homelab-public-context/runtime/latest.json

{
  "schema_version": 1,
  "channel": "homelab-runtime",
  "command_id": "SUPPORT-260918-INFRA-VPS-THIRD-IDENTITY-RECONCILE-BOUNDED-READONLY-517R1R2",
  "status": "OK",
  "rc": 0,
  "host": "pve01",
  "mode": "read-only",
  "component": "infra-vps-third-identity-reconcile-bounded-readonly",
  "started_at_utc": "2026-09-18T10:13:02Z",
  "finished_at_utc": "2026-09-18T10:13:06Z",
  "reference_register_checked": true,
  "reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
  "error_register_checked": true,
  "error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
  "command_sha256": "6b246ed59b370e91656f99009cad29540e5ea5c9b3da9d3199e85413a244603c",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
  "change_declared": false,
  "result_contract_valid": true,
  "result_contract_status": null,
  "result_contract_error": null,
  "command_rc": 0,
  "changes_made": false,
  "rollback_started": false,
  "rollback_restored": null,
  "mutation_outcome": "NO_MUTATION",
  "sanitized": true,
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
  "raw_evidence_sha256": "99d5650c717c021955cabcfd26b14bf29245dfe5df98544fafe1e23857133a2e",
  "sanitized_output_sha256": "ef912a3560b14376c7f8bd1e55f8a4f3f035b4bcc93cbecf873eeadf279beb24",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
  "output": "VPS517R1R2_SAFE_REPORT={\"archive_matches\":[],\"audit_script\":{\"bytes\":2161,\"fqdns\":[\"netbird.vpn.gram1.ru\"],\"hits\":[{\"line\":4,\"text\":\"VPS_IP=\\\"${VPS_IP:-[IP_SHA256:f743a81d85de4022]}\\\"\"},{\"line\":5,\"text\":\"VPS_ALIAS=\\\"${VPS_ALIAS:-netbird.vpn.gram1.ru}\\\"\"},{\"line\":13,\"text\":\"alias_ip=\\\"$(getent hosts \\\"$VPS_ALIAS\\\" 2>/dev/null | awk '{print $1}' | head -n1 || true)\\\"\"},{\"line\":14,\"text\":\"ssh-keygen -F \\\"$VPS_IP\\\" -f [SENSITIVE_PATH] > \\\"$TMP/old-ip-known-hosts.txt\\\" 2>/dev/null || true\"},{\"line\":15,\"text\":\"ssh-keygen -F \\\"$VPS_ALIAS\\\" -f [SENSITIVE_PATH] > \\\"$TMP/old-alias-known-hosts.txt\\\" 2>/dev/null || true\"},{\"line\":17,\"text\":\"awk '/ssh-|ecdsa-/{print}' \\\"$TMP/old-ip-known-hosts.txt\\\" \\\"$TMP/old-alias-known-hosts.txt\\\" > \\\"$TMP/old-known-hosts.raw\\\" || true\"},{\"line\":18,\"text\":\"ssh-keygen -lf \\\"$TMP/old-known-hosts.raw\\\" > \\\"$TMP/old-fingerprints.txt\\\" 2>/dev/null || true\"},{\"line\":20,\"text\":\"ssh-keyscan -T 10 -t ed25519,rsa,ecdsa \\\"$VPS_IP\\\" > \\\"$TMP/current-known-hosts\\\" 2>/dev/null || true\"},{\"line\":21,\"text\":\"ssh-keygen -lf \\\"$TMP/current-known-hosts\\\" > \\\"$TMP/current-fingerprints.txt\\\" 2>/dev/null || true\"},{\"line\":23,\"text\":\"backup=\\\"$(find /mnt/staging/netbird-vps-backups/snapshots -maxdepth 2 -type f -name 'netbird-vps-backup.tgz' 2>/dev/null | sort | tail -n1 || true)\\\"\"},{\"line\":24,\"text\":\"backup_hostkeys=NO\"},{\"line\":28,\"text\":\"  if tar -tzf \\\"$backup\\\" | grep -Eq 'ssh_host_.*_key\\\\.pub$'; then\"},{\"line\":29,\"text\":\"    backup_hostkeys=YES\"},{\"line\":32,\"text\":\"    done < <(tar -tzf \\\"$backup\\\" | grep -E 'ssh_host_.*_key\\\\.pub$')\"},{\"line\":33,\"text\":\"    ssh-keygen -lf \\\"$TMP/backup-hostkeys.pub\\\" > \\\"$TMP/backup-fingerprints.txt\\\" 2>/dev/null || true\"},{\"line\":41,\"text\":\"[ \\\"$backup_hostkeys\\\" = \\\"YES\\\" ] && trust=\\\"BLOCKED_HOSTKEY_MISMATCH\\\"\"},{\"line\":45,\"text\":\"printf 'STATUS=%s TS=%s TYPE=vps-identity-audit VPS_IP=%s ALIAS=%s ALIAS_IP=%s SSH_TRUST=%s BACKUP_HOSTKEYS=%s KNOWN_HOSTS_UNCHANGED=YES SECRET_PRINTED=REDACTED\\\\n' \\\\\"},{\"line\":46,\"text\":\"  \\\"$status\\\" \\\"$TS\\\" \\\"$VPS_IP\\\" \\\"$VPS_ALIAS\\\" \\\"${alias_ip:-NONE}\\\" \\\"$trust\\\" \\\"$backup_hostkeys\\\" > \\\"$H\\\"\"}],\"present\":true,\"sha256\":\"b709691c52ae48432b70e197eb4810b6c374a05911cee3b9fdba4ecc67c76c3a\"},\"backup_artifacts\":[],\"command_id\":\"SUPPORT-260918-INFRA-VPS-THIRD-IDENTITY-RECONCILE-BOUNDED-READONLY-517R1R2\",\"correlations\":[],\"decision\":\"HOLD_THIRD_VPS_IDENTITY_NOT_UNIQUE\",\"e3q\":[{\"endpoint_ip_hashes\":[],\"known_ips\":[{\"fps\":[],\"hits\":0,\"ip_hash\":\"cb4c52b8c38c6512aa6733c5d0ea510c76a499fbcb8c1c129d331908e88f2528\"},{\"fps\":[],\"hits\":0,\"ip_hash\":\"cbcf39fece4356231e47ae8708d84f7c3e2a6effd8e5c71451548c094453c0e5\"}],\"known_name\":{\"fps\":[],\"hits\":0},\"last_seen\":null,\"name\":\"e3qxxx-183-106.netbird.selfhosted\",\"peer_ip_hashes\":[\"cb4c52b8c38c6512aa6733c5d0ea510c76a499fbcb8c1c129d331908e88f2528\",\"cbcf39fece4356231e47ae8708d84f7c3e2a6effd8e5c71451548c094453c0e5\"],\"ssh_g\":{\"hostname_kind\":\"NAME\",\"hostname_value\":\"e3qxxx-183-106.netbird.selfhosted\",\"identityfiles\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\"],\"ok\":true,\"port\":\"22\",\"user\":\"root\"},\"status\":\"Connecting\"},{\"endpoint_ip_hashes\":[],\"known_ips\":[{\"fps\":[],\"hits\":0,\"ip_hash\":\"97466ca985f4a2f69684aee45965bd2d11a92507761287e0fef56038c1a5dbb9\"},{\"fps\":[],\"hits\":0,\"ip_hash\":\"8c7543543fdd2a16f1408d0c1df50ed2d8bcb79d5e09b63ae1fdf202e1fbb4b3\"}],\"known_name\":{\"fps\":[],\"hits\":0},\"last_seen\":null,\"name\":\"e3qxxx.netbird.selfhosted\",\"peer_ip_hashes\":[\"97466ca985f4a2f69684aee45965bd2d11a92507761287e0fef56038c1a5dbb9\",\"8c7543543fdd2a16f1408d0c1df50ed2d8bcb79d5e09b63ae1fdf202e1fbb4b3\"],\"ssh_g\":{\"hostname_kind\":\"NAME\",\"hostname_value\":\"e3qxxx.netbird.selfhosted\",\"identityfiles\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\"],\"ok\":true,\"port\":\"22\",\"user\":\"root\"},\"status\":\"Connecting\"}],\"external_ssh_attempts\":0,\"mode\":\"read-only\",\"mutations\":0,\"netbird_status_rc\":0,\"netbird_stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"schema_version\":1,\"scores\":[{\"evidence\":[],\"name\":\"e3qxxx-183-106.netbird.selfhosted\",\"score\":0},{\"evidence\":[],\"name\":\"e3qxxx.netbird.selfhosted\",\"score\":0}],\"services\":[{\"known_ips\":[{\"fps\":[\"SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo\"],\"hits\":1,\"ip_hash\":\"5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440\"},{\"fps\":[],\"hits\":0,\"ip_hash\":\"b6e30f30da48eb8124523d7eb9e71dc270a8f1345bb41c460d0ff7ec4dc8be2f\"}],\"known_name\":{\"fps\":[\"SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo\"],\"hits\":1},\"name\":\"netbird.vpn.gram1.ru\",\"resolved_ip_hashes\":[\"5649415146501fa3dc7b2e08f469ef80b6b04e46b86079acd21229eb875e9440\",\"b6e30f30da48eb8124523d7eb9e71dc270a8f1345bb41c460d0ff7ec4dc8be2f\"],\"ssh_g\":{\"hostname_kind\":\"NAME\",\"hostname_value\":\"netbird.vpn.gram1.ru\",\"identityfiles\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\"],\"ok\":true,\"port\":\"22\",\"user\":\"root\"}},{\"known_ips\":[{\"fps\":[\"SHA256:YQsA2nif7qAaa5mSUb9U0h8Q5DGy8SRCV5f+FyKUpOo\",\"SHA256:kHDkbbCVkREqGue9V6a0raId0yddPstv1Dha96NgkVY\",\"SHA256:kxsTiPQXtlpwGeokTR+9at+ZP2gqqITgC6s9OkPuquY\"],\"hits\":3,\"ip_hash\":\"bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834\"},{\"fps\":[],\"hits\":0,\"ip_hash\":\"a5ce7076fd5a5b356fe1bdacc4ff2cf610b0e0f956e686539e5e9dfcecb023cb\"}],\"known_name\":{\"fps\":[],\"hits\":0},\"name\":\"backup.gram1.ru\",\"resolved_ip_hashes\":[\"bc517b4af3298846906234d3d697d3820b0b652ade1880c937c9d71cd802c834\",\"a5ce7076fd5a5b356fe1bdacc4ff2cf610b0e0f956e686539e5e9dfcecb023cb\"],\"ssh_g\":{\"hostname_kind\":\"NAME\",\"hostname_value\":\"backup.gram1.ru\",\"identityfiles\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\"],\"ok\":true,\"port\":\"22\",\"user\":\"root\"}},{\"known_ips\":[{\"fps\":[\"SHA256:2FBYDI2YEYcdzkiAAC306AtebdfeH6NWR5WJZAeH+5E\"],\"hits\":1,\"ip_hash\":\"b980955f01148169b9b74541d4d8ece284de73daa9b31a6aaba2a56c9d531179\"},{\"fps\":[],\"hits\":0,\"ip_hash\":\"950bcfe548181e4a19ff0236f84126d24165986627fa97a7c45c9ee4b5f95c44\"}],\"known_name\":{\"fps\":[\"SHA256:2FBYDI2YEYcdzkiAAC306AtebdfeH6NWR5WJZAeH+5E\"],\"hits\":1},\"name\":\"mail.netbird.selfhosted\",\"resolved_ip_hashes\":[\"b980955f01148169b9b74541d4d8ece284de73daa9b31a6aaba2a56c9d531179\",\"950bcfe548181e4a19ff0236f84126d24165986627fa97a7c45c9ee4b5f95c44\"],\"ssh_g\":{\"hostname_kind\":\"NAME\",\"hostname_value\":\"mail.netbird.selfhosted\",\"identityfiles\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\"],\"ok\":true,\"port\":\"22\",\"user\":\"root\"}},{\"known_ips\":[{\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"hits\":1,\"ip_hash\":\"0f61feb58699a097fdfae741ce53e84cd9eae29e8c8d893a0822f20af9231d4c\"},{\"fps\":[],\"hits\":0,\"ip_hash\":\"d7ae4b440c214f6114944cb388d09b4fa11a0b8ede45358684225e4094485afe\"}],\"known_name\":{\"fps\":[\"SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\"],\"hits\":1},\"name\":\"relay.netbird.selfhosted\",\"resolved_ip_hashes\":[\"0f61feb58699a097fdfae741ce53e84cd9eae29e8c8d893a0822f20af9231d4c\",\"d7ae4b440c214f6114944cb388d09b4fa11a0b8ede45358684225e4094485afe\"],\"ssh_g\":{\"hostname_kind\":\"NAME\",\"hostname_value\":\"relay.netbird.selfhosted\",\"identityfiles\":[\"id_rsa\",\"id_ecdsa\",\"id_ecdsa_sk\",\"id_ed25519\",\"id_ed25519_sk\"],\"ok\":true,\"port\":\"22\",\"user\":\"root\"}}]}\nVPS517R1R2_DECISION=HOLD_THIRD_VPS_IDENTITY_NOT_UNIQUE\nVPS517R1R2_NEXT_GATE=READONLY_3VPS_LIVE_INVENTORY_IF_PASS_ELSE_REVIEW\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-THIRD-IDENTITY-RECONCILE-BOUNDED-READONLY-517R1R2\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
}