homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity

runtime: publish NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21

Browse Source
This commit is contained in:
homelab-runtime-publisher
2026-09-08 14:41:15 +00:00
parent 487b55ed14
commit b77f53614a
4 changed files with 128 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runtime/history/NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "read-only",
"component": "newfi-stagingedge-canonical-template-cert-cloudflare-readonly",
"started_at_utc": "2026-09-08T14:41:13Z",
"finished_at_utc": "2026-09-08T14:41:14Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "d533a9324281348c67be4fa81dff3fc812849ac61bb394bf98a48126e543ac6e",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": false,
"result_contract_valid": true,
"result_contract_status": null,
"result_contract_error": null,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
"mutation_outcome": "NO_MUTATION",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "067929c922038b7ded9ac4d20fe7ece04f10ac1f162bb29e3ec7a4b945e4e8a6",
"sanitized_output_sha256": "067929c922038b7ded9ac4d20fe7ece04f10ac1f162bb29e3ec7a4b945e4e8a6",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "CERTCF21_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21\nMODE=read-only\nMUTATIONS_PERFORMED=NO\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nRUNNER_SHA_MATCH=true\nTRUSTED_EDGEVM_MARKER=true\nPUBLIC_VPS_REJECT_MARKER=true\nCANONICAL_LIVE_USERS=debian\nPOST_REBOOT_USER_CONFIRM=true\nCANONICAL_USER_PROOF=true\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_DETAIL_RC=0\nEDGEVM_OVERLAY_IP_COUNT=1\nEDGEVM_KNOWN_HOST_RC=0\nEDGEVM_KEYSCAN_RC=0\nEDGEVM_HOSTKEY_MATCH=true\nEDGEVM_HOSTKEY_ALGS=ssh-ed25519\nEDGEVM_SUDO_RC=0\nOUTER_CERTCF_GATE=true\nREMOTE_CERTCF_RC=0\nREMOTE_CERTCF_JSON={\"euid\":0,\"mutations_performed\":\"NO\",\"npmplus_row_count\":1,\"npmplus_healthy\":true,\"npmplus_image\":\"zoeyvid/npmplus:2026-06-17-b1\",\"npmplus_status\":\"Up 11 days (healthy)\",\"data_mount_count\":1,\"container_nginx_path\":\"/usr/local/nginx/sbin/nginx\",\"nginx_test_rc\":0,\"production_template_count\":1,\"production_template_files\":[\"998.conf\"],\"staging_route_hit_count\":0,\"production_template_file\":\"998.conf\",\"production_template_sha256\":\"dd443098bf4452f629597e9dd5cf26f844b2a6a64e6882ee401bb6925a6281b0\",\"production_host_occurrence_count\":4,\"production_host_occurrences\":[{\"line\":6,\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":14,\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":16,\"text\":\"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;\"},{\"line\":17,\"text\":\"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;\"}],\"template_directives\":[{\"line\":4,\"kind\":\"listen\",\"text\":\"listen 0.0.0.0:80;\"},{\"line\":5,\"kind\":\"listen\",\"text\":\"listen [::]:80;\"},{\"line\":6,\"kind\":\"server_name\",\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":12,\"kind\":\"listen\",\"text\":\"listen 0.0.0.0:443 ssl;\"},{\"line\":13,\"kind\":\"listen\",\"text\":\"listen [::]:443 ssl;\"},{\"line\":14,\"kind\":\"server_name\",\"text\":\"server_name newfi.ru www.newfi.ru;\"},{\"line\":16,\"kind\":\"ssl_certificate\",\"text\":\"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;\"},{\"line\":17,\"kind\":\"ssl_certificate_key\",\"text\":\"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;\"},{\"line\":31,\"kind\":\"proxy_pass\",\"text\":\"proxy_pass http://[PRIVATE_IP]:80;\"}],\"template_directives_truncated\":false,\"cert_path_map_ok\":true,\"cert_file_exists\":true,\"key_file_exists\":true,\"renewal_file_exists\":true,\"cert_san_exact\":true,\"cert_san_count\":1,\"cert_expiry_days\":89,\"cert_key_match\":true,\"renew_auth_dns_cloudflare\":true,\"renew_credential_ref_present\":true,\"renew_credential_inside_sha256\":\"2ebc6b02844919c1222d982b801daae09444649043b00a4475774a2a859f8dfd\",\"credential_auth_type\":\"credential_file_missing\",\"credential_file_safety_ok\":false,\"credential_auth_supported\":false,\"cf_zone_lookup_success\":false,\"cf_zone_count\":0,\"cf_staging_query_success\":false,\"cf_staging_record_count\":-1,\"cf_reference_candidate_count\":0,\"cf_reference_candidates\":[],\"CERT_CRYPTO_OK\":true,\"RENEWAL_DNS_CLOUDFLARE_OK\":true,\"CREDENTIAL_FILE_SAFETY_OK\":false,\"CREDENTIAL_AUTH_SUPPORTED\":false,\"CLOUDFLARE_GET_ONLY_OK\":false,\"decision\":\"HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK\"}\nREMOTE_CERTCF_DECISION=HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK\nPRODUCTION_PUBLIC_CURL_RC=0\nPRODUCTION_PUBLIC_HTTP=200\nCERTCF21_DECISION=HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK\nCERTCF21_END=true\n"
}
runtime/history/NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21.txt
+63
View File
@@ -0,0 +1,63 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=newfi-stagingedge-canonical-template-cert-cloudflare-readonly
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=d533a9324281348c67be4fa81dff3fc812849ac61bb394bf98a48126e543ac6e
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=067929c922038b7ded9ac4d20fe7ece04f10ac1f162bb29e3ec7a4b945e4e8a6
SANITIZED_OUTPUT_SHA256=067929c922038b7ded9ac4d20fe7ece04f10ac1f162bb29e3ec7a4b945e4e8a6
OUTPUT_BEGIN
CERTCF21_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CANONICAL-CERTCF21
MODE=read-only
MUTATIONS_PERFORMED=NO
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
REFERENCE_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
RUNNER_SHA_MATCH=true
TRUSTED_EDGEVM_MARKER=true
PUBLIC_VPS_REJECT_MARKER=true
CANONICAL_LIVE_USERS=debian
POST_REBOOT_USER_CONFIRM=true
CANONICAL_USER_PROOF=true
NETBIRD_STATUS_JSON_RC=0
NETBIRD_STATUS_DETAIL_RC=0
EDGEVM_OVERLAY_IP_COUNT=1
EDGEVM_KNOWN_HOST_RC=0
EDGEVM_KEYSCAN_RC=0
EDGEVM_HOSTKEY_MATCH=true
EDGEVM_HOSTKEY_ALGS=ssh-ed25519
EDGEVM_SUDO_RC=0
OUTER_CERTCF_GATE=true
REMOTE_CERTCF_RC=0
REMOTE_CERTCF_JSON={"euid":0,"mutations_performed":"NO","npmplus_row_count":1,"npmplus_healthy":true,"npmplus_image":"zoeyvid/npmplus:2026-06-17-b1","npmplus_status":"Up 11 days (healthy)","data_mount_count":1,"container_nginx_path":"/usr/local/nginx/sbin/nginx","nginx_test_rc":0,"production_template_count":1,"production_template_files":["998.conf"],"staging_route_hit_count":0,"production_template_file":"998.conf","production_template_sha256":"dd443098bf4452f629597e9dd5cf26f844b2a6a64e6882ee401bb6925a6281b0","production_host_occurrence_count":4,"production_host_occurrences":[{"line":6,"text":"server_name newfi.ru www.newfi.ru;"},{"line":14,"text":"server_name newfi.ru www.newfi.ru;"},{"line":16,"text":"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;"},{"line":17,"text":"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;"}],"template_directives":[{"line":4,"kind":"listen","text":"listen 0.0.0.0:80;"},{"line":5,"kind":"listen","text":"listen [::]:80;"},{"line":6,"kind":"server_name","text":"server_name newfi.ru www.newfi.ru;"},{"line":12,"kind":"listen","text":"listen 0.0.0.0:443 ssl;"},{"line":13,"kind":"listen","text":"listen [::]:443 ssl;"},{"line":14,"kind":"server_name","text":"server_name newfi.ru www.newfi.ru;"},{"line":16,"kind":"ssl_certificate","text":"ssl_certificate /data/tls/parked-certs/newfi.ru/fullchain.pem;"},{"line":17,"kind":"ssl_certificate_key","text":"ssl_certificate_key /data/tls/parked-certs/newfi.ru/privkey.pem;"},{"line":31,"kind":"proxy_pass","text":"proxy_pass http://[PRIVATE_IP]:80;"}],"template_directives_truncated":false,"cert_path_map_ok":true,"cert_file_exists":true,"key_file_exists":true,"renewal_file_exists":true,"cert_san_exact":true,"cert_san_count":1,"cert_expiry_days":89,"cert_key_match":true,"renew_auth_dns_cloudflare":true,"renew_credential_ref_present":true,"renew_credential_inside_sha256":"2ebc6b02844919c1222d982b801daae09444649043b00a4475774a2a859f8dfd","credential_auth_type":"credential_file_missing","credential_file_safety_ok":false,"credential_auth_supported":false,"cf_zone_lookup_success":false,"cf_zone_count":0,"cf_staging_query_success":false,"cf_staging_record_count":-1,"cf_reference_candidate_count":0,"cf_reference_candidates":[],"CERT_CRYPTO_OK":true,"RENEWAL_DNS_CLOUDFLARE_OK":true,"CREDENTIAL_FILE_SAFETY_OK":false,"CREDENTIAL_AUTH_SUPPORTED":false,"CLOUDFLARE_GET_ONLY_OK":false,"decision":"HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK"}
REMOTE_CERTCF_DECISION=HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK
PRODUCTION_PUBLIC_CURL_RC=0
PRODUCTION_PUBLIC_HTTP=200
CERTCF21_DECISION=HOLD_CREDENTIAL_FILE_SAFETY_OK_CREDENTIAL_AUTH_SUPPORTED_CLOUDFLARE_GET_ONLY_OK
CERTCF21_END=true
OUTPUT_END
CHAT_OUTPUT_END
runtime/latest.json
+11 -11
View File
File diff suppressed because one or more lines are too long
runtime/latest.txt
+16 -43
View File
File diff suppressed because one or more lines are too long