From 9705d2e1496f864b69304aff667c07be0747abcc Mon Sep 17 00:00:00 2001 From: homelab-runtime-publisher Date: Thu, 23 Jul 2026 05:09:14 +0000 Subject: [PATCH] runtime: publish READER-VM130-APPLY-CAPABILITY-AUDIT-333 --- ...ADER-VM130-APPLY-CAPABILITY-AUDIT-333.json | 30 +++++++ ...EADER-VM130-APPLY-CAPABILITY-AUDIT-333.txt | 40 +++++++++ runtime/latest.json | 18 ++-- runtime/latest.txt | 87 ++++--------------- 4 files changed, 96 insertions(+), 79 deletions(-) create mode 100644 runtime/history/READER-VM130-APPLY-CAPABILITY-AUDIT-333.json create mode 100644 runtime/history/READER-VM130-APPLY-CAPABILITY-AUDIT-333.txt diff --git a/runtime/history/READER-VM130-APPLY-CAPABILITY-AUDIT-333.json b/runtime/history/READER-VM130-APPLY-CAPABILITY-AUDIT-333.json new file mode 100644 index 0000000..c37539a --- /dev/null +++ b/runtime/history/READER-VM130-APPLY-CAPABILITY-AUDIT-333.json @@ -0,0 +1,30 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "READER-VM130-APPLY-CAPABILITY-AUDIT-333", + "status": "FAIL", + "rc": 1, + "host": "pve01", + "mode": "read-only", + "component": "cluster-audit", + "started_at_utc": "2026-07-23T05:08:45Z", + "finished_at_utc": "2026-07-23T05:09:13Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752", + "command_sha256": "ff7a752b1b7da7f6aec148754c7fbf6fe3135f2ae4c15ef378efd08e895b15ff", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "changes_made": false, + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "e79d7268afd9bdb0a4d616a4b8d30b9284afccfa0d2c0826baf89a1865af1369", + "sanitized_output_sha256": "e79d7268afd9bdb0a4d616a4b8d30b9284afccfa0d2c0826baf89a1865af1369", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk\nDETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275\nDETAIL=VM130_EXEC_INTEGRITY=PASS\nDETAIL=VM130_SHELL=PASS:/bin/sh\nDETAIL=VM130_TOOL=PASS:install|/usr/bin/install\nDETAIL=VM130_TOOL=PASS:mv|/usr/bin/mv\nDETAIL=VM130_TOOL=PASS:rm|/usr/bin/rm\nDETAIL=VM130_TOOL=PASS:mktemp|/usr/bin/mktemp\nDETAIL=VM130_TOOL=PASS:stat|/usr/bin/stat\nDETAIL=VM130_TOOL=PASS:sha256sum|/usr/bin/sha256sum\nDETAIL=VM130_TOOL=PASS:cmp|/usr/bin/cmp\nDETAIL=VM130_TOOL=PASS:sync|/usr/bin/sync\nDETAIL=VM130_TOOL=PASS:chown|/usr/bin/chown\nDETAIL=VM130_TOOL=PASS:chmod|/usr/bin/chmod\n" +} diff --git a/runtime/history/READER-VM130-APPLY-CAPABILITY-AUDIT-333.txt b/runtime/history/READER-VM130-APPLY-CAPABILITY-AUDIT-333.txt new file mode 100644 index 0000000..9334e61 --- /dev/null +++ b/runtime/history/READER-VM130-APPLY-CAPABILITY-AUDIT-333.txt @@ -0,0 +1,40 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=READER-VM130-APPLY-CAPABILITY-AUDIT-333 +STATUS=FAIL +RC=1 +HOST=pve01 +MODE=read-only +COMPONENT=cluster-audit +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752 +COMMAND_SHA256=ff7a752b1b7da7f6aec148754c7fbf6fe3135f2ae4c15ef378efd08e895b15ff +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGES_MADE=false +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=e79d7268afd9bdb0a4d616a4b8d30b9284afccfa0d2c0826baf89a1865af1369 +SANITIZED_OUTPUT_SHA256=e79d7268afd9bdb0a4d616a4b8d30b9284afccfa0d2c0826baf89a1865af1369 +OUTPUT_BEGIN +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum +DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk +DETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275 +DETAIL=VM130_EXEC_INTEGRITY=PASS +DETAIL=VM130_SHELL=PASS:/bin/sh +DETAIL=VM130_TOOL=PASS:install|/usr/bin/install +DETAIL=VM130_TOOL=PASS:mv|/usr/bin/mv +DETAIL=VM130_TOOL=PASS:rm|/usr/bin/rm +DETAIL=VM130_TOOL=PASS:mktemp|/usr/bin/mktemp +DETAIL=VM130_TOOL=PASS:stat|/usr/bin/stat +DETAIL=VM130_TOOL=PASS:sha256sum|/usr/bin/sha256sum +DETAIL=VM130_TOOL=PASS:cmp|/usr/bin/cmp +DETAIL=VM130_TOOL=PASS:sync|/usr/bin/sync +DETAIL=VM130_TOOL=PASS:chown|/usr/bin/chown +DETAIL=VM130_TOOL=PASS:chmod|/usr/bin/chmod + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index d0d6568..c37539a 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1,19 +1,19 @@ { "schema_version": 1, "channel": "homelab-runtime", - "command_id": "READER-VM130-EXEC-INTERFACE-AUDIT-332", - "status": "OK", - "rc": 0, + "command_id": "READER-VM130-APPLY-CAPABILITY-AUDIT-333", + "status": "FAIL", + "rc": 1, "host": "pve01", "mode": "read-only", "component": "cluster-audit", - "started_at_utc": "2026-07-23T05:04:31Z", - "finished_at_utc": "2026-07-23T05:04:31Z", + "started_at_utc": "2026-07-23T05:08:45Z", + "finished_at_utc": "2026-07-23T05:09:13Z", "reference_register_checked": true, "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", "error_register_checked": true, "error_register_sha256": "08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752", - "command_sha256": "c3afb515a991225c64ea90bd9e285a44f09af255097fca7a30cae3c70af84c3e", + "command_sha256": "ff7a752b1b7da7f6aec148754c7fbf6fe3135f2ae4c15ef378efd08e895b15ff", "duplicate_failed_command_blocked": false, "block_reason": null, "execution_started": true, @@ -22,9 +22,9 @@ "secrets_included": false, "private_addresses_included": false, "raw_evidence_retained_locally": true, - "raw_evidence_sha256": "761533b89826503b8ca2118991abaa2198d219e3e62eb6b18caf6d6b4518ad56", - "sanitized_output_sha256": "761533b89826503b8ca2118991abaa2198d219e3e62eb6b18caf6d6b4518ad56", + "raw_evidence_sha256": "e79d7268afd9bdb0a4d616a4b8d30b9284afccfa0d2c0826baf89a1865af1369", + "sanitized_output_sha256": "e79d7268afd9bdb0a4d616a4b8d30b9284afccfa0d2c0826baf89a1865af1369", "output_truncated_in_json": false, "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", - "output": "DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sed\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/bash\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/stat\nDETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275\nDETAIL=VM130_EXEC_INTEGRITY=PASS\nDETAIL=VM130_EXEC_METADATA=root:root|750|1333|regular file\nDETAIL=VM130_EXEC_FIRST_LINE=#!/usr/bin/bash\nDETAIL=VM130_EXEC_SYNTAX=PASS\nDETAIL=VM130_EXEC_LINE_COUNT=53\nDETAIL=VM130_EXEC_SOURCE_BEGIN\n#!/usr/bin/bash\nset -Eeuo pipefail\n\nreadonly SSH=/usr/bin/ssh\nreadonly JQ=/usr/bin/jq\nreadonly MKTEMP=/usr/bin/mktemp\nreadonly RM=/usr/bin/rm\nreadonly CAT=/usr/bin/cat\nreadonly HOST=root@pve03\nreadonly VMID=130\n\nif (($# == 0)); then\n echo \"VM130_EXEC_ERROR=NO_COMMAND\" >&2\n exit 64\nfi\n\ntmpdir=\"$(\"$MKTEMP\" -d /tmp/homelab-vm130-exec.XXXXXX)\"\ncleanup() {\n \"$RM\" -rf -- \"$tmpdir\"\n}\ntrap cleanup EXIT\n\nprintf -v remote_cmd \"%q \" /usr/sbin/qm guest exec \"$VMID\" -- \"$@\"\n\nset +e\n\"$SSH\" -o BatchMode=yes -o ConnectTimeout=8 \"$HOST\" \"$remote_cmd\" >\"$tmpdir/qga.json\" 2>\"$tmpdir/ssh.err\"\nssh_rc=$?\nset -e\n\nif ((ssh_rc != 0)); then\n echo \"VM130_EXEC_ERROR=SSH_FAILURE\" >&2\n echo \"VM130_EXEC_SSH_RC=$ssh_rc\" >&2\n \"$CAT\" \"$tmpdir/ssh.err\" >&2\n exit 125\nfi\n\nif ! \"$JQ\" -e 'type==\"object\" and (.exited == 1) and (.exitcode | type == \"number\")' \"$tmpdir/qga.json\" >/dev/null 2>&1; then\n echo \"VM130_EXEC_ERROR=INVALID_QGA_JSON\" >&2\n \"$CAT\" \"$tmpdir/ssh.err\" >&2\n \"$CAT\" \"$tmpdir/qga.json\" >&2\n exit 126\nfi\n\n\"$JQ\" -j '.\"out-data\" // \"\"' \"$tmpdir/qga.json\"\n\"$JQ\" -j '.\"err-data\" // \"\"' \"$tmpdir/qga.json\" >&2\n\nguest_rc=\"$(\"$JQ\" -r '.exitcode' \"$tmpdir/qga.json\")\"\nif [[ ! \"$guest_rc\" =~ ^[0-9]+$ ]] || ((guest_rc > 255)); then\n echo \"VM130_EXEC_ERROR=INVALID_GUEST_EXITCODE\" >&2\n exit 126\nfi\n\nexit \"$guest_rc\"\nDETAIL=VM130_EXEC_SOURCE_END\nDETAIL=VM130_EXEC_SOURCE_TRUNCATED=NO\nCHANGES_MADE=NO\n" + "output": "DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum\nDETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk\nDETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275\nDETAIL=VM130_EXEC_INTEGRITY=PASS\nDETAIL=VM130_SHELL=PASS:/bin/sh\nDETAIL=VM130_TOOL=PASS:install|/usr/bin/install\nDETAIL=VM130_TOOL=PASS:mv|/usr/bin/mv\nDETAIL=VM130_TOOL=PASS:rm|/usr/bin/rm\nDETAIL=VM130_TOOL=PASS:mktemp|/usr/bin/mktemp\nDETAIL=VM130_TOOL=PASS:stat|/usr/bin/stat\nDETAIL=VM130_TOOL=PASS:sha256sum|/usr/bin/sha256sum\nDETAIL=VM130_TOOL=PASS:cmp|/usr/bin/cmp\nDETAIL=VM130_TOOL=PASS:sync|/usr/bin/sync\nDETAIL=VM130_TOOL=PASS:chown|/usr/bin/chown\nDETAIL=VM130_TOOL=PASS:chmod|/usr/bin/chmod\n" } diff --git a/runtime/latest.txt b/runtime/latest.txt index 5263d2a..9334e61 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,7 +1,7 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=READER-VM130-EXEC-INTERFACE-AUDIT-332 -STATUS=OK -RC=0 +COMMAND_ID=READER-VM130-APPLY-CAPABILITY-AUDIT-333 +STATUS=FAIL +RC=1 HOST=pve01 MODE=read-only COMPONENT=cluster-audit @@ -9,85 +9,32 @@ REFERENCE_REGISTER_CHECK=OK REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e ERROR_REGISTER_CHECK=OK ERROR_REGISTER_SHA256=08b3a769b8e38eaa1acec915352fb328180d70caa7ff6cd9d1ec0da426262752 -COMMAND_SHA256=c3afb515a991225c64ea90bd9e285a44f09af255097fca7a30cae3c70af84c3e +COMMAND_SHA256=ff7a752b1b7da7f6aec148754c7fbf6fe3135f2ae4c15ef378efd08e895b15ff DUPLICATE_FAILED_COMMAND_BLOCKED=false EXECUTION_STARTED=true CHANGES_MADE=false SANITIZED=yes SECRETS_INCLUDED=no PRIVATE_ADDRESSES_INCLUDED=no -RAW_EVIDENCE_SHA256=761533b89826503b8ca2118991abaa2198d219e3e62eb6b18caf6d6b4518ad56 -SANITIZED_OUTPUT_SHA256=761533b89826503b8ca2118991abaa2198d219e3e62eb6b18caf6d6b4518ad56 +RAW_EVIDENCE_SHA256=e79d7268afd9bdb0a4d616a4b8d30b9284afccfa0d2c0826baf89a1865af1369 +SANITIZED_OUTPUT_SHA256=e79d7268afd9bdb0a4d616a4b8d30b9284afccfa0d2c0826baf89a1865af1369 OUTPUT_BEGIN DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/test DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sha256sum DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/awk -DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/sed -DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/bash -DETAIL=LOCAL_DEPENDENCY=PASS:/usr/bin/stat DETAIL=VM130_EXEC_SHA256=1959773393723b013af7c93cd29a7b833fd607c903d044e2fcef6accaa29c275 DETAIL=VM130_EXEC_INTEGRITY=PASS -DETAIL=VM130_EXEC_METADATA=root:root|750|1333|regular file -DETAIL=VM130_EXEC_FIRST_LINE=#!/usr/bin/bash -DETAIL=VM130_EXEC_SYNTAX=PASS -DETAIL=VM130_EXEC_LINE_COUNT=53 -DETAIL=VM130_EXEC_SOURCE_BEGIN -#!/usr/bin/bash -set -Eeuo pipefail - -readonly SSH=/usr/bin/ssh -readonly JQ=/usr/bin/jq -readonly MKTEMP=/usr/bin/mktemp -readonly RM=/usr/bin/rm -readonly CAT=/usr/bin/cat -readonly HOST=root@pve03 -readonly VMID=130 - -if (($# == 0)); then - echo "VM130_EXEC_ERROR=NO_COMMAND" >&2 - exit 64 -fi - -tmpdir="$("$MKTEMP" -d /tmp/homelab-vm130-exec.XXXXXX)" -cleanup() { - "$RM" -rf -- "$tmpdir" -} -trap cleanup EXIT - -printf -v remote_cmd "%q " /usr/sbin/qm guest exec "$VMID" -- "$@" - -set +e -"$SSH" -o BatchMode=yes -o ConnectTimeout=8 "$HOST" "$remote_cmd" >"$tmpdir/qga.json" 2>"$tmpdir/ssh.err" -ssh_rc=$? -set -e - -if ((ssh_rc != 0)); then - echo "VM130_EXEC_ERROR=SSH_FAILURE" >&2 - echo "VM130_EXEC_SSH_RC=$ssh_rc" >&2 - "$CAT" "$tmpdir/ssh.err" >&2 - exit 125 -fi - -if ! "$JQ" -e 'type=="object" and (.exited == 1) and (.exitcode | type == "number")' "$tmpdir/qga.json" >/dev/null 2>&1; then - echo "VM130_EXEC_ERROR=INVALID_QGA_JSON" >&2 - "$CAT" "$tmpdir/ssh.err" >&2 - "$CAT" "$tmpdir/qga.json" >&2 - exit 126 -fi - -"$JQ" -j '."out-data" // ""' "$tmpdir/qga.json" -"$JQ" -j '."err-data" // ""' "$tmpdir/qga.json" >&2 - -guest_rc="$("$JQ" -r '.exitcode' "$tmpdir/qga.json")" -if [[ ! "$guest_rc" =~ ^[0-9]+$ ]] || ((guest_rc > 255)); then - echo "VM130_EXEC_ERROR=INVALID_GUEST_EXITCODE" >&2 - exit 126 -fi - -exit "$guest_rc" -DETAIL=VM130_EXEC_SOURCE_END -DETAIL=VM130_EXEC_SOURCE_TRUNCATED=NO -CHANGES_MADE=NO +DETAIL=VM130_SHELL=PASS:/bin/sh +DETAIL=VM130_TOOL=PASS:install|/usr/bin/install +DETAIL=VM130_TOOL=PASS:mv|/usr/bin/mv +DETAIL=VM130_TOOL=PASS:rm|/usr/bin/rm +DETAIL=VM130_TOOL=PASS:mktemp|/usr/bin/mktemp +DETAIL=VM130_TOOL=PASS:stat|/usr/bin/stat +DETAIL=VM130_TOOL=PASS:sha256sum|/usr/bin/sha256sum +DETAIL=VM130_TOOL=PASS:cmp|/usr/bin/cmp +DETAIL=VM130_TOOL=PASS:sync|/usr/bin/sync +DETAIL=VM130_TOOL=PASS:chown|/usr/bin/chown +DETAIL=VM130_TOOL=PASS:chmod|/usr/bin/chmod OUTPUT_END CHAT_OUTPUT_END