runtime: publish SUPPORT-260919-NETBIRD-MOLDOVA-FIREWALL-PATH-RCA-READONLY-610R1

2026-09-19 12:08:37 +00:00
parent c1ed876711
commit d502e7e6e1
4 changed files with 119 additions and 19 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260919-NETBIRD-MOLDOVA-FIREWALL-PATH-RCA-READONLY-610R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "netbird-moldova-firewall-path-rca-readonly",
+  "started_at_utc": "2026-09-19T12:08:36Z",
+  "finished_at_utc": "2026-09-19T12:08:36Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "5f1e44dc3cf366bab26e54cea8bcc3463f8b592bcd1f9c536ec24be093448e18",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "10812203d21f2800bff16841b6efabc3aa19147ecfa07567b619df3b86fba0d8",
+  "sanitized_output_sha256": "10812203d21f2800bff16841b6efabc3aa19147ecfa07567b619df3b86fba0d8",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "AUDIT_REMOTE=BEGIN\nSUDO_N=False\nDEFAULT_ROUTE_DEVS=vmbr0\nNFTABLES_ACTIVE=inactive\nNFTABLES_ENABLED=disabled\nFIREWALLD_ACTIVE=inactive\nNETFILTER_PERSISTENT_ACTIVE=inactive\nNFTABLES_SYSTEMD_SHOW=ExecStart={ path=/usr/sbin/nft ; argv[]=/usr/sbin/nft -f /etc/nftables.conf ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 } FragmentPath=/usr/lib/systemd/system/nftables.service\nNFTABLES_CONF_PRESENT=True\nNFTABLES_CONF_SHA256=60dac93ffe0ea440fc4a8941a080b6fb8d2c8655d47baf856e97182a0d1ca29a\nNFTABLES_CONF_CHECK_RC=999\nNFT_CONFIG_FILE_COUNT=1\nNFT_CONFIG_FILE_00=/etc/nftables.conf|60dac93ffe0ea440fc4a8941a080b6fb8d2c8655d47baf856e97182a0d1ca29a\nNFT_JSON_RC=999\nNFT_CONFIG_CTX_00=/etc/nftables.conf:7:type filter hook input priority filter;\nNFT_CONFIG_CONTEXT_COUNT=1\nFIREWALL_MUTATION_PATH_PROVEN=False\nAUDIT_REMOTE=END\n"
+}
@@ -0,0 +1,50 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260919-NETBIRD-MOLDOVA-FIREWALL-PATH-RCA-READONLY-610R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=netbird-moldova-firewall-path-rca-readonly
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=5f1e44dc3cf366bab26e54cea8bcc3463f8b592bcd1f9c536ec24be093448e18
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=10812203d21f2800bff16841b6efabc3aa19147ecfa07567b619df3b86fba0d8
+SANITIZED_OUTPUT_SHA256=10812203d21f2800bff16841b6efabc3aa19147ecfa07567b619df3b86fba0d8
+OUTPUT_BEGIN
+AUDIT_REMOTE=BEGIN
+SUDO_N=False
+DEFAULT_ROUTE_DEVS=vmbr0
+NFTABLES_ACTIVE=inactive
+NFTABLES_ENABLED=disabled
+FIREWALLD_ACTIVE=inactive
+NETFILTER_PERSISTENT_ACTIVE=inactive
+NFTABLES_SYSTEMD_SHOW=ExecStart={ path=/usr/sbin/nft ; argv[]=/usr/sbin/nft -f /etc/nftables.conf ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 } FragmentPath=/usr/lib/systemd/system/nftables.service
+NFTABLES_CONF_PRESENT=True
+NFTABLES_CONF_SHA256=60dac93ffe0ea440fc4a8941a080b6fb8d2c8655d47baf856e97182a0d1ca29a
+NFTABLES_CONF_CHECK_RC=999
+NFT_CONFIG_FILE_COUNT=1
+NFT_CONFIG_FILE_00=/etc/nftables.conf|60dac93ffe0ea440fc4a8941a080b6fb8d2c8655d47baf856e97182a0d1ca29a
+NFT_JSON_RC=999
+NFT_CONFIG_CTX_00=/etc/nftables.conf:7:type filter hook input priority filter;
+NFT_CONFIG_CONTEXT_COUNT=1
+FIREWALL_MUTATION_PATH_PROVEN=False
+AUDIT_REMOTE=END
+
+OUTPUT_END
+CHAT_OUTPUT_END