runtime: publish GITEA-V4-LEGACY-CREDENTIAL-STATE-PROBE-20260730T190926Z

2026-07-30 19:10:01 +00:00
parent b6c1e741a6
commit 3911515900
4 changed files with 95 additions and 25 deletions
@@ -0,0 +1,38 @@
+{
+  "schema_version": 1,
+  "channel": "homelab-runtime",
+  "command_id": "GITEA-V4-LEGACY-CREDENTIAL-STATE-PROBE-20260730T190926Z",
+  "status": "OK",
+  "rc": 0,
+  "host": "pve01",
+  "mode": "verify",
+  "component": "gitea-machine-identity",
+  "started_at_utc": "2026-07-30T19:10:01Z",
+  "finished_at_utc": "2026-07-30T19:10:01Z",
+  "reference_register_checked": true,
+  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
+  "error_register_checked": true,
+  "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
+  "command_sha256": "dbef6d8fa1d436baa6c95e63a237ab6fcb50a81f1bf88fc4398cd24a30398776",
+  "duplicate_failed_command_blocked": false,
+  "block_reason": null,
+  "execution_started": true,
+  "change_declared": false,
+  "result_contract_valid": true,
+  "result_contract_status": null,
+  "result_contract_error": null,
+  "command_rc": 0,
+  "changes_made": false,
+  "rollback_started": false,
+  "rollback_restored": null,
+  "mutation_outcome": "NO_MUTATION",
+  "sanitized": true,
+  "secrets_included": false,
+  "private_addresses_included": false,
+  "raw_evidence_retained_locally": true,
+  "raw_evidence_sha256": "fd235ea52502ceb64ea27353731707a25f4db85d3a501969be96ee28944dec6a",
+  "sanitized_output_sha256": "fd235ea52502ceb64ea27353731707a25f4db85d3a501969be96ee28944dec6a",
+  "output_truncated_in_json": false,
+  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
+  "output": "{\"changes_made\":false,\"command_id\":\"GITEA-V4-LEGACY-CREDENTIAL-STATE-PROBE-20260730T190926Z\",\"credential_file\":{\"bytes\":139,\"entries\":[{\"bytes\":69,\"exact_preflight_regex_match\":true,\"index\":1,\"line_sha256\":\"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8\",\"parse_error\":null,\"parsed_ok\":true,\"password_present\":true,\"scheme\":\"https\",\"target_host\":true,\"username_present\":true},{\"bytes\":68,\"exact_preflight_regex_match\":false,\"index\":2,\"line_sha256\":\"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0\",\"parse_error\":null,\"parsed_ok\":true,\"password_present\":true,\"scheme\":\"https\",\"target_host\":false,\"username_present\":true}],\"entry_count\":2,\"exact_regex_match_count\":1,\"invalid_entry_count\":0,\"nonempty_line_count\":2,\"physical_line_count\":2,\"sha256\":\"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1\",\"target_host_count\":1,\"trailing_newline\":true},\"failed_predicates\":[\"nonempty_line_count_is_one\"],\"gitconfig\":{\"helper_count\":1,\"helper_values\":[\"store --file /root/.git-credentials\"],\"sha256\":\"eb4c4eea68a5e9af4f6e06d73a62d46220e1a53e49a687f7fca6129e653b3c8d\"},\"mutation_outcome\":\"NO_MUTATION\",\"next_stage\":\"PATCH_PREFLIGHT_OR_RUN_MIGRATION\",\"output_truncated_in_json\":false,\"preflight_predicates\":{\"exact_regex_match_count_is_one\":true,\"helper_exact\":true,\"invalid_entry_count_is_zero\":true,\"nonempty_line_count_is_one\":false,\"target_host_count_is_one\":true},\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":1,\"secrets_included\":false,\"stage\":\"LEGACY_CREDENTIAL_STATE_CAPTURED\",\"status\":\"OK\"}\n"
+}
@@ -0,0 +1,33 @@
+CHAT_OUTPUT_BEGIN
+COMMAND_ID=GITEA-V4-LEGACY-CREDENTIAL-STATE-PROBE-20260730T190926Z
+STATUS=OK
+RC=0
+HOST=pve01
+MODE=verify
+COMPONENT=gitea-machine-identity
+REFERENCE_REGISTER_CHECK=OK
+REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
+ERROR_REGISTER_CHECK=OK
+ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
+COMMAND_SHA256=dbef6d8fa1d436baa6c95e63a237ab6fcb50a81f1bf88fc4398cd24a30398776
+DUPLICATE_FAILED_COMMAND_BLOCKED=false
+EXECUTION_STARTED=true
+CHANGE_DECLARED=false
+RESULT_CONTRACT_VALID=true
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
+RESULT_CONTRACT_ERROR=NONE
+COMMAND_RC=0
+CHANGES_MADE=false
+ROLLBACK_STARTED=false
+ROLLBACK_RESTORED=null
+MUTATION_OUTCOME=NO_MUTATION
+SANITIZED=yes
+SECRETS_INCLUDED=no
+PRIVATE_ADDRESSES_INCLUDED=no
+RAW_EVIDENCE_SHA256=fd235ea52502ceb64ea27353731707a25f4db85d3a501969be96ee28944dec6a
+SANITIZED_OUTPUT_SHA256=fd235ea52502ceb64ea27353731707a25f4db85d3a501969be96ee28944dec6a
+OUTPUT_BEGIN
+{"changes_made":false,"command_id":"GITEA-V4-LEGACY-CREDENTIAL-STATE-PROBE-20260730T190926Z","credential_file":{"bytes":139,"entries":[{"bytes":69,"exact_preflight_regex_match":true,"index":1,"line_sha256":"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8","parse_error":null,"parsed_ok":true,"password_present":true,"scheme":"https","target_host":true,"username_present":true},{"bytes":68,"exact_preflight_regex_match":false,"index":2,"line_sha256":"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0","parse_error":null,"parsed_ok":true,"password_present":true,"scheme":"https","target_host":false,"username_present":true}],"entry_count":2,"exact_regex_match_count":1,"invalid_entry_count":0,"nonempty_line_count":2,"physical_line_count":2,"sha256":"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1","target_host_count":1,"trailing_newline":true},"failed_predicates":["nonempty_line_count_is_one"],"gitconfig":{"helper_count":1,"helper_values":["store --file /root/.git-credentials"],"sha256":"eb4c4eea68a5e9af4f6e06d73a62d46220e1a53e49a687f7fca6129e653b3c8d"},"mutation_outcome":"NO_MUTATION","next_stage":"PATCH_PREFLIGHT_OR_RUN_MIGRATION","output_truncated_in_json":false,"preflight_predicates":{"exact_regex_match_count_is_one":true,"helper_exact":true,"invalid_entry_count_is_zero":true,"nonempty_line_count_is_one":false,"target_host_count_is_one":true},"rc":0,"rollback_restored":null,"rollback_started":false,"schema":1,"secrets_included":false,"stage":"LEGACY_CREDENTIAL_STATE_CAPTURED","status":"OK"}
+
+OUTPUT_END
+CHAT_OUTPUT_END
@@ -1,27 +1,27 @@
 {
  "schema_version": 1,
  "channel": "homelab-runtime",
-  "command_id": "GITEA-V4-MACHINE-IDENTITY-MIGRATION-V2-20260730T190441Z",
-  "status": "FAIL",
-  "rc": 1,
+  "command_id": "GITEA-V4-LEGACY-CREDENTIAL-STATE-PROBE-20260730T190926Z",
+  "status": "OK",
+  "rc": 0,
  "host": "pve01",
-  "mode": "change",
+  "mode": "verify",
  "component": "gitea-machine-identity",
-  "started_at_utc": "2026-07-30T19:05:16Z",
-  "finished_at_utc": "2026-07-30T19:05:16Z",
+  "started_at_utc": "2026-07-30T19:10:01Z",
+  "finished_at_utc": "2026-07-30T19:10:01Z",
  "reference_register_checked": true,
  "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e",
  "error_register_checked": true,
  "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83",
-  "command_sha256": "e8835dd472ebdce9b1fcc21543939aa9bdb2ea8501826606338161d088daea3a",
+  "command_sha256": "dbef6d8fa1d436baa6c95e63a237ab6fcb50a81f1bf88fc4398cd24a30398776",
  "duplicate_failed_command_blocked": false,
  "block_reason": null,
  "execution_started": true,
-  "change_declared": true,
+  "change_declared": false,
  "result_contract_valid": true,
-  "result_contract_status": "FAIL",
+  "result_contract_status": null,
  "result_contract_error": null,
-  "command_rc": 1,
+  "command_rc": 0,
  "changes_made": false,
  "rollback_started": false,
  "rollback_restored": null,
@@ -30,9 +30,9 @@
  "secrets_included": false,
  "private_addresses_included": false,
  "raw_evidence_retained_locally": true,
-  "raw_evidence_sha256": "0fbad766c07233f7f122946da2197e3ebb21d258eb11430dd7589ff53e97c1b6",
-  "sanitized_output_sha256": "0fbad766c07233f7f122946da2197e3ebb21d258eb11430dd7589ff53e97c1b6",
+  "raw_evidence_sha256": "fd235ea52502ceb64ea27353731707a25f4db85d3a501969be96ee28944dec6a",
+  "sanitized_output_sha256": "fd235ea52502ceb64ea27353731707a25f4db85d3a501969be96ee28944dec6a",
  "output_truncated_in_json": false,
  "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt",
-  "output": "HOMELAB_RESULT_CONTRACT={\"changes_made\":false,\"command_id\":\"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V2-20260730T190441Z\",\"rollback_restored\":null,\"rollback_started\":false,\"status\":\"FAIL\",\"version\":1}\n{\"changes_made\":false,\"command_id\":\"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V2-20260730T190441Z\",\"error\":\"RuntimeError: phase failed: preflight rc=1\",\"failed_phase\":\"preflight\",\"mutation_outcome\":\"NO_MUTATION\",\"package\":{\"admin_sha256\":\"5398600c15b63f3872116e6d1ae6f65e2d7a5d1752349c9de0de07d801967bd1\",\"phase_hashes\":{\"apply\":\"c2cee33db773dd58b0eadb0405c33933773a559b150ad478aa9c0018dac762e3\",\"dry-run\":\"c5edfe7553ffb7f44a80dd530b805fb732ee0e09097f5b3a6ca77d1f9bc27329\",\"preflight\":\"2ca95ea8d0871351133f946d481665c059b4533c2ec80ea35d81424d7b1d5f7a\",\"prepare\":\"d7cc381878e06f0896219616354c70b042c227ab6254d6a9a36061cc24c13f8c\",\"rollback\":\"2b801fcea7096cdefe2cd294175d1d48ac3dfb394776dbda52299ded470fee0e\",\"seal\":\"c88cb5e9f63aac3888e3822a5eab9e2456b04f5eda16756f626a664eb558c0bc\",\"verify\":\"e57af844675486bb897dd05cfd529bc618c6f32fec9a9257eeeaca1748cbb7cc\"},\"sha256_check_stdout_sha256\":\"edc33fce6cfbf4052ebe804dee6cb9f86d114eb0953f2dba3b5fa9148af70fb3\",\"sha256s_sha256\":\"0aa34f98ccb74f2a8c00460781f56f7b29805e21a284e59a8052936f8dcdc511\",\"task_sha256\":\"10fa2a21164397e2d28f6a44c452c431e64e3cafadd2b4e8098a060c30fab5d9\",\"v3_block_rc\":64,\"validation_stdout_sha256\":\"cce2200e849fd3b7418a9dc011e5566097c620f46da0e2520ea380f2c883e3de\"},\"phases\":[{\"duration_seconds\":0.251,\"phase\":\"preflight\",\"rc\":1,\"safe_stderr\":[],\"safe_stdout\":[\"LINT_STATUS=OK\",\"TASK_ID=gitea-machine-identity-controlled-migration-v4\",\"POLICY_ID=homelab-admin-guardrails-v1.2\",\"RULES_CHECKED=14\",\"SOURCE_FILES_CHECKED=11\",\"ROOT_CAUSE=UNEXPECTED_PHASE_ERROR\",\"ROOT_CAUSE_COUNT=1\",\"DETAIL=line:44 rc:1\",\"RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T190516Z-2393604-preflight\",\"RUN_RC=1\"],\"stderr_bytes\":0,\"stderr_sha256\":\"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\",\"stdout_bytes\":351,\"stdout_sha256\":\"b43edf62154a1072f752962dc4d23310d3b4609d0e5e22d0bcad2a93171f38fa\"}],\"rc\":1,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":1,\"seal_started\":false,\"secrets_included\":false,\"status\":\"FAIL\"}\n"
+  "output": "{\"changes_made\":false,\"command_id\":\"GITEA-V4-LEGACY-CREDENTIAL-STATE-PROBE-20260730T190926Z\",\"credential_file\":{\"bytes\":139,\"entries\":[{\"bytes\":69,\"exact_preflight_regex_match\":true,\"index\":1,\"line_sha256\":\"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8\",\"parse_error\":null,\"parsed_ok\":true,\"password_present\":true,\"scheme\":\"https\",\"target_host\":true,\"username_present\":true},{\"bytes\":68,\"exact_preflight_regex_match\":false,\"index\":2,\"line_sha256\":\"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0\",\"parse_error\":null,\"parsed_ok\":true,\"password_present\":true,\"scheme\":\"https\",\"target_host\":false,\"username_present\":true}],\"entry_count\":2,\"exact_regex_match_count\":1,\"invalid_entry_count\":0,\"nonempty_line_count\":2,\"physical_line_count\":2,\"sha256\":\"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1\",\"target_host_count\":1,\"trailing_newline\":true},\"failed_predicates\":[\"nonempty_line_count_is_one\"],\"gitconfig\":{\"helper_count\":1,\"helper_values\":[\"store --file /root/.git-credentials\"],\"sha256\":\"eb4c4eea68a5e9af4f6e06d73a62d46220e1a53e49a687f7fca6129e653b3c8d\"},\"mutation_outcome\":\"NO_MUTATION\",\"next_stage\":\"PATCH_PREFLIGHT_OR_RUN_MIGRATION\",\"output_truncated_in_json\":false,\"preflight_predicates\":{\"exact_regex_match_count_is_one\":true,\"helper_exact\":true,\"invalid_entry_count_is_zero\":true,\"nonempty_line_count_is_one\":false,\"target_host_count_is_one\":true},\"rc\":0,\"rollback_restored\":null,\"rollback_started\":false,\"schema\":1,\"secrets_included\":false,\"stage\":\"LEGACY_CREDENTIAL_STATE_CAPTURED\",\"status\":\"OK\"}\n"
 }
@@ -1,22 +1,22 @@
 CHAT_OUTPUT_BEGIN
-COMMAND_ID=GITEA-V4-MACHINE-IDENTITY-MIGRATION-V2-20260730T190441Z
-STATUS=FAIL
-RC=1
+COMMAND_ID=GITEA-V4-LEGACY-CREDENTIAL-STATE-PROBE-20260730T190926Z
+STATUS=OK
+RC=0
 HOST=pve01
-MODE=change
+MODE=verify
 COMPONENT=gitea-machine-identity
 REFERENCE_REGISTER_CHECK=OK
 REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
 ERROR_REGISTER_CHECK=OK
 ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
-COMMAND_SHA256=e8835dd472ebdce9b1fcc21543939aa9bdb2ea8501826606338161d088daea3a
+COMMAND_SHA256=dbef6d8fa1d436baa6c95e63a237ab6fcb50a81f1bf88fc4398cd24a30398776
 DUPLICATE_FAILED_COMMAND_BLOCKED=false
 EXECUTION_STARTED=true
-CHANGE_DECLARED=true
+CHANGE_DECLARED=false
 RESULT_CONTRACT_VALID=true
-RESULT_CONTRACT_STATUS=FAIL
+RESULT_CONTRACT_STATUS=NOT_APPLICABLE
 RESULT_CONTRACT_ERROR=NONE
-COMMAND_RC=1
+COMMAND_RC=0
 CHANGES_MADE=false
 ROLLBACK_STARTED=false
 ROLLBACK_RESTORED=null
@@ -24,11 +24,10 @@ MUTATION_OUTCOME=NO_MUTATION
 SANITIZED=yes
 SECRETS_INCLUDED=no
 PRIVATE_ADDRESSES_INCLUDED=no
-RAW_EVIDENCE_SHA256=0fbad766c07233f7f122946da2197e3ebb21d258eb11430dd7589ff53e97c1b6
-SANITIZED_OUTPUT_SHA256=0fbad766c07233f7f122946da2197e3ebb21d258eb11430dd7589ff53e97c1b6
+RAW_EVIDENCE_SHA256=fd235ea52502ceb64ea27353731707a25f4db85d3a501969be96ee28944dec6a
+SANITIZED_OUTPUT_SHA256=fd235ea52502ceb64ea27353731707a25f4db85d3a501969be96ee28944dec6a
 OUTPUT_BEGIN
-HOMELAB_RESULT_CONTRACT={"changes_made":false,"command_id":"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V2-20260730T190441Z","rollback_restored":null,"rollback_started":false,"status":"FAIL","version":1}
-{"changes_made":false,"command_id":"GITEA-V4-MACHINE-IDENTITY-MIGRATION-V2-20260730T190441Z","error":"RuntimeError: phase failed: preflight rc=1","failed_phase":"preflight","mutation_outcome":"NO_MUTATION","package":{"admin_sha256":"5398600c15b63f3872116e6d1ae6f65e2d7a5d1752349c9de0de07d801967bd1","phase_hashes":{"apply":"c2cee33db773dd58b0eadb0405c33933773a559b150ad478aa9c0018dac762e3","dry-run":"c5edfe7553ffb7f44a80dd530b805fb732ee0e09097f5b3a6ca77d1f9bc27329","preflight":"2ca95ea8d0871351133f946d481665c059b4533c2ec80ea35d81424d7b1d5f7a","prepare":"d7cc381878e06f0896219616354c70b042c227ab6254d6a9a36061cc24c13f8c","rollback":"2b801fcea7096cdefe2cd294175d1d48ac3dfb394776dbda52299ded470fee0e","seal":"c88cb5e9f63aac3888e3822a5eab9e2456b04f5eda16756f626a664eb558c0bc","verify":"e57af844675486bb897dd05cfd529bc618c6f32fec9a9257eeeaca1748cbb7cc"},"sha256_check_stdout_sha256":"edc33fce6cfbf4052ebe804dee6cb9f86d114eb0953f2dba3b5fa9148af70fb3","sha256s_sha256":"0aa34f98ccb74f2a8c00460781f56f7b29805e21a284e59a8052936f8dcdc511","task_sha256":"10fa2a21164397e2d28f6a44c452c431e64e3cafadd2b4e8098a060c30fab5d9","v3_block_rc":64,"validation_stdout_sha256":"cce2200e849fd3b7418a9dc011e5566097c620f46da0e2520ea380f2c883e3de"},"phases":[{"duration_seconds":0.251,"phase":"preflight","rc":1,"safe_stderr":[],"safe_stdout":["LINT_STATUS=OK","TASK_ID=gitea-machine-identity-controlled-migration-v4","POLICY_ID=homelab-admin-guardrails-v1.2","RULES_CHECKED=14","SOURCE_FILES_CHECKED=11","ROOT_CAUSE=UNEXPECTED_PHASE_ERROR","ROOT_CAUSE_COUNT=1","DETAIL=line:44 rc:1","RUN_DIR=/var/lib/homelab-admin/runs/gitea-machine-identity-controlled-migration-v4/20260730T190516Z-2393604-preflight","RUN_RC=1"],"stderr_bytes":0,"stderr_sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","stdout_bytes":351,"stdout_sha256":"b43edf62154a1072f752962dc4d23310d3b4609d0e5e22d0bcad2a93171f38fa"}],"rc":1,"rollback_restored":null,"rollback_started":false,"schema":1,"seal_started":false,"secrets_included":false,"status":"FAIL"}
+{"changes_made":false,"command_id":"GITEA-V4-LEGACY-CREDENTIAL-STATE-PROBE-20260730T190926Z","credential_file":{"bytes":139,"entries":[{"bytes":69,"exact_preflight_regex_match":true,"index":1,"line_sha256":"b52c89cef273de1aa4afc607ee5d4323ef88553ed4b94da24df049b2251f03d8","parse_error":null,"parsed_ok":true,"password_present":true,"scheme":"https","target_host":true,"username_present":true},{"bytes":68,"exact_preflight_regex_match":false,"index":2,"line_sha256":"10d1a19537be0dd0dd1ab37cd4a1e5e239c1970a4d16d65aaa7ae7edf2739ec0","parse_error":null,"parsed_ok":true,"password_present":true,"scheme":"https","target_host":false,"username_present":true}],"entry_count":2,"exact_regex_match_count":1,"invalid_entry_count":0,"nonempty_line_count":2,"physical_line_count":2,"sha256":"fc18813a7f008130cbc291df849b8c72359985ef697717460fbc39d2056be2b1","target_host_count":1,"trailing_newline":true},"failed_predicates":["nonempty_line_count_is_one"],"gitconfig":{"helper_count":1,"helper_values":["store --file /root/.git-credentials"],"sha256":"eb4c4eea68a5e9af4f6e06d73a62d46220e1a53e49a687f7fca6129e653b3c8d"},"mutation_outcome":"NO_MUTATION","next_stage":"PATCH_PREFLIGHT_OR_RUN_MIGRATION","output_truncated_in_json":false,"preflight_predicates":{"exact_regex_match_count_is_one":true,"helper_exact":true,"invalid_entry_count_is_zero":true,"nonempty_line_count_is_one":false,"target_host_count_is_one":true},"rc":0,"rollback_restored":null,"rollback_started":false,"schema":1,"secrets_included":false,"stage":"LEGACY_CREDENTIAL_STATE_CAPTURED","status":"OK"}

 OUTPUT_END
 CHAT_OUTPUT_END