runtime: publish SUPPORT-260922-SPB-VM130-EGRESS443-RCA-9127R1

2026-09-22 16:47:13 +00:00
parent 23ba798c41
commit e692bdc1f1
4 changed files with 103 additions and 60 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "SUPPORT-260922-SPB-VM130-EGRESS443-RCA-9127R1",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "spb-vm130-egress443-rca",
+  "started_at_utc": "2026-09-22T16:47:01Z",
+  "finished_at_utc": "2026-09-22T16:47:12Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
+  "error_register_checked": true,
+  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
+  "command_sha256": "b3f1619d5b158d06878e967e54b9f648fb6a9d0dab6fda545f12eeb6203c58f4",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "822011e0fe77955a376d346132c142ef77e22468e068695904628be95f438567",
+  "sanitized_output_sha256": "822011e0fe77955a376d346132c142ef77e22468e068695904628be95f438567",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "SPB9127_RCA={\"guest\":{\"ok\":true,\"data\":{\"hostname\":\"edge-vm\",\"default_v4\":true,\"route_get\":{\"letsencrypt\":{\"rc\":1,\"hash\":null,\"stderr_sha\":\"bc3a564baee1d4c0\"},\"cloudflare\":{\"rc\":1,\"hash\":null,\"stderr_sha\":\"2005d2187698358b\"},\"cloudflare_dns\":{\"rc\":0,\"hash\":\"b1bac959b7f164a9\",\"stderr_sha\":null},\"google_dns\":{\"rc\":0,\"hash\":\"cbe7dc74e06520d1\",\"stderr_sha\":null}},\"tcp\":{\"letsencrypt_443\":{\"ok\":false,\"error\":\"OSError\"},\"cloudflare_443\":{\"ok\":false,\"error\":\"OSError\"},\"cloudflare_dns_443\":{\"ok\":false,\"error\":\"OSError\"},\"cloudflare_dns_53\":{\"ok\":false,\"error\":\"OSError\"},\"google_dns_443\":{\"ok\":false,\"error\":\"OSError\"},\"google_dns_53\":{\"ok\":false,\"error\":\"OSError\"}},\"nft\":{\"rc\":0,\"drop_reject_count\":33,\"output_443_hits\":[],\"table_chain_lines\":[\"table ip filter { # handle 1\",\"chain FORWARD { # handle 1\",\"chain DOCKER { # handle 4\",\"chain DOCKER-FORWARD { # handle 5\",\"chain DOCKER-BRIDGE { # handle 6\",\"chain DOCKER-CT { # handle 7\",\"chain DOCKER-INTERNAL { # handle 8\",\"chain INPUT { # handle 54\",\"chain DOCKER-USER { # handle 56\",\"table ip nat { # handle 3\",\"chain POSTROUTING { # handle 1\",\"chain DOCKER { # handle 3\",\"chain PREROUTING { # handle 4\",\"chain OUTPUT { # handle 6\",\"table ip snikket_edge_prod { # handle 6\",\"chain prerouting { # handle 1\",\"chain postrouting { # handle 2\",\"table ip6 nat { # handle 7\",\"chain DOCKER { # handle 1\",\"chain PREROUTING { # handle 2\",\"chain OUTPUT { # handle 4\",\"table ip6 filter { # handle 8\",\"chain DOCKER { # handle 1\",\"chain DOCKER-FORWARD { # handle 2\",\"chain DOCKER-BRIDGE { # handle 3\",\"chain DOCKER-CT { # handle 4\",\"chain DOCKER-INTERNAL { # handle 5\",\"chain FORWARD { # handle 6\",\"chain INPUT { # handle 13\",\"chain DOCKER-USER { # handle 15\",\"table ip raw { # handle 9\",\"chain PREROUTING { # handle 1\",\"table ip netbird { # handle 10\",\"chain netbird-rt-fwd { # handle 31\",\"chain netbird-rt-postrouting { # handle 32\",\"chain netbird-rt-redirect { # handle 33\",\"chain netbird-mangle-postrouting { # handle 34\",\"chain netbird-mangle-prerouting { # handle 35\",\"chain netbird-mangle-forward { # handle 36\",\"chain netbird-acl-input-rules { # handle 43\",\"chain netbird-acl-input-filter { # handle 45\",\"chain netbird-acl-forward-filter { # handle 48\",\"chain netbird-raw-out { # handle 52\",\"chain netbird-raw-pre { # handle 53\",\"table ip6 netbird { # handle 11\",\"chain netbird-rt-fwd { # handle 1\",\"chain netbird-rt-postrouting { # handle 2\",\"chain netbird-rt-redirect { # handle 3\",\"chain netbird-mangle-postrouting { # handle 4\",\"chain netbird-mangle-prerouting { # handle 5\",\"chain netbird-mangle-forward { # handle 6\",\"chain netbird-acl-input-rules { # handle 13\",\"chain netbird-acl-input-filter { # handle 15\",\"chain netbird-acl-forward-filter { # handle 18\"]},\"iptables\":{\"rc\":0,\"443_hits\":[],\"drop_reject_count\":9},\"ufw\":\"\",\"firewalld\":\"\"}},\"pve03\":{\"rc\":2,\"lines\":[\"PVE03_CURL_LE_RC=0\",\"PVE03_CURL_CF_RC=22\"],\"stderr_sha\":\"58a62ee7d936df00\"}}\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_VM130_EGRESS443_RCA\nDECISION=READ_EXACT_9127_THEN_REPAIR_NARROWEST_EGRESS_LAYER\n"
+}
@@ -0,0 +1,36 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=SUPPORT-260922-SPB-VM130-EGRESS443-RCA-9127R1
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=spb-vm130-egress443-rca
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
+COMMAND_SHA256=b3f1619d5b158d06878e967e54b9f648fb6a9d0dab6fda545f12eeb6203c58f4
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=822011e0fe77955a376d346132c142ef77e22468e068695904628be95f438567
+SANITIZED_OUTPUT_SHA256=822011e0fe77955a376d346132c142ef77e22468e068695904628be95f438567
+OUTPUT_BEGIN
+SPB9127_RCA={"guest":{"ok":true,"data":{"hostname":"edge-vm","default_v4":true,"route_get":{"letsencrypt":{"rc":1,"hash":null,"stderr_sha":"bc3a564baee1d4c0"},"cloudflare":{"rc":1,"hash":null,"stderr_sha":"2005d2187698358b"},"cloudflare_dns":{"rc":0,"hash":"b1bac959b7f164a9","stderr_sha":null},"google_dns":{"rc":0,"hash":"cbe7dc74e06520d1","stderr_sha":null}},"tcp":{"letsencrypt_443":{"ok":false,"error":"OSError"},"cloudflare_443":{"ok":false,"error":"OSError"},"cloudflare_dns_443":{"ok":false,"error":"OSError"},"cloudflare_dns_53":{"ok":false,"error":"OSError"},"google_dns_443":{"ok":false,"error":"OSError"},"google_dns_53":{"ok":false,"error":"OSError"}},"nft":{"rc":0,"drop_reject_count":33,"output_443_hits":[],"table_chain_lines":["table ip filter { # handle 1","chain FORWARD { # handle 1","chain DOCKER { # handle 4","chain DOCKER-FORWARD { # handle 5","chain DOCKER-BRIDGE { # handle 6","chain DOCKER-CT { # handle 7","chain DOCKER-INTERNAL { # handle 8","chain INPUT { # handle 54","chain DOCKER-USER { # handle 56","table ip nat { # handle 3","chain POSTROUTING { # handle 1","chain DOCKER { # handle 3","chain PREROUTING { # handle 4","chain OUTPUT { # handle 6","table ip snikket_edge_prod { # handle 6","chain prerouting { # handle 1","chain postrouting { # handle 2","table ip6 nat { # handle 7","chain DOCKER { # handle 1","chain PREROUTING { # handle 2","chain OUTPUT { # handle 4","table ip6 filter { # handle 8","chain DOCKER { # handle 1","chain DOCKER-FORWARD { # handle 2","chain DOCKER-BRIDGE { # handle 3","chain DOCKER-CT { # handle 4","chain DOCKER-INTERNAL { # handle 5","chain FORWARD { # handle 6","chain INPUT { # handle 13","chain DOCKER-USER { # handle 15","table ip raw { # handle 9","chain PREROUTING { # handle 1","table ip netbird { # handle 10","chain netbird-rt-fwd { # handle 31","chain netbird-rt-postrouting { # handle 32","chain netbird-rt-redirect { # handle 33","chain netbird-mangle-postrouting { # handle 34","chain netbird-mangle-prerouting { # handle 35","chain netbird-mangle-forward { # handle 36","chain netbird-acl-input-rules { # handle 43","chain netbird-acl-input-filter { # handle 45","chain netbird-acl-forward-filter { # handle 48","chain netbird-raw-out { # handle 52","chain netbird-raw-pre { # handle 53","table ip6 netbird { # handle 11","chain netbird-rt-fwd { # handle 1","chain netbird-rt-postrouting { # handle 2","chain netbird-rt-redirect { # handle 3","chain netbird-mangle-postrouting { # handle 4","chain netbird-mangle-prerouting { # handle 5","chain netbird-mangle-forward { # handle 6","chain netbird-acl-input-rules { # handle 13","chain netbird-acl-input-filter { # handle 15","chain netbird-acl-forward-filter { # handle 18"]},"iptables":{"rc":0,"443_hits":[],"drop_reject_count":9},"ufw":"","firewalld":""}},"pve03":{"rc":2,"lines":["PVE03_CURL_LE_RC=0","PVE03_CURL_CF_RC=22"],"stderr_sha":"58a62ee7d936df00"}}
+TASK_COMPLETE=true
+TASK_RESULT=PASS_SPB_VM130_EGRESS443_RCA
+DECISION=READ_EXACT_9127_THEN_REPAIR_NARROWEST_EGRESS_LAYER
+
+OUTPUT_END
+CHAT_OUTPUT_END