homelab-admin/homelab-public-context
1
0
Fork 0
Code Activity

runtime: publish HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375

Browse Source
This commit is contained in:
homelab-runtime-publisher
2026-07-23 16:15:59 +00:00
parent b68dcbaaca
commit 2f3c84dd4a
4 changed files with 330 additions and 49 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runtime/latest.txt
+136 -42
View File
@@ -1,5 +1,5 @@
CHAT_OUTPUT_BEGIN
COMMAND_ID=HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374
COMMAND_ID=HOMELAB-READER-V3-STORAGE-CONTRACT-AUDIT-375
STATUS=OK
RC=0
HOST=pve01
@@ -9,54 +9,148 @@ REFERENCE_REGISTER_CHECK=OK
REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
ERROR_REGISTER_CHECK=OK
ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
COMMAND_SHA256=117ab20f3b55ada28354401cd2a707f61c67b0b1ff189501492795fb36526ae6
COMMAND_SHA256=7a9dc5ecf6ec239bf61ccf2a67f6b3238f06106fe9ff6ff7c5442f76dd566e20
DUPLICATE_FAILED_COMMAND_BLOCKED=false
EXECUTION_STARTED=true
CHANGES_MADE=false
SANITIZED=yes
SECRETS_INCLUDED=no
PRIVATE_ADDRESSES_INCLUDED=no
RAW_EVIDENCE_SHA256=b256b96004621b936d2338ec79126b6379e5097775d231a75fb1153df1709176
SANITIZED_OUTPUT_SHA256=b256b96004621b936d2338ec79126b6379e5097775d231a75fb1153df1709176
RAW_EVIDENCE_SHA256=520e76d1ea9c69ce029685bd7089a4d2b361287d3133004063ec0fd5adc97ee3
SANITIZED_OUTPUT_SHA256=3bbc00cf03cf0b7088f1551454d01bf5f982791084f4c03918afecbe2986f1e9
OUTPUT_BEGIN
DETAIL=READER_PROCESS_ARGV_BEGIN
DETAIL=READER_ARG=/usr/bin/python3
DETAIL=READER_ARG=-B
DETAIL=READER_ARG=/usr/local/sbin/homelab-reader-server-v3
DETAIL=READER_PROCESS_ARGV_END
DETAIL=READER_SOURCE=/usr/local/sbin/homelab-reader-server-v3|META=root:root|755|3539|regular file|SHA256=092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536|SHEBANG=#!/usr/bin/python3|SYNTAX=PASS_PYTHON
PUBLIC_HEALTH_URL=https://git.gram1.ru/.well-known/homelab-reader/5a2edc1b3a3140d935e48ca0c0123849372dedff6fe55a48d25db7ab4de593b2/health
DETAIL=PUBLIC_READER_HEALTH={"status":"ok","version":3}
DETAIL=READER_ROUTE_LITERALS_BEGIN
DETAIL=READER_LITERAL=Cache-Control
DETAIL=READER_LITERAL=feed
DETAIL=READER_LITERAL=health
DETAIL=READER_LITERAL=health-v3
DETAIL=READER_LITERAL=no-cache
DETAIL=READER_LITERAL=no-store, no-cache, must-revalidate, max-age=0
DETAIL=READER_LITERAL=results
DETAIL=READER_LITERAL=results/
DETAIL=READER_ROUTE_LITERALS_END
DETAIL=READER_RELEVANT_SOURCE_BEGIN
DETAIL=READER_SOURCE_LINE=12|RESULTS=ROOT/"results"
DETAIL=READER_SOURCE_LINE=27| self.send_header("Cache-Control","no-store, no-cache, must-revalidate, max-age=0")
DETAIL=READER_SOURCE_LINE=28| self.send_header("Surrogate-Control","no-store")
DETAIL=READER_SOURCE_LINE=42| def do_GET(self):
DETAIL=READER_SOURCE_LINE=54| if relative=="health":
DETAIL=READER_SOURCE_LINE=55| self.reply(200,"application/json; charset=utf-8",b"{\"status\":\"ok\",\"version\":3}\n","health-v3",include_body)
DETAIL=READER_SOURCE_LINE=58| if relative=="feed":
DETAIL=READER_SOURCE_LINE=68| if relative.startswith("results/"):
DETAIL=READER_SOURCE_LINE=69| name=relative[len("results/"):]
DETAIL=READER_RELEVANT_SOURCE_END
DETAIL=LINKED_WRAPPER_FEED_LOGIC_BEGIN
DETAIL=LINKED_SOURCE_LINE=9|cid=$(/usr/bin/sed -n "s/^COMMAND_ID=//p" "$tmp" | /usr/bin/tail -n 1)
DETAIL=LINKED_SOURCE_LINE=15| /usr/bin/printf "IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\n" "$sha" "$cid"
DETAIL=LINKED_SOURCE_LINE=20| /usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' "$raw" | /usr/bin/tail -n 100 || true
DETAIL=LINKED_WRAPPER_FEED_LOGIC_END
DETAIL=READER_RUNNER_STORAGE_REFERENCE_COUNT=0
DETAIL=READER_RESULT_API_MARKER_COUNT=7
DETAIL=READER_CACHE_CONTROL_MARKER_COUNT=3
DETAIL=READER_V3_FEED_CONTRACT_AUDIT=PASS
DETAIL=READER_SHA256=092780e76ff18dfe2920c51f8b97dd09d194fd6cbdb59c3755c9fbf6530f3536
DETAIL=LINKED_SHA256=efa9fce3c768e6e0650903ca14fe4b6d5319d57f20ec87c465a4a00cb300d4e0
DETAIL=SOURCE_SYNTAX_AND_INTEGRITY=PASS
DETAIL=READER_STORAGE_SOURCE_BEGIN
DETAIL=READER_LINE=1|#!/usr/bin/python3
DETAIL=READER_LINE=2|import hashlib
DETAIL=READER_LINE=3|import http.server
DETAIL=READER_LINE=4|import json
DETAIL=READER_LINE=5|import os
DETAIL=READER_LINE=6|import pathlib
DETAIL=READER_LINE=7|import re
DETAIL=READER_LINE=8|import sys
DETAIL=READER_LINE=9|
DETAIL=READER_LINE=10|ROOT=pathlib.Path("/var/lib/homelab-reader-v3")
DETAIL=READER_LINE=11|MANIFEST=ROOT/"manifest.json"
DETAIL=READER_LINE=12|RESULTS=ROOT/"results"
DETAIL=READER_LINE=13|CAPABILITY=os.environ["HOMELAB_READER_CAPABILITY"]
DETAIL=READER_LINE=14|PORT=int(os.environ.get("HOMELAB_READER_PORT","18788"))
DETAIL=READER_LINE=15|RESULT_RE=re.compile(r"^[A-Za-z0-9][A-Za-z0-9._-]{0,127}-[0-9a-f]{64}\.txt$")
DETAIL=READER_LINE=16|
DETAIL=READER_LINE=17|class Handler(http.server.BaseHTTPRequestHandler):
DETAIL=READER_LINE=18| server_version="HomelabReader/3"
DETAIL=READER_LINE=19|
DETAIL=READER_LINE=20| def log_message(self,fmt,*args):
DETAIL=READER_LINE=21| sys.stderr.write("%s - %s\n"%(self.address_string(),fmt%args))
DETAIL=READER_LINE=22|
DETAIL=READER_LINE=23| def reply(self,status,content_type,payload,etag="",include_body=True):
DETAIL=READER_LINE=24| self.send_response(status)
DETAIL=READER_LINE=25| self.send_header("Content-Type",content_type)
DETAIL=READER_LINE=26| self.send_header("Content-Length",str(len(payload)))
DETAIL=READER_LINE=27| self.send_header("Cache-Control","no-store, no-cache, must-revalidate, max-age=0")
DETAIL=READER_LINE=28| self.send_header("Surrogate-Control","no-store")
DETAIL=READER_LINE=29| self.send_header("Pragma","no-cache")
DETAIL=READER_LINE=30| self.send_header("Expires","0")
DETAIL=READER_LINE=31| self.send_header("X-Robots-Tag","noindex, nofollow, noarchive")
DETAIL=READER_LINE=32| if etag:
DETAIL=READER_LINE=33| self.send_header("ETag",chr(34)+etag+chr(34))
DETAIL=READER_LINE=34| self.send_header("X-Homelab-Generation",etag)
DETAIL=READER_LINE=35| self.end_headers()
DETAIL=READER_LINE=36| if include_body:
DETAIL=READER_LINE=37| self.wfile.write(payload)
DETAIL=READER_LINE=38|
DETAIL=READER_LINE=39| def do_HEAD(self):
DETAIL=READER_LINE=40| self.handle_reader(False)
DETAIL=READER_LINE=41|
DETAIL=READER_LINE=42| def do_GET(self):
DETAIL=READER_LINE=43| self.handle_reader(True)
DETAIL=READER_LINE=44|
DETAIL=READER_LINE=45| def handle_reader(self,include_body):
DETAIL=READER_LINE=46| request_path=self.path.split("?",1)[0]
DETAIL=READER_LINE=47| prefix="/"+CAPABILITY+"/"
DETAIL=READER_LINE=48| if not request_path.startswith(prefix):
DETAIL=READER_LINE=49| self.reply(404,"text/plain; charset=utf-8",b"not found\n",include_body=include_body)
DETAIL=READER_LINE=50| return
DETAIL=READER_LINE=51|
DETAIL=READER_LINE=52| relative=request_path[len(prefix):]
DETAIL=READER_LINE=53|
DETAIL=READER_LINE=54| if relative=="health":
DETAIL=READER_LINE=55| self.reply(200,"application/json; charset=utf-8",b"{\"status\":\"ok\",\"version\":3}\n","health-v3",include_body)
DETAIL=READER_LINE=56| return
DETAIL=READER_LINE=57|
DETAIL=READER_LINE=58| if relative=="feed":
DETAIL=READER_LINE=59| try:
DETAIL=READER_LINE=60| payload=MANIFEST.read_bytes()
DETAIL=READER_LINE=61| document=json.loads(payload.decode("utf-8"))
DETAIL=READER_LINE=62| generation=str(document.get("generation","0"))
DETAIL=READER_LINE=63| self.reply(200,"application/json; charset=utf-8",payload,generation,include_body)
DETAIL=READER_LINE=64| except Exception:
DETAIL=READER_LINE=65| self.reply(500,"text/plain; charset=utf-8",b"reader error\n",include_body=include_body)
DETAIL=READER_LINE=66| return
DETAIL=READER_LINE=67|
DETAIL=READER_LINE=68| if relative.startswith("results/"):
DETAIL=READER_LINE=69| name=relative[len("results/"):]
DETAIL=READER_LINE=70| target=RESULTS/name
DETAIL=READER_LINE=71| if not RESULT_RE.fullmatch(name) or not target.is_file():
DETAIL=READER_LINE=72| self.reply(404,"text/plain; charset=utf-8",b"not found\n",include_body=include_body)
DETAIL=READER_LINE=73| return
DETAIL=READER_LINE=74| try:
DETAIL=READER_LINE=75| payload=target.read_bytes()
DETAIL=READER_LINE=76| digest=name.rsplit("-",1)[1][:-4]
DETAIL=READER_LINE=77| if hashlib.sha256(payload).hexdigest()!=digest:
DETAIL=READER_LINE=78| self.reply(500,"text/plain; charset=utf-8",b"integrity error\n",include_body=include_body)
DETAIL=READER_LINE=79| return
DETAIL=READER_LINE=80| self.reply(200,"text/plain; charset=utf-8",payload,digest,include_body)
DETAIL=READER_LINE=81| except Exception:
DETAIL=READER_LINE=82| self.reply(500,"text/plain; charset=utf-8",b"reader error\n",include_body=include_body)
DETAIL=READER_LINE=83| return
DETAIL=READER_LINE=84|
DETAIL=READER_LINE=85| self.reply(404,"text/plain; charset=utf-8",b"not found\n",include_body=include_body)
DETAIL=READER_LINE=86|
DETAIL=READER_LINE=87|class Server(http.server.ThreadingHTTPServer):
DETAIL=READER_LINE=88| allow_reuse_address=True
DETAIL=READER_LINE=89|
DETAIL=READER_LINE=90|Server(("[PRIVATE_IP]",PORT),Handler).serve_forever()
DETAIL=READER_STORAGE_SOURCE_END
DETAIL=LINKED_SOURCE_BEGIN
DETAIL=LINKED_LINE=1|#!/usr/bin/env bash
DETAIL=LINKED_LINE=2|set -o pipefail
DETAIL=LINKED_LINE=3|tmp=$(/usr/bin/mktemp)
DETAIL=LINKED_LINE=4|trap '/usr/bin/rm -f "$tmp"' EXIT
DETAIL=LINKED_LINE=5|
DETAIL=LINKED_LINE=6|/usr/local/sbin/homelab-chat-run "$@" 2>&1 | /usr/bin/tee "$tmp"
DETAIL=LINKED_LINE=7|rc=${PIPESTATUS[0]}
DETAIL=LINKED_LINE=8|
DETAIL=LINKED_LINE=9|cid=$(/usr/bin/sed -n "s/^COMMAND_ID=//p" "$tmp" | /usr/bin/tail -n 1)
DETAIL=LINKED_LINE=10|sha=$(/usr/bin/sed -n "s/^COMMIT_SHA=//p" "$tmp" | /usr/bin/tail -n 1)
DETAIL=LINKED_LINE=11|raw=$(/usr/bin/sed -n "s/^LOCAL_RAW_FILE=//p" "$tmp" | /usr/bin/tail -n 1)
DETAIL=LINKED_LINE=12|
DETAIL=LINKED_LINE=13|if [[ "$cid" =~ ^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$ && "$sha" =~ ^[0-9a-f]{40}$ ]]; then
DETAIL=LINKED_LINE=14| /usr/bin/printf "COMMIT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/commit/%s\n" "$sha"
DETAIL=LINKED_LINE=15| /usr/bin/printf "IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\n" "$sha" "$cid"
DETAIL=LINKED_LINE=16|fi
DETAIL=LINKED_LINE=17|
DETAIL=LINKED_LINE=18|/usr/bin/printf "FAILURE_DIAGNOSTIC_BEGIN\n"
DETAIL=LINKED_LINE=19|if [[ -n "$raw" && -r "$raw" ]]; then
DETAIL=LINKED_LINE=20| /usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' "$raw" | /usr/bin/tail -n 100 || true
DETAIL=LINKED_LINE=21|fi
DETAIL=LINKED_LINE=22|/usr/bin/printf "FAILURE_DIAGNOSTIC_END\n"
DETAIL=LINKED_LINE=23|
DETAIL=LINKED_LINE=24|exit "$rc"
DETAIL=LINKED_SOURCE_END
Result=success
ExecMainStatus=0
ExecStart={ path=/usr/bin/python3 ; argv[]=/usr/bin/python3 -B /usr/local/sbin/homelab-reader-server-v3 ; ignore_errors=no ; start_time=[Thu 2026-07-23 16:20:39 MSK] ; stop_time=[n/a] ; pid=1247 ; code=(null) ; status=0/0 }
LoadState=loaded
ActiveState=active
SubState=running
FragmentPath=/etc/systemd/system/homelab-reader-v3.service
DETAIL=PUBLIC_READER_ROUTE=feed|HTTP_STATUS=200
DETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374|HTTP_STATUS=404
DETAIL=PUBLIC_READER_ROUTE=results/HOMELAB-READER-V3-FEED-CONTRACT-AUDIT-374.txt|HTTP_STATUS=404
DETAIL=READER_V3_STORAGE_CONTRACT_AUDIT=PASS
CHANGES_MADE=NO
OUTPUT_END