homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity

runtime: publish SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1

Browse Source
This commit is contained in:
homelab-runtime-publisher
2026-10-06 16:46:34 +00:00
parent 2786c6a507
commit e4e2162942
4 changed files with 212 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runtime/history/SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "read-only",
"component": "snikket-wg-endpoint-rca",
"started_at_utc": "2026-10-06T16:46:22Z",
"finished_at_utc": "2026-10-06T16:46:33Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "ce49bf8d67e601a54dd265cf5dbd1572a18d843ba02629fe7d6845152ccb8184",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": false,
"result_contract_valid": true,
"result_contract_status": null,
"result_contract_error": null,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
"mutation_outcome": "NO_MUTATION",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "f1d2b6461be37250b3b98fd1919e2370773532eaa003e01563910d3e88d2a60a",
"sanitized_output_sha256": "f1d2b6461be37250b3b98fd1919e2370773532eaa003e01563910d3e88d2a60a",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "SNIKKET_WG_ENDPOINT_RCA=V1\nMODE=read-only\nNO_CONFIG_MUTATION=true\nVM130_QGA_TRANSPORT_RC=0\nQGA_EXIT=0\nHOST=edge-vm\nCFG_PRESENT=true\nCFG_MODE=600\nCFG_MTIME=1786953770\nUNIT_ACTIVE=active\nUNIT_ENABLED=enabled\nIFACE_PRESENT=true\nPEER_COUNT=1\nLISTEN_PORT_PRESENT=true\nFWMARK_PRESENT=false\nREC|ENDPOINT|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820\nREC|CFG_FIELD|KEY=Address|COUNT=1\nREC|CFG_FIELD|KEY=PrivateKey|VALUE=REDACTED\nREC|CFG_HOOK|KEY=PostUp|VALUE=ip route replace IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED\nREC|CFG_HOOK|KEY=PostDown|VALUE=ip route del IP_REDACTED via IP_REDACTED dev eth0 2>/dev/null || true\nREC|CFG_FIELD|KEY=Table|VALUE=off\nREC|CFG_HOOK|KEY=PostUp|VALUE=ip route replace table 17777 default dev wg-edge01\nREC|CFG_HOOK|KEY=PostDown|VALUE=ip route del table 17777 default dev wg-edge01 2>/dev/null || true\nREC|CFG_HOOK|KEY=PostUp|VALUE=ip rule add priority 101 from IP_REDACTED lookup 17777\nREC|CFG_HOOK|KEY=PostDown|VALUE=ip rule del priority 101 from IP_REDACTED lookup 17777 2>/dev/null || true\nREC|CFG_HOOK|KEY=PostUp|VALUE=nft -f /etc/wireguard/snikket-edge-ingress.nft\nREC|CFG_HOOK|KEY=PostDown|VALUE=nft delete table ip snikket_edge_prod 2>/dev/null || true\nREC|CFG_ALLOWED|COUNT=1|DEFAULT4=true|DEFAULT6=false\nREC|CFG_ENDPOINT|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820\nREC|CFG_FIELD|KEY=PersistentKeepalive|VALUE=25\nHANDSHAKE_NONZERO_COUNT=0\nNEWEST_HANDSHAKE_AGE=-1\nRX_BYTES=0\nTX_BYTES=21460\nENDPOINT_HOST_SHA=6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\nENDPOINT_PORT=51820\nENDPOINT_DNS_V4_COUNT=1\nENDPOINT_DNS_V6_COUNT=1\nENDPOINT_ROUTE_MAIN_DEV=\nWG_CONFIG_COUNT=3\nREC|WG_CONFIG|NAME_SHA=cc0e438ccfd8fd0f42de|ACTIVE=inactive|IFACE=false\nREC|WG_CONFIG|NAME_SHA=42e16f90a5ad5e5a55c0|ACTIVE=active|IFACE=true\nREC|WG_HEALTH|NAME_SHA=42e16f90a5ad5e5a55c0|HS_AGE=-1|RX=0|TX=21460\nREC|WG_CONFIG|NAME_SHA=3d123def9832d8981356|ACTIVE=active|IFACE=true\nREC|WG_HEALTH|NAME_SHA=3d123def9832d8981356|HS_AGE=16|RX=116592|TX=31600\nWG_FORCED_PING_RC=1\nENDPOINT_UDP_PACKET_COUNT=1\nENDPOINT_UDP_OUT_COUNT=1\nENDPOINT_UDP_IN_COUNT=0\nREC|WG_ENDPOINT_CAPTURE|19:46:28.502707 eth0 Out IP IP_REDACTED.45314 > IP_REDACTED.51820: UDP, length 148\nFAILED_UNIT_COUNT=0\nCLUSTER_QUORATE=true\nDECISION=PASS_SNIKKET_WG_ENDPOINT_RCA\nNEXT_GATE=SNIKKET_WG_ENDPOINT_TARGETED_REPAIR\nTASK_RESULT=SNIKKET_WG_ENDPOINT_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_CONFIG_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
}
runtime/history/SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1.txt
+92
View File
@@ -0,0 +1,92 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1
STATUS=OK
RC=0
HOST=pve01
MODE=read-only
COMPONENT=snikket-wg-endpoint-rca
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=ce49bf8d67e601a54dd265cf5dbd1572a18d843ba02629fe7d6845152ccb8184
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=f1d2b6461be37250b3b98fd1919e2370773532eaa003e01563910d3e88d2a60a
SANITIZED_OUTPUT_SHA256=f1d2b6461be37250b3b98fd1919e2370773532eaa003e01563910d3e88d2a60a
OUTPUT_BEGIN
SNIKKET_WG_ENDPOINT_RCA=V1
MODE=read-only
NO_CONFIG_MUTATION=true
VM130_QGA_TRANSPORT_RC=0
QGA_EXIT=0
HOST=edge-vm
CFG_PRESENT=true
CFG_MODE=600
CFG_MTIME=1786953770
UNIT_ACTIVE=active
UNIT_ENABLED=enabled
IFACE_PRESENT=true
PEER_COUNT=1
LISTEN_PORT_PRESENT=true
FWMARK_PRESENT=false
REC|ENDPOINT|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820
REC|CFG_FIELD|KEY=Address|COUNT=1
REC|CFG_FIELD|KEY=PrivateKey|VALUE=REDACTED
REC|CFG_HOOK|KEY=PostUp|VALUE=ip route replace IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED
REC|CFG_HOOK|KEY=PostDown|VALUE=ip route del IP_REDACTED via IP_REDACTED dev eth0 2>/dev/null || true
REC|CFG_FIELD|KEY=Table|VALUE=off
REC|CFG_HOOK|KEY=PostUp|VALUE=ip route replace table 17777 default dev wg-edge01
REC|CFG_HOOK|KEY=PostDown|VALUE=ip route del table 17777 default dev wg-edge01 2>/dev/null || true
REC|CFG_HOOK|KEY=PostUp|VALUE=ip rule add priority 101 from IP_REDACTED lookup 17777
REC|CFG_HOOK|KEY=PostDown|VALUE=ip rule del priority 101 from IP_REDACTED lookup 17777 2>/dev/null || true
REC|CFG_HOOK|KEY=PostUp|VALUE=nft -f /etc/wireguard/snikket-edge-ingress.nft
REC|CFG_HOOK|KEY=PostDown|VALUE=nft delete table ip snikket_edge_prod 2>/dev/null || true
REC|CFG_ALLOWED|COUNT=1|DEFAULT4=true|DEFAULT6=false
REC|CFG_ENDPOINT|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820
REC|CFG_FIELD|KEY=PersistentKeepalive|VALUE=25
HANDSHAKE_NONZERO_COUNT=0
NEWEST_HANDSHAKE_AGE=-1
RX_BYTES=0
TX_BYTES=21460
ENDPOINT_HOST_SHA=6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5
ENDPOINT_PORT=51820
ENDPOINT_DNS_V4_COUNT=1
ENDPOINT_DNS_V6_COUNT=1
ENDPOINT_ROUTE_MAIN_DEV=
WG_CONFIG_COUNT=3
REC|WG_CONFIG|NAME_SHA=cc0e438ccfd8fd0f42de|ACTIVE=inactive|IFACE=false
REC|WG_CONFIG|NAME_SHA=42e16f90a5ad5e5a55c0|ACTIVE=active|IFACE=true
REC|WG_HEALTH|NAME_SHA=42e16f90a5ad5e5a55c0|HS_AGE=-1|RX=0|TX=21460
REC|WG_CONFIG|NAME_SHA=3d123def9832d8981356|ACTIVE=active|IFACE=true
REC|WG_HEALTH|NAME_SHA=3d123def9832d8981356|HS_AGE=16|RX=116592|TX=31600
WG_FORCED_PING_RC=1
ENDPOINT_UDP_PACKET_COUNT=1
ENDPOINT_UDP_OUT_COUNT=1
ENDPOINT_UDP_IN_COUNT=0
REC|WG_ENDPOINT_CAPTURE|19:46:28.502707 eth0 Out IP IP_REDACTED.45314 > IP_REDACTED.51820: UDP, length 148
FAILED_UNIT_COUNT=0
CLUSTER_QUORATE=true
DECISION=PASS_SNIKKET_WG_ENDPOINT_RCA
NEXT_GATE=SNIKKET_WG_ENDPOINT_TARGETED_REPAIR
TASK_RESULT=SNIKKET_WG_ENDPOINT_RCA
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_CONFIG_MUTATION
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
OUTPUT_END
CHAT_OUTPUT_END
runtime/latest.json
+14 -14
View File
@@ -1,27 +1,27 @@
{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "SUPPORT-261006-SNIKKET-WG-BYPASS-REPAIR-99729R1",
"status": "FAIL",
"rc": 1,
"command_id": "SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "change",
"component": "snikket-wg-bypass-repair",
"started_at_utc": "2026-10-06T16:40:59Z",
"finished_at_utc": "2026-10-06T16:41:06Z",
"mode": "read-only",
"component": "snikket-wg-endpoint-rca",
"started_at_utc": "2026-10-06T16:46:22Z",
"finished_at_utc": "2026-10-06T16:46:33Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "b12853f852e6c4ea2bfac75e17a5973f1ba9a10e4539c5c2c6e3ee0403e34421",
"command_sha256": "ce49bf8d67e601a54dd265cf5dbd1572a18d843ba02629fe7d6845152ccb8184",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": true,
"change_declared": false,
"result_contract_valid": true,
"result_contract_status": "FAIL",
"result_contract_status": null,
"result_contract_error": null,
"command_rc": 1,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
@@ -30,9 +30,9 @@
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "dd470135044f1b90a4b4d608abd63a8c67dada627c2f101ed646742c8810cae6",
"sanitized_output_sha256": "dd470135044f1b90a4b4d608abd63a8c67dada627c2f101ed646742c8810cae6",
"raw_evidence_sha256": "f1d2b6461be37250b3b98fd1919e2370773532eaa003e01563910d3e88d2a60a",
"sanitized_output_sha256": "f1d2b6461be37250b3b98fd1919e2370773532eaa003e01563910d3e88d2a60a",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "SNIKKET_WG_BYPASS_REPAIR=V1\nMODE=change\nSCOPE=CONDITIONAL_VM150_MAIN_WAN_BYPASS_DNS_SNIKKET_RUNTIME\nHISTORICAL_EGRESS_SHA_MATCH_REQUIRED=true\nNO_VM_POWER_MUTATION=true\nNO_NETBIRD_MUTATION=true\nNO_PVE_FIREWALL_MUTATION=true\nNO_PACKAGE_MUTATION=true\nVM150_SRC_SHA=4e29a2729bbc40663066bdae0c5a3d627070fba621f5c8c70639f4782afbc67d\nVM150_GW_SHA=bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834\nSNIKKET_DOMAIN_SHA=04cb4a04e408d91abb9c63701ae969abf16d8a12b6f4f144c5edf2c28e03256b\nFAIL_REASON=DIRECT_EGRESS_NOT_SAFE_TO_REUSE\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-SNIKKET-WG-BYPASS-REPAIR-99729R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
"output": "SNIKKET_WG_ENDPOINT_RCA=V1\nMODE=read-only\nNO_CONFIG_MUTATION=true\nVM130_QGA_TRANSPORT_RC=0\nQGA_EXIT=0\nHOST=edge-vm\nCFG_PRESENT=true\nCFG_MODE=600\nCFG_MTIME=1786953770\nUNIT_ACTIVE=active\nUNIT_ENABLED=enabled\nIFACE_PRESENT=true\nPEER_COUNT=1\nLISTEN_PORT_PRESENT=true\nFWMARK_PRESENT=false\nREC|ENDPOINT|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820\nREC|CFG_FIELD|KEY=Address|COUNT=1\nREC|CFG_FIELD|KEY=PrivateKey|VALUE=REDACTED\nREC|CFG_HOOK|KEY=PostUp|VALUE=ip route replace IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED\nREC|CFG_HOOK|KEY=PostDown|VALUE=ip route del IP_REDACTED via IP_REDACTED dev eth0 2>/dev/null || true\nREC|CFG_FIELD|KEY=Table|VALUE=off\nREC|CFG_HOOK|KEY=PostUp|VALUE=ip route replace table 17777 default dev wg-edge01\nREC|CFG_HOOK|KEY=PostDown|VALUE=ip route del table 17777 default dev wg-edge01 2>/dev/null || true\nREC|CFG_HOOK|KEY=PostUp|VALUE=ip rule add priority 101 from IP_REDACTED lookup 17777\nREC|CFG_HOOK|KEY=PostDown|VALUE=ip rule del priority 101 from IP_REDACTED lookup 17777 2>/dev/null || true\nREC|CFG_HOOK|KEY=PostUp|VALUE=nft -f /etc/wireguard/snikket-edge-ingress.nft\nREC|CFG_HOOK|KEY=PostDown|VALUE=nft delete table ip snikket_edge_prod 2>/dev/null || true\nREC|CFG_ALLOWED|COUNT=1|DEFAULT4=true|DEFAULT6=false\nREC|CFG_ENDPOINT|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820\nREC|CFG_FIELD|KEY=PersistentKeepalive|VALUE=25\nHANDSHAKE_NONZERO_COUNT=0\nNEWEST_HANDSHAKE_AGE=-1\nRX_BYTES=0\nTX_BYTES=21460\nENDPOINT_HOST_SHA=6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\nENDPOINT_PORT=51820\nENDPOINT_DNS_V4_COUNT=1\nENDPOINT_DNS_V6_COUNT=1\nENDPOINT_ROUTE_MAIN_DEV=\nWG_CONFIG_COUNT=3\nREC|WG_CONFIG|NAME_SHA=cc0e438ccfd8fd0f42de|ACTIVE=inactive|IFACE=false\nREC|WG_CONFIG|NAME_SHA=42e16f90a5ad5e5a55c0|ACTIVE=active|IFACE=true\nREC|WG_HEALTH|NAME_SHA=42e16f90a5ad5e5a55c0|HS_AGE=-1|RX=0|TX=21460\nREC|WG_CONFIG|NAME_SHA=3d123def9832d8981356|ACTIVE=active|IFACE=true\nREC|WG_HEALTH|NAME_SHA=3d123def9832d8981356|HS_AGE=16|RX=116592|TX=31600\nWG_FORCED_PING_RC=1\nENDPOINT_UDP_PACKET_COUNT=1\nENDPOINT_UDP_OUT_COUNT=1\nENDPOINT_UDP_IN_COUNT=0\nREC|WG_ENDPOINT_CAPTURE|19:46:28.502707 eth0 Out IP IP_REDACTED.45314 > IP_REDACTED.51820: UDP, length 148\nFAILED_UNIT_COUNT=0\nCLUSTER_QUORATE=true\nDECISION=PASS_SNIKKET_WG_ENDPOINT_RCA\nNEXT_GATE=SNIKKET_WG_ENDPOINT_TARGETED_REPAIR\nTASK_RESULT=SNIKKET_WG_ENDPOINT_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_CONFIG_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
}
runtime/latest.txt
+68 -25
View File
@@ -1,22 +1,22 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=SUPPORT-261006-SNIKKET-WG-BYPASS-REPAIR-99729R1
STATUS=FAIL
RC=1
COMMAND_ID=SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1
STATUS=OK
RC=0
HOST=pve01
MODE=change
COMPONENT=snikket-wg-bypass-repair
MODE=read-only
COMPONENT=snikket-wg-endpoint-rca
REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
COMMAND_SHA256=b12853f852e6c4ea2bfac75e17a5973f1ba9a10e4539c5c2c6e3ee0403e34421
COMMAND_SHA256=ce49bf8d67e601a54dd265cf5dbd1572a18d843ba02629fe7d6845152ccb8184
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGE_DECLARED=true
CHANGE_DECLARED=false
RESULT_CONTRACT_VALID=true
RESULT_CONTRACT_STATUS=FAIL
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
RESULT_CONTRACT_ERROR=NONE
COMMAND_RC=1
COMMAND_RC=0
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
@@ -24,26 +24,69 @@ MUTATION_OUTCOME=NO_MUTATION
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=dd470135044f1b90a4b4d608abd63a8c67dada627c2f101ed646742c8810cae6
SANITIZED_OUTPUT_SHA256=dd470135044f1b90a4b4d608abd63a8c67dada627c2f101ed646742c8810cae6
RAW_EVIDENCE_SHA256=f1d2b6461be37250b3b98fd1919e2370773532eaa003e01563910d3e88d2a60a
SANITIZED_OUTPUT_SHA256=f1d2b6461be37250b3b98fd1919e2370773532eaa003e01563910d3e88d2a60a
OUTPUT_BEGIN
SNIKKET_WG_BYPASS_REPAIR=V1
MODE=change
SCOPE=CONDITIONAL_VM150_MAIN_WAN_BYPASS_DNS_SNIKKET_RUNTIME
HISTORICAL_EGRESS_SHA_MATCH_REQUIRED=true
NO_VM_POWER_MUTATION=true
NO_NETBIRD_MUTATION=true
NO_PVE_FIREWALL_MUTATION=true
NO_PACKAGE_MUTATION=true
VM150_SRC_SHA=4e29a2729bbc40663066bdae0c5a3d627070fba621f5c8c70639f4782afbc67d
VM150_GW_SHA=bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834
SNIKKET_DOMAIN_SHA=04cb4a04e408d91abb9c63701ae969abf16d8a12b6f4f144c5edf2c28e03256b
FAIL_REASON=DIRECT_EGRESS_NOT_SAFE_TO_REUSE
SNIKKET_WG_ENDPOINT_RCA=V1
MODE=read-only
NO_CONFIG_MUTATION=true
VM130_QGA_TRANSPORT_RC=0
QGA_EXIT=0
HOST=edge-vm
CFG_PRESENT=true
CFG_MODE=600
CFG_MTIME=1786953770
UNIT_ACTIVE=active
UNIT_ENABLED=enabled
IFACE_PRESENT=true
PEER_COUNT=1
LISTEN_PORT_PRESENT=true
FWMARK_PRESENT=false
REC|ENDPOINT|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820
REC|CFG_FIELD|KEY=Address|COUNT=1
REC|CFG_FIELD|KEY=PrivateKey|VALUE=REDACTED
REC|CFG_HOOK|KEY=PostUp|VALUE=ip route replace IP_REDACTED via IP_REDACTED dev eth0 src IP_REDACTED
REC|CFG_HOOK|KEY=PostDown|VALUE=ip route del IP_REDACTED via IP_REDACTED dev eth0 2>/dev/null || true
REC|CFG_FIELD|KEY=Table|VALUE=off
REC|CFG_HOOK|KEY=PostUp|VALUE=ip route replace table 17777 default dev wg-edge01
REC|CFG_HOOK|KEY=PostDown|VALUE=ip route del table 17777 default dev wg-edge01 2>/dev/null || true
REC|CFG_HOOK|KEY=PostUp|VALUE=ip rule add priority 101 from IP_REDACTED lookup 17777
REC|CFG_HOOK|KEY=PostDown|VALUE=ip rule del priority 101 from IP_REDACTED lookup 17777 2>/dev/null || true
REC|CFG_HOOK|KEY=PostUp|VALUE=nft -f /etc/wireguard/snikket-edge-ingress.nft
REC|CFG_HOOK|KEY=PostDown|VALUE=nft delete table ip snikket_edge_prod 2>/dev/null || true
REC|CFG_ALLOWED|COUNT=1|DEFAULT4=true|DEFAULT6=false
REC|CFG_ENDPOINT|HOST_SHA=6d6149f42864ce03daf2|TYPE=PUBLIC_IP|PORT=51820
REC|CFG_FIELD|KEY=PersistentKeepalive|VALUE=25
HANDSHAKE_NONZERO_COUNT=0
NEWEST_HANDSHAKE_AGE=-1
RX_BYTES=0
TX_BYTES=21460
ENDPOINT_HOST_SHA=6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5
ENDPOINT_PORT=51820
ENDPOINT_DNS_V4_COUNT=1
ENDPOINT_DNS_V6_COUNT=1
ENDPOINT_ROUTE_MAIN_DEV=
WG_CONFIG_COUNT=3
REC|WG_CONFIG|NAME_SHA=cc0e438ccfd8fd0f42de|ACTIVE=inactive|IFACE=false
REC|WG_CONFIG|NAME_SHA=42e16f90a5ad5e5a55c0|ACTIVE=active|IFACE=true
REC|WG_HEALTH|NAME_SHA=42e16f90a5ad5e5a55c0|HS_AGE=-1|RX=0|TX=21460
REC|WG_CONFIG|NAME_SHA=3d123def9832d8981356|ACTIVE=active|IFACE=true
REC|WG_HEALTH|NAME_SHA=3d123def9832d8981356|HS_AGE=16|RX=116592|TX=31600
WG_FORCED_PING_RC=1
ENDPOINT_UDP_PACKET_COUNT=1
ENDPOINT_UDP_OUT_COUNT=1
ENDPOINT_UDP_IN_COUNT=0
REC|WG_ENDPOINT_CAPTURE|19:46:28.502707 eth0 Out IP IP_REDACTED.45314 > IP_REDACTED.51820: UDP, length 148
FAILED_UNIT_COUNT=0
CLUSTER_QUORATE=true
DECISION=PASS_SNIKKET_WG_ENDPOINT_RCA
NEXT_GATE=SNIKKET_WG_ENDPOINT_TARGETED_REPAIR
TASK_RESULT=SNIKKET_WG_ENDPOINT_RCA
CHANGES_MADE=false
ROLLBACK_STARTED=false
ROLLBACK_RESTORED=null
MUTATION_OUTCOME=NO_MUTATION
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-SNIKKET-WG-BYPASS-REPAIR-99729R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null}
MUTATION_OUTCOME=NO_CONFIG_MUTATION
HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-SNIKKET-WG-ENDPOINT-RCA-99730R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null}
OUTPUT_END
CHAT_OUTPUT_END