From 18cae0c2a814ba9200bfe8a941648dd6fc92b7a8 Mon Sep 17 00:00:00 2001
From: homelab-runtime-publisher <homelab-runtime@localhost>
Date: Tue, 21 Jul 2026 08:10:05 +0000
Subject: [PATCH] runtime: publish GITEA-PUSH-AUTH-PREFLIGHT-002

---
 .../GITEA-PUSH-AUTH-PREFLIGHT-002.json        | 30 ++++++++++++++++
 .../history/GITEA-PUSH-AUTH-PREFLIGHT-002.txt | 34 +++++++++++++++++++
 runtime/latest.json                           | 22 ++++++------
 runtime/latest.txt                            | 26 +++++++++-----
 4 files changed, 93 insertions(+), 19 deletions(-)
 create mode 100644 runtime/history/GITEA-PUSH-AUTH-PREFLIGHT-002.json
 create mode 100644 runtime/history/GITEA-PUSH-AUTH-PREFLIGHT-002.txt

diff --git a/runtime/history/GITEA-PUSH-AUTH-PREFLIGHT-002.json b/runtime/history/GITEA-PUSH-AUTH-PREFLIGHT-002.json
new file mode 100644
index 0000000..73aa494
--- /dev/null
+++ b/runtime/history/GITEA-PUSH-AUTH-PREFLIGHT-002.json
@@ -0,0 +1,30 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "GITEA-PUSH-AUTH-PREFLIGHT-002",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "read-only",
+  "component": "gitea-runtime",
+  "started_at_utc": "2026-07-21T08:10:04Z",
+  "finished_at_utc": "2026-07-21T08:10:05Z",
+  "reference_register_checked": true,
+  "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
+  "error_register_checked": true,
+  "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
+  "command_sha256": "fee480193ff107262adf58ccb5b4089895a624b828eb4e7aef32e18525fb4e77",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "changes_made": false,
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "6f3e6ef3a8d3331e56da61f5e1c7ae233780a1053a0ad17249b404d28dada8f7",
+  "sanitized_output_sha256": "6f3e6ef3a8d3331e56da61f5e1c7ae233780a1053a0ad17249b404d28dada8f7",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "===== GITEA PUSH AUTH PREFLIGHT =====\ngitea version 1.26.2 built with go1.26.3-X:jsonv2 : bindata, timetzdata, sqlite, sqlite_unlock_notify\n===== TOKEN CLI HELP =====\n2026/07/21 08:10:05 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.\n===== AUTH FILES =====\nAUTH_DIR_PRESENT=yes MODE=755 OWNER=root:root\nFILE=token PRESENT=no\nFILE=askpass PRESENT=no\nTOKEN_NONEMPTY=no\nCHANGES_MADE=NO\n"
+}
diff --git a/runtime/history/GITEA-PUSH-AUTH-PREFLIGHT-002.txt b/runtime/history/GITEA-PUSH-AUTH-PREFLIGHT-002.txt
new file mode 100644
index 0000000..2628fcc
--- /dev/null
+++ b/runtime/history/GITEA-PUSH-AUTH-PREFLIGHT-002.txt
@@ -0,0 +1,34 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=GITEA-PUSH-AUTH-PREFLIGHT-002
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=read-only
+COMPONENT=gitea-runtime
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
+COMMAND_SHA256=fee480193ff107262adf58ccb5b4089895a624b828eb4e7aef32e18525fb4e77
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGES_MADE=false
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=6f3e6ef3a8d3331e56da61f5e1c7ae233780a1053a0ad17249b404d28dada8f7
+SANITIZED_OUTPUT_SHA256=6f3e6ef3a8d3331e56da61f5e1c7ae233780a1053a0ad17249b404d28dada8f7
+OUTPUT_BEGIN
+===== GITEA PUSH AUTH PREFLIGHT =====
+gitea version 1.26.2 built with go1.26.3-X:jsonv2 : bindata, timetzdata, sqlite, sqlite_unlock_notify
+===== TOKEN CLI HELP =====
+2026/07/21 08:10:05 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.
+===== AUTH FILES =====
+AUTH_DIR_PRESENT=yes MODE=755 OWNER=root:root
+FILE=token PRESENT=no
+FILE=askpass PRESENT=no
+TOKEN_NONEMPTY=no
+CHANGES_MADE=NO
+
+OUTPUT_END
+CHAT_OUTPUT_END
diff --git a/runtime/latest.json b/runtime/latest.json
index 2d79e6e..73aa494 100644
--- a/runtime/latest.json
+++ b/runtime/latest.json
@@ -1,30 +1,30 @@
 {
   "schema_version": 1,
   "channel": "homelab-runtime",
-  "command_id": "GITEA-PUSH-AUTH-001",
-  "status": "FAIL",
-  "rc": 1,
+  "command_id": "GITEA-PUSH-AUTH-PREFLIGHT-002",
+  "status": "OK",
+  "rc": 0,
   "host": "pve01",
-  "mode": "change",
+  "mode": "read-only",
   "component": "gitea-runtime",
-  "started_at_utc": "2026-07-21T08:03:07Z",
-  "finished_at_utc": "2026-07-21T08:03:07Z",
+  "started_at_utc": "2026-07-21T08:10:04Z",
+  "finished_at_utc": "2026-07-21T08:10:05Z",
   "reference_register_checked": true,
   "reference_sha256": "f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2",
   "error_register_checked": true,
   "error_register_sha256": "ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc",
-  "command_sha256": "fcfc28bcc5acb6382e895d5ed7cf51d7d5a3e2f5d8f8332770c58b42039f8a94",
+  "command_sha256": "fee480193ff107262adf58ccb5b4089895a624b828eb4e7aef32e18525fb4e77",
   "duplicate_failed_command_blocked": false,
   "block_reason": null,
   "execution_started": true,
-  "changes_made": true,
+  "changes_made": false,
   "sanitized": true,
   "secrets_included": false,
   "private_addresses_included": false,
   "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
-  "sanitized_output_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "raw_evidence_sha256": "6f3e6ef3a8d3331e56da61f5e1c7ae233780a1053a0ad17249b404d28dada8f7",
+  "sanitized_output_sha256": "6f3e6ef3a8d3331e56da61f5e1c7ae233780a1053a0ad17249b404d28dada8f7",
   "output_truncated_in_json": false,
   "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": ""
+  "output": "===== GITEA PUSH AUTH PREFLIGHT =====\ngitea version 1.26.2 built with go1.26.3-X:jsonv2 : bindata, timetzdata, sqlite, sqlite_unlock_notify\n===== TOKEN CLI HELP =====\n2026/07/21 08:10:05 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.\n===== AUTH FILES =====\nAUTH_DIR_PRESENT=yes MODE=755 OWNER=root:root\nFILE=token PRESENT=no\nFILE=askpass PRESENT=no\nTOKEN_NONEMPTY=no\nCHANGES_MADE=NO\n"
 }
diff --git a/runtime/latest.txt b/runtime/latest.txt
index dbb438c..2628fcc 100644
--- a/runtime/latest.txt
+++ b/runtime/latest.txt
@@ -1,24 +1,34 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=GITEA-PUSH-AUTH-001
-STATUS=FAIL
-RC=1
+COMMAND_ID=GITEA-PUSH-AUTH-PREFLIGHT-002
+STATUS=OK
+RC=0
 HOST=pve01
-MODE=change
+MODE=read-only
 COMPONENT=gitea-runtime
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=f6f7749fda946015116cdbbd754c7e7f20356b4a6cf4df330a1b0b8fdf59cbb2
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=ab8308549db90d235b591af0581580c3c7ba1b287b129cc6111c2eef0a0f9ecc
-COMMAND_SHA256=fcfc28bcc5acb6382e895d5ed7cf51d7d5a3e2f5d8f8332770c58b42039f8a94
+COMMAND_SHA256=fee480193ff107262adf58ccb5b4089895a624b828eb4e7aef32e18525fb4e77
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGES_MADE=true
+CHANGES_MADE=false
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
-SANITIZED_OUTPUT_SHA256=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
+RAW_EVIDENCE_SHA256=6f3e6ef3a8d3331e56da61f5e1c7ae233780a1053a0ad17249b404d28dada8f7
+SANITIZED_OUTPUT_SHA256=6f3e6ef3a8d3331e56da61f5e1c7ae233780a1053a0ad17249b404d28dada8f7
 OUTPUT_BEGIN
+===== GITEA PUSH AUTH PREFLIGHT =====
+gitea version 1.26.2 built with go1.26.3-X:jsonv2 : bindata, timetzdata, sqlite, sqlite_unlock_notify
+===== TOKEN CLI HELP =====
+2026/07/21 08:10:05 modules/setting/setting.go:196:mustNotRunAsRoot() [F] Gitea is not supposed to be run as root. If you need to use privileged TCP ports please instead use `setcap` and the `cap_net_bind_service` permission.
+===== AUTH FILES =====
+AUTH_DIR_PRESENT=yes MODE=755 OWNER=root:root
+FILE=token PRESENT=no
+FILE=askpass PRESENT=no
+TOKEN_NONEMPTY=no
+CHANGES_MADE=NO
 
 OUTPUT_END
 CHAT_OUTPUT_END