runtime: publish SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1

runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "infra-dr-backupv2-spb-standalone-reissue-policy-closure",
+  "started_at_utc": "2026-09-13T16:16:02Z",
+  "finished_at_utc": "2026-09-13T16:16:05Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "8ea8fbb03b058af91f6872420d2f42ee68ea3669ac6aeb960b02da97002de78d",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "a1471060b409701e606b03ea69727b3f16ce005c6530038b2ad96c63f9aacc9d",
+  "sanitized_output_sha256": "a1471060b409701e606b03ea69727b3f16ce005c6530038b2ad96c63f9aacc9d",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "SPB318_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1\nANCHOR317_COMMIT=678fb6dfc4844fa68f1c7450ea93aea4fa6257ad\nMODE=READ_ONLY_SPB_STANDALONE_REISSUE_POLICY_CLOSURE\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nCERT_OR_KEY_CONTENTS_READ=NO\nCERTBOT_EXECUTIONS=0\nNGINX_TEST_EXECUTIONS=0\nRCA317_SNAKEOIL_ZERO_REF_FALSE_GATE_RETIRED=YES\nRCA317_RAW_STDERR_SHA_DRIFT_FALSE_GATE_RETIRED=YES\nRCA317_FILE_SEPARABILITY_FALSE_REQUIREMENT_RETIRED=YES\nRCA317_EDGEADMIN_NGINX_TEST_NOT_RESTORE_ROOT_TEST=YES\nERROR_REGISTER_FRESH_READ=OK\nREFERENCE_FRESH_READ=OK\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_ACTIVE_CONFIG_FILE_COUNT=34\nSPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0\nSPB_ACTIVE_CONFIG_MISSING_COUNT=0\nSPB_ACTIVE_CONFIG_PREPOST_STABLE=YES\nSPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400\nSPB_SERVER_BLOCK_COUNT=32\nSPB_CERT_REF_COUNT=15\nSPB_KEY_REF_COUNT=15\nSPB_OTHER_TLS_REF_COUNT=0\nSPB_LE_LINEAGE_COUNT=15\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_RENEWAL_UNREADABLE_COUNT=0\nSPB_ACTIVE_TLS_NAME_COUNT=31\nSPB_LINEAGE_NAME_MIN=2\nSPB_LINEAGE_NAME_MAX=3\nSPB_LINEAGES_WITHOUT_ACTIVE_NAMES_COUNT=0\nSPB_MULTI_LINEAGE_NAME_COUNT=0\nSPB_WILDCARD_NAME_COUNT=0\nSPB_INVALID_DNS_NAME_COUNT=0\nSPB_CERTBOT_PRESENT=YES\nSPB_CERTBOT_STANDALONE_PLUGIN=YES\nSPB_NGINX_SERVICE_ACTIVE=YES\nSPB_LE_REFERENCE_SHAPE_BAD_COUNT=0\nSPB_FILE_SEPARABILITY_REQUIRED=NO\nSPB_OLD_CERT_READ_REQUIRED=NO\nSPB_OLD_KEY_READ_REQUIRED=NO\nSPB_NGINX_EDGEADMIN_TEST_REQUIRED=NO\nSPB_CERT_KIND_COUNTS={\"letsencrypt\":15}\nSPB_KEY_KIND_COUNTS={\"letsencrypt\":15}\nSPB_POLICY_HOLD_REASONS=[]\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_REISSUE_METHOD=CERTBOT_STANDALONE_HTTP01_BEFORE_NGINX_START\nSPB_RESTORE_SEQUENCE=RESTORE_NGINX_CONFIG__KEEP_NGINX_STOPPED__CERTBOT_STANDALONE_15_LINEAGES__ROOT_NGINX_T__START_NGINX\nSPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_PORT80_ROUTING_AT_RESTORE\nSPB_ACME_ACCOUNT_POLICY=FRESH_OR_OPERATOR_SUPPLIED_ACCOUNT_ACCEPTABLE_NO_OLD_ACCOUNT_KEY_REQUIRED\nSPB_POLICY_READY=YES\nMD_POLICY_ANCHOR314_COMMIT=e25be13ca38281333f21f1397f53fef70d4da379\nMD_POLICY_READY_PRIOR=YES\nUS_POLICY_ANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef\nUS_POLICY_READY_PRIOR=YES\nROLE_HOLDS=[]\nPOLICY_CLOSURE_COMPLETE=YES\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_ROLE_SPECIFIC_BACKUP_IMPLEMENTATION\nSPB318_END=\n"
+}

runtime/history/SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1.txt

@@ -0,0 +1,101 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=infra-dr-backupv2-spb-standalone-reissue-policy-closure
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=8ea8fbb03b058af91f6872420d2f42ee68ea3669ac6aeb960b02da97002de78d
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=a1471060b409701e606b03ea69727b3f16ce005c6530038b2ad96c63f9aacc9d
+SANITIZED_OUTPUT_SHA256=a1471060b409701e606b03ea69727b3f16ce005c6530038b2ad96c63f9aacc9d
+OUTPUT_BEGIN
+SPB318_BEGIN=
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1
+ANCHOR317_COMMIT=678fb6dfc4844fa68f1c7450ea93aea4fa6257ad
+MODE=READ_ONLY_SPB_STANDALONE_REISSUE_POLICY_CLOSURE
+CHANGES_MADE=false
+LIVE_TAR_DB_DATA_ALLOWED=NO
+CLOUD_WRITE_ATTEMPTS=0
+EXTERNAL_MUTATIONS=0
+SYSTEMD_MUTATIONS=0
+CERT_OR_KEY_CONTENTS_READ=NO
+CERTBOT_EXECUTIONS=0
+NGINX_TEST_EXECUTIONS=0
+RCA317_SNAKEOIL_ZERO_REF_FALSE_GATE_RETIRED=YES
+RCA317_RAW_STDERR_SHA_DRIFT_FALSE_GATE_RETIRED=YES
+RCA317_FILE_SEPARABILITY_FALSE_REQUIREMENT_RETIRED=YES
+RCA317_EDGEADMIN_NGINX_TEST_NOT_RESTORE_ROOT_TEST=YES
+ERROR_REGISTER_FRESH_READ=OK
+REFERENCE_FRESH_READ=OK
+RUNNER_SHA256=PASS
+FORWARDED_AGENT_READY=YES
+SPB_HOSTKEY_PIN=PASS
+SPB_ACCESS=PASS
+SPB_REMOTE_UID=1000
+SPB_ACTIVE_CONFIG_FILE_COUNT=34
+SPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0
+SPB_ACTIVE_CONFIG_MISSING_COUNT=0
+SPB_ACTIVE_CONFIG_PREPOST_STABLE=YES
+SPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400
+SPB_SERVER_BLOCK_COUNT=32
+SPB_CERT_REF_COUNT=15
+SPB_KEY_REF_COUNT=15
+SPB_OTHER_TLS_REF_COUNT=0
+SPB_LE_LINEAGE_COUNT=15
+SPB_RENEWAL_CONFIG_COUNT=15
+SPB_RENEWAL_UNREADABLE_COUNT=0
+SPB_ACTIVE_TLS_NAME_COUNT=31
+SPB_LINEAGE_NAME_MIN=2
+SPB_LINEAGE_NAME_MAX=3
+SPB_LINEAGES_WITHOUT_ACTIVE_NAMES_COUNT=0
+SPB_MULTI_LINEAGE_NAME_COUNT=0
+SPB_WILDCARD_NAME_COUNT=0
+SPB_INVALID_DNS_NAME_COUNT=0
+SPB_CERTBOT_PRESENT=YES
+SPB_CERTBOT_STANDALONE_PLUGIN=YES
+SPB_NGINX_SERVICE_ACTIVE=YES
+SPB_LE_REFERENCE_SHAPE_BAD_COUNT=0
+SPB_FILE_SEPARABILITY_REQUIRED=NO
+SPB_OLD_CERT_READ_REQUIRED=NO
+SPB_OLD_KEY_READ_REQUIRED=NO
+SPB_NGINX_EDGEADMIN_TEST_REQUIRED=NO
+SPB_CERT_KIND_COUNTS={"letsencrypt":15}
+SPB_KEY_KIND_COUNTS={"letsencrypt":15}
+SPB_POLICY_HOLD_REASONS=[]
+SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE
+SPB_REISSUE_METHOD=CERTBOT_STANDALONE_HTTP01_BEFORE_NGINX_START
+SPB_RESTORE_SEQUENCE=RESTORE_NGINX_CONFIG__KEEP_NGINX_STOPPED__CERTBOT_STANDALONE_15_LINEAGES__ROOT_NGINX_T__START_NGINX
+SPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_PORT80_ROUTING_AT_RESTORE
+SPB_ACME_ACCOUNT_POLICY=FRESH_OR_OPERATOR_SUPPLIED_ACCOUNT_ACCEPTABLE_NO_OLD_ACCOUNT_KEY_REQUIRED
+SPB_POLICY_READY=YES
+MD_POLICY_ANCHOR314_COMMIT=e25be13ca38281333f21f1397f53fef70d4da379
+MD_POLICY_READY_PRIOR=YES
+US_POLICY_ANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef
+US_POLICY_READY_PRIOR=YES
+ROLE_HOLDS=[]
+POLICY_CLOSURE_COMPLETE=YES
+STATUS=OK
+PHASE=COMPLETE
+NEXT_GATE=VPS_ROLE_SPECIFIC_BACKUP_IMPLEMENTATION
+SPB318_END=
+
+OUTPUT_END
+CHAT_OUTPUT_END

runtime/latest.json

@@ -1,19 +1,19 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1",
+  "command_id": "SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1",
   "status": "OK",
   "rc": 0,
   "host": "pve01",
   "mode": "read-only",
-  "component": "infra-dr-backupv2-spb-tls-reissue-bootstrap-proof",
-  "started_at_utc": "2026-09-13T16:04:00Z",
-  "finished_at_utc": "2026-09-13T16:04:03Z",
+  "component": "infra-dr-backupv2-spb-standalone-reissue-policy-closure",
+  "started_at_utc": "2026-09-13T16:16:02Z",
+  "finished_at_utc": "2026-09-13T16:16:05Z",
   "reference_register_checked": true,
   "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
   "error_register_checked": true,
   "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
-  "command_sha256": "88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701",
+  "command_sha256": "8ea8fbb03b058af91f6872420d2f42ee68ea3669ac6aeb960b02da97002de78d",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
@@ -30,9 +30,9 @@
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074",
-  "sanitized_output_sha256": "2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074",
+  "raw_evidence_sha256": "a1471060b409701e606b03ea69727b3f16ce005c6530038b2ad96c63f9aacc9d",
+  "sanitized_output_sha256": "a1471060b409701e606b03ea69727b3f16ce005c6530038b2ad96c63f9aacc9d",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "SPB317_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1\nANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61\nMODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nCERT_OR_KEY_CONTENTS_READ=NO\nCERTBOT_EXECUTIONS=0\nRCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY\nERROR_REGISTER_FRESH_READ=OK\nREFERENCE_FRESH_READ=OK\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_ACTIVE_CONFIG_FILE_COUNT=34\nSPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0\nSPB_ACTIVE_CONFIG_MISSING_COUNT=0\nSPB_ACTIVE_CONFIG_PREPOST_STABLE=YES\nSPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400\nSPB_SERVER_BLOCK_COUNT=32\nSPB_CERT_REF_COUNT=15\nSPB_KEY_REF_COUNT=15\nSPB_LE_LINEAGE_COUNT=15\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_RENEWAL_UNREADABLE_COUNT=0\nSPB_HTTP_BOOTSTRAP_NAME_COUNT=31\nSPB_OTHER_TLS_REF_COUNT=0\nSPB_SNAKEOIL_PAIR_COUNT=0\nSPB_SNAKEOIL_REGENERATABLE=NO\nSPB_NGINX_TEST_RC=1\nSPB_NGINX_STDERR_BYTES=548\nSPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463\nSPB_NGINX_ANCHOR316_MATCH=NO\nSPB_NGINX_SERVICE_ACTIVE=YES\nSPB_CERT_KIND_COUNTS={\"letsencrypt\":15}\nSPB_KEY_KIND_COUNTS={\"letsencrypt\":15}\nSPB_CERT_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_KEY_PATH_STATUS_COUNTS={\"ANCESTOR_EACCES\":15}\nSPB_RENEWAL_AUTH_COUNTS={\"webroot\":15}\nSPB_HTTP_BOOTSTRAP_MISSING_NAMES=[]\nSPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=[\"chat.gram1.ru\",\"git-read.gram1.ru\",\"git.gram1.ru\",\"groups.chat.gram1.ru\",\"share.chat.gram1.ru\"]\nSPB_LINEAGES_WITHOUT_SERVER_NAMES=[]\nSPB_WILDCARD_NAMES=[]\nSPB_MULTI_LINEAGE_NAMES=[]\nSPB_POLICY_HOLD_REASONS=[\"HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE\",\"NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE\",\"NGINX_DIAGNOSTIC_DRIFT\",\"SNAKEOIL_PAIR_CARDINALITY\"]\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS\nSPB_REISSUE_BOOTSTRAP_READY=NO\nSPB_POLICY_READY=NO\nROLE_HOLDS=[{\"reason\":\"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY\",\"role\":\"SPB_INGRESS\"}]\nPOLICY_CLOSURE_COMPLETE=NO\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED\nSPB317_END=\n"
+  "output": "SPB318_BEGIN=\nCOMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1\nANCHOR317_COMMIT=678fb6dfc4844fa68f1c7450ea93aea4fa6257ad\nMODE=READ_ONLY_SPB_STANDALONE_REISSUE_POLICY_CLOSURE\nCHANGES_MADE=false\nLIVE_TAR_DB_DATA_ALLOWED=NO\nCLOUD_WRITE_ATTEMPTS=0\nEXTERNAL_MUTATIONS=0\nSYSTEMD_MUTATIONS=0\nCERT_OR_KEY_CONTENTS_READ=NO\nCERTBOT_EXECUTIONS=0\nNGINX_TEST_EXECUTIONS=0\nRCA317_SNAKEOIL_ZERO_REF_FALSE_GATE_RETIRED=YES\nRCA317_RAW_STDERR_SHA_DRIFT_FALSE_GATE_RETIRED=YES\nRCA317_FILE_SEPARABILITY_FALSE_REQUIREMENT_RETIRED=YES\nRCA317_EDGEADMIN_NGINX_TEST_NOT_RESTORE_ROOT_TEST=YES\nERROR_REGISTER_FRESH_READ=OK\nREFERENCE_FRESH_READ=OK\nRUNNER_SHA256=PASS\nFORWARDED_AGENT_READY=YES\nSPB_HOSTKEY_PIN=PASS\nSPB_ACCESS=PASS\nSPB_REMOTE_UID=1000\nSPB_ACTIVE_CONFIG_FILE_COUNT=34\nSPB_ACTIVE_CONFIG_UNREADABLE_COUNT=0\nSPB_ACTIVE_CONFIG_MISSING_COUNT=0\nSPB_ACTIVE_CONFIG_PREPOST_STABLE=YES\nSPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f1671851cadb418ca400\nSPB_SERVER_BLOCK_COUNT=32\nSPB_CERT_REF_COUNT=15\nSPB_KEY_REF_COUNT=15\nSPB_OTHER_TLS_REF_COUNT=0\nSPB_LE_LINEAGE_COUNT=15\nSPB_RENEWAL_CONFIG_COUNT=15\nSPB_RENEWAL_UNREADABLE_COUNT=0\nSPB_ACTIVE_TLS_NAME_COUNT=31\nSPB_LINEAGE_NAME_MIN=2\nSPB_LINEAGE_NAME_MAX=3\nSPB_LINEAGES_WITHOUT_ACTIVE_NAMES_COUNT=0\nSPB_MULTI_LINEAGE_NAME_COUNT=0\nSPB_WILDCARD_NAME_COUNT=0\nSPB_INVALID_DNS_NAME_COUNT=0\nSPB_CERTBOT_PRESENT=YES\nSPB_CERTBOT_STANDALONE_PLUGIN=YES\nSPB_NGINX_SERVICE_ACTIVE=YES\nSPB_LE_REFERENCE_SHAPE_BAD_COUNT=0\nSPB_FILE_SEPARABILITY_REQUIRED=NO\nSPB_OLD_CERT_READ_REQUIRED=NO\nSPB_OLD_KEY_READ_REQUIRED=NO\nSPB_NGINX_EDGEADMIN_TEST_REQUIRED=NO\nSPB_CERT_KIND_COUNTS={\"letsencrypt\":15}\nSPB_KEY_KIND_COUNTS={\"letsencrypt\":15}\nSPB_POLICY_HOLD_REASONS=[]\nSPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE\nSPB_REISSUE_METHOD=CERTBOT_STANDALONE_HTTP01_BEFORE_NGINX_START\nSPB_RESTORE_SEQUENCE=RESTORE_NGINX_CONFIG__KEEP_NGINX_STOPPED__CERTBOT_STANDALONE_15_LINEAGES__ROOT_NGINX_T__START_NGINX\nSPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_PORT80_ROUTING_AT_RESTORE\nSPB_ACME_ACCOUNT_POLICY=FRESH_OR_OPERATOR_SUPPLIED_ACCOUNT_ACCEPTABLE_NO_OLD_ACCOUNT_KEY_REQUIRED\nSPB_POLICY_READY=YES\nMD_POLICY_ANCHOR314_COMMIT=e25be13ca38281333f21f1397f53fef70d4da379\nMD_POLICY_READY_PRIOR=YES\nUS_POLICY_ANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef\nUS_POLICY_READY_PRIOR=YES\nROLE_HOLDS=[]\nPOLICY_CLOSURE_COMPLETE=YES\nSTATUS=OK\nPHASE=COMPLETE\nNEXT_GATE=VPS_ROLE_SPECIFIC_BACKUP_IMPLEMENTATION\nSPB318_END=\n"
 }

runtime/latest.txt

@@ -1,15 +1,15 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1
 STATUS=OK
 RC=0
 HOST=pve01
 MODE=read-only
-COMPONENT=infra-dr-backupv2-spb-tls-reissue-bootstrap-proof
+COMPONENT=infra-dr-backupv2-spb-standalone-reissue-policy-closure
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
-COMMAND_SHA256=88cf61c768db0e78c22045087ad1ce99129f20c5aa20ac954ef3529eba9e8701
+COMMAND_SHA256=8ea8fbb03b058af91f6872420d2f42ee68ea3669ac6aeb960b02da97002de78d
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
 CHANGE_DECLARED=false
@@ -24,13 +24,13 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074
-SANITIZED_OUTPUT_SHA256=2f3ca4bc7ed78745bf289ee523478f9fe4e2d7690e99086a774c0d21e56a3074
+RAW_EVIDENCE_SHA256=a1471060b409701e606b03ea69727b3f16ce005c6530038b2ad96c63f9aacc9d
+SANITIZED_OUTPUT_SHA256=a1471060b409701e606b03ea69727b3f16ce005c6530038b2ad96c63f9aacc9d
 OUTPUT_BEGIN
-SPB317_BEGIN=
-COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-TLS-REISSUE-BOOTSTRAP-PROOF-317R1
-ANCHOR316_COMMIT=9eb9354ec63dd064cd835cce1a65ca2c91144a61
-MODE=READ_ONLY_SPB_TLS_REISSUE_BOOTSTRAP_PROOF
+SPB318_BEGIN=
+COMMAND_ID=SUPPORT-260913-INFRA-DR-BACKUPV2-SPB-STANDALONE-REISSUE-POLICY-CLOSURE-318R1
+ANCHOR317_COMMIT=678fb6dfc4844fa68f1c7450ea93aea4fa6257ad
+MODE=READ_ONLY_SPB_STANDALONE_REISSUE_POLICY_CLOSURE
 CHANGES_MADE=false
 LIVE_TAR_DB_DATA_ALLOWED=NO
 CLOUD_WRITE_ATTEMPTS=0
@@ -38,7 +38,11 @@ EXTERNAL_MUTATIONS=0
 SYSTEMD_MUTATIONS=0
 CERT_OR_KEY_CONTENTS_READ=NO
 CERTBOT_EXECUTIONS=0
-RCA316_POLICY_GATE_DEFECT=TLS_CERT_PERMISSION_WAS_TOO_STRICT_FOR_REISSUE_POLICY
+NGINX_TEST_EXECUTIONS=0
+RCA317_SNAKEOIL_ZERO_REF_FALSE_GATE_RETIRED=YES
+RCA317_RAW_STDERR_SHA_DRIFT_FALSE_GATE_RETIRED=YES
+RCA317_FILE_SEPARABILITY_FALSE_REQUIREMENT_RETIRED=YES
+RCA317_EDGEADMIN_NGINX_TEST_NOT_RESTORE_ROOT_TEST=YES
 ERROR_REGISTER_FRESH_READ=OK
 REFERENCE_FRESH_READ=OK
 RUNNER_SHA256=PASS
@@ -54,39 +58,44 @@ SPB_ACTIVE_CONFIG_HASHSET_SHA256=d31b413b44634b62ee68808b6088b824609e70b1e140f16
 SPB_SERVER_BLOCK_COUNT=32
 SPB_CERT_REF_COUNT=15
 SPB_KEY_REF_COUNT=15
+SPB_OTHER_TLS_REF_COUNT=0
 SPB_LE_LINEAGE_COUNT=15
 SPB_RENEWAL_CONFIG_COUNT=15
 SPB_RENEWAL_UNREADABLE_COUNT=0
-SPB_HTTP_BOOTSTRAP_NAME_COUNT=31
-SPB_OTHER_TLS_REF_COUNT=0
-SPB_SNAKEOIL_PAIR_COUNT=0
-SPB_SNAKEOIL_REGENERATABLE=NO
-SPB_NGINX_TEST_RC=1
-SPB_NGINX_STDERR_BYTES=548
-SPB_NGINX_STDERR_SHA256=2e6103318c56134cc5414c7c98846a7c6c32b1439c1ffd0df872beda643ed463
-SPB_NGINX_ANCHOR316_MATCH=NO
+SPB_ACTIVE_TLS_NAME_COUNT=31
+SPB_LINEAGE_NAME_MIN=2
+SPB_LINEAGE_NAME_MAX=3
+SPB_LINEAGES_WITHOUT_ACTIVE_NAMES_COUNT=0
+SPB_MULTI_LINEAGE_NAME_COUNT=0
+SPB_WILDCARD_NAME_COUNT=0
+SPB_INVALID_DNS_NAME_COUNT=0
+SPB_CERTBOT_PRESENT=YES
+SPB_CERTBOT_STANDALONE_PLUGIN=YES
 SPB_NGINX_SERVICE_ACTIVE=YES
+SPB_LE_REFERENCE_SHAPE_BAD_COUNT=0
+SPB_FILE_SEPARABILITY_REQUIRED=NO
+SPB_OLD_CERT_READ_REQUIRED=NO
+SPB_OLD_KEY_READ_REQUIRED=NO
+SPB_NGINX_EDGEADMIN_TEST_REQUIRED=NO
 SPB_CERT_KIND_COUNTS={"letsencrypt":15}
 SPB_KEY_KIND_COUNTS={"letsencrypt":15}
-SPB_CERT_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15}
-SPB_KEY_PATH_STATUS_COUNTS={"ANCESTOR_EACCES":15}
-SPB_RENEWAL_AUTH_COUNTS={"webroot":15}
-SPB_HTTP_BOOTSTRAP_MISSING_NAMES=[]
-SPB_HTTP_BOOTSTRAP_INSEPARABLE_NAMES=["chat.gram1.ru","git-read.gram1.ru","git.gram1.ru","groups.chat.gram1.ru","share.chat.gram1.ru"]
-SPB_LINEAGES_WITHOUT_SERVER_NAMES=[]
-SPB_WILDCARD_NAMES=[]
-SPB_MULTI_LINEAGE_NAMES=[]
-SPB_POLICY_HOLD_REASONS=["HTTP_BOOTSTRAP_NOT_FILE_SEPARABLE","NGINX_FAILURE_CLASS_NOT_REISSUE_COMPATIBLE","NGINX_DIAGNOSTIC_DRIFT","SNAKEOIL_PAIR_CARDINALITY"]
+SPB_POLICY_HOLD_REASONS=[]
 SPB_TLS_RECOVERY_STRATEGY=REISSUE_TLS_ON_RESTORE
-SPB_REISSUE_BOOTSTRAP_METHOD=WITHHOLD_TLS_SITE_FILES__START_HTTP_ONLY__ISSUE_CERTBOT_LINEAGES__ENABLE_TLS
-SPB_REISSUE_BOOTSTRAP_READY=NO
-SPB_POLICY_READY=NO
-ROLE_HOLDS=[{"reason":"SPB_TLS_REISSUE_BOOTSTRAP_NOT_READY","role":"SPB_INGRESS"}]
-POLICY_CLOSURE_COMPLETE=NO
+SPB_REISSUE_METHOD=CERTBOT_STANDALONE_HTTP01_BEFORE_NGINX_START
+SPB_RESTORE_SEQUENCE=RESTORE_NGINX_CONFIG__KEEP_NGINX_STOPPED__CERTBOT_STANDALONE_15_LINEAGES__ROOT_NGINX_T__START_NGINX
+SPB_TLS_REISSUE_DEPENDENCY=DNS_AND_PUBLIC_PORT80_ROUTING_AT_RESTORE
+SPB_ACME_ACCOUNT_POLICY=FRESH_OR_OPERATOR_SUPPLIED_ACCOUNT_ACCEPTABLE_NO_OLD_ACCOUNT_KEY_REQUIRED
+SPB_POLICY_READY=YES
+MD_POLICY_ANCHOR314_COMMIT=e25be13ca38281333f21f1397f53fef70d4da379
+MD_POLICY_READY_PRIOR=YES
+US_POLICY_ANCHOR315_COMMIT=2581e478d622bb8503fe4211fa8a4e88f7651aef
+US_POLICY_READY_PRIOR=YES
+ROLE_HOLDS=[]
+POLICY_CLOSURE_COMPLETE=YES
 STATUS=OK
 PHASE=COMPLETE
-NEXT_GATE=VPS_POLICY_CLOSURE_REQUIRED
-SPB317_END=
+NEXT_GATE=VPS_ROLE_SPECIFIC_BACKUP_IMPLEMENTATION
+SPB318_END=
 
 OUTPUT_END
 CHAT_OUTPUT_END