diff --git a/runtime/history/SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1.json b/runtime/history/SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1.json new file mode 100644 index 00000000..0fbc93bf --- /dev/null +++ b/runtime/history/SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "edge-443-proxy-rca", + "started_at_utc": "2026-09-27T16:47:43Z", + "finished_at_utc": "2026-09-27T16:47:47Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "6664c6459625230c26e7570a146570b7398ad8dabbabdea320937e52915ac9a3", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "ba0875898d3ef7cd15bb3a3c5584b8f1ccaec11725af90321e7a7bcbb68d2ecb", + "sanitized_output_sha256": "ba0875898d3ef7cd15bb3a3c5584b8f1ccaec11725af90321e7a7bcbb68d2ecb", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "EDGE_443_PROXY_RCA_BEGIN=true\nCOMMAND_ID=SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1\nMODE=read-only\nCOMPONENT=edge-443-proxy-rca\nMUTATION_BOUNDARY=NONE;READ_ONLY_EDGE_443_LISTENER_MONITOR_CURL_ENV_AND_LOCAL_PROXY_PORT_CAPABILITY;NO_SERVICE_ACTION;NO_NETBIRD_CHANGE;NO_ROUTE_CHANGE;NO_FIREWALL_CHANGE;NO_HOSTS_CHANGE;NO_KEY_CHANGE\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nEDGE_LIVE_HOSTKEY_FP=SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo\nEDGE_SSH_AUTH=true\nEDGE_SUDO_N=true\n=== EDGE_NETBIRD ===\nEDGE_NETBIRD_Management: Connected\nEDGE_NETBIRD_Signal: Connected\nEDGE_NETBIRD_Relays: 1/2 Available\nEDGE_NETBIRD_NetBird IP: 100.100.60.182/16\nEDGE_NETBIRD_Networks: -\nEDGE_NETBIRD_Peers count: 3/11 Connected\n=== EDGE_443_LISTENERS ===\nEDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:((\"nginx\",pid=3287275,fd=16),(\"nginx\",pid=3287239,fd=16),(\"nginx\",pid=3287230,fd=16),(\"nginx\",pid=3287229,fd=16),(\"nginx\",pid=3096,fd=16))\nEDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:((\"nginx\",pid=3287275,fd=15),(\"nginx\",pid=3287239,fd=15),(\"nginx\",pid=3287230,fd=15),(\"nginx\",pid=3287229,fd=15),(\"nginx\",pid=3096,fd=15))\nEDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:((\"nginx\",pid=3287275,fd=14),(\"nginx\",pid=3287239,fd=14),(\"nginx\",pid=3287230,fd=14),(\"nginx\",pid=3287229,fd=14),(\"nginx\",pid=3096,fd=14))\nEDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:((\"nginx\",pid=3287275,fd=7),(\"nginx\",pid=3287239,fd=7),(\"nginx\",pid=3287230,fd=7),(\"nginx\",pid=3287229,fd=7),(\"nginx\",pid=3096,fd=7)) \nEDGE_443_LISTENER_LISTEN 0 511 [::]:443 [::]:* users:((\"nginx\",pid=3287275,fd=10),(\"nginx\",pid=3287239,fd=10),(\"nginx\",pid=3287230,fd=10),(\"nginx\",pid=3287229,fd=10),(\"nginx\",pid=3096,fd=10))\nEDGE_443_LISTENER_COUNT=5\nEDGE_443_WILDCARD_COUNT=5\n=== EDGE_DOCKER_443 ===\n=== MONITOR_UNIT_CONTRACT ===\nMONITOR_UNIT_User=root\nMONITOR_UNIT_Group=root\nMONITOR_UNIT_ExecStart=/usr/bin/python3 /opt/skladchik-reports-monitor/monitor.py run\n=== MONITOR_SOURCE_PROXY_CONTRACT ===\nMONITOR_SOURCE_MONITOR_SHA256=bf3a47cf3c53a4efa1f49322f96203a24b9077ea64547162e64c5d3d3326d0ff\nMONITOR_SOURCE_MONITOR_PROXY_TOKEN_COUNT=0\nMONITOR_SOURCE_MONITOR_NOPROXY_TOKEN_COUNT=0\nMONITOR_SOURCE_MONITOR_INTERFACE_TOKEN_COUNT=0\nMONITOR_SOURCE_MONITOR_CURL_SUBPROCESS_CALLS=0\nMONITOR_SOURCE_MONITOR_CURL_ENV_OVERRIDE_CALLS=0\nMONITOR_SOURCE_MONITOR_CURL_LITERAL_COUNT=0\n=== CURL_PROXY_CAPABILITY ===\nEDGE_CURL_SOCKS5_HOSTNAME=true\nEDGE_CURL_PROXY_OPTION=true\n=== LOCAL_PROXY_PORT_CANDIDATES ===\nEDGE_LOOPBACK_1080=FREE\nEDGE_LOOPBACK_11080=FREE\nEDGE_LOOPBACK_18080=FREE\n=== EDGE_TO_RELAY_22 ===\nEDGE_TO_RELAY_22=OPEN\nSOCKS_ENV_DESIGN_COMPATIBLE=false\nDECISION=HOLD_EDGE_PROXY_DESIGN\nNEXT_GATE=TARGETED_MONITOR_PROXY_DESIGN_RCA\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1.txt b/runtime/history/SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1.txt new file mode 100644 index 00000000..ea0058dc --- /dev/null +++ b/runtime/history/SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1.txt @@ -0,0 +1,84 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=edge-443-proxy-rca +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=6664c6459625230c26e7570a146570b7398ad8dabbabdea320937e52915ac9a3 +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=ba0875898d3ef7cd15bb3a3c5584b8f1ccaec11725af90321e7a7bcbb68d2ecb +SANITIZED_OUTPUT_SHA256=ba0875898d3ef7cd15bb3a3c5584b8f1ccaec11725af90321e7a7bcbb68d2ecb +OUTPUT_BEGIN +EDGE_443_PROXY_RCA_BEGIN=true +COMMAND_ID=SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1 +MODE=read-only +COMPONENT=edge-443-proxy-rca +MUTATION_BOUNDARY=NONE;READ_ONLY_EDGE_443_LISTENER_MONITOR_CURL_ENV_AND_LOCAL_PROXY_PORT_CAPABILITY;NO_SERVICE_ACTION;NO_NETBIRD_CHANGE;NO_ROUTE_CHANGE;NO_FIREWALL_CHANGE;NO_HOSTS_CHANGE;NO_KEY_CHANGE +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +EDGE_LIVE_HOSTKEY_FP=SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo +EDGE_SSH_AUTH=true +EDGE_SUDO_N=true +=== EDGE_NETBIRD === +EDGE_NETBIRD_Management: Connected +EDGE_NETBIRD_Signal: Connected +EDGE_NETBIRD_Relays: 1/2 Available +EDGE_NETBIRD_NetBird IP: 100.100.60.182/16 +EDGE_NETBIRD_Networks: - +EDGE_NETBIRD_Peers count: 3/11 Connected +=== EDGE_443_LISTENERS === +EDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=3287275,fd=16),("nginx",pid=3287239,fd=16),("nginx",pid=3287230,fd=16),("nginx",pid=3287229,fd=16),("nginx",pid=3096,fd=16)) +EDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=3287275,fd=15),("nginx",pid=3287239,fd=15),("nginx",pid=3287230,fd=15),("nginx",pid=3287229,fd=15),("nginx",pid=3096,fd=15)) +EDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=3287275,fd=14),("nginx",pid=3287239,fd=14),("nginx",pid=3287230,fd=14),("nginx",pid=3287229,fd=14),("nginx",pid=3096,fd=14)) +EDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=3287275,fd=7),("nginx",pid=3287239,fd=7),("nginx",pid=3287230,fd=7),("nginx",pid=3287229,fd=7),("nginx",pid=3096,fd=7)) +EDGE_443_LISTENER_LISTEN 0 511 [::]:443 [::]:* users:(("nginx",pid=3287275,fd=10),("nginx",pid=3287239,fd=10),("nginx",pid=3287230,fd=10),("nginx",pid=3287229,fd=10),("nginx",pid=3096,fd=10)) +EDGE_443_LISTENER_COUNT=5 +EDGE_443_WILDCARD_COUNT=5 +=== EDGE_DOCKER_443 === +=== MONITOR_UNIT_CONTRACT === +MONITOR_UNIT_User=root +MONITOR_UNIT_Group=root +MONITOR_UNIT_ExecStart=/usr/bin/python3 /opt/skladchik-reports-monitor/monitor.py run +=== MONITOR_SOURCE_PROXY_CONTRACT === +MONITOR_SOURCE_MONITOR_SHA256=bf3a47cf3c53a4efa1f49322f96203a24b9077ea64547162e64c5d3d3326d0ff +MONITOR_SOURCE_MONITOR_PROXY_TOKEN_COUNT=0 +MONITOR_SOURCE_MONITOR_NOPROXY_TOKEN_COUNT=0 +MONITOR_SOURCE_MONITOR_INTERFACE_TOKEN_COUNT=0 +MONITOR_SOURCE_MONITOR_CURL_SUBPROCESS_CALLS=0 +MONITOR_SOURCE_MONITOR_CURL_ENV_OVERRIDE_CALLS=0 +MONITOR_SOURCE_MONITOR_CURL_LITERAL_COUNT=0 +=== CURL_PROXY_CAPABILITY === +EDGE_CURL_SOCKS5_HOSTNAME=true +EDGE_CURL_PROXY_OPTION=true +=== LOCAL_PROXY_PORT_CANDIDATES === +EDGE_LOOPBACK_1080=FREE +EDGE_LOOPBACK_11080=FREE +EDGE_LOOPBACK_18080=FREE +=== EDGE_TO_RELAY_22 === +EDGE_TO_RELAY_22=OPEN +SOCKS_ENV_DESIGN_COMPATIBLE=false +DECISION=HOLD_EDGE_PROXY_DESIGN +NEXT_GATE=TARGETED_MONITOR_PROXY_DESIGN_RCA +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 3b19ce5a..0fbc93bf 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,27 +1,27 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260927-SKLADCHIK-EDGE-DIRECT-RELAY-EGRESS-73325R1", - "status": "FAIL", - "rc": 23, + "command_id": "SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1", + "status": "OK", + "rc": 0, "host": "pve01", - "mode": "change", - "component": "skladchik-edge-direct-relay-egress", - "started_at_utc": "2026-09-27T16:43:40Z", - "finished_at_utc": "2026-09-27T16:43:51Z", + "mode": "read-only", + "component": "edge-443-proxy-rca", + "started_at_utc": "2026-09-27T16:47:43Z", + "finished_at_utc": "2026-09-27T16:47:47Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "b47a5598ac7c3718cfb845ead5c5b25dc5094400a1c366ef4ff822e5ec371082", + "command_sha256": "6664c6459625230c26e7570a146570b7398ad8dabbabdea320937e52915ac9a3", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, - "change_declared": true, + "change_declared": false, "result_contract_valid": true, - "result_contract_status": "FAIL", + "result_contract_status": null, "result_contract_error": null, - "command_rc": 23, + "command_rc": 0, "changes_made": false, "rollback_started": false, "rollback_restored": null, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "c31e2cebc2162f93d3f36a1e1d86518c5fa0fdcdcbd69f45dd98e5b1e4919f22", - "sanitized_output_sha256": "074a6af6c7dd16686a6ba2e410082019c70fd682e2345d4bb661204678f56c76", + "raw_evidence_sha256": "ba0875898d3ef7cd15bb3a3c5584b8f1ccaec11725af90321e7a7bcbb68d2ecb", + "sanitized_output_sha256": "ba0875898d3ef7cd15bb3a3c5584b8f1ccaec11725af90321e7a7bcbb68d2ecb", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "SKLADCHIK_EDGE_DIRECT_RELAY_EGRESS_BEGIN=true\nCOMMAND_ID=SUPPORT-260927-SKLADCHIK-EDGE-DIRECT-RELAY-EGRESS-73325R1\nMODE=change\nCOMPONENT=skladchik-edge-direct-relay-egress\nMUTATION_BOUNDARY=DEDICATED_EDGE_FORWARDING_KEY_PLUS_RELAY_AUTHORIZED_KEYS_MARKER_PLUS_EDGE_LOOPBACK_SSH_FORWARD_PLUS_SINGLE_HOSTS_MAPPING_PLUS_MONITOR_SUPERVISOR_ONESHOTS;NO_PVE_FIREWALL_CHANGE;NO_NETBIRD_CHANGE;NO_ROUTE_CHANGE;NO_DNS_PROVIDER_CHANGE;NO_COOKIE_CHANGE;NO_SKLADCHIK_SOURCE_OR_CONFIG_CHANGE\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTARGET_URL_SHA256=b06fe5ee33f0d96041f183b43480c8edb811f2e791ac7183d03d0ca0c829ae90\n=== NETBIRD_PRE ===\nPVE_NETBIRD_Management: Connected\nPVE_NETBIRD_Signal: Connected\nPVE_NETBIRD_Relays: 1/2 Available\nPVE_NETBIRD_NetBird IP: 100.100.131.41/16\nPVE_NETBIRD_Networks: -\nPVE_NETBIRD_Peers count: 3/11 Connected\nEDGE_LIVE_HOSTKEY_FP=SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo\nEDGE_SSH_AUTH=true\nEDGE_SUDO_N=true\nEDGE_NETBIRD_Management: Connected\nEDGE_NETBIRD_Signal: Connected\nEDGE_NETBIRD_Relays: 1/2 Available\nEDGE_NETBIRD_NetBird IP: 100.100.60.182/16\nEDGE_NETBIRD_Networks: -\nEDGE_NETBIRD_Peers count: 3/11 Connected\nEDGE_ROUTE=1.1.1.1 via [PRIVATE_IP] dev eth0 src [PRIVATE_IP] uid 1000 \nEDGE_DIRECT_TARGET_PRE=28|000|0.000000|0.000000|5.001766\nEGRESS_REQUIRED=true\nEDGE_LOOPBACK_443=BUSY\nDECISION=HOLD_EDGE_LOOPBACK_443_CONFLICT\nNEXT_GATE=READ_ONLY_EDGE_443_RCA\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260927-SKLADCHIK-EDGE-DIRECT-RELAY-EGRESS-73325R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" + "output": "EDGE_443_PROXY_RCA_BEGIN=true\nCOMMAND_ID=SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1\nMODE=read-only\nCOMPONENT=edge-443-proxy-rca\nMUTATION_BOUNDARY=NONE;READ_ONLY_EDGE_443_LISTENER_MONITOR_CURL_ENV_AND_LOCAL_PROXY_PORT_CAPABILITY;NO_SERVICE_ACTION;NO_NETBIRD_CHANGE;NO_ROUTE_CHANGE;NO_FIREWALL_CHANGE;NO_HOSTS_CHANGE;NO_KEY_CHANGE\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nEDGE_LIVE_HOSTKEY_FP=SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo\nEDGE_SSH_AUTH=true\nEDGE_SUDO_N=true\n=== EDGE_NETBIRD ===\nEDGE_NETBIRD_Management: Connected\nEDGE_NETBIRD_Signal: Connected\nEDGE_NETBIRD_Relays: 1/2 Available\nEDGE_NETBIRD_NetBird IP: 100.100.60.182/16\nEDGE_NETBIRD_Networks: -\nEDGE_NETBIRD_Peers count: 3/11 Connected\n=== EDGE_443_LISTENERS ===\nEDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:((\"nginx\",pid=3287275,fd=16),(\"nginx\",pid=3287239,fd=16),(\"nginx\",pid=3287230,fd=16),(\"nginx\",pid=3287229,fd=16),(\"nginx\",pid=3096,fd=16))\nEDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:((\"nginx\",pid=3287275,fd=15),(\"nginx\",pid=3287239,fd=15),(\"nginx\",pid=3287230,fd=15),(\"nginx\",pid=3287229,fd=15),(\"nginx\",pid=3096,fd=15))\nEDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:((\"nginx\",pid=3287275,fd=14),(\"nginx\",pid=3287239,fd=14),(\"nginx\",pid=3287230,fd=14),(\"nginx\",pid=3287229,fd=14),(\"nginx\",pid=3096,fd=14))\nEDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:((\"nginx\",pid=3287275,fd=7),(\"nginx\",pid=3287239,fd=7),(\"nginx\",pid=3287230,fd=7),(\"nginx\",pid=3287229,fd=7),(\"nginx\",pid=3096,fd=7)) \nEDGE_443_LISTENER_LISTEN 0 511 [::]:443 [::]:* users:((\"nginx\",pid=3287275,fd=10),(\"nginx\",pid=3287239,fd=10),(\"nginx\",pid=3287230,fd=10),(\"nginx\",pid=3287229,fd=10),(\"nginx\",pid=3096,fd=10))\nEDGE_443_LISTENER_COUNT=5\nEDGE_443_WILDCARD_COUNT=5\n=== EDGE_DOCKER_443 ===\n=== MONITOR_UNIT_CONTRACT ===\nMONITOR_UNIT_User=root\nMONITOR_UNIT_Group=root\nMONITOR_UNIT_ExecStart=/usr/bin/python3 /opt/skladchik-reports-monitor/monitor.py run\n=== MONITOR_SOURCE_PROXY_CONTRACT ===\nMONITOR_SOURCE_MONITOR_SHA256=bf3a47cf3c53a4efa1f49322f96203a24b9077ea64547162e64c5d3d3326d0ff\nMONITOR_SOURCE_MONITOR_PROXY_TOKEN_COUNT=0\nMONITOR_SOURCE_MONITOR_NOPROXY_TOKEN_COUNT=0\nMONITOR_SOURCE_MONITOR_INTERFACE_TOKEN_COUNT=0\nMONITOR_SOURCE_MONITOR_CURL_SUBPROCESS_CALLS=0\nMONITOR_SOURCE_MONITOR_CURL_ENV_OVERRIDE_CALLS=0\nMONITOR_SOURCE_MONITOR_CURL_LITERAL_COUNT=0\n=== CURL_PROXY_CAPABILITY ===\nEDGE_CURL_SOCKS5_HOSTNAME=true\nEDGE_CURL_PROXY_OPTION=true\n=== LOCAL_PROXY_PORT_CANDIDATES ===\nEDGE_LOOPBACK_1080=FREE\nEDGE_LOOPBACK_11080=FREE\nEDGE_LOOPBACK_18080=FREE\n=== EDGE_TO_RELAY_22 ===\nEDGE_TO_RELAY_22=OPEN\nSOCKS_ENV_DESIGN_COMPATIBLE=false\nDECISION=HOLD_EDGE_PROXY_DESIGN\nNEXT_GATE=TARGETED_MONITOR_PROXY_DESIGN_RCA\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index c8140e48..ea0058dc 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,22 +1,22 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260927-SKLADCHIK-EDGE-DIRECT-RELAY-EGRESS-73325R1 -STATUS=FAIL -RC=23 +COMMAND_ID=SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1 +STATUS=OK +RC=0 HOST=pve01 -MODE=change -COMPONENT=skladchik-edge-direct-relay-egress +MODE=read-only +COMPONENT=edge-443-proxy-rca REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=b47a5598ac7c3718cfb845ead5c5b25dc5094400a1c366ef4ff822e5ec371082 +COMMAND_SHA256=6664c6459625230c26e7570a146570b7398ad8dabbabdea320937e52915ac9a3 DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true -CHANGE_DECLARED=true +CHANGE_DECLARED=false RESULT_CONTRACT_VALID=true -RESULT_CONTRACT_STATUS=FAIL +RESULT_CONTRACT_STATUS=NOT_APPLICABLE RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=23 +COMMAND_RC=0 CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null @@ -24,41 +24,61 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=c31e2cebc2162f93d3f36a1e1d86518c5fa0fdcdcbd69f45dd98e5b1e4919f22 -SANITIZED_OUTPUT_SHA256=074a6af6c7dd16686a6ba2e410082019c70fd682e2345d4bb661204678f56c76 +RAW_EVIDENCE_SHA256=ba0875898d3ef7cd15bb3a3c5584b8f1ccaec11725af90321e7a7bcbb68d2ecb +SANITIZED_OUTPUT_SHA256=ba0875898d3ef7cd15bb3a3c5584b8f1ccaec11725af90321e7a7bcbb68d2ecb OUTPUT_BEGIN -SKLADCHIK_EDGE_DIRECT_RELAY_EGRESS_BEGIN=true -COMMAND_ID=SUPPORT-260927-SKLADCHIK-EDGE-DIRECT-RELAY-EGRESS-73325R1 -MODE=change -COMPONENT=skladchik-edge-direct-relay-egress -MUTATION_BOUNDARY=DEDICATED_EDGE_FORWARDING_KEY_PLUS_RELAY_AUTHORIZED_KEYS_MARKER_PLUS_EDGE_LOOPBACK_SSH_FORWARD_PLUS_SINGLE_HOSTS_MAPPING_PLUS_MONITOR_SUPERVISOR_ONESHOTS;NO_PVE_FIREWALL_CHANGE;NO_NETBIRD_CHANGE;NO_ROUTE_CHANGE;NO_DNS_PROVIDER_CHANGE;NO_COOKIE_CHANGE;NO_SKLADCHIK_SOURCE_OR_CONFIG_CHANGE +EDGE_443_PROXY_RCA_BEGIN=true +COMMAND_ID=SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1 +MODE=read-only +COMPONENT=edge-443-proxy-rca +MUTATION_BOUNDARY=NONE;READ_ONLY_EDGE_443_LISTENER_MONITOR_CURL_ENV_AND_LOCAL_PROXY_PORT_CAPABILITY;NO_SERVICE_ACTION;NO_NETBIRD_CHANGE;NO_ROUTE_CHANGE;NO_FIREWALL_CHANGE;NO_HOSTS_CHANGE;NO_KEY_CHANGE REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d -TARGET_URL_SHA256=b06fe5ee33f0d96041f183b43480c8edb811f2e791ac7183d03d0ca0c829ae90 -=== NETBIRD_PRE === -PVE_NETBIRD_Management: Connected -PVE_NETBIRD_Signal: Connected -PVE_NETBIRD_Relays: 1/2 Available -PVE_NETBIRD_NetBird IP: 100.100.131.41/16 -PVE_NETBIRD_Networks: - -PVE_NETBIRD_Peers count: 3/11 Connected EDGE_LIVE_HOSTKEY_FP=SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo EDGE_SSH_AUTH=true EDGE_SUDO_N=true +=== EDGE_NETBIRD === EDGE_NETBIRD_Management: Connected EDGE_NETBIRD_Signal: Connected EDGE_NETBIRD_Relays: 1/2 Available EDGE_NETBIRD_NetBird IP: 100.100.60.182/16 EDGE_NETBIRD_Networks: - EDGE_NETBIRD_Peers count: 3/11 Connected -EDGE_ROUTE=1.1.1.1 via [PRIVATE_IP] dev eth0 src [PRIVATE_IP] uid 1000 -EDGE_DIRECT_TARGET_PRE=28|000|0.000000|0.000000|5.001766 -EGRESS_REQUIRED=true -EDGE_LOOPBACK_443=BUSY -DECISION=HOLD_EDGE_LOOPBACK_443_CONFLICT -NEXT_GATE=READ_ONLY_EDGE_443_RCA -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260927-SKLADCHIK-EDGE-DIRECT-RELAY-EGRESS-73325R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null} +=== EDGE_443_LISTENERS === +EDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=3287275,fd=16),("nginx",pid=3287239,fd=16),("nginx",pid=3287230,fd=16),("nginx",pid=3287229,fd=16),("nginx",pid=3096,fd=16)) +EDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=3287275,fd=15),("nginx",pid=3287239,fd=15),("nginx",pid=3287230,fd=15),("nginx",pid=3287229,fd=15),("nginx",pid=3096,fd=15)) +EDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=3287275,fd=14),("nginx",pid=3287239,fd=14),("nginx",pid=3287230,fd=14),("nginx",pid=3287229,fd=14),("nginx",pid=3096,fd=14)) +EDGE_443_LISTENER_LISTEN 0 511 0.0.0.0:443 0.0.0.0:* users:(("nginx",pid=3287275,fd=7),("nginx",pid=3287239,fd=7),("nginx",pid=3287230,fd=7),("nginx",pid=3287229,fd=7),("nginx",pid=3096,fd=7)) +EDGE_443_LISTENER_LISTEN 0 511 [::]:443 [::]:* users:(("nginx",pid=3287275,fd=10),("nginx",pid=3287239,fd=10),("nginx",pid=3287230,fd=10),("nginx",pid=3287229,fd=10),("nginx",pid=3096,fd=10)) +EDGE_443_LISTENER_COUNT=5 +EDGE_443_WILDCARD_COUNT=5 +=== EDGE_DOCKER_443 === +=== MONITOR_UNIT_CONTRACT === +MONITOR_UNIT_User=root +MONITOR_UNIT_Group=root +MONITOR_UNIT_ExecStart=/usr/bin/python3 /opt/skladchik-reports-monitor/monitor.py run +=== MONITOR_SOURCE_PROXY_CONTRACT === +MONITOR_SOURCE_MONITOR_SHA256=bf3a47cf3c53a4efa1f49322f96203a24b9077ea64547162e64c5d3d3326d0ff +MONITOR_SOURCE_MONITOR_PROXY_TOKEN_COUNT=0 +MONITOR_SOURCE_MONITOR_NOPROXY_TOKEN_COUNT=0 +MONITOR_SOURCE_MONITOR_INTERFACE_TOKEN_COUNT=0 +MONITOR_SOURCE_MONITOR_CURL_SUBPROCESS_CALLS=0 +MONITOR_SOURCE_MONITOR_CURL_ENV_OVERRIDE_CALLS=0 +MONITOR_SOURCE_MONITOR_CURL_LITERAL_COUNT=0 +=== CURL_PROXY_CAPABILITY === +EDGE_CURL_SOCKS5_HOSTNAME=true +EDGE_CURL_PROXY_OPTION=true +=== LOCAL_PROXY_PORT_CANDIDATES === +EDGE_LOOPBACK_1080=FREE +EDGE_LOOPBACK_11080=FREE +EDGE_LOOPBACK_18080=FREE +=== EDGE_TO_RELAY_22 === +EDGE_TO_RELAY_22=OPEN +SOCKS_ENV_DESIGN_COMPATIBLE=false +DECISION=HOLD_EDGE_PROXY_DESIGN +NEXT_GATE=TARGETED_MONITOR_PROXY_DESIGN_RCA +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260927-EDGE-443-PROXY-RCA-73326R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END