homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity
Files
b44c7b8c0052ce9ebd530c4862286e5c36ac572b
homelab-public-context/runtime/latest.json
T

39 lines
12 KiB
JSON
Raw Blame History

{
"schema_version": 1,
"channel": "homelab-runtime",
"command_id": "SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1",
"status": "OK",
"rc": 0,
"host": "pve01",
"mode": "read-only",
"component": "netbird-management-server-audit-readonly",
"started_at_utc": "2026-09-19T03:37:40Z",
"finished_at_utc": "2026-09-19T03:38:03Z",
"reference_register_checked": true,
"reference_sha256": "5a3d8e5154c41cb582a4e0aca68090be1f0138918bf82131a948df326f9d8d66",
"error_register_checked": true,
"error_register_sha256": "3b09a553ec0f527ed3afeed4753f52a74ee3036045bbfb3c685e9f8af4ba7ba0",
"command_sha256": "05748fa27e7bddef0ad5c6f6ce477b5291d901459a89061d4b508da45ea607cc",
"duplicate_failed_command_blocked": false,
"block_reason": null,
"execution_started": true,
"change_declared": false,
"result_contract_valid": true,
"result_contract_status": null,
"result_contract_error": null,
"command_rc": 0,
"changes_made": false,
"rollback_started": false,
"rollback_restored": null,
"mutation_outcome": "NO_MUTATION",
"sanitized": true,
"secrets_included": false,
"private_addresses_included": false,
"raw_evidence_retained_locally": true,
"raw_evidence_sha256": "b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e",
"sanitized_output_sha256": "b55c91adc8bb8db93f59736dc88c7266fb49256c924f5e8b21de50bcc13d262e",
"output_truncated_in_json": false,
"full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
"output": "ERROR_REGISTER_CHECK=OK\nREFERENCE_CHECK=OK\nAUTHORITY_CHECK_SCOPE=READABILITY_ONLY_INCIDENTS_NOT_CLOSED\nUSA_IDENTITY_GATES={\"inventory\":true,\"key\":true,\"moldova_hostkey\":true,\"usa_hostkey\":true}\nPVE1_TRANSPORT_RC=0\nPVE1_RECEIPT_VALID=true\nPVE1_OBSERVATION={\"role\":\"PVE1\",\"diagnostic_only\":true,\"endpoints\":[{\"label\":\"PVE1\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":false,\"dns_count\":1,\"dns_hashes\":[\"1fc73136d6d7\"],\"connect_hash\":\"1fc73136d6d7\",\"tcp_ms\":172,\"error\":\"TLS_TIMEOUT\",\"elapsed_ms\":15192}],\"grpc\":[],\"complete\":true}\nEDGE_TRANSPORT_RC=0\nEDGE_RECEIPT_VALID=true\nEDGE_OBSERVATION={\"role\":\"EDGE\",\"diagnostic_only\":true,\"endpoints\":[{\"label\":\"EDGE\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":true,\"dns_count\":1,\"dns_hashes\":[\"1fc73136d6d7\"],\"connect_hash\":\"1fc73136d6d7\",\"tcp_ms\":239,\"tls_ms\":498,\"tls_version\":\"TLSv1.3\",\"alpn\":\"h2\",\"certificate_sha256\":\"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf\",\"elapsed_ms\":498}],\"grpc\":[{\"label\":\"EDGE\",\"command_rc\":0,\"http_meta\":[\"200\",\"2\"],\"grpc_status\":\"0\",\"content_type\":\"application/grpc\"}],\"complete\":true}\nUSA_TRANSPORT_RC=0\nUSA_RECEIPT_VALID=true\nUSA_OBSERVATION={\"role\":\"USA\",\"diagnostic_only\":true,\"server\":{\"uid\":0,\"expected_hostname\":true,\"identity_ok\":true,\"listen_443\":{\"rc\":0,\"lines\":[\"LISTEN 0 4096 [ADDR:1fc73136d6d7]:443 [ADDR:19e362559721]:* users:((\\\"docker-proxy\\\",pid=997,fd=8))\"]},\"docker_rc\":0,\"containers\":[{\"name\":\"netbird-traefik\",\"image\":\"traefik:v3.6\",\"status\":\"Up 3 weeks\",\"ports\":\"\\\"netbird_netbird\\\"|{\\\"443/tcp\\\":[{\\\"HostIp\\\":\\\"[ADDR:1fc73136d6d7]\\\",\\\"HostPort\\\":\\\"443\\\"}],\\\"80/tcp\\\":[{\\\"HostIp\\\":\\\"[ADDR:1fc73136d6d7]\\\",\\\"HostPort\\\":\\\"80\\\"}]}\",\"inspect_rc\":0,\"logs_rc\":0,\"log_counts\":{\"deadline\":0,\"x509\":0,\"handshake\":0,\"refused\":0,\"grpc\":192,\"panic\":0}},{\"name\":\"netbird-dashboard\",\"image\":\"netbirdio/dashboard:latest\",\"status\":\"Up 3 weeks\",\"ports\":\"\\\"netbird_netbird\\\"|{\\\"443/tcp\\\":null,\\\"80/tcp\\\":null}\",\"inspect_rc\":0,\"logs_rc\":0,\"log_counts\":{\"deadline\":0,\"x509\":0,\"handshake\":0,\"refused\":0,\"grpc\":0,\"panic\":0}},{\"name\":\"netbird-server\",\"image\":\"netbirdio/netbird-server:latest\",\"status\":\"Up 3 weeks\",\"ports\":\"\\\"netbird_netbird\\\"|{\\\"3478/udp\\\":[{\\\"HostIp\\\":\\\"[ADDR:1fc73136d6d7]\\\",\\\"HostPort\\\":\\\"3478\\\"}]}\",\"inspect_rc\":0,\"logs_rc\":0,\"log_counts\":{\"deadline\":0,\"x509\":0,\"handshake\":0,\"refused\":0,\"grpc\":0,\"panic\":0}}],\"firewalls\":[{\"tool\":\"IPTABLES_FILTER\",\"rc\":0,\"lines\":[\"# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026\",\"*filter\",\":INPUT ACCEPT [0:0]\",\":FORWARD DROP [0:0]\",\":OUTPUT ACCEPT [0:0]\",\":DOCKER - [0:0]\",\":DOCKER-BRIDGE - [0:0]\",\":DOCKER-CT - [0:0]\",\":DOCKER-FORWARD - [0:0]\",\":DOCKER-INTERNAL - [0:0]\",\":DOCKER-USER - [0:0]\",\"[34669180:3550258849] -A FORWARD -j DOCKER-USER\",\"[34669180:3550258849] -A FORWARD -j DOCKER-FORWARD\",\"[85783:4117309] -A DOCKER -d [ADDR:be20ca75510c] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p udp -m udp --dport 3478 -j ACCEPT\",\"[83245:4960506] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 443 -j ACCEPT\",\"[55635:3113546] -A DOCKER -d [ADDR:b89efcf63724] ! -i br-eda2ddba3837 -o br-eda2ddba3837 -p tcp -m tcp --dport 80 -j ACCEPT\",\"[0:0] -A DOCKER ! -i br-eda2ddba3837 -o br-eda2ddba3837 -j DROP\",\"[0:0] -A DOCKER ! -i docker0 -o docker0 -j DROP\",\"[224663:12191361] -A DOCKER-BRIDGE -o br-eda2ddba3837 -j DOCKER\",\"[0:0] -A DOCKER-BRIDGE -o docker0 -j DOCKER\",\"[18547195:1763740123] -A DOCKER-CT -o br-eda2ddba3837 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\",\"[0:0] -A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT\",\"[34669180:3550258849] -A DOCKER-FORWARD -j DOCKER-CT\",\"[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-INTERNAL\",\"[16121985:1786518726] -A DOCKER-FORWARD -j DOCKER-BRIDGE\",\"[15897322:1774327365] -A DOCKER-FORWARD -i br-eda2ddba3837 -j ACCEPT\",\"[0:0] -A DOCKER-FORWARD -i docker0 -j ACCEPT\",\"COMMIT\",\"# Completed on Sat Sep 19 [IPV6] 2026\"],\"selected_lines\":29,\"truncated\":false},{\"tool\":\"IPTABLES_NAT\",\"rc\":0,\"lines\":[\"# Generated by iptables-save v1.8.9 (nf_tables) on Sat Sep 19 [IPV6] 2026\",\"*nat\",\":PREROUTING ACCEPT [0:0]\",\":INPUT ACCEPT [0:0]\",\":OUTPUT ACCEPT [0:0]\",\":POSTROUTING ACCEPT [0:0]\",\":DOCKER - [0:0]\",\"[3101282:183411842] -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER\",\"[0:0] -A OUTPUT ! -d [ADDR:4a7ea1593dd4] -m addrtype --dst-type LOCAL -j DOCKER\",\"[0:0] -A POSTROUTING -s [ADDR:3538188866fb] ! -o docker0 -j MASQUERADE\",\"[1290:77668] -A POSTROUTING -s [ADDR:c41135b9d022] ! -o br-eda2ddba3837 -j MASQUERADE\",\"[55635:3113546] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 80 -j DNAT --to-destination [ADDR:5d71fd96b350]:80\",\"[83245:4960506] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p tcp -m tcp --dport 443 -j DNAT --to-destination [ADDR:5d71fd96b350]:443\",\"[85694:4113877] -A DOCKER -d [ADDR:e6de1153c20d] ! -i br-eda2ddba3837 -p udp -m udp --dport 3478 -j DNAT --to-destination [ADDR:5ca1cde58f6a]:3478\",\"COMMIT\",\"# Completed on Sat Sep 19 [IPV6] 2026\"],\"selected_lines\":16,\"truncated\":false},{\"tool\":\"NFT\",\"rc\":0,\"lines\":[\"table ip nat {\",\"\\tchain DOCKER {\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:1fc73136d6d7] tcp dport 80 counter packets 55635 bytes 3113546 dnat to [ADDR:5d71fd96b350]:80\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:1fc73136d6d7] tcp dport 443 counter packets 83245 bytes 4960506 dnat to [ADDR:5d71fd96b350]:443\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:1fc73136d6d7] udp dport 3478 counter packets 85694 bytes 4113877 dnat to [ADDR:5ca1cde58f6a]:3478\",\"\\tchain PREROUTING {\",\"\\t\\ttype nat hook prerouting priority dstnat; policy accept;\",\"\\t\\tfib daddr type local counter packets 3101282 bytes 183411842 jump DOCKER\",\"\\tchain OUTPUT {\",\"\\t\\ttype nat hook output priority -100; policy accept;\",\"\\t\\tip daddr != [ADDR:4a7ea1593dd4] fib daddr type local counter packets 0 bytes 0 jump DOCKER\",\"\\tchain POSTROUTING {\",\"\\t\\ttype nat hook postrouting priority srcnat; policy accept;\",\"table ip filter {\",\"\\tchain DOCKER {\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5ca1cde58f6a] udp dport 3478 counter packets 85783 bytes 4117309 accept\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d71fd96b350] tcp dport 443 counter packets 83245 bytes 4960506 accept\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d71fd96b350] tcp dport 80 counter packets 55635 bytes 3113546 accept\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" oifname \\\"br-eda2ddba3837\\\" counter packets 0 bytes 0 drop\",\"\\t\\tiifname != \\\"docker0\\\" oifname \\\"docker0\\\" counter packets 0 bytes 0 drop\",\"\\tchain DOCKER-FORWARD {\",\"\\t\\tcounter packets 34669180 bytes 3550258849 jump DOCKER-CT\",\"\\t\\tcounter packets 16121985 bytes 1786518726 jump DOCKER-INTERNAL\",\"\\t\\tcounter packets 16121985 bytes 1786518726 jump DOCKER-BRIDGE\",\"\\t\\tiifname \\\"br-eda2ddba3837\\\" counter packets 15897322 bytes 1774327365 accept\",\"\\t\\tiifname \\\"docker0\\\" counter packets 0 bytes 0 accept\",\"\\tchain DOCKER-BRIDGE {\",\"\\t\\toifname \\\"br-eda2ddba3837\\\" counter packets 224663 bytes 12191361 jump DOCKER\",\"\\t\\toifname \\\"docker0\\\" counter packets 0 bytes 0 jump DOCKER\",\"\\tchain DOCKER-CT {\",\"\\t\\toifname \\\"br-eda2ddba3837\\\" ct state related,established counter packets 18547195 bytes 1763740123 accept\",\"\\t\\toifname \\\"docker0\\\" ct state related,established counter packets 0 bytes 0 accept\",\"\\tchain DOCKER-INTERNAL {\",\"\\tchain FORWARD {\",\"\\t\\ttype filter hook forward priority filter; policy drop;\",\"\\t\\tcounter packets 34669180 bytes 3550258849 jump DOCKER-USER\",\"\\t\\tcounter packets 34669180 bytes 3550258849 jump DOCKER-FORWARD\",\"\\tchain DOCKER-USER {\",\"table ip6 nat {\",\"\\tchain DOCKER {\",\"\\tchain PREROUTING {\",\"\\t\\ttype nat hook prerouting priority dstnat; policy accept;\",\"\\t\\tfib daddr type local counter packets 0 bytes 0 jump DOCKER\",\"\\tchain OUTPUT {\",\"\\t\\ttype nat hook output priority -100; policy accept;\",\"\\t\\tip6 daddr != [IPV6] fib daddr type local counter packets 0 bytes 0 jump DOCKER\",\"table ip6 filter {\",\"\\tchain DOCKER {\",\"\\tchain DOCKER-FORWARD {\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-CT\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-INTERNAL\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-BRIDGE\",\"\\tchain DOCKER-BRIDGE {\",\"\\tchain DOCKER-CT {\",\"\\tchain DOCKER-INTERNAL {\",\"\\tchain FORWARD {\",\"\\t\\ttype filter hook forward priority filter; policy accept;\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-USER\",\"\\t\\tcounter packets 0 bytes 0 jump DOCKER-FORWARD\",\"\\tchain DOCKER-USER {\",\"table ip raw {\",\"\\tchain PREROUTING {\",\"\\t\\ttype filter hook prerouting priority raw; policy accept;\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d7b39d190b3] counter packets 0 bytes 0 drop\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5d71fd96b350] counter packets 0 bytes 0 drop\",\"\\t\\tiifname != \\\"br-eda2ddba3837\\\" ip daddr [ADDR:5ca1cde58f6a] counter packets 0 bytes 0 drop\"],\"selected_lines\":66,\"truncated\":false}]},\"endpoints\":[{\"label\":\"LOCAL_SNI\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":false,\"connect_hash\":\"12ca17b49af2\",\"error\":\"ConnectionRefusedError\",\"errno\":111,\"elapsed_ms\":2},{\"label\":\"SERVER_PUBLIC\",\"sni\":\"nb.pvepro.ru\",\"tls_verified\":true,\"dns_count\":1,\"dns_hashes\":[\"1fc73136d6d7\"],\"connect_hash\":\"1fc73136d6d7\",\"tcp_ms\":173,\"tls_ms\":234,\"tls_version\":\"TLSv1.3\",\"alpn\":\"h2\",\"certificate_sha256\":\"e88a121253506f7d5a23352beb09fd7ec63a65a2e3827ad157c2cc3708d9d9cf\",\"elapsed_ms\":234}],\"grpc\":[{\"label\":\"LOCAL_GRPC\",\"command_rc\":7,\"http_meta\":[\"000\",\"0\"],\"grpc_status\":null,\"content_type\":null},{\"label\":\"SERVER_PUBLIC_GRPC\",\"command_rc\":0,\"http_meta\":[\"200\",\"2\"],\"grpc_status\":\"0\",\"content_type\":\"application/grpc\"}],\"complete\":true}\nTASK_COMPLETE=true\nTASK_RESULT=NETBIRD_SERVER_EVIDENCE_COLLECTED\nNO_CONNECTION_FIX_APPLIED=true\nHOMELAB_RESULT_CONTRACT={\"version\":1,\"command_id\":\"SUPPORT-260919-NETBIRD-MANAGEMENT-SERVER-AUDIT-READONLY-603R1\",\"status\":\"OK\",\"changes_made\":false,\"rollback_started\":false,\"rollback_restored\":null}\n"
}
View Git Blame Copy Permalink