diff --git a/runtime/history/SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1.json b/runtime/history/SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1.json new file mode 100644 index 00000000..4a6987fa --- /dev/null +++ b/runtime/history/SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1", + "status": "FAIL", + "rc": 53, + "host": "pve01", + "mode": "change", + "component": "forum-captcha", + "started_at_utc": "2026-09-23T22:33:58Z", + "finished_at_utc": "2026-09-23T22:34:09Z", + "reference_register_checked": true, + "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", + "error_register_checked": true, + "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", + "command_sha256": "463917c31040c6c53cb456de02f173bdc3cc578e3c04ac77cd21a2faf604fa0b", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": true, + "result_contract_valid": true, + "result_contract_status": "FAIL", + "result_contract_error": null, + "command_rc": 53, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "1f32540dd1a83f4340f5ad5ce98862ddb1f212945ef253dd67762ae77ccb020a", + "sanitized_output_sha256": "1f32540dd1a83f4340f5ad5ce98862ddb1f212945ef253dd67762ae77ccb020a", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nGITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-MIGRATION-PLAN-FREEZE-FIX-0025R1_TXT_SHA256=c4d2fe64ef6d9115f8a68af906d4a21607c80e35e4244bafddc2a4be6ab93f73\nGITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-CF-LIST-AUTOSELECT-0006R1_TXT_SHA256=469b6cb88197f3fc7ff461f7b0dd46ea218c58ffa5f944222d339941510ac360\nGITEA_AUTH_SUPPORT-260923-FLEET-CAPTCHA-READONLY-AUDIT-2313R1_TXT_SHA256=e28ad60b2a5cf0a3b3108e48d6b4a7a81253252c469fb8db24167ce899cc031b\nGITEA_AUTH_SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1_TXT_SHA256=5dc88bafaed700b80e09cf2f652d5133cfe86598725985e1bcc0be0b2d2f9662\nGITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-SERIAL-MIGRATION-0048R1_TXT_SHA256=1ab5ca9366b467d0d2ed85bc56364f06e9a867977f5106eb8cdd5d15b14c6c71\nGITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-SHARED-WIDGET-DOMAINS-RECONCILE-FIX-0119R1_TXT_SHA256=47851e285e4fd1b46742c725e13343d88db08f8c7f52d8e117886bd64ec035fd\nARCHITECTURE_AMENDMENT=CREATE_7_DEDICATED_WIDGETS_AND_LEAVE_LEGACY_SHARED_WIDGET_UNTOUCHED\nGITEA_BRANCH_HEAD=cfb4673ddf9ba7c2723ca212cbeff238e644ac0e\nCF_TOKEN_SHA16=7fb2f75e3a1f8a3b\nCF_TOKEN_VERIFY_HTTP=200\nCF_TOKEN_ACTIVE=true\nCF_ZONE_LOOKUP_HTTP=200\nCF_ACCOUNT_ID_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3\nCF_WIDGET_COUNT_BEFORE=2\nPVEPRO_WIDGET_FOUND_BY_HASH=true\nSHARED_WIDGET_FOUND_BY_HASH=true\nSHARED_WIDGET_SECRET_SHA256=c9ea571b1e802250b23d0db32003e7385022c8788916c318b28d65a3b9b2a168\nSHARED_WIDGET_DOMAIN_COUNT=10\nSHARED_WIDGET_UNIQUE_DOMAIN_COUNT=10\nSHARED_WIDGET_DOMAINS_SHA256=55180f23ff32cb88c56d10d162185bcb7a7031be0aa2469ecb97b53f06352df6\nLEGACY_SHARED_WIDGET_PRECONFIG_SHA256=263e33df6d7ddc9e8930eb850ee61634536c2fc8b79ebcea2c9faaa40f4401e3\nLEGACY_SHARED_WIDGET_POLICY=DO_NOT_MUTATE_IN_THIS_COMMAND\nLEGACY_SHARED_WIDGET_UNKNOWN_DOMAINS_PRESERVED=gram1.ru,newfilya.ru\nVM_210_NODE=pve01\nVM_160_NODE=pve02\nVM_210_XF_ROOT_CANDIDATES=1\nVM_160_XF_ROOT_CANDIDATES=6\nQGA_VM_210_PHP_ERROR_SHA256=dedf3d905d9aa97e03778a7957ff6468f76934993ac916bb0f3b5f2527b1d809\nFAILURE=VM_210_XF_AUDIT_FAILED\nSUCCESSFUL_SITE_COUNT=0\nLAST_SUCCESSFUL_SITE=NONE\nFAILED_AT=PRECHECK\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nNEXT_GATE=RECONCILE_FLEET_CAPTCHA_PRODUCTION_BLOCKER\nDECISION=FAIL_FLEET_CAPTCHA_PRODUCTION_DEDICATED7_MIGRATION\nTASK_RESULT=FLEET_CAPTCHA_PRODUCTION_DEDICATED7_MIGRATION_INCOMPLETE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" +} diff --git a/runtime/history/SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1.txt b/runtime/history/SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1.txt new file mode 100644 index 00000000..68bbab40 --- /dev/null +++ b/runtime/history/SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1.txt @@ -0,0 +1,75 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1 +STATUS=FAIL +RC=53 +HOST=pve01 +MODE=change +COMPONENT=forum-captcha +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +COMMAND_SHA256=463917c31040c6c53cb456de02f173bdc3cc578e3c04ac77cd21a2faf604fa0b +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=true +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=FAIL +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=53 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=1f32540dd1a83f4340f5ad5ce98862ddb1f212945ef253dd67762ae77ccb020a +SANITIZED_OUTPUT_SHA256=1f32540dd1a83f4340f5ad5ce98862ddb1f212945ef253dd67762ae77ccb020a +OUTPUT_BEGIN +REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 +ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 +RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d +GITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-MIGRATION-PLAN-FREEZE-FIX-0025R1_TXT_SHA256=c4d2fe64ef6d9115f8a68af906d4a21607c80e35e4244bafddc2a4be6ab93f73 +GITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-CF-LIST-AUTOSELECT-0006R1_TXT_SHA256=469b6cb88197f3fc7ff461f7b0dd46ea218c58ffa5f944222d339941510ac360 +GITEA_AUTH_SUPPORT-260923-FLEET-CAPTCHA-READONLY-AUDIT-2313R1_TXT_SHA256=e28ad60b2a5cf0a3b3108e48d6b4a7a81253252c469fb8db24167ce899cc031b +GITEA_AUTH_SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1_TXT_SHA256=5dc88bafaed700b80e09cf2f652d5133cfe86598725985e1bcc0be0b2d2f9662 +GITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-SERIAL-MIGRATION-0048R1_TXT_SHA256=1ab5ca9366b467d0d2ed85bc56364f06e9a867977f5106eb8cdd5d15b14c6c71 +GITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-SHARED-WIDGET-DOMAINS-RECONCILE-FIX-0119R1_TXT_SHA256=47851e285e4fd1b46742c725e13343d88db08f8c7f52d8e117886bd64ec035fd +ARCHITECTURE_AMENDMENT=CREATE_7_DEDICATED_WIDGETS_AND_LEAVE_LEGACY_SHARED_WIDGET_UNTOUCHED +GITEA_BRANCH_HEAD=cfb4673ddf9ba7c2723ca212cbeff238e644ac0e +CF_TOKEN_SHA16=7fb2f75e3a1f8a3b +CF_TOKEN_VERIFY_HTTP=200 +CF_TOKEN_ACTIVE=true +CF_ZONE_LOOKUP_HTTP=200 +CF_ACCOUNT_ID_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3 +CF_WIDGET_COUNT_BEFORE=2 +PVEPRO_WIDGET_FOUND_BY_HASH=true +SHARED_WIDGET_FOUND_BY_HASH=true +SHARED_WIDGET_SECRET_SHA256=c9ea571b1e802250b23d0db32003e7385022c8788916c318b28d65a3b9b2a168 +SHARED_WIDGET_DOMAIN_COUNT=10 +SHARED_WIDGET_UNIQUE_DOMAIN_COUNT=10 +SHARED_WIDGET_DOMAINS_SHA256=55180f23ff32cb88c56d10d162185bcb7a7031be0aa2469ecb97b53f06352df6 +LEGACY_SHARED_WIDGET_PRECONFIG_SHA256=263e33df6d7ddc9e8930eb850ee61634536c2fc8b79ebcea2c9faaa40f4401e3 +LEGACY_SHARED_WIDGET_POLICY=DO_NOT_MUTATE_IN_THIS_COMMAND +LEGACY_SHARED_WIDGET_UNKNOWN_DOMAINS_PRESERVED=gram1.ru,newfilya.ru +VM_210_NODE=pve01 +VM_160_NODE=pve02 +VM_210_XF_ROOT_CANDIDATES=1 +VM_160_XF_ROOT_CANDIDATES=6 +QGA_VM_210_PHP_ERROR_SHA256=dedf3d905d9aa97e03778a7957ff6468f76934993ac916bb0f3b5f2527b1d809 +FAILURE=VM_210_XF_AUDIT_FAILED +SUCCESSFUL_SITE_COUNT=0 +LAST_SUCCESSFUL_SITE=NONE +FAILED_AT=PRECHECK +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +NEXT_GATE=RECONCILE_FLEET_CAPTCHA_PRODUCTION_BLOCKER +DECISION=FAIL_FLEET_CAPTCHA_PRODUCTION_DEDICATED7_MIGRATION +TASK_RESULT=FLEET_CAPTCHA_PRODUCTION_DEDICATED7_MIGRATION_INCOMPLETE +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index fbff9182..4a6987fa 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,27 +1,27 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "SUPPORT-260924-HOMELAB-MOLDOVA-QUARANTINE-PRESTATE-1150R1", - "status": "OK", - "rc": 0, + "command_id": "SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1", + "status": "FAIL", + "rc": 53, "host": "pve01", - "mode": "read-only", - "component": "homelab-moldova-quarantine-prestate", - "started_at_utc": "2026-09-23T22:29:29Z", - "finished_at_utc": "2026-09-23T22:29:33Z", + "mode": "change", + "component": "forum-captcha", + "started_at_utc": "2026-09-23T22:33:58Z", + "finished_at_utc": "2026-09-23T22:34:09Z", "reference_register_checked": true, "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66", "error_register_checked": true, "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0", - "command_sha256": "a8d3554bc127703704c63365bd53c2e01265b0bc2466928e37a668c6c395fd59", + "command_sha256": "463917c31040c6c53cb456de02f173bdc3cc578e3c04ac77cd21a2faf604fa0b", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, - "change_declared": false, + "change_declared": true, "result_contract_valid": true, - "result_contract_status": null, + "result_contract_status": "FAIL", "result_contract_error": null, - "command_rc": 0, + "command_rc": 53, "changes_made": false, "rollback_started": false, "rollback_restored": null, @@ -30,9 +30,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "0c34312af95922c8170a2e25aacd8ae41acd65fb8014dd761212792f14101dc1", - "sanitized_output_sha256": "ca7061d1f88256bb78bfa429f63a3d73cfd884151a02d06463cb5f91b43f54ed", + "raw_evidence_sha256": "1f32540dd1a83f4340f5ad5ce98862ddb1f212945ef253dd67762ae77ccb020a", + "sanitized_output_sha256": "1f32540dd1a83f4340f5ad5ce98862ddb1f212945ef253dd67762ae77ccb020a", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "WORKERS2_MOLDOVA_QUARANTINE_PRESTATE_BEGIN=1\nCOMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-QUARANTINE-PRESTATE-1150R1\nMODE=read-only\nCOMPONENT=homelab-moldova-quarantine-prestate\nMUTATION_BOUNDARY=NONE;EXACT_REMOTE_QUARANTINE_PRESTATE_ONLY;NO_REMOTE_WRITE;NO_SYSTEMD_ACTION;NO_NETBIRD_MUTATION;NO_FIREWALL_MUTATION;NO_PROVIDER_CALL;NO_DNS_CHANGE;NO_BACKUP_MUTATION;NO_TARGET_POLICY_MUTATION;NO_MONITORING_MUTATION;NO_GIT_WRITE;NO_SECRET_VALUE_READOUT\nPREDECESSOR_1149=PASS_MOLDOVA_1149_REMOTE_ROLE_AUDIT_COLLECTED\nCARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS\nREFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nTARGETS_SHA256=5cba5f1e14c65211c9fab6d11594c19279ab68369b4db3f7283708c368348288\nLEGACY_ENGINE_SHA256=b6e79f087b9f1d21dac4f77a7b46b743299bbb85bc716e80d2ea67c2e038bcd7\nMD_RELAY_COUNT=1\nMD_RELAY_ENABLED=false\nLIVE_HOSTKEY_SCAN=PASS\nREMOTE_PRESTATE_RC=0\nREMOTE_PRESTATE_STDERR_BYTES=0\nREMOTE_PRESTATE_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\nREMOTE_QUARANTINE_PRESTATE_BEGIN=1\nUNIT_STATE_BEGIN=1\nUNIT|name=netbird.service|load=loaded|active=active|enabled=enabled|fragment_sha256=c6d8268d68e1110cbba39ffacd53f491a9283ffd9edc8bf7959e268649f8118b\nUNIT_FILE|name=netbird.service|bytes=578|mode=644|owner=root:root|sha256=9487974b120df840fd4fb2874daa21f4d99a3d05a6ea66d94430b3d76e1c644b\nUNIT|name=netbird-ingress.service|load=loaded|active=active|enabled=static|fragment_sha256=c491e831036090838e4681951a087b778950a287be72ab21cbeb240cc8bc9c57\nUNIT_FILE|name=netbird-ingress.service|bytes=260|mode=644|owner=root:root|sha256=19e71d9eebfc691f7a5d84dd2e35de4712dd123b6fd636c169d8c59eee25798a\nUNIT|name=netbird-ingress.socket|load=loaded|active=active|enabled=enabled|fragment_sha256=b036e31a2486a90276aa2969fcd064f254b8d9308f23cd6e09cf5a086129b889\nUNIT_FILE|name=netbird-ingress.socket|bytes=138|mode=644|owner=root:root|sha256=19a6a0fa5ad7b75adea7e48cbed6323be713f19b503a72cc03fed801509c4289\nUNIT|name=pvepro-relay-healthcheck.timer|load=loaded|active=active|enabled=enabled|fragment_sha256=e5082c2b9077c575ab6fdbd75fe6e2ddfcd2a7c30f52226552dbfb475e94d36f\nUNIT_FILE|name=pvepro-relay-healthcheck.timer|bytes=175|mode=644|owner=root:root|sha256=d81a5e3ba6e1a6a42ca3193a4f6e19b4f74af141d83bbd4652b6fbd0a9a33e43\nUNIT|name=pvepro-relay-healthcheck.service|load=loaded|active=inactive|enabled=static|fragment_sha256=430c619116a1d8de354b00dda15260ada37a98ca83c5caa3d6441d1e2bf59a87\nUNIT_FILE|name=pvepro-relay-healthcheck.service|bytes=119|mode=644|owner=root:root|sha256=4c51e2ae2835fefd32b4a60ff135eb07a65abdc031a8b7e71f149a65f0ff9f64\nUNIT_STATE_END=1\nUNIT_PROPERTIES_BEGIN=1\nUNIT_PROP|unit=netbird.service|ExecStart={ path=/usr/bin/netbird ; argv[]=/usr/bin/netbird service run --log-level info --daemon-addr unix:///var/run/netbird.sock --log-file /var/log/netbird/client.log ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }\nUNIT_PROP|unit=netbird.service|Id=netbird.service\nUNIT_PROP|unit=netbird.service|Names=netbird.service\nUNIT_PROP|unit=netbird.service|Requires=system.slice sysinit.target\nUNIT_PROP|unit=netbird.service|Wants=\nUNIT_PROP|unit=netbird.service|WantedBy=multi-user.target\nUNIT_PROP|unit=netbird.service|Before=shutdown.target multi-user.target\nUNIT_PROP|unit=netbird.service|After=system.slice sysinit.target basic.target network.target syslog.target\nUNIT_PROP|unit=netbird.service|Triggers=\nUNIT_PROP|unit=netbird.service|TriggeredBy=\nUNIT_PROP|unit=netbird.service|Description=NetBird mesh network client\nUNIT_PROP|unit=netbird.service|LoadState=loaded\nUNIT_PROP|unit=netbird.service|ActiveState=active\nUNIT_PROP|unit=netbird.service|SubState=running\nUNIT_PROP|unit=netbird.service|FragmentPath=/etc/systemd/system/netbird.service\nUNIT_PROP|unit=netbird.service|DropInPaths=\nUNIT_PROP|unit=netbird.service|UnitFileState=enabled\nUNIT_PROP|unit=netbird-ingress.service|ExecStart={ path=/lib/systemd/systemd-socket-proxyd ; argv[]=/lib/systemd/systemd-socket-proxyd [ADDR]:443 ; ignore_errors=no ; start_time=[Sat 2026-09-19 12:28:33 UTC] ; stop_time=[n/a] ; pid=2323426 ; code=(null) ; status=0/0 }\nUNIT_PROP|unit=netbird-ingress.service|Id=netbird-ingress.service\nUNIT_PROP|unit=netbird-ingress.service|Names=netbird-ingress.service\nUNIT_PROP|unit=netbird-ingress.service|Requires=sysinit.target system.slice -.mount\nUNIT_PROP|unit=netbird-ingress.service|Wants=network-online.target tmp.mount\nUNIT_PROP|unit=netbird-ingress.service|WantedBy=\nUNIT_PROP|unit=netbird-ingress.service|Before=shutdown.target\nUNIT_PROP|unit=netbird-ingress.service|After=-.mount system.slice systemd-tmpfiles-setup.service sysinit.target network-online.target tmp.mount netbird-ingress.socket systemd-journald.socket basic.target\nUNIT_PROP|unit=netbird-ingress.service|Triggers=\nUNIT_PROP|unit=netbird-ingress.service|TriggeredBy=netbird-ingress.socket\nUNIT_PROP|unit=netbird-ingress.service|Description=Workers2 NetBird TCP passthrough to USA\nUNIT_PROP|unit=netbird-ingress.service|LoadState=loaded\nUNIT_PROP|unit=netbird-ingress.service|ActiveState=active\nUNIT_PROP|unit=netbird-ingress.service|SubState=running\nUNIT_PROP|unit=netbird-ingress.service|FragmentPath=/etc/systemd/system/netbird-ingress.service\nUNIT_PROP|unit=netbird-ingress.service|DropInPaths=\nUNIT_PROP|unit=netbird-ingress.service|UnitFileState=static\nUNIT_PROP|unit=netbird-ingress.socket|Id=netbird-ingress.socket\nUNIT_PROP|unit=netbird-ingress.socket|Names=netbird-ingress.socket\nUNIT_PROP|unit=netbird-ingress.socket|Requires=system.slice sysinit.target\nUNIT_PROP|unit=netbird-ingress.socket|Wants=\nUNIT_PROP|unit=netbird-ingress.socket|WantedBy=sockets.target\nUNIT_PROP|unit=netbird-ingress.socket|Before=sockets.target shutdown.target netbird-ingress.service\nUNIT_PROP|unit=netbird-ingress.socket|After=system.slice sysinit.target\nUNIT_PROP|unit=netbird-ingress.socket|Triggers=netbird-ingress.service\nUNIT_PROP|unit=netbird-ingress.socket|TriggeredBy=\nUNIT_PROP|unit=netbird-ingress.socket|Description=Workers2 NetBird TCP ingress socket\nUNIT_PROP|unit=netbird-ingress.socket|LoadState=loaded\nUNIT_PROP|unit=netbird-ingress.socket|ActiveState=active\nUNIT_PROP|unit=netbird-ingress.socket|SubState=running\nUNIT_PROP|unit=netbird-ingress.socket|FragmentPath=/etc/systemd/system/netbird-ingress.socket\nUNIT_PROP|unit=netbird-ingress.socket|DropInPaths=\nUNIT_PROP|unit=netbird-ingress.socket|UnitFileState=enabled\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|Id=pvepro-relay-healthcheck.timer\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|Names=pvepro-relay-healthcheck.timer\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|Requires=-.mount sysinit.target\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|Wants=\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|WantedBy=timers.target\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|Before=pvepro-relay-healthcheck.service timers.target shutdown.target\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|After=-.mount sysinit.target\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|Triggers=pvepro-relay-healthcheck.service\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|TriggeredBy=\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|Description=Run PVEPro relay healthcheck every 5 minutes\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|LoadState=loaded\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|ActiveState=active\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|SubState=waiting\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|FragmentPath=/etc/systemd/system/pvepro-relay-healthcheck.timer\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|DropInPaths=\nUNIT_PROP|unit=pvepro-relay-healthcheck.timer|UnitFileState=enabled\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|ExecStart={ path=/usr/local/sbin/pvepro-relay-healthcheck ; argv[]=/usr/local/sbin/pvepro-relay-healthcheck ; ignore_errors=no ; start_time=[Wed 2026-09-23 22:28:37 UTC] ; stop_time=[Wed 2026-09-23 22:28:41 UTC] ; pid=2520825 ; code=exited ; status=0 }\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|Id=pvepro-relay-healthcheck.service\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|Names=pvepro-relay-healthcheck.service\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|Requires=system.slice sysinit.target\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|Wants=\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|WantedBy=\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|Before=shutdown.target\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|After=system.slice pvepro-relay-healthcheck.timer systemd-journald.socket sysinit.target basic.target\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|Triggers=\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|TriggeredBy=pvepro-relay-healthcheck.timer\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|Description=PVEPro relay healthcheck\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|LoadState=loaded\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|ActiveState=inactive\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|SubState=dead\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|FragmentPath=/etc/systemd/system/pvepro-relay-healthcheck.service\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|DropInPaths=/etc/systemd/system/pvepro-relay-healthcheck.service.d/20-gotify-notifier.conf\nUNIT_PROP|unit=pvepro-relay-healthcheck.service|UnitFileState=static\nUNIT_PROPERTIES_END=1\nUNIT_CAT_BEGIN=1\nUNIT_CAT_META|unit=netbird.service|bytes=615|sha256=4146c6e88149ac409ce98480b3151aba12004c34e803f7e9463b0dc7f30a2572\nUNIT_CAT_LINE|unit=netbird.service|[Unit]\nUNIT_CAT_LINE|unit=netbird.service|Description=NetBird mesh network client\nUNIT_CAT_LINE|unit=netbird.service|After=network.target syslog.target \nUNIT_CAT_LINE|unit=netbird.service|[Service]\nUNIT_CAT_LINE|unit=netbird.service|ExecStart=/usr/bin/netbird \"service\" \"run\" \"--log-level\" \"info\" \"--daemon-addr\" \"unix:///var/run/netbird.sock\" \"--log-file\" \"/var/log/netbird/client.log\"\nUNIT_CAT_LINE|unit=netbird.service|EnvironmentFile=-/etc/sysconfig/netbird\nUNIT_CAT_LINE|unit=netbird.service|Environment=SYSTEMD_UNIT=netbird\nUNIT_CAT_LINE|unit=netbird.service|[Install]\nUNIT_CAT_LINE|unit=netbird.service|WantedBy=multi-user.target\nUNIT_CAT_META|unit=netbird-ingress.service|bytes=305|sha256=fb6f7040344089b354b553bb65dd332317a816a2411a00732fb78f56945b5941\nUNIT_CAT_LINE|unit=netbird-ingress.service|[Unit]\nUNIT_CAT_LINE|unit=netbird-ingress.service|Description=Workers2 NetBird TCP passthrough to USA\nUNIT_CAT_LINE|unit=netbird-ingress.service|After=network-online.target\nUNIT_CAT_LINE|unit=netbird-ingress.service|Wants=network-online.target\nUNIT_CAT_LINE|unit=netbird-ingress.service|[Service]\nUNIT_CAT_LINE|unit=netbird-ingress.service|ExecStart=/lib/systemd/systemd-socket-proxyd [ADDR]:443\nUNIT_CAT_META|unit=netbird-ingress.socket|bytes=182|sha256=70fd4b1156ea5a544eba1c613511df0a0816b8e24e004a10fe21c1d7ae6c59bf\nUNIT_CAT_LINE|unit=netbird-ingress.socket|[Unit]\nUNIT_CAT_LINE|unit=netbird-ingress.socket|Description=Workers2 NetBird TCP ingress socket\nUNIT_CAT_LINE|unit=netbird-ingress.socket|[Socket]\nUNIT_CAT_LINE|unit=netbird-ingress.socket|ListenStream=[ADDR]:443\nUNIT_CAT_LINE|unit=netbird-ingress.socket|[Install]\nUNIT_CAT_LINE|unit=netbird-ingress.socket|WantedBy=sockets.target\nUNIT_CAT_META|unit=pvepro-relay-healthcheck.timer|bytes=227|sha256=334be592a1a3ce9c69043f6509bd76ba213661dea6ef5c7ed53c8a3a073194ac\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|[Unit]\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|Description=Run PVEPro relay healthcheck every 5 minutes\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|[Timer]\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|OnBootSec=2min\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|OnUnitActiveSec=5min\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|Persistent=true\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|[Install]\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|WantedBy=timers.target\nUNIT_CAT_META|unit=pvepro-relay-healthcheck.service|bytes=317|sha256=5f84f4e18cad23866f20727de21d032a36a4e9ef2caee94a571bdf04e03d3e0a\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|[Unit]\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|Description=PVEPro relay healthcheck\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|[Service]\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|ExecStart=/usr/local/sbin/pvepro-relay-healthcheck\nUNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|[Service]\nUNIT_CAT_END=1\nNETBIRD_RUNTIME_BEGIN=1\nNETBIRD_CMD|name=STATUS___DETAIL|bytes=7701|sha256=2ef2e213b8531e64fcca5545ddb2a78f8255207f7e9650cb6ce1d757c355632a|lines=239\nNETBIRD_LINE|cmd=STATUS___DETAIL|Peers detail:\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: \nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: \nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: \nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connected\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: rels://nb.pvepro.ru:443\nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connected\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: rels://nb.pvepro.ru:443\nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: \nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: \nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: \nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: \nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: \nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting\nNETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: \nNETBIRD_LINE|cmd=STATUS___DETAIL| Networks: -\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated\nNETBIRD_LINE|cmd=STATUS___DETAIL|Management: Connected to https://nb.pvepro.ru:443\nNETBIRD_LINE|cmd=STATUS___DETAIL|Signal: Connected to https://nb.pvepro.ru:443\nNETBIRD_LINE|cmd=STATUS___DETAIL|Relays: \nNETBIRD_LINE|cmd=STATUS___DETAIL|FQDN: relay.netbird.selfhosted\nNETBIRD_LINE|cmd=STATUS___DETAIL|Networks: [ADDR]/0, ::/0\nNETBIRD_LINE|cmd=STATUS___DETAIL|Peers count: 2/11 Connected\nNETBIRD_CMD|name=ROUTES_LIST|bytes=22|sha256=3069f4ea0fb449531e8ebb4a6a5b5bb7894fcefe80ef6a3ba0e622cdce787884|lines=1\nNETBIRD_LINE|cmd=ROUTES_LIST|No networks available.\nNETBIRD_CMD|name=NETWORKS_LIST|bytes=22|sha256=3069f4ea0fb449531e8ebb4a6a5b5bb7894fcefe80ef6a3ba0e622cdce787884|lines=1\nNETBIRD_LINE|cmd=NETWORKS_LIST|No networks available.\nNETBIRD_RUNTIME_END=1\nSOCKET_LISTEN_BEGIN=1\nSOCKET_LINE|udp UNCONN 0 0 [ADDR]:53 [ADDR]:* users:((\"netbird\",pid=408,fd=38)) \nSOCKET_LINE|udp UNCONN 0 0 [ADDR]:53 [ADDR]:* users:((\"systemd-resolve\",pid=332,fd=19)) \nSOCKET_LINE|udp UNCONN 0 0 [ADDR]%lo:53 [ADDR]:* users:((\"systemd-resolve\",pid=332,fd=17)) \nSOCKET_LINE|udp UNCONN 0 0 [ADDR]:3128 [ADDR]:* users:((\"netbird\",pid=408,fd=29)) \nSOCKET_LINE|udp UNCONN 0 0 [ADDR]:5355 [ADDR]:* users:((\"systemd-resolve\",pid=332,fd=11)) \nSOCKET_LINE|udp UNCONN 0 0 [ADDR]:51822 [ADDR]:* \nSOCKET_LINE|udp UNCONN 0 0 [::]:5355 [::]:* users:((\"systemd-resolve\",pid=332,fd=13)) \nSOCKET_LINE|udp UNCONN 0 0 [::]:51822 [::]:* \nSOCKET_LINE|tcp LISTEN 0 4096 [ADDR]:53 [ADDR]:* users:((\"systemd-resolve\",pid=332,fd=20)) \nSOCKET_LINE|tcp LISTEN 0 4096 [ADDR]:443 [ADDR]:* users:((\"systemd-socket-\",pid=2323426,fd=3),(\"systemd\",pid=1,fd=42))\nSOCKET_LINE|tcp LISTEN 0 4096 [ADDR]%lo:53 [ADDR]:* users:((\"systemd-resolve\",pid=332,fd=18)) \nSOCKET_LINE|tcp LISTEN 0 4096 [ADDR]:5355 [ADDR]:* users:((\"systemd-resolve\",pid=332,fd=12)) \nSOCKET_LINE|tcp LISTEN 0 4096 [ADDR]:53 [ADDR]:* users:((\"netbird\",pid=408,fd=37)) \nSOCKET_LINE|tcp LISTEN 0 4096 [::]:5355 [::]:* users:((\"systemd-resolve\",pid=332,fd=14)) \nSOCKET_LISTEN_END=1\nNFT_PRESTATE_BEGIN=1\nNFT_RULESET_SHA256=c484a2083f2aff5959c081eaf752a4ad4b8eec45181d38b101697e35b70fa79a\nNFT_RULESET_LINE_COUNT=222\nNFT_RELEVANT|\t\tiifname \"wt0\" counter packets 29623 bytes 4287524 accept # handle 15\nNFT_RELEVANT|\t\tudp dport 51822 accept # handle 9\nNFT_RELEVANT|\t\tip protocol tcp tcp dport 443 accept comment \"workers2-netbird-ingress-614r2\" # handle 19\nNFT_RELEVANT|\tchain forward { # handle 2\nNFT_RELEVANT|\t\ttype filter hook forward priority filter; policy drop;\nNFT_RELEVANT|\t\toifname \"wt0\" ct state established,related counter packets 56569519 bytes 87997157801 accept # handle 17\nNFT_RELEVANT|\t\tiifname \"wt0\" counter packets 23696899 bytes 3604659338 accept # handle 16\nNFT_RELEVANT|\t\tiifname \"wt0\" oifname \"eth0\" accept # handle 10\nNFT_RELEVANT|\t\tiifname \"eth0\" oifname \"wt0\" ct state established,related accept # handle 11\nNFT_RELEVANT|\t\tip saddr [ADDR]/10 oifname \"eth0\" masquerade # handle 2\nNFT_RELEVANT|table ip netbird { # handle 11\nNFT_RELEVANT|\tchain netbird-rt-fwd { # handle 1\nNFT_RELEVANT|\tchain netbird-rt-postrouting { # handle 2\nNFT_RELEVANT|\t\tmeta mark 0x0001bd21 oifname != \"lo\" counter packets 487772 bytes 44926025 masquerade # handle 8\nNFT_RELEVANT|\t\tmeta mark 0x0001bd22 oifname \"wt0\" counter packets 0 bytes 0 masquerade # handle 9\nNFT_RELEVANT|\tchain netbird-rt-redirect { # handle 3\nNFT_RELEVANT|\tchain netbird-mangle-postrouting { # handle 4\nNFT_RELEVANT|\t\toifname \"wt0\" ct state new ct mark set 0x0001bd11 # handle 12\nNFT_RELEVANT|\tchain netbird-mangle-prerouting { # handle 5\nNFT_RELEVANT|\t\tiifname != \"wt0\" ct state new meta mark set 0x0001bd22 # handle 39\nNFT_RELEVANT|\t\tiifname \"wt0\" ct state new meta mark set 0x0001bd21 # handle 38\nNFT_RELEVANT|\t\tiifname != \"wt0\" ct state new meta mark set 0x0001bd22 # handle 36\nNFT_RELEVANT|\t\tiifname \"wt0\" ct state new meta mark set 0x0001bd21 # handle 35\nNFT_RELEVANT|\t\tiifname \"wt0\" ct state new ct mark set 0x0001bd10 # handle 11\nNFT_RELEVANT|\t\tiifname \"wt0\" ip saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20 # handle 33\nNFT_RELEVANT|\t\tiifname \"wt0\" ip saddr @nb0000371 fib daddr type local meta mark set 0x0001bd20 # handle 43\nNFT_RELEVANT|\t\tiifname \"wt0\" ip saddr @nb0000383 fib daddr type local meta mark set 0x0001bd20 # handle 46\nNFT_RELEVANT|\tchain netbird-mangle-forward { # handle 6\nNFT_RELEVANT|\t\ttype filter hook forward priority mangle; policy accept;\nNFT_RELEVANT|\t\toifname \"wt0\" tcp flags syn counter packets 493429 bytes 29596016 tcp option maxseg size > 1240 tcp option maxseg size set 1240 # handle 10\nNFT_RELEVANT|\tchain netbird-acl-input-rules { # handle 13\nNFT_RELEVANT|\t\tct state established,related counter packets 23694 bytes 3805370 accept # handle 14\nNFT_RELEVANT|\tchain netbird-acl-input-filter { # handle 15\nNFT_RELEVANT|\t\tiifname \"wt0\" jump netbird-acl-input-rules # handle 16\nNFT_RELEVANT|\t\tiifname \"wt0\" drop # handle 17\nNFT_RELEVANT|\tchain netbird-acl-forward-filter { # handle 18\nNFT_RELEVANT|\t\ttype filter hook forward priority filter; policy accept;\nNFT_RELEVANT|\t\tiifname \"wt0\" jump netbird-rt-fwd # handle 19\nNFT_RELEVANT|\t\tiifname \"wt0\" drop # handle 20\nNFT_RELEVANT|\tchain netbird-raw-out { # handle 22\nNFT_RELEVANT|\t\toifname \"lo\" ip saddr [ADDR] ip daddr [ADDR] udp sport 51822 counter packets 49643759 bytes 63654070840 notrack # handle 24\nNFT_RELEVANT|\t\toifname \"lo\" ip saddr [ADDR] ip daddr [ADDR] udp dport 51822 counter packets 9153587 bytes 2783636008 notrack # handle 25\nNFT_RELEVANT|\tchain netbird-raw-pre { # handle 23\nNFT_RELEVANT|\t\tiifname \"lo\" ip saddr [ADDR] ip daddr [ADDR] udp dport 51822 counter packets 9153587 bytes 2783636008 notrack # handle 26\nNFT_RELEVANT|\t\tiifname \"lo\" ip saddr [ADDR] ip daddr [ADDR] udp dport 3128 counter packets 49643759 bytes 63654070840 notrack # handle 27\nNFT_RELEVANT|table ip6 netbird { # handle 12\nNFT_RELEVANT|\t\t\t [PRIVATE_IPV6],\nNFT_RELEVANT|\tchain netbird-rt-fwd { # handle 1\nNFT_RELEVANT|\tchain netbird-rt-postrouting { # handle 2\nNFT_RELEVANT|\t\tmeta mark 0x0001bd21 oifname != \"lo\" counter packets 0 bytes 0 masquerade # handle 8\nNFT_RELEVANT|\t\tmeta mark 0x0001bd22 oifname \"wt0\" counter packets 0 bytes 0 masquerade # handle 9\nNFT_RELEVANT|\tchain netbird-rt-redirect { # handle 3\nNFT_RELEVANT|\tchain netbird-mangle-postrouting { # handle 4\nNFT_RELEVANT|\t\toifname \"wt0\" ct state new ct mark set 0x0001bd11 # handle 12\nNFT_RELEVANT|\tchain netbird-mangle-prerouting { # handle 5\nNFT_RELEVANT|\t\tiifname != \"wt0\" ct state new meta mark set 0x0001bd22 # handle 33\nNFT_RELEVANT|\t\tiifname \"wt0\" ct state new meta mark set 0x0001bd21 # handle 32\nNFT_RELEVANT|\t\tiifname != \"wt0\" ct state new meta mark set 0x0001bd22 # handle 30\nNFT_RELEVANT|\t\tiifname \"wt0\" ct state new meta mark set 0x0001bd21 # handle 29\nNFT_RELEVANT|\t\tiifname \"wt0\" ct state new ct mark set 0x0001bd10 # handle 11\nNFT_RELEVANT|\t\tiifname \"wt0\" ip6 saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20 # handle 27\nNFT_RELEVANT|\t\tiifname \"wt0\" ip6 saddr @nb0000371 fib daddr type local meta mark set 0x0001bd20 # handle 37\nNFT_RELEVANT|\t\tiifname \"wt0\" ip6 saddr @nb0000383 fib daddr type local meta mark set 0x0001bd20 # handle 40\nNFT_RELEVANT|\tchain netbird-mangle-forward { # handle 6\nNFT_RELEVANT|\t\ttype filter hook forward priority mangle; policy accept;\nNFT_RELEVANT|\t\toifname \"wt0\" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220 # handle 10\nNFT_RELEVANT|\tchain netbird-acl-input-rules { # handle 13\nNFT_RELEVANT|\tchain netbird-acl-input-filter { # handle 15\nNFT_RELEVANT|\t\tiifname \"wt0\" jump netbird-acl-input-rules # handle 16\nNFT_RELEVANT|\t\tiifname \"wt0\" drop # handle 17\nNFT_RELEVANT|\tchain netbird-acl-forward-filter { # handle 18\nNFT_RELEVANT|\t\ttype filter hook forward priority filter; policy accept;\nNFT_RELEVANT|\t\tiifname \"wt0\" jump netbird-rt-fwd # handle 19\nNFT_RELEVANT|\t\tiifname \"wt0\" drop # handle 20\nNFT_PRESTATE_END=1\nSYSCTL_PRESTATE_BEGIN=1\nSYSCTL_RUNTIME_IPV4_FORWARD=1\nSYSCTL_RUNTIME_IPV6_FORWARD=1\nSYSCTL_FILE|base=sysctl.conf|path_sha256=4645c3ce010ad9d6a98566235a0f8d1d13b6e41215efcd5db4c61adf3aacb274|bytes=2355|sha256=3928dfdaf13a8ca3a6309c3eb2aaf09bcbe059f7dd261304260d436c97b77954\nSYSCTL_LINE|base=sysctl.conf|28:#net.ipv4.ip_forward=1\nSYSCTL_LINE|base=sysctl.conf|33:#net.ipv6.conf.all.forwarding=1\nSYSCTL_FILE|base=99-netbird-exit.conf|path_sha256=095a8633da5eca73228d8057b8eaed7936d11e1452c9a17ae2295da349ea9bed|bytes=22|sha256=7de9e61bfd3ef0b34bcacfba0fcbd0896611812ed74015f2dac1446c3bacd743\nSYSCTL_LINE|base=99-netbird-exit.conf|1:net.ipv4.ip_forward=1\nSYSCTL_FILE|base=99-sysctl.conf|path_sha256=abfcd0d4cd29d58533d33e7643590c60437e0b202493dc8e0235adadaf3c87a4|bytes=14|sha256=3928dfdaf13a8ca3a6309c3eb2aaf09bcbe059f7dd261304260d436c97b77954\nSYSCTL_LINE|base=99-sysctl.conf|28:#net.ipv4.ip_forward=1\nSYSCTL_LINE|base=99-sysctl.conf|33:#net.ipv6.conf.all.forwarding=1\nSYSCTL_PRESTATE_END=1\nHEALTHCHECK_ARTIFACT_BEGIN=1\nHEALTH_ARTIFACT|base=pvepro-relay-healthcheck|bytes=3703|mode=755|owner=root:root|sha256=b57eeb18fe25a182475edf8b075cecc40f3be40291c9554c9286b53659f1548e\nHEALTH_LINE|base=pvepro-relay-healthcheck|5:LOGDIR=\"${LOGDIR:-/var/log/pvepro-relay}\"\nHEALTH_LINE|base=pvepro-relay-healthcheck|6:LOG=\"$LOGDIR/health-$TS.log\"\nHEALTH_LINE|base=pvepro-relay-healthcheck|59: curl -sS \\\nHEALTH_LINE|base=pvepro-relay-healthcheck|79:emit 'block=pvepro_relay_healthcheck_v3'\nHEALTH_LINE|base=pvepro-relay-healthcheck|84: relay.pvepro.ru \\\nHEALTH_LINE|base=pvepro-relay-healthcheck|125:emit '--- public netbird tcp ---'\nHEALTH_LINE|base=pvepro-relay-healthcheck|128: netbird_http \\\nHEALTH_LINE|base=pvepro-relay-healthcheck|130: 80\nHEALTH_LINE|base=pvepro-relay-healthcheck|133: netbird_https \\\nHEALTH_LINE|base=pvepro-relay-healthcheck|135: 443\nHEALTH_LINE|base=pvepro-relay-healthcheck|137:emit '--- netbird https ---'\nHEALTH_LINE|base=pvepro-relay-healthcheck|140: netbird_dashboard \\\nHEALTH_LINE|base=pvepro-relay-healthcheck|144: netbird_oidc \\\nHEALTH_LINE|base=pvepro-relay-healthcheck|147:emit '--- netbird tls ---'\nHEALTH_LINE|base=pvepro-relay-healthcheck|152: -connect [ADDR]:443 \\\nHEALTH_LINE|base=pvepro-relay-healthcheck|157: -checkend 604800 \\\nHEALTH_LINE|base=pvepro-relay-healthcheck|160: emit 'netbird_tls_valid_more_than_7d=ok'\nHEALTH_LINE|base=pvepro-relay-healthcheck|162: emit 'netbird_tls_valid_more_than_7d=fail'\nHEALTH_LINE|base=pvepro-relay-healthcheck|166:emit '--- local netbird client ---'\nHEALTH_LINE|base=pvepro-relay-healthcheck|169: netbird status 2>/dev/null \\\nHEALTH_LINE|base=pvepro-relay-healthcheck|176: emit 'netbird_management=ok'\nHEALTH_LINE|base=pvepro-relay-healthcheck|178: emit 'netbird_management=fail'\nHEALTH_LINE|base=pvepro-relay-healthcheck|185: emit 'netbird_signal=ok'\nHEALTH_LINE|base=pvepro-relay-healthcheck|187: emit 'netbird_signal=fail'\nHEALTH_LINE|base=pvepro-relay-healthcheck|194: emit 'netbird_relays=ok'\nHEALTH_LINE|base=pvepro-relay-healthcheck|196: emit 'netbird_relays=fail'\nHEALTH_LINE|base=pvepro-relay-healthcheck|243: emit 'status=PASS_RELAY_HEALTHCHECK_OK'\nHEALTH_LINE|base=pvepro-relay-healthcheck|245: emit 'status=REVIEW_RELAY_HEALTHCHECK_HAS_FAILURES'\nHEALTH_ARTIFACT|base=pvepro-relay-notifier|bytes=5329|mode=755|owner=root:root|sha256=dfb4f5ee90a4cff2780f3dbd6474ae81792bc2b405d7eb666273bf1eb591ed1a\nHEALTH_LINE|base=pvepro-relay-notifier|6:GOTIFY_HOST=\"gotify.gram1.ru\"\nHEALTH_LINE|base=pvepro-relay-notifier|8:GOTIFY_URL=\"https://[REDACTED_HOST]/message\"\nHEALTH_LINE|base=pvepro-relay-notifier|10:TOKEN_FILE=\"${TOKEN_FILE:-/etc/pvepro-relay-gotify.token}\"\nHEALTH_LINE|base=pvepro-relay-notifier|11:STATE_DIR=\"${STATE_DIR:-/var/lib/pvepro-relay-notify}\"\nHEALTH_LINE|base=pvepro-relay-notifier|12:HEALTH_LOG_DIR=\"${HEALTH_LOG_DIR:-/var/log/pvepro-relay}\"\nHEALTH_LINE|base=pvepro-relay-notifier|15:latest_health_log() {\nHEALTH_LINE|base=pvepro-relay-notifier|20: -name 'health-*.log' \\\nHEALTH_LINE|base=pvepro-relay-notifier|45:send_gotify() {\nHEALTH_LINE|base=pvepro-relay-notifier|52: curl \\\nHEALTH_LINE|base=pvepro-relay-notifier|57: --resolve \"$GOTIFY_HOST:443:$GOTIFY_EDGE_IP\" \\\nHEALTH_LINE|base=pvepro-relay-notifier|94: if send_gotify \\\nHEALTH_LINE|base=pvepro-relay-notifier|110: latest_health_log\nHEALTH_LINE|base=pvepro-relay-notifier|124: sed -n 's/^status=//p' \"$LATEST\" |\nHEALTH_LINE|base=pvepro-relay-notifier|133:if [ \"$BLOCK\" != 'pvepro_relay_healthcheck_v3' ]; then\nHEALTH_LINE|base=pvepro-relay-notifier|172:LAST_STATUS_FILE=\"$STATE_DIR/last-status\"\nHEALTH_LINE|base=pvepro-relay-notifier|228: echo 'gotify_result=not_attempted'\nHEALTH_LINE|base=pvepro-relay-notifier|241: '^(dns_nb\\.pvepro\\.ru=|mx_policy=|spf_policy=|https_netbird_dashboard_code=|https_netbird_oidc_code=|netbird_management=|netbird_signal=|netbird_relays=|edge_route_via_wt0=|edge_ping=|tcp_postbox_submission_587=|failed_count=|status=)' \\\nHEALTH_LINE|base=pvepro-relay-notifier|250:health_log=$(basename \"$LATEST\")\nHEALTH_LINE|base=pvepro-relay-notifier|253:if send_gotify \\\nHEALTH_LINE|base=pvepro-relay-notifier|268: echo 'gotify_result=sent'\nHEALTH_LINE|base=pvepro-relay-notifier|280: echo \"gotify_result=$GOTIFY_RESULT\"\nHEALTHCHECK_ARTIFACT_END=1\nNETBIRD_CONFIG_ARTIFACT_BEGIN=1\nNETBIRD_ARTIFACT|base=install.conf|bytes=20|mode=644|owner=root:root|sha256=16750249050e1e2e26c3d8147969d8c3a022032732f4ab7e904d505ad3c4e403\nNETBIRD_ARTIFACT|base=state.json|bytes=395|mode=600|owner=root:root|sha256=a09cf05cce8c379367c210f636d981a8ecaab385d78244fea50546d658dfd136\nNETBIRD_ARTIFACT|base=service.json|bytes=142|mode=600|owner=root:root|sha256=bceabf3e2837e677764c871b7628df7d7b9c7388ad854ee83e0e42c905eca2ce\nNETBIRD_ARTIFACT|base=active_profile.json|bytes=45|mode=600|owner=root:root|sha256=48b1858329de45648eaad7333a3a9486b178646c06d99b0dc7ff620d7f7186dd\nNETBIRD_ARTIFACT|base=default.json|bytes=2016|mode=600|owner=root:root|sha256=2c86aa0134754c783f5d877d68a111f9a13868a52317534c47c08839986aa805\nNETBIRD_CONFIG_ARTIFACT_END=1\nQUARANTINE_CANDIDATE_SUMMARY_BEGIN=1\nCANDIDATE_NETBIRD_SERVICE_ACTIVE=active\nCANDIDATE_NETBIRD_SERVICE_ENABLED=enabled\nCANDIDATE_INGRESS_SERVICE_ACTIVE=active\nCANDIDATE_INGRESS_SOCKET_ACTIVE=active\nCANDIDATE_INGRESS_SOCKET_ENABLED=enabled\nCANDIDATE_HEALTH_TIMER_ACTIVE=active\nCANDIDATE_HEALTH_TIMER_ENABLED=enabled\nQUARANTINE_CANDIDATE_SUMMARY_END=1\nREMOTE_QUARANTINE_PRESTATE_END=1\nDECISION=PASS_MOLDOVA_1150_QUARANTINE_PRESTATE_COLLECTED\nNEXT_GATE=READ_EXACT_1150_AND_APPLY_REVERSIBLE_QUARANTINE\nTASK_RESULT=PASS_MOLDOVA_QUARANTINE_PRESTATE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260924-HOMELAB-MOLDOVA-QUARANTINE-PRESTATE-1150R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\nWORKERS2_MOLDOVA_QUARANTINE_PRESTATE_END=1\n" + "output": "REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66\nERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0\nRUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\nGITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-MIGRATION-PLAN-FREEZE-FIX-0025R1_TXT_SHA256=c4d2fe64ef6d9115f8a68af906d4a21607c80e35e4244bafddc2a4be6ab93f73\nGITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-CF-LIST-AUTOSELECT-0006R1_TXT_SHA256=469b6cb88197f3fc7ff461f7b0dd46ea218c58ffa5f944222d339941510ac360\nGITEA_AUTH_SUPPORT-260923-FLEET-CAPTCHA-READONLY-AUDIT-2313R1_TXT_SHA256=e28ad60b2a5cf0a3b3108e48d6b4a7a81253252c469fb8db24167ce899cc031b\nGITEA_AUTH_SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1_TXT_SHA256=5dc88bafaed700b80e09cf2f652d5133cfe86598725985e1bcc0be0b2d2f9662\nGITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-SERIAL-MIGRATION-0048R1_TXT_SHA256=1ab5ca9366b467d0d2ed85bc56364f06e9a867977f5106eb8cdd5d15b14c6c71\nGITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-SHARED-WIDGET-DOMAINS-RECONCILE-FIX-0119R1_TXT_SHA256=47851e285e4fd1b46742c725e13343d88db08f8c7f52d8e117886bd64ec035fd\nARCHITECTURE_AMENDMENT=CREATE_7_DEDICATED_WIDGETS_AND_LEAVE_LEGACY_SHARED_WIDGET_UNTOUCHED\nGITEA_BRANCH_HEAD=cfb4673ddf9ba7c2723ca212cbeff238e644ac0e\nCF_TOKEN_SHA16=7fb2f75e3a1f8a3b\nCF_TOKEN_VERIFY_HTTP=200\nCF_TOKEN_ACTIVE=true\nCF_ZONE_LOOKUP_HTTP=200\nCF_ACCOUNT_ID_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3\nCF_WIDGET_COUNT_BEFORE=2\nPVEPRO_WIDGET_FOUND_BY_HASH=true\nSHARED_WIDGET_FOUND_BY_HASH=true\nSHARED_WIDGET_SECRET_SHA256=c9ea571b1e802250b23d0db32003e7385022c8788916c318b28d65a3b9b2a168\nSHARED_WIDGET_DOMAIN_COUNT=10\nSHARED_WIDGET_UNIQUE_DOMAIN_COUNT=10\nSHARED_WIDGET_DOMAINS_SHA256=55180f23ff32cb88c56d10d162185bcb7a7031be0aa2469ecb97b53f06352df6\nLEGACY_SHARED_WIDGET_PRECONFIG_SHA256=263e33df6d7ddc9e8930eb850ee61634536c2fc8b79ebcea2c9faaa40f4401e3\nLEGACY_SHARED_WIDGET_POLICY=DO_NOT_MUTATE_IN_THIS_COMMAND\nLEGACY_SHARED_WIDGET_UNKNOWN_DOMAINS_PRESERVED=gram1.ru,newfilya.ru\nVM_210_NODE=pve01\nVM_160_NODE=pve02\nVM_210_XF_ROOT_CANDIDATES=1\nVM_160_XF_ROOT_CANDIDATES=6\nQGA_VM_210_PHP_ERROR_SHA256=dedf3d905d9aa97e03778a7957ff6468f76934993ac916bb0f3b5f2527b1d809\nFAILURE=VM_210_XF_AUDIT_FAILED\nSUCCESSFUL_SITE_COUNT=0\nLAST_SUCCESSFUL_SITE=NONE\nFAILED_AT=PRECHECK\nCHANGES_MADE=false\nROLLBACK_STARTED=false\nROLLBACK_RESTORED=null\nMUTATION_OUTCOME=NO_MUTATION\nNEXT_GATE=RECONCILE_FLEET_CAPTCHA_PRODUCTION_BLOCKER\nDECISION=FAIL_FLEET_CAPTCHA_PRODUCTION_DEDICATED7_MIGRATION\nTASK_RESULT=FLEET_CAPTCHA_PRODUCTION_DEDICATED7_MIGRATION_INCOMPLETE\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1\",\"status\":\"FAIL\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 61b1f340..68bbab40 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,22 +1,22 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-QUARANTINE-PRESTATE-1150R1 -STATUS=OK -RC=0 +COMMAND_ID=SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1 +STATUS=FAIL +RC=53 HOST=pve01 -MODE=read-only -COMPONENT=homelab-moldova-quarantine-prestate +MODE=change +COMPONENT=forum-captcha REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 -COMMAND_SHA256=a8d3554bc127703704c63365bd53c2e01265b0bc2466928e37a668c6c395fd59 +COMMAND_SHA256=463917c31040c6c53cb456de02f173bdc3cc578e3c04ac77cd21a2faf604fa0b DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true -CHANGE_DECLARED=false +CHANGE_DECLARED=true RESULT_CONTRACT_VALID=true -RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_STATUS=FAIL RESULT_CONTRACT_ERROR=NONE -COMMAND_RC=0 +COMMAND_RC=53 CHANGES_MADE=false ROLLBACK_STARTED=false ROLLBACK_RESTORED=null @@ -24,404 +24,52 @@ MUTATION_OUTCOME=NO_MUTATION SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=0c34312af95922c8170a2e25aacd8ae41acd65fb8014dd761212792f14101dc1 -SANITIZED_OUTPUT_SHA256=ca7061d1f88256bb78bfa429f63a3d73cfd884151a02d06463cb5f91b43f54ed +RAW_EVIDENCE_SHA256=1f32540dd1a83f4340f5ad5ce98862ddb1f212945ef253dd67762ae77ccb020a +SANITIZED_OUTPUT_SHA256=1f32540dd1a83f4340f5ad5ce98862ddb1f212945ef253dd67762ae77ccb020a OUTPUT_BEGIN -WORKERS2_MOLDOVA_QUARANTINE_PRESTATE_BEGIN=1 -COMMAND_ID=SUPPORT-260924-HOMELAB-MOLDOVA-QUARANTINE-PRESTATE-1150R1 -MODE=read-only -COMPONENT=homelab-moldova-quarantine-prestate -MUTATION_BOUNDARY=NONE;EXACT_REMOTE_QUARANTINE_PRESTATE_ONLY;NO_REMOTE_WRITE;NO_SYSTEMD_ACTION;NO_NETBIRD_MUTATION;NO_FIREWALL_MUTATION;NO_PROVIDER_CALL;NO_DNS_CHANGE;NO_BACKUP_MUTATION;NO_TARGET_POLICY_MUTATION;NO_MONITORING_MUTATION;NO_GIT_WRITE;NO_SECRET_VALUE_READOUT -PREDECESSOR_1149=PASS_MOLDOVA_1149_REMOTE_ROLE_AUDIT_COLLECTED -CARRIER_BASELINE=KNOWN_GOOD_1137_BYTE_SEMANTICS REFERENCE_SHA256=5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66 ERROR_REGISTER_SHA256=3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0 RUNNER_SHA256=b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d -TARGETS_SHA256=5cba5f1e14c65211c9fab6d11594c19279ab68369b4db3f7283708c368348288 -LEGACY_ENGINE_SHA256=b6e79f087b9f1d21dac4f77a7b46b743299bbb85bc716e80d2ea67c2e038bcd7 -MD_RELAY_COUNT=1 -MD_RELAY_ENABLED=false -LIVE_HOSTKEY_SCAN=PASS -REMOTE_PRESTATE_RC=0 -REMOTE_PRESTATE_STDERR_BYTES=0 -REMOTE_PRESTATE_STDERR_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 -REMOTE_QUARANTINE_PRESTATE_BEGIN=1 -UNIT_STATE_BEGIN=1 -UNIT|name=netbird.service|load=loaded|active=active|enabled=enabled|fragment_sha256=c6d8268d68e1110cbba39ffacd53f491a9283ffd9edc8bf7959e268649f8118b -UNIT_FILE|name=netbird.service|bytes=578|mode=644|owner=root:root|sha256=9487974b120df840fd4fb2874daa21f4d99a3d05a6ea66d94430b3d76e1c644b -UNIT|name=netbird-ingress.service|load=loaded|active=active|enabled=static|fragment_sha256=c491e831036090838e4681951a087b778950a287be72ab21cbeb240cc8bc9c57 -UNIT_FILE|name=netbird-ingress.service|bytes=260|mode=644|owner=root:root|sha256=19e71d9eebfc691f7a5d84dd2e35de4712dd123b6fd636c169d8c59eee25798a -UNIT|name=netbird-ingress.socket|load=loaded|active=active|enabled=enabled|fragment_sha256=b036e31a2486a90276aa2969fcd064f254b8d9308f23cd6e09cf5a086129b889 -UNIT_FILE|name=netbird-ingress.socket|bytes=138|mode=644|owner=root:root|sha256=19a6a0fa5ad7b75adea7e48cbed6323be713f19b503a72cc03fed801509c4289 -UNIT|name=pvepro-relay-healthcheck.timer|load=loaded|active=active|enabled=enabled|fragment_sha256=e5082c2b9077c575ab6fdbd75fe6e2ddfcd2a7c30f52226552dbfb475e94d36f -UNIT_FILE|name=pvepro-relay-healthcheck.timer|bytes=175|mode=644|owner=root:root|sha256=d81a5e3ba6e1a6a42ca3193a4f6e19b4f74af141d83bbd4652b6fbd0a9a33e43 -UNIT|name=pvepro-relay-healthcheck.service|load=loaded|active=inactive|enabled=static|fragment_sha256=430c619116a1d8de354b00dda15260ada37a98ca83c5caa3d6441d1e2bf59a87 -UNIT_FILE|name=pvepro-relay-healthcheck.service|bytes=119|mode=644|owner=root:root|sha256=4c51e2ae2835fefd32b4a60ff135eb07a65abdc031a8b7e71f149a65f0ff9f64 -UNIT_STATE_END=1 -UNIT_PROPERTIES_BEGIN=1 -UNIT_PROP|unit=netbird.service|ExecStart={ path=/usr/bin/netbird ; argv[]=/usr/bin/netbird service run --log-level info --daemon-addr unix:///var/run/netbird.sock --log-file /var/log/netbird/client.log ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 } -UNIT_PROP|unit=netbird.service|Id=netbird.service -UNIT_PROP|unit=netbird.service|Names=netbird.service -UNIT_PROP|unit=netbird.service|Requires=system.slice sysinit.target -UNIT_PROP|unit=netbird.service|Wants= -UNIT_PROP|unit=netbird.service|WantedBy=multi-user.target -UNIT_PROP|unit=netbird.service|Before=shutdown.target multi-user.target -UNIT_PROP|unit=netbird.service|After=system.slice sysinit.target basic.target network.target syslog.target -UNIT_PROP|unit=netbird.service|Triggers= -UNIT_PROP|unit=netbird.service|TriggeredBy= -UNIT_PROP|unit=netbird.service|Description=NetBird mesh network client -UNIT_PROP|unit=netbird.service|LoadState=loaded -UNIT_PROP|unit=netbird.service|ActiveState=active -UNIT_PROP|unit=netbird.service|SubState=running -UNIT_PROP|unit=netbird.service|FragmentPath=/etc/systemd/system/netbird.service -UNIT_PROP|unit=netbird.service|DropInPaths= -UNIT_PROP|unit=netbird.service|UnitFileState=enabled -UNIT_PROP|unit=netbird-ingress.service|ExecStart={ path=/lib/systemd/systemd-socket-proxyd ; argv[]=/lib/systemd/systemd-socket-proxyd [ADDR]:443 ; ignore_errors=no ; start_time=[Sat 2026-09-19 12:28:33 UTC] ; stop_time=[n/a] ; pid=2323426 ; code=(null) ; status=0/0 } -UNIT_PROP|unit=netbird-ingress.service|Id=netbird-ingress.service -UNIT_PROP|unit=netbird-ingress.service|Names=netbird-ingress.service -UNIT_PROP|unit=netbird-ingress.service|Requires=sysinit.target system.slice -.mount -UNIT_PROP|unit=netbird-ingress.service|Wants=network-online.target tmp.mount -UNIT_PROP|unit=netbird-ingress.service|WantedBy= -UNIT_PROP|unit=netbird-ingress.service|Before=shutdown.target -UNIT_PROP|unit=netbird-ingress.service|After=-.mount system.slice systemd-tmpfiles-setup.service sysinit.target network-online.target tmp.mount netbird-ingress.socket systemd-journald.socket basic.target -UNIT_PROP|unit=netbird-ingress.service|Triggers= -UNIT_PROP|unit=netbird-ingress.service|TriggeredBy=netbird-ingress.socket -UNIT_PROP|unit=netbird-ingress.service|Description=Workers2 NetBird TCP passthrough to USA -UNIT_PROP|unit=netbird-ingress.service|LoadState=loaded -UNIT_PROP|unit=netbird-ingress.service|ActiveState=active -UNIT_PROP|unit=netbird-ingress.service|SubState=running -UNIT_PROP|unit=netbird-ingress.service|FragmentPath=/etc/systemd/system/netbird-ingress.service -UNIT_PROP|unit=netbird-ingress.service|DropInPaths= -UNIT_PROP|unit=netbird-ingress.service|UnitFileState=static -UNIT_PROP|unit=netbird-ingress.socket|Id=netbird-ingress.socket -UNIT_PROP|unit=netbird-ingress.socket|Names=netbird-ingress.socket -UNIT_PROP|unit=netbird-ingress.socket|Requires=system.slice sysinit.target -UNIT_PROP|unit=netbird-ingress.socket|Wants= -UNIT_PROP|unit=netbird-ingress.socket|WantedBy=sockets.target -UNIT_PROP|unit=netbird-ingress.socket|Before=sockets.target shutdown.target netbird-ingress.service -UNIT_PROP|unit=netbird-ingress.socket|After=system.slice sysinit.target -UNIT_PROP|unit=netbird-ingress.socket|Triggers=netbird-ingress.service -UNIT_PROP|unit=netbird-ingress.socket|TriggeredBy= -UNIT_PROP|unit=netbird-ingress.socket|Description=Workers2 NetBird TCP ingress socket -UNIT_PROP|unit=netbird-ingress.socket|LoadState=loaded -UNIT_PROP|unit=netbird-ingress.socket|ActiveState=active -UNIT_PROP|unit=netbird-ingress.socket|SubState=running -UNIT_PROP|unit=netbird-ingress.socket|FragmentPath=/etc/systemd/system/netbird-ingress.socket -UNIT_PROP|unit=netbird-ingress.socket|DropInPaths= -UNIT_PROP|unit=netbird-ingress.socket|UnitFileState=enabled -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|Id=pvepro-relay-healthcheck.timer -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|Names=pvepro-relay-healthcheck.timer -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|Requires=-.mount sysinit.target -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|Wants= -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|WantedBy=timers.target -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|Before=pvepro-relay-healthcheck.service timers.target shutdown.target -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|After=-.mount sysinit.target -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|Triggers=pvepro-relay-healthcheck.service -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|TriggeredBy= -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|Description=Run PVEPro relay healthcheck every 5 minutes -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|LoadState=loaded -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|ActiveState=active -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|SubState=waiting -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|FragmentPath=/etc/systemd/system/pvepro-relay-healthcheck.timer -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|DropInPaths= -UNIT_PROP|unit=pvepro-relay-healthcheck.timer|UnitFileState=enabled -UNIT_PROP|unit=pvepro-relay-healthcheck.service|ExecStart={ path=/usr/local/sbin/pvepro-relay-healthcheck ; argv[]=/usr/local/sbin/pvepro-relay-healthcheck ; ignore_errors=no ; start_time=[Wed 2026-09-23 22:28:37 UTC] ; stop_time=[Wed 2026-09-23 22:28:41 UTC] ; pid=2520825 ; code=exited ; status=0 } -UNIT_PROP|unit=pvepro-relay-healthcheck.service|Id=pvepro-relay-healthcheck.service -UNIT_PROP|unit=pvepro-relay-healthcheck.service|Names=pvepro-relay-healthcheck.service -UNIT_PROP|unit=pvepro-relay-healthcheck.service|Requires=system.slice sysinit.target -UNIT_PROP|unit=pvepro-relay-healthcheck.service|Wants= -UNIT_PROP|unit=pvepro-relay-healthcheck.service|WantedBy= -UNIT_PROP|unit=pvepro-relay-healthcheck.service|Before=shutdown.target -UNIT_PROP|unit=pvepro-relay-healthcheck.service|After=system.slice pvepro-relay-healthcheck.timer systemd-journald.socket sysinit.target basic.target -UNIT_PROP|unit=pvepro-relay-healthcheck.service|Triggers= -UNIT_PROP|unit=pvepro-relay-healthcheck.service|TriggeredBy=pvepro-relay-healthcheck.timer -UNIT_PROP|unit=pvepro-relay-healthcheck.service|Description=PVEPro relay healthcheck -UNIT_PROP|unit=pvepro-relay-healthcheck.service|LoadState=loaded -UNIT_PROP|unit=pvepro-relay-healthcheck.service|ActiveState=inactive -UNIT_PROP|unit=pvepro-relay-healthcheck.service|SubState=dead -UNIT_PROP|unit=pvepro-relay-healthcheck.service|FragmentPath=/etc/systemd/system/pvepro-relay-healthcheck.service -UNIT_PROP|unit=pvepro-relay-healthcheck.service|DropInPaths=/etc/systemd/system/pvepro-relay-healthcheck.service.d/20-gotify-notifier.conf -UNIT_PROP|unit=pvepro-relay-healthcheck.service|UnitFileState=static -UNIT_PROPERTIES_END=1 -UNIT_CAT_BEGIN=1 -UNIT_CAT_META|unit=netbird.service|bytes=615|sha256=4146c6e88149ac409ce98480b3151aba12004c34e803f7e9463b0dc7f30a2572 -UNIT_CAT_LINE|unit=netbird.service|[Unit] -UNIT_CAT_LINE|unit=netbird.service|Description=NetBird mesh network client -UNIT_CAT_LINE|unit=netbird.service|After=network.target syslog.target -UNIT_CAT_LINE|unit=netbird.service|[Service] -UNIT_CAT_LINE|unit=netbird.service|ExecStart=/usr/bin/netbird "service" "run" "--log-level" "info" "--daemon-addr" "unix:///var/run/netbird.sock" "--log-file" "/var/log/netbird/client.log" -UNIT_CAT_LINE|unit=netbird.service|EnvironmentFile=-/etc/sysconfig/netbird -UNIT_CAT_LINE|unit=netbird.service|Environment=SYSTEMD_UNIT=netbird -UNIT_CAT_LINE|unit=netbird.service|[Install] -UNIT_CAT_LINE|unit=netbird.service|WantedBy=multi-user.target -UNIT_CAT_META|unit=netbird-ingress.service|bytes=305|sha256=fb6f7040344089b354b553bb65dd332317a816a2411a00732fb78f56945b5941 -UNIT_CAT_LINE|unit=netbird-ingress.service|[Unit] -UNIT_CAT_LINE|unit=netbird-ingress.service|Description=Workers2 NetBird TCP passthrough to USA -UNIT_CAT_LINE|unit=netbird-ingress.service|After=network-online.target -UNIT_CAT_LINE|unit=netbird-ingress.service|Wants=network-online.target -UNIT_CAT_LINE|unit=netbird-ingress.service|[Service] -UNIT_CAT_LINE|unit=netbird-ingress.service|ExecStart=/lib/systemd/systemd-socket-proxyd [ADDR]:443 -UNIT_CAT_META|unit=netbird-ingress.socket|bytes=182|sha256=70fd4b1156ea5a544eba1c613511df0a0816b8e24e004a10fe21c1d7ae6c59bf -UNIT_CAT_LINE|unit=netbird-ingress.socket|[Unit] -UNIT_CAT_LINE|unit=netbird-ingress.socket|Description=Workers2 NetBird TCP ingress socket -UNIT_CAT_LINE|unit=netbird-ingress.socket|[Socket] -UNIT_CAT_LINE|unit=netbird-ingress.socket|ListenStream=[ADDR]:443 -UNIT_CAT_LINE|unit=netbird-ingress.socket|[Install] -UNIT_CAT_LINE|unit=netbird-ingress.socket|WantedBy=sockets.target -UNIT_CAT_META|unit=pvepro-relay-healthcheck.timer|bytes=227|sha256=334be592a1a3ce9c69043f6509bd76ba213661dea6ef5c7ed53c8a3a073194ac -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|[Unit] -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|Description=Run PVEPro relay healthcheck every 5 minutes -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|[Timer] -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|OnBootSec=2min -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|OnUnitActiveSec=5min -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|Persistent=true -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|[Install] -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.timer|WantedBy=timers.target -UNIT_CAT_META|unit=pvepro-relay-healthcheck.service|bytes=317|sha256=5f84f4e18cad23866f20727de21d032a36a4e9ef2caee94a571bdf04e03d3e0a -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|[Unit] -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|Description=PVEPro relay healthcheck -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|[Service] -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|ExecStart=/usr/local/sbin/pvepro-relay-healthcheck -UNIT_CAT_LINE|unit=pvepro-relay-healthcheck.service|[Service] -UNIT_CAT_END=1 -NETBIRD_RUNTIME_BEGIN=1 -NETBIRD_CMD|name=STATUS___DETAIL|bytes=7701|sha256=2ef2e213b8531e64fcca5545ddb2a78f8255207f7e9650cb6ce1d757c355632a|lines=239 -NETBIRD_LINE|cmd=STATUS___DETAIL|Peers detail: -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connected -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: rels://nb.pvepro.ru:443 -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connected -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: rels://nb.pvepro.ru:443 -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Status: Connecting -NETBIRD_LINE|cmd=STATUS___DETAIL| Relay server address: -NETBIRD_LINE|cmd=STATUS___DETAIL| Networks: - -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL| Message: Network map updated -NETBIRD_LINE|cmd=STATUS___DETAIL|Management: Connected to https://nb.pvepro.ru:443 -NETBIRD_LINE|cmd=STATUS___DETAIL|Signal: Connected to https://nb.pvepro.ru:443 -NETBIRD_LINE|cmd=STATUS___DETAIL|Relays: -NETBIRD_LINE|cmd=STATUS___DETAIL|FQDN: relay.netbird.selfhosted -NETBIRD_LINE|cmd=STATUS___DETAIL|Networks: [ADDR]/0, ::/0 -NETBIRD_LINE|cmd=STATUS___DETAIL|Peers count: 2/11 Connected -NETBIRD_CMD|name=ROUTES_LIST|bytes=22|sha256=3069f4ea0fb449531e8ebb4a6a5b5bb7894fcefe80ef6a3ba0e622cdce787884|lines=1 -NETBIRD_LINE|cmd=ROUTES_LIST|No networks available. -NETBIRD_CMD|name=NETWORKS_LIST|bytes=22|sha256=3069f4ea0fb449531e8ebb4a6a5b5bb7894fcefe80ef6a3ba0e622cdce787884|lines=1 -NETBIRD_LINE|cmd=NETWORKS_LIST|No networks available. -NETBIRD_RUNTIME_END=1 -SOCKET_LISTEN_BEGIN=1 -SOCKET_LINE|udp UNCONN 0 0 [ADDR]:53 [ADDR]:* users:(("netbird",pid=408,fd=38)) -SOCKET_LINE|udp UNCONN 0 0 [ADDR]:53 [ADDR]:* users:(("systemd-resolve",pid=332,fd=19)) -SOCKET_LINE|udp UNCONN 0 0 [ADDR]%lo:53 [ADDR]:* users:(("systemd-resolve",pid=332,fd=17)) -SOCKET_LINE|udp UNCONN 0 0 [ADDR]:3128 [ADDR]:* users:(("netbird",pid=408,fd=29)) -SOCKET_LINE|udp UNCONN 0 0 [ADDR]:5355 [ADDR]:* users:(("systemd-resolve",pid=332,fd=11)) -SOCKET_LINE|udp UNCONN 0 0 [ADDR]:51822 [ADDR]:* -SOCKET_LINE|udp UNCONN 0 0 [::]:5355 [::]:* users:(("systemd-resolve",pid=332,fd=13)) -SOCKET_LINE|udp UNCONN 0 0 [::]:51822 [::]:* -SOCKET_LINE|tcp LISTEN 0 4096 [ADDR]:53 [ADDR]:* users:(("systemd-resolve",pid=332,fd=20)) -SOCKET_LINE|tcp LISTEN 0 4096 [ADDR]:443 [ADDR]:* users:(("systemd-socket-",pid=2323426,fd=3),("systemd",pid=1,fd=42)) -SOCKET_LINE|tcp LISTEN 0 4096 [ADDR]%lo:53 [ADDR]:* users:(("systemd-resolve",pid=332,fd=18)) -SOCKET_LINE|tcp LISTEN 0 4096 [ADDR]:5355 [ADDR]:* users:(("systemd-resolve",pid=332,fd=12)) -SOCKET_LINE|tcp LISTEN 0 4096 [ADDR]:53 [ADDR]:* users:(("netbird",pid=408,fd=37)) -SOCKET_LINE|tcp LISTEN 0 4096 [::]:5355 [::]:* users:(("systemd-resolve",pid=332,fd=14)) -SOCKET_LISTEN_END=1 -NFT_PRESTATE_BEGIN=1 -NFT_RULESET_SHA256=c484a2083f2aff5959c081eaf752a4ad4b8eec45181d38b101697e35b70fa79a -NFT_RULESET_LINE_COUNT=222 -NFT_RELEVANT| iifname "wt0" counter packets 29623 bytes 4287524 accept # handle 15 -NFT_RELEVANT| udp dport 51822 accept # handle 9 -NFT_RELEVANT| ip protocol tcp tcp dport 443 accept comment "workers2-netbird-ingress-614r2" # handle 19 -NFT_RELEVANT| chain forward { # handle 2 -NFT_RELEVANT| type filter hook forward priority filter; policy drop; -NFT_RELEVANT| oifname "wt0" ct state established,related counter packets 56569519 bytes 87997157801 accept # handle 17 -NFT_RELEVANT| iifname "wt0" counter packets 23696899 bytes 3604659338 accept # handle 16 -NFT_RELEVANT| iifname "wt0" oifname "eth0" accept # handle 10 -NFT_RELEVANT| iifname "eth0" oifname "wt0" ct state established,related accept # handle 11 -NFT_RELEVANT| ip saddr [ADDR]/10 oifname "eth0" masquerade # handle 2 -NFT_RELEVANT|table ip netbird { # handle 11 -NFT_RELEVANT| chain netbird-rt-fwd { # handle 1 -NFT_RELEVANT| chain netbird-rt-postrouting { # handle 2 -NFT_RELEVANT| meta mark 0x0001bd21 oifname != "lo" counter packets 487772 bytes 44926025 masquerade # handle 8 -NFT_RELEVANT| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade # handle 9 -NFT_RELEVANT| chain netbird-rt-redirect { # handle 3 -NFT_RELEVANT| chain netbird-mangle-postrouting { # handle 4 -NFT_RELEVANT| oifname "wt0" ct state new ct mark set 0x0001bd11 # handle 12 -NFT_RELEVANT| chain netbird-mangle-prerouting { # handle 5 -NFT_RELEVANT| iifname != "wt0" ct state new meta mark set 0x0001bd22 # handle 39 -NFT_RELEVANT| iifname "wt0" ct state new meta mark set 0x0001bd21 # handle 38 -NFT_RELEVANT| iifname != "wt0" ct state new meta mark set 0x0001bd22 # handle 36 -NFT_RELEVANT| iifname "wt0" ct state new meta mark set 0x0001bd21 # handle 35 -NFT_RELEVANT| iifname "wt0" ct state new ct mark set 0x0001bd10 # handle 11 -NFT_RELEVANT| iifname "wt0" ip saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20 # handle 33 -NFT_RELEVANT| iifname "wt0" ip saddr @nb0000371 fib daddr type local meta mark set 0x0001bd20 # handle 43 -NFT_RELEVANT| iifname "wt0" ip saddr @nb0000383 fib daddr type local meta mark set 0x0001bd20 # handle 46 -NFT_RELEVANT| chain netbird-mangle-forward { # handle 6 -NFT_RELEVANT| type filter hook forward priority mangle; policy accept; -NFT_RELEVANT| oifname "wt0" tcp flags syn counter packets 493429 bytes 29596016 tcp option maxseg size > 1240 tcp option maxseg size set 1240 # handle 10 -NFT_RELEVANT| chain netbird-acl-input-rules { # handle 13 -NFT_RELEVANT| ct state established,related counter packets 23694 bytes 3805370 accept # handle 14 -NFT_RELEVANT| chain netbird-acl-input-filter { # handle 15 -NFT_RELEVANT| iifname "wt0" jump netbird-acl-input-rules # handle 16 -NFT_RELEVANT| iifname "wt0" drop # handle 17 -NFT_RELEVANT| chain netbird-acl-forward-filter { # handle 18 -NFT_RELEVANT| type filter hook forward priority filter; policy accept; -NFT_RELEVANT| iifname "wt0" jump netbird-rt-fwd # handle 19 -NFT_RELEVANT| iifname "wt0" drop # handle 20 -NFT_RELEVANT| chain netbird-raw-out { # handle 22 -NFT_RELEVANT| oifname "lo" ip saddr [ADDR] ip daddr [ADDR] udp sport 51822 counter packets 49643759 bytes 63654070840 notrack # handle 24 -NFT_RELEVANT| oifname "lo" ip saddr [ADDR] ip daddr [ADDR] udp dport 51822 counter packets 9153587 bytes 2783636008 notrack # handle 25 -NFT_RELEVANT| chain netbird-raw-pre { # handle 23 -NFT_RELEVANT| iifname "lo" ip saddr [ADDR] ip daddr [ADDR] udp dport 51822 counter packets 9153587 bytes 2783636008 notrack # handle 26 -NFT_RELEVANT| iifname "lo" ip saddr [ADDR] ip daddr [ADDR] udp dport 3128 counter packets 49643759 bytes 63654070840 notrack # handle 27 -NFT_RELEVANT|table ip6 netbird { # handle 12 -NFT_RELEVANT| [PRIVATE_IPV6], -NFT_RELEVANT| chain netbird-rt-fwd { # handle 1 -NFT_RELEVANT| chain netbird-rt-postrouting { # handle 2 -NFT_RELEVANT| meta mark 0x0001bd21 oifname != "lo" counter packets 0 bytes 0 masquerade # handle 8 -NFT_RELEVANT| meta mark 0x0001bd22 oifname "wt0" counter packets 0 bytes 0 masquerade # handle 9 -NFT_RELEVANT| chain netbird-rt-redirect { # handle 3 -NFT_RELEVANT| chain netbird-mangle-postrouting { # handle 4 -NFT_RELEVANT| oifname "wt0" ct state new ct mark set 0x0001bd11 # handle 12 -NFT_RELEVANT| chain netbird-mangle-prerouting { # handle 5 -NFT_RELEVANT| iifname != "wt0" ct state new meta mark set 0x0001bd22 # handle 33 -NFT_RELEVANT| iifname "wt0" ct state new meta mark set 0x0001bd21 # handle 32 -NFT_RELEVANT| iifname != "wt0" ct state new meta mark set 0x0001bd22 # handle 30 -NFT_RELEVANT| iifname "wt0" ct state new meta mark set 0x0001bd21 # handle 29 -NFT_RELEVANT| iifname "wt0" ct state new ct mark set 0x0001bd10 # handle 11 -NFT_RELEVANT| iifname "wt0" ip6 saddr @nb0000001 fib daddr type local meta mark set 0x0001bd20 # handle 27 -NFT_RELEVANT| iifname "wt0" ip6 saddr @nb0000371 fib daddr type local meta mark set 0x0001bd20 # handle 37 -NFT_RELEVANT| iifname "wt0" ip6 saddr @nb0000383 fib daddr type local meta mark set 0x0001bd20 # handle 40 -NFT_RELEVANT| chain netbird-mangle-forward { # handle 6 -NFT_RELEVANT| type filter hook forward priority mangle; policy accept; -NFT_RELEVANT| oifname "wt0" tcp flags syn counter packets 0 bytes 0 tcp option maxseg size > 1220 tcp option maxseg size set 1220 # handle 10 -NFT_RELEVANT| chain netbird-acl-input-rules { # handle 13 -NFT_RELEVANT| chain netbird-acl-input-filter { # handle 15 -NFT_RELEVANT| iifname "wt0" jump netbird-acl-input-rules # handle 16 -NFT_RELEVANT| iifname "wt0" drop # handle 17 -NFT_RELEVANT| chain netbird-acl-forward-filter { # handle 18 -NFT_RELEVANT| type filter hook forward priority filter; policy accept; -NFT_RELEVANT| iifname "wt0" jump netbird-rt-fwd # handle 19 -NFT_RELEVANT| iifname "wt0" drop # handle 20 -NFT_PRESTATE_END=1 -SYSCTL_PRESTATE_BEGIN=1 -SYSCTL_RUNTIME_IPV4_FORWARD=1 -SYSCTL_RUNTIME_IPV6_FORWARD=1 -SYSCTL_FILE|base=sysctl.conf|path_sha256=4645c3ce010ad9d6a98566235a0f8d1d13b6e41215efcd5db4c61adf3aacb274|bytes=2355|sha256=3928dfdaf13a8ca3a6309c3eb2aaf09bcbe059f7dd261304260d436c97b77954 -SYSCTL_LINE|base=sysctl.conf|28:#net.ipv4.ip_forward=1 -SYSCTL_LINE|base=sysctl.conf|33:#net.ipv6.conf.all.forwarding=1 -SYSCTL_FILE|base=99-netbird-exit.conf|path_sha256=095a8633da5eca73228d8057b8eaed7936d11e1452c9a17ae2295da349ea9bed|bytes=22|sha256=7de9e61bfd3ef0b34bcacfba0fcbd0896611812ed74015f2dac1446c3bacd743 -SYSCTL_LINE|base=99-netbird-exit.conf|1:net.ipv4.ip_forward=1 -SYSCTL_FILE|base=99-sysctl.conf|path_sha256=abfcd0d4cd29d58533d33e7643590c60437e0b202493dc8e0235adadaf3c87a4|bytes=14|sha256=3928dfdaf13a8ca3a6309c3eb2aaf09bcbe059f7dd261304260d436c97b77954 -SYSCTL_LINE|base=99-sysctl.conf|28:#net.ipv4.ip_forward=1 -SYSCTL_LINE|base=99-sysctl.conf|33:#net.ipv6.conf.all.forwarding=1 -SYSCTL_PRESTATE_END=1 -HEALTHCHECK_ARTIFACT_BEGIN=1 -HEALTH_ARTIFACT|base=pvepro-relay-healthcheck|bytes=3703|mode=755|owner=root:root|sha256=b57eeb18fe25a182475edf8b075cecc40f3be40291c9554c9286b53659f1548e -HEALTH_LINE|base=pvepro-relay-healthcheck|5:LOGDIR="${LOGDIR:-/var/log/pvepro-relay}" -HEALTH_LINE|base=pvepro-relay-healthcheck|6:LOG="$LOGDIR/health-$TS.log" -HEALTH_LINE|base=pvepro-relay-healthcheck|59: curl -sS \ -HEALTH_LINE|base=pvepro-relay-healthcheck|79:emit 'block=pvepro_relay_healthcheck_v3' -HEALTH_LINE|base=pvepro-relay-healthcheck|84: relay.pvepro.ru \ -HEALTH_LINE|base=pvepro-relay-healthcheck|125:emit '--- public netbird tcp ---' -HEALTH_LINE|base=pvepro-relay-healthcheck|128: netbird_http \ -HEALTH_LINE|base=pvepro-relay-healthcheck|130: 80 -HEALTH_LINE|base=pvepro-relay-healthcheck|133: netbird_https \ -HEALTH_LINE|base=pvepro-relay-healthcheck|135: 443 -HEALTH_LINE|base=pvepro-relay-healthcheck|137:emit '--- netbird https ---' -HEALTH_LINE|base=pvepro-relay-healthcheck|140: netbird_dashboard \ -HEALTH_LINE|base=pvepro-relay-healthcheck|144: netbird_oidc \ -HEALTH_LINE|base=pvepro-relay-healthcheck|147:emit '--- netbird tls ---' -HEALTH_LINE|base=pvepro-relay-healthcheck|152: -connect [ADDR]:443 \ -HEALTH_LINE|base=pvepro-relay-healthcheck|157: -checkend 604800 \ -HEALTH_LINE|base=pvepro-relay-healthcheck|160: emit 'netbird_tls_valid_more_than_7d=ok' -HEALTH_LINE|base=pvepro-relay-healthcheck|162: emit 'netbird_tls_valid_more_than_7d=fail' -HEALTH_LINE|base=pvepro-relay-healthcheck|166:emit '--- local netbird client ---' -HEALTH_LINE|base=pvepro-relay-healthcheck|169: netbird status 2>/dev/null \ -HEALTH_LINE|base=pvepro-relay-healthcheck|176: emit 'netbird_management=ok' -HEALTH_LINE|base=pvepro-relay-healthcheck|178: emit 'netbird_management=fail' -HEALTH_LINE|base=pvepro-relay-healthcheck|185: emit 'netbird_signal=ok' -HEALTH_LINE|base=pvepro-relay-healthcheck|187: emit 'netbird_signal=fail' -HEALTH_LINE|base=pvepro-relay-healthcheck|194: emit 'netbird_relays=ok' -HEALTH_LINE|base=pvepro-relay-healthcheck|196: emit 'netbird_relays=fail' -HEALTH_LINE|base=pvepro-relay-healthcheck|243: emit 'status=PASS_RELAY_HEALTHCHECK_OK' -HEALTH_LINE|base=pvepro-relay-healthcheck|245: emit 'status=REVIEW_RELAY_HEALTHCHECK_HAS_FAILURES' -HEALTH_ARTIFACT|base=pvepro-relay-notifier|bytes=5329|mode=755|owner=root:root|sha256=dfb4f5ee90a4cff2780f3dbd6474ae81792bc2b405d7eb666273bf1eb591ed1a -HEALTH_LINE|base=pvepro-relay-notifier|6:GOTIFY_HOST="gotify.gram1.ru" -HEALTH_LINE|base=pvepro-relay-notifier|8:GOTIFY_URL="https://[REDACTED_HOST]/message" -HEALTH_LINE|base=pvepro-relay-notifier|10:TOKEN_FILE="${TOKEN_FILE:-/etc/pvepro-relay-gotify.token}" -HEALTH_LINE|base=pvepro-relay-notifier|11:STATE_DIR="${STATE_DIR:-/var/lib/pvepro-relay-notify}" -HEALTH_LINE|base=pvepro-relay-notifier|12:HEALTH_LOG_DIR="${HEALTH_LOG_DIR:-/var/log/pvepro-relay}" -HEALTH_LINE|base=pvepro-relay-notifier|15:latest_health_log() { -HEALTH_LINE|base=pvepro-relay-notifier|20: -name 'health-*.log' \ -HEALTH_LINE|base=pvepro-relay-notifier|45:send_gotify() { -HEALTH_LINE|base=pvepro-relay-notifier|52: curl \ -HEALTH_LINE|base=pvepro-relay-notifier|57: --resolve "$GOTIFY_HOST:443:$GOTIFY_EDGE_IP" \ -HEALTH_LINE|base=pvepro-relay-notifier|94: if send_gotify \ -HEALTH_LINE|base=pvepro-relay-notifier|110: latest_health_log -HEALTH_LINE|base=pvepro-relay-notifier|124: sed -n 's/^status=//p' "$LATEST" | -HEALTH_LINE|base=pvepro-relay-notifier|133:if [ "$BLOCK" != 'pvepro_relay_healthcheck_v3' ]; then -HEALTH_LINE|base=pvepro-relay-notifier|172:LAST_STATUS_FILE="$STATE_DIR/last-status" -HEALTH_LINE|base=pvepro-relay-notifier|228: echo 'gotify_result=not_attempted' -HEALTH_LINE|base=pvepro-relay-notifier|241: '^(dns_nb\.pvepro\.ru=|mx_policy=|spf_policy=|https_netbird_dashboard_code=|https_netbird_oidc_code=|netbird_management=|netbird_signal=|netbird_relays=|edge_route_via_wt0=|edge_ping=|tcp_postbox_submission_587=|failed_count=|status=)' \ -HEALTH_LINE|base=pvepro-relay-notifier|250:health_log=$(basename "$LATEST") -HEALTH_LINE|base=pvepro-relay-notifier|253:if send_gotify \ -HEALTH_LINE|base=pvepro-relay-notifier|268: echo 'gotify_result=sent' -HEALTH_LINE|base=pvepro-relay-notifier|280: echo "gotify_result=$GOTIFY_RESULT" -HEALTHCHECK_ARTIFACT_END=1 -NETBIRD_CONFIG_ARTIFACT_BEGIN=1 -NETBIRD_ARTIFACT|base=install.conf|bytes=20|mode=644|owner=root:root|sha256=16750249050e1e2e26c3d8147969d8c3a022032732f4ab7e904d505ad3c4e403 -NETBIRD_ARTIFACT|base=state.json|bytes=395|mode=600|owner=root:root|sha256=a09cf05cce8c379367c210f636d981a8ecaab385d78244fea50546d658dfd136 -NETBIRD_ARTIFACT|base=service.json|bytes=142|mode=600|owner=root:root|sha256=bceabf3e2837e677764c871b7628df7d7b9c7388ad854ee83e0e42c905eca2ce -NETBIRD_ARTIFACT|base=active_profile.json|bytes=45|mode=600|owner=root:root|sha256=48b1858329de45648eaad7333a3a9486b178646c06d99b0dc7ff620d7f7186dd -NETBIRD_ARTIFACT|base=default.json|bytes=2016|mode=600|owner=root:root|sha256=2c86aa0134754c783f5d877d68a111f9a13868a52317534c47c08839986aa805 -NETBIRD_CONFIG_ARTIFACT_END=1 -QUARANTINE_CANDIDATE_SUMMARY_BEGIN=1 -CANDIDATE_NETBIRD_SERVICE_ACTIVE=active -CANDIDATE_NETBIRD_SERVICE_ENABLED=enabled -CANDIDATE_INGRESS_SERVICE_ACTIVE=active -CANDIDATE_INGRESS_SOCKET_ACTIVE=active -CANDIDATE_INGRESS_SOCKET_ENABLED=enabled -CANDIDATE_HEALTH_TIMER_ACTIVE=active -CANDIDATE_HEALTH_TIMER_ENABLED=enabled -QUARANTINE_CANDIDATE_SUMMARY_END=1 -REMOTE_QUARANTINE_PRESTATE_END=1 -DECISION=PASS_MOLDOVA_1150_QUARANTINE_PRESTATE_COLLECTED -NEXT_GATE=READ_EXACT_1150_AND_APPLY_REVERSIBLE_QUARANTINE -TASK_RESULT=PASS_MOLDOVA_QUARANTINE_PRESTATE -HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-HOMELAB-MOLDOVA-QUARANTINE-PRESTATE-1150R1","status":"OK","changes_made":false,"rollback_started":false,"rollback_restored":null} -WORKERS2_MOLDOVA_QUARANTINE_PRESTATE_END=1 +GITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-MIGRATION-PLAN-FREEZE-FIX-0025R1_TXT_SHA256=c4d2fe64ef6d9115f8a68af906d4a21607c80e35e4244bafddc2a4be6ab93f73 +GITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-CF-LIST-AUTOSELECT-0006R1_TXT_SHA256=469b6cb88197f3fc7ff461f7b0dd46ea218c58ffa5f944222d339941510ac360 +GITEA_AUTH_SUPPORT-260923-FLEET-CAPTCHA-READONLY-AUDIT-2313R1_TXT_SHA256=e28ad60b2a5cf0a3b3108e48d6b4a7a81253252c469fb8db24167ce899cc031b +GITEA_AUTH_SUPPORT-260923-PVEPRO-TURNSTILE-CHECKPOINT14-VERIFY-FIX-924R1_TXT_SHA256=5dc88bafaed700b80e09cf2f652d5133cfe86598725985e1bcc0be0b2d2f9662 +GITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-SERIAL-MIGRATION-0048R1_TXT_SHA256=1ab5ca9366b467d0d2ed85bc56364f06e9a867977f5106eb8cdd5d15b14c6c71 +GITEA_AUTH_SUPPORT-260924-FLEET-CAPTCHA-SHARED-WIDGET-DOMAINS-RECONCILE-FIX-0119R1_TXT_SHA256=47851e285e4fd1b46742c725e13343d88db08f8c7f52d8e117886bd64ec035fd +ARCHITECTURE_AMENDMENT=CREATE_7_DEDICATED_WIDGETS_AND_LEAVE_LEGACY_SHARED_WIDGET_UNTOUCHED +GITEA_BRANCH_HEAD=cfb4673ddf9ba7c2723ca212cbeff238e644ac0e +CF_TOKEN_SHA16=7fb2f75e3a1f8a3b +CF_TOKEN_VERIFY_HTTP=200 +CF_TOKEN_ACTIVE=true +CF_ZONE_LOOKUP_HTTP=200 +CF_ACCOUNT_ID_SHA256=49ace22b1853724543e1b3b00f02d6a03acd8bd4f9046f8cf5c3c9b6343984f3 +CF_WIDGET_COUNT_BEFORE=2 +PVEPRO_WIDGET_FOUND_BY_HASH=true +SHARED_WIDGET_FOUND_BY_HASH=true +SHARED_WIDGET_SECRET_SHA256=c9ea571b1e802250b23d0db32003e7385022c8788916c318b28d65a3b9b2a168 +SHARED_WIDGET_DOMAIN_COUNT=10 +SHARED_WIDGET_UNIQUE_DOMAIN_COUNT=10 +SHARED_WIDGET_DOMAINS_SHA256=55180f23ff32cb88c56d10d162185bcb7a7031be0aa2469ecb97b53f06352df6 +LEGACY_SHARED_WIDGET_PRECONFIG_SHA256=263e33df6d7ddc9e8930eb850ee61634536c2fc8b79ebcea2c9faaa40f4401e3 +LEGACY_SHARED_WIDGET_POLICY=DO_NOT_MUTATE_IN_THIS_COMMAND +LEGACY_SHARED_WIDGET_UNKNOWN_DOMAINS_PRESERVED=gram1.ru,newfilya.ru +VM_210_NODE=pve01 +VM_160_NODE=pve02 +VM_210_XF_ROOT_CANDIDATES=1 +VM_160_XF_ROOT_CANDIDATES=6 +QGA_VM_210_PHP_ERROR_SHA256=dedf3d905d9aa97e03778a7957ff6468f76934993ac916bb0f3b5f2527b1d809 +FAILURE=VM_210_XF_AUDIT_FAILED +SUCCESSFUL_SITE_COUNT=0 +LAST_SUCCESSFUL_SITE=NONE +FAILED_AT=PRECHECK +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +NEXT_GATE=RECONCILE_FLEET_CAPTCHA_PRODUCTION_BLOCKER +DECISION=FAIL_FLEET_CAPTCHA_PRODUCTION_DEDICATED7_MIGRATION +TASK_RESULT=FLEET_CAPTCHA_PRODUCTION_DEDICATED7_MIGRATION_INCOMPLETE +HOMELAB_RESULT_CONTRACT={"version":1,"command_id":"SUPPORT-260924-FLEET-CAPTCHA-PRODUCTION-DEDICATED7-MIGRATION-0136R1","status":"FAIL","changes_made":false,"rollback_started":false,"rollback_restored":null} OUTPUT_END CHAT_OUTPUT_END