runtime: publish SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1

2026-09-28 13:23:03 +00:00
parent 0da43bb6d4
commit e2551e069a
4 changed files with 188 additions and 157 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1",
+  "status": "FAIL",
+  "rc": 23,
+  "host": "pve01",
+  "mode": "change",
+  "component": "usa-reverse-ssh-audit-bridge",
+  "started_at_utc": "2026-09-28T13:21:36Z",
+  "finished_at_utc": "2026-09-28T13:23:02Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "db28576fc12cd01e513678dfd566d95ef99b973e85821ee4c44f6bc5b59beb6b",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "FAIL",
+  "result_contract_error": null,
+  "command_rc": 23,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359",
+  "sanitized_output_sha256": "34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "USA_REVERSE_SSH_AUDIT_BRIDGE=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_RELAY_AUTHKEY_AND_REVERSE_SSH_SESSION_ONLY\nGOAL=FULL_USA_AUDIT_WITHOUT_PUBLIC_INBOUND_SSH\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nPVE01_TO_RELAY_TEMPKEY_SETUP_RC=0\nRELAY_AUTHKEY_TEMP_INSTALLED=true\nRELAY_AUTHKEY_CREATED_FILE=false\nRELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507\nPVE01_OPERATOR_AGENT_ADD_RC=0\nPVE01_TO_RELAY_TUNNEL_AUDIT_RC=23\nRELAY_REVERSE_LISTENER_READY=false\nRELAY_REVERSE_LISTENER_AFTER_CLEANUP=CLOSED\nRELAY_AUTHKEY_ROLLBACK_OK=true\nAUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false\nUSA_NETBIRD_CLIENT_PRESENT=false\nDECISION=HOLD_REVERSE_SSH_AUDIT_INCOMPLETE\nNEXT_GATE=CLASSIFY_TUNNEL_OR_STACK_FAILURE\nTASK_RESULT=HOLD_USA_REVERSE_SSH_AUDIT_BRIDGE\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_RELAY_KEY_AND_TUNNEL_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n"
+}
@@ -0,0 +1,59 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1
+STATUS=FAIL
+RC=23
+HOST=pve01
+MODE=change
+COMPONENT=usa-reverse-ssh-audit-bridge
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=db28576fc12cd01e513678dfd566d95ef99b973e85821ee4c44f6bc5b59beb6b
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=true
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=23
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=ROLLED_BACK
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359
+SANITIZED_OUTPUT_SHA256=34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359
+OUTPUT_BEGIN
+USA_REVERSE_SSH_AUDIT_BRIDGE=V1
+MODE=change
+MUTATION_BOUNDARY=TEMP_RELAY_AUTHKEY_AND_REVERSE_SSH_SESSION_ONLY
+GOAL=FULL_USA_AUDIT_WITHOUT_PUBLIC_INBOUND_SSH
+PVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0
+PVE01_OPERATOR_KEY_MATCH=true
+RELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY
+RELAY_HOSTKEY_MATCH=true
+PVE01_TO_RELAY_TEMPKEY_SETUP_RC=0
+RELAY_AUTHKEY_TEMP_INSTALLED=true
+RELAY_AUTHKEY_CREATED_FILE=false
+RELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507
+PVE01_OPERATOR_AGENT_ADD_RC=0
+PVE01_TO_RELAY_TUNNEL_AUDIT_RC=23
+RELAY_REVERSE_LISTENER_READY=false
+RELAY_REVERSE_LISTENER_AFTER_CLEANUP=CLOSED
+RELAY_AUTHKEY_ROLLBACK_OK=true
+AUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false
+USA_NETBIRD_CLIENT_PRESENT=false
+DECISION=HOLD_REVERSE_SSH_AUDIT_INCOMPLETE
+NEXT_GATE=CLASSIFY_TUNNEL_OR_STACK_FAILURE
+TASK_RESULT=HOLD_USA_REVERSE_SSH_AUDIT_BRIDGE
+CHANGES_MADE=true
+ROLLBACK_STARTED=true
+ROLLBACK_RESTORED=true
+MUTATION_OUTCOME=TEMP_RELAY_KEY_AND_TUNNEL_REMOVED
+HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1","status":"FAIL","changes_made":true,"rollback_started":true,"rollback_restored":true}
+
+OUTPUT_END
+CHAT_OUTPUT_END
@@ -1 +1,38 @@
-{"schema_version":1,"channel":"homelab-runtime","command_id":"CONTEXT-AUTO-20260928T131701Z","status":"OK","rc":0,"host":"pve01","mode":"read-only","component":"cluster-context","started_at_utc":"2026-09-28T13:17:01Z","finished_at_utc":"2026-09-28T13:17:02Z","reference_register_checked":true,"reference_sha256":"5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66","error_register_checked":true,"error_register_sha256":"3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0","changes_made":false,"sanitized":true,"secrets_included":false,"private_addresses_included":false,"output":"AUTOMATIC_CLUSTER_CONTEXT_REFRESH=OK"}
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1",
+  "status": "FAIL",
+  "rc": 23,
+  "host": "pve01",
+  "mode": "change",
+  "component": "usa-reverse-ssh-audit-bridge",
+  "started_at_utc": "2026-09-28T13:21:36Z",
+  "finished_at_utc": "2026-09-28T13:23:02Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "db28576fc12cd01e513678dfd566d95ef99b973e85821ee4c44f6bc5b59beb6b",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": true,
+  "result_contract_valid": true,
+  "result_contract_status": "FAIL",
+  "result_contract_error": null,
+  "command_rc": 23,
+  "changes_made": true,
+  "rollback_started": true,
+  "rollback_restored": true,
+  "mutation_outcome": "ROLLED_BACK",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359",
+  "sanitized_output_sha256": "34ed8507a45c07c7dda251f47759aab158a39732874ca5a726df068adc6aa359",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "USA_REVERSE_SSH_AUDIT_BRIDGE=V1\nMODE=change\nMUTATION_BOUNDARY=TEMP_RELAY_AUTHKEY_AND_REVERSE_SSH_SESSION_ONLY\nGOAL=FULL_USA_AUDIT_WITHOUT_PUBLIC_INBOUND_SSH\nPVE01_OPERATOR_KEY_FINGERPRINT=SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\nPVE01_OPERATOR_KEY_MATCH=true\nRELAY_HOSTKEY_FINGERPRINT=SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\nRELAY_HOSTKEY_MATCH=true\nPVE01_TO_RELAY_TEMPKEY_SETUP_RC=0\nRELAY_AUTHKEY_TEMP_INSTALLED=true\nRELAY_AUTHKEY_CREATED_FILE=false\nRELAY_AUTHKEY_BEFORE_SHA256=886d0c78b290877081c87f6db4c2282423c27922336adcc68ebff5be43937507\nPVE01_OPERATOR_AGENT_ADD_RC=0\nPVE01_TO_RELAY_TUNNEL_AUDIT_RC=23\nRELAY_REVERSE_LISTENER_READY=false\nRELAY_REVERSE_LISTENER_AFTER_CLEANUP=CLOSED\nRELAY_AUTHKEY_ROLLBACK_OK=true\nAUDIT_GUEST_FIREWALL_SOURCE_FILTER_CANDIDATE=false\nUSA_NETBIRD_CLIENT_PRESENT=false\nDECISION=HOLD_REVERSE_SSH_AUDIT_INCOMPLETE\nNEXT_GATE=CLASSIFY_TUNNEL_OR_STACK_FAILURE\nTASK_RESULT=HOLD_USA_REVERSE_SSH_AUDIT_BRIDGE\nCHANGES_MADE=true\nROLLBACK_STARTED=true\nROLLBACK_RESTORED=true\nMUTATION_OUTCOME=TEMP_RELAY_KEY_AND_TUNNEL_REMOVED\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260928-USA-REVERSE-SSH-AUDIT-BRIDGE-99054R1\",\"status\":\"FAIL\",\"changes_made\":true,\"rollback_started\":true,\"rollback_restored\":true}\n"
+}