homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity
Files
45638dc02e15c5c758062dc8d651b3e27bf67627
homelab-public-context/runtime/latest.json
T
homelab-runtime-publisher 45638dc02e runtime: publish SUPPORT-260911-INFRA-DR-VPS-HISTORICAL-ROUTE-172R1
2026-09-11 04:06:23 +00:00

39 lines
27 KiB
JSON
Raw Blame History

{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "SUPPORT-260911-INFRA-DR-VPS-HISTORICAL-ROUTE-172R1",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "read-only",
"component": "infra-dr-vps-historical-route-pve01",
"started_at_utc": "2026-09-11T04:06:20Z",
"finished_at_utc": "2026-09-11T04:06:22Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "6662eddd5f2259b6f4a096b9c586e239a15c91a6c8e7e0328b76f15c1fa79e6c",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": false,
"result_contract_valid": true,
"result_contract_status": null,
"result_contract_error": null,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
"mutation_outcome": "NO_MUTATION",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "a6fdcf1c92c2f056a0ae23a45774d0cf2d12b99a76ee2490c868e9573d3f07b7",
"sanitized_output_sha256": "a6fdcf1c92c2f056a0ae23a45774d0cf2d12b99a76ee2490c868e9573d3f07b7",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "INFRA172_BEGIN\nCOMMAND_ID=SUPPORT-260911-INFRA-DR-VPS-HISTORICAL-ROUTE-172R1\nMODE=READ_ONLY\nPRIOR_171_COMMIT=4ac5820682bd86c4bcd385692139c75369b0be03\nINFRA172_ROLE_DNS={\"MD_RELAY\":{\"hostname\":\"nb.pvepro.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\"}],\"rc\":0},\"SPB_INGRESS\":{\"hostname\":\"newfi.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"identity_marker\":\"HISTORICAL_SPB_INGRESS\",\"ip_sha256\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\"}],\"rc\":0},\"US_NETBIRD\":{\"hostname\":\"nb.gram1.ru\",\"ip_refs\":[{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"1fc73136d6d7ddbd0e67ae9c4ddbe6798056fba742305ef773f1015df2712c16\"}],\"rc\":0}}\nINFRA172_CURRENT_RESIDUE={\"file_count\":4,\"rows\":[{\"assignments\":[{\"key\":\"User\",\"kind\":\"USER\",\"line\":9,\"value\":\"root\"}],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Description=Create current ingress recovery artifact on cold standby node\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"User=root\"},\"line\":9},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:1f7afc3312fd233f>\"},\"line\":11}],\"source\":{\"basename\":\"homelab-ingress-standby-refresh.service\",\"kind\":\"CURRENT\",\"path_sha256\":\"d267675a7c11436bf83d33ba637a28d00f08e91013f12af00a28d138eddc531e\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Description=Daily ingress cold standby recovery artifact refresh\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Unit=homelab-ingress-standby-refresh.service\"},\"line\":8}],\"source\":{\"basename\":\"homelab-ingress-standby-refresh.timer\",\"kind\":\"CURRENT\",\"path_sha256\":\"96feda8920362dd961046ef5f1375e8ccb4182400fe02408c76604e4aa4832c1\"}},{\"assignments\":[{\"key\":\"DEST\",\"kind\":\"HOST_EXPR\",\"line\":120,\"value_sha256\":\"fc4d602aa16170b89bda4c70d75d89e6183b14f994516aa7b3e032c3f18cbb4e\"}],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"export LC_ALL=C\"},\"line\":3},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"LOCK=\\\"/run/lock/homelab-ingress-standby-refresh.lock\\\"\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"DRILL_REPORT=\\\"/var/lib/homelab-chat/CR0023-cold-standby-drill.txt\\\"\"},\"line\":6},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STATE_DIR=\\\"/var/lib/homelab-ingress-standby\\\"\"},\"line\":7},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"RELAY=\\\"$(mktemp)\\\"\"},\"line\":12},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"rm -f \\\"$TMP_STATE\\\" \\\"$RELAY\\\" \\\"$RESOURCES\\\"\"},\"line\":16},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"test -f \\\"$DRILL_REPORT\\\"\"},\"line\":26},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"grep -q '^CR0023_COLD_STANDBY_DRILL_STATUS=SUCCESS$' \\\"$DRILL_REPORT\\\"\"},\"line\":27},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STANDBY_VMID=\\\"$(sed -n 's/^STANDBY_VMID=//p' \\\"$DRILL_REPORT\\\" | head -n 1)\\\"\"},\"line\":29},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STANDBY_NODE=\\\"$(sed -n 's/^STANDBY_NODE=//p' \\\"$DRILL_REPORT\\\" | head -n 1)\\\"\"},\"line\":30},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"import json, sys\"},\"line\":39},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"import json, sys\"},\"line\":47},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"if [ \\\"$node\\\" = \\\"$(hostname -s)\\\" ] || [ \\\"$node\\\" = \\\"$(hostname)\\\" ]; then\"},\"line\":60},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"ssh -o BatchMode=yes -o ConnectTimeout=10 root@\\\"$node\\\" \\\"$@\\\"\"},\"line\":63},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"if [ \\\"$SOURCE_NODE\\\" = \\\"$(hostname -s)\\\" ] || [ \\\"$SOURCE_NODE\\\" = \\\"$(hostname)\\\" ]; then\"},\"line\":91},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"cat \\\"$SOURCE_BACKUP\\\" >\\\"$RELAY\\\"\"},\"line\":92},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"ssh -o BatchMode=yes -o ConnectTimeout=10 root@\\\"$SOURCE_NODE\\\" \\\"cat '$SOURCE_BACKUP'\\\" >\\\"$RELAY\\\"\"},\"line\":94},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"test \\\"$(stat -c %s \\\"$RELAY\\\")\\\" = \\\"$SOURCE_SIZE\\\"\"},\"line\":97},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"test \\\"$(sha256sum \\\"$RELAY\\\" | awk '{print $1}')\\\" = \\\"$SOURCE_SHA256\\\"\"},\"line\":98},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"DEST_DIR=\\\"/var/backups/ingress-standby-source\\\"\"},\"line\":100}],\"source\":{\"basename\":\"homelab-ingress-standby-refresh\",\"kind\":\"CURRENT\",\"path\":\"/usr/local/sbin/homelab-ingress-standby-refresh\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"export LC_ALL=C\"},\"line\":3},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"DRILL_REPORT=\\\"/var/lib/homelab-chat/CR0023-cold-standby-drill.txt\\\"\"},\"line\":6},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STATE_DIR=\\\"/var/lib/homelab-health/ingress-failover\\\"\"},\"line\":7},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"LOCK_FILE=\\\"/run/lock/homelab-ingress-failover.lock\\\"\"},\"line\":9},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"echo \\\"INGRESS_FAILOVER_LOCK=BUSY\\\"\"},\"line\":15},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"test -f \\\"$DRILL_REPORT\\\"\"},\"line\":19},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"sed -n 's/^STANDBY_VMID=//p' \\\"$DRILL_REPORT\\\" |\"},\"line\":22},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"sed -n 's/^STANDBY_NODE=//p' \\\"$DRILL_REPORT\\\" |\"},\"line\":27},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"import json\"},\"line\":48},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"import sys\"},\"line\":49},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"if [ \\\"$node\\\" = \\\"$(hostname -s)\\\" ] ||\"},\"line\":71},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"[ \\\"$node\\\" = \\\"$(hostname)\\\" ]\"},\"line\":72},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"ssh \\\\\"},\"line\":76},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"export LC_ALL=C\"},\"line\":196},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"echo \\\"ACTIVE_INGRESS=$active\\\"\"},\"line\":241}],\"source\":{\"basename\":\"homelab-ingress-failover\",\"kind\":\"CURRENT\",\"path\":\"/usr/local/sbin/homelab-ingress-failover\"}}]}\nINFRA172_GIT_META={\"commit_count\":11,\"file_count\":17,\"git_rcs\":[0,0,0,0],\"repo_present\":true}\nINFRA172_GIT_EVIDENCE={\"count\":17,\"rows\":[{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"H=\\\"/var/lib/homelab-health/edge-ingress-hardening.txt\\\"\"},\"line\":4},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"LAN_IP=\\\"$(hostname -I | tr ' ' '\\\\n' | grep -m1 '^192\\\\.168\\\\.50\\\\.' || true)\\\"\"},\"line\":9},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"# NetBird uses UDP/51820. Do not block it on edge.\"},\"line\":38},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"delete_rule_if_exists \\\"$IPT\\\" -p udp --dport 51820 -j DROP\"},\"line\":39},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"delete_rule_if_exists \\\"$IP6T\\\" -p udp --dport 51820 -j DROP\"},\"line\":40},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"# Allow private NetBird overlay peers to reach NPMplus web entrypoints.\"},\"line\":42},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"add_input_rule \\\"$IPT\\\" -i wt0 -s <IP:CGNAT_OVERLAY_CANDIDATE:7feea0554afada76>/16 -p tcp -m multiport --dports 80,443 -j ACCEPT\"},\"line\":43},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"if \\\"$IPT\\\" -C INPUT -s \\\"$KUMA_IP\\\" -p tcp --dport 81 -j ACCEPT 2>/dev/null; then\"},\"line\":47},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"\\\"$IPT\\\" -I INPUT 1 -s \\\"$KUMA_IP\\\" -p tcp --dport 81 -j ACCEPT\"},\"line\":50},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"add_input_rule \\\"$IPT\\\" -p tcp --dport 81 ! -i lo -j DROP\"},\"line\":55},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"add_input_rule \\\"$IP6T\\\" -p tcp --dport 81 ! -i lo -j DROP\"},\"line\":56},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"\\\"$IPT\\\" -C INPUT -i wt0 -s <IP:CGNAT_OVERLAY_CANDIDATE:7feea0554afada76>/16 -p tcp -m multiport --dports 80,443 -j ACCEPT 2>/dev/null || status=ERROR\"},\"line\":61},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"[ -z \\\"${KUMA_IP:-}\\\" ] || \\\"$IPT\\\" -C INPUT -s \\\"$KUMA_IP\\\" -p tcp --dport 81 -j ACCEPT 2>/dev/null || status=ERROR\"},\"line\":62},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"\\\"$IPT\\\" -C INPUT -p tcp --dport 81 ! -i lo -j DROP 2>/dev/null || status=ERROR\"},\"line\":63},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"if \\\"$IPT\\\" -C INPUT -p udp --dport 51820 -j DROP 2>/dev/null; then\"},\"line\":64},{\"evidence\":{\"kind\":\"REDACTED_SECRET_BEARING_LINE\",\"line_sha256\":\"afec0cfc0d1fd30371b43a57bd6bb2c5e7abf28c5f31e7c0b1b915200f891fa4\",\"var_refs\":[]},\"line\":68}],\"role_hint\":[\"SPB_INGRESS\"],\"source\":{\"basename\":\"homelab-edge-ingress-hardening\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"c50956c9b33835940d70a6b64d295b3d0ddeeca304b11deadcc91145f5c6c97d\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Description=Homelab edge ingress hardening rules\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:4a21a1c27a6cbb8a>\"},\"line\":8},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"WantedBy=multi-user.target\"},\"line\":12}],\"role_hint\":[\"SPB_INGRESS\"],\"source\":{\"basename\":\"homelab-edge-ingress-hardening.service\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"46fd7f5094fd54a19665dc8d535c977b492de7ee4a52970a5c7c309428282e95\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Description=Re-apply homelab edge ingress hardening rules\"},\"line\":2}],\"role_hint\":[\"SPB_INGRESS\"],\"source\":{\"basename\":\"homelab-edge-ingress-hardening.timer\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"9f00ab8ac998a1c9b2cf556fb6e257e737c2cbd62608f7a38310ba3d547e1df5\"}},{\"assignments\":[{\"key\":\"VPS_IP\",\"kind\":\"HOST\",\"line\":4,\"value\":{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"f743a81d85de402239bdb782892adc0886327b57d99fdb0b889aaf4768e59620\"}}],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"SERVICE=netbird-vps-backup\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"VPS_IP=<IP:PUBLIC:f743a81d85de4022>\"},\"line\":4},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:069b630e24267642>\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:22cbb8d0af019715>\"},\"line\":6}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-backup.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"c9ec7a06c04903e50186b3ee98b8aadfb39632d401824b8741cde5f2c1803013\"}},{\"assignments\":[{\"key\":\"DST_HOST\",\"kind\":\"HOST\",\"line\":4,\"value\":{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"01df4a7e1c20cbeb1656e21eb725b486a6b35e31bad29c61a4f63d6d4fb5660b\"}}],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"SERVICE=netbird-vps-offhost\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"DST_HOST=<IP:PRIVATE:01df4a7e1c20cbeb>\"},\"line\":4},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:4a8eddddea83e58d>\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"REMOTE_LATEST=20260701T013054Z\"},\"line\":7},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"REMOTE_FILES=30\"},\"line\":8},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"REMOTE_SIZE=466M\"},\"line\":9}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-offhost.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"24ad9010c9b2a63d0200e4eab876ed55d0a6674865ec29eba0e5ffa0cadb9caf\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"SERVICE=netbird-vps-restore-validation\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:dbae31e30e1c5fd4>/netbird-vps-backup.tgz\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"ROOT_NETBIRD_ENTRIES=7\"},\"line\":9}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-restore.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"03182de1081e8461f8305079d0f1e53ab00801963b0f094053428bb9e4fddd0c\"}},{\"assignments\":[{\"key\":\"STATUS\",\"kind\":\"SECRET_REDACTED\",\"line\":1,\"line_sha256\":\"ff6f83e238f06cf43841ebe32e24641aead2a80e230247de6170162c1d717692\"}],\"evidence\":[{\"evidence\":{\"kind\":\"REDACTED_SECRET_BEARING_LINE\",\"line_sha256\":\"ff6f83e238f06cf43841ebe32e24641aead2a80e230247de6170162c1d717692\",\"var_refs\":[]},\"line\":1}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-trust-clean-seal.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"1a9ca0f3db859fbb8ee746a8b92af49c40c32f6f447cec1beed77050a8acb15c\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=<IP:CGNAT_OVERLAY_CANDIDATE:5649415146501fa3> PUBLIC_VPS_IP=<IP:PUBLIC:f743a81d85de4022> PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md\"},\"line\":1}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-trust-closure.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"130cdd6f02e08d3f6c81c06b9847451adae99e0a083cae5830079abe7a6917af\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"JOB_ID=netbird_vps_backup\"},\"line\":4},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"JOB_NAME=netbird-vps-backup\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"TIMER=netbird-vps-backup.timer\"},\"line\":7},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"SERVICE=netbird-vps-backup.service\"},\"line\":8},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:3da699c4b7695192>/0-netbird-vps-trust.txt\"},\"line\":15},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"LEGACY_SOURCE_PATH=/var/lib/homelab-health/netbird-vps-trust.txt\"},\"line\":21},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"CANONICAL_JOB_ID=netbird_vps_backup\"},\"line\":22}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-trust.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"f7fba6fb4a8c37260757f75d0327db5e0c63d753d0e859d4f4c60df8bcbd3f2f\"}},{\"assignments\":[{\"key\":\"User\",\"kind\":\"USER\",\"line\":9,\"value\":\"root\"}],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Description=Create current ingress recovery artifact on cold standby node\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"User=root\"},\"line\":9},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:1f7afc3312fd233f>\"},\"line\":11}],\"role_hint\":[\"SPB_INGRESS\"],\"source\":{\"basename\":\"homelab-ingress-standby-refresh.service\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"344df7907257f81499a2bdc6531b3f203edb4e4d3df0a586bbfe5a6b357ea02b\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Description=Daily ingress cold standby recovery artifact refresh\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Unit=homelab-ingress-standby-refresh.service\"},\"line\":8}],\"role_hint\":[\"SPB_INGRESS\"],\"source\":{\"basename\":\"homelab-ingress-standby-refresh.timer\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"7c9e49d69d774458a73ef95449cfabb56b79e5601174bf609548a63ee197cdc7\"}},{\"assignments\":[{\"key\":\"VPS_IP\",\"kind\":\"HOST\",\"line\":4,\"value\":{\"address_class\":\"PUBLIC\",\"ip_sha256\":\"f743a81d85de402239bdb782892adc0886327b57d99fdb0b889aaf4768e59620\"}}],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"SERVICE=netbird-vps-backup\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"VPS_IP=<IP:PUBLIC:f743a81d85de4022>\"},\"line\":4},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:069b630e24267642>\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:22cbb8d0af019715>\"},\"line\":6}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-backup.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"ff0d6f530cf4369d1bd150444195b755fdd35211d2653282b9f7c4b94b185fe8\"}},{\"assignments\":[{\"key\":\"DST_HOST\",\"kind\":\"HOST\",\"line\":4,\"value\":{\"address_class\":\"PRIVATE\",\"ip_sha256\":\"01df4a7e1c20cbeb1656e21eb725b486a6b35e31bad29c61a4f63d6d4fb5660b\"}}],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"SERVICE=netbird-vps-offhost\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"DST_HOST=<IP:PRIVATE:01df4a7e1c20cbeb>\"},\"line\":4},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:4a8eddddea83e58d>\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"REMOTE_LATEST=20260701T013054Z\"},\"line\":7},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"REMOTE_FILES=30\"},\"line\":8},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"REMOTE_SIZE=466M\"},\"line\":9}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-offhost.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"4daf227b611bbc2e721c8f827be86e845c18724d8dd011110fef7749dd59246b\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"SERVICE=netbird-vps-restore-validation\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:dbae31e30e1c5fd4>/netbird-vps-backup.tgz\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"ROOT_NETBIRD_ENTRIES=7\"},\"line\":9}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-restore.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"016df98d88a53e58eb13a37c7448de465d5c626181e63a8c7e36508790679abc\"}},{\"assignments\":[{\"key\":\"STATUS\",\"kind\":\"SECRET_REDACTED\",\"line\":1,\"line_sha256\":\"ff6f83e238f06cf43841ebe32e24641aead2a80e230247de6170162c1d717692\"}],\"evidence\":[{\"evidence\":{\"kind\":\"REDACTED_SECRET_BEARING_LINE\",\"line_sha256\":\"ff6f83e238f06cf43841ebe32e24641aead2a80e230247de6170162c1d717692\",\"var_refs\":[]},\"line\":1}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-trust-clean-seal.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"6c209e239afa21900a8a52e9bc48880daf3a471cc9a76782c8b4fe653584ae25\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STATUS=OK TS=2026-07-07T15:29:49Z TYPE=netbird-vps-trust-closure BAD=0 WARN=0 MODE=TRUST_CLOSURE_NO_KNOWN_HOSTS_CHANGE TRUSTED_NETBIRD_IDENTITY=edge-vm TRUSTED_NETBIRD_IP=<IP:CGNAT_OVERLAY_CANDIDATE:5649415146501fa3> PUBLIC_VPS_IP=<IP:PUBLIC:f743a81d85de4022> PUBLIC_VPS_DECISION=REJECTED_HOSTKEY_MISMATCH PUBLIC_IP_STRICT_BLOCKED=YES PUBLIC_IP_KEYSCAN_MATCH=NO EDGE_REF_OK=1 NETBIRD_PEER_OK=1 REPORT=/var/lib/homelab-netbird-vps-trust/closure-latest.md\"},\"line\":1}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-trust-closure.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"59d5c1cbd74daa8014c62a4545760605ec77238a1befd138d9f60d989e61bfd0\"}},{\"assignments\":[],\"evidence\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"JOB_ID=netbird_vps_backup\"},\"line\":4},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"JOB_NAME=netbird-vps-backup\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"TIMER=netbird-vps-backup.timer\"},\"line\":7},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"SERVICE=netbird-vps-backup.service\"},\"line\":8},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"<LONG:3da699c4b7695192>/0-netbird-vps-trust.txt\"},\"line\":15},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"LEGACY_SOURCE_PATH=/var/lib/homelab-health/netbird-vps-trust.txt\"},\"line\":21},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"CANONICAL_JOB_ID=netbird_vps_backup\"},\"line\":22}],\"role_hint\":[\"US_NETBIRD\"],\"source\":{\"basename\":\"netbird-vps-trust.txt\",\"commit_ref_sha256\":\"a297d3ec3244aec51a37e12d93913d8580219621acdef6f3efd27618e2eb9092\",\"kind\":\"GIT\",\"path_sha256\":\"7b48060cff67cb75166dd86dcd1f32cb4bc1ddd13da4d3c683b4480b5bb7a813\"}}]}\nINFRA172_JOURNAL_EVIDENCE={\"rows\":[{\"rc\":0,\"selected_rows\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Starting netbird-vps-backup.service - NetBird VPS backup to pve01 staging...\"},\"line\":1},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STATUS=OK TS=2026-07-14T01:28:39Z TYPE=superseded-unit UNIT=netbird-vps-backup.service <LONG:61737823500f577d> ACTION=noop_superseded_unit\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"netbird-vps-backup.service: Deactivated successfully.\"},\"line\":3},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Finished netbird-vps-backup.service - NetBird VPS backup to pve01 staging.\"},\"line\":4},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Starting netbird-vps-backup.service - NetBird VPS backup to pve01 staging...\"},\"line\":5},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STATUS=OK TS=2026-07-15T01:39:00Z TYPE=superseded-unit UNIT=netbird-vps-backup.service <LONG:61737823500f577d> ACTION=noop_superseded_unit\"},\"line\":6},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"netbird-vps-backup.service: Deactivated successfully.\"},\"line\":7},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Finished netbird-vps-backup.service - NetBird VPS backup to pve01 staging.\"},\"line\":8},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Starting netbird-vps-backup.service - NetBird VPS backup to pve01 staging...\"},\"line\":9},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STATUS=OK TS=2026-07-16T01:25:14Z TYPE=superseded-unit UNIT=netbird-vps-backup.service <LONG:61737823500f577d> ACTION=noop_superseded_unit\"},\"line\":10},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"netbird-vps-backup.service: Deactivated successfully.\"},\"line\":11},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Finished netbird-vps-backup.service - NetBird VPS backup to pve01 staging.\"},\"line\":12},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Starting netbird-vps-backup.service - NetBird VPS backup to pve01 staging...\"},\"line\":13},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"STATUS=OK TS=2026-07-17T01:31:14Z TYPE=superseded-unit UNIT=netbird-vps-backup.service <LONG:61737823500f577d> ACTION=noop_superseded_unit\"},\"line\":14},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"netbird-vps-backup.service: Deactivated successfully.\"},\"line\":15},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Finished netbird-vps-backup.service - NetBird VPS backup to pve01 staging.\"},\"line\":16}],\"unit\":\"netbird-vps-backup.service\"},{\"rc\":0,\"selected_rows\":[],\"unit\":\"netbird-vps-backup-restore.service\"},{\"rc\":0,\"selected_rows\":[],\"unit\":\"netbird-vps-backup-offhost.service\"},{\"rc\":0,\"selected_rows\":[{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Starting homelab-ingress-standby-refresh.service - Create current ingress recovery artifact on cold standby node...\"},\"line\":1},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"homelab-ingress-standby-refresh.service: Main process exited, code=exited, status=1/FAILURE\"},\"line\":2},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"homelab-ingress-standby-refresh.service: Failed with result 'exit-code'.\"},\"line\":3},{\"evidence\":{\"kind\":\"SANITIZED\",\"text\":\"Failed to start homelab-ingress-standby-refresh.service - Create current ingress recovery artifact on cold standby node.\"},\"line\":4}],\"unit\":\"homelab-ingress-standby-refresh.service\"}]}\nINFRA172_ROUTE_CANDIDATES={\"count\":0,\"rows\":[]}\nINFRA172_ROLE_ROUTE_SUMMARY={\"MD_RELAY\":{\"historical_trusted_user_routes\":[],\"route_candidates\":[],\"trusted_user_route_proven\":false,\"trusted_user_routes\":[]},\"SPB_INGRESS\":{\"historical_trusted_user_routes\":[],\"route_candidates\":[],\"trusted_user_route_proven\":false,\"trusted_user_routes\":[]},\"US_NETBIRD\":{\"historical_trusted_user_routes\":[],\"route_candidates\":[],\"trusted_user_route_proven\":false,\"trusted_user_routes\":[]}}\nINFRA172_SUMMARY={\"decision\":\"HOLD_EXTERNAL_SSH_HISTORICAL_ROUTE_INCOMPLETE\",\"holds\":[\"US_NETBIRD:TRUSTED_USER_ROUTE_NOT_PROVEN\",\"MD_RELAY:TRUSTED_USER_ROUTE_NOT_PROVEN\",\"SPB_INGRESS:TRUSTED_USER_ROUTE_NOT_PROVEN\"],\"roles_hold\":[\"US_NETBIRD\",\"MD_RELAY\",\"SPB_INGRESS\"],\"roles_ready\":[]}\nEXTERNAL_SSH_ATTEMPTS=0\nSSH_KEYSCAN_ATTEMPTS=0\nKNOWN_HOSTS_WRITES=0\nSSH_CONFIG_WRITES=0\nCONFIGURATION_WRITES=0\nFILE_WRITES_BY_PROBE=0\nSECRETS_PRINTED=NO\nINFRA172_END\n"
}
View Git Blame Copy Permalink