homelab-runtime-publisher
39 lines
7.0 KiB
JSON
39 lines
7.0 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"channel": "homelab-runtime",
|
|
"command_id": "SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1",
|
|
"status": "OK",
|
|
"rc": 0,
|
|
"host": "pve01",
|
|
"mode": "read-only",
|
|
"component": "spb-tls-bridge-npmplus-runtime-rca",
|
|
"started_at_utc": "2026-09-23T12:47:52Z",
|
|
"finished_at_utc": "2026-09-23T12:47:55Z",
|
|
"reference_register_checked": true,
|
|
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
|
|
"error_register_checked": true,
|
|
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
|
|
"command_sha256": "ddb8ebb208b8194c670dbb45bda053cae7d0a615dc00c22ef8b7eb110a91ca2f",
|
|
"duplicate_failed_command_blocked": false,
|
|
"block_reason": null,
|
|
"execution_started": true,
|
|
"change_declared": false,
|
|
"result_contract_valid": true,
|
|
"result_contract_status": null,
|
|
"result_contract_error": null,
|
|
"command_rc": 0,
|
|
"changes_made": false,
|
|
"rollback_started": false,
|
|
"rollback_restored": null,
|
|
"mutation_outcome": "NO_MUTATION",
|
|
"sanitized": true,
|
|
"secrets_included": false,
|
|
"private_addresses_included": false,
|
|
"raw_evidence_retained_locally": true,
|
|
"raw_evidence_sha256": "4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec",
|
|
"sanitized_output_sha256": "4b9b007c3d0a9273577ab848f1ac5a4c6bc925795eb52941a4ff505b2cc7abec",
|
|
"output_truncated_in_json": false,
|
|
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
|
|
"output": "RCA9196_BEGIN=true\nMUTATION_BOUNDARY=READ_ONLY_VM130_RUNTIME_RCA;NO_PRODUCTION_WRITE;NO_SPB_WRITE;NO_DNS_WRITE;NO_NGINX_RELOAD\nVM130_QGA_TRANSPORT_RC=0\nVM130_QGA_STDERR_SHA16=e3b0c44298fc1c14\nVM130_QGA_EXITCODE=0\nVM130_GUEST_STDERR_SHA16=e3b0c44298fc1c14\nRCA9196={\"baseline\":{\"nginx_test_rc\":0,\"stderr_sha16\":\"9cb221b6993277a1\"},\"classification\":\"LIVE_CONFIG_DIFFERS_FROM_IMAGE\",\"container\":{\"cmd\":null,\"entrypoint\":[\"tini\",\"--\",\"entrypoint.sh\"],\"env_count\":12,\"env_names\":[\"ACME_PROFILE\",\"AUTH_REQUEST_AUTHENTIK_UPSTREAM\",\"COOKIE_SECRET\",\"DISABLE_H3_QUIC\",\"DISABLE_IPV6\",\"INITIAL_ADMIN_EMAIL\",\"INITIAL_ADMIN_PASSWORD\",\"IPV4_BINDING\",\"NODE_ENV\",\"NPM_IPV4_BINDING\",\"PATH\",\"TZ\"],\"image_sha16\":\"d16df105013397a1\",\"user\":\"\"},\"diff\":{\"image_line18\":\" ssl_certificate ;\",\"live_equals_image\":false,\"live_line18\":\" ssl_certificate /data/tls/dummycert.pem;\"},\"image\":{\"lines_1_35\":[{\"line\":1,\"text\":\"upstream npmplus {\"},{\"line\":2,\"text\":\" server unix:/run/npmplus.sock;\"},{\"line\":3,\"text\":\"}\"},{\"line\":4,\"text\":\"\"},{\"line\":5,\"text\":\"server {\"},{\"line\":6,\"text\":\" server_name \\\"\\\";\"},{\"line\":7,\"text\":\" listen <IP_REDACTED>:81 ssl;\"},{\"line\":8,\"text\":\" listen [::]:81 ssl;\"},{\"line\":9,\"text\":\" ssl_reject_handshake on;\"},{\"line\":10,\"text\":\" return 444;\"},{\"line\":11,\"text\":\"}\"},{\"line\":12,\"text\":\"\"},{\"line\":13,\"text\":\"server {\"},{\"line\":14,\"text\":\" listen <IP_REDACTED>:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;\"},{\"line\":15,\"text\":\" listen [::]:81 ssl bind reuseport deferred multipath so_keepalive=on default_server;\"},{\"line\":16,\"text\":\"\"},{\"line\":17,\"text\":\" server_name _;\"},{\"line\":18,\"text\":\" ssl_certificate ;\"},{\"line\":19,\"text\":\" ssl_certificate_key ;\"},{\"line\":20,\"text\":\" #ssl_stapling on;\"},{\"line\":21,\"text\":\" #ssl_stapling_verify on;\"},{\"line\":22,\"text\":\" #ssl_stapling_file ;\"},{\"line\":23,\"text\":\" #ssl_certificate_compression off;\"},{\"line\":24,\"text\":\"\"},{\"line\":25,\"text\":\" if ($scheme = \\\"http\\\") {\"},{\"line\":26,\"text\":\" return 301 <URL_REDACTED>\"},{\"line\":27,\"text\":\" }\"},{\"line\":28,\"text\":\" if ($http_x_forwarded_proto = \\\"http\\\") {\"},{\"line\":29,\"text\":\" return 301 <URL_REDACTED>\"},{\"line\":30,\"text\":\" }\"},{\"line\":31,\"text\":\"\"},{\"line\":32,\"text\":\" client_max_body_size 1m;\"},{\"line\":33,\"text\":\" more_set_headers \\\"X-Frame-Options: DENY\\\";\"},{\"line\":34,\"text\":\" more_set_headers \\\"Referrer-Policy: no-referrer\\\";\"},{\"line\":35,\"text\":\" more_set_headers \\\"Cross-Origin-Opener-Policy: same-origin\\\";\"}],\"rc\":0,\"sha16\":\"cfaf1d6ee20a39b1\",\"size\":3673,\"stderr_safe\":[],\"stderr_sha16\":\"e3b0c44298fc1c14\"},\"live\":{\"lines_1_35\":[{\"line\":1,\"text\":\"upstream npmplus {\"},{\"line\":2,\"text\":\" server unix:/run/npmplus.sock;\"},{\"line\":3,\"text\":\"}\"},{\"line\":4,\"text\":\"\"},{\"line\":5,\"text\":\"server {\"},{\"line\":6,\"text\":\" server_name \\\"\\\";\"},{\"line\":7,\"text\":\" listen <IP_REDACTED>:81 ssl;\"},{\"line\":8,\"text\":\" #listen [::]:81 ssl;\"},{\"line\":9,\"text\":\" ssl_reject_handshake on;\"},{\"line\":10,\"text\":\" return 444;\"},{\"line\":11,\"text\":\"}\"},{\"line\":12,\"text\":\"\"},{\"line\":13,\"text\":\"server {\"},{\"line\":14,\"text\":\" listen <IP_REDACTED>:81 ssl bind reuseport deferred so_keepalive=on default_server;\"},{\"line\":15,\"text\":\" #listen [::]:81 ssl bind reuseport deferred so_keepalive=on default_server;\"},{\"line\":16,\"text\":\"\"},{\"line\":17,\"text\":\" server_name _;\"},{\"line\":18,\"text\":\" ssl_certificate /data/tls/dummycert.pem;\"},{\"line\":19,\"text\":\" ssl_certificate_key /data/tls/dummykey.pem;\"},{\"line\":20,\"text\":\" #ssl_stapling on;\"},{\"line\":21,\"text\":\" #ssl_stapling_verify on;\"},{\"line\":22,\"text\":\" #ssl_stapling_file ;\"},{\"line\":23,\"text\":\" #ssl_certificate_compression off;\"},{\"line\":24,\"text\":\"\"},{\"line\":25,\"text\":\" if ($scheme = \\\"http\\\") {\"},{\"line\":26,\"text\":\" return 301 <URL_REDACTED>\"},{\"line\":27,\"text\":\" }\"},{\"line\":28,\"text\":\" if ($http_x_forwarded_proto = \\\"http\\\") {\"},{\"line\":29,\"text\":\" return 301 <URL_REDACTED>\"},{\"line\":30,\"text\":\" }\"},{\"line\":31,\"text\":\"\"},{\"line\":32,\"text\":\" client_max_body_size 1m;\"},{\"line\":33,\"text\":\" more_set_headers \\\"X-Frame-Options: DENY\\\";\"},{\"line\":34,\"text\":\" more_set_headers \\\"Referrer-Policy: no-referrer\\\";\"},{\"line\":35,\"text\":\" more_set_headers \\\"Cross-Origin-Opener-Policy: same-origin\\\";\"}],\"rc\":0,\"sha16\":\"507fa874e9632e71\",\"size\":3704,\"stderr_sha16\":\"e3b0c44298fc1c14\"},\"same_env_direct_nginx\":{\"rc\":1,\"stderr_safe\":[\"nginx: [emerg] open() \\\"/data/custom_nginx/root.conf\\\" failed (2: No such file or directory) in /usr/local/nginx/conf/nginx.conf:20\",\"nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed\"],\"stderr_sha16\":\"ae9c0a07f6c00888\"}}\nRCA9196_CLASSIFICATION=LIVE_CONFIG_DIFFERS_FROM_IMAGE\nTASK_COMPLETE=true\nTASK_RESULT=PASS_SPB_TLS_BRIDGE_NPMPLUS_RUNTIME_RCA\nDECISION=READ_EXACT_9196_THEN_BUILD_RUNTIME_FAITHFUL_NGINX_TEST\nNEXT_GATE=EXACT_9196_LIVE_VS_IMAGE_NPMPLUS_CONF\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260923-SPB-TLS-BRIDGE-NPMPLUS-RUNTIME-RCA-9196R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
|
|
}
|