homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity

runtime: publish NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23

Browse Source
This commit is contained in:
homelab-runtime-publisher
2026-09-08 15:06:15 +00:00
parent 2fa8d0b40d
commit bedc3710bc
4 changed files with 162 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runtime/history/NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23.json
+38
View File
File diff suppressed because one or more lines are too long
runtime/history/NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23.txt
+62
View File
@@ -0,0 +1,62 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=newfi-stagingedge-cloudflare-auth-provenance-readonly
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=a51ecb4fd3b97c5539bd96fdb5bba51d1c7a8b616d03ee970d755384afdc1bb1
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=b2bf15e5aced8552d6ecd78eb23ead4e230b1a86f55088c05e2c663328315011
SANITIZED_OUTPUT_SHA256=b2bf15e5aced8552d6ecd78eb23ead4e230b1a86f55088c05e2c663328315011
OUTPUT_BEGIN
PROVENANCE23_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23
MODE=read-only
MUTATIONS_PERFORMED=NO
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
REFERENCE_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
RUNNER_SHA_MATCH=true
CANONICAL_LIVE_USERS=debian
POST_REBOOT_USER_CONFIRM=true
TRUSTED_EDGEVM_MARKER=true
PUBLIC_VPS_REJECT_MARKER=true
CANONICAL_USER_PROOF=true
NETBIRD_STATUS_JSON_RC=0
NETBIRD_STATUS_DETAIL_RC=0
EDGEVM_OVERLAY_IP_COUNT=1
EDGEVM_HOSTKEY_MATCH=true
EDGEVM_HOSTKEY_ALGS=ssh-ed25519
OUTER_PROVENANCE23_GATE=true
EDGEVM_SUDO_RC=0
REMOTE_PROVENANCE_RC=0
VALIDATED_CF_CANDIDATE_COUNT=2
PROVENANCE_COMPLETE=true
CF_PROVENANCE_JSON={"euid":0,"validated_candidate_count":2,"provenance_complete":true,"candidates":[{"material_hash":"4d32cc81257fa0bed53d17cac37a2a7d3ce8f7031502ddc8fa4689c2af76efe4","path_sha256":"c885a37d16a3df2c20dd65be8c3a8f6b339070b3ff9867f4c9c6a594deaa9f37","basename":"credentials-38.before","parent_basename":"cert38-narrow-migration-20260904T074428Z","historical_exact":true,"auth_type":"api_token","key_names":["dns_cloudflare_api_token"],"uid":0,"gid":0,"mode":"0o600","mtime_utc":"2026-08-28T13:34:33+00:00","backup_name_signal":true,"temp_name_signal":true,"operational_reference_count":0,"operational_references":[],"runtime_env_match_count":0,"runtime_env_matches":[],"staging_record_count":0,"reference_type":"A","reference_proxied":false,"reference_ttl":1,"reference_content_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"},{"material_hash":"d6799544acb945f64be43c89a0d877c964697dfda0f3a703a613498aa76bbb63","path_sha256":"641c598a546799f0d1316aa993d57731741eee0da3d43d11055c0d8ceaedc6be","basename":"gram1_cf_token","parent_basename":"secure","historical_exact":false,"auth_type":"raw_token","key_names":["RAW_TOKEN"],"uid":0,"gid":0,"mode":"0o600","mtime_utc":"2026-07-01T17:12:23.200041+00:00","backup_name_signal":false,"temp_name_signal":false,"operational_reference_count":3,"operational_references":[{"ref_file_sha256":"29f2edba2995afa11b26f66c7480f52a380c77148acbe0216124ff97ddaba284","ref_basename":"edge-gram1-close-stage19.py","line":5,"kind":"full_path"},{"ref_file_sha256":"29f2edba2995afa11b26f66c7480f52a380c77148acbe0216124ff97ddaba284","ref_basename":"edge-gram1-close-stage19.py","line":74,"kind":"full_path"},{"ref_file_sha256":"7dcaf6f5cd4361b99ebb7ab51a7fb416347886dbc405b550ff785e0346d8334e","ref_basename":"gram1-cf-certbot-hook.py","line":4,"kind":"full_path"}],"runtime_env_match_count":0,"runtime_env_matches":[],"staging_record_count":0,"reference_type":"A","reference_proxied":false,"reference_ttl":1,"reference_content_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"}],"parent_contexts":[{"parent_sha256":"163a90108e606c1854b1d4d29a3b41738b1a0176034755e67cfe6a2d040d2ab7","parent_basename":"cert38-narrow-migration-20260904T074428Z","siblings":[{"basename":"credentials-38.before","is_file":true,"is_symlink":false,"size":249,"mode":"0o600","mtime_utc":"2026-08-28T13:34:33+00:00"},{"basename":"database.sqlite.before","is_file":true,"is_symlink":false,"size":331776,"mode":"0o644","mtime_utc":"2026-09-04T07:44:28.796358+00:00"},{"basename":"npm-38.conf.before","is_file":true,"is_symlink":false,"size":860,"mode":"0o600","mtime_utc":"2026-09-04T04:34:38.446873+00:00"}]},{"parent_sha256":"dd741d0eeb8e9aa510f3d34937c26cf8f713ccc87a518f7c9d8c1eec1f4cff83","parent_basename":"secure","siblings":[{"basename":"forum_cf_token.env","is_file":true,"is_symlink":false,"size":67,"mode":"0o600","mtime_utc":"2026-07-01T06:26:06.356641+00:00"},{"basename":"gram1_cf_token","is_file":true,"is_symlink":false,"size":53,"mode":"0o600","mtime_utc":"2026-07-01T17:12:23.200041+00:00"},{"basename":"parked_cf_token","is_file":true,"is_symlink":false,"size":53,"mode":"0o600","mtime_utc":"2026-07-01T15:44:11.244355+00:00"},{"basename":"pvepro_cf_token","is_file":true,"is_symlink":false,"size":53,"mode":"0o600","mtime_utc":"2026-07-01T17:29:00.836496+00:00"},{"basename":"taftauto_cf_certbot.ini","is_file":true,"is_symlink":false,"size":81,"mode":"0o600","mtime_utc":"2026-07-01T22:14:22.274863+00:00"},{"basename":"taftauto_cf_token","is_file":true,"is_symlink":false,"size":54,"mode":"0o600","mtime_utc":"2026-07-01T21:41:14.705633+00:00"},{"basename":"taftauto_wg_psk_next","is_file":true,"is_symlink":false,"size":45,"mode":"0o600","mtime_utc":"2026-07-01T21:42:37.402021+00:00"}]}]}
PRODUCTION_PUBLIC_CURL_RC=0
PRODUCTION_PUBLIC_HTTP=200
PROVENANCE23_DECISION=PASS_PROVENANCE_CAPTURED
PROVENANCE23_END=true
OUTPUT_END
CHAT_OUTPUT_END
runtime/latest.json
+18 -18
View File
File diff suppressed because one or more lines are too long
runtime/latest.txt
+44 -28
View File
@@ -1,46 +1,62 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=SIGNALBOT-260908-SEALED-ACTIVATION-043ACT1
STATUS=FAIL
RC=76
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23
STATUS=OK
RC=0
HOST=pve01
MODE=change
COMPONENT=signalbot-cr0116-sealed-activation
MODE=read-only
COMPONENT=newfi-stagingedge-cloudflare-auth-provenance-readonly
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=98fd1acf49bc199713d4be21963e544f3a9e8b1330a342bdf7770ab856191f8c
COMMAND_SHA256=a51ecb4fd3b97c5539bd96fdb5bba51d1c7a8b616d03ee970d755384afdc1bb1
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=true
RESULT_CONTRACT_VALID=false
RESULT_CONTRACT_STATUS=UNKNOWN
RESULT_CONTRACT_ERROR=MISSING_CONTRACT
COMMAND_RC=3
CHANGES_MADE=unknown
ROLLBACK_STARTED=unknown
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=UNKNOWN
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=cbfd73cce67f3bcc00595b326d8203229889cfd2a78aa338eb986877c95d0202
SANITIZED_OUTPUT_SHA256=cbfd73cce67f3bcc00595b326d8203229889cfd2a78aa338eb986877c95d0202
RAW_EVIDENCE_SHA256=b2bf15e5aced8552d6ecd78eb23ead4e230b1a86f55088c05e2c663328315011
SANITIZED_OUTPUT_SHA256=b2bf15e5aced8552d6ecd78eb23ead4e230b1a86f55088c05e2c663328315011
OUTPUT_BEGIN
PROVENANCE23_BEGIN=true
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-CLOUDFLARE-PROVENANCE23
MODE=read-only
MUTATIONS_PERFORMED=NO
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
REFERENCE_CHECK=OK
AUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED
SB043A1_RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
SB043A1_QGA_BYTES={"activation":20303,"limit":921600,"probe":1383}
SB043A1_VM170_CLUSTER={"name":"core-apps","node":"pve01","status":"running","type":"qemu"}
SB043A1_ERROR=RuntimeError:PROJECT_RUNTIME_CONTRACT_UNAVAILABLE
SB043A1_ROLLBACK_STARTED=false
SB043A1_DECISION=HOLD_BEFORE_MUTATION
SB043A1_MUTATION_SCOPE=PREPARATION_FILES_ONLY
SB043A1_ACTIVATION_QGA={"rc":3,"stderr_present":false}
SB043A1_INDEPENDENT_POSTSTATE={"env":{"APP_IMAGE":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","CODE_IDENTITY":"e32760c69a4311728db9066ee8bf2bf66b1e5a70","COLLECTION_START_AT":"2026-09-07T00:00:00+00:00","EXPERIMENT_ID":"ec477ea41ecbd5cfdef5afc259595aab20674a7d933f41a389329ff05098b338","RUNTIME_MANIFEST_ID":"58d3b59200bdc0eb8d448612679d667b194263586cb3198dfc08597935053a1a"},"result":{"command_id":"SIGNALBOT-260908-SEALED-ACTIVATION-043ACT1","reason":"RuntimeError:PROJECT_RUNTIME_CONTRACT_UNAVAILABLE","status":"PREMUTATION_HOLD","ts_utc":"2026-09-08T15:03:52.521761+00:00"},"services":[{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":0,"running":true,"service":"worker"},{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":0,"running":true,"service":"relay"},{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":19,"running":true,"service":"collector"},{"image":"8020-demonov-shadow:e32760c69a4311728db9066ee8bf2bf66b1e5a70","image_id":"sha256:403c4266282a56cb210bed95cd58295692296502913e7440e2133d7b5664c736","restart_count":0,"running":true,"service":"shadow"}]}
SB043A1_HOLDS=["PREMUTATION_HOLD"]
SB043A1_DECISION=HOLD_NO_SERVICE_CUTOVER
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
RUNNER_SHA_MATCH=true
CANONICAL_LIVE_USERS=debian
POST_REBOOT_USER_CONFIRM=true
TRUSTED_EDGEVM_MARKER=true
PUBLIC_VPS_REJECT_MARKER=true
CANONICAL_USER_PROOF=true
NETBIRD_STATUS_JSON_RC=0
NETBIRD_STATUS_DETAIL_RC=0
EDGEVM_OVERLAY_IP_COUNT=1
EDGEVM_HOSTKEY_MATCH=true
EDGEVM_HOSTKEY_ALGS=ssh-ed25519
OUTER_PROVENANCE23_GATE=true
EDGEVM_SUDO_RC=0
REMOTE_PROVENANCE_RC=0
VALIDATED_CF_CANDIDATE_COUNT=2
PROVENANCE_COMPLETE=true
CF_PROVENANCE_JSON={"euid":0,"validated_candidate_count":2,"provenance_complete":true,"candidates":[{"material_hash":"4d32cc81257fa0bed53d17cac37a2a7d3ce8f7031502ddc8fa4689c2af76efe4","path_sha256":"c885a37d16a3df2c20dd65be8c3a8f6b339070b3ff9867f4c9c6a594deaa9f37","basename":"credentials-38.before","parent_basename":"cert38-narrow-migration-20260904T074428Z","historical_exact":true,"auth_type":"api_token","key_names":["dns_cloudflare_api_token"],"uid":0,"gid":0,"mode":"0o600","mtime_utc":"2026-08-28T13:34:33+00:00","backup_name_signal":true,"temp_name_signal":true,"operational_reference_count":0,"operational_references":[],"runtime_env_match_count":0,"runtime_env_matches":[],"staging_record_count":0,"reference_type":"A","reference_proxied":false,"reference_ttl":1,"reference_content_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"},{"material_hash":"d6799544acb945f64be43c89a0d877c964697dfda0f3a703a613498aa76bbb63","path_sha256":"641c598a546799f0d1316aa993d57731741eee0da3d43d11055c0d8ceaedc6be","basename":"gram1_cf_token","parent_basename":"secure","historical_exact":false,"auth_type":"raw_token","key_names":["RAW_TOKEN"],"uid":0,"gid":0,"mode":"0o600","mtime_utc":"2026-07-01T17:12:23.200041+00:00","backup_name_signal":false,"temp_name_signal":false,"operational_reference_count":3,"operational_references":[{"ref_file_sha256":"29f2edba2995afa11b26f66c7480f52a380c77148acbe0216124ff97ddaba284","ref_basename":"edge-gram1-close-stage19.py","line":5,"kind":"full_path"},{"ref_file_sha256":"29f2edba2995afa11b26f66c7480f52a380c77148acbe0216124ff97ddaba284","ref_basename":"edge-gram1-close-stage19.py","line":74,"kind":"full_path"},{"ref_file_sha256":"7dcaf6f5cd4361b99ebb7ab51a7fb416347886dbc405b550ff785e0346d8334e","ref_basename":"gram1-cf-certbot-hook.py","line":4,"kind":"full_path"}],"runtime_env_match_count":0,"runtime_env_matches":[],"staging_record_count":0,"reference_type":"A","reference_proxied":false,"reference_ttl":1,"reference_content_sha256":"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5"}],"parent_contexts":[{"parent_sha256":"163a90108e606c1854b1d4d29a3b41738b1a0176034755e67cfe6a2d040d2ab7","parent_basename":"cert38-narrow-migration-20260904T074428Z","siblings":[{"basename":"credentials-38.before","is_file":true,"is_symlink":false,"size":249,"mode":"0o600","mtime_utc":"2026-08-28T13:34:33+00:00"},{"basename":"database.sqlite.before","is_file":true,"is_symlink":false,"size":331776,"mode":"0o644","mtime_utc":"2026-09-04T07:44:28.796358+00:00"},{"basename":"npm-38.conf.before","is_file":true,"is_symlink":false,"size":860,"mode":"0o600","mtime_utc":"2026-09-04T04:34:38.446873+00:00"}]},{"parent_sha256":"dd741d0eeb8e9aa510f3d34937c26cf8f713ccc87a518f7c9d8c1eec1f4cff83","parent_basename":"secure","siblings":[{"basename":"forum_cf_token.env","is_file":true,"is_symlink":false,"size":67,"mode":"0o600","mtime_utc":"2026-07-01T06:26:06.356641+00:00"},{"basename":"gram1_cf_token","is_file":true,"is_symlink":false,"size":53,"mode":"0o600","mtime_utc":"2026-07-01T17:12:23.200041+00:00"},{"basename":"parked_cf_token","is_file":true,"is_symlink":false,"size":53,"mode":"0o600","mtime_utc":"2026-07-01T15:44:11.244355+00:00"},{"basename":"pvepro_cf_token","is_file":true,"is_symlink":false,"size":53,"mode":"0o600","mtime_utc":"2026-07-01T17:29:00.836496+00:00"},{"basename":"taftauto_cf_certbot.ini","is_file":true,"is_symlink":false,"size":81,"mode":"0o600","mtime_utc":"2026-07-01T22:14:22.274863+00:00"},{"basename":"taftauto_cf_token","is_file":true,"is_symlink":false,"size":54,"mode":"0o600","mtime_utc":"2026-07-01T21:41:14.705633+00:00"},{"basename":"taftauto_wg_psk_next","is_file":true,"is_symlink":false,"size":45,"mode":"0o600","mtime_utc":"2026-07-01T21:42:37.402021+00:00"}]}]}
PRODUCTION_PUBLIC_CURL_RC=0
PRODUCTION_PUBLIC_HTTP=200
PROVENANCE23_DECISION=PASS_PROVENANCE_CAPTURED
PROVENANCE23_END=true
OUTPUT_END
CHAT_OUTPUT_END