runtime: publish HOMELAB-GITEA-CHAT-TRANSPORT-AUDIT-373
This commit is contained in:
homelab-runtime-publisher
+110
-11
@@ -1,29 +1,128 @@
|
||||
CHAT_OUTPUT_BEGIN
|
||||
COMMAND_ID=HOMELAB-SKLADCHIK-COOKIE-HEADER-CAPTURE-372
|
||||
COMMAND_ID=HOMELAB-GITEA-CHAT-TRANSPORT-AUDIT-373
|
||||
STATUS=OK
|
||||
RC=0
|
||||
HOST=pve01
|
||||
MODE=change
|
||||
MODE=read-only
|
||||
COMPONENT=cluster-audit
|
||||
REFERENCE_REGISTER_CHECK=OK
|
||||
REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
|
||||
ERROR_REGISTER_CHECK=OK
|
||||
ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752
|
||||
COMMAND_SHA256=f0424fc8fff69eb709e7b2935db5fed605f80ead1d0cd1dd583eea7ec83434c3
|
||||
COMMAND_SHA256=3a9ed987129355bdf4bf8196206f17e111bde7c10cf4865a4e860249e49dd2e5
|
||||
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
||||
EXECUTION_STARTED=true
|
||||
CHANGES_MADE=true
|
||||
CHANGES_MADE=false
|
||||
SANITIZED=yes
|
||||
SECRETS_INCLUDED=no
|
||||
PRIVATE_ADDRESSES_INCLUDED=no
|
||||
RAW_EVIDENCE_SHA256=3ca91e67ab04f3970c6b38e6735e9a26ca08824a5536aa2226a1ebdcf98e6927
|
||||
SANITIZED_OUTPUT_SHA256=3ca91e67ab04f3970c6b38e6735e9a26ca08824a5536aa2226a1ebdcf98e6927
|
||||
RAW_EVIDENCE_SHA256=1e8ff2ecf2d6dba9d86a31d1dd9c3c11a02eb154d7c42a46a8d0fe282146a619
|
||||
SANITIZED_OUTPUT_SHA256=1e8ff2ecf2d6dba9d86a31d1dd9c3c11a02eb154d7c42a46a8d0fe282146a619
|
||||
OUTPUT_BEGIN
|
||||
DETAIL=COOKIE_HEADER_PENDING_FILE=/root/.skladchik-cookie-header-372.pending
|
||||
DETAIL=COOKIE_HEADER_PENDING_BYTES=752
|
||||
DETAIL=COOKIE_HEADER_PENDING_SHA256=3c260f0622999b94e1c3b45d5042532fe001b8118dff0d326636b2ad8609d8c4
|
||||
DETAIL=COOKIE_HEADER_CAPTURE=PASS
|
||||
CHANGES_MADE=YES
|
||||
DETAIL=RUNNER_FILE=/usr/local/sbin/homelab-chat-run|SHEBANG=#!/usr/bin/env bash|META=root:root|750|11864|regular file|SHA256=2a88defef9517f89bc60934dce82097f8e316b08af9417e95167ea5d759a10d9|BASH_SYNTAX=PASS
|
||||
DETAIL=RUNNER_FILE=/usr/local/sbin/homelab-chat-run-linked|SHEBANG=#!/usr/bin/env bash|META=root:root|755|1289|regular file|SHA256=efa9fce3c768e6e0650903ca14fe4b6d5319d57f20ec87c465a4a00cb300d4e0|BASH_SYNTAX=PASS
|
||||
DETAIL=LINKED_WRAPPER_SOURCE_BEGIN
|
||||
#!/usr/bin/env bash
|
||||
set -o pipefail
|
||||
tmp=$(/usr/bin/mktemp)
|
||||
trap '/usr/bin/rm -f "$tmp"' EXIT
|
||||
|
||||
/usr/local/sbin/homelab-chat-run "$@" 2>&1 | /usr/bin/tee "$tmp"
|
||||
rc=${PIPESTATUS[0]}
|
||||
|
||||
cid=$(/usr/bin/sed -n "s/^COMMAND_ID=//p" "$tmp" | /usr/bin/tail -n 1)
|
||||
sha=$(/usr/bin/sed -n "s/^COMMIT_SHA=//p" "$tmp" | /usr/bin/tail -n 1)
|
||||
raw=$(/usr/bin/sed -n "s/^LOCAL_RAW_FILE=//p" "$tmp" | /usr/bin/tail -n 1)
|
||||
|
||||
if [[ "$cid" =~ ^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$ && "$sha" =~ ^[0-9a-f]{40}$ ]]; then
|
||||
/usr/bin/printf "COMMIT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/commit/%s\n" "$sha"
|
||||
/usr/bin/printf "IMMUTABLE_RESULT_URL=https://git.gram1.ru/homelab-admin/homelab-public-context/raw/commit/%s/runtime/history/%s.txt\n" "$sha" "$cid"
|
||||
fi
|
||||
|
||||
/usr/bin/printf "FAILURE_DIAGNOSTIC_BEGIN\n"
|
||||
if [[ -n "$raw" && -r "$raw" ]]; then
|
||||
/usr/bin/grep -Ei '^(DECISION|DETAIL|FAILURE_REASON|ERROR_CODE|SOURCE_DECISION|NGINX_[A-Z0-9_]*|READER_[A-Z0-9_]*|RESULT_FEED_URL|PUBLIC_HEALTH_URL|HTTPS_[A-Z0-9_]*|LOCAL_[A-Z0-9_]*|CHANGES_MADE)=|Traceback|RuntimeError|SystemExit|FileNotFoundError|PermissionError|command not found|No such file or directory|Connection refused|failed|invalid|missing' "$raw" | /usr/bin/tail -n 100 || true
|
||||
fi
|
||||
/usr/bin/printf "FAILURE_DIAGNOSTIC_END\n"
|
||||
|
||||
exit "$rc"
|
||||
DETAIL=LINKED_WRAPPER_SOURCE_END
|
||||
DETAIL=MAIN_RUNNER_PUBLICATION_HOOKS_BEGIN
|
||||
88- exit 70
|
||||
89-}
|
||||
90-
|
||||
91-STATE_DIR=/var/lib/homelab-chat-run
|
||||
92-RAW_DIR="$STATE_DIR/raw"
|
||||
93-PUBLIC_DIR="$STATE_DIR/public"
|
||||
94:LEDGER="$STATE_DIR/state/command-ledger.tsv"
|
||||
95-LOCK="$STATE_DIR/state/runner.lock"
|
||||
96-
|
||||
97-mkdir -p "$RAW_DIR" "$PUBLIC_DIR" "$(dirname "$LEDGER")"
|
||||
98-chmod 0700 "$STATE_DIR" "$RAW_DIR" "$PUBLIC_DIR" "$(dirname "$LEDGER")"
|
||||
99-touch "$LEDGER"
|
||||
100-chmod 0600 "$LEDGER"
|
||||
--
|
||||
490- '${REMOTE_PREFIX}.json' \
|
||||
491- '${REMOTE_PREFIX}.txt'
|
||||
492-
|
||||
493- exit \$receiver_rc
|
||||
494-"
|
||||
495-
|
||||
496:PUBLIC_URL='https://git.gram1.ru/.well-known/homelab-runtime/latest.json'
|
||||
497-PUBLIC_VISIBLE=false
|
||||
498-
|
||||
499-for ATTEMPT in $(seq 1 30); do
|
||||
500- CONTENT="$(
|
||||
501- curl -fsS \
|
||||
502- --max-time 15 \
|
||||
503: "$PUBLIC_URL" 2>/dev/null ||
|
||||
504- true
|
||||
505- )"
|
||||
506-
|
||||
507- if printf '%s\n' "$CONTENT" |
|
||||
508- grep -Fq "\"command_id\": \"$COMMAND_ID\""; then
|
||||
509- PUBLIC_VISIBLE=true
|
||||
--
|
||||
534-echo "COMMAND_ID=$COMMAND_ID"
|
||||
535-echo "STATUS=$STATUS"
|
||||
536-echo "RC=$RC"
|
||||
537-echo 'REFERENCE_REGISTER_CHECK=OK'
|
||||
538-echo 'ERROR_REGISTER_CHECK=OK'
|
||||
539-echo "DUPLICATE_FAILED_COMMAND_BLOCKED=$REPEAT_BLOCKED"
|
||||
540:echo 'GITEA_PUBLICATION=OK'
|
||||
541:echo "PUBLIC_URL=$PUBLIC_URL"
|
||||
542-echo "LOCAL_RAW_FILE=$RAW_FILE"
|
||||
543-echo 'SHELL_SESSION_PRESERVED=yes'
|
||||
544-
|
||||
545-exit "$RC"
|
||||
DETAIL=MAIN_RUNNER_PUBLICATION_HOOKS_END
|
||||
DETAIL=VM170_PUBLIC_DIRECTORY_METADATA=debian:debian|755|4096|directory
|
||||
DETAIL=VM170_WELLKNOWN_FILES_BEGIN
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/gitea-auth-check-014.txt|132|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/homelab-context-manifest.json|838|644|debian:debian
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/runtime-receiver-state-026.txt|368|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/gitea-push-auth-stage-012.txt|115|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/homelab-runtime/latest.json|1517|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/homelab-runtime/index.json|436|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/homelab-runtime/latest.txt|1063|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/homelab-bootstrap.json|3097|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/homelab-context.txt|1710|644|debian:debian
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/homelab-bootstrap.json.bak.20260721T093110Z|3154|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/gitea-real-push-canary.txt|136|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/homelab-context.json|2334|644|debian:debian
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/homelab-bootstrap.json.bak.20260721T092825Z|1915|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/runtime-receiver-preflight-020.txt|807|644|root:root
|
||||
/opt/stacks/gitea/data/gitea/public/.well-known/gitea-auth-check-017.txt|82|644|root:root
|
||||
DETAIL=VM170_WELLKNOWN_FILES_END
|
||||
DETAIL=BOOTSTRAP_HTTP_HEADERS_BEGIN
|
||||
HTTP/2 200
|
||||
content-type: application/json
|
||||
cache-control: max-age=0, private, must-revalidate, no-transform
|
||||
last-modified: Tue, 21 Jul 2026 09:31:10 GMT
|
||||
DETAIL=BOOTSTRAP_HTTP_HEADERS_END
|
||||
DETAIL=PUBLIC_HANDOFF_HTTP_STATUS=404
|
||||
DETAIL=GITEA_CHAT_TRANSPORT_AUDIT=PASS
|
||||
CHANGES_MADE=NO
|
||||
|
||||
OUTPUT_END
|
||||
CHAT_OUTPUT_END
|
||||
|
||||
Reference in New Issue
Block a user