runtime: publish NEWFI-260908-A-STAGINGEDGE-VPS-ACCESSPATH-DISCOVERY10
This commit is contained in:
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"channel": "homelab-runtime",
|
||||
"command_id": "NEWFI-260908-A-STAGINGEDGE-VPS-ACCESSPATH-DISCOVERY10",
|
||||
"status": "OK",
|
||||
"rc": 0,
|
||||
"host": "pve01",
|
||||
"mode": "read-only",
|
||||
"component": "newfi-stagingedge-vps-accesspath-discovery-readonly",
|
||||
"started_at_utc": "2026-09-08T12:37:36Z",
|
||||
"finished_at_utc": "2026-09-08T12:37:37Z",
|
||||
"reference_register_checked": true,
|
||||
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
|
||||
"error_register_checked": true,
|
||||
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
|
||||
"command_sha256": "5309a444e53ed4c78eed6a3306a25ff9563bfd9c11e9df3cf6008b63552216b3",
|
||||
"duplicate_failed_command_blocked": false,
|
||||
"block_reason": null,
|
||||
"execution_started": true,
|
||||
"change_declared": false,
|
||||
"result_contract_valid": true,
|
||||
"result_contract_status": null,
|
||||
"result_contract_error": null,
|
||||
"command_rc": 0,
|
||||
"changes_made": false,
|
||||
"rollback_started": false,
|
||||
"rollback_restored": null,
|
||||
"mutation_outcome": "NO_MUTATION",
|
||||
"sanitized": true,
|
||||
"secrets_included": false,
|
||||
"private_addresses_included": false,
|
||||
"raw_evidence_retained_locally": true,
|
||||
"raw_evidence_sha256": "dc18579fe0405cd572abe1b4cd0f6a1548c65529697d0332db889836e8d35140",
|
||||
"sanitized_output_sha256": "dc18579fe0405cd572abe1b4cd0f6a1548c65529697d0332db889836e8d35140",
|
||||
"output_truncated_in_json": false,
|
||||
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
|
||||
"output": "DISCOVERY10_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-VPS-ACCESSPATH-DISCOVERY10\nMODE=read-only\nMUTATIONS_PERFORMED=NO\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nPUBLIC_KEYSCAN_RC=0\nPUBLIC_KEYSCAN_KEY_COUNT=3\nPUBLIC_KEYSCAN_KEY_HASHES={\"ecdsa-sha2-nistp256\":\"7aeeeaf6fb7414ec7031405eaa85162f890f550b628ff3bfc26c759586b2604d\",\"ssh-ed25519\":\"476dae5d1f1c18a4296021f038a26ca9c5999f66fcd3bd517e9c08173890a93f\",\"ssh-rsa\":\"ae83af33f09b6994a50a607056769a9946616a4c7bec6cf503d18dc00f9839b1\"}\nPUBLIC_KNOWN_HOST_RC=1\nPUBLIC_KNOWN_HOST_KEY_COUNT=0\nPUBLIC_KNOWN_HOST_ROWS=[]\nPUBLIC_EXACT_KNOWN_HOST_MATCH=false\nPUBLIC_EXACT_KNOWN_HOST_ALGORITHMS=NONE\nPUBLIC_KEY_MATCHES_ANY_KNOWN_HOST_COUNT=0\nPUBLIC_KEY_MATCHES_ANY_KNOWN_HOST_META=[]\nSSH_CONFIG_RELEVANT_BLOCK_COUNT=0\nSSH_CONFIG_RELEVANT_BLOCKS=[]\nOPERATIONAL_SSH_USER_COUNT=0\nOPERATIONAL_SSH_USERS=NONE\nOPERATIONAL_SSH_USER_REFS=[]\nVPS_TRUST_SCHEMA_REFS=[{\"path\":\"/usr/local/sbin/homelab-external-probe-vps\",\"line\":12,\"text\":\"grep -q \\\"TRUSTED_NETBIRD_IDENTITY=edge-vm\\\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))\"},{\"path\":\"/usr/local/sbin/homelab-external-probe-vps\",\"line\":13,\"text\":\"grep -q \\\"PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH\\\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))\"},{\"path\":\"/usr/local/sbin/homelab-external-probe-vps\",\"line\":41,\"text\":\"public_vps_decision=REJECTED_HOSTKEY_MISMATCH\"},{\"path\":\"/usr/local/sbin/homelab-external-probe-vps\",\"line\":51,\"text\":\"echo \\\"STATUS=$STATUS TS=$TS TYPE=external-probe-vps BAD=$BAD WARN=$WARN MODE=STRATEGY_ONLY_NO_INDEPENDENT_RUNNER DEPLOYED=NO DEPLOY_DECISION=NO_DEPLOY VPS_TRUST=edge_vm_trusted_public_vps_rejected BACKUP_HOSTKEYS=not_used_public_vps_rejected PVE01_PUBLIC_SMOKE_BAD=$PVE01_PUBLIC_SMOKE_BAD INDEPENDENT_RUNNER=missing INDEPENDENT_RUNNER_AVAILABLE=no TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH REPORT=$REPOR\"}]\nTRUST_FILE_MARKER_COUNT=2\nTRUST_FILE_MARKERS=[{\"file\":\"/var/lib/homelab-health/netbird-vps-trust-clean-seal.txt\",\"line\":1,\"text\":\"STATUS=OK TS=2026-07-07T15:55:43Z TYPE=netbird-vps-trust-clean-seal BAD=0 WARN=0 MODE=CLEAN_SEAL_NO_AWK_TAIL TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH INDEPENDENT_RUNNER_AVAILABLE=no DEPLOY_DECISION=NO_DEPLOY KNOWN_HOSTS_CHANGED=no PRIVATE_KEYS_READ=no PROBE_DEPLOYED=no REPORT=/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md\"},{\"file\":\"/var/lib/homelab-health/netbird-vps-trust-closure.txt\",\"line\":1,\"text\":\"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md\"}]\nTRUST_EDGEVM_TEXT_SIGNAL=true\nHISTORICAL_PUBLIC_HOSTKEY_MISMATCH_SIGNAL=true\nSAFE_EXISTING_SSH_TARGET_FOUND=false\nSAFE_EXISTING_SSH_USER=UNRESOLVED\nSAFE_EXISTING_SSH_REASON=NONE\nREMOTE_INSPECTION_RAN=false\nREMOTE_INSPECTION_RC=SKIPPED\nREMOTE_NGINX_FILTERED_LINE_COUNT=0\nDISCOVERY10_DECISION=HOLD_PUBLIC_VPS_ACCESS_PATH_NOT_YET_TRUSTED_HISTORICAL_HOSTKEY_MISMATCH\nDISCOVERY10_END=true\n"
|
||||
}
|
||||
@@ -0,0 +1,69 @@
|
||||
CHAT_OUTPUT_BEGIN
|
||||
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-VPS-ACCESSPATH-DISCOVERY10
|
||||
STATUS=OK
|
||||
RC=0
|
||||
HOST=pve01
|
||||
MODE=read-only
|
||||
COMPONENT=newfi-stagingedge-vps-accesspath-discovery-readonly
|
||||
REFERENCE_REGISTER_CHECK=OK
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
COMMAND_SHA256=5309a444e53ed4c78eed6a3306a25ff9563bfd9c11e9df3cf6008b63552216b3
|
||||
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||
EXECUTION_STARTED=true
|
||||
CHANGE_DECLARED=false
|
||||
RESULT_CONTRACT_VALID=true
|
||||
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
|
||||
RESULT_CONTRACT_ERROR=NONE
|
||||
COMMAND_RC=0
|
||||
CHANGES_MADE=false
|
||||
ROLLBACK_STARTED=false
|
||||
ROLLBACK_RESTORED=null
|
||||
MUTATION_OUTCOME=NO_MUTATION
|
||||
SANITIZED=yes
|
||||
SECRETS_INCLUDED=no
|
||||
PRIVATE_ADDRESSES_INCLUDED=no
|
||||
RAW_EVIDENCE_SHA256=dc18579fe0405cd572abe1b4cd0f6a1548c65529697d0332db889836e8d35140
|
||||
SANITIZED_OUTPUT_SHA256=dc18579fe0405cd572abe1b4cd0f6a1548c65529697d0332db889836e8d35140
|
||||
OUTPUT_BEGIN
|
||||
DISCOVERY10_BEGIN=true
|
||||
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-VPS-ACCESSPATH-DISCOVERY10
|
||||
MODE=read-only
|
||||
MUTATIONS_PERFORMED=NO
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
REFERENCE_CHECK=OK
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
|
||||
PUBLIC_KEYSCAN_RC=0
|
||||
PUBLIC_KEYSCAN_KEY_COUNT=3
|
||||
PUBLIC_KEYSCAN_KEY_HASHES={"ecdsa-sha2-nistp256":"7aeeeaf6fb7414ec7031405eaa85162f890f550b628ff3bfc26c759586b2604d","ssh-ed25519":"476dae5d1f1c18a4296021f038a26ca9c5999f66fcd3bd517e9c08173890a93f","ssh-rsa":"ae83af33f09b6994a50a607056769a9946616a4c7bec6cf503d18dc00f9839b1"}
|
||||
PUBLIC_KNOWN_HOST_RC=1
|
||||
PUBLIC_KNOWN_HOST_KEY_COUNT=0
|
||||
PUBLIC_KNOWN_HOST_ROWS=[]
|
||||
PUBLIC_EXACT_KNOWN_HOST_MATCH=false
|
||||
PUBLIC_EXACT_KNOWN_HOST_ALGORITHMS=NONE
|
||||
PUBLIC_KEY_MATCHES_ANY_KNOWN_HOST_COUNT=0
|
||||
PUBLIC_KEY_MATCHES_ANY_KNOWN_HOST_META=[]
|
||||
SSH_CONFIG_RELEVANT_BLOCK_COUNT=0
|
||||
SSH_CONFIG_RELEVANT_BLOCKS=[]
|
||||
OPERATIONAL_SSH_USER_COUNT=0
|
||||
OPERATIONAL_SSH_USERS=NONE
|
||||
OPERATIONAL_SSH_USER_REFS=[]
|
||||
VPS_TRUST_SCHEMA_REFS=[{"path":"/usr/local/sbin/homelab-external-probe-vps","line":12,"text":"grep -q \"TRUSTED_NETBIRD_IDENTITY=edge-vm\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":13,"text":"grep -q \"PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":41,"text":"public_vps_decision=REJECTED_HOSTKEY_MISMATCH"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":51,"text":"echo \"STATUS=$STATUS TS=$TS TYPE=external-probe-vps BAD=$BAD WARN=$WARN MODE=STRATEGY_ONLY_NO_INDEPENDENT_RUNNER DEPLOYED=NO DEPLOY_DECISION=NO_DEPLOY VPS_TRUST=edge_vm_trusted_public_vps_rejected BACKUP_HOSTKEYS=not_used_public_vps_rejected PVE01_PUBLIC_SMOKE_BAD=$PVE01_PUBLIC_SMOKE_BAD INDEPENDENT_RUNNER=missing INDEPENDENT_RUNNER_AVAILABLE=no TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH REPORT=$REPOR"}]
|
||||
TRUST_FILE_MARKER_COUNT=2
|
||||
TRUST_FILE_MARKERS=[{"file":"/var/lib/homelab-health/netbird-vps-trust-clean-seal.txt","line":1,"text":"STATUS=OK TS=2026-07-07T15:55:43Z TYPE=netbird-vps-trust-clean-seal BAD=0 WARN=0 MODE=CLEAN_SEAL_NO_AWK_TAIL TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH INDEPENDENT_RUNNER_AVAILABLE=no DEPLOY_DECISION=NO_DEPLOY KNOWN_HOSTS_CHANGED=no PRIVATE_KEYS_READ=no PROBE_DEPLOYED=no REPORT=/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md"},{"file":"/var/lib/homelab-health/netbird-vps-trust-closure.txt","line":1,"text":"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md"}]
|
||||
TRUST_EDGEVM_TEXT_SIGNAL=true
|
||||
HISTORICAL_PUBLIC_HOSTKEY_MISMATCH_SIGNAL=true
|
||||
SAFE_EXISTING_SSH_TARGET_FOUND=false
|
||||
SAFE_EXISTING_SSH_USER=UNRESOLVED
|
||||
SAFE_EXISTING_SSH_REASON=NONE
|
||||
REMOTE_INSPECTION_RAN=false
|
||||
REMOTE_INSPECTION_RC=SKIPPED
|
||||
REMOTE_NGINX_FILTERED_LINE_COUNT=0
|
||||
DISCOVERY10_DECISION=HOLD_PUBLIC_VPS_ACCESS_PATH_NOT_YET_TRUSTED_HISTORICAL_HOSTKEY_MISMATCH
|
||||
DISCOVERY10_END=true
|
||||
|
||||
OUTPUT_END
|
||||
CHAT_OUTPUT_END
|
||||
+8
-8
@@ -1,19 +1,19 @@
|
||||
{
|
||||
"schema_version": 1,
|
||||
"channel": "homelab-runtime",
|
||||
"command_id": "NEWFI-260908-A-STAGINGEDGE-NETBIRD-FRONTEND-DISCOVERY9",
|
||||
"command_id": "NEWFI-260908-A-STAGINGEDGE-VPS-ACCESSPATH-DISCOVERY10",
|
||||
"status": "OK",
|
||||
"rc": 0,
|
||||
"host": "pve01",
|
||||
"mode": "read-only",
|
||||
"component": "newfi-stagingedge-netbird-frontend-discovery-readonly",
|
||||
"started_at_utc": "2026-09-08T12:33:26Z",
|
||||
"finished_at_utc": "2026-09-08T12:33:27Z",
|
||||
"component": "newfi-stagingedge-vps-accesspath-discovery-readonly",
|
||||
"started_at_utc": "2026-09-08T12:37:36Z",
|
||||
"finished_at_utc": "2026-09-08T12:37:37Z",
|
||||
"reference_register_checked": true,
|
||||
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
|
||||
"error_register_checked": true,
|
||||
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
|
||||
"command_sha256": "8ed946e9c0585fcb0ba0d3b4f27369e152ee09d932f90eff4c178bb2ac5133eb",
|
||||
"command_sha256": "5309a444e53ed4c78eed6a3306a25ff9563bfd9c11e9df3cf6008b63552216b3",
|
||||
"duplicate_failed_command_blocked": false,
|
||||
"block_reason": null,
|
||||
"execution_started": true,
|
||||
@@ -30,9 +30,9 @@
|
||||
"secrets_included": false,
|
||||
"private_addresses_included": false,
|
||||
"raw_evidence_retained_locally": true,
|
||||
"raw_evidence_sha256": "261367c436589c7c8e27fa8636a29ce17e81ca67c69bbbafbdb2511ad653aa3b",
|
||||
"sanitized_output_sha256": "261367c436589c7c8e27fa8636a29ce17e81ca67c69bbbafbdb2511ad653aa3b",
|
||||
"raw_evidence_sha256": "dc18579fe0405cd572abe1b4cd0f6a1548c65529697d0332db889836e8d35140",
|
||||
"sanitized_output_sha256": "dc18579fe0405cd572abe1b4cd0f6a1548c65529697d0332db889836e8d35140",
|
||||
"output_truncated_in_json": false,
|
||||
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
|
||||
"output": "DISCOVERY9_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-NETBIRD-FRONTEND-DISCOVERY9\nMODE=read-only\nMUTATIONS_PERFORMED=NO\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTRUST_SEAL_PRESENT=true\nTRUST_SEAL_SHA256=092eaa2c4f3a5f623e9440135d36e6bae7d8ae46a03d380d14a5e95657812b61\nTRUST_SEAL_SELECTED_JSON={}\nTRUST_CLOSURE_PRESENT=true\nTRUST_CLOSURE_SHA256=6db8ee1ffbd2c371959917cac5ded56af3ec1829b01bd9c190e3334d6593a4a0\nTRUST_CLOSURE_SELECTED_JSON={}\nTRUSTED_EDGEVM_IDENTITY=false\nNETBIRD_STATUS_JSON_RC=0\nNETBIRD_STATUS_DETAIL_RC=0\nTRUST_SEAL_OVERLAY_IP_COUNT=1\nEDGEVM_CURRENT_OVERLAY_IP_COUNT=1\nEDGEVM_CURRENT_OVERLAY_IP_UNIQUE=true\nSSH_REFERENCE_SCAN_FILES=6260\nEXPLICIT_EDGE_SSH_REFERENCE_COUNT=0\nEXPLICIT_EDGE_SSH_REFERENCE_META=[]\nEXPLICIT_EDGE_SSH_USER_COUNT=0\nEXPLICIT_EDGE_SSH_USER=UNRESOLVED\nPRIVATE_KNOWN_HOST_RC=0\nPRIVATE_KNOWN_HOST_KEY_COUNT=1\nPRIVATE_KNOWN_HOST_KEY_HASHES={\"ssh-ed25519\":\"0e70c47cbb89d3651089d1c7b16e31a69def06234236cd16ccb801fdeae7b0d1\"}\nPRIVATE_KEYSCAN_RC=0\nPRIVATE_KEYSCAN_KEY_COUNT=3\nPRIVATE_KEYSCAN_KEY_HASHES={\"ecdsa-sha2-nistp256\":\"2408a3334d153e2aca1071a5bdc7404a479db925bf6fabe31a33b1d24103243a\",\"ssh-ed25519\":\"0e70c47cbb89d3651089d1c7b16e31a69def06234236cd16ccb801fdeae7b0d1\",\"ssh-rsa\":\"dd7e969c71686f792e368eb8ea3218ba287c9bd8d929b526c9f9411de2f1e338\"}\nPRIVATE_TRUSTED_HOSTKEY_MATCH=true\nPRIVATE_TRUSTED_HOSTKEY_ALGORITHMS=ssh-ed25519\nPUBLIC_KEYSCAN_RC=0\nPUBLIC_KEYSCAN_KEY_COUNT=3\nPUBLIC_KEYSCAN_KEY_HASHES={\"ecdsa-sha2-nistp256\":\"7aeeeaf6fb7414ec7031405eaa85162f890f550b628ff3bfc26c759586b2604d\",\"ssh-ed25519\":\"476dae5d1f1c18a4296021f038a26ca9c5999f66fcd3bd517e9c08173890a93f\",\"ssh-rsa\":\"ae83af33f09b6994a50a607056769a9946616a4c7bec6cf503d18dc00f9839b1\"}\nPUBLIC_TO_EDGEVM_HOSTKEY_MATCH=false\nPUBLIC_TO_EDGEVM_MATCHED_ALGORITHMS=NONE\nSAFE_REMOTE_SSH_GATE=false\nSTAGING_DNS_RC=2\nSTAGING_DNS_RESOLVES=false\nSTAGING_DNS_PUBLIC_IP_MATCH=false\nPRODUCTION_DNS_RC=0\nPRODUCTION_DNS_RESOLVES=true\nPRODUCTION_DNS_PUBLIC_IP_MATCH=true\nREMOTE_INSPECTION_RAN=false\nREMOTE_INSPECTION_RC=SKIPPED\nREMOTE_NGINX_FILTERED_LINE_COUNT=0\nDISCOVERY9_DECISION=HOLD_EDGEVM_TRUST_IDENTITY_NOT_PROVEN\nDISCOVERY9_END=true\n"
|
||||
"output": "DISCOVERY10_BEGIN=true\nCOMMAND_ID=NEWFI-260908-A-STAGINGEDGE-VPS-ACCESSPATH-DISCOVERY10\nMODE=read-only\nMUTATIONS_PERFORMED=NO\nERROR_REGISTER_CHECK=OK\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nREFERENCE_CHECK=OK\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nPUBLIC_KEYSCAN_RC=0\nPUBLIC_KEYSCAN_KEY_COUNT=3\nPUBLIC_KEYSCAN_KEY_HASHES={\"ecdsa-sha2-nistp256\":\"7aeeeaf6fb7414ec7031405eaa85162f890f550b628ff3bfc26c759586b2604d\",\"ssh-ed25519\":\"476dae5d1f1c18a4296021f038a26ca9c5999f66fcd3bd517e9c08173890a93f\",\"ssh-rsa\":\"ae83af33f09b6994a50a607056769a9946616a4c7bec6cf503d18dc00f9839b1\"}\nPUBLIC_KNOWN_HOST_RC=1\nPUBLIC_KNOWN_HOST_KEY_COUNT=0\nPUBLIC_KNOWN_HOST_ROWS=[]\nPUBLIC_EXACT_KNOWN_HOST_MATCH=false\nPUBLIC_EXACT_KNOWN_HOST_ALGORITHMS=NONE\nPUBLIC_KEY_MATCHES_ANY_KNOWN_HOST_COUNT=0\nPUBLIC_KEY_MATCHES_ANY_KNOWN_HOST_META=[]\nSSH_CONFIG_RELEVANT_BLOCK_COUNT=0\nSSH_CONFIG_RELEVANT_BLOCKS=[]\nOPERATIONAL_SSH_USER_COUNT=0\nOPERATIONAL_SSH_USERS=NONE\nOPERATIONAL_SSH_USER_REFS=[]\nVPS_TRUST_SCHEMA_REFS=[{\"path\":\"/usr/local/sbin/homelab-external-probe-vps\",\"line\":12,\"text\":\"grep -q \\\"TRUSTED_NETBIRD_IDENTITY=edge-vm\\\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))\"},{\"path\":\"/usr/local/sbin/homelab-external-probe-vps\",\"line\":13,\"text\":\"grep -q \\\"PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH\\\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))\"},{\"path\":\"/usr/local/sbin/homelab-external-probe-vps\",\"line\":41,\"text\":\"public_vps_decision=REJECTED_HOSTKEY_MISMATCH\"},{\"path\":\"/usr/local/sbin/homelab-external-probe-vps\",\"line\":51,\"text\":\"echo \\\"STATUS=$STATUS TS=$TS TYPE=external-probe-vps BAD=$BAD WARN=$WARN MODE=STRATEGY_ONLY_NO_INDEPENDENT_RUNNER DEPLOYED=NO DEPLOY_DECISION=NO_DEPLOY VPS_TRUST=edge_vm_trusted_public_vps_rejected BACKUP_HOSTKEYS=not_used_public_vps_rejected PVE01_PUBLIC_SMOKE_BAD=$PVE01_PUBLIC_SMOKE_BAD INDEPENDENT_RUNNER=missing INDEPENDENT_RUNNER_AVAILABLE=no TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH REPORT=$REPOR\"}]\nTRUST_FILE_MARKER_COUNT=2\nTRUST_FILE_MARKERS=[{\"file\":\"/var/lib/homelab-health/netbird-vps-trust-clean-seal.txt\",\"line\":1,\"text\":\"STATUS=OK TS=2026-07-07T15:55:43Z TYPE=netbird-vps-trust-clean-seal BAD=0 WARN=0 MODE=CLEAN_SEAL_NO_AWK_TAIL TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH INDEPENDENT_RUNNER_AVAILABLE=no DEPLOY_DECISION=NO_DEPLOY KNOWN_HOSTS_CHANGED=no PRIVATE_KEYS_READ=no PROBE_DEPLOYED=no REPORT=/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md\"},{\"file\":\"/var/lib/homelab-health/netbird-vps-trust-closure.txt\",\"line\":1,\"text\":\"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md\"}]\nTRUST_EDGEVM_TEXT_SIGNAL=true\nHISTORICAL_PUBLIC_HOSTKEY_MISMATCH_SIGNAL=true\nSAFE_EXISTING_SSH_TARGET_FOUND=false\nSAFE_EXISTING_SSH_USER=UNRESOLVED\nSAFE_EXISTING_SSH_REASON=NONE\nREMOTE_INSPECTION_RAN=false\nREMOTE_INSPECTION_RC=SKIPPED\nREMOTE_NGINX_FILTERED_LINE_COUNT=0\nDISCOVERY10_DECISION=HOLD_PUBLIC_VPS_ACCESS_PATH_NOT_YET_TRUSTED_HISTORICAL_HOSTKEY_MISMATCH\nDISCOVERY10_END=true\n"
|
||||
}
|
||||
|
||||
+29
-43
@@ -1,15 +1,15 @@
|
||||
CHAT_OUTPUT_BEGIN
|
||||
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-NETBIRD-FRONTEND-DISCOVERY9
|
||||
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-VPS-ACCESSPATH-DISCOVERY10
|
||||
STATUS=OK
|
||||
RC=0
|
||||
HOST=pve01
|
||||
MODE=read-only
|
||||
COMPONENT=newfi-stagingedge-netbird-frontend-discovery-readonly
|
||||
COMPONENT=newfi-stagingedge-vps-accesspath-discovery-readonly
|
||||
REFERENCE_REGISTER_CHECK=OK
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0
|
||||
COMMAND_SHA256=8ed946e9c0585fcb0ba0d3b4f27369e152ee09d932f90eff4c178bb2ac5133eb
|
||||
COMMAND_SHA256=5309a444e53ed4c78eed6a3306a25ff9563bfd9c11e9df3cf6008b63552216b3
|
||||
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||
EXECUTION_STARTED=true
|
||||
CHANGE_DECLARED=false
|
||||
@@ -24,11 +24,11 @@ MUTATION_OUTCOME=NO_MUTATION
|
||||
SANITIZED=yes
|
||||
SECRETS_INCLUDED=no
|
||||
PRIVATE_ADDRESSES_INCLUDED=no
|
||||
RAW_EVIDENCE_SHA256=261367c436589c7c8e27fa8636a29ce17e81ca67c69bbbafbdb2511ad653aa3b
|
||||
SANITIZED_OUTPUT_SHA256=261367c436589c7c8e27fa8636a29ce17e81ca67c69bbbafbdb2511ad653aa3b
|
||||
RAW_EVIDENCE_SHA256=dc18579fe0405cd572abe1b4cd0f6a1548c65529697d0332db889836e8d35140
|
||||
SANITIZED_OUTPUT_SHA256=dc18579fe0405cd572abe1b4cd0f6a1548c65529697d0332db889836e8d35140
|
||||
OUTPUT_BEGIN
|
||||
DISCOVERY9_BEGIN=true
|
||||
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-NETBIRD-FRONTEND-DISCOVERY9
|
||||
DISCOVERY10_BEGIN=true
|
||||
COMMAND_ID=NEWFI-260908-A-STAGINGEDGE-VPS-ACCESSPATH-DISCOVERY10
|
||||
MODE=read-only
|
||||
MUTATIONS_PERFORMED=NO
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
@@ -36,48 +36,34 @@ ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4
|
||||
REFERENCE_CHECK=OK
|
||||
REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66
|
||||
RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d
|
||||
TRUST_SEAL_PRESENT=true
|
||||
TRUST_SEAL_SHA256=092eaa2c4f3a5f623e9440135d36e6bae7d8ae46a03d380d14a5e95657812b61
|
||||
TRUST_SEAL_SELECTED_JSON={}
|
||||
TRUST_CLOSURE_PRESENT=true
|
||||
TRUST_CLOSURE_SHA256=6db8ee1ffbd2c371959917cac5ded56af3ec1829b01bd9c190e3334d6593a4a0
|
||||
TRUST_CLOSURE_SELECTED_JSON={}
|
||||
TRUSTED_EDGEVM_IDENTITY=false
|
||||
NETBIRD_STATUS_JSON_RC=0
|
||||
NETBIRD_STATUS_DETAIL_RC=0
|
||||
TRUST_SEAL_OVERLAY_IP_COUNT=1
|
||||
EDGEVM_CURRENT_OVERLAY_IP_COUNT=1
|
||||
EDGEVM_CURRENT_OVERLAY_IP_UNIQUE=true
|
||||
SSH_REFERENCE_SCAN_FILES=6260
|
||||
EXPLICIT_EDGE_SSH_REFERENCE_COUNT=0
|
||||
EXPLICIT_EDGE_SSH_REFERENCE_META=[]
|
||||
EXPLICIT_EDGE_SSH_USER_COUNT=0
|
||||
EXPLICIT_EDGE_SSH_USER=UNRESOLVED
|
||||
PRIVATE_KNOWN_HOST_RC=0
|
||||
PRIVATE_KNOWN_HOST_KEY_COUNT=1
|
||||
PRIVATE_KNOWN_HOST_KEY_HASHES={"ssh-ed25519":"0e70c47cbb89d3651089d1c7b16e31a69def06234236cd16ccb801fdeae7b0d1"}
|
||||
PRIVATE_KEYSCAN_RC=0
|
||||
PRIVATE_KEYSCAN_KEY_COUNT=3
|
||||
PRIVATE_KEYSCAN_KEY_HASHES={"ecdsa-sha2-nistp256":"2408a3334d153e2aca1071a5bdc7404a479db925bf6fabe31a33b1d24103243a","ssh-ed25519":"0e70c47cbb89d3651089d1c7b16e31a69def06234236cd16ccb801fdeae7b0d1","ssh-rsa":"dd7e969c71686f792e368eb8ea3218ba287c9bd8d929b526c9f9411de2f1e338"}
|
||||
PRIVATE_TRUSTED_HOSTKEY_MATCH=true
|
||||
PRIVATE_TRUSTED_HOSTKEY_ALGORITHMS=ssh-ed25519
|
||||
PUBLIC_KEYSCAN_RC=0
|
||||
PUBLIC_KEYSCAN_KEY_COUNT=3
|
||||
PUBLIC_KEYSCAN_KEY_HASHES={"ecdsa-sha2-nistp256":"7aeeeaf6fb7414ec7031405eaa85162f890f550b628ff3bfc26c759586b2604d","ssh-ed25519":"476dae5d1f1c18a4296021f038a26ca9c5999f66fcd3bd517e9c08173890a93f","ssh-rsa":"ae83af33f09b6994a50a607056769a9946616a4c7bec6cf503d18dc00f9839b1"}
|
||||
PUBLIC_TO_EDGEVM_HOSTKEY_MATCH=false
|
||||
PUBLIC_TO_EDGEVM_MATCHED_ALGORITHMS=NONE
|
||||
SAFE_REMOTE_SSH_GATE=false
|
||||
STAGING_DNS_RC=2
|
||||
STAGING_DNS_RESOLVES=false
|
||||
STAGING_DNS_PUBLIC_IP_MATCH=false
|
||||
PRODUCTION_DNS_RC=0
|
||||
PRODUCTION_DNS_RESOLVES=true
|
||||
PRODUCTION_DNS_PUBLIC_IP_MATCH=true
|
||||
PUBLIC_KNOWN_HOST_RC=1
|
||||
PUBLIC_KNOWN_HOST_KEY_COUNT=0
|
||||
PUBLIC_KNOWN_HOST_ROWS=[]
|
||||
PUBLIC_EXACT_KNOWN_HOST_MATCH=false
|
||||
PUBLIC_EXACT_KNOWN_HOST_ALGORITHMS=NONE
|
||||
PUBLIC_KEY_MATCHES_ANY_KNOWN_HOST_COUNT=0
|
||||
PUBLIC_KEY_MATCHES_ANY_KNOWN_HOST_META=[]
|
||||
SSH_CONFIG_RELEVANT_BLOCK_COUNT=0
|
||||
SSH_CONFIG_RELEVANT_BLOCKS=[]
|
||||
OPERATIONAL_SSH_USER_COUNT=0
|
||||
OPERATIONAL_SSH_USERS=NONE
|
||||
OPERATIONAL_SSH_USER_REFS=[]
|
||||
VPS_TRUST_SCHEMA_REFS=[{"path":"/usr/local/sbin/homelab-external-probe-vps","line":12,"text":"grep -q \"TRUSTED_NETBIRD_IDENTITY=edge-vm\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":13,"text":"grep -q \"PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH\" /var/lib/homelab-health/netbird-vps-trust-clean-seal.txt 2>/dev/null || BAD=$((BAD+1))"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":41,"text":"public_vps_decision=REJECTED_HOSTKEY_MISMATCH"},{"path":"/usr/local/sbin/homelab-external-probe-vps","line":51,"text":"echo \"STATUS=$STATUS TS=$TS TYPE=external-probe-vps BAD=$BAD WARN=$WARN MODE=STRATEGY_ONLY_NO_INDEPENDENT_RUNNER DEPLOYED=NO DEPLOY_DECISION=NO_DEPLOY VPS_TRUST=edge_vm_trusted_public_vps_rejected BACKUP_HOSTKEYS=not_used_public_vps_rejected PVE01_PUBLIC_SMOKE_BAD=$PVE01_PUBLIC_SMOKE_BAD INDEPENDENT_RUNNER=missing INDEPENDENT_RUNNER_AVAILABLE=no TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH REPORT=$REPOR"}]
|
||||
TRUST_FILE_MARKER_COUNT=2
|
||||
TRUST_FILE_MARKERS=[{"file":"/var/lib/homelab-health/netbird-vps-trust-clean-seal.txt","line":1,"text":"STATUS=OK TS=2026-07-07T15:55:43Z TYPE=netbird-vps-trust-clean-seal BAD=0 WARN=0 MODE=CLEAN_SEAL_NO_AWK_TAIL TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH INDEPENDENT_RUNNER_AVAILABLE=no DEPLOY_DECISION=NO_DEPLOY KNOWN_HOSTS_CHANGED=no PRIVATE_KEYS_READ=no PROBE_DEPLOYED=no REPORT=/var/lib/homelab-netbird-vps-trust/clean-seal-latest.md"},{"file":"/var/lib/homelab-health/netbird-vps-trust-closure.txt","line":1,"text":"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=[PRIVATE_IP] PUBLIC_VPS_IP=188.127.235.6 PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md"}]
|
||||
TRUST_EDGEVM_TEXT_SIGNAL=true
|
||||
HISTORICAL_PUBLIC_HOSTKEY_MISMATCH_SIGNAL=true
|
||||
SAFE_EXISTING_SSH_TARGET_FOUND=false
|
||||
SAFE_EXISTING_SSH_USER=UNRESOLVED
|
||||
SAFE_EXISTING_SSH_REASON=NONE
|
||||
REMOTE_INSPECTION_RAN=false
|
||||
REMOTE_INSPECTION_RC=SKIPPED
|
||||
REMOTE_NGINX_FILTERED_LINE_COUNT=0
|
||||
DISCOVERY9_DECISION=HOLD_EDGEVM_TRUST_IDENTITY_NOT_PROVEN
|
||||
DISCOVERY9_END=true
|
||||
DISCOVERY10_DECISION=HOLD_PUBLIC_VPS_ACCESS_PATH_NOT_YET_TRUSTED_HISTORICAL_HOSTKEY_MISMATCH
|
||||
DISCOVERY10_END=true
|
||||
|
||||
OUTPUT_END
|
||||
CHAT_OUTPUT_END
|
||||
|
||||
Reference in New Issue
Block a user