diff --git a/runtime/history/SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1.json b/runtime/history/SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1.json new file mode 100644 index 00000000..964f2bc0 --- /dev/null +++ b/runtime/history/SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "pve01-netbird-forwarding-rca", + "started_at_utc": "2026-10-06T10:18:33Z", + "finished_at_utc": "2026-10-06T10:18:39Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "79346c0088b39a1ac744f0a9af86accdc6e5bf3f3cc91ed6a998b0deba27ff8f", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880", + "sanitized_output_sha256": "73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "PVE01_NETBIRD_FORWARDING_RCA=V1\nMODE=read-only\nNO_MUTATION=true\nNODE_HOSTNAME=pve01\nNETBIRD_NETWORKS_COUNT=0\nNETBIRD_FORWARDINGRULES_COUNT=1\nNETBIRD_DNSSERVERS_COUNT=0\nNETBIRD_RELAYS_COUNT=3\nNETBIRD_EVENTS_COUNT=2\nNETBIRD_DAEMON_VERSION=0.80.0\nNETBIRD_LAZY_CONNECTION_ENABLED=true\nNETBIRD_USES_KERNEL_INTERFACE=true\nNETBIRD_QUANTUM_RESISTANCE=false\nNETBIRD_PEER_COUNT=8\nNETBIRD_CONNECTED_PEER_COUNT=0\nPVE1_ROUTE_TABLE_7120_BEGIN=true\nREC|PVE1_ROUTE_7120|Error: ipv4: FIB table does not exist.\nREC|PVE1_ROUTE_7120|Dump terminated\nPVE1_ROUTE_TABLE_7120_COUNT=0\nREC|PVE1_IP_RULE|0:\tfrom all lookup local\nREC|PVE1_IP_RULE|105:\tfrom all lookup main suppress_prefixlength 0\nREC|PVE1_IP_RULE|110:\tnot from all fwmark 0x1bd00 lookup 7120\nREC|PVE1_IP_RULE|32766:\tfrom all lookup main\nREC|PVE1_IP_RULE|32767:\tfrom all lookup default\nPVE1_IPV4_FORWARD=0\nPVE1_IPV6_FORWARD=0\nPVE1_SRC_VALID_MARK=1\nREC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|25:net.ipv4.conf.default.rp_filter = 2\nREC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|26:net.ipv4.conf.*.rp_filter = 2\nREC|PVE1_SYSCTL_CONFIG|FILE=pve-firewall.conf|2:net.ipv4.conf.all.rp_filter = 2\nREC|PVE1_NETBIRD_BOOT_-1|2026-08-28TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_0|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nPVE1_IPTABLES-SAVE_LINE_COUNT=278\nPVE1_IPTABLES-SAVE_NETBIRD_COUNT=35\nPVE1_IPTABLES-SAVE_MASQUERADE_COUNT=2\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [673406:1327114728]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0]\nREC|PVE1_IPTABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE\nREC|PVE1_IPTABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff\nREC|PVE1_IPTABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP\nREC|PVE1_IPTABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP\nREC|PVE1_IPTABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff\nREC|PVE1_IPTABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1240\nREC|PVE1_IPTABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-a27a9074 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0]\nREC|PVE1_IPTABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR\nREC|PVE1_IPTABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT\nREC|PVE1_IPTABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE\nREC|PVE1_IPTABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RAW - [0:0]\nREC|PVE1_IPTABLES-SAVE|39:-A PREROUTING -j NETBIRD-RAW\nREC|PVE1_IPTABLES-SAVE|40:-A OUTPUT -j NETBIRD-RAW\nREC|PVE1_IPTABLES-SAVE|41:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --sport 51820 -j NOTRACK\nREC|PVE1_IPTABLES-SAVE|42:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --dport 51820 -j NOTRACK\nREC|PVE1_IPTABLES-SAVE|43:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 51820 -j NOTRACK\nREC|PVE1_IPTABLES-SAVE|44:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 3128 -j NOTRACK\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [23810:3007921]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0]\nREC|PVE1_IPTABLES-SAVE|81:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|82:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT\nREC|PVE1_IPTABLES-SAVE|83:-A INPUT -i wt0 -j DROP\nREC|PVE1_IPTABLES-SAVE|85:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN\nREC|PVE1_IPTABLES-SAVE|86:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|87:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT\nREC|PVE1_IPTABLES-SAVE|88:-A FORWARD -i wt0 -j DROP\nREC|PVE1_IPTABLES-SAVE|89:-A FORWARD -j PVEFW-FORWARD\nREC|PVE1_IPTABLES-SAVE|91:-A NETBIRD-ACL-INPUT -m set --match-set nb-a27a9074 src -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|92:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|93:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|111:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP\nREC|PVE1_IPTABLES-SAVE|112:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|113:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN\nREC|PVE1_IPTABLES-SAVE|114:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT\nREC|PVE1_IPTABLES-SAVE|115:-A PVEFW-FORWARD -m comment --comment \"PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw\"\nPVE1_IP6TABLES-SAVE_LINE_COUNT=267\nPVE1_IP6TABLES-SAVE_NETBIRD_COUNT=28\nPVE1_IP6TABLES-SAVE_MASQUERADE_COUNT=2\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1594:102750]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0]\nREC|PVE1_IP6TABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE\nREC|PVE1_IP6TABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff\nREC|PVE1_IP6TABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP\nREC|PVE1_IP6TABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP\nREC|PVE1_IP6TABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff\nREC|PVE1_IP6TABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1220\nREC|PVE1_IP6TABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-f4388876-v6 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0]\nREC|PVE1_IP6TABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR\nREC|PVE1_IP6TABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT\nREC|PVE1_IP6TABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE\nREC|PVE1_IP6TABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1125:72536]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0]\nREC|PVE1_IP6TABLES-SAVE|72:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|73:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT\nREC|PVE1_IP6TABLES-SAVE|74:-A INPUT -i wt0 -j DROP\nREC|PVE1_IP6TABLES-SAVE|76:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN\nREC|PVE1_IP6TABLES-SAVE|77:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|78:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT\nREC|PVE1_IP6TABLES-SAVE|79:-A FORWARD -i wt0 -j DROP\nREC|PVE1_IP6TABLES-SAVE|80:-A FORWARD -j PVEFW-FORWARD\nREC|PVE1_IP6TABLES-SAVE|82:-A NETBIRD-ACL-INPUT -m set --match-set nb-f4388876-v6 src -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|83:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|84:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|101:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP\nREC|PVE1_IP6TABLES-SAVE|102:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|103:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN\nREC|PVE1_IP6TABLES-SAVE|104:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT\nREC|PVE1_IP6TABLES-SAVE|105:-A PVEFW-FORWARD -m comment --comment \"PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw\"\nREC|COMPARE_NODE_BEGIN|NODE=pve02\nREC|COMPARE_NODE_STDERR_LINES|NODE=pve02|COUNT=0\nREC|COMPARE_NODE_BEGIN|NODE=pve03\nREC|COMPARE_NODE_STDERR_LINES|NODE=pve03|COUNT=0\nREC|PVE1_HTTPS4_FINAL|HOST=www.google.com|RC=0|HTTP=200\ncurl: (28) Connection timed out after 5002 milliseconds\nREC|PVE1_HTTPS4_FINAL|HOST=api.telegram.org|RC=28|HTTP=000\nDECISION=PASS_PVE01_NETBIRD_FORWARDING_RCA\nNEXT_GATE=PVE01_NETBIRD_FORWARDING_REPAIR\nTASK_RESULT=PVE01_NETBIRD_FORWARDING_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1.txt b/runtime/history/SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1.txt new file mode 100644 index 00000000..c311503a --- /dev/null +++ b/runtime/history/SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1.txt @@ -0,0 +1,209 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1 +STATUS=OK +RC=0 +HOST=pve01 +MODE=read-only +COMPONENT=pve01-netbird-forwarding-rca +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=79346c0088b39a1ac744f0a9af86accdc6e5bf3f3cc91ed6a998b0deba27ff8f +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880 +SANITIZED_OUTPUT_SHA256=73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880 +OUTPUT_BEGIN +PVE01_NETBIRD_FORWARDING_RCA=V1 +MODE=read-only +NO_MUTATION=true +NODE_HOSTNAME=pve01 +NETBIRD_NETWORKS_COUNT=0 +NETBIRD_FORWARDINGRULES_COUNT=1 +NETBIRD_DNSSERVERS_COUNT=0 +NETBIRD_RELAYS_COUNT=3 +NETBIRD_EVENTS_COUNT=2 +NETBIRD_DAEMON_VERSION=0.80.0 +NETBIRD_LAZY_CONNECTION_ENABLED=true +NETBIRD_USES_KERNEL_INTERFACE=true +NETBIRD_QUANTUM_RESISTANCE=false +NETBIRD_PEER_COUNT=8 +NETBIRD_CONNECTED_PEER_COUNT=0 +PVE1_ROUTE_TABLE_7120_BEGIN=true +REC|PVE1_ROUTE_7120|Error: ipv4: FIB table does not exist. +REC|PVE1_ROUTE_7120|Dump terminated +PVE1_ROUTE_TABLE_7120_COUNT=0 +REC|PVE1_IP_RULE|0: from all lookup local +REC|PVE1_IP_RULE|105: from all lookup main suppress_prefixlength 0 +REC|PVE1_IP_RULE|110: not from all fwmark 0x1bd00 lookup 7120 +REC|PVE1_IP_RULE|32766: from all lookup main +REC|PVE1_IP_RULE|32767: from all lookup default +PVE1_IPV4_FORWARD=0 +PVE1_IPV6_FORWARD=0 +PVE1_SRC_VALID_MARK=1 +REC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|25:net.ipv4.conf.default.rp_filter = 2 +REC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|26:net.ipv4.conf.*.rp_filter = 2 +REC|PVE1_SYSCTL_CONFIG|FILE=pve-firewall.conf|2:net.ipv4.conf.all.rp_filter = 2 +REC|PVE1_NETBIRD_BOOT_-1|2026-08-28TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_0|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +PVE1_IPTABLES-SAVE_LINE_COUNT=278 +PVE1_IPTABLES-SAVE_NETBIRD_COUNT=35 +PVE1_IPTABLES-SAVE_MASQUERADE_COUNT=2 +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [673406:1327114728] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0] +REC|PVE1_IPTABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE +REC|PVE1_IPTABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff +REC|PVE1_IPTABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP +REC|PVE1_IPTABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP +REC|PVE1_IPTABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff +REC|PVE1_IPTABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1240 +REC|PVE1_IPTABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-a27a9074 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0] +REC|PVE1_IPTABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR +REC|PVE1_IPTABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT +REC|PVE1_IPTABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE +REC|PVE1_IPTABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RAW - [0:0] +REC|PVE1_IPTABLES-SAVE|39:-A PREROUTING -j NETBIRD-RAW +REC|PVE1_IPTABLES-SAVE|40:-A OUTPUT -j NETBIRD-RAW +REC|PVE1_IPTABLES-SAVE|41:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --sport 51820 -j NOTRACK +REC|PVE1_IPTABLES-SAVE|42:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --dport 51820 -j NOTRACK +REC|PVE1_IPTABLES-SAVE|43:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 51820 -j NOTRACK +REC|PVE1_IPTABLES-SAVE|44:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 3128 -j NOTRACK +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [23810:3007921] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0] +REC|PVE1_IPTABLES-SAVE|81:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|82:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT +REC|PVE1_IPTABLES-SAVE|83:-A INPUT -i wt0 -j DROP +REC|PVE1_IPTABLES-SAVE|85:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN +REC|PVE1_IPTABLES-SAVE|86:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT +REC|PVE1_IPTABLES-SAVE|87:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT +REC|PVE1_IPTABLES-SAVE|88:-A FORWARD -i wt0 -j DROP +REC|PVE1_IPTABLES-SAVE|89:-A FORWARD -j PVEFW-FORWARD +REC|PVE1_IPTABLES-SAVE|91:-A NETBIRD-ACL-INPUT -m set --match-set nb-a27a9074 src -j ACCEPT +REC|PVE1_IPTABLES-SAVE|92:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|93:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|111:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP +REC|PVE1_IPTABLES-SAVE|112:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|113:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN +REC|PVE1_IPTABLES-SAVE|114:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT +REC|PVE1_IPTABLES-SAVE|115:-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw" +PVE1_IP6TABLES-SAVE_LINE_COUNT=267 +PVE1_IP6TABLES-SAVE_NETBIRD_COUNT=28 +PVE1_IP6TABLES-SAVE_MASQUERADE_COUNT=2 +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1594:102750] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0] +REC|PVE1_IP6TABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE +REC|PVE1_IP6TABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff +REC|PVE1_IP6TABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP +REC|PVE1_IP6TABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP +REC|PVE1_IP6TABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff +REC|PVE1_IP6TABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1220 +REC|PVE1_IP6TABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-f4388876-v6 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0] +REC|PVE1_IP6TABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR +REC|PVE1_IP6TABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT +REC|PVE1_IP6TABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE +REC|PVE1_IP6TABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1125:72536] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0] +REC|PVE1_IP6TABLES-SAVE|72:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|73:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT +REC|PVE1_IP6TABLES-SAVE|74:-A INPUT -i wt0 -j DROP +REC|PVE1_IP6TABLES-SAVE|76:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN +REC|PVE1_IP6TABLES-SAVE|77:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|78:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT +REC|PVE1_IP6TABLES-SAVE|79:-A FORWARD -i wt0 -j DROP +REC|PVE1_IP6TABLES-SAVE|80:-A FORWARD -j PVEFW-FORWARD +REC|PVE1_IP6TABLES-SAVE|82:-A NETBIRD-ACL-INPUT -m set --match-set nb-f4388876-v6 src -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|83:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|84:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|101:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP +REC|PVE1_IP6TABLES-SAVE|102:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|103:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN +REC|PVE1_IP6TABLES-SAVE|104:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT +REC|PVE1_IP6TABLES-SAVE|105:-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw" +REC|COMPARE_NODE_BEGIN|NODE=pve02 +REC|COMPARE_NODE_STDERR_LINES|NODE=pve02|COUNT=0 +REC|COMPARE_NODE_BEGIN|NODE=pve03 +REC|COMPARE_NODE_STDERR_LINES|NODE=pve03|COUNT=0 +REC|PVE1_HTTPS4_FINAL|HOST=www.google.com|RC=0|HTTP=200 +curl: (28) Connection timed out after 5002 milliseconds +REC|PVE1_HTTPS4_FINAL|HOST=api.telegram.org|RC=28|HTTP=000 +DECISION=PASS_PVE01_NETBIRD_FORWARDING_RCA +NEXT_GATE=PVE01_NETBIRD_FORWARDING_REPAIR +TASK_RESULT=PVE01_NETBIRD_FORWARDING_RCA +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index 8038b265..964f2bc0 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1 +1,38 @@ -{"schema_version":1,"channel":"homelab-runtime","command_id":"CONTEXT-AUTO-20261006T101701Z","status":"OK","rc":0,"host":"pve01","mode":"read-only","component":"cluster-context","started_at_utc":"2026-10-06T10:17:01Z","finished_at_utc":"2026-10-06T10:17:02Z","reference_register_checked":true,"reference_sha256":"5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66","error_register_checked":true,"error_register_sha256":"3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0","changes_made":false,"sanitized":true,"secrets_included":false,"private_addresses_included":false,"output":"AUTOMATIC_CLUSTER_CONTEXT_REFRESH=OK"} +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1", + "status": "OK", + "rc": 0, + "host": "pve01", + "mode": "read-only", + "component": "pve01-netbird-forwarding-rca", + "started_at_utc": "2026-10-06T10:18:33Z", + "finished_at_utc": "2026-10-06T10:18:39Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "79346c0088b39a1ac744f0a9af86accdc6e5bf3f3cc91ed6a998b0deba27ff8f", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 0, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880", + "sanitized_output_sha256": "73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "PVE01_NETBIRD_FORWARDING_RCA=V1\nMODE=read-only\nNO_MUTATION=true\nNODE_HOSTNAME=pve01\nNETBIRD_NETWORKS_COUNT=0\nNETBIRD_FORWARDINGRULES_COUNT=1\nNETBIRD_DNSSERVERS_COUNT=0\nNETBIRD_RELAYS_COUNT=3\nNETBIRD_EVENTS_COUNT=2\nNETBIRD_DAEMON_VERSION=0.80.0\nNETBIRD_LAZY_CONNECTION_ENABLED=true\nNETBIRD_USES_KERNEL_INTERFACE=true\nNETBIRD_QUANTUM_RESISTANCE=false\nNETBIRD_PEER_COUNT=8\nNETBIRD_CONNECTED_PEER_COUNT=0\nPVE1_ROUTE_TABLE_7120_BEGIN=true\nREC|PVE1_ROUTE_7120|Error: ipv4: FIB table does not exist.\nREC|PVE1_ROUTE_7120|Dump terminated\nPVE1_ROUTE_TABLE_7120_COUNT=0\nREC|PVE1_IP_RULE|0:\tfrom all lookup local\nREC|PVE1_IP_RULE|105:\tfrom all lookup main suppress_prefixlength 0\nREC|PVE1_IP_RULE|110:\tnot from all fwmark 0x1bd00 lookup 7120\nREC|PVE1_IP_RULE|32766:\tfrom all lookup main\nREC|PVE1_IP_RULE|32767:\tfrom all lookup default\nPVE1_IPV4_FORWARD=0\nPVE1_IPV6_FORWARD=0\nPVE1_SRC_VALID_MARK=1\nREC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|25:net.ipv4.conf.default.rp_filter = 2\nREC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|26:net.ipv4.conf.*.rp_filter = 2\nREC|PVE1_SYSCTL_CONFIG|FILE=pve-firewall.conf|2:net.ipv4.conf.all.rp_filter = 2\nREC|PVE1_NETBIRD_BOOT_-1|2026-08-28TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client...\nREC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client.\nREC|PVE1_NETBIRD_BOOT_0|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client.\nPVE1_IPTABLES-SAVE_LINE_COUNT=278\nPVE1_IPTABLES-SAVE_NETBIRD_COUNT=35\nPVE1_IPTABLES-SAVE_MASQUERADE_COUNT=2\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [673406:1327114728]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0]\nREC|PVE1_IPTABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE\nREC|PVE1_IPTABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff\nREC|PVE1_IPTABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP\nREC|PVE1_IPTABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP\nREC|PVE1_IPTABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff\nREC|PVE1_IPTABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1240\nREC|PVE1_IPTABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-a27a9074 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0]\nREC|PVE1_IPTABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR\nREC|PVE1_IPTABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT\nREC|PVE1_IPTABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE\nREC|PVE1_IPTABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RAW - [0:0]\nREC|PVE1_IPTABLES-SAVE|39:-A PREROUTING -j NETBIRD-RAW\nREC|PVE1_IPTABLES-SAVE|40:-A OUTPUT -j NETBIRD-RAW\nREC|PVE1_IPTABLES-SAVE|41:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --sport 51820 -j NOTRACK\nREC|PVE1_IPTABLES-SAVE|42:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --dport 51820 -j NOTRACK\nREC|PVE1_IPTABLES-SAVE|43:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 51820 -j NOTRACK\nREC|PVE1_IPTABLES-SAVE|44:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 3128 -j NOTRACK\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [23810:3007921]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0]\nREC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0]\nREC|PVE1_IPTABLES-SAVE|81:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|82:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT\nREC|PVE1_IPTABLES-SAVE|83:-A INPUT -i wt0 -j DROP\nREC|PVE1_IPTABLES-SAVE|85:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN\nREC|PVE1_IPTABLES-SAVE|86:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|87:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT\nREC|PVE1_IPTABLES-SAVE|88:-A FORWARD -i wt0 -j DROP\nREC|PVE1_IPTABLES-SAVE|89:-A FORWARD -j PVEFW-FORWARD\nREC|PVE1_IPTABLES-SAVE|91:-A NETBIRD-ACL-INPUT -m set --match-set nb-a27a9074 src -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|92:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|93:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|111:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP\nREC|PVE1_IPTABLES-SAVE|112:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IPTABLES-SAVE|113:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN\nREC|PVE1_IPTABLES-SAVE|114:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT\nREC|PVE1_IPTABLES-SAVE|115:-A PVEFW-FORWARD -m comment --comment \"PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw\"\nPVE1_IP6TABLES-SAVE_LINE_COUNT=267\nPVE1_IP6TABLES-SAVE_NETBIRD_COUNT=28\nPVE1_IP6TABLES-SAVE_MASQUERADE_COUNT=2\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1594:102750]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0]\nREC|PVE1_IP6TABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE\nREC|PVE1_IP6TABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff\nREC|PVE1_IP6TABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP\nREC|PVE1_IP6TABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP\nREC|PVE1_IP6TABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff\nREC|PVE1_IP6TABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1220\nREC|PVE1_IP6TABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-f4388876-v6 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0]\nREC|PVE1_IP6TABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR\nREC|PVE1_IP6TABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT\nREC|PVE1_IP6TABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE\nREC|PVE1_IP6TABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1125:72536]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0]\nREC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0]\nREC|PVE1_IP6TABLES-SAVE|72:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|73:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT\nREC|PVE1_IP6TABLES-SAVE|74:-A INPUT -i wt0 -j DROP\nREC|PVE1_IP6TABLES-SAVE|76:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN\nREC|PVE1_IP6TABLES-SAVE|77:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|78:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT\nREC|PVE1_IP6TABLES-SAVE|79:-A FORWARD -i wt0 -j DROP\nREC|PVE1_IP6TABLES-SAVE|80:-A FORWARD -j PVEFW-FORWARD\nREC|PVE1_IP6TABLES-SAVE|82:-A NETBIRD-ACL-INPUT -m set --match-set nb-f4388876-v6 src -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|83:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|84:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|101:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP\nREC|PVE1_IP6TABLES-SAVE|102:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\nREC|PVE1_IP6TABLES-SAVE|103:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN\nREC|PVE1_IP6TABLES-SAVE|104:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT\nREC|PVE1_IP6TABLES-SAVE|105:-A PVEFW-FORWARD -m comment --comment \"PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw\"\nREC|COMPARE_NODE_BEGIN|NODE=pve02\nREC|COMPARE_NODE_STDERR_LINES|NODE=pve02|COUNT=0\nREC|COMPARE_NODE_BEGIN|NODE=pve03\nREC|COMPARE_NODE_STDERR_LINES|NODE=pve03|COUNT=0\nREC|PVE1_HTTPS4_FINAL|HOST=www.google.com|RC=0|HTTP=200\ncurl: (28) Connection timed out after 5002 milliseconds\nREC|PVE1_HTTPS4_FINAL|HOST=api.telegram.org|RC=28|HTTP=000\nDECISION=PASS_PVE01_NETBIRD_FORWARDING_RCA\nNEXT_GATE=PVE01_NETBIRD_FORWARDING_REPAIR\nTASK_RESULT=PVE01_NETBIRD_FORWARDING_RCA\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/latest.txt b/runtime/latest.txt index 5d77d7c7..c311503a 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,160 +1,209 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=CONTEXT-AUTO-[PRIVATE_IP]701Z +COMMAND_ID=SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1 STATUS=OK RC=0 HOST=pve01 -COMPONENT=cluster-context -REFERENCE_SHA[PRIVATE_IP]e5154c41cb[PRIVATE_IP]aca68090be[PRIVATE_IP]bf[PRIVATE_IP]df[PRIVATE_IP] -ERROR_REGISTER_SHA[PRIVATE_IP]ec0f527ed3afeed[PRIVATE_IP]ee[PRIVATE_IP]bbfb[PRIVATE_IP]af4ba7ba0 +MODE=read-only +COMPONENT=pve01-netbird-forwarding-rca +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=79346c0088b39a1ac744f0a9af86accdc6e5bf3f3cc91ed6a998b0deba27ff8f +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=0 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880 +SANITIZED_OUTPUT_SHA256=73f99febb3b776642459f9ec1cb0c4e22ca9e107fcd486495a55ea87e29df880 OUTPUT_BEGIN -GENERATED_AT_UTC=[PRIVATE_IP]T10:17:01Z -Cluster information -------------------- -Name: homelab -Config Version: 3 -Transport: knet -Secure auth: on +PVE01_NETBIRD_FORWARDING_RCA=V1 +MODE=read-only +NO_MUTATION=true +NODE_HOSTNAME=pve01 +NETBIRD_NETWORKS_COUNT=0 +NETBIRD_FORWARDINGRULES_COUNT=1 +NETBIRD_DNSSERVERS_COUNT=0 +NETBIRD_RELAYS_COUNT=3 +NETBIRD_EVENTS_COUNT=2 +NETBIRD_DAEMON_VERSION=0.80.0 +NETBIRD_LAZY_CONNECTION_ENABLED=true +NETBIRD_USES_KERNEL_INTERFACE=true +NETBIRD_QUANTUM_RESISTANCE=false +NETBIRD_PEER_COUNT=8 +NETBIRD_CONNECTED_PEER_COUNT=0 +PVE1_ROUTE_TABLE_7120_BEGIN=true +REC|PVE1_ROUTE_7120|Error: ipv4: FIB table does not exist. +REC|PVE1_ROUTE_7120|Dump terminated +PVE1_ROUTE_TABLE_7120_COUNT=0 +REC|PVE1_IP_RULE|0: from all lookup local +REC|PVE1_IP_RULE|105: from all lookup main suppress_prefixlength 0 +REC|PVE1_IP_RULE|110: not from all fwmark 0x1bd00 lookup 7120 +REC|PVE1_IP_RULE|32766: from all lookup main +REC|PVE1_IP_RULE|32767: from all lookup default +PVE1_IPV4_FORWARD=0 +PVE1_IPV6_FORWARD=0 +PVE1_SRC_VALID_MARK=1 +REC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|25:net.ipv4.conf.default.rp_filter = 2 +REC|PVE1_SYSCTL_CONFIG|FILE=50-default.conf|26:net.ipv4.conf.*.rp_filter = 2 +REC|PVE1_SYSCTL_CONFIG|FILE=pve-firewall.conf|2:net.ipv4.conf.all.rp_filter = 2 +REC|PVE1_NETBIRD_BOOT_-1|2026-08-28TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-27TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-09-30TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-02TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopping netbird.service - NetBird mesh network client... +REC|PVE1_NETBIRD_BOOT_-1|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Stopped netbird.service - NetBird mesh network client. +REC|PVE1_NETBIRD_BOOT_0|2026-10-06TIPV6_REDACTED+03:00 pve01 systemd[1]: Started netbird.service - NetBird mesh network client. +PVE1_IPTABLES-SAVE_LINE_COUNT=278 +PVE1_IPTABLES-SAVE_NETBIRD_COUNT=35 +PVE1_IPTABLES-SAVE_MASQUERADE_COUNT=2 +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [673406:1327114728] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0] +REC|PVE1_IPTABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE +REC|PVE1_IPTABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff +REC|PVE1_IPTABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP +REC|PVE1_IPTABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP +REC|PVE1_IPTABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff +REC|PVE1_IPTABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1240 +REC|PVE1_IPTABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-a27a9074 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0] +REC|PVE1_IPTABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR +REC|PVE1_IPTABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT +REC|PVE1_IPTABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE +REC|PVE1_IPTABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RAW - [0:0] +REC|PVE1_IPTABLES-SAVE|39:-A PREROUTING -j NETBIRD-RAW +REC|PVE1_IPTABLES-SAVE|40:-A OUTPUT -j NETBIRD-RAW +REC|PVE1_IPTABLES-SAVE|41:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --sport 51820 -j NOTRACK +REC|PVE1_IPTABLES-SAVE|42:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -o lo -p udp -m udp --dport 51820 -j NOTRACK +REC|PVE1_IPTABLES-SAVE|43:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 51820 -j NOTRACK +REC|PVE1_IPTABLES-SAVE|44:-A NETBIRD-RAW -s IP_REDACTED -d IP_REDACTED -i lo -p udp -m udp --dport 3128 -j NOTRACK +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [23810:3007921] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0] +REC|PVE1_IPTABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0] +REC|PVE1_IPTABLES-SAVE|81:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|82:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT +REC|PVE1_IPTABLES-SAVE|83:-A INPUT -i wt0 -j DROP +REC|PVE1_IPTABLES-SAVE|85:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN +REC|PVE1_IPTABLES-SAVE|86:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT +REC|PVE1_IPTABLES-SAVE|87:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT +REC|PVE1_IPTABLES-SAVE|88:-A FORWARD -i wt0 -j DROP +REC|PVE1_IPTABLES-SAVE|89:-A FORWARD -j PVEFW-FORWARD +REC|PVE1_IPTABLES-SAVE|91:-A NETBIRD-ACL-INPUT -m set --match-set nb-a27a9074 src -j ACCEPT +REC|PVE1_IPTABLES-SAVE|92:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|93:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|111:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP +REC|PVE1_IPTABLES-SAVE|112:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IPTABLES-SAVE|113:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN +REC|PVE1_IPTABLES-SAVE|114:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT +REC|PVE1_IPTABLES-SAVE|115:-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw" +PVE1_IP6TABLES-SAVE_LINE_COUNT=267 +PVE1_IP6TABLES-SAVE_NETBIRD_COUNT=28 +PVE1_IP6TABLES-SAVE_MASQUERADE_COUNT=2 +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1594:102750] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-MSSCLAMP - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-PRE - [0:0] +REC|PVE1_IP6TABLES-SAVE|10:-A PREROUTING -j NETBIRD-RT-PRE +REC|PVE1_IP6TABLES-SAVE|11:-A PREROUTING -i wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd10/0xffffffff +REC|PVE1_IP6TABLES-SAVE|12:-A FORWARD -j NETBIRD-RT-MSSCLAMP +REC|PVE1_IP6TABLES-SAVE|13:-A FORWARD -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|14:-A FORWARD -i wt0 -m conntrack --ctstate DNAT -m mark ! --mark 0x1bd20 -j DROP +REC|PVE1_IP6TABLES-SAVE|15:-A POSTROUTING -o wt0 -m conntrack --ctstate NEW -j CONNMARK --set-xmark 0x1bd11/0xffffffff +REC|PVE1_IP6TABLES-SAVE|16:-A NETBIRD-RT-MSSCLAMP -o wt0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1220 +REC|PVE1_IP6TABLES-SAVE|17:-A NETBIRD-RT-PRE -i wt0 -m set --match-set nb-f4388876-v6 src -m addrtype --dst-type LOCAL -j MARK --set-xmark 0x1bd20/0xffffffff +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-NAT - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-RDR - [0:0] +REC|PVE1_IP6TABLES-SAVE|28:-A PREROUTING -j NETBIRD-RT-RDR +REC|PVE1_IP6TABLES-SAVE|29:-A POSTROUTING -j NETBIRD-RT-NAT +REC|PVE1_IP6TABLES-SAVE|30:-A NETBIRD-RT-NAT ! -o lo -m mark --mark 0x1bd21 -j MASQUERADE +REC|PVE1_IP6TABLES-SAVE|31:-A NETBIRD-RT-NAT -o wt0 -m mark --mark 0x1bd22 -j MASQUERADE +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDORWARD ACCEPT [1125:72536] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-ACL-INPUT - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-IN - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDNETBIRD-RT-FWD-OUT - [0:0] +REC|PVE1_IP6TABLES-SAVE|IPV6_REDACTEDPVEFW-FORWARD - [0:0] +REC|PVE1_IP6TABLES-SAVE|72:-A INPUT -i wt0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|73:-A INPUT -i wt0 -j NETBIRD-ACL-INPUT +REC|PVE1_IP6TABLES-SAVE|74:-A INPUT -i wt0 -j DROP +REC|PVE1_IP6TABLES-SAVE|76:-A FORWARD -i wt0 -j NETBIRD-RT-FWD-IN +REC|PVE1_IP6TABLES-SAVE|77:-A FORWARD -m mark --mark 0x1bd20 -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|78:-A FORWARD -o wt0 -j NETBIRD-RT-FWD-OUT +REC|PVE1_IP6TABLES-SAVE|79:-A FORWARD -i wt0 -j DROP +REC|PVE1_IP6TABLES-SAVE|80:-A FORWARD -j PVEFW-FORWARD +REC|PVE1_IP6TABLES-SAVE|82:-A NETBIRD-ACL-INPUT -m set --match-set nb-f4388876-v6 src -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|83:-A NETBIRD-RT-FWD-IN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|84:-A NETBIRD-RT-FWD-OUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|101:-A PVEFW-FORWARD -m conntrack --ctstate INVALID -j DROP +REC|PVE1_IP6TABLES-SAVE|102:-A PVEFW-FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +REC|PVE1_IP6TABLES-SAVE|103:-A PVEFW-FORWARD -m physdev --physdev-in fwln+ --physdev-is-bridged -j PVEFW-FWBR-IN +REC|PVE1_IP6TABLES-SAVE|104:-A PVEFW-FORWARD -m physdev --physdev-out fwln+ --physdev-is-bridged -j PVEFW-FWBR-OUT +REC|PVE1_IP6TABLES-SAVE|105:-A PVEFW-FORWARD -m comment --comment "PVESIG:qnNexOcGa+y+jebd4dAUqFSp5nw" +REC|COMPARE_NODE_BEGIN|NODE=pve02 +REC|COMPARE_NODE_STDERR_LINES|NODE=pve02|COUNT=0 +REC|COMPARE_NODE_BEGIN|NODE=pve03 +REC|COMPARE_NODE_STDERR_LINES|NODE=pve03|COUNT=0 +REC|PVE1_HTTPS4_FINAL|HOST=www.google.com|RC=0|HTTP=200 +curl: (28) Connection timed out after 5002 milliseconds +REC|PVE1_HTTPS4_FINAL|HOST=api.telegram.org|RC=28|HTTP=000 +DECISION=PASS_PVE01_NETBIRD_FORWARDING_RCA +NEXT_GATE=PVE01_NETBIRD_FORWARDING_REPAIR +TASK_RESULT=PVE01_NETBIRD_FORWARDING_RCA +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-261006-PVE01-NETBIRD-FORWARDING-RCA-99708R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} -Quorum information ------------------- -Date: Tue Oct [PRIVATE_IP] 2026 -Quorum provider: corosync_votequorum -Nodes: 3 -Node ID: [PRIVATE_IP] -Ring ID: 1.172 -Quorate: Yes - -Votequorum information ----------------------- -Expected votes: 3 -Highest expected: 3 -Total votes: 3 -Quorum: 2 -Flags: Quorate - -Membership information ----------------------- - Nodeid Votes Name -[PRIVATE_IP] [PRIVATE_IP].11 (local) -[PRIVATE_IP] [PRIVATE_IP].13 -[PRIVATE_IP] [PRIVATE_IP].12 - -Membership information ----------------------- - Nodeid Votes Name - 1 1 pve01 (local) - 2 1 pve03 - 3 1 pve02 -[{"cpu":[PRIVATE_IP]627176,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/100","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"pvepro-prod","netin":896585,"netout":6332,"node":"pve01","status":"running","template":0,"type":"qemu","uptime":3230,"vmid":100},{"cpu":0,"disk":0,"diskread":0,"diskwrite":0,"id":"qemu/101","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":0,"memhost":0,"name":"pvepro-staging-v1","netin":0,"netout":0,"node":"pve01","status":"stopped","template":0,"type":"qemu","uptime":0,"vmid":101},{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/110","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns1","netin":[PRIVATE_IP],"netout":226927,"node":"pve01","status":"running","template":0,"type":"lxc","uptime":3240,"vmid":110},{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/111","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns2","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"lxc","uptime":42719,"vmid":111},{"cpu":0,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/112","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound1","netin":[PRIVATE_IP],"netout":148774,"node":"pve01","status":"running","template":0,"type":"lxc","uptime":3243,"vmid":112},{"cpu":0,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/113","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound2","netin":[PRIVATE_IP],"netout":780140,"node":"pve02","status":"running","template":0,"type":"lxc","uptime":42722,"vmid":113},{"cpu":[PRIVATE_IP]13856,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"edge-vm","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":19655,"vmid":130},{"cpu":[PRIVATE_IP]003481,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/150","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"snikket","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":3227,"vmid":150},{"cpu":[PRIVATE_IP]1107,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/170","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"core-apps","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":3237,"vmid":170},{"cpu":[PRIVATE_IP]39371,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/171","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"monitoring","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":3234,"vmid":171},{"cpu":[PRIVATE_IP]171084,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/190","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"homelab-ops-worker","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":19672,"vmid":190},{"cpu":[PRIVATE_IP]756092,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/210","maxcpu":2,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"newfi-prod","netin":896177,"netout":70356,"node":"pve01","status":"running","template":0,"type":"qemu","uptime":3224,"vmid":210},{"cpu":0,"disk":0,"diskread":0,"diskwrite":0,"id":"qemu/9130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":0,"memhost":0,"name":"edge-cold-standby","netin":0,"netout":0,"node":"pve02","status":"stopped","template":0,"type":"qemu","uptime":0,"vmid":9130},{"cgroup-mode":2,"cpu":[PRIVATE_IP]86663,"disk":[PRIVATE_IP],"id":"node/pve03","level":"","maxcpu":8,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve03","status":"online","type":"node","uptime":19692},{"cgroup-mode":2,"cpu":[PRIVATE_IP]87485,"disk":[PRIVATE_IP],"id":"node/pve02","level":"","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve02","status":"online","type":"node","uptime":42740},{"cgroup-mode":2,"cpu":[PRIVATE_IP]20911,"disk":[PRIVATE_IP],"id":"node/pve01","level":"","maxcpu":24,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve01","status":"online","type":"node","uptime":3257},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve03/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve02/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve01/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"vztmpl,backup,iso,import","disk":[PRIVATE_IP],"id":"storage/pve03/local","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"vztmpl,backup,iso,import","disk":[PRIVATE_IP],"id":"storage/pve02/local","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"vztmpl,backup,iso,import","disk":[PRIVATE_IP],"id":"storage/pve01/local","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"id":"network/pve03/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve03","status":"ok","type":"network"},{"id":"network/pve02/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve02","status":"ok","type":"network"},{"id":"network/pve01/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve01","status":"ok","type":"network"}] -Name Type Status Total (KiB) Used (KiB) Available (KiB) % -local dir active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 45.91% -local-lvm lvmthin active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 15.88% - UNIT LOAD ACTIVE SUB DESCRIPTION -● homelab-backup-audit.service loaded failed failed Homelab unified backup and DR audit - -Legend: LOAD → Reflects whether the unit definition was properly loaded. - ACTIVE → The high-level unit activation state, i.e. generalization of SUB. - SUB → The low-level unit activation state, values depend on unit type. - -1 loaded units listed. -NEXT LEFT LAST PASSED UNIT ACTIVATES -Tue [PRIVATE_IP] 13:17:41 MSK 38s Tue [PRIVATE_IP] 13:07:41 MSK 9min ago skladchik-reports-monitor-supervisor.timer skladchik-reports-monitor-supervisor.service -Tue [PRIVATE_IP] 13:18:20 MSK 1min 17s Tue [PRIVATE_IP] 13:13:03 MSK 3min 59s ago homelab-health-metrics.timer homelab-health-metrics.service -Tue [PRIVATE_IP] 13:20:02 MSK 2min 59s Tue [PRIVATE_IP] 13:15:02 MSK 2min 0s ago homelab-smartctl-textfile.timer homelab-smartctl-textfile.service -Tue [PRIVATE_IP] 13:20:08 MSK 3min 5s Tue [PRIVATE_IP] 13:15:08 MSK 1min 54s ago netbird-peers-health.timer netbird-peers-health.service -Tue [PRIVATE_IP] 13:22:41 MSK 5min Tue [PRIVATE_IP] 13:07:41 MSK 9min ago prometheus-node-exporter-apt.timer prometheus-node-exporter-apt.service -Tue [PRIVATE_IP] 13:22:41 MSK 5min Tue [PRIVATE_IP] 13:07:41 MSK 9min ago prometheus-node-exporter-nvme.timer prometheus-node-exporter-nvme.service -Tue [PRIVATE_IP] 13:25:08 MSK 8min Tue [PRIVATE_IP] 13:10:08 MSK 6min ago homelab-disk-space-health.timer homelab-disk-space-health.service -Tue [PRIVATE_IP] 13:25:08 MSK 8min Tue [PRIVATE_IP] 13:10:08 MSK 6min ago homelab-pve03-staging-capacity-health.timer homelab-pve03-staging-capacity-health.service -Tue [PRIVATE_IP] 13:29:21 MSK 12min Tue [PRIVATE_IP] 13:14:01 MSK 3min 1s ago homelab-alertmanager-backup-health.timer homelab-alertmanager-backup-health.service -Tue [PRIVATE_IP] 13:30:00 MSK 12min Tue [PRIVATE_IP] 11:30:02 MSK - homelab-app-cloud-quorum-queue.timer homelab-app-cloud-quorum-queue.service -Tue [PRIVATE_IP] 13:30:00 MSK 12min Tue [PRIVATE_IP] 13:15:02 MSK 2min 0s ago homelab-incident-journal.timer homelab-incident-journal.service -Tue [PRIVATE_IP] 13:30:10 MSK 13min Tue [PRIVATE_IP] 13:16:18 MSK 44s ago homelab-forum-snuffleupagus-health.timer homelab-forum-snuffleupagus-health.service -Tue [PRIVATE_IP] 13:30:17 MSK 13min Tue [PRIVATE_IP] 13:15:27 MSK 1min 35s ago homelab-external-probe-vps-health.timer homelab-external-probe-vps-health.service -Tue [PRIVATE_IP] 13:31:23 MSK 14min Tue [PRIVATE_IP] 13:15:08 MSK 1min 54s ago homelab-duty-admin-v2.timer homelab-duty-admin-v2.service -Tue [PRIVATE_IP] 13:34:18 MSK 17min Tue [PRIVATE_IP] 13:04:08 MSK 12min ago homelab-mkdocs-auto-refresh.timer homelab-mkdocs-auto-refresh.service -Tue [PRIVATE_IP] 13:36:36 MSK 19min Tue [PRIVATE_IP] 13:06:47 MSK 10min ago homelab-backup-audit.timer homelab-backup-audit.service -Tue [PRIVATE_IP] 13:41:59 MSK 24min Tue [PRIVATE_IP] 13:07:39 MSK 9min ago homelab-reference-refresh.timer homelab-reference-refresh.service -Tue [PRIVATE_IP] 14:26:34 MSK 1h 9min - - homelab-mailru-trash-gc.timer homelab-mailru-trash-gc.service -Tue [PRIVATE_IP] 18:25:39 MSK 5h 8min Tue [PRIVATE_IP] 12:25:39 MSK 51min ago homelab-vps-identity-audit.timer homelab-vps-identity-audit.service -Tue [PRIVATE_IP] 19:00:44 MSK 5h 43min Tue [PRIVATE_IP] 12:59:49 MSK 17min ago homelab-evidence-root.timer homelab-evidence-root.service -Wed [PRIVATE_IP] 00:00:00 MSK 10h Tue [PRIVATE_IP] 00:00:07 MSK - dpkg-db-backup.timer dpkg-db-backup.service -Wed [PRIVATE_IP] 00:02:15 MSK 10h Tue [PRIVATE_IP] 00:18:22 MSK - homelab-docker-health.timer homelab-docker-health.service -Wed [PRIVATE_IP] 00:03:41 MSK 10h Tue [PRIVATE_IP] 00:00:41 MSK - homelab-storage-capacity.timer homelab-storage-capacity.service -Wed [PRIVATE_IP] 00:12:50 MSK 10h Tue [PRIVATE_IP] 00:08:32 MSK - homelab-quality-gate.timer homelab-quality-gate.service -Wed [PRIVATE_IP] 00:16:47 MSK 10h Tue [PRIVATE_IP] 00:09:12 MSK - homelab-evidence-catalog.timer homelab-evidence-catalog.service -Wed [PRIVATE_IP] 00:19:25 MSK 11h Tue [PRIVATE_IP] 00:14:16 MSK - logrotate.timer logrotate.service -Wed [PRIVATE_IP] 02:00:01 MSK 12h Tue [PRIVATE_IP] 05:10:32 MSK - pve-daily-update.timer pve-daily-update.service -Wed [PRIVATE_IP] 02:49:03 MSK 13h Tue [PRIVATE_IP] 11:55:26 MSK - apt-daily.timer apt-daily.service -Wed [PRIVATE_IP] 03:25:19 MSK 14h - - homelab-backup-retention-gc.timer homelab-backup-retention-gc.service -Wed [PRIVATE_IP] 06:44:48 MSK 17h Tue [PRIVATE_IP] 06:30:58 MSK - apt-daily-upgrade.timer apt-daily-upgrade.service -Wed [PRIVATE_IP] 07:15:44 MSK 17h Tue [PRIVATE_IP] 07:00:44 MSK - homelab-drift-check.timer homelab-drift-check.service -Wed [PRIVATE_IP] 07:39:53 MSK 18h Tue [PRIVATE_IP] 07:36:12 MSK - homelab-service-registry-check.timer homelab-service-registry-check.service -Wed [PRIVATE_IP] 07:43:47 MSK 18h Tue [PRIVATE_IP] 07:51:16 MSK - homelab-alerting-health.timer homelab-alerting-health.service -Wed [PRIVATE_IP] 07:44:45 MSK 18h Tue [PRIVATE_IP] 07:48:11 MSK - homelab-runbook-generate.timer homelab-runbook-generate.service -Wed [PRIVATE_IP] 07:53:04 MSK 18h Tue [PRIVATE_IP] 07:46:32 MSK - homelab-dependency-map-check.timer homelab-dependency-map-check.service -Wed [PRIVATE_IP] 07:54:17 MSK 18h Tue [PRIVATE_IP] 04:46:58 MSK - man-db.timer man-db.service -Wed [PRIVATE_IP] 08:02:12 MSK 18h Tue [PRIVATE_IP] 08:01:29 MSK - homelab-duty-admin-report.timer homelab-duty-admin-report.service -Wed [PRIVATE_IP] 08:07:50 MSK 18h Tue [PRIVATE_IP] 08:07:42 MSK - homelab-desired-state-sync.timer homelab-desired-state-sync.service -Wed [PRIVATE_IP] 08:16:39 MSK 18h Tue [PRIVATE_IP] 08:12:39 MSK - homelab-kuma-monitor-policy.timer homelab-kuma-monitor-policy.service -Wed [PRIVATE_IP] 08:16:39 MSK 18h Tue [PRIVATE_IP] 08:19:58 MSK - homelab-final-readiness-gate.timer homelab-final-readiness-gate.service -Wed [PRIVATE_IP] 08:18:51 MSK 19h Tue [PRIVATE_IP] 08:10:49 MSK - homelab-overall-health.timer homelab-overall-health.service -Wed [PRIVATE_IP] 08:29:18 MSK 19h Tue [PRIVATE_IP] 08:27:32 MSK - homelab-capacity-risk.timer homelab-capacity-risk.service -Wed [PRIVATE_IP] 08:38:08 MSK 19h Tue [PRIVATE_IP] 08:41:34 MSK - homelab-secret-exposure-guard.timer homelab-secret-exposure-guard.service -Wed [PRIVATE_IP] 08:47:56 MSK 19h Tue [PRIVATE_IP] 08:37:42 MSK - homelab-cluster-passport.timer homelab-cluster-passport.service -Wed [PRIVATE_IP] 08:56:25 MSK 19h Tue [PRIVATE_IP] 08:55:46 MSK - homelab-golden-state-index.timer homelab-golden-state-index.service -Wed [PRIVATE_IP] 12:37:37 MSK 23h Tue [PRIVATE_IP] 12:37:37 MSK 39min ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service -Sun [PRIVATE_IP] 03:10:12 MSK 4 days Sun [PRIVATE_IP] 03:10:12 MSK - xfs_scrub_all.timer xfs_scrub_all.service -Sun [PRIVATE_IP] 03:10:18 MSK 4 days Sun [PRIVATE_IP] 03:10:58 MSK - e2scrub_all.timer e2scrub_all.service -Sun [PRIVATE_IP] 06:49:57 MSK 4 days - - homelab-rotating-boot-drill.timer homelab-rotating-boot-drill.service -Mon [PRIVATE_IP] 00:02:32 MSK 5 days Mon [PRIVATE_IP] 00:06:16 MSK - homelab-secret-sanity.timer homelab-secret-sanity.service -Mon [PRIVATE_IP] 01:32:58 MSK 5 days Mon [PRIVATE_IP] 00:02:16 MSK - fstrim.timer fstrim.service -- - Tue [PRIVATE_IP] 13:16:03 MSK 59s ago homelab-backup-v2.timer homelab-backup-v2.service -- - Tue [PRIVATE_IP] 13:17:02 MSK 18ms ago homelab-router-watchdog.timer homelab-router-watchdog.service -- - - - prometheus-node-exporter-ipmitool-sensor.timer prometheus-node-exporter-ipmitool-sensor.service -- - - - prometheus-node-exporter-mellanox-hca-temp.timer prometheus-node-exporter-mellanox-hca-temp.service -- - - - prometheus-node-exporter-smartmon.timer prometheus-node-exporter-smartmon.service - -56 timers listed. -RUNTIME_MANIFEST_ID=df[PRIVATE_IP]ac9b5abd[PRIVATE_IP]b[PRIVATE_IP]d89496fb2bde[PRIVATE_IP] -EXPERIMENT_ID=5462ee[PRIVATE_IP]ebe[PRIVATE_IP]feb2ad[PRIVATE_IP]1ad87bbac0b8108 -COLLECTION_START_AT=[PRIVATE_IP]T[PRIVATE_IP]:00 -FIRST_COMPLETE_D1_CLOSE=[PRIVATE_IP]T[PRIVATE_IP]:00 -PRODUCTION_LAUNCH_ALLOWED=False -EXECUTION_AUTHORITY=False -RISK_AUTHORITY=False -STAGE_A_HEALTH=AWAITING_PRIMARY_FINALITY -FORENSIC_PREVIOUS_EPOCH_PRESERVED=YES - -## NEWFI_TASK6_AUTH_CHECKPOINT_V[PRIVATE_IP] -- Scope: historical accepted AUTH test, not a current SMTP connection test. -- Newfi approved SMTP account/sender: aleisaev@yandex.ru. -- Endpoint used by accepted test: smtp.yandex.ru:465 with certificate verification; single PLAIN initial response accepted with code 235. -- Evidence: incident ledger ### NEWFI_TASK6_YANDEX_AUTH_V2_OBSERVATION and ### NEWFI_TASK6_AUTH_PROOF_CLOSE_V1. -- No password file written, no application configuration changed, no mail sent by the accepted AUTH test. -- Persistent transport installation and application delivery are not proven by this checkpoint. Task6 is not complete. -- AUTH challenge and missing-file incidents closed; launch/session incident remains OPEN with original cause unproven. -- This update does not change VM211, VM160, routing, board state or Git. -- Other incidents and infrastructure health were not assessed. - - -## NEWFI_PRIVATE_STRUCTURE92_WRONG_MARKER_SCOPE_[PRIVATE_IP] CLOSURE -- Status: CLOSED -- RCA: NEWFI92 inspected the pve01 NEWFI90 attempt marker, which had not been finalized because the outer shell exited immediately after the guest returned RC3 following its successful rollback. The guest marker contained the true final rollback state. -- Correction: NEWFI93 required both the guest FINISHED/ROLLED_BACK record and a fresh exact demo-state readback before reconciling the outer NEWFI90 marker. NEWFI92 itself never reserved an attempt or mutated state. - - -## NEWFI_PRIVATE_NEWFI95_NESTED_TRIPLE_QUOTE_PARSE_[PRIVATE_IP] -- Status: OPEN -- Command: NEWFI95 -- Symptom: after the content-structure precheck passed, the pve03 Python wrapper failed to parse at the PHP line beginning with $root. No Portal discovery or application mutation was reached. -- RCA: an outer raw triple-single-quoted guest Python payload contained an inner raw triple-single-quoted PHP payload. The inner delimiter terminated the outer Python string, causing PHP source to be parsed as Python. -- Safety: NEWFI95 was read-only, created no attempt marker, and did not reach the intended nested guest execution. Do not replay NEWFI95. - - -## NEWFI_PRIVATE_NEWFI95_NESTED_TRIPLE_QUOTE_PARSE_[PRIVATE_IP] CLOSURE -- Status: CLOSED -- RCA: an inner triple-single-quoted PHP literal terminated the outer triple-single-quoted Python guest payload in NEWFI95. The wrapper therefore failed parsing before the intended Portal discovery executed. -- Correction: NEWFI96 removed the nested Python payload layer entirely and passed one Python program directly to VM211 through qm guest exec stdin. The read-only Portal contract completed with QGA exit 0 and the implementation worktree remained unchanged. OUTPUT_END CHAT_OUTPUT_END