diff --git a/runtime/history/SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1.json b/runtime/history/SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1.json new file mode 100644 index 00000000..8fd081b6 --- /dev/null +++ b/runtime/history/SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "snikket-edge-packetpath-rca", + "started_at_utc": "2026-10-06T16:28:15Z", + "finished_at_utc": "2026-10-06T16:28:33Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "24765b917abf2c1cb4fda9460508b1fbce709be463b0f0e25ff9a370b6475775", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "622aeabe9c7f6412308ac26bea39805c7117f43810eb15adf4126c302e2a40af", + "sanitized_output_sha256": "750633ce1e6d80e532667fcf54790e3978caea2906c147804e6b9f7fe68a7381", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "SNIKKET_EDGE_PACKETPATH_RCA=V1\nMODE=read-only\nNO_CONFIG_MUTATION=true\nREC|VM150_PRE|DEV=eth0\nREC|VM150_PRE|GW_PING_RC=0\nREC|VM150_PRE|REC|GW_NEIGH|[PRIVATE_IP] dev eth0 lladdr MAC_REDACTED DELAY \nREC|VM150_PRE|REC|ROUTE_GET|IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED uid 0 \nREC|VM150_PRE|REC|ROUTE_GET| cache \nREC|VM150_PRE|GOOGLE_RC=28\nREC|VM130_PRE|QGA_EXIT=0\nREC|VM130_PRE|GW_LOCAL_INTERFACE=eth0\nREC|VM130_PRE|WAN_INTERFACE=eth0\nREC|VM130_PRE|ROUTE_BACK=IP_REDACTED dev eth0 src IP_REDACTED uid 0 \nREC|VM130_PRE| cache \nREC|VM130_PRE|RP_FILTER_ALL=0\nREC|VM130_PRE|RP_FILTER_INGRESS=2\nREC|VM130_PRE|RP_FILTER_WAN=2\nREC|VM130_PRE|FORWARD_POLICY=FORWARD\nREC|VM130_PRE|DOCKER_USER_POLICY=DOCKER-USER\nREC|VM130_PRE|REC|FORWARD_COUNTER|Chain FORWARD (policy ACCEPT 2085 packets, 147K bytes)\nREC|VM130_PRE|REC|FORWARD_COUNTER|num pkts bytes target prot opt in out source destination \nREC|VM130_PRE|REC|FORWARD_COUNTER|1 5948 2092K DOCKER-USER all -- * * IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|FORWARD_COUNTER|2 5948 2092K DOCKER-FORWARD all -- * * IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|DOCKER_USER_COUNTER|Chain DOCKER-USER (1 references)\nREC|VM130_PRE|REC|DOCKER_USER_COUNTER|num pkts bytes target prot opt in out source destination \nREC|VM130_PRE|REC|NAT_COUNTER|Chain POSTROUTING (policy ACCEPT 153K packets, 9608K bytes)\nREC|VM130_PRE|REC|NAT_COUNTER|num pkts bytes target prot opt in out source destination \nREC|VM130_PRE|REC|NAT_COUNTER|1 0 0 MASQUERADE all -- * !docker0 IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|2 87 5220 MASQUERADE all -- * !br-8122fec51f39 IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|3 0 0 MASQUERADE all -- * !br-5f66e1018bdd IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|4 0 0 MASQUERADE all -- * !br-4d894f9e427b IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|5 817 49020 MASQUERADE all -- * !br-f43db13d76c4 IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|6 0 0 MASQUERADE all -- * !br-d41b3e918fbc IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|7 61 3660 MASQUERADE all -- * !br-a4e31561a8d5 IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|8 0 0 MASQUERADE all -- * !br-915a81681c3e IP_REDACTED IP_REDACTED \nREC|VM130_PRE|NFT_RULESET_LINE_COUNT=190\nREC|VM130_PRE|TCPDUMP_PRESENT=true\nREC|VM130_PRE|CAPTURE_STARTED=true\nREC|VM130_PRE|CAP_B64=L3RtcC93Mi1zbmlra2V0LTk5NzI3LmNhcA==\nREC|VM150_PROBE|GW_PING_RC=0\nREC|VM150_PROBE|GOOGLE_RC=28\nREC|VM130_POST|QGA_EXIT=0\nREC|VM130_POST|CAPTURE_FILE_PRESENT=true\nREC|VM130_POST|CAPTURE_PACKET_LINE_COUNT=10\nREC|VM130_POST|CAPTURE_SYN_COUNT=10\nREC|VM130_POST|CAPTURE_SYNACK_COUNT=0\nREC|VM130_POST|CAPTURE_OUTBOUND_HINT_COUNT=10\nREC|VM130_POST|CAPTURE_INBOUND_HINT_COUNT=0\nREC|VM130_POST|REC|CAPTURE|19:28:25.603373 eth0 In IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393119274 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:25.603406 wg-edge01 Out IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393119274 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:26.619115 eth0 In IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393120290 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:26.619150 wg-edge01 Out IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393120290 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:27.604847 eth0 In IP IP_REDACTED.44068 > IP_REDACTED.443: Flags [S], seq 3993723863, win 64240, options [mss 1460,sackOK,TS val 2458889281 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:27.604895 wg-edge01 Out IP IP_REDACTED.44068 > IP_REDACTED.443: Flags [S], seq 3993723863, win 64240, options [mss 1460,sackOK,TS val 2458889281 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:28.606117 eth0 In IP IP_REDACTED.45742 > IP_REDACTED.443: Flags [S], seq 2735884747, win 64240, options [mss 1460,sackOK,TS val 3431509237 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:28.606165 wg-edge01 Out IP IP_REDACTED.45742 > IP_REDACTED.443: Flags [S], seq 2735884747, win 64240, options [mss 1460,sackOK,TS val 3431509237 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:29.104761 eth0 In IP IP_REDACTED.53400 > IP_REDACTED.443: Flags [S], seq 3929442734, win 64240, options [mss 1460,sackOK,TS val 1844439030 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:29.104804 wg-edge01 Out IP IP_REDACTED.53400 > IP_REDACTED.443: Flags [S], seq 3929442734, win 64240, options [mss 1460,sackOK,TS val 1844439030 ecr 0,nop,wscale 7], length 0\nCLUSTER_QUORATE=true\nDECISION=PASS_SNIKKET_EDGE_PACKETPATH_RCA\nNEXT_GATE=SNIKKET_EDGE_PACKETPATH_REPAIR\nTASK_RESULT=SNIKKET_EDGE_PACKETPATH_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_CONFIG_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1.txt b/runtime/history/SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1.txt new file mode 100644 index 00000000..6141ebd7 --- /dev/null +++ b/runtime/history/SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1.txt @@ -0,0 +1,99 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=snikket-edge-packetpath-rca +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=24765b917abf2c1cb4fda9460508b1fbce709be463b0f0e25ff9a370b6475775 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=622aeabe9c7f6412308ac26bea39805c7117f43810eb15adf4126c302e2a40af +SANITIZED_OUTPUT_SHA256=750633ce1e6d80e532667fcf54790e3978caea2906c147804e6b9f7fe68a7381 +OUTPUT_BEGIN +SNIKKET_EDGE_PACKETPATH_RCA=V1 +MODE=read-only +NO_CONFIG_MUTATION=true +REC|VM150_PRE|DEV=eth0 +REC|VM150_PRE|GW_PING_RC=0 +REC|VM150_PRE|REC|GW_NEIGH|[PRIVATE_IP] dev eth0 lladdr MAC_REDACTED DELAY +REC|VM150_PRE|REC|ROUTE_GET|IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED uid 0 +REC|VM150_PRE|REC|ROUTE_GET| cache +REC|VM150_PRE|GOOGLE_RC=28 +REC|VM130_PRE|QGA_EXIT=0 +REC|VM130_PRE|GW_LOCAL_INTERFACE=eth0 +REC|VM130_PRE|WAN_INTERFACE=eth0 +REC|VM130_PRE|ROUTE_BACK=IP_REDACTED dev eth0 src IP_REDACTED uid 0 +REC|VM130_PRE| cache +REC|VM130_PRE|RP_FILTER_ALL=0 +REC|VM130_PRE|RP_FILTER_INGRESS=2 +REC|VM130_PRE|RP_FILTER_WAN=2 +REC|VM130_PRE|FORWARD_POLICY=FORWARD +REC|VM130_PRE|DOCKER_USER_POLICY=DOCKER-USER +REC|VM130_PRE|REC|FORWARD_COUNTER|Chain FORWARD (policy ACCEPT 2085 packets, 147K bytes) +REC|VM130_PRE|REC|FORWARD_COUNTER|num pkts bytes target prot opt in out source destination +REC|VM130_PRE|REC|FORWARD_COUNTER|1 5948 2092K DOCKER-USER all -- * * IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|FORWARD_COUNTER|2 5948 2092K DOCKER-FORWARD all -- * * IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|DOCKER_USER_COUNTER|Chain DOCKER-USER (1 references) +REC|VM130_PRE|REC|DOCKER_USER_COUNTER|num pkts bytes target prot opt in out source destination +REC|VM130_PRE|REC|NAT_COUNTER|Chain POSTROUTING (policy ACCEPT 153K packets, 9608K bytes) +REC|VM130_PRE|REC|NAT_COUNTER|num pkts bytes target prot opt in out source destination +REC|VM130_PRE|REC|NAT_COUNTER|1 0 0 MASQUERADE all -- * !docker0 IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|2 87 5220 MASQUERADE all -- * !br-8122fec51f39 IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|3 0 0 MASQUERADE all -- * !br-5f66e1018bdd IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|4 0 0 MASQUERADE all -- * !br-4d894f9e427b IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|5 817 49020 MASQUERADE all -- * !br-f43db13d76c4 IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|6 0 0 MASQUERADE all -- * !br-d41b3e918fbc IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|7 61 3660 MASQUERADE all -- * !br-a4e31561a8d5 IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|8 0 0 MASQUERADE all -- * !br-915a81681c3e IP_REDACTED IP_REDACTED +REC|VM130_PRE|NFT_RULESET_LINE_COUNT=190 +REC|VM130_PRE|TCPDUMP_PRESENT=true +REC|VM130_PRE|CAPTURE_STARTED=true +REC|VM130_PRE|CAP_B64=L3RtcC93Mi1zbmlra2V0LTk5NzI3LmNhcA== +REC|VM150_PROBE|GW_PING_RC=0 +REC|VM150_PROBE|GOOGLE_RC=28 +REC|VM130_POST|QGA_EXIT=0 +REC|VM130_POST|CAPTURE_FILE_PRESENT=true +REC|VM130_POST|CAPTURE_PACKET_LINE_COUNT=10 +REC|VM130_POST|CAPTURE_SYN_COUNT=10 +REC|VM130_POST|CAPTURE_SYNACK_COUNT=0 +REC|VM130_POST|CAPTURE_OUTBOUND_HINT_COUNT=10 +REC|VM130_POST|CAPTURE_INBOUND_HINT_COUNT=0 +REC|VM130_POST|REC|CAPTURE|19:28:25.603373 eth0 In IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393119274 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:25.603406 wg-edge01 Out IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393119274 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:26.619115 eth0 In IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393120290 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:26.619150 wg-edge01 Out IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393120290 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:27.604847 eth0 In IP IP_REDACTED.44068 > IP_REDACTED.443: Flags [S], seq 3993723863, win 64240, options [mss 1460,sackOK,TS val 2458889281 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:27.604895 wg-edge01 Out IP IP_REDACTED.44068 > IP_REDACTED.443: Flags [S], seq 3993723863, win 64240, options [mss 1460,sackOK,TS val 2458889281 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:28.606117 eth0 In IP IP_REDACTED.45742 > IP_REDACTED.443: Flags [S], seq 2735884747, win 64240, options [mss 1460,sackOK,TS val 3431509237 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:28.606165 wg-edge01 Out IP IP_REDACTED.45742 > IP_REDACTED.443: Flags [S], seq 2735884747, win 64240, options [mss 1460,sackOK,TS val 3431509237 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:29.104761 eth0 In IP IP_REDACTED.53400 > IP_REDACTED.443: Flags [S], seq 3929442734, win 64240, options [mss 1460,sackOK,TS val 1844439030 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:29.104804 wg-edge01 Out IP IP_REDACTED.53400 > IP_REDACTED.443: Flags [S], seq 3929442734, win 64240, options [mss 1460,sackOK,TS val 1844439030 ecr 0,nop,wscale 7], length 0 +CLUSTER_QUORATE=true +DECISION=PASS_SNIKKET_EDGE_PACKETPATH_RCA +NEXT_GATE=SNIKKET_EDGE_PACKETPATH_REPAIR +TASK_RESULT=SNIKKET_EDGE_PACKETPATH_RCA +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_CONFIG_MUTATION +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 04fd632b..8fd081b6 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,38 +1,38 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-261006-SNIKKET-EDGE-NAT-RESTORE-99726R1", - "status": "FAIL", - "rc": 1, + "command_id": "SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1", + "status": "OK", + "rc": 0, "host": "pve01", - "mode": "change", - "component": "snikket-edge-nat-restore", - "started_at_utc": "2026-10-06T16:22:00Z", - "finished_at_utc": "2026-10-06T16:22:21Z", + "mode": "read-only", + "component": "snikket-edge-packetpath-rca", + "started_at_utc": "2026-10-06T16:28:15Z", + "finished_at_utc": "2026-10-06T16:28:33Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "821bed21295b6e9711a7cf2e9c9725989382c4b387dcc61922c8694edb9366ea", + "command_sha256": "24765b917abf2c1cb4fda9460508b1fbce709be463b0f0e25ff9a370b6475775", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, - "change_declared": true, + "change_declared": false, "result_contract_valid": true, - "result_contract_status": "FAIL", + "result_contract_status": null, "result_contract_error": null, - "command_rc": 1, - "changes_made": true, - "rollback_started": true, - "rollback_restored": true, - "mutation_outcome": "ROLLED_BACK", + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", "sanitized": true, "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "4c3ec7c7f1ca1b253ddf1d6b7f37c6d1cde031a3aa1edbd7a5ce62a1b6b1ea34", - "sanitized_output_sha256": "4c3ec7c7f1ca1b253ddf1d6b7f37c6d1cde031a3aa1edbd7a5ce62a1b6b1ea34", + "raw_evidence_sha256": "622aeabe9c7f6412308ac26bea39805c7117f43810eb15adf4126c302e2a40af", + "sanitized_output_sha256": "750633ce1e6d80e532667fcf54790e3978caea2906c147804e6b9f7fe68a7381", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "SNIKKET_EDGE_NAT_RESTORE=V1\nMODE=change\nSCOPE=VM130_PERSISTENT_NAT_VM150_EGRESS_DNS_RUNTIME\nNO_VM_POWER_MUTATION=true\nNO_NETBIRD_MUTATION=true\nNO_PVE_FIREWALL_MUTATION=true\nNO_PACKAGE_MUTATION=true\nVM150_SRC_SHA=4e29a2729bbc40663066bdae0c5a3d627070fba621f5c8c70639f4782afbc67d\nVM150_GW_SHA=bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834\nSNIKKET_DOMAIN_SHA=04cb4a04e408d91abb9c63701ae969abf16d8a12b6f4f144c5edf2c28e03256b\nREC|VM130_PRE|ROLE=VM130\nREC|VM130_PRE|IP_FORWARD=1\nREC|VM130_PRE|UNIT_PRESENT=false\nREC|VM130_PRE|UNIT_ACTIVE=inactive\nREC|VM130_PRE|UNIT_ENABLED=not-found\nREC|VM130_PRE|NAT_RULE_PRESENT=false\nREC|VM130_PRE|FWD_OUT_PRESENT=false\nREC|VM130_PRE|FWD_IN_PRESENT=false\nREC|VM130_PRE|EDGEVM_GOOGLE_RC=0\nREC|VM130_PRE|EDGEVM_IPIFY_RC=0\nREC|VM130_APPLY|ROLE=VM130\nREC|VM130_APPLY|IP_FORWARD=1\nREC|VM130_APPLY|UNIT_PRESENT=true\nREC|VM130_APPLY|UNIT_ACTIVE=active\nREC|VM130_APPLY|UNIT_ENABLED=enabled\nREC|VM130_APPLY|NAT_RULE_PRESENT=true\nREC|VM130_APPLY|FWD_OUT_PRESENT=true\nREC|VM130_APPLY|FWD_IN_PRESENT=true\nREC|VM130_APPLY|EDGEVM_GOOGLE_RC=0\nREC|VM130_APPLY|EDGEVM_IPIFY_RC=0\nFAIL_REASON=VM150_EGRESS_STILL_BROKEN\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=VM130_SNIKKET_NAT_ROLLED_BACK\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-SNIKKET-EDGE-NAT-RESTORE-99726R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n" + "output": "SNIKKET_EDGE_PACKETPATH_RCA=V1\nMODE=read-only\nNO_CONFIG_MUTATION=true\nREC|VM150_PRE|DEV=eth0\nREC|VM150_PRE|GW_PING_RC=0\nREC|VM150_PRE|REC|GW_NEIGH|[PRIVATE_IP] dev eth0 lladdr MAC_REDACTED DELAY \nREC|VM150_PRE|REC|ROUTE_GET|IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED uid 0 \nREC|VM150_PRE|REC|ROUTE_GET| cache \nREC|VM150_PRE|GOOGLE_RC=28\nREC|VM130_PRE|QGA_EXIT=0\nREC|VM130_PRE|GW_LOCAL_INTERFACE=eth0\nREC|VM130_PRE|WAN_INTERFACE=eth0\nREC|VM130_PRE|ROUTE_BACK=IP_REDACTED dev eth0 src IP_REDACTED uid 0 \nREC|VM130_PRE| cache \nREC|VM130_PRE|RP_FILTER_ALL=0\nREC|VM130_PRE|RP_FILTER_INGRESS=2\nREC|VM130_PRE|RP_FILTER_WAN=2\nREC|VM130_PRE|FORWARD_POLICY=FORWARD\nREC|VM130_PRE|DOCKER_USER_POLICY=DOCKER-USER\nREC|VM130_PRE|REC|FORWARD_COUNTER|Chain FORWARD (policy ACCEPT 2085 packets, 147K bytes)\nREC|VM130_PRE|REC|FORWARD_COUNTER|num pkts bytes target prot opt in out source destination \nREC|VM130_PRE|REC|FORWARD_COUNTER|1 5948 2092K DOCKER-USER all -- * * IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|FORWARD_COUNTER|2 5948 2092K DOCKER-FORWARD all -- * * IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|DOCKER_USER_COUNTER|Chain DOCKER-USER (1 references)\nREC|VM130_PRE|REC|DOCKER_USER_COUNTER|num pkts bytes target prot opt in out source destination \nREC|VM130_PRE|REC|NAT_COUNTER|Chain POSTROUTING (policy ACCEPT 153K packets, 9608K bytes)\nREC|VM130_PRE|REC|NAT_COUNTER|num pkts bytes target prot opt in out source destination \nREC|VM130_PRE|REC|NAT_COUNTER|1 0 0 MASQUERADE all -- * !docker0 IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|2 87 5220 MASQUERADE all -- * !br-8122fec51f39 IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|3 0 0 MASQUERADE all -- * !br-5f66e1018bdd IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|4 0 0 MASQUERADE all -- * !br-4d894f9e427b IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|5 817 49020 MASQUERADE all -- * !br-f43db13d76c4 IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|6 0 0 MASQUERADE all -- * !br-d41b3e918fbc IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|7 61 3660 MASQUERADE all -- * !br-a4e31561a8d5 IP_REDACTED IP_REDACTED \nREC|VM130_PRE|REC|NAT_COUNTER|8 0 0 MASQUERADE all -- * !br-915a81681c3e IP_REDACTED IP_REDACTED \nREC|VM130_PRE|NFT_RULESET_LINE_COUNT=190\nREC|VM130_PRE|TCPDUMP_PRESENT=true\nREC|VM130_PRE|CAPTURE_STARTED=true\nREC|VM130_PRE|CAP_B64=L3RtcC93Mi1zbmlra2V0LTk5NzI3LmNhcA==\nREC|VM150_PROBE|GW_PING_RC=0\nREC|VM150_PROBE|GOOGLE_RC=28\nREC|VM130_POST|QGA_EXIT=0\nREC|VM130_POST|CAPTURE_FILE_PRESENT=true\nREC|VM130_POST|CAPTURE_PACKET_LINE_COUNT=10\nREC|VM130_POST|CAPTURE_SYN_COUNT=10\nREC|VM130_POST|CAPTURE_SYNACK_COUNT=0\nREC|VM130_POST|CAPTURE_OUTBOUND_HINT_COUNT=10\nREC|VM130_POST|CAPTURE_INBOUND_HINT_COUNT=0\nREC|VM130_POST|REC|CAPTURE|19:28:25.603373 eth0 In IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393119274 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:25.603406 wg-edge01 Out IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393119274 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:26.619115 eth0 In IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393120290 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:26.619150 wg-edge01 Out IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393120290 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:27.604847 eth0 In IP IP_REDACTED.44068 > IP_REDACTED.443: Flags [S], seq 3993723863, win 64240, options [mss 1460,sackOK,TS val 2458889281 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:27.604895 wg-edge01 Out IP IP_REDACTED.44068 > IP_REDACTED.443: Flags [S], seq 3993723863, win 64240, options [mss 1460,sackOK,TS val 2458889281 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:28.606117 eth0 In IP IP_REDACTED.45742 > IP_REDACTED.443: Flags [S], seq 2735884747, win 64240, options [mss 1460,sackOK,TS val 3431509237 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:28.606165 wg-edge01 Out IP IP_REDACTED.45742 > IP_REDACTED.443: Flags [S], seq 2735884747, win 64240, options [mss 1460,sackOK,TS val 3431509237 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:29.104761 eth0 In IP IP_REDACTED.53400 > IP_REDACTED.443: Flags [S], seq 3929442734, win 64240, options [mss 1460,sackOK,TS val 1844439030 ecr 0,nop,wscale 7], length 0\nREC|VM130_POST|REC|CAPTURE|19:28:29.104804 wg-edge01 Out IP IP_REDACTED.53400 > IP_REDACTED.443: Flags [S], seq 3929442734, win 64240, options [mss 1460,sackOK,TS val 1844439030 ecr 0,nop,wscale 7], length 0\nCLUSTER_QUORATE=true\nDECISION=PASS_SNIKKET_EDGE_PACKETPATH_RCA\nNEXT_GATE=SNIKKET_EDGE_PACKETPATH_REPAIR\nTASK_RESULT=SNIKKET_EDGE_PACKETPATH_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_CONFIG_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 0d738f6b..6141ebd7 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,68 +1,99 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-261006-SNIKKET-EDGE-NAT-RESTORE-99726R1 -STATUS=FAIL -RC=1 +COMMAND_ID=SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1 +STATUS=OK +RC=0 HOST=pve01 -MODE=change -COMPONENT=snikket-edge-nat-restore +MODE=read-only +COMPONENT=snikket-edge-packetpath-rca REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=821bed21295b6e9711a7cf2e9c9725989382c4b387dcc61922c8694edb9366ea +COMMAND_SHA256=24765b917abf2c1cb4fda9460508b1fbce709be463b0f0e25ff9a370b6475775 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true -CHANGE_DECLARED=true +CHANGE_DECLARED=false RESULT_CONTRACT_VALID=true -RESULT_CONTRACT_STATUS=FAIL +RESULT_CONTRACT_STATUS=NOT_APPLICABLE RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=1 -CHANGES_MADE=true -ROLLBACK_STARTED=true -ROLLBACK_RESTORED=true -MUTATION_OUTCOME=ROLLED_BACK +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=4c3ec7c7f1ca1b253ddf1d6b7f37c6d1cde031a3aa1edbd7a5ce62a1b6b1ea34 -SANITIZED_OUTPUT_SHA256=4c3ec7c7f1ca1b253ddf1d6b7f37c6d1cde031a3aa1edbd7a5ce62a1b6b1ea34 +RAW_EVIDENCE_SHA256=622aeabe9c7f6412308ac26bea39805c7117f43810eb15adf4126c302e2a40af +SANITIZED_OUTPUT_SHA256=750633ce1e6d80e532667fcf54790e3978caea2906c147804e6b9f7fe68a7381 OUTPUT_BEGIN -SNIKKET_EDGE_NAT_RESTORE=V1 -MODE=change -SCOPE=VM130_PERSISTENT_NAT_VM150_EGRESS_DNS_RUNTIME -NO_VM_POWER_MUTATION=true -NO_NETBIRD_MUTATION=true -NO_PVE_FIREWALL_MUTATION=true -NO_PACKAGE_MUTATION=true -VM150_SRC_SHA=4e29a2729bbc40663066bdae0c5a3d627070fba621f5c8c70639f4782afbc67d -VM150_GW_SHA=bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834 -SNIKKET_DOMAIN_SHA=04cb4a04e408d91abb9c63701ae969abf16d8a12b6f4f144c5edf2c28e03256b -REC|VM130_PRE|ROLE=VM130 -REC|VM130_PRE|IP_FORWARD=1 -REC|VM130_PRE|UNIT_PRESENT=false -REC|VM130_PRE|UNIT_ACTIVE=inactive -REC|VM130_PRE|UNIT_ENABLED=not-found -REC|VM130_PRE|NAT_RULE_PRESENT=false -REC|VM130_PRE|FWD_OUT_PRESENT=false -REC|VM130_PRE|FWD_IN_PRESENT=false -REC|VM130_PRE|EDGEVM_GOOGLE_RC=0 -REC|VM130_PRE|EDGEVM_IPIFY_RC=0 -REC|VM130_APPLY|ROLE=VM130 -REC|VM130_APPLY|IP_FORWARD=1 -REC|VM130_APPLY|UNIT_PRESENT=true -REC|VM130_APPLY|UNIT_ACTIVE=active -REC|VM130_APPLY|UNIT_ENABLED=enabled -REC|VM130_APPLY|NAT_RULE_PRESENT=true -REC|VM130_APPLY|FWD_OUT_PRESENT=true -REC|VM130_APPLY|FWD_IN_PRESENT=true -REC|VM130_APPLY|EDGEVM_GOOGLE_RC=0 -REC|VM130_APPLY|EDGEVM_IPIFY_RC=0 -FAIL_REASON=VM150_EGRESS_STILL_BROKEN -CHANGES_MADE=true -ROLLBACK_STARTED=true -ROLLBACK_RESTORED=true -MUTATION_OUTCOME=VM130_SNIKKET_NAT_ROLLED_BACK -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-SNIKKET-EDGE-NAT-RESTORE-99726R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true} +SNIKKET_EDGE_PACKETPATH_RCA=V1 +MODE=read-only +NO_CONFIG_MUTATION=true +REC|VM150_PRE|DEV=eth0 +REC|VM150_PRE|GW_PING_RC=0 +REC|VM150_PRE|REC|GW_NEIGH|[PRIVATE_IP] dev eth0 lladdr MAC_REDACTED DELAY +REC|VM150_PRE|REC|ROUTE_GET|IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED uid 0 +REC|VM150_PRE|REC|ROUTE_GET| cache +REC|VM150_PRE|GOOGLE_RC=28 +REC|VM130_PRE|QGA_EXIT=0 +REC|VM130_PRE|GW_LOCAL_INTERFACE=eth0 +REC|VM130_PRE|WAN_INTERFACE=eth0 +REC|VM130_PRE|ROUTE_BACK=IP_REDACTED dev eth0 src IP_REDACTED uid 0 +REC|VM130_PRE| cache +REC|VM130_PRE|RP_FILTER_ALL=0 +REC|VM130_PRE|RP_FILTER_INGRESS=2 +REC|VM130_PRE|RP_FILTER_WAN=2 +REC|VM130_PRE|FORWARD_POLICY=FORWARD +REC|VM130_PRE|DOCKER_USER_POLICY=DOCKER-USER +REC|VM130_PRE|REC|FORWARD_COUNTER|Chain FORWARD (policy ACCEPT 2085 packets, 147K bytes) +REC|VM130_PRE|REC|FORWARD_COUNTER|num pkts bytes target prot opt in out source destination +REC|VM130_PRE|REC|FORWARD_COUNTER|1 5948 2092K DOCKER-USER all -- * * IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|FORWARD_COUNTER|2 5948 2092K DOCKER-FORWARD all -- * * IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|DOCKER_USER_COUNTER|Chain DOCKER-USER (1 references) +REC|VM130_PRE|REC|DOCKER_USER_COUNTER|num pkts bytes target prot opt in out source destination +REC|VM130_PRE|REC|NAT_COUNTER|Chain POSTROUTING (policy ACCEPT 153K packets, 9608K bytes) +REC|VM130_PRE|REC|NAT_COUNTER|num pkts bytes target prot opt in out source destination +REC|VM130_PRE|REC|NAT_COUNTER|1 0 0 MASQUERADE all -- * !docker0 IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|2 87 5220 MASQUERADE all -- * !br-8122fec51f39 IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|3 0 0 MASQUERADE all -- * !br-5f66e1018bdd IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|4 0 0 MASQUERADE all -- * !br-4d894f9e427b IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|5 817 49020 MASQUERADE all -- * !br-f43db13d76c4 IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|6 0 0 MASQUERADE all -- * !br-d41b3e918fbc IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|7 61 3660 MASQUERADE all -- * !br-a4e31561a8d5 IP_REDACTED IP_REDACTED +REC|VM130_PRE|REC|NAT_COUNTER|8 0 0 MASQUERADE all -- * !br-915a81681c3e IP_REDACTED IP_REDACTED +REC|VM130_PRE|NFT_RULESET_LINE_COUNT=190 +REC|VM130_PRE|TCPDUMP_PRESENT=true +REC|VM130_PRE|CAPTURE_STARTED=true +REC|VM130_PRE|CAP_B64=L3RtcC93Mi1zbmlra2V0LTk5NzI3LmNhcA== +REC|VM150_PROBE|GW_PING_RC=0 +REC|VM150_PROBE|GOOGLE_RC=28 +REC|VM130_POST|QGA_EXIT=0 +REC|VM130_POST|CAPTURE_FILE_PRESENT=true +REC|VM130_POST|CAPTURE_PACKET_LINE_COUNT=10 +REC|VM130_POST|CAPTURE_SYN_COUNT=10 +REC|VM130_POST|CAPTURE_SYNACK_COUNT=0 +REC|VM130_POST|CAPTURE_OUTBOUND_HINT_COUNT=10 +REC|VM130_POST|CAPTURE_INBOUND_HINT_COUNT=0 +REC|VM130_POST|REC|CAPTURE|19:28:25.603373 eth0 In IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393119274 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:25.603406 wg-edge01 Out IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393119274 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:26.619115 eth0 In IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393120290 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:26.619150 wg-edge01 Out IP IP_REDACTED.56426 > IP_REDACTED.443: Flags [S], seq 1291592374, win 64240, options [mss 1460,sackOK,TS val 2393120290 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:27.604847 eth0 In IP IP_REDACTED.44068 > IP_REDACTED.443: Flags [S], seq 3993723863, win 64240, options [mss 1460,sackOK,TS val 2458889281 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:27.604895 wg-edge01 Out IP IP_REDACTED.44068 > IP_REDACTED.443: Flags [S], seq 3993723863, win 64240, options [mss 1460,sackOK,TS val 2458889281 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:28.606117 eth0 In IP IP_REDACTED.45742 > IP_REDACTED.443: Flags [S], seq 2735884747, win 64240, options [mss 1460,sackOK,TS val 3431509237 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:28.606165 wg-edge01 Out IP IP_REDACTED.45742 > IP_REDACTED.443: Flags [S], seq 2735884747, win 64240, options [mss 1460,sackOK,TS val 3431509237 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:29.104761 eth0 In IP IP_REDACTED.53400 > IP_REDACTED.443: Flags [S], seq 3929442734, win 64240, options [mss 1460,sackOK,TS val 1844439030 ecr 0,nop,wscale 7], length 0 +REC|VM130_POST|REC|CAPTURE|19:28:29.104804 wg-edge01 Out IP IP_REDACTED.53400 > IP_REDACTED.443: Flags [S], seq 3929442734, win 64240, options [mss 1460,sackOK,TS val 1844439030 ecr 0,nop,wscale 7], length 0 +CLUSTER_QUORATE=true +DECISION=PASS_SNIKKET_EDGE_PACKETPATH_RCA +NEXT_GATE=SNIKKET_EDGE_PACKETPATH_REPAIR +TASK_RESULT=SNIKKET_EDGE_PACKETPATH_RCA +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_CONFIG_MUTATION +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-SNIKKET-EDGE-PACKETPATH-RCA-99727R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END