priority dstnat; policy accept;\",\"\\t\\tfib daddr type local counter packets 0 bytes 0 jump DOCKER\",\"\\tchain OUTPUT {\",\"\\t\\ttype nat hook output priority -100; policy accept;\",\"\\t\\tip6 daddr != [IPV6] fib daddr type local counter packets 0 bytes 0 jump DOCKER\",\"table ip6 filter {\",\"\\tchain DOCKER {\",\"\\tchain DOCKER-FORWARD {\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-CT\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-INTERNAL\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-BRIDGE\",\"\\tchain DOCKER-BRIDGE {\",\"\\tchain DOCKER-CT {\",\"\\tchain DOCKER-INTERNAL {\",\"\\tchain FORWARD {\",\"\\t\\ttype filter hook forward priority filter; policy accept;\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-USER\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-FORWARD\",\"\\tchain DOCKER-USER {\",\"table ip raw {\",\"\\tchain PREROUTING {\",\"\\t\\ttype filter hook prerouting priority raw; policy accept;\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d7b39d190b3] counter packets 0 bytes 0 drop\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d71fd96b350] counter packets 0 bytes 0 drop\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5ca1cde58f6a] counter packets 0 bytes 0 drop\"],\"selected_lines\":66,\"truncated\":false}]},\"endpoints\":[{\"label\":\"LOCAL_SNI\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":false,\"connect_hash\":\"12ca17b49af2\",\"error\":\"ConnectionRefusedError\",\"errno\":111,\"elapsed_ms\":2},{\"label\":\"SERVER_PUBLIC\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":true,\"dns_count\":1,\"dns_hashes\":[\"1fc73136d6d7\"],\"connect_hash\":\"1fc73136d6d7\",\"tcp_ms\":173,\"tls_ms\":234,\"tls_version\":\"TLSv1.3\",\"alpn\":\"h2\",\"certificate_sha256\":\"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf\",\"elapsed_ms\":234}],\"grpc\":[{\"label\":\"LOCAL_GRPC\",\"command_rc\":7,\"http_meta\":[\"000\",\"0\"],\"grpc_status\":null,\"content_type\":null},{\"label\":\"SERVER_PUBLIC_GRPC\",\"command_rc\":0,\"http_meta\":[\"200\",\"2\"],\"grpc_status\":\"0\",\"content_type\":\"application/grpc\"}],\"complete\":true}\nTASK_COMPLETE=true\nTASK_RESULT=NETBIRD_SERVER_EVIDENCE_COLLECTED\nNO_CONNECTION_FIX_APPLIED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1.txt b/runtime/history/SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1.txt new file mode 100644 index 00000000..b49f1e18 --- /dev/null +++ b/runtime/history/SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1.txt @@ -0,0 +1,49 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=netbird-management-server-audit-readonly +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=05748fa27e7bddef0ad5c6f6ce477b5291d901459a89061d4b508da45ea607cc +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e +SANITIZED_OUTPUT_SHA256=b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e +OUTPUT_BEGIN +ERROR_REGISTER_CHECK=OK +REFERENCE_CHECK=OK +AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED +USA_IDENTITY_GATES={"inventory":true,"key":true,"moldova_hostkey":true,"usa_hostkey":true} +PVE1_TRANSPORT_RC=0 +PVE1_RECEIPT_VALID=true +PVE1_OBSERVATION={"role":"PVE1","diagnostic_only":true,"endpoints":[{"label":"PVE1","sni":"nb.pvepro.ru","tls_verified":false,"dns_count":1,"dns_hashes":["1fc73136d6d7"],"connect_hash":"1fc73136d6d7","tcp_ms":172,"error":"TLS_TIMEOUT","elapsed_ms":15192}],"grpc":[],"complete":true} +EDGE_TRANSPORT_RC=0 +EDGE_RECEIPT_VALID=true +EDGE_OBSERVATION={"role":"EDGE","diagnostic_only":true,"endpoints":[{"label":"EDGE","sni":"nb.pvepro.ru","tls_verified":true,"dns_count":1,"dns_hashes":["1fc73136d6d7"],"connect_hash":"1fc73136d6d7","tcp_ms":239,"tls_ms":498,"tls_version":"TLSv1.3","alpn":"h2","certificate_sha256":"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf","elapsed_ms":498}],"grpc":[{"label":"EDGE","command_rc":0,"http_meta":["200","2"],"grpc_status":"0","content_type":"application/grpc"}],"complete":true} +USA_TRANSPORT_RC=0 +USA_RECEIPT_VALID=true +USA_OBSERVATION={"role":"USA","diagnostic_only":true,"server":{"uid":0,"expected_hostname":true,"identity_ok":true,"listen_443":{"rc":0,"lines":["LISTEN 0 4096 [ADDR:1fc73136d6d7]:443 [ADDR:19e362559721]:* users:((\"docker-proxy\",pid=997,fd=8))"]},"docker_rc":0,"containers":[{"name":"netbird-traefik","image":"traefik:v3.6","status":"Up 3 weeks","ports":"\"netbird_netbird\"|{\"443/tcp\":[{\"HostIp\":\"[ADDR:1fc73136d6d7]\",\"HostPort\":\"443\"}],\"80/tcp\":[{\"HostIp\":\"[ADDR:1fc73136d6d7]\",\"HostPort\":\"80\"}]}","inspect_rc":0,"logs_rc":0,"log_counts":{"deadline":0,"x509":0,"handshake":0,"refused":0,"grpc":192,"panic":0}},{"name":"netbird-dashboard","image":"netbirdio/dashboard:latest","status":"Up 3 weeks","ports":"\"netbird_netbird\"|{\"443/tcp\":null,\"80/tcp\":null}","inspect_rc":0,"logs_rc":0,"log_counts":{"deadline":0,"x509":0,"handshake":0,"refused":0,"grpc":0,"panic":0}},{"name":"netbird-server","image":"netbirdio/netbird-server:latest","status":"Up 3 weeks","ports":"\"netbird_netbird\"|{\"3478/udp\":[{\"HostIp\":\"[ADDR:1fc73136d6d7]\",\"HostPort\":\"3478\"}]}","inspect_rc":0,"logs_rc":0,"log_counts":{"deadline":0,"x509":0,"handshake":0,"refused":0,"grpc":0,"panic":0}}],"firewalls":[{"tool":"IPTABLES_FILTER","rc":0,"lines":["# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026","*filter",":INPUT ACCEPT [0:0]",":FORWARD DROP [0:0]",":OUTPUT ACCEPT [0:0]",":DOCKER - [0:0]",":DOCKER-BRIDGE - [0:0]",":DOCKER-CT - [0:0]",":DOCKER-FORWARD - [0:0]",":DOCKER-INTERNAL - [0:0]",":DOCKER-USER - [0:0]","[34669180:3550258849] -A FORWARD -j DOCKER-USER","[34669180:3550258849] -A FORWARD -j DOCKER-FORWARD","[85783:4117309] -A DOCKER -d [ADDR:be20ca75510c] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p udp -m udp --dport 3478 -j ACCEPT","[83245:4960506] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 443 -j ACCEPT","[55635:3113546] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 80 -j ACCEPT","[0:0] -A DOCKER ! -i br-eda2ddba3837 -o br-eda2ddba3837 -j DROP","[0:0] -A DOCKER ! -i docker0 -o docker0 -j DROP","[224663:12191361] -A DOCKER-BRIDGE -o br-eda2ddba3837 -j DOCKER","[0:0] -A DOCKER-BRIDGE -o docker0 -j DOCKER","[18547195:1763740123] -A DOCKER-CT -o br-eda2ddba3837 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT","[0:0] -A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT","[34669180:3550258849] -A DOCKER-FORWARD -j DOCKER-CT","[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-INTERNAL","[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-BRIDGE","[15897322:1774327365] -A DOCKER-FORWARD -i br-eda2ddba3837 -j ACCEPT","[0:0] -A DOCKER-FORWARD -i docker0 -j ACCEPT","COMMIT","# Completed on Sat Sep 19 [IPV6] 2026"],"selected_lines":29,"truncated":false},{"tool":"IPTABLES_NAT","rc":0,"lines":["# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026","*nat",":PREROUTING ACCEPT [0:0]",":INPUT ACCEPT [0:0]",":OUTPUT ACCEPT [0:0]",":POSTROUTING ACCEPT [0:0]",":DOCKER - [0:0]","[3101282:183411842] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER","[0:0] -A OUTPUT ! -d [ADDR:4a7ea1593dd4] -m addrtype --dst-type LOCAL -j DOCKER","[0:0] -A POSTROUTING -s [ADDR:3538188866fb] ! -o docker0 -j MASQUERADE","[1290:77668] -A POSTROUTING -s [ADDR:c41135b9d022] ! -o br-eda2ddba3837 -j MASQUERADE","[55635:3113546] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 80 -j DNAT --to-destination [ADDR:5d71fd96b350]:80","[83245:4960506] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 443 -j DNAT --to-destination [ADDR:5d71fd96b350]:443","[85694:4113877] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p udp -m udp --dport 3478 -j DNAT --to-destination [ADDR:5ca1cde58f6a]:3478","COMMIT","# Completed on Sat Sep 19 [IPV6] 2026"],"selected_lines":16,"truncated":false},{"tool":"NFT","rc":0,"lines":["table ip nat {","\tchain DOCKER {","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:1fc73136d6d7] tcp dport 80 counter packets 55635 bytes 3113546 dnat to [ADDR:5d71fd96b350]:80","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:1fc73136d6d7] tcp dport 443 counter packets 83245 bytes 4960506 dnat to [ADDR:5d71fd96b350]:443","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:1fc73136d6d7] udp dport 3478 counter packets 85694 bytes 4113877 dnat to [ADDR:5ca1cde58f6a]:3478","\tchain PREROUTING {","\t\ttype nat hook prerouting priority dstnat; policy accept;","\t\tfib daddr type local counter packets 3101282 bytes 183411842 jump DOCKER","\tchain OUTPUT {","\t\ttype nat hook output priority -100; policy accept;","\t\tip daddr != [ADDR:4a7ea1593dd4] fib daddr type local counter packets 0 bytes 0 jump DOCKER","\tchain POSTROUTING {","\t\ttype nat hook postrouting priority srcnat; policy accept;","table ip filter {","\tchain DOCKER {","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" ip daddr [ADDR:5ca1cde58f6a] udp dport 3478 counter packets 85783 bytes 4117309 accept","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" ip daddr [ADDR:5d71fd96b350] tcp dport 443 counter packets 83245 bytes 4960506 accept","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" ip daddr [ADDR:5d71fd96b350] tcp dport 80 counter packets 55635 bytes 3113546 accept","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" counter packets 0 bytes 0 drop","\t\tiifname != \"docker0\" oifname \"docker0\" counter packets 0 bytes 0 drop","\tchain DOCKER-FORWARD {","\t\tcounter packets 34669180 bytes 3550258849 jump DOCKER-CT","\t\tcounter packets 16121985 bytes 1786518726 jump DOCKER-INTERNAL","\t\tcounter packets 16121985 bytes 1786518726 jump DOCKER-BRIDGE","\t\tiifname \"br-eda2ddba3837\" counter packets 15897322 bytes 1774327365 accept","\t\tiifname \"docker0\" counter packets 0 bytes 0 accept","\tchain DOCKER-BRIDGE {","\t\toifname \"br-eda2ddba3837\" counter packets 224663 bytes 12191361 jump DOCKER","\t\toifname \"docker0\" counter packets 0 bytes 0 jump DOCKER","\tchain DOCKER-CT {","\t\toifname \"br-eda2ddba3837\" ct state related,established counter packets 18547195 bytes 1763740123 accept","\t\toifname \"docker0\" ct state related,established counter packets 0 bytes 0 accept","\tchain DOCKER-INTERNAL {","\tchain FORWARD {","\t\ttype filter hook forward priority filter; policy drop;","\t\tcounter packets 34669180 bytes 3550258849 jump DOCKER-USER","\t\tcounter packets 34669180 bytes 3550258849 jump DOCKER-FORWARD","\tchain DOCKER-USER {","table ip6 nat {","\tchain DOCKER {","\tchain PREROUTING {","\t\ttype nat hook prerouting priority dstnat; policy accept;","\t\tfib daddr type local counter packets 0 bytes 0 jump DOCKER","\tchain OUTPUT {","\t\ttype nat hook output priority -100; policy accept;","\t\tip6 daddr != [IPV6] fib daddr type local counter packets 0 bytes 0 jump DOCKER","table ip6 filter {","\tchain DOCKER {","\tchain DOCKER-FORWARD {","\t\tcounter packets 0 bytes 0 jump DOCKER-CT","\t\tcounter packets 0 bytes 0 jump DOCKER-INTERNAL","\t\tcounter packets 0 bytes 0 jump DOCKER-BRIDGE","\tchain DOCKER-BRIDGE {","\tchain DOCKER-CT {","\tchain DOCKER-INTERNAL {","\tchain FORWARD {","\t\ttype filter hook forward priority filter; policy accept;","\t\tcounter packets 0 bytes 0 jump DOCKER-USER","\t\tcounter packets 0 bytes 0 jump DOCKER-FORWARD","\tchain DOCKER-USER {","table ip raw {","\tchain PREROUTING {","\t\ttype filter hook prerouting priority raw; policy accept;","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:5d7b39d190b3] counter packets 0 bytes 0 drop","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:5d71fd96b350] counter packets 0 bytes 0 drop","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:5ca1cde58f6a] counter packets 0 bytes 0 drop"],"selected_lines":66,"truncated":false}]},"endpoints":[{"label":"LOCAL_SNI","sni":"nb.pvepro.ru","tls_verified":false,"connect_hash":"12ca17b49af2","error":"ConnectionRefusedError","errno":111,"elapsed_ms":2},{"label":"SERVER_PUBLIC","sni":"nb.pvepro.ru","tls_verified":true,"dns_count":1,"dns_hashes":["1fc73136d6d7"],"connect_hash":"1fc73136d6d7","tcp_ms":173,"tls_ms":234,"tls_version":"TLSv1.3","alpn":"h2","certificate_sha256":"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf","elapsed_ms":234}],"grpc":[{"label":"LOCAL_GRPC","command_rc":7,"http_meta":["000","0"],"grpc_status":null,"content_type":null},{"label":"SERVER_PUBLIC_GRPC","command_rc":0,"http_meta":["200","2"],"grpc_status":"0","content_type":"application/grpc"}],"complete":true} +TASK_COMPLETE=true +TASK_RESULT=NETBIRD_SERVER_EVIDENCE_COLLECTED +NO_CONNECTION_FIX_APPLIED=true +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 8c0beadd..65516916 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1 +1,38 @@ -{"schema_version":1,"channel":"homelab-runtime","command_id":"CONTEXT-AUTO-20260919T031701Z","status":"OK","rc":0,"host":"pve01","mode":"read-only","component":"cluster-context","started_at_utc":"2026-09-19T03:17:01Z","finished_at_utc":"2026-09-19T03:17:02Z","reference_register_checked":true,"reference_sha256":"5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66","error_register_checked":true,"error_register_sha256":"3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0","changes_made":false,"sanitized":true,"secrets_included":false,"private_addresses_included":false,"output":"AUTOMATIC_CLUSTER_CONTEXT_REFRESH=OK"} +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "netbird-management-server-audit-readonly", + "started_at_utc": "2026-09-19T03:37:40Z", + "finished_at_utc": "2026-09-19T03:38:03Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "05748fa27e7bddef0ad5c6f6ce477b5291d901459a89061d4b508da45ea607cc", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e", + "sanitized_output_sha256": "b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nUSA_IDENTITY_GATES={\"inventory\":true,\"key\":true,\"moldova_hostkey\":true,\"usa_hostkey\":true}\nPVE1_TRANSPORT_RC=0\nPVE1_RECEIPT_VALID=true\nPVE1_OBSERVATION={\"role\":\"PVE1\",\"diagnostic_only\":true,\"endpoints\":[{\"label\":\"PVE1\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":false,\"dns_count\":1,\"dns_hashes\":[\"1fc73136d6d7\"],\"connect_hash\":\"1fc73136d6d7\",\"tcp_ms\":172,\"error\":\"TLS_TIMEOUT\",\"elapsed_ms\":15192}],\"grpc\":[],\"complete\":true}\nEDGE_TRANSPORT_RC=0\nEDGE_RECEIPT_VALID=true\nEDGE_OBSERVATION={\"role\":\"EDGE\",\"diagnostic_only\":true,\"endpoints\":[{\"label\":\"EDGE\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":true,\"dns_count\":1,\"dns_hashes\":[\"1fc73136d6d7\"],\"connect_hash\":\"1fc73136d6d7\",\"tcp_ms\":239,\"tls_ms\":498,\"tls_version\":\"TLSv1.3\",\"alpn\":\"h2\",\"certificate_sha256\":\"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf\",\"elapsed_ms\":498}],\"grpc\":[{\"label\":\"EDGE\",\"command_rc\":0,\"http_meta\":[\"200\",\"2\"],\"grpc_status\":\"0\",\"content_type\":\"application/grpc\"}],\"complete\":true}\nUSA_TRANSPORT_RC=0\nUSA_RECEIPT_VALID=true\nUSA_OBSERVATION={\"role\":\"USA\",\"diagnostic_only\":true,\"server\":{\"uid\":0,\"expected_hostname\":true,\"identity_ok\":true,\"listen_443\":{\"rc\":0,\"lines\":[\"LISTEN 0 4096 [ADDR:1fc73136d6d7]:443 [ADDR:19e362559721]:* users:((\\\"docker-proxy\\\",pid=997,fd=8))\"]},\"docker_rc\":0,\"containers\":[{\"name\":\"netbird-traefik\",\"image\":\"traefik:v3.6\",\"status\":\"Up 3 weeks\",\"ports\":\"\\\"netbird_netbird\\\"|{\\\"443/tcp\\\":[{\\\"HostIp\\\":\\\"[ADDR:1fc73136d6d7]\\\",\\\"HostPort\\\":\\\"443\\\"}],\\\"80/tcp\\\":[{\\\"HostIp\\\":\\\"[ADDR:1fc73136d6d7]\\\",\\\"HostPort\\\":\\\"80\\\"}]}\",\"inspect_rc\":0,\"logs_rc\":0,\"log_counts\":{\"deadline\":0,\"x509\":0,\"handshake\":0,\"refused\":0,\"grpc\":192,\"panic\":0}},{\"name\":\"netbird-dashboard\",\"image\":\"netbirdio/dashboard:latest\",\"status\":\"Up 3 weeks\",\"ports\":\"\\\"netbird_netbird\\\"|{\\\"443/tcp\\\":null,\\\"80/tcp\\\":null}\",\"inspect_rc\":0,\"logs_rc\":0,\"log_counts\":{\"deadline\":0,\"x509\":0,\"handshake\":0,\"refused\":0,\"grpc\":0,\"panic\":0}},{\"name\":\"netbird-server\",\"image\":\"netbirdio/netbird-server:latest\",\"status\":\"Up 3 weeks\",\"ports\":\"\\\"netbird_netbird\\\"|{\\\"3478/udp\\\":[{\\\"HostIp\\\":\\\"[ADDR:1fc73136d6d7]\\\",\\\"HostPort\\\":\\\"3478\\\"}]}\",\"inspect_rc\":0,\"logs_rc\":0,\"log_counts\":{\"deadline\":0,\"x509\":0,\"handshake\":0,\"refused\":0,\"grpc\":0,\"panic\":0}}],\"firewalls\":[{\"tool\":\"IPTABLES_FILTER\",\"rc\":0,\"lines\":[\"# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026\",\"*filter\",\":INPUT ACCEPT [0:0]\",\":FORWARD DROP [0:0]\",\":OUTPUT ACCEPT [0:0]\",\":DOCKER - [0:0]\",\":DOCKER-BRIDGE - [0:0]\",\":DOCKER-CT - [0:0]\",\":DOCKER-FORWARD - [0:0]\",\":DOCKER-INTERNAL - [0:0]\",\":DOCKER-USER - [0:0]\",\"[34669180:3550258849] -A FORWARD -j DOCKER-USER\",\"[34669180:3550258849] -A FORWARD -j DOCKER-FORWARD\",\"[85783:4117309] -A DOCKER -d [ADDR:be20ca75510c] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p udp -m udp --dport 3478 -j ACCEPT\",\"[83245:4960506] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 443 -j ACCEPT\",\"[55635:3113546] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 80 -j ACCEPT\",\"[0:0] -A DOCKER ! -i br-eda2ddba3837 -o br-eda2ddba3837 -j DROP\",\"[0:0] -A DOCKER ! -i docker0 -o docker0 -j DROP\",\"[224663:12191361] -A DOCKER-BRIDGE -o br-eda2ddba3837 -j DOCKER\",\"[0:0] -A DOCKER-BRIDGE -o docker0 -j DOCKER\",\"[18547195:1763740123] -A DOCKER-CT -o br-eda2ddba3837 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\",\"[0:0] -A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\",\"[34669180:3550258849] -A DOCKER-FORWARD -j DOCKER-CT\",\"[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-INTERNAL\",\"[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-BRIDGE\",\"[15897322:1774327365] -A DOCKER-FORWARD -i br-eda2ddba3837 -j ACCEPT\",\"[0:0] -A DOCKER-FORWARD -i docker0 -j ACCEPT\",\"COMMIT\",\"# Completed on Sat Sep 19 [IPV6] 2026\"],\"selected_lines\":29,\"truncated\":false},{\"tool\":\"IPTABLES_NAT\",\"rc\":0,\"lines\":[\"# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026\",\"*nat\",\":PREROUTING ACCEPT [0:0]\",\":INPUT ACCEPT [0:0]\",\":OUTPUT ACCEPT [0:0]\",\":POSTROUTING ACCEPT [0:0]\",\":DOCKER - [0:0]\",\"[3101282:183411842] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER\",\"[0:0] -A OUTPUT ! -d [ADDR:4a7ea1593dd4] -m addrtype --dst-type LOCAL -j DOCKER\",\"[0:0] -A POSTROUTING -s [ADDR:3538188866fb] ! -o docker0 -j MASQUERADE\",\"[1290:77668] -A POSTROUTING -s [ADDR:c41135b9d022] ! -o br-eda2ddba3837 -j MASQUERADE\",\"[55635:3113546] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 80 -j DNAT --to-destination [ADDR:5d71fd96b350]:80\",\"[83245:4960506] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 443 -j DNAT --to-destination [ADDR:5d71fd96b350]:443\",\"[85694:4113877] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p udp -m udp --dport 3478 -j DNAT --to-destination [ADDR:5ca1cde58f6a]:3478\",\"COMMIT\",\"# Completed on Sat Sep 19 [IPV6] 2026\"],\"selected_lines\":16,\"truncated\":false},{\"tool\":\"NFT\",\"rc\":0,\"lines\":[\"table ip nat {\",\"\\tchain DOCKER {\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:1fc73136d6d7] tcp dport 80 counter packets 55635 bytes 3113546 dnat to [ADDR:5d71fd96b350]:80\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:1fc73136d6d7] tcp dport 443 counter packets 83245 bytes 4960506 dnat to [ADDR:5d71fd96b350]:443\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:1fc73136d6d7] udp dport 3478 counter packets 85694 bytes 4113877 dnat to [ADDR:5ca1cde58f6a]:3478\",\"\\tchain PREROUTING {\",\"\\t\\ttype nat hook prerouting priority dstnat; policy accept;\",\"\\t\\tfib daddr type local counter packets 3101282 bytes 183411842 jump DOCKER\",\"\\tchain OUTPUT {\",\"\\t\\ttype nat hook output priority -100; policy accept;\",\"\\t\\tip daddr != [ADDR:4a7ea1593dd4] fib daddr type local counter packets 0 bytes 0 jump DOCKER\",\"\\tchain POSTROUTING {\",\"\\t\\ttype nat hook postrouting priority srcnat; policy accept;\",\"table ip filter {\",\"\\tchain DOCKER {\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5ca1cde58f6a] udp dport 3478 counter packets 85783 bytes 4117309 accept\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d71fd96b350] tcp dport 443 counter packets 83245 bytes 4960506 accept\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d71fd96b350] tcp dport 80 counter packets 55635 bytes 3113546 accept\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" counter packets 0 bytes 0 drop\",\"\\t\\tiifname != \\\"docker0\\\" oifname \\\"docker0\\\" counter packets 0 bytes 0 drop\",\"\\tchain DOCKER-FORWARD {\",\"\\t\\tcounter packets 34669180 bytes 3550258849 jump DOCKER-CT\",\"\\t\\tcounter packets 16121985 bytes 1786518726 jump DOCKER-INTERNAL\",\"\\t\\tcounter packets 16121985 bytes 1786518726 jump DOCKER-BRIDGE\",\"\\t\\tiifname \\\"br-eda2ddba3837\\\" counter packets 15897322 bytes 1774327365 accept\",\"\\t\\tiifname \\\"docker0\\\" counter packets 0 bytes 0 accept\",\"\\tchain DOCKER-BRIDGE {\",\"\\t\\toifname \\\"br-eda2ddba3837\\\" counter packets 224663 bytes 12191361 jump DOCKER\",\"\\t\\toifname \\\"docker0\\\" counter packets 0 bytes 0 jump DOCKER\",\"\\tchain DOCKER-CT {\",\"\\t\\toifname \\\"br-eda2ddba3837\\\" ct state related,established counter packets 18547195 bytes 1763740123 accept\",\"\\t\\toifname \\\"docker0\\\" ct state related,established counter packets 0 bytes 0 accept\",\"\\tchain DOCKER-INTERNAL {\",\"\\tchain FORWARD {\",\"\\t\\ttype filter hook forward priority filter; policy drop;\",\"\\t\\tcounter packets 34669180 bytes 3550258849 jump DOCKER-USER\",\"\\t\\tcounter packets 34669180 bytes 3550258849 jump DOCKER-FORWARD\",\"\\tchain DOCKER-USER {\",\"table ip6 nat {\",\"\\tchain DOCKER {\",\"\\tchain PREROUTING {\",\"\\t\\ttype nat hook prerouting priority dstnat; policy accept;\",\"\\t\\tfib daddr type local counter packets 0 bytes 0 jump DOCKER\",\"\\tchain OUTPUT {\",\"\\t\\ttype nat hook output priority -100; policy accept;\",\"\\t\\tip6 daddr != [IPV6] fib daddr type local counter packets 0 bytes 0 jump DOCKER\",\"table ip6 filter {\",\"\\tchain DOCKER {\",\"\\tchain DOCKER-FORWARD {\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-CT\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-INTERNAL\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-BRIDGE\",\"\\tchain DOCKER-BRIDGE {\",\"\\tchain DOCKER-CT {\",\"\\tchain DOCKER-INTERNAL {\",\"\\tchain FORWARD {\",\"\\t\\ttype filter hook forward priority filter; policy accept;\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-USER\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-FORWARD\",\"\\tchain DOCKER-USER {\",\"table ip raw {\",\"\\tchain PREROUTING {\",\"\\t\\ttype filter hook prerouting priority raw; policy accept;\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d7b39d190b3] counter packets 0 bytes 0 drop\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d71fd96b350] counter packets 0 bytes 0 drop\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5ca1cde58f6a] counter packets 0 bytes 0 drop\"],\"selected_lines\":66,\"truncated\":false}]},\"endpoints\":[{\"label\":\"LOCAL_SNI\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":false,\"connect_hash\":\"12ca17b49af2\",\"error\":\"ConnectionRefusedError\",\"errno\":111,\"elapsed_ms\":2},{\"label\":\"SERVER_PUBLIC\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":true,\"dns_count\":1,\"dns_hashes\":[\"1fc73136d6d7\"],\"connect_hash\":\"1fc73136d6d7\",\"tcp_ms\":173,\"tls_ms\":234,\"tls_version\":\"TLSv1.3\",\"alpn\":\"h2\",\"certificate_sha256\":\"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf\",\"elapsed_ms\":234}],\"grpc\":[{\"label\":\"LOCAL_GRPC\",\"command_rc\":7,\"http_meta\":[\"000\",\"0\"],\"grpc_status\":null,\"content_type\":null},{\"label\":\"SERVER_PUBLIC_GRPC\",\"command_rc\":0,\"http_meta\":[\"200\",\"2\"],\"grpc_status\":\"0\",\"content_type\":\"application/grpc\"}],\"complete\":true}\nTASK_COMPLETE=true\nTASK_RESULT=NETBIRD_SERVER_EVIDENCE_COLLECTED\nNO_CONNECTION_FIX_APPLIED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/latest.txt b/runtime/latest.txt index 86f90ab1..b49f1e18 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,162 +1,49 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=CONTEXT-AUTO-[PRIVATE_IP]701Z +COMMAND_ID=SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1 STATUS=OK RC=0 HOST=pve01 -COMPONENT=cluster-context -REFERENCE_SHA[PRIVATE_IP]e5154c41cb[PRIVATE_IP]aca68090be[PRIVATE_IP]bf[PRIVATE_IP]df[PRIVATE_IP] -ERROR_REGISTER_SHA[PRIVATE_IP]ec0f527ed3afeed[PRIVATE_IP]ee[PRIVATE_IP]bbfb[PRIVATE_IP]af4ba7ba0 +MODE=read-only +COMPONENT=netbird-management-server-audit-readonly +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=05748fa27e7bddef0ad5c6f6ce477b5291d901459a89061d4b508da45ea607cc +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e +SANITIZED_OUTPUT_SHA256=b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e OUTPUT_BEGIN -GENERATED_AT_UTC=[PRIVATE_IP]T03:17:01Z -Cluster information -------------------- -Name: homelab -Config Version: 3 -Transport: knet -Secure auth: on +ERROR_REGISTER_CHECK=OK +REFERENCE_CHECK=OK +AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED +USA_IDENTITY_GATES={"inventory":true,"key":true,"moldova_hostkey":true,"usa_hostkey":true} +PVE1_TRANSPORT_RC=0 +PVE1_RECEIPT_VALID=true +PVE1_OBSERVATION={"role":"PVE1","diagnostic_only":true,"endpoints":[{"label":"PVE1","sni":"nb.pvepro.ru","tls_verified":false,"dns_count":1,"dns_hashes":["1fc73136d6d7"],"connect_hash":"1fc73136d6d7","tcp_ms":172,"error":"TLS_TIMEOUT","elapsed_ms":15192}],"grpc":[],"complete":true} +EDGE_TRANSPORT_RC=0 +EDGE_RECEIPT_VALID=true +EDGE_OBSERVATION={"role":"EDGE","diagnostic_only":true,"endpoints":[{"label":"EDGE","sni":"nb.pvepro.ru","tls_verified":true,"dns_count":1,"dns_hashes":["1fc73136d6d7"],"connect_hash":"1fc73136d6d7","tcp_ms":239,"tls_ms":498,"tls_version":"TLSv1.3","alpn":"h2","certificate_sha256":"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf","elapsed_ms":498}],"grpc":[{"label":"EDGE","command_rc":0,"http_meta":["200","2"],"grpc_status":"0","content_type":"application/grpc"}],"complete":true} +USA_TRANSPORT_RC=0 +USA_RECEIPT_VALID=true +USA_OBSERVATION={"role":"USA","diagnostic_only":true,"server":{"uid":0,"expected_hostname":true,"identity_ok":true,"listen_443":{"rc":0,"lines":["LISTEN 0 4096 [ADDR:1fc73136d6d7]:443 [ADDR:19e362559721]:* users:((\"docker-proxy\",pid=997,fd=8))"]},"docker_rc":0,"containers":[{"name":"netbird-traefik","image":"traefik:v3.6","status":"Up 3 weeks","ports":"\"netbird_netbird\"|{\"443/tcp\":[{\"HostIp\":\"[ADDR:1fc73136d6d7]\",\"HostPort\":\"443\"}],\"80/tcp\":[{\"HostIp\":\"[ADDR:1fc73136d6d7]\",\"HostPort\":\"80\"}]}","inspect_rc":0,"logs_rc":0,"log_counts":{"deadline":0,"x509":0,"handshake":0,"refused":0,"grpc":192,"panic":0}},{"name":"netbird-dashboard","image":"netbirdio/dashboard:latest","status":"Up 3 weeks","ports":"\"netbird_netbird\"|{\"443/tcp\":null,\"80/tcp\":null}","inspect_rc":0,"logs_rc":0,"log_counts":{"deadline":0,"x509":0,"handshake":0,"refused":0,"grpc":0,"panic":0}},{"name":"netbird-server","image":"netbirdio/netbird-server:latest","status":"Up 3 weeks","ports":"\"netbird_netbird\"|{\"3478/udp\":[{\"HostIp\":\"[ADDR:1fc73136d6d7]\",\"HostPort\":\"3478\"}]}","inspect_rc":0,"logs_rc":0,"log_counts":{"deadline":0,"x509":0,"handshake":0,"refused":0,"grpc":0,"panic":0}}],"firewalls":[{"tool":"IPTABLES_FILTER","rc":0,"lines":["# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026","*filter",":INPUT ACCEPT [0:0]",":FORWARD DROP [0:0]",":OUTPUT ACCEPT [0:0]",":DOCKER - [0:0]",":DOCKER-BRIDGE - [0:0]",":DOCKER-CT - [0:0]",":DOCKER-FORWARD - [0:0]",":DOCKER-INTERNAL - [0:0]",":DOCKER-USER - [0:0]","[34669180:3550258849] -A FORWARD -j DOCKER-USER","[34669180:3550258849] -A FORWARD -j DOCKER-FORWARD","[85783:4117309] -A DOCKER -d [ADDR:be20ca75510c] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p udp -m udp --dport 3478 -j ACCEPT","[83245:4960506] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 443 -j ACCEPT","[55635:3113546] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 80 -j ACCEPT","[0:0] -A DOCKER ! -i br-eda2ddba3837 -o br-eda2ddba3837 -j DROP","[0:0] -A DOCKER ! -i docker0 -o docker0 -j DROP","[224663:12191361] -A DOCKER-BRIDGE -o br-eda2ddba3837 -j DOCKER","[0:0] -A DOCKER-BRIDGE -o docker0 -j DOCKER","[18547195:1763740123] -A DOCKER-CT -o br-eda2ddba3837 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT","[0:0] -A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT","[34669180:3550258849] -A DOCKER-FORWARD -j DOCKER-CT","[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-INTERNAL","[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-BRIDGE","[15897322:1774327365] -A DOCKER-FORWARD -i br-eda2ddba3837 -j ACCEPT","[0:0] -A DOCKER-FORWARD -i docker0 -j ACCEPT","COMMIT","# Completed on Sat Sep 19 [IPV6] 2026"],"selected_lines":29,"truncated":false},{"tool":"IPTABLES_NAT","rc":0,"lines":["# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026","*nat",":PREROUTING ACCEPT [0:0]",":INPUT ACCEPT [0:0]",":OUTPUT ACCEPT [0:0]",":POSTROUTING ACCEPT [0:0]",":DOCKER - [0:0]","[3101282:183411842] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER","[0:0] -A OUTPUT ! -d [ADDR:4a7ea1593dd4] -m addrtype --dst-type LOCAL -j DOCKER","[0:0] -A POSTROUTING -s [ADDR:3538188866fb] ! -o docker0 -j MASQUERADE","[1290:77668] -A POSTROUTING -s [ADDR:c41135b9d022] ! -o br-eda2ddba3837 -j MASQUERADE","[55635:3113546] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 80 -j DNAT --to-destination [ADDR:5d71fd96b350]:80","[83245:4960506] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 443 -j DNAT --to-destination [ADDR:5d71fd96b350]:443","[85694:4113877] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p udp -m udp --dport 3478 -j DNAT --to-destination [ADDR:5ca1cde58f6a]:3478","COMMIT","# Completed on Sat Sep 19 [IPV6] 2026"],"selected_lines":16,"truncated":false},{"tool":"NFT","rc":0,"lines":["table ip nat {","\tchain DOCKER {","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:1fc73136d6d7] tcp dport 80 counter packets 55635 bytes 3113546 dnat to [ADDR:5d71fd96b350]:80","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:1fc73136d6d7] tcp dport 443 counter packets 83245 bytes 4960506 dnat to [ADDR:5d71fd96b350]:443","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:1fc73136d6d7] udp dport 3478 counter packets 85694 bytes 4113877 dnat to [ADDR:5ca1cde58f6a]:3478","\tchain PREROUTING {","\t\ttype nat hook prerouting priority dstnat; policy accept;","\t\tfib daddr type local counter packets 3101282 bytes 183411842 jump DOCKER","\tchain OUTPUT {","\t\ttype nat hook output priority -100; policy accept;","\t\tip daddr != [ADDR:4a7ea1593dd4] fib daddr type local counter packets 0 bytes 0 jump DOCKER","\tchain POSTROUTING {","\t\ttype nat hook postrouting priority srcnat; policy accept;","table ip filter {","\tchain DOCKER {","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" ip daddr [ADDR:5ca1cde58f6a] udp dport 3478 counter packets 85783 bytes 4117309 accept","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" ip daddr [ADDR:5d71fd96b350] tcp dport 443 counter packets 83245 bytes 4960506 accept","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" ip daddr [ADDR:5d71fd96b350] tcp dport 80 counter packets 55635 bytes 3113546 accept","\t\tiifname != \"br-eda2ddba3837\" oifname \"br-eda2ddba3837\" counter packets 0 bytes 0 drop","\t\tiifname != \"docker0\" oifname \"docker0\" counter packets 0 bytes 0 drop","\tchain DOCKER-FORWARD {","\t\tcounter packets 34669180 bytes 3550258849 jump DOCKER-CT","\t\tcounter packets 16121985 bytes 1786518726 jump DOCKER-INTERNAL","\t\tcounter packets 16121985 bytes 1786518726 jump DOCKER-BRIDGE","\t\tiifname \"br-eda2ddba3837\" counter packets 15897322 bytes 1774327365 accept","\t\tiifname \"docker0\" counter packets 0 bytes 0 accept","\tchain DOCKER-BRIDGE {","\t\toifname \"br-eda2ddba3837\" counter packets 224663 bytes 12191361 jump DOCKER","\t\toifname \"docker0\" counter packets 0 bytes 0 jump DOCKER","\tchain DOCKER-CT {","\t\toifname \"br-eda2ddba3837\" ct state related,established counter packets 18547195 bytes 1763740123 accept","\t\toifname \"docker0\" ct state related,established counter packets 0 bytes 0 accept","\tchain DOCKER-INTERNAL {","\tchain FORWARD {","\t\ttype filter hook forward priority filter; policy drop;","\t\tcounter packets 34669180 bytes 3550258849 jump DOCKER-USER","\t\tcounter packets 34669180 bytes 3550258849 jump DOCKER-FORWARD","\tchain DOCKER-USER {","table ip6 nat {","\tchain DOCKER {","\tchain PREROUTING {","\t\ttype nat hook prerouting priority dstnat; policy accept;","\t\tfib daddr type local counter packets 0 bytes 0 jump DOCKER","\tchain OUTPUT {","\t\ttype nat hook output priority -100; policy accept;","\t\tip6 daddr != [IPV6] fib daddr type local counter packets 0 bytes 0 jump DOCKER","table ip6 filter {","\tchain DOCKER {","\tchain DOCKER-FORWARD {","\t\tcounter packets 0 bytes 0 jump DOCKER-CT","\t\tcounter packets 0 bytes 0 jump DOCKER-INTERNAL","\t\tcounter packets 0 bytes 0 jump DOCKER-BRIDGE","\tchain DOCKER-BRIDGE {","\tchain DOCKER-CT {","\tchain DOCKER-INTERNAL {","\tchain FORWARD {","\t\ttype filter hook forward priority filter; policy accept;","\t\tcounter packets 0 bytes 0 jump DOCKER-USER","\t\tcounter packets 0 bytes 0 jump DOCKER-FORWARD","\tchain DOCKER-USER {","table ip raw {","\tchain PREROUTING {","\t\ttype filter hook prerouting priority raw; policy accept;","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:5d7b39d190b3] counter packets 0 bytes 0 drop","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:5d71fd96b350] counter packets 0 bytes 0 drop","\t\tiifname != \"br-eda2ddba3837\" ip daddr [ADDR:5ca1cde58f6a] counter packets 0 bytes 0 drop"],"selected_lines":66,"truncated":false}]},"endpoints":[{"label":"LOCAL_SNI","sni":"nb.pvepro.ru","tls_verified":false,"connect_hash":"12ca17b49af2","error":"ConnectionRefusedError","errno":111,"elapsed_ms":2},{"label":"SERVER_PUBLIC","sni":"nb.pvepro.ru","tls_verified":true,"dns_count":1,"dns_hashes":["1fc73136d6d7"],"connect_hash":"1fc73136d6d7","tcp_ms":173,"tls_ms":234,"tls_version":"TLSv1.3","alpn":"h2","certificate_sha256":"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf","elapsed_ms":234}],"grpc":[{"label":"LOCAL_GRPC","command_rc":7,"http_meta":["000","0"],"grpc_status":null,"content_type":null},{"label":"SERVER_PUBLIC_GRPC","command_rc":0,"http_meta":["200","2"],"grpc_status":"0","content_type":"application/grpc"}],"complete":true} +TASK_COMPLETE=true +TASK_RESULT=NETBIRD_SERVER_EVIDENCE_COLLECTED +NO_CONNECTION_FIX_APPLIED=true +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} -Quorum information ------------------- -Date: Sat Sep [PRIVATE_IP] 2026 -Quorum provider: corosync_votequorum -Nodes: 3 -Node ID: [PRIVATE_IP] -Ring ID: 1.130 -Quorate: Yes - -Votequorum information ----------------------- -Expected votes: 3 -Highest expected: 3 -Total votes: 3 -Quorum: 2 -Flags: Quorate - -Membership information ----------------------- - Nodeid Votes Name -[PRIVATE_IP] [PRIVATE_IP].11 (local) -[PRIVATE_IP] [PRIVATE_IP].13 -[PRIVATE_IP] [PRIVATE_IP].12 - -Membership information ----------------------- - Nodeid Votes Name - 1 1 pve01 (local) - 2 1 pve03 - 3 1 pve02 -[{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/110","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns1","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"lxc","uptime":[PRIVATE_IP],"vmid":110},{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/111","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns2","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"lxc","uptime":[PRIVATE_IP],"vmid":111},{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/112","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound1","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"lxc","uptime":[PRIVATE_IP],"vmid":112},{"cpu":0,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/113","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound2","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"lxc","uptime":[PRIVATE_IP],"vmid":113},{"cpu":[PRIVATE_IP]94285,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"edge-vm","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":[PRIVATE_IP],"vmid":130},{"cpu":[PRIVATE_IP]011611,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/150","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"snikket","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":[PRIVATE_IP],"vmid":150},{"cpu":[PRIVATE_IP]803837,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/160","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"forum-prod","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"qemu","uptime":[PRIVATE_IP],"vmid":160},{"cpu":[PRIVATE_IP]22835,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/170","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"core-apps","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":[PRIVATE_IP],"vmid":170},{"cpu":[PRIVATE_IP]0745,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/171","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"monitoring","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":[PRIVATE_IP],"vmid":171},{"cpu":[PRIVATE_IP]601835,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/190","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"homelab-ops-worker","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":[PRIVATE_IP],"vmid":190},{"cpu":[PRIVATE_IP]009676,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/210","maxcpu":2,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"newfi-prod","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":[PRIVATE_IP],"vmid":210},{"cpu":[PRIVATE_IP]203669,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/211","maxcpu":2,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"newfi-staging","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":[PRIVATE_IP],"vmid":211},{"cpu":0,"disk":0,"diskread":0,"diskwrite":0,"id":"qemu/9130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":0,"memhost":0,"name":"edge-cold-standby","netin":0,"netout":0,"node":"pve02","status":"stopped","template":0,"type":"qemu","uptime":0,"vmid":9130},{"cgroup-mode":2,"cpu":[PRIVATE_IP]58886,"disk":[PRIVATE_IP],"id":"node/pve01","level":"","maxcpu":24,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve01","status":"online","type":"node","uptime":[PRIVATE_IP]},{"cgroup-mode":2,"cpu":[PRIVATE_IP]56289,"disk":[PRIVATE_IP],"id":"node/pve03","level":"","maxcpu":8,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve03","status":"online","type":"node","uptime":[PRIVATE_IP]},{"cgroup-mode":2,"cpu":[PRIVATE_IP]7926,"disk":[PRIVATE_IP],"id":"node/pve02","level":"","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve02","status":"online","type":"node","uptime":[PRIVATE_IP]},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve01/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve03/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve02/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"backup,iso,vztmpl,import","disk":[PRIVATE_IP],"id":"storage/pve01/local","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"backup,iso,vztmpl,import","disk":[PRIVATE_IP],"id":"storage/pve03/local","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"backup,iso,vztmpl,import","disk":[PRIVATE_IP],"id":"storage/pve02/local","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"id":"network/pve01/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve01","status":"ok","type":"network"},{"id":"network/pve03/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve03","status":"ok","type":"network"},{"id":"network/pve02/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve02","status":"ok","type":"network"}] -Name Type Status Total (KiB) Used (KiB) Available (KiB) % -local dir active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 35.14% -local-lvm lvmthin active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 13.68% - UNIT LOAD ACTIVE SUB DESCRIPTION -● homelab-app-cloud-quorum-queue.service loaded failed failed Homelab canonical application cloud quorum backup queue -● homelab-backup-retention-gc.service loaded failed failed Homelab owner-aware cloud retention GC -● homelab-vm-cloud-quorum-queue.service loaded failed failed Homelab canonical VM/CT cloud quorum backup queue - -Legend: LOAD → Reflects whether the unit definition was properly loaded. - ACTIVE → The high-level unit activation state, i.e. generalization of SUB. - SUB → The low-level unit activation state, values depend on unit type. - -3 loaded units listed. -NEXT LEFT LAST PASSED UNIT ACTIVATES -Sat [PRIVATE_IP] 06:17:22 MSK 19s Sat [PRIVATE_IP] 06:12:22 MSK 4min 40s ago homelab-smartctl-textfile.timer homelab-smartctl-textfile.service -Sat [PRIVATE_IP] 06:17:22 MSK 19s Sat [PRIVATE_IP] 06:12:22 MSK 4min 40s ago netbird-peers-health.timer netbird-peers-health.service -Sat [PRIVATE_IP] 06:17:43 MSK 41s Sat [PRIVATE_IP] 06:16:40 MSK 22s ago homelab-router-watchdog.timer homelab-router-watchdog.service -Sat [PRIVATE_IP] 06:17:58 MSK 55s Sat [PRIVATE_IP] 06:07:58 MSK 9min ago skladchik-reports-monitor-supervisor.timer skladchik-reports-monitor-supervisor.service -Sat [PRIVATE_IP] 06:17:58 MSK 55s Sat [PRIVATE_IP] 06:16:58 MSK 4s ago homelab-private-vpn-hosts-health.timer homelab-private-vpn-hosts-health.service -Sat [PRIVATE_IP] 06:20:45 MSK 3min 42s Sat [PRIVATE_IP] 06:15:32 MSK 1min 30s ago homelab-health-metrics.timer homelab-health-metrics.service -Sat [PRIVATE_IP] 06:20:52 MSK 3min 49s Sat [PRIVATE_IP] 06:05:52 MSK 11min ago homelab-disk-space-health.timer homelab-disk-space-health.service -Sat [PRIVATE_IP] 06:20:52 MSK 3min 49s Sat [PRIVATE_IP] 06:05:52 MSK 11min ago prometheus-node-exporter-nvme.timer prometheus-node-exporter-nvme.service -Sat [PRIVATE_IP] 06:23:32 MSK 6min Sat [PRIVATE_IP] 06:08:32 MSK 8min ago homelab-pve03-staging-capacity-health.timer homelab-pve03-staging-capacity-health.service -Sat [PRIVATE_IP] 06:29:33 MSK 12min Sat [PRIVATE_IP] 05:56:10 MSK 20min ago homelab-reference-refresh.timer homelab-reference-refresh.service -Sat [PRIVATE_IP] 06:30:00 MSK 12min Sat [PRIVATE_IP] 06:15:00 MSK 2min 2s ago homelab-incident-journal.timer homelab-incident-journal.service -Sat [PRIVATE_IP] 06:30:13 MSK 13min Sat [PRIVATE_IP] 06:16:39 MSK 23s ago homelab-forum-snuffleupagus-health.timer homelab-forum-snuffleupagus-health.service -Sat [PRIVATE_IP] 06:30:16 MSK 13min Sat [PRIVATE_IP] 06:03:47 MSK 13min ago homelab-mkdocs-auto-refresh.timer homelab-mkdocs-auto-refresh.service -Sat [PRIVATE_IP] 06:31:01 MSK 13min Sat [PRIVATE_IP] 06:15:32 MSK 1min 30s ago homelab-duty-admin-v2.timer homelab-duty-admin-v2.service -Sat [PRIVATE_IP] 06:31:28 MSK 14min Sat [PRIVATE_IP] 06:16:16 MSK 46s ago homelab-external-probe-vps-health.timer homelab-external-probe-vps-health.service -Sat [PRIVATE_IP] 06:31:58 MSK 14min Sat [PRIVATE_IP] 06:16:58 MSK 4s ago prometheus-node-exporter-apt.timer prometheus-node-exporter-apt.service -Sat [PRIVATE_IP] 06:36:26 MSK 19min Sat [PRIVATE_IP] 06:06:29 MSK 10min ago homelab-backup-audit.timer homelab-backup-audit.service -Sat [PRIVATE_IP] 06:50:01 MSK 32min Sat [PRIVATE_IP] 00:49:52 MSK 5h 27min ago homelab-mailru-trash-gc.timer homelab-mailru-trash-gc.service -Sat [PRIVATE_IP] 07:18:21 MSK 1h 1min Fri [PRIVATE_IP] 07:18:12 MSK 22h ago homelab-drift-check.timer homelab-drift-check.service -Sat [PRIVATE_IP] 07:38:11 MSK 1h 21min Fri [PRIVATE_IP] 07:48:57 MSK 22h ago homelab-alerting-health.timer homelab-alerting-health.service -Sat [PRIVATE_IP] 07:38:37 MSK 1h 21min Fri [PRIVATE_IP] 07:39:32 MSK 22h ago homelab-service-registry-check.timer homelab-service-registry-check.service -Sat [PRIVATE_IP] 07:40:06 MSK 1h 23min Fri [PRIVATE_IP] 07:45:12 MSK 22h ago homelab-dependency-map-check.timer homelab-dependency-map-check.service -Sat [PRIVATE_IP] 07:48:00 MSK 1h 30min Fri [PRIVATE_IP] 07:58:00 MSK 22h ago homelab-runbook-generate.timer homelab-runbook-generate.service -Sat [PRIVATE_IP] 07:56:40 MSK 1h 39min Fri [PRIVATE_IP] 07:59:22 MSK 22h ago homelab-duty-admin-report.timer homelab-duty-admin-report.service -Sat [PRIVATE_IP] 07:56:49 MSK 1h 39min Fri [PRIVATE_IP] 08:00:57 MSK 22h ago homelab-desired-state-sync.timer homelab-desired-state-sync.service -Sat [PRIVATE_IP] 08:08:44 MSK 1h 51min Fri [PRIVATE_IP] 08:07:05 MSK 22h ago homelab-kuma-monitor-policy.timer homelab-kuma-monitor-policy.service -Sat [PRIVATE_IP] 08:15:14 MSK 1h 58min Fri [PRIVATE_IP] 08:15:57 MSK 22h ago homelab-overall-health.timer homelab-overall-health.service -Sat [PRIVATE_IP] 08:19:35 MSK 2h 2min Fri [PRIVATE_IP] 08:29:57 MSK 21h ago homelab-final-readiness-gate.timer homelab-final-readiness-gate.service -Sat [PRIVATE_IP] 08:31:12 MSK 2h 14min Fri [PRIVATE_IP] 08:25:57 MSK 21h ago homelab-capacity-risk.timer homelab-capacity-risk.service -Sat [PRIVATE_IP] 08:41:46 MSK 2h 24min Fri [PRIVATE_IP] 08:37:57 MSK 21h ago homelab-secret-exposure-guard.timer homelab-secret-exposure-guard.service -Sat [PRIVATE_IP] 08:48:35 MSK 2h 31min Fri [PRIVATE_IP] 08:48:57 MSK 21h ago homelab-cluster-passport.timer homelab-cluster-passport.service -Sat [PRIVATE_IP] 08:51:11 MSK 2h 34min Fri [PRIVATE_IP] 09:00:12 MSK 21h ago homelab-golden-state-index.timer homelab-golden-state-index.service -Sat [PRIVATE_IP] 10:15:00 MSK 3h 57min Fri [PRIVATE_IP] 10:15:12 MSK 20h ago skladchik-reports-monitor-monthly-selftest-watch.timer skladchik-reports-monitor-monthly-selftest-watch.service -Sat [PRIVATE_IP] 10:35:58 MSK 4h 18min Sat [PRIVATE_IP] 04:35:58 MSK 1h 41min ago homelab-vps-identity-audit.timer homelab-vps-identity-audit.service -Sat [PRIVATE_IP] 11:42:48 MSK 5h 25min Sat [PRIVATE_IP] 05:39:52 MSK 37min ago homelab-evidence-root.timer homelab-evidence-root.service -Sat [PRIVATE_IP] 11:53:30 MSK 5h 36min Fri [PRIVATE_IP] 09:35:17 MSK 20h ago man-db.timer man-db.service -Sat [PRIVATE_IP] 14:33:20 MSK 8h Fri [PRIVATE_IP] 19:37:48 MSK 10h ago apt-daily.timer apt-daily.service -Sat [PRIVATE_IP] 16:47:57 MSK 10h Fri [PRIVATE_IP] 16:47:57 MSK 13h ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service -Sun [PRIVATE_IP] 00:00:00 MSK 17h Sat [PRIVATE_IP] 00:00:12 MSK 6h ago dpkg-db-backup.timer dpkg-db-backup.service -Sun [PRIVATE_IP] 00:01:46 MSK 17h Sat [PRIVATE_IP] 00:18:33 MSK 5h 58min ago homelab-storage-capacity.timer homelab-storage-capacity.service -Sun [PRIVATE_IP] 00:02:01 MSK 17h Sat [PRIVATE_IP] 00:13:59 MSK 6h ago homelab-docker-health.timer homelab-docker-health.service -Sun [PRIVATE_IP] 00:04:22 MSK 17h Sat [PRIVATE_IP] 00:34:19 MSK 5h 42min ago logrotate.timer logrotate.service -Sun [PRIVATE_IP] 00:13:10 MSK 17h Sat [PRIVATE_IP] 00:01:58 MSK 6h ago homelab-evidence-catalog.timer homelab-evidence-catalog.service -Sun [PRIVATE_IP] 00:13:52 MSK 17h Sat [PRIVATE_IP] 00:02:46 MSK 6h ago homelab-quality-gate.timer homelab-quality-gate.service -Sun [PRIVATE_IP] 01:11:54 MSK 18h Sat [PRIVATE_IP] 02:12:38 MSK 4h 4min ago pve-daily-update.timer pve-daily-update.service -Sun [PRIVATE_IP] 03:10:03 MSK 20h Sun [PRIVATE_IP] 03:10:22 MSK 6 days ago e2scrub_all.timer e2scrub_all.service -Sun [PRIVATE_IP] 03:10:58 MSK 20h Sun [PRIVATE_IP] 03:10:39 MSK 6 days ago xfs_scrub_all.timer xfs_scrub_all.service -Sun [PRIVATE_IP] 03:34:42 MSK 21h Sat [PRIVATE_IP] 03:23:32 MSK 2h 53min ago homelab-backup-retention-gc.timer homelab-backup-retention-gc.service -Sun [PRIVATE_IP] 06:10:28 MSK 23h Sat [PRIVATE_IP] 06:15:16 MSK 1min 46s ago apt-daily-upgrade.timer apt-daily-upgrade.service -Sun [PRIVATE_IP] 07:40:18 MSK 1 day 1h Sun [PRIVATE_IP] 07:35:56 MSK 5 days ago homelab-rotating-boot-drill.timer homelab-rotating-boot-drill.service -Mon [PRIVATE_IP] 00:04:42 MSK 1 day 17h Mon [PRIVATE_IP] 00:10:39 MSK 5 days ago homelab-secret-sanity.timer homelab-secret-sanity.service -Mon [PRIVATE_IP] 00:09:14 MSK 1 day 17h Mon [PRIVATE_IP] 00:30:56 MSK 5 days ago fstrim.timer fstrim.service -- - Sat [PRIVATE_IP] 04:21:58 MSK 1h 55min ago homelab-backup-v2.timer homelab-backup-v2.service -- - - - prometheus-node-exporter-ipmitool-sensor.timer prometheus-node-exporter-ipmitool-sensor.service -- - - - prometheus-node-exporter-mellanox-hca-temp.timer prometheus-node-exporter-mellanox-hca-temp.service -- - - - prometheus-node-exporter-smartmon.timer prometheus-node-exporter-smartmon.service - -56 timers listed. -RUNTIME_MANIFEST_ID=df[PRIVATE_IP]ac9b5abd[PRIVATE_IP]b[PRIVATE_IP]d89496fb2bde[PRIVATE_IP] -EXPERIMENT_ID=5462ee[PRIVATE_IP]ebe[PRIVATE_IP]feb2ad[PRIVATE_IP]1ad87bbac0b8108 -COLLECTION_START_AT=[PRIVATE_IP]T[PRIVATE_IP]:00 -FIRST_COMPLETE_D1_CLOSE=[PRIVATE_IP]T[PRIVATE_IP]:00 -PRODUCTION_LAUNCH_ALLOWED=False -EXECUTION_AUTHORITY=False -RISK_AUTHORITY=False -STAGE_A_HEALTH=AWAITING_PRIMARY_FINALITY -FORENSIC_PREVIOUS_EPOCH_PRESERVED=YES - -## NEWFI_TASK6_AUTH_CHECKPOINT_V[PRIVATE_IP] -- Scope: historical accepted AUTH test, not a current SMTP connection test. -- Newfi approved SMTP account/sender: aleisaev@yandex.ru. -- Endpoint used by accepted test: smtp.yandex.ru:465 with certificate verification; single PLAIN initial response accepted with code 235. -- Evidence: incident ledger ### NEWFI_TASK6_YANDEX_AUTH_V2_OBSERVATION and ### NEWFI_TASK6_AUTH_PROOF_CLOSE_V1. -- No password file written, no application configuration changed, no mail sent by the accepted AUTH test. -- Persistent transport installation and application delivery are not proven by this checkpoint. Task6 is not complete. -- AUTH challenge and missing-file incidents closed; launch/session incident remains OPEN with original cause unproven. -- This update does not change VM211, VM160, routing, board state or Git. -- Other incidents and infrastructure health were not assessed. - - -## NEWFI_PRIVATE_STRUCTURE92_WRONG_MARKER_SCOPE_[PRIVATE_IP] CLOSURE -- Status: CLOSED -- RCA: NEWFI92 inspected the pve01 NEWFI90 attempt marker, which had not been finalized because the outer shell exited immediately after the guest returned RC3 following its successful rollback. The guest marker contained the true final rollback state. -- Correction: NEWFI93 required both the guest FINISHED/ROLLED_BACK record and a fresh exact demo-state readback before reconciling the outer NEWFI90 marker. NEWFI92 itself never reserved an attempt or mutated state. - - -## NEWFI_PRIVATE_NEWFI95_NESTED_TRIPLE_QUOTE_PARSE_[PRIVATE_IP] -- Status: OPEN -- Command: NEWFI95 -- Symptom: after the content-structure precheck passed, the pve03 Python wrapper failed to parse at the PHP line beginning with $root. No Portal discovery or application mutation was reached. -- RCA: an outer raw triple-single-quoted guest Python payload contained an inner raw triple-single-quoted PHP payload. The inner delimiter terminated the outer Python string, causing PHP source to be parsed as Python. -- Safety: NEWFI95 was read-only, created no attempt marker, and did not reach the intended nested guest execution. Do not replay NEWFI95. - - -## NEWFI_PRIVATE_NEWFI95_NESTED_TRIPLE_QUOTE_PARSE_[PRIVATE_IP] CLOSURE -- Status: CLOSED -- RCA: an inner triple-single-quoted PHP literal terminated the outer triple-single-quoted Python guest payload in NEWFI95. The wrapper therefore failed parsing before the intended Portal discovery executed. -- Correction: NEWFI96 removed the nested Python payload layer entirely and passed one Python program directly to VM211 through qm guest exec stdin. The read-only Portal contract completed with QGA exit 0 and the implementation worktree remained unchanged. OUTPUT_END CHAT_OUTPUT_END