homelab-runtime-publisher
39 lines
12 KiB
JSON
39 lines
12 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"channel": "homelab-runtime",
|
|
"command_id": "SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1",
|
|
"status": "OK",
|
|
"rc": 0,
|
|
"host": "pve01",
|
|
"mode": "read-only",
|
|
"component": "infra-vps-ssh-auth-routes-rca-readonly",
|
|
"started_at_utc": "2026-09-18T10:35:45Z",
|
|
"finished_at_utc": "2026-09-18T10:35:47Z",
|
|
"reference_register_checked": true,
|
|
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
|
|
"error_register_checked": true,
|
|
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
|
|
"command_sha256": "6d3929a38769781a3664917da603f2d2fa8d771d331e1851092ceea5d7d1a567",
|
|
"duplicate_failed_command_blocked": false,
|
|
"block_reason": null,
|
|
"execution_started": true,
|
|
"change_declared": false,
|
|
"result_contract_valid": true,
|
|
"result_contract_status": null,
|
|
"result_contract_error": null,
|
|
"command_rc": 0,
|
|
"changes_made": false,
|
|
"rollback_started": false,
|
|
"rollback_restored": null,
|
|
"mutation_outcome": "NO_MUTATION",
|
|
"sanitized": true,
|
|
"secrets_included": false,
|
|
"private_addresses_included": false,
|
|
"raw_evidence_retained_locally": true,
|
|
"raw_evidence_sha256": "d4c5803db9a3ba2d9c88fe2e72ff386d116915130a297525a2632b6e68289626",
|
|
"sanitized_output_sha256": "eeea2690fa056a6b3a8752fd6a312af873e9a416cc32b9cb07bdbd41ad6a9bd2",
|
|
"output_truncated_in_json": false,
|
|
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
|
|
"output": "VPS517R2R1_SAFE_REPORT={\"agent\":{\"keys\":[],\"rc\":2,\"ssh_auth_sock_present\":false,\"stderr_bytes\":58,\"stderr_sha256\":\"84b8eb561e5d34d856acb140340cdbe4f49d4a59bb36aea28d920e7e1d806a29\"},\"changes_made\":false,\"command_id\":\"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1\",\"decision\":\"PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED\",\"key_inventory\":[{\"bytes\":4788,\"mode\":\"0o600\",\"name\":\"authorized_keys\"},{\"bytes\":4788,\"derive_public_rc\":255,\"derive_public_stderr_bytes\":100,\"derive_public_stderr_sha256\":\"dba521506253f9f23dc439713e0de86f7f5efea288f4b58cbc4c9711716cae50\",\"mode\":\"0o600\",\"name\":\"authorized_keys.bak.remove-old-moba-rsa.20260617T160022Z\"},{\"bytes\":117,\"mode\":\"0o640\",\"name\":\"config\"},{\"bytes\":399,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg\",\"mode\":\"0o600\",\"name\":\"homelab-gitea-vm170\"},{\"bytes\":92,\"mode\":\"0o644\",\"name\":\"homelab-gitea-vm170.pub\",\"public_fp\":\"SHA256:f9h3a7BfK1+nUsw3aOjAUveexl+6bCY9Ae/64byIreg\"},{\"bytes\":432,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4\",\"mode\":\"0o600\",\"name\":\"homelab-ops-builder-status-ed25519\"},{\"bytes\":114,\"mode\":\"0o644\",\"name\":\"homelab-ops-builder-status-ed25519.pub\",\"public_fp\":\"SHA256:WEmWRIoYTy/wMABxSr1bwLTZWSJbfly3exggWmu5eT4\"},{\"bytes\":411,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"mode\":\"0o600\",\"name\":\"id_ed25519\"},{\"bytes\":100,\"mode\":\"0o644\",\"name\":\"id_ed25519.pub\",\"public_fp\":\"SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\"},{\"bytes\":432,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\",\"mode\":\"0o600\",\"name\":\"id_ed25519_netbird_operator\"},{\"bytes\":115,\"mode\":\"0o644\",\"name\":\"id_ed25519_netbird_operator.pub\",\"public_fp\":\"SHA256:wipXiBB3cpAwyWap9LcB185WjEEmDxtRJsI/UuMVAp0\"},{\"bytes\":3369,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"mode\":\"0o600\",\"name\":\"id_rsa\"},{\"bytes\":736,\"mode\":\"0o644\",\"name\":\"id_rsa.pub\",\"public_fp\":\"SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\"},{\"bytes\":15381,\"mode\":\"0o600\",\"name\":\"known_hosts\"},{\"bytes\":5327,\"mode\":\"0o600\",\"name\":\"known_hosts.bak.20260617T094043\"},{\"bytes\":5032,\"mode\":\"0o600\",\"name\":\"known_hosts.before-edge-refresh-20260615T194432Z\"},{\"bytes\":14837,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T040756Z\"},{\"bytes\":14766,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T042857\"},{\"bytes\":14778,\"mode\":\"0o600\",\"name\":\"known_hosts.before-vm150-20260816T042946\"},{\"bytes\":16158,\"mode\":\"0o600\",\"name\":\"known_hosts.old\"},{\"bytes\":16158,\"mode\":\"0o600\",\"name\":\"known_hosts.pre-vm160-20260903T200235Z\"},{\"bytes\":1283,\"mode\":\"0o600\",\"name\":\"known_hosts_netbird_vps\"},{\"bytes\":419,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s\",\"mode\":\"0o600\",\"name\":\"router-backup-ed25519\"},{\"bytes\":110,\"mode\":\"0o644\",\"name\":\"router-backup-ed25519.pub\",\"public_fp\":\"SHA256:ok4AGffG4xlVH2I6kN4YN0MRlMtJ4Z8XeSY8/ug+V+s\"},{\"bytes\":419,\"derive_public_rc\":0,\"derived_public_fp\":\"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o\",\"mode\":\"0o600\",\"name\":\"snikket-recovery-ed25519\"},{\"bytes\":104,\"mode\":\"0o644\",\"name\":\"snikket-recovery-ed25519.pub\",\"public_fp\":\"SHA256:C3xsDPfds6jMpM90Bj8YIvXHbY6VJcm7FXcmY0sNE6o\"}],\"known_host_archives\":[{\"nb2\":[{\"fps\":[\"SHA256:CcvO+J97741AHilFAN5Vd7tAzDy+i3B1z7mnBCaIh4g\",\"SHA256:WvVWcFZJ76J7jgHCQiDacIh40+ChvyAN0+OgrWgQ99k\",\"SHA256:Z9J24PJXaPzbotO7Kiw7VE/cngASmyr1OAhYaJpHFRw\"],\"hits\":3,\"query\":\"46.16.34.129\"}],\"path\":\"[SENSITIVE_PATH] Connecting to relay.pvepro.ru [[RELAY_IP]] port 22.\",\"debug1: Connection established.\",\"debug1: identity file [SENSITIVE_PATH] type 0\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type 3\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host 'relay.pvepro.ru' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"root@relay.pvepro.ru: Permission denied (publickey).\"],\"stderr_sha256\":\"7dd610853ce49195c76e2fa140f6693cb78d131a69b71ef19a0da59ea129f674\"},{\"host\":\"relay.netbird.selfhosted\",\"rc\":255,\"stderr_bytes\":13787,\"stderr_lines\":[\"debug1: Connecting to relay.netbird.selfhosted [[PRIVATE_IPV6]] port 22.\",\"debug1: Connection established.\",\"debug1: identity file [SENSITIVE_PATH] type 0\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type 3\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug1: identity file [SENSITIVE_PATH] type -1\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug2: host key algorithms: rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519\",\"debug1: kex: host key algorithm: ssh-ed25519\",\"debug1: Server host key: ssh-ed25519 SHA256:DXJGwunC5tEVvnC3nRxyayTN8FXmyJcVgf+Oa6udQsY\",\"debug1: Host 'relay.netbird.selfhosted' is known and matches the ED25519 host key.\",\"debug2: host key algorithms: ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256\",\"debug1: Authentications that can continue: publickey\",\"debug1: Offering public key: [SENSITIVE_PATH] RSA SHA256:bSyxARbKzSylpKwBNth7zTODkgTExZdhFwrYEH9zRO4\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug1: Offering public key: [SENSITIVE_PATH] ED25519 SHA256:s0CusF0IHQGVJ02oi7ejWkGhH9NkhTWonn3441toe5M\",\"debug1: Authentications that can continue: publickey\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"debug3: no such identity: [SENSITIVE_PATH] No such file or directory\",\"root@relay.netbird.selfhosted: Permission denied (publickey).\"],\"stderr_sha256\":\"66a781b909f930a0f27e1b66500e57d5b96b21ae031ade35a06286af93d81cd0\"}],\"remote_login_attempts\":2,\"schema_version\":1,\"source_hits\":[],\"ssh_config\":[],\"targets\":{\"edge01\":{\"ip_hash\":\"6d6149f42864ce03daf22828cf236bf64d5d9a004040746ddbb051d71c9fcbc5\",\"known_current\":[{\"file\":\"[SENSITIVE_PATH]\nVPS517R2R1_DECISION=PASS_SSH_AUTH_ROUTE_EVIDENCE_CAPTURED\nVPS517R2R1_NEXT_GATE=BUILD_EXACT_AUTH_INVENTORY_OR_REQUEST_PROVIDER_HOSTKEY_CONFIRMATION\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260918-INFRA-VPS-SSH-AUTH-ROUTES-RCA-READONLY-517R2R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
|
|
}
|