diff --git a/runtime/history/RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z.json b/runtime/history/RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z.json new file mode 100644 index 0000000..2e5c0ea --- /dev/null +++ b/runtime/history/RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z.json @@ -0,0 +1,38 @@ +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z", + "status": "FAIL", + "rc": 1, + "host": "pve01", + "mode": "verify", + "component": "result-integration", + "started_at_utc": "2026-07-27T07:21:08Z", + "finished_at_utc": "2026-07-27T07:21:09Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", + "command_sha256": "2abcd8ed3caba3c56dfe1df39f3d834c9ed9e4972caf331a8e3d2132922beb6a", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 1, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "9d100401351f949bb1c6fb06d107acda5f52729fbcaedc717a0c0ce64222b74b", + "sanitized_output_sha256": "e3e004dbf0b954143046f1135c5c929091333d74b8210438c0cdf9dc959aac55", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "{\"architecture\":{\"adapter_functions\":{\"dispatch\":{\"calls\":[\"AdapterError\",\"bind_enrollment\",\"consume_bootstrap\",\"enroll_device\",\"evidence_url\",\"get\",\"import_capsule\",\"public_state\",\"response_ok\",\"start_execution\",\"str\"],\"line\":2419,\"names\":[\"AdapterError\",\"Any\",\"bind_enrollment\",\"consume_bootstrap\",\"dict\",\"enroll_device\",\"evidence_url\",\"import_capsule\",\"operation\",\"public_state\",\"request\",\"response_ok\",\"start_execution\",\"str\"],\"strings\":[\"\",\"bind_enrollment\",\"client_ip\",\"consume_bootstrap\",\"device_token\",\"enroll\",\"evidence_url\",\"execute\",\"health\",\"import\",\"ok\",\"op\",\"session_token\",\"short_id\",\"state\",\"status\",\"token\",\"unsupported operation\",\"upload_path\",\"version\"]},\"evidence_url\":{\"calls\":[\"AdapterError\",\"GlobalLock\",\"authorize_session\",\"get\",\"isinstance\",\"load_json\",\"sign_evidence\",\"state_path\",\"str\"],\"line\":2186,\"names\":[\"AdapterError\",\"Any\",\"GlobalLock\",\"authorize_session\",\"client_ip\",\"dict\",\"digest\",\"evidence\",\"isinstance\",\"load_json\",\"object_key\",\"session_token\",\"short_id\",\"sign_evidence\",\"signed\",\"state\",\"state_path\",\"str\"],\"strings\":[\"evidence\",\"evidence not ready\",\"expires_at_utc\",\"object_key\",\"sha256\",\"url\"]},\"public_state\":{\"calls\":[\"GlobalLock\",\"authorize_session\",\"load_json\",\"sanitize_state\",\"state_path\"],\"line\":1311,\"names\":[\"Any\",\"GlobalLock\",\"authorize_session\",\"client_ip\",\"dict\",\"load_json\",\"sanitize_state\",\"session_token\",\"short_id\",\"state\",\"state_path\",\"str\"],\"strings\":[]},\"sanitize_state\":{\"calls\":[\"get\",\"isinstance\"],\"line\":1327,\"names\":[\"Any\",\"dict\",\"evidence\",\"execution\",\"isinstance\",\"key\",\"public_evidence\",\"public_execution\",\"state\",\"str\"],\"strings\":[\"bytes\",\"capsule_bytes\",\"capsule_sha256\",\"command_object\",\"error\",\"evidence\",\"execution\",\"finished_at_utc\",\"gateway_verified\",\"imported_at_utc\",\"manifest\",\"object_key\",\"runner_document_rc\",\"runner_json_sha256\",\"runner_rc\",\"runner_status\",\"runner_text_sha256\",\"runner_wrapper_matches_document\",\"schema_version\",\"sha256\",\"short_id\",\"started_at_utc\",\"status\"]},\"upload_evidence\":{\"calls\":[\"AdapterError\",\"remote_evidence_presign\",\"run_command\",\"sha256_file\",\"sign_evidence\",\"str\",\"token_hex\",\"unlink\"],\"line\":1668,\"names\":[\"AdapterError\",\"FileNotFoundError\",\"Path\",\"RUN_DIR\",\"bundle\",\"digest\",\"object_key\",\"remote_evidence_presign\",\"result\",\"run_command\",\"secrets\",\"sha256_file\",\"sign_evidence\",\"signed\",\"signed_get\",\"str\",\"verify\",\"verify_path\"],\"strings\":[\"--connect-timeout\",\"--fail\",\"--fail-with-body\",\"--max-time\",\"--output\",\"--request\",\"--resolve\",\"--show-error\",\"--silent\",\"--upload-file\",\".tgz\",\".verify-\",\"/usr/bin/curl\",\"10\",\"120\",\"; stderr=\",\"PUT\",\"evidence gateway SHA verification failed\",\"evidence gateway verification failed: \",\"evidence upload failed: rc=\",\"evidence.vpn.gram1.ru:443:[PRIVATE_IP]\",\"url\"]},\"worker\":{\"calls\":[\"AdapterError\",\"GlobalLock\",\"Path\",\"atomic_json\",\"chmod\",\"create_evidence_bundle\",\"dict\",\"ensure_layout\",\"get\",\"getpid\",\"int\",\"isinstance\",\"iso\",\"load_json\",\"open\",\"read_bytes\",\"run_existing_runner\",\"select_runner_artifacts\",\"sha256_bytes\",\"sha256_file\",\"state_path\",\"str\",\"substitute_argv\",\"time\",\"type\",\"update\",\"upload_evidence\",\"validate_capsule\",\"verify_command_object\",\"verify_local_integrity\",\"worker_state_owned\",\"write\",\"write_text\"],\"line\":1994,\"names\":[\"AdapterError\",\"Exception\",\"GlobalLock\",\"KeyError\",\"Path\",\"RUNNER\",\"RUN_DIR\",\"SAFE_ENV\",\"TypeError\",\"ValueError\",\"_\",\"argv\",\"atomic_json\",\"bundle\",\"command_object\",\"create_evidence_bundle\",\"current\",\"dict\",\"display\",\"document_rc\",\"document_status\",\"ensure_layout\",\"environment\",\"evidence_bytes\",\"evidence_sha\",\"exc\",\"int\",\"isinstance\",\"iso\",\"load_json\",\"object_key\",\"os\",\"path\",\"payload_root\",\"prefix\",\"raw\",\"result\",\"run_existing_runner\",\"runner_args\",\"runner_document\",\"runner_json\",\"runner_txt\",\"select_runner_artifacts\",\"sha256_bytes\",\"sha256_file\",\"short_id\",\"started_epoch\",\"state\",\"state_path\",\"str\",\"stream\",\"substitute_argv\",\"time\",\"type\",\"upload_evidence\",\"validate_capsule\",\"verify_command_object\",\"verify_local_integrity\",\"worker_state_owned\",\"wrapper_log\",\"wrapper_matches\"],\"strings\":[\"--\",\".runner.log\",\"/\",\"/evidence.tgz\",\":\",\"FAIL\",\"HOMELAB_TIMEOUT\",\"RUNNING\",\"RunnerWrapperMismatch\",\"WORKER_ERROR=\",\"\\\\n\",\"a\",\"argv\",\"bytes\",\"capsule SHA changed\",\"capsule manifest changed\",\"capsule_bytes\",\"capsule_path\",\"capsule_sha256\",\"command object state missing\",\"command-portal-smoke\",\"command_id\",\"command_object\",\"component\",\"error\",\"evidence\",\"execution\",\"existing runner returned a different rc after writing its public artifact; runtime publication or wrapper completion failed\",\"finished_at_utc\",\"gateway_verified\",\"local_bundle\",\"manifest\",\"message\",\"mode\",\"object_key\",\"payload_root\",\"portal\",\"portal-tests\",\"rc\",\"replace\",\"runner artifact rc invalid\",\"runner_document_rc\",\"runner_json\",\"runner_json_sha256\",\"runner_rc\",\"runner_status\",\"runner_text\",\"runner_text_sha256\",\"runner_wrapper_matches_document\",\"sha256\",\"status\",\"timeout_seconds\",\"type\",\"utf-8\",\"worker finalization ownership lost\",\"worker state invalid: \"]}},\"command_templates\":{\"adapter\":[[\"/usr/bin/curl\",\"--fail-with-body\",\"--silent\",\"--show-error\",\"--connect-timeout\",\"10\",\"--max-time\",\"120\",\"--request\",\"PUT\"]],\"portal\":[],\"runner\":[]},\"portal_classes\":{\"Handler\":{\"line\":451,\"methods\":[\"content_length\",\"do_GET\",\"do_POST\",\"error_reply\",\"log_message\",\"path_parts\",\"read_body\",\"redirect\",\"reply\"],\"strings\":[\"\",\"\\n\",\" - \",\"(/enroll/)[A-Za-z0-9_-]{32,160}\",\"([?&]t=)[^&\\\\s]+\",\",\",\".hcmd\",\".upload-\",\"/api/enroll\",\"/api/import\",\"/api/state/([A-Z2-7]{10,20})\",\"/bridge-setup.cmd\",\"/bridge-setup.cmd\\\">Скачать установщик

\\n

После запуска установщика файлы .hcmd будут открываться двойным кликом.

\\n\",\"/bridge/bridge.cmd\",\"/enroll/\",\"/healthz\",\"/r/\",\"/r/([A-Z2-7]{10,20})\",\"/r/([A-Z2-7]{10,20})/evidence\",\"/r/([A-Z2-7]{10,20})/execute\",\"0\",\":\",\"; Max-Age=\",\"; Path=/; Secure; HttpOnly; SameSite=Strict\",\"\\n\\n\\nHomelab Bridge\\n\\n\\n

Установка Homelab Bridge

\\n

Профиль: \",\"

\\n

Ссылка одноразовая и уже привязана к этому NetBird-адресу.

\\n

Скачать проверенное evidence

\",\"/r/([A-Z2-7]{10,20})/evidence\",\"/run/homelab-command-adapter/adapter.sock\",\"/var/lib/homelab-command-portal/inbox\",\"Gitea runtime evidence\",\"adapter result not object\",\"evidence\",\"evidence_url\",\"gitea\",\"result\"],\"runner\":[]},\"runner_functions\":{}},\"backup_changed\":false,\"candidate_directories\":{\"adapter_root\":{\"exists\":true,\"gid\":990,\"is_dir\":true,\"is_symlink\":false,\"mode\":\"0o750\",\"path\":\"/var/lib/homelab-command-adapter\",\"uid\":0},\"result_documents_candidate\":{\"exists\":false,\"path\":\"/var/lib/homelab-command-adapter/public-results\"},\"result_signing_candidate\":{\"exists\":false,\"path\":\"/var/lib/homelab-command-adapter/result-signing\"},\"runner_public\":{\"exists\":true,\"gid\":0,\"is_dir\":true,\"is_symlink\":false,\"mode\":\"0o700\",\"path\":\"/var/lib/homelab-chat-run/public\",\"uid\":0},\"runner_raw\":{\"exists\":true,\"gid\":0,\"is_dir\":true,\"is_symlink\":false,\"mode\":\"0o700\",\"path\":\"/var/lib/homelab-chat-run/raw\",\"uid\":0},\"runner_root\":{\"exists\":true,\"gid\":0,\"is_dir\":true,\"is_symlink\":false,\"mode\":\"0o700\",\"path\":\"/var/lib/homelab-chat-run\",\"uid\":0}},\"changes_made\":false,\"checks\":{\"adapter_expected_sha\":true,\"adapter_has_final_evidence_state\":true,\"adapter_healthy\":true,\"evidence_health_public\":true,\"git_publication_present\":false,\"known_history_command_matches\":true,\"known_history_json_public\":true,\"known_history_text_public\":true,\"portal_expected_sha\":true,\"portal_health_public\":true,\"portal_healthy\":true,\"runner_expected_sha\":true,\"ssh_keygen_available\":true},\"cluster_changed\":false,\"command_id\":\"RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z\",\"design_decision\":{\"adapter_state_auth_required\":true,\"authoritative_reader_source\":\"command-scoped Gitea history document, not mutable latest pointers\",\"final_document_publisher\":\"Adapter after evidence upload and final state commit\",\"latest_pointer_authoritative\":false,\"public_key_path\":\"runtime/keys/result-signing-ed25519.pub\",\"public_path\":\"runtime/final//.json\",\"reader_inputs_known_before_execution\":[\"command_id\",\"capsule_sha256\"],\"runner_history_preserved\":true,\"signature_scheme_preference\":\"Ed25519 detached signature over canonical JSON using dedicated result-signing key\",\"terminal_only\":true},\"gitea_changed\":false,\"inventory\":{\"adapter\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"path\":\"/usr/local/sbin/homelab-command-adapter\",\"sha256\":\"8d0af84dcfcf6ddbfd1c4e6cbb059cef66b4cfc6c75bfd66da649acc229c7f5e\"},\"portal\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"path\":\"/usr/local/sbin/homelab-command-portal\",\"sha256\":\"8056faf4ef6348f0b06319ad3c49fbfeeadf25b6370f857ea19569bd27652ee2\"},\"runner\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"path\":\"/usr/local/sbin/homelab-chat-run\",\"sha256\":\"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\"}},\"known_history_fields\":[\"block_reason\",\"change_declared\",\"changes_made\",\"channel\",\"command_id\",\"command_rc\",\"command_sha256\",\"component\",\"duplicate_failed_command_blocked\",\"error_register_checked\",\"error_register_sha256\",\"execution_started\",\"finished_at_utc\",\"full_sanitized_output_url\",\"host\",\"mode\",\"mutation_outcome\",\"output\",\"output_truncated_in_json\",\"private_addresses_included\",\"raw_evidence_retained_locally\",\"raw_evidence_sha256\",\"rc\",\"reference_register_checked\",\"reference_sha256\",\"result_contract_error\",\"result_contract_status\",\"result_contract_valid\",\"rollback_restored\",\"rollback_started\",\"sanitized\",\"sanitized_output_sha256\",\"schema_version\",\"secrets_included\",\"started_at_utc\",\"status\"],\"plan_requirements\":{\"modify_candidates\":[\"/usr/local/sbin/homelab-command-adapter\"],\"must_preserve\":[\"/usr/local/sbin/homelab-chat-run\",\"/usr/local/sbin/homelab-command-portal\",\"existing evidence publication\",\"existing Gitea runtime history\",\"backup\",\"cluster\"],\"possible_new_helpers\":[\"/usr/local/sbin/homelab-result-publish\"],\"possible_new_state_dirs\":[\"/var/lib/homelab-command-adapter/result-signing\",\"/var/lib/homelab-command-adapter/public-results\"],\"required_postconditions\":[\"exact command URL resolves without auth\",\"document contains terminal Adapter state\",\"evidence SHA and gateway_verified present\",\"canonical document SHA validates\",\"signature validates with published key\",\"no secrets or private addresses\",\"mutable latest not used for lookup\"]},\"private_addresses_included\":false,\"public_probe\":{\"evidence_health\":{\"http_code\":200,\"json_keys\":[\"service\",\"status\"],\"reachable\":true},\"history_json\":{\"http_code\":200,\"json_keys\":[\"block_reason\",\"change_declared\",\"changes_made\",\"channel\",\"command_id\",\"command_rc\",\"command_sha256\",\"component\",\"duplicate_failed_command_blocked\",\"error_register_checked\",\"error_register_sha256\",\"execution_started\",\"finished_at_utc\",\"full_sanitized_output_url\",\"host\",\"mode\",\"mutation_outcome\",\"output\",\"output_truncated_in_json\",\"private_addresses_included\",\"raw_evidence_retained_locally\",\"raw_evidence_sha256\",\"rc\",\"reference_register_checked\",\"reference_sha256\",\"result_contract_error\",\"result_contract_status\",\"result_contract_valid\",\"rollback_restored\",\"rollback_started\",\"sanitized\",\"sanitized_output_sha256\",\"schema_version\",\"secrets_included\",\"started_at_utc\",\"status\"],\"reachable\":true},\"history_text\":{\"http_code\":200,\"json_keys\":null,\"reachable\":true},\"portal_health\":{\"http_code\":200,\"json_keys\":[\"adapter\",\"status\",\"version\"],\"reachable\":true}},\"rollback_started\":false,\"sanitized\":true,\"schema\":1,\"secrets_included\":false,\"service_files\":{\"adapter\":{\"content\":\"[Unit]\\nDescription=Homelab command adapter\\nAfter=network-online.target\\nWants=network-online.target\\n\\n[Service]\\nType=simple\\nExecStart=/usr/bin/python3 -B /usr/local/sbin/homelab-command-adapter --serve\\nUser=root\\nGroup=homelab-command-portal\\nUMask=0027\\nRuntimeDirectory=homelab-command-adapter\\nRuntimeDirectoryMode=0750\\nRestart=on-failure\\nRestartSec=2\\nNoNewPrivileges=false\\nPrivateTmp=true\\nProtectClock=true\\nProtectControlGroups=true\\nProtectKernelLogs=true\\nProtectKernelModules=true\\nProtectKernelTunables=true\\nRestrictRealtime=true\\nLockPersonality=true\\nMemoryDenyWriteExecute=true\\nSystemCallArchitectures=native\\nTimeoutStopSec=15\\n\\n[Install]\\nWantedBy=multi-user.target\\n\",\"exists\":true,\"path\":\"/etc/systemd/system/homelab-command-adapter.service\",\"sha256\":\"74d0f37878652ed9d46b53ae8556bbb30ebd683741f293c3f59b3527876ed2d7\"},\"portal\":{\"content\":\"[Unit]\\nDescription=Homelab command portal\\nAfter=network-online.target homelab-command-adapter.service\\nRequires=homelab-command-adapter.service\\nWants=network-online.target\\nStartLimitIntervalSec=30\\nStartLimitBurst=3\\n\\n[Service]\\nType=simple\\nExecStartPre=/usr/bin/python3 -B /usr/local/sbin/homelab-command-portal --self-test\\nExecStart=/usr/bin/python3 -B /usr/local/sbin/homelab-command-portal\\nUser=homelab-command-portal\\nGroup=homelab-command-portal\\nUMask=0077\\nRestart=on-failure\\nRestartSec=2\\nNoNewPrivileges=true\\nPrivateTmp=true\\nPrivateDevices=true\\nProtectSystem=strict\\nProtectHome=true\\nReadWritePaths=/var/lib/homelab-command-portal\\nProtectClock=true\\nProtectControlGroups=true\\nProtectKernelLogs=true\\nProtectKernelModules=true\\nProtectKernelTunables=true\\nRestrictSUIDSGID=true\\nRestrictRealtime=true\\nLockPersonality=true\\nMemoryDenyWriteExecute=true\\nRestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX\\nSystemCallArchitectures=native\\nTimeoutStopSec=15\\n\\n[Install]\\nWantedBy=multi-user.target\\n\",\"exists\":true,\"path\":\"/etc/systemd/system/homelab-command-portal.service\",\"sha256\":\"8453eab30f5c3ccd285fc9f70fff18f564809bb27f7bf84f51f2ba593aa85263\"}},\"services\":{\"adapter\":{\"active\":\"active\",\"pid\":\"976008\",\"restarts\":\"0\",\"sub\":\"running\"},\"portal\":{\"active\":\"active\",\"pid\":\"976035\",\"restarts\":\"0\",\"sub\":\"running\"}},\"signing_tools\":{\"gpg\":{\"available\":true,\"path\":\"/usr/bin/gpg\",\"version\":\"gpg (GnuPG) 2.4.7\\nlibgcrypt 1.11.0\\nCopyright (C) 2024 g10 Code GmbH\\nLicense GNU GPL-3.0-or-later \",\"version_rc\":0},\"openssl\":{\"available\":true,\"path\":\"/usr/bin/openssl\",\"version\":\"OpenSSL 3.5.6 7 Apr 2026 (Library: OpenSSL 3.5.6 7 Apr 2026)\",\"version_rc\":0},\"ssh-keygen\":{\"available\":true,\"path\":\"/usr/bin/ssh-keygen\",\"version\":\"unknown option -- ?\\nusage: ssh-keygen [-q] [-a rounds] [-b bits] [-C comment] [-f output_keyfile]\\n [-m format] [-N new_passphrase] [-O option]\\n [-t dsa | ecdsa | ecdsa-sk | ed25519 | ed25519-sk | rsa]\",\"version_rc\":1}},\"status\":\"FAIL\"}\n" +} diff --git a/runtime/history/RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z.txt b/runtime/history/RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z.txt new file mode 100644 index 0000000..8a72d06 --- /dev/null +++ b/runtime/history/RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z.txt @@ -0,0 +1,33 @@ +CHAT_OUTPUT_BEGIN +COMMAND_ID=RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z +STATUS=FAIL +RC=1 +HOST=pve01 +MODE=verify +COMPONENT=result-integration +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 +COMMAND_SHA256=2abcd8ed3caba3c56dfe1df39f3d834c9ed9e4972caf331a8e3d2132922beb6a +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=1 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=9d100401351f949bb1c6fb06d107acda5f52729fbcaedc717a0c0ce64222b74b +SANITIZED_OUTPUT_SHA256=e3e004dbf0b954143046f1135c5c929091333d74b8210438c0cdf9dc959aac55 +OUTPUT_BEGIN +{"architecture":{"adapter_functions":{"dispatch":{"calls":["AdapterError","bind_enrollment","consume_bootstrap","enroll_device","evidence_url","get","import_capsule","public_state","response_ok","start_execution","str"],"line":2419,"names":["AdapterError","Any","bind_enrollment","consume_bootstrap","dict","enroll_device","evidence_url","import_capsule","operation","public_state","request","response_ok","start_execution","str"],"strings":["","bind_enrollment","client_ip","consume_bootstrap","device_token","enroll","evidence_url","execute","health","import","ok","op","session_token","short_id","state","status","token","unsupported operation","upload_path","version"]},"evidence_url":{"calls":["AdapterError","GlobalLock","authorize_session","get","isinstance","load_json","sign_evidence","state_path","str"],"line":2186,"names":["AdapterError","Any","GlobalLock","authorize_session","client_ip","dict","digest","evidence","isinstance","load_json","object_key","session_token","short_id","sign_evidence","signed","state","state_path","str"],"strings":["evidence","evidence not ready","expires_at_utc","object_key","sha256","url"]},"public_state":{"calls":["GlobalLock","authorize_session","load_json","sanitize_state","state_path"],"line":1311,"names":["Any","GlobalLock","authorize_session","client_ip","dict","load_json","sanitize_state","session_token","short_id","state","state_path","str"],"strings":[]},"sanitize_state":{"calls":["get","isinstance"],"line":1327,"names":["Any","dict","evidence","execution","isinstance","key","public_evidence","public_execution","state","str"],"strings":["bytes","capsule_bytes","capsule_sha256","command_object","error","evidence","execution","finished_at_utc","gateway_verified","imported_at_utc","manifest","object_key","runner_document_rc","runner_json_sha256","runner_rc","runner_status","runner_text_sha256","runner_wrapper_matches_document","schema_version","sha256","short_id","started_at_utc","status"]},"upload_evidence":{"calls":["AdapterError","remote_evidence_presign","run_command","sha256_file","sign_evidence","str","token_hex","unlink"],"line":1668,"names":["AdapterError","FileNotFoundError","Path","RUN_DIR","bundle","digest","object_key","remote_evidence_presign","result","run_command","secrets","sha256_file","sign_evidence","signed","signed_get","str","verify","verify_path"],"strings":["--connect-timeout","--fail","--fail-with-body","--max-time","--output","--request","--resolve","--show-error","--silent","--upload-file",".tgz",".verify-","/usr/bin/curl","10","120","; stderr=","PUT","evidence gateway SHA verification failed","evidence gateway verification failed: ","evidence upload failed: rc=","evidence.vpn.gram1.ru:443:[PRIVATE_IP]","url"]},"worker":{"calls":["AdapterError","GlobalLock","Path","atomic_json","chmod","create_evidence_bundle","dict","ensure_layout","get","getpid","int","isinstance","iso","load_json","open","read_bytes","run_existing_runner","select_runner_artifacts","sha256_bytes","sha256_file","state_path","str","substitute_argv","time","type","update","upload_evidence","validate_capsule","verify_command_object","verify_local_integrity","worker_state_owned","write","write_text"],"line":1994,"names":["AdapterError","Exception","GlobalLock","KeyError","Path","RUNNER","RUN_DIR","SAFE_ENV","TypeError","ValueError","_","argv","atomic_json","bundle","command_object","create_evidence_bundle","current","dict","display","document_rc","document_status","ensure_layout","environment","evidence_bytes","evidence_sha","exc","int","isinstance","iso","load_json","object_key","os","path","payload_root","prefix","raw","result","run_existing_runner","runner_args","runner_document","runner_json","runner_txt","select_runner_artifacts","sha256_bytes","sha256_file","short_id","started_epoch","state","state_path","str","stream","substitute_argv","time","type","upload_evidence","validate_capsule","verify_command_object","verify_local_integrity","worker_state_owned","wrapper_log","wrapper_matches"],"strings":["--",".runner.log","/","/evidence.tgz",":","FAIL","HOMELAB_TIMEOUT","RUNNING","RunnerWrapperMismatch","WORKER_ERROR=","\\n","a","argv","bytes","capsule SHA changed","capsule manifest changed","capsule_bytes","capsule_path","capsule_sha256","command object state missing","command-portal-smoke","command_id","command_object","component","error","evidence","execution","existing runner returned a different rc after writing its public artifact; runtime publication or wrapper completion failed","finished_at_utc","gateway_verified","local_bundle","manifest","message","mode","object_key","payload_root","portal","portal-tests","rc","replace","runner artifact rc invalid","runner_document_rc","runner_json","runner_json_sha256","runner_rc","runner_status","runner_text","runner_text_sha256","runner_wrapper_matches_document","sha256","status","timeout_seconds","type","utf-8","worker finalization ownership lost","worker state invalid: "]}},"command_templates":{"adapter":[["/usr/bin/curl","--fail-with-body","--silent","--show-error","--connect-timeout","10","--max-time","120","--request","PUT"]],"portal":[],"runner":[]},"portal_classes":{"Handler":{"line":451,"methods":["content_length","do_GET","do_POST","error_reply","log_message","path_parts","read_body","redirect","reply"],"strings":["","\n"," - ","(/enroll/)[A-Za-z0-9_-]{32,160}","([?&]t=)[^&\\s]+",",",".hcmd",".upload-","/api/enroll","/api/import","/api/state/([A-Z2-7]{10,20})","/bridge-setup.cmd","/bridge-setup.cmd\">Скачать установщик

\n

После запуска установщика файлы .hcmd будут открываться двойным кликом.

\n","/bridge/bridge.cmd","/enroll/","/healthz","/r/","/r/([A-Z2-7]{10,20})","/r/([A-Z2-7]{10,20})/evidence","/r/([A-Z2-7]{10,20})/execute","0",":","; Max-Age=","; Path=/; Secure; HttpOnly; SameSite=Strict","\n\n\nHomelab Bridge\n\n\n

Установка Homelab Bridge

\n

Профиль: ","

\n

Ссылка одноразовая и уже привязана к этому NetBird-адресу.

\n

Скачать проверенное evidence

","/r/([A-Z2-7]{10,20})/evidence","/run/homelab-command-adapter/adapter.sock","/var/lib/homelab-command-portal/inbox","Gitea runtime evidence","adapter result not object","evidence","evidence_url","gitea","result"],"runner":[]},"runner_functions":{}},"backup_changed":false,"candidate_directories":{"adapter_root":{"exists":true,"gid":990,"is_dir":true,"is_symlink":false,"mode":"0o750","path":"/var/lib/homelab-command-adapter","uid":0},"result_documents_candidate":{"exists":false,"path":"/var/lib/homelab-command-adapter/public-results"},"result_signing_candidate":{"exists":false,"path":"/var/lib/homelab-command-adapter/result-signing"},"runner_public":{"exists":true,"gid":0,"is_dir":true,"is_symlink":false,"mode":"0o700","path":"/var/lib/homelab-chat-run/public","uid":0},"runner_raw":{"exists":true,"gid":0,"is_dir":true,"is_symlink":false,"mode":"0o700","path":"/var/lib/homelab-chat-run/raw","uid":0},"runner_root":{"exists":true,"gid":0,"is_dir":true,"is_symlink":false,"mode":"0o700","path":"/var/lib/homelab-chat-run","uid":0}},"changes_made":false,"checks":{"adapter_expected_sha":true,"adapter_has_final_evidence_state":true,"adapter_healthy":true,"evidence_health_public":true,"git_publication_present":false,"known_history_command_matches":true,"known_history_json_public":true,"known_history_text_public":true,"portal_expected_sha":true,"portal_health_public":true,"portal_healthy":true,"runner_expected_sha":true,"ssh_keygen_available":true},"cluster_changed":false,"command_id":"RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z","design_decision":{"adapter_state_auth_required":true,"authoritative_reader_source":"command-scoped Gitea history document, not mutable latest pointers","final_document_publisher":"Adapter after evidence upload and final state commit","latest_pointer_authoritative":false,"public_key_path":"runtime/keys/result-signing-ed25519.pub","public_path":"runtime/final//.json","reader_inputs_known_before_execution":["command_id","capsule_sha256"],"runner_history_preserved":true,"signature_scheme_preference":"Ed25519 detached signature over canonical JSON using dedicated result-signing key","terminal_only":true},"gitea_changed":false,"inventory":{"adapter":{"exists":true,"expected_match":true,"is_symlink":false,"path":"/usr/local/sbin/homelab-command-adapter","sha256":"8d0af84dcfcf6ddbfd1c4e6cbb059cef66b4cfc6c75bfd66da649acc229c7f5e"},"portal":{"exists":true,"expected_match":true,"is_symlink":false,"path":"/usr/local/sbin/homelab-command-portal","sha256":"8056faf4ef6348f0b06319ad3c49fbfeeadf25b6370f857ea19569bd27652ee2"},"runner":{"exists":true,"expected_match":true,"is_symlink":false,"path":"/usr/local/sbin/homelab-chat-run","sha256":"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d"}},"known_history_fields":["block_reason","change_declared","changes_made","channel","command_id","command_rc","command_sha256","component","duplicate_failed_command_blocked","error_register_checked","error_register_sha256","execution_started","finished_at_utc","full_sanitized_output_url","host","mode","mutation_outcome","output","output_truncated_in_json","private_addresses_included","raw_evidence_retained_locally","raw_evidence_sha256","rc","reference_register_checked","reference_sha256","result_contract_error","result_contract_status","result_contract_valid","rollback_restored","rollback_started","sanitized","sanitized_output_sha256","schema_version","secrets_included","started_at_utc","status"],"plan_requirements":{"modify_candidates":["/usr/local/sbin/homelab-command-adapter"],"must_preserve":["/usr/local/sbin/homelab-chat-run","/usr/local/sbin/homelab-command-portal","existing evidence publication","existing Gitea runtime history","backup","cluster"],"possible_new_helpers":["/usr/local/sbin/homelab-result-publish"],"possible_new_state_dirs":["/var/lib/homelab-command-adapter/result-signing","/var/lib/homelab-command-adapter/public-results"],"required_postconditions":["exact command URL resolves without auth","document contains terminal Adapter state","evidence SHA and gateway_verified present","canonical document SHA validates","signature validates with published key","no secrets or private addresses","mutable latest not used for lookup"]},"private_addresses_included":false,"public_probe":{"evidence_health":{"http_code":200,"json_keys":["service","status"],"reachable":true},"history_json":{"http_code":200,"json_keys":["block_reason","change_declared","changes_made","channel","command_id","command_rc","command_sha256","component","duplicate_failed_command_blocked","error_register_checked","error_register_sha256","execution_started","finished_at_utc","full_sanitized_output_url","host","mode","mutation_outcome","output","output_truncated_in_json","private_addresses_included","raw_evidence_retained_locally","raw_evidence_sha256","rc","reference_register_checked","reference_sha256","result_contract_error","result_contract_status","result_contract_valid","rollback_restored","rollback_started","sanitized","sanitized_output_sha256","schema_version","secrets_included","started_at_utc","status"],"reachable":true},"history_text":{"http_code":200,"json_keys":null,"reachable":true},"portal_health":{"http_code":200,"json_keys":["adapter","status","version"],"reachable":true}},"rollback_started":false,"sanitized":true,"schema":1,"secrets_included":false,"service_files":{"adapter":{"content":"[Unit]\nDescription=Homelab command adapter\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nExecStart=/usr/bin/python3 -B /usr/local/sbin/homelab-command-adapter --serve\nUser=root\nGroup=homelab-command-portal\nUMask=0027\nRuntimeDirectory=homelab-command-adapter\nRuntimeDirectoryMode=0750\nRestart=on-failure\nRestartSec=2\nNoNewPrivileges=false\nPrivateTmp=true\nProtectClock=true\nProtectControlGroups=true\nProtectKernelLogs=true\nProtectKernelModules=true\nProtectKernelTunables=true\nRestrictRealtime=true\nLockPersonality=true\nMemoryDenyWriteExecute=true\nSystemCallArchitectures=native\nTimeoutStopSec=15\n\n[Install]\nWantedBy=multi-user.target\n","exists":true,"path":"/etc/systemd/system/homelab-command-adapter.service","sha256":"74d0f37878652ed9d46b53ae8556bbb30ebd683741f293c3f59b3527876ed2d7"},"portal":{"content":"[Unit]\nDescription=Homelab command portal\nAfter=network-online.target homelab-command-adapter.service\nRequires=homelab-command-adapter.service\nWants=network-online.target\nStartLimitIntervalSec=30\nStartLimitBurst=3\n\n[Service]\nType=simple\nExecStartPre=/usr/bin/python3 -B /usr/local/sbin/homelab-command-portal --self-test\nExecStart=/usr/bin/python3 -B /usr/local/sbin/homelab-command-portal\nUser=homelab-command-portal\nGroup=homelab-command-portal\nUMask=0077\nRestart=on-failure\nRestartSec=2\nNoNewPrivileges=true\nPrivateTmp=true\nPrivateDevices=true\nProtectSystem=strict\nProtectHome=true\nReadWritePaths=/var/lib/homelab-command-portal\nProtectClock=true\nProtectControlGroups=true\nProtectKernelLogs=true\nProtectKernelModules=true\nProtectKernelTunables=true\nRestrictSUIDSGID=true\nRestrictRealtime=true\nLockPersonality=true\nMemoryDenyWriteExecute=true\nRestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX\nSystemCallArchitectures=native\nTimeoutStopSec=15\n\n[Install]\nWantedBy=multi-user.target\n","exists":true,"path":"/etc/systemd/system/homelab-command-portal.service","sha256":"8453eab30f5c3ccd285fc9f70fff18f564809bb27f7bf84f51f2ba593aa85263"}},"services":{"adapter":{"active":"active","pid":"976008","restarts":"0","sub":"running"},"portal":{"active":"active","pid":"976035","restarts":"0","sub":"running"}},"signing_tools":{"gpg":{"available":true,"path":"/usr/bin/gpg","version":"gpg (GnuPG) 2.4.7\nlibgcrypt 1.11.0\nCopyright (C) 2024 g10 Code GmbH\nLicense GNU GPL-3.0-or-later ","version_rc":0},"openssl":{"available":true,"path":"/usr/bin/openssl","version":"OpenSSL 3.5.6 7 Apr 2026 (Library: OpenSSL 3.5.6 7 Apr 2026)","version_rc":0},"ssh-keygen":{"available":true,"path":"/usr/bin/ssh-keygen","version":"unknown option -- ?\nusage: ssh-keygen [-q] [-a rounds] [-b bits] [-C comment] [-f output_keyfile]\n [-m format] [-N new_passphrase] [-O option]\n [-t dsa | ecdsa | ecdsa-sk | ed25519 | ed25519-sk | rsa]","version_rc":1}},"status":"FAIL"} + +OUTPUT_END +CHAT_OUTPUT_END diff --git a/runtime/latest.json b/runtime/latest.json index efb59d6..2e5c0ea 100644 --- a/runtime/latest.json +++ b/runtime/latest.json @@ -1 +1,38 @@ -{"schema_version":1,"channel":"homelab-runtime","command_id":"CONTEXT-AUTO-20260727T071701Z","status":"OK","rc":0,"host":"pve01","mode":"read-only","component":"cluster-context","started_at_utc":"2026-07-27T07:17:01Z","finished_at_utc":"2026-07-27T07:17:02Z","reference_register_checked":true,"reference_sha256":"5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e","error_register_checked":true,"error_register_sha256":"24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83","changes_made":false,"sanitized":true,"secrets_included":false,"private_addresses_included":false,"output":"AUTOMATIC_CLUSTER_CONTEXT_REFRESH=OK"} +{ + "schema_version": 1, + "channel": "homelab-runtime", + "command_id": "RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z", + "status": "FAIL", + "rc": 1, + "host": "pve01", + "mode": "verify", + "component": "result-integration", + "started_at_utc": "2026-07-27T07:21:08Z", + "finished_at_utc": "2026-07-27T07:21:09Z", + "reference_register_checked": true, + "reference_sha256": "5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e", + "error_register_checked": true, + "error_register_sha256": "24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83", + "command_sha256": "2abcd8ed3caba3c56dfe1df39f3d834c9ed9e4972caf331a8e3d2132922beb6a", + "duplicate_failed_command_blocked": false, + "block_reason": null, + "execution_started": true, + "change_declared": false, + "result_contract_valid": true, + "result_contract_status": null, + "result_contract_error": null, + "command_rc": 1, + "changes_made": false, + "rollback_started": false, + "rollback_restored": null, + "mutation_outcome": "NO_MUTATION", + "sanitized": true, + "secrets_included": false, + "private_addresses_included": false, + "raw_evidence_retained_locally": true, + "raw_evidence_sha256": "9d100401351f949bb1c6fb06d107acda5f52729fbcaedc717a0c0ce64222b74b", + "sanitized_output_sha256": "e3e004dbf0b954143046f1135c5c929091333d74b8210438c0cdf9dc959aac55", + "output_truncated_in_json": false, + "full_sanitized_output_url": "https://git.gram1.ru/.well-known/homelab-runtime/latest.txt", + "output": "{\"architecture\":{\"adapter_functions\":{\"dispatch\":{\"calls\":[\"AdapterError\",\"bind_enrollment\",\"consume_bootstrap\",\"enroll_device\",\"evidence_url\",\"get\",\"import_capsule\",\"public_state\",\"response_ok\",\"start_execution\",\"str\"],\"line\":2419,\"names\":[\"AdapterError\",\"Any\",\"bind_enrollment\",\"consume_bootstrap\",\"dict\",\"enroll_device\",\"evidence_url\",\"import_capsule\",\"operation\",\"public_state\",\"request\",\"response_ok\",\"start_execution\",\"str\"],\"strings\":[\"\",\"bind_enrollment\",\"client_ip\",\"consume_bootstrap\",\"device_token\",\"enroll\",\"evidence_url\",\"execute\",\"health\",\"import\",\"ok\",\"op\",\"session_token\",\"short_id\",\"state\",\"status\",\"token\",\"unsupported operation\",\"upload_path\",\"version\"]},\"evidence_url\":{\"calls\":[\"AdapterError\",\"GlobalLock\",\"authorize_session\",\"get\",\"isinstance\",\"load_json\",\"sign_evidence\",\"state_path\",\"str\"],\"line\":2186,\"names\":[\"AdapterError\",\"Any\",\"GlobalLock\",\"authorize_session\",\"client_ip\",\"dict\",\"digest\",\"evidence\",\"isinstance\",\"load_json\",\"object_key\",\"session_token\",\"short_id\",\"sign_evidence\",\"signed\",\"state\",\"state_path\",\"str\"],\"strings\":[\"evidence\",\"evidence not ready\",\"expires_at_utc\",\"object_key\",\"sha256\",\"url\"]},\"public_state\":{\"calls\":[\"GlobalLock\",\"authorize_session\",\"load_json\",\"sanitize_state\",\"state_path\"],\"line\":1311,\"names\":[\"Any\",\"GlobalLock\",\"authorize_session\",\"client_ip\",\"dict\",\"load_json\",\"sanitize_state\",\"session_token\",\"short_id\",\"state\",\"state_path\",\"str\"],\"strings\":[]},\"sanitize_state\":{\"calls\":[\"get\",\"isinstance\"],\"line\":1327,\"names\":[\"Any\",\"dict\",\"evidence\",\"execution\",\"isinstance\",\"key\",\"public_evidence\",\"public_execution\",\"state\",\"str\"],\"strings\":[\"bytes\",\"capsule_bytes\",\"capsule_sha256\",\"command_object\",\"error\",\"evidence\",\"execution\",\"finished_at_utc\",\"gateway_verified\",\"imported_at_utc\",\"manifest\",\"object_key\",\"runner_document_rc\",\"runner_json_sha256\",\"runner_rc\",\"runner_status\",\"runner_text_sha256\",\"runner_wrapper_matches_document\",\"schema_version\",\"sha256\",\"short_id\",\"started_at_utc\",\"status\"]},\"upload_evidence\":{\"calls\":[\"AdapterError\",\"remote_evidence_presign\",\"run_command\",\"sha256_file\",\"sign_evidence\",\"str\",\"token_hex\",\"unlink\"],\"line\":1668,\"names\":[\"AdapterError\",\"FileNotFoundError\",\"Path\",\"RUN_DIR\",\"bundle\",\"digest\",\"object_key\",\"remote_evidence_presign\",\"result\",\"run_command\",\"secrets\",\"sha256_file\",\"sign_evidence\",\"signed\",\"signed_get\",\"str\",\"verify\",\"verify_path\"],\"strings\":[\"--connect-timeout\",\"--fail\",\"--fail-with-body\",\"--max-time\",\"--output\",\"--request\",\"--resolve\",\"--show-error\",\"--silent\",\"--upload-file\",\".tgz\",\".verify-\",\"/usr/bin/curl\",\"10\",\"120\",\"; stderr=\",\"PUT\",\"evidence gateway SHA verification failed\",\"evidence gateway verification failed: \",\"evidence upload failed: rc=\",\"evidence.vpn.gram1.ru:443:[PRIVATE_IP]\",\"url\"]},\"worker\":{\"calls\":[\"AdapterError\",\"GlobalLock\",\"Path\",\"atomic_json\",\"chmod\",\"create_evidence_bundle\",\"dict\",\"ensure_layout\",\"get\",\"getpid\",\"int\",\"isinstance\",\"iso\",\"load_json\",\"open\",\"read_bytes\",\"run_existing_runner\",\"select_runner_artifacts\",\"sha256_bytes\",\"sha256_file\",\"state_path\",\"str\",\"substitute_argv\",\"time\",\"type\",\"update\",\"upload_evidence\",\"validate_capsule\",\"verify_command_object\",\"verify_local_integrity\",\"worker_state_owned\",\"write\",\"write_text\"],\"line\":1994,\"names\":[\"AdapterError\",\"Exception\",\"GlobalLock\",\"KeyError\",\"Path\",\"RUNNER\",\"RUN_DIR\",\"SAFE_ENV\",\"TypeError\",\"ValueError\",\"_\",\"argv\",\"atomic_json\",\"bundle\",\"command_object\",\"create_evidence_bundle\",\"current\",\"dict\",\"display\",\"document_rc\",\"document_status\",\"ensure_layout\",\"environment\",\"evidence_bytes\",\"evidence_sha\",\"exc\",\"int\",\"isinstance\",\"iso\",\"load_json\",\"object_key\",\"os\",\"path\",\"payload_root\",\"prefix\",\"raw\",\"result\",\"run_existing_runner\",\"runner_args\",\"runner_document\",\"runner_json\",\"runner_txt\",\"select_runner_artifacts\",\"sha256_bytes\",\"sha256_file\",\"short_id\",\"started_epoch\",\"state\",\"state_path\",\"str\",\"stream\",\"substitute_argv\",\"time\",\"type\",\"upload_evidence\",\"validate_capsule\",\"verify_command_object\",\"verify_local_integrity\",\"worker_state_owned\",\"wrapper_log\",\"wrapper_matches\"],\"strings\":[\"--\",\".runner.log\",\"/\",\"/evidence.tgz\",\":\",\"FAIL\",\"HOMELAB_TIMEOUT\",\"RUNNING\",\"RunnerWrapperMismatch\",\"WORKER_ERROR=\",\"\\\\n\",\"a\",\"argv\",\"bytes\",\"capsule SHA changed\",\"capsule manifest changed\",\"capsule_bytes\",\"capsule_path\",\"capsule_sha256\",\"command object state missing\",\"command-portal-smoke\",\"command_id\",\"command_object\",\"component\",\"error\",\"evidence\",\"execution\",\"existing runner returned a different rc after writing its public artifact; runtime publication or wrapper completion failed\",\"finished_at_utc\",\"gateway_verified\",\"local_bundle\",\"manifest\",\"message\",\"mode\",\"object_key\",\"payload_root\",\"portal\",\"portal-tests\",\"rc\",\"replace\",\"runner artifact rc invalid\",\"runner_document_rc\",\"runner_json\",\"runner_json_sha256\",\"runner_rc\",\"runner_status\",\"runner_text\",\"runner_text_sha256\",\"runner_wrapper_matches_document\",\"sha256\",\"status\",\"timeout_seconds\",\"type\",\"utf-8\",\"worker finalization ownership lost\",\"worker state invalid: \"]}},\"command_templates\":{\"adapter\":[[\"/usr/bin/curl\",\"--fail-with-body\",\"--silent\",\"--show-error\",\"--connect-timeout\",\"10\",\"--max-time\",\"120\",\"--request\",\"PUT\"]],\"portal\":[],\"runner\":[]},\"portal_classes\":{\"Handler\":{\"line\":451,\"methods\":[\"content_length\",\"do_GET\",\"do_POST\",\"error_reply\",\"log_message\",\"path_parts\",\"read_body\",\"redirect\",\"reply\"],\"strings\":[\"\",\"\\n\",\" - \",\"(/enroll/)[A-Za-z0-9_-]{32,160}\",\"([?&]t=)[^&\\\\s]+\",\",\",\".hcmd\",\".upload-\",\"/api/enroll\",\"/api/import\",\"/api/state/([A-Z2-7]{10,20})\",\"/bridge-setup.cmd\",\"/bridge-setup.cmd\\\">Скачать установщик

\\n

После запуска установщика файлы .hcmd будут открываться двойным кликом.

\\n\",\"/bridge/bridge.cmd\",\"/enroll/\",\"/healthz\",\"/r/\",\"/r/([A-Z2-7]{10,20})\",\"/r/([A-Z2-7]{10,20})/evidence\",\"/r/([A-Z2-7]{10,20})/execute\",\"0\",\":\",\"; Max-Age=\",\"; Path=/; Secure; HttpOnly; SameSite=Strict\",\"\\n\\n\\nHomelab Bridge\\n\\n\\n

Установка Homelab Bridge

\\n

Профиль: \",\"

\\n

Ссылка одноразовая и уже привязана к этому NetBird-адресу.

\\n

Скачать проверенное evidence

\",\"/r/([A-Z2-7]{10,20})/evidence\",\"/run/homelab-command-adapter/adapter.sock\",\"/var/lib/homelab-command-portal/inbox\",\"Gitea runtime evidence\",\"adapter result not object\",\"evidence\",\"evidence_url\",\"gitea\",\"result\"],\"runner\":[]},\"runner_functions\":{}},\"backup_changed\":false,\"candidate_directories\":{\"adapter_root\":{\"exists\":true,\"gid\":990,\"is_dir\":true,\"is_symlink\":false,\"mode\":\"0o750\",\"path\":\"/var/lib/homelab-command-adapter\",\"uid\":0},\"result_documents_candidate\":{\"exists\":false,\"path\":\"/var/lib/homelab-command-adapter/public-results\"},\"result_signing_candidate\":{\"exists\":false,\"path\":\"/var/lib/homelab-command-adapter/result-signing\"},\"runner_public\":{\"exists\":true,\"gid\":0,\"is_dir\":true,\"is_symlink\":false,\"mode\":\"0o700\",\"path\":\"/var/lib/homelab-chat-run/public\",\"uid\":0},\"runner_raw\":{\"exists\":true,\"gid\":0,\"is_dir\":true,\"is_symlink\":false,\"mode\":\"0o700\",\"path\":\"/var/lib/homelab-chat-run/raw\",\"uid\":0},\"runner_root\":{\"exists\":true,\"gid\":0,\"is_dir\":true,\"is_symlink\":false,\"mode\":\"0o700\",\"path\":\"/var/lib/homelab-chat-run\",\"uid\":0}},\"changes_made\":false,\"checks\":{\"adapter_expected_sha\":true,\"adapter_has_final_evidence_state\":true,\"adapter_healthy\":true,\"evidence_health_public\":true,\"git_publication_present\":false,\"known_history_command_matches\":true,\"known_history_json_public\":true,\"known_history_text_public\":true,\"portal_expected_sha\":true,\"portal_health_public\":true,\"portal_healthy\":true,\"runner_expected_sha\":true,\"ssh_keygen_available\":true},\"cluster_changed\":false,\"command_id\":\"RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z\",\"design_decision\":{\"adapter_state_auth_required\":true,\"authoritative_reader_source\":\"command-scoped Gitea history document, not mutable latest pointers\",\"final_document_publisher\":\"Adapter after evidence upload and final state commit\",\"latest_pointer_authoritative\":false,\"public_key_path\":\"runtime/keys/result-signing-ed25519.pub\",\"public_path\":\"runtime/final//.json\",\"reader_inputs_known_before_execution\":[\"command_id\",\"capsule_sha256\"],\"runner_history_preserved\":true,\"signature_scheme_preference\":\"Ed25519 detached signature over canonical JSON using dedicated result-signing key\",\"terminal_only\":true},\"gitea_changed\":false,\"inventory\":{\"adapter\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"path\":\"/usr/local/sbin/homelab-command-adapter\",\"sha256\":\"8d0af84dcfcf6ddbfd1c4e6cbb059cef66b4cfc6c75bfd66da649acc229c7f5e\"},\"portal\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"path\":\"/usr/local/sbin/homelab-command-portal\",\"sha256\":\"8056faf4ef6348f0b06319ad3c49fbfeeadf25b6370f857ea19569bd27652ee2\"},\"runner\":{\"exists\":true,\"expected_match\":true,\"is_symlink\":false,\"path\":\"/usr/local/sbin/homelab-chat-run\",\"sha256\":\"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d\"}},\"known_history_fields\":[\"block_reason\",\"change_declared\",\"changes_made\",\"channel\",\"command_id\",\"command_rc\",\"command_sha256\",\"component\",\"duplicate_failed_command_blocked\",\"error_register_checked\",\"error_register_sha256\",\"execution_started\",\"finished_at_utc\",\"full_sanitized_output_url\",\"host\",\"mode\",\"mutation_outcome\",\"output\",\"output_truncated_in_json\",\"private_addresses_included\",\"raw_evidence_retained_locally\",\"raw_evidence_sha256\",\"rc\",\"reference_register_checked\",\"reference_sha256\",\"result_contract_error\",\"result_contract_status\",\"result_contract_valid\",\"rollback_restored\",\"rollback_started\",\"sanitized\",\"sanitized_output_sha256\",\"schema_version\",\"secrets_included\",\"started_at_utc\",\"status\"],\"plan_requirements\":{\"modify_candidates\":[\"/usr/local/sbin/homelab-command-adapter\"],\"must_preserve\":[\"/usr/local/sbin/homelab-chat-run\",\"/usr/local/sbin/homelab-command-portal\",\"existing evidence publication\",\"existing Gitea runtime history\",\"backup\",\"cluster\"],\"possible_new_helpers\":[\"/usr/local/sbin/homelab-result-publish\"],\"possible_new_state_dirs\":[\"/var/lib/homelab-command-adapter/result-signing\",\"/var/lib/homelab-command-adapter/public-results\"],\"required_postconditions\":[\"exact command URL resolves without auth\",\"document contains terminal Adapter state\",\"evidence SHA and gateway_verified present\",\"canonical document SHA validates\",\"signature validates with published key\",\"no secrets or private addresses\",\"mutable latest not used for lookup\"]},\"private_addresses_included\":false,\"public_probe\":{\"evidence_health\":{\"http_code\":200,\"json_keys\":[\"service\",\"status\"],\"reachable\":true},\"history_json\":{\"http_code\":200,\"json_keys\":[\"block_reason\",\"change_declared\",\"changes_made\",\"channel\",\"command_id\",\"command_rc\",\"command_sha256\",\"component\",\"duplicate_failed_command_blocked\",\"error_register_checked\",\"error_register_sha256\",\"execution_started\",\"finished_at_utc\",\"full_sanitized_output_url\",\"host\",\"mode\",\"mutation_outcome\",\"output\",\"output_truncated_in_json\",\"private_addresses_included\",\"raw_evidence_retained_locally\",\"raw_evidence_sha256\",\"rc\",\"reference_register_checked\",\"reference_sha256\",\"result_contract_error\",\"result_contract_status\",\"result_contract_valid\",\"rollback_restored\",\"rollback_started\",\"sanitized\",\"sanitized_output_sha256\",\"schema_version\",\"secrets_included\",\"started_at_utc\",\"status\"],\"reachable\":true},\"history_text\":{\"http_code\":200,\"json_keys\":null,\"reachable\":true},\"portal_health\":{\"http_code\":200,\"json_keys\":[\"adapter\",\"status\",\"version\"],\"reachable\":true}},\"rollback_started\":false,\"sanitized\":true,\"schema\":1,\"secrets_included\":false,\"service_files\":{\"adapter\":{\"content\":\"[Unit]\\nDescription=Homelab command adapter\\nAfter=network-online.target\\nWants=network-online.target\\n\\n[Service]\\nType=simple\\nExecStart=/usr/bin/python3 -B /usr/local/sbin/homelab-command-adapter --serve\\nUser=root\\nGroup=homelab-command-portal\\nUMask=0027\\nRuntimeDirectory=homelab-command-adapter\\nRuntimeDirectoryMode=0750\\nRestart=on-failure\\nRestartSec=2\\nNoNewPrivileges=false\\nPrivateTmp=true\\nProtectClock=true\\nProtectControlGroups=true\\nProtectKernelLogs=true\\nProtectKernelModules=true\\nProtectKernelTunables=true\\nRestrictRealtime=true\\nLockPersonality=true\\nMemoryDenyWriteExecute=true\\nSystemCallArchitectures=native\\nTimeoutStopSec=15\\n\\n[Install]\\nWantedBy=multi-user.target\\n\",\"exists\":true,\"path\":\"/etc/systemd/system/homelab-command-adapter.service\",\"sha256\":\"74d0f37878652ed9d46b53ae8556bbb30ebd683741f293c3f59b3527876ed2d7\"},\"portal\":{\"content\":\"[Unit]\\nDescription=Homelab command portal\\nAfter=network-online.target homelab-command-adapter.service\\nRequires=homelab-command-adapter.service\\nWants=network-online.target\\nStartLimitIntervalSec=30\\nStartLimitBurst=3\\n\\n[Service]\\nType=simple\\nExecStartPre=/usr/bin/python3 -B /usr/local/sbin/homelab-command-portal --self-test\\nExecStart=/usr/bin/python3 -B /usr/local/sbin/homelab-command-portal\\nUser=homelab-command-portal\\nGroup=homelab-command-portal\\nUMask=0077\\nRestart=on-failure\\nRestartSec=2\\nNoNewPrivileges=true\\nPrivateTmp=true\\nPrivateDevices=true\\nProtectSystem=strict\\nProtectHome=true\\nReadWritePaths=/var/lib/homelab-command-portal\\nProtectClock=true\\nProtectControlGroups=true\\nProtectKernelLogs=true\\nProtectKernelModules=true\\nProtectKernelTunables=true\\nRestrictSUIDSGID=true\\nRestrictRealtime=true\\nLockPersonality=true\\nMemoryDenyWriteExecute=true\\nRestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX\\nSystemCallArchitectures=native\\nTimeoutStopSec=15\\n\\n[Install]\\nWantedBy=multi-user.target\\n\",\"exists\":true,\"path\":\"/etc/systemd/system/homelab-command-portal.service\",\"sha256\":\"8453eab30f5c3ccd285fc9f70fff18f564809bb27f7bf84f51f2ba593aa85263\"}},\"services\":{\"adapter\":{\"active\":\"active\",\"pid\":\"976008\",\"restarts\":\"0\",\"sub\":\"running\"},\"portal\":{\"active\":\"active\",\"pid\":\"976035\",\"restarts\":\"0\",\"sub\":\"running\"}},\"signing_tools\":{\"gpg\":{\"available\":true,\"path\":\"/usr/bin/gpg\",\"version\":\"gpg (GnuPG) 2.4.7\\nlibgcrypt 1.11.0\\nCopyright (C) 2024 g10 Code GmbH\\nLicense GNU GPL-3.0-or-later \",\"version_rc\":0},\"openssl\":{\"available\":true,\"path\":\"/usr/bin/openssl\",\"version\":\"OpenSSL 3.5.6 7 Apr 2026 (Library: OpenSSL 3.5.6 7 Apr 2026)\",\"version_rc\":0},\"ssh-keygen\":{\"available\":true,\"path\":\"/usr/bin/ssh-keygen\",\"version\":\"unknown option -- ?\\nusage: ssh-keygen [-q] [-a rounds] [-b bits] [-C comment] [-f output_keyfile]\\n [-m format] [-N new_passphrase] [-O option]\\n [-t dsa | ecdsa | ecdsa-sk | ed25519 | ed25519-sk | rsa]\",\"version_rc\":1}},\"status\":\"FAIL\"}\n" +} diff --git a/runtime/latest.txt b/runtime/latest.txt index f53f4a7..8a72d06 100644 --- a/runtime/latest.txt +++ b/runtime/latest.txt @@ -1,163 +1,33 @@ CHAT_OUTPUT_BEGIN -COMMAND_ID=CONTEXT-AUTO-[PRIVATE_IP]701Z -STATUS=OK -RC=0 +COMMAND_ID=RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z +STATUS=FAIL +RC=1 HOST=pve01 -COMPONENT=cluster-context -REFERENCE_SHA[PRIVATE_IP]f8edc75fcf[PRIVATE_IP]c[PRIVATE_IP]cc112ceccb6cf[PRIVATE_IP]a4deb8e -ERROR_REGISTER_SHA[PRIVATE_IP]c7fa[PRIVATE_IP]583c4aefac[PRIVATE_IP]1736ed[PRIVATE_IP]ab83 +MODE=verify +COMPONENT=result-integration +REFERENCE_REGISTER_CHECK=OK +REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e +ERROR_REGISTER_CHECK=OK +ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83 +COMMAND_SHA256=2abcd8ed3caba3c56dfe1df39f3d834c9ed9e4972caf331a8e3d2132922beb6a +DUPLICATE_FAILED_COMMAND_BLOCKED=false +EXECUTION_STARTED=true +CHANGE_DECLARED=false +RESULT_CONTRACT_VALID=true +RESULT_CONTRACT_STATUS=NOT_APPLICABLE +RESULT_CONTRACT_ERROR=NONE +COMMAND_RC=1 +CHANGES_MADE=false +ROLLBACK_STARTED=false +ROLLBACK_RESTORED=null +MUTATION_OUTCOME=NO_MUTATION +SANITIZED=yes +SECRETS_INCLUDED=no +PRIVATE_ADDRESSES_INCLUDED=no +RAW_EVIDENCE_SHA256=9d100401351f949bb1c6fb06d107acda5f52729fbcaedc717a0c0ce64222b74b +SANITIZED_OUTPUT_SHA256=e3e004dbf0b954143046f1135c5c929091333d74b8210438c0cdf9dc959aac55 OUTPUT_BEGIN -GENERATED_AT_UTC=[PRIVATE_IP]T07:17:01Z -Cluster information -------------------- -Name: homelab -Config Version: 3 -Transport: knet -Secure auth: on +{"architecture":{"adapter_functions":{"dispatch":{"calls":["AdapterError","bind_enrollment","consume_bootstrap","enroll_device","evidence_url","get","import_capsule","public_state","response_ok","start_execution","str"],"line":2419,"names":["AdapterError","Any","bind_enrollment","consume_bootstrap","dict","enroll_device","evidence_url","import_capsule","operation","public_state","request","response_ok","start_execution","str"],"strings":["","bind_enrollment","client_ip","consume_bootstrap","device_token","enroll","evidence_url","execute","health","import","ok","op","session_token","short_id","state","status","token","unsupported operation","upload_path","version"]},"evidence_url":{"calls":["AdapterError","GlobalLock","authorize_session","get","isinstance","load_json","sign_evidence","state_path","str"],"line":2186,"names":["AdapterError","Any","GlobalLock","authorize_session","client_ip","dict","digest","evidence","isinstance","load_json","object_key","session_token","short_id","sign_evidence","signed","state","state_path","str"],"strings":["evidence","evidence not ready","expires_at_utc","object_key","sha256","url"]},"public_state":{"calls":["GlobalLock","authorize_session","load_json","sanitize_state","state_path"],"line":1311,"names":["Any","GlobalLock","authorize_session","client_ip","dict","load_json","sanitize_state","session_token","short_id","state","state_path","str"],"strings":[]},"sanitize_state":{"calls":["get","isinstance"],"line":1327,"names":["Any","dict","evidence","execution","isinstance","key","public_evidence","public_execution","state","str"],"strings":["bytes","capsule_bytes","capsule_sha256","command_object","error","evidence","execution","finished_at_utc","gateway_verified","imported_at_utc","manifest","object_key","runner_document_rc","runner_json_sha256","runner_rc","runner_status","runner_text_sha256","runner_wrapper_matches_document","schema_version","sha256","short_id","started_at_utc","status"]},"upload_evidence":{"calls":["AdapterError","remote_evidence_presign","run_command","sha256_file","sign_evidence","str","token_hex","unlink"],"line":1668,"names":["AdapterError","FileNotFoundError","Path","RUN_DIR","bundle","digest","object_key","remote_evidence_presign","result","run_command","secrets","sha256_file","sign_evidence","signed","signed_get","str","verify","verify_path"],"strings":["--connect-timeout","--fail","--fail-with-body","--max-time","--output","--request","--resolve","--show-error","--silent","--upload-file",".tgz",".verify-","/usr/bin/curl","10","120","; stderr=","PUT","evidence gateway SHA verification failed","evidence gateway verification failed: ","evidence upload failed: rc=","evidence.vpn.gram1.ru:443:[PRIVATE_IP]","url"]},"worker":{"calls":["AdapterError","GlobalLock","Path","atomic_json","chmod","create_evidence_bundle","dict","ensure_layout","get","getpid","int","isinstance","iso","load_json","open","read_bytes","run_existing_runner","select_runner_artifacts","sha256_bytes","sha256_file","state_path","str","substitute_argv","time","type","update","upload_evidence","validate_capsule","verify_command_object","verify_local_integrity","worker_state_owned","write","write_text"],"line":1994,"names":["AdapterError","Exception","GlobalLock","KeyError","Path","RUNNER","RUN_DIR","SAFE_ENV","TypeError","ValueError","_","argv","atomic_json","bundle","command_object","create_evidence_bundle","current","dict","display","document_rc","document_status","ensure_layout","environment","evidence_bytes","evidence_sha","exc","int","isinstance","iso","load_json","object_key","os","path","payload_root","prefix","raw","result","run_existing_runner","runner_args","runner_document","runner_json","runner_txt","select_runner_artifacts","sha256_bytes","sha256_file","short_id","started_epoch","state","state_path","str","stream","substitute_argv","time","type","upload_evidence","validate_capsule","verify_command_object","verify_local_integrity","worker_state_owned","wrapper_log","wrapper_matches"],"strings":["--",".runner.log","/","/evidence.tgz",":","FAIL","HOMELAB_TIMEOUT","RUNNING","RunnerWrapperMismatch","WORKER_ERROR=","\\n","a","argv","bytes","capsule SHA changed","capsule manifest changed","capsule_bytes","capsule_path","capsule_sha256","command object state missing","command-portal-smoke","command_id","command_object","component","error","evidence","execution","existing runner returned a different rc after writing its public artifact; runtime publication or wrapper completion failed","finished_at_utc","gateway_verified","local_bundle","manifest","message","mode","object_key","payload_root","portal","portal-tests","rc","replace","runner artifact rc invalid","runner_document_rc","runner_json","runner_json_sha256","runner_rc","runner_status","runner_text","runner_text_sha256","runner_wrapper_matches_document","sha256","status","timeout_seconds","type","utf-8","worker finalization ownership lost","worker state invalid: "]}},"command_templates":{"adapter":[["/usr/bin/curl","--fail-with-body","--silent","--show-error","--connect-timeout","10","--max-time","120","--request","PUT"]],"portal":[],"runner":[]},"portal_classes":{"Handler":{"line":451,"methods":["content_length","do_GET","do_POST","error_reply","log_message","path_parts","read_body","redirect","reply"],"strings":["","\n"," - ","(/enroll/)[A-Za-z0-9_-]{32,160}","([?&]t=)[^&\\s]+",",",".hcmd",".upload-","/api/enroll","/api/import","/api/state/([A-Z2-7]{10,20})","/bridge-setup.cmd","/bridge-setup.cmd\">Скачать установщик

\n

После запуска установщика файлы .hcmd будут открываться двойным кликом.

\n","/bridge/bridge.cmd","/enroll/","/healthz","/r/","/r/([A-Z2-7]{10,20})","/r/([A-Z2-7]{10,20})/evidence","/r/([A-Z2-7]{10,20})/execute","0",":","; Max-Age=","; Path=/; Secure; HttpOnly; SameSite=Strict","\n\n\nHomelab Bridge\n\n\n

Установка Homelab Bridge

\n

Профиль: ","

\n

Ссылка одноразовая и уже привязана к этому NetBird-адресу.

\n

Скачать проверенное evidence

","/r/([A-Z2-7]{10,20})/evidence","/run/homelab-command-adapter/adapter.sock","/var/lib/homelab-command-portal/inbox","Gitea runtime evidence","adapter result not object","evidence","evidence_url","gitea","result"],"runner":[]},"runner_functions":{}},"backup_changed":false,"candidate_directories":{"adapter_root":{"exists":true,"gid":990,"is_dir":true,"is_symlink":false,"mode":"0o750","path":"/var/lib/homelab-command-adapter","uid":0},"result_documents_candidate":{"exists":false,"path":"/var/lib/homelab-command-adapter/public-results"},"result_signing_candidate":{"exists":false,"path":"/var/lib/homelab-command-adapter/result-signing"},"runner_public":{"exists":true,"gid":0,"is_dir":true,"is_symlink":false,"mode":"0o700","path":"/var/lib/homelab-chat-run/public","uid":0},"runner_raw":{"exists":true,"gid":0,"is_dir":true,"is_symlink":false,"mode":"0o700","path":"/var/lib/homelab-chat-run/raw","uid":0},"runner_root":{"exists":true,"gid":0,"is_dir":true,"is_symlink":false,"mode":"0o700","path":"/var/lib/homelab-chat-run","uid":0}},"changes_made":false,"checks":{"adapter_expected_sha":true,"adapter_has_final_evidence_state":true,"adapter_healthy":true,"evidence_health_public":true,"git_publication_present":false,"known_history_command_matches":true,"known_history_json_public":true,"known_history_text_public":true,"portal_expected_sha":true,"portal_health_public":true,"portal_healthy":true,"runner_expected_sha":true,"ssh_keygen_available":true},"cluster_changed":false,"command_id":"RESULT-INTEGRATION-DESIGN-PREFLIGHT-20260727T064218Z","design_decision":{"adapter_state_auth_required":true,"authoritative_reader_source":"command-scoped Gitea history document, not mutable latest pointers","final_document_publisher":"Adapter after evidence upload and final state commit","latest_pointer_authoritative":false,"public_key_path":"runtime/keys/result-signing-ed25519.pub","public_path":"runtime/final//.json","reader_inputs_known_before_execution":["command_id","capsule_sha256"],"runner_history_preserved":true,"signature_scheme_preference":"Ed25519 detached signature over canonical JSON using dedicated result-signing key","terminal_only":true},"gitea_changed":false,"inventory":{"adapter":{"exists":true,"expected_match":true,"is_symlink":false,"path":"/usr/local/sbin/homelab-command-adapter","sha256":"8d0af84dcfcf6ddbfd1c4e6cbb059cef66b4cfc6c75bfd66da649acc229c7f5e"},"portal":{"exists":true,"expected_match":true,"is_symlink":false,"path":"/usr/local/sbin/homelab-command-portal","sha256":"8056faf4ef6348f0b06319ad3c49fbfeeadf25b6370f857ea19569bd27652ee2"},"runner":{"exists":true,"expected_match":true,"is_symlink":false,"path":"/usr/local/sbin/homelab-chat-run","sha256":"b248a4c32c9cc64e5747e7dce6c7fc0a23f5124a77c71ce72e27a81aceae9d2d"}},"known_history_fields":["block_reason","change_declared","changes_made","channel","command_id","command_rc","command_sha256","component","duplicate_failed_command_blocked","error_register_checked","error_register_sha256","execution_started","finished_at_utc","full_sanitized_output_url","host","mode","mutation_outcome","output","output_truncated_in_json","private_addresses_included","raw_evidence_retained_locally","raw_evidence_sha256","rc","reference_register_checked","reference_sha256","result_contract_error","result_contract_status","result_contract_valid","rollback_restored","rollback_started","sanitized","sanitized_output_sha256","schema_version","secrets_included","started_at_utc","status"],"plan_requirements":{"modify_candidates":["/usr/local/sbin/homelab-command-adapter"],"must_preserve":["/usr/local/sbin/homelab-chat-run","/usr/local/sbin/homelab-command-portal","existing evidence publication","existing Gitea runtime history","backup","cluster"],"possible_new_helpers":["/usr/local/sbin/homelab-result-publish"],"possible_new_state_dirs":["/var/lib/homelab-command-adapter/result-signing","/var/lib/homelab-command-adapter/public-results"],"required_postconditions":["exact command URL resolves without auth","document contains terminal Adapter state","evidence SHA and gateway_verified present","canonical document SHA validates","signature validates with published key","no secrets or private addresses","mutable latest not used for lookup"]},"private_addresses_included":false,"public_probe":{"evidence_health":{"http_code":200,"json_keys":["service","status"],"reachable":true},"history_json":{"http_code":200,"json_keys":["block_reason","change_declared","changes_made","channel","command_id","command_rc","command_sha256","component","duplicate_failed_command_blocked","error_register_checked","error_register_sha256","execution_started","finished_at_utc","full_sanitized_output_url","host","mode","mutation_outcome","output","output_truncated_in_json","private_addresses_included","raw_evidence_retained_locally","raw_evidence_sha256","rc","reference_register_checked","reference_sha256","result_contract_error","result_contract_status","result_contract_valid","rollback_restored","rollback_started","sanitized","sanitized_output_sha256","schema_version","secrets_included","started_at_utc","status"],"reachable":true},"history_text":{"http_code":200,"json_keys":null,"reachable":true},"portal_health":{"http_code":200,"json_keys":["adapter","status","version"],"reachable":true}},"rollback_started":false,"sanitized":true,"schema":1,"secrets_included":false,"service_files":{"adapter":{"content":"[Unit]\nDescription=Homelab command adapter\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nExecStart=/usr/bin/python3 -B /usr/local/sbin/homelab-command-adapter --serve\nUser=root\nGroup=homelab-command-portal\nUMask=0027\nRuntimeDirectory=homelab-command-adapter\nRuntimeDirectoryMode=0750\nRestart=on-failure\nRestartSec=2\nNoNewPrivileges=false\nPrivateTmp=true\nProtectClock=true\nProtectControlGroups=true\nProtectKernelLogs=true\nProtectKernelModules=true\nProtectKernelTunables=true\nRestrictRealtime=true\nLockPersonality=true\nMemoryDenyWriteExecute=true\nSystemCallArchitectures=native\nTimeoutStopSec=15\n\n[Install]\nWantedBy=multi-user.target\n","exists":true,"path":"/etc/systemd/system/homelab-command-adapter.service","sha256":"74d0f37878652ed9d46b53ae8556bbb30ebd683741f293c3f59b3527876ed2d7"},"portal":{"content":"[Unit]\nDescription=Homelab command portal\nAfter=network-online.target homelab-command-adapter.service\nRequires=homelab-command-adapter.service\nWants=network-online.target\nStartLimitIntervalSec=30\nStartLimitBurst=3\n\n[Service]\nType=simple\nExecStartPre=/usr/bin/python3 -B /usr/local/sbin/homelab-command-portal --self-test\nExecStart=/usr/bin/python3 -B /usr/local/sbin/homelab-command-portal\nUser=homelab-command-portal\nGroup=homelab-command-portal\nUMask=0077\nRestart=on-failure\nRestartSec=2\nNoNewPrivileges=true\nPrivateTmp=true\nPrivateDevices=true\nProtectSystem=strict\nProtectHome=true\nReadWritePaths=/var/lib/homelab-command-portal\nProtectClock=true\nProtectControlGroups=true\nProtectKernelLogs=true\nProtectKernelModules=true\nProtectKernelTunables=true\nRestrictSUIDSGID=true\nRestrictRealtime=true\nLockPersonality=true\nMemoryDenyWriteExecute=true\nRestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX\nSystemCallArchitectures=native\nTimeoutStopSec=15\n\n[Install]\nWantedBy=multi-user.target\n","exists":true,"path":"/etc/systemd/system/homelab-command-portal.service","sha256":"8453eab30f5c3ccd285fc9f70fff18f564809bb27f7bf84f51f2ba593aa85263"}},"services":{"adapter":{"active":"active","pid":"976008","restarts":"0","sub":"running"},"portal":{"active":"active","pid":"976035","restarts":"0","sub":"running"}},"signing_tools":{"gpg":{"available":true,"path":"/usr/bin/gpg","version":"gpg (GnuPG) 2.4.7\nlibgcrypt 1.11.0\nCopyright (C) 2024 g10 Code GmbH\nLicense GNU GPL-3.0-or-later ","version_rc":0},"openssl":{"available":true,"path":"/usr/bin/openssl","version":"OpenSSL 3.5.6 7 Apr 2026 (Library: OpenSSL 3.5.6 7 Apr 2026)","version_rc":0},"ssh-keygen":{"available":true,"path":"/usr/bin/ssh-keygen","version":"unknown option -- ?\nusage: ssh-keygen [-q] [-a rounds] [-b bits] [-C comment] [-f output_keyfile]\n [-m format] [-N new_passphrase] [-O option]\n [-t dsa | ecdsa | ecdsa-sk | ed25519 | ed25519-sk | rsa]","version_rc":1}},"status":"FAIL"} -Quorum information ------------------- -Date: Mon Jul [PRIVATE_IP] 2026 -Quorum provider: corosync_votequorum -Nodes: 3 -Node ID: [PRIVATE_IP] -Ring ID: 1.c6 -Quorate: Yes - -Votequorum information ----------------------- -Expected votes: 3 -Highest expected: 3 -Total votes: 3 -Quorum: 2 -Flags: Quorate - -Membership information ----------------------- - Nodeid Votes Name -[PRIVATE_IP] [PRIVATE_IP].11 (local) -[PRIVATE_IP] [PRIVATE_IP].13 -[PRIVATE_IP] [PRIVATE_IP].12 - -Membership information ----------------------- - Nodeid Votes Name - 1 1 pve01 (local) - 2 1 pve03 - 3 1 pve02 -[{"cpu":[PRIVATE_IP]961e-05,"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/110","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns1","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"lxc","uptime":323753,"vmid":110},{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/111","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"dns2","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"lxc","uptime":323592,"vmid":111},{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/112","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound1","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"lxc","uptime":323756,"vmid":112},{"cpu":[PRIVATE_IP][PRIVATE_IP],"disk":[PRIVATE_IP],"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"lxc/113","maxcpu":1,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":0,"name":"unbound2","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"lxc","uptime":323595,"vmid":113},{"cpu":[PRIVATE_IP]63029,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"edge-vm","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":323691,"vmid":130},{"cpu":[PRIVATE_IP]15757,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/150","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"nextcloud","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":323751,"vmid":150},{"cpu":[PRIVATE_IP]326597,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/160","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"forum-prod","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"qemu","uptime":323590,"vmid":160},{"cpu":[PRIVATE_IP]32692,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/170","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"core-apps","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":323746,"vmid":170},{"cpu":[PRIVATE_IP]92432,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/171","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"monitoring","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve01","status":"running","template":0,"type":"qemu","uptime":323743,"vmid":171},{"cpu":[PRIVATE_IP]64511,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/180","maxcpu":2,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"cluster-admin","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve02","status":"running","template":0,"type":"qemu","uptime":323587,"vmid":180},{"cpu":[PRIVATE_IP]46927,"disk":0,"diskread":[PRIVATE_IP],"diskwrite":[PRIVATE_IP],"id":"qemu/190","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"memhost":[PRIVATE_IP],"name":"homelab-ops-worker","netin":[PRIVATE_IP],"netout":[PRIVATE_IP],"node":"pve03","status":"running","template":0,"type":"qemu","uptime":323687,"vmid":190},{"cpu":0,"disk":0,"diskread":0,"diskwrite":0,"id":"qemu/9130","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":0,"memhost":0,"name":"edge-cold-standby","netin":0,"netout":0,"node":"pve02","status":"stopped","template":0,"type":"qemu","uptime":0,"vmid":9130},{"cgroup-mode":2,"cpu":[PRIVATE_IP]50831,"disk":[PRIVATE_IP],"id":"node/pve01","level":"","maxcpu":24,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve01","status":"online","type":"node","uptime":323784},{"cgroup-mode":2,"cpu":[PRIVATE_IP]04912,"disk":[PRIVATE_IP],"id":"node/pve03","level":"","maxcpu":8,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve03","status":"online","type":"node","uptime":323708},{"cgroup-mode":2,"cpu":[PRIVATE_IP]0919,"disk":[PRIVATE_IP],"id":"node/pve02","level":"","maxcpu":4,"maxdisk":[PRIVATE_IP],"maxmem":[PRIVATE_IP],"mem":[PRIVATE_IP],"node":"pve02","status":"online","type":"node","uptime":323657},{"content":"iso,vztmpl,backup,import","disk":[PRIVATE_IP],"id":"storage/pve01/local","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"iso,vztmpl,backup,import","disk":[PRIVATE_IP],"id":"storage/pve03/local","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"iso,vztmpl,backup,import","disk":[PRIVATE_IP],"id":"storage/pve02/local","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"dir","shared":0,"status":"available","storage":"local","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve01/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve01","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve03/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve03","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"content":"rootdir,images","disk":[PRIVATE_IP],"id":"storage/pve02/local-lvm","maxdisk":[PRIVATE_IP],"node":"pve02","plugintype":"lvmthin","shared":0,"status":"available","storage":"local-lvm","type":"storage"},{"id":"network/pve01/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve01","status":"ok","type":"network"},{"id":"network/pve03/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve03","status":"ok","type":"network"},{"id":"network/pve02/zone/localnetwork","network":"localnetwork","network-type":"zone","node":"pve02","status":"ok","type":"network"}] -Name Type Status Total (KiB) Used (KiB) Available (KiB) % -local dir active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 12.80% -local-lvm lvmthin active [PRIVATE_IP] [PRIVATE_IP] [PRIVATE_IP] 27.22% - UNIT LOAD ACTIVE SUB DESCRIPTION -● homelab-backup-matrix-refresh.service loaded failed failed Generate unified homelab backup matrix state -● skladchik-reports-monitor-supervisor.service loaded failed failed Skladchik reports monitor full supervisor - -Legend: LOAD → Reflects whether the unit definition was properly loaded. - ACTIVE → The high-level unit activation state, i.e. generalization of SUB. - SUB → The low-level unit activation state, values depend on unit type. - -2 loaded units listed. -NEXT LEFT LAST PASSED UNIT ACTIVATES -Mon [PRIVATE_IP] 10:17:29 MSK 26s Mon [PRIVATE_IP] 10:16:29 MSK 33s ago homelab-cluster-admin-webpanel-sync.timer homelab-cluster-admin-webpanel-sync.service -Mon [PRIVATE_IP] 10:17:29 MSK 26s Mon [PRIVATE_IP] 10:16:29 MSK 33s ago homelab-private-vpn-hosts-health.timer homelab-private-vpn-hosts-health.service -Mon [PRIVATE_IP] 10:17:32 MSK 30s Mon [PRIVATE_IP] 10:16:28 MSK 34s ago homelab-router-watchdog.timer homelab-router-watchdog.service -Mon [PRIVATE_IP] 10:18:15 MSK 1min 12s Mon [PRIVATE_IP] 10:13:15 MSK 3min 47s ago homelab-smartctl-textfile.timer homelab-smartctl-textfile.service -Mon [PRIVATE_IP] 10:18:15 MSK 1min 12s Mon [PRIVATE_IP] 10:13:15 MSK 3min 47s ago netbird-peers-health.timer netbird-peers-health.service -Mon [PRIVATE_IP] 10:18:49 MSK 1min 46s Mon [PRIVATE_IP] 10:13:45 MSK 3min 17s ago homelab-health-metrics.timer homelab-health-metrics.service -Mon [PRIVATE_IP] 10:19:10 MSK 2min 7s Mon [PRIVATE_IP] 10:17:00 MSK 2s ago homelab-cluster-admin-inventory-sync.timer homelab-cluster-admin-inventory-sync.service -Mon [PRIVATE_IP] 10:19:38 MSK 2min 35s Mon [PRIVATE_IP] 10:09:38 MSK 7min ago skladchik-reports-monitor-supervisor.timer skladchik-reports-monitor-supervisor.service -Mon [PRIVATE_IP] 10:19:56 MSK 2min 53s Mon [PRIVATE_IP] 10:14:38 MSK 2min 24s ago homelab-crypto-portfolio-chart-health.timer homelab-crypto-portfolio-chart-health.service -Mon [PRIVATE_IP] 10:24:18 MSK 7min Mon [PRIVATE_IP] 04:24:18 MSK 5h 52min ago homelab-vps-identity-audit.timer homelab-vps-identity-audit.service -Mon [PRIVATE_IP] 10:26:05 MSK 9min Mon [PRIVATE_IP] 09:55:50 MSK 21min ago homelab-reference-refresh.timer homelab-reference-refresh.service -Mon [PRIVATE_IP] 10:29:29 MSK 12min Mon [PRIVATE_IP] 10:14:29 MSK 2min 33s ago homelab-disk-space-health.timer homelab-disk-space-health.service -Mon [PRIVATE_IP] 10:29:29 MSK 12min Mon [PRIVATE_IP] 10:14:29 MSK 2min 33s ago homelab-pve03-staging-capacity-health.timer homelab-pve03-staging-capacity-health.service -Mon [PRIVATE_IP] 10:29:29 MSK 12min Mon [PRIVATE_IP] 10:14:29 MSK 2min 33s ago prometheus-node-exporter-apt.timer prometheus-node-exporter-apt.service -Mon [PRIVATE_IP] 10:29:29 MSK 12min Mon [PRIVATE_IP] 10:14:29 MSK 2min 32s ago prometheus-node-exporter-nvme.timer prometheus-node-exporter-nvme.service -Mon [PRIVATE_IP] 10:30:00 MSK 12min Mon [PRIVATE_IP] 10:15:04 MSK 1min 58s ago homelab-incident-journal.timer homelab-incident-journal.service -Mon [PRIVATE_IP] 10:30:38 MSK 13min Mon [PRIVATE_IP] 10:15:04 MSK 1min 58s ago homelab-duty-admin-v2.timer homelab-duty-admin-v2.service -Mon [PRIVATE_IP] 10:30:55 MSK 13min Mon [PRIVATE_IP] 10:15:50 MSK 1min 12s ago homelab-forum-snuffleupagus-health.timer homelab-forum-snuffleupagus-health.service -Mon [PRIVATE_IP] 10:31:28 MSK 14min Mon [PRIVATE_IP] 10:16:00 MSK 1min 2s ago homelab-external-probe-vps-health.timer homelab-external-probe-vps-health.service -Mon [PRIVATE_IP] 10:32:32 MSK 15min Mon [PRIVATE_IP] 10:03:38 MSK 13min ago homelab-mkdocs-auto-refresh.timer homelab-mkdocs-auto-refresh.service -Mon [PRIVATE_IP] 16:35:54 MSK 6h Sun [PRIVATE_IP] 16:35:54 MSK 17h ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service -Mon [PRIVATE_IP] 20:12:14 MSK 9h Mon [PRIVATE_IP] 07:44:04 MSK 2h 32min ago apt-daily.timer apt-daily.service -Tue [PRIVATE_IP] 00:00:00 MSK 13h Mon [PRIVATE_IP] 00:00:04 MSK 10h ago dpkg-db-backup.timer dpkg-db-backup.service -Tue [PRIVATE_IP] 00:02:35 MSK 13h Mon [PRIVATE_IP] 00:02:04 MSK 10h ago homelab-docker-health.timer homelab-docker-health.service -Tue [PRIVATE_IP] 00:08:18 MSK 13h Mon [PRIVATE_IP] 00:11:39 MSK 10h ago homelab-evidence-catalog.timer homelab-evidence-catalog.service -Tue [PRIVATE_IP] 00:09:25 MSK 13h Mon [PRIVATE_IP] 00:04:04 MSK 10h ago homelab-storage-capacity.timer homelab-storage-capacity.service -Tue [PRIVATE_IP] 00:16:07 MSK 13h Mon [PRIVATE_IP] 00:15:19 MSK 10h ago homelab-quality-gate.timer homelab-quality-gate.service -Tue [PRIVATE_IP] 00:43:23 MSK 14h Mon [PRIVATE_IP] 00:04:04 MSK 10h ago logrotate.timer logrotate.service -Tue [PRIVATE_IP] 03:50:00 MSK 17h Mon [PRIVATE_IP] 03:50:04 MSK 6h ago filebrowser-offhost-sync.timer filebrowser-offhost-sync.service -Tue [PRIVATE_IP] 04:43:08 MSK 18h Mon [PRIVATE_IP] 04:52:04 MSK 5h 24min ago homelab-edge-vm-offhost-freshness.timer homelab-edge-vm-offhost-freshness.service -Tue [PRIVATE_IP] 04:54:11 MSK 18h Mon [PRIVATE_IP] 05:04:49 MSK 5h 12min ago homelab-sops-edge-secret-coverage.timer homelab-sops-edge-secret-coverage.service -Tue [PRIVATE_IP] 05:23:26 MSK 19h Mon [PRIVATE_IP] 02:36:58 MSK 7h ago pve-daily-update.timer pve-daily-update.service -Tue [PRIVATE_IP] 06:49:37 MSK 20h Mon [PRIVATE_IP] 06:01:15 MSK 4h 15min ago apt-daily-upgrade.timer apt-daily-upgrade.service -Tue [PRIVATE_IP] 07:10:18 MSK 20h Mon [PRIVATE_IP] 07:10:07 MSK 3h 6min ago homelab-drift-check.timer homelab-drift-check.service -Tue [PRIVATE_IP] 07:20:37 MSK 21h Mon [PRIVATE_IP] 07:39:15 MSK 2h 37min ago homelab-service-registry-check.timer homelab-service-registry-check.service -Tue [PRIVATE_IP] 07:47:08 MSK 21h Mon [PRIVATE_IP] 07:59:29 MSK 2h 17min ago homelab-runbook-generate.timer homelab-runbook-generate.service -Tue [PRIVATE_IP] 07:48:17 MSK 21h Mon [PRIVATE_IP] 07:57:57 MSK 2h 19min ago homelab-dependency-map-check.timer homelab-dependency-map-check.service -Tue [PRIVATE_IP] 07:51:53 MSK 21h Mon [PRIVATE_IP] 07:53:04 MSK 2h 23min ago homelab-alerting-health.timer homelab-alerting-health.service -Tue [PRIVATE_IP] 08:01:12 MSK 21h Mon [PRIVATE_IP] 08:01:04 MSK 2h 15min ago homelab-duty-admin-report.timer homelab-duty-admin-report.service -Tue [PRIVATE_IP] 08:01:26 MSK 21h Mon [PRIVATE_IP] 08:08:04 MSK 2h 8min ago homelab-desired-state-sync.timer homelab-desired-state-sync.service -Tue [PRIVATE_IP] 08:08:19 MSK 21h Mon [PRIVATE_IP] 08:03:38 MSK 2h 13min ago homelab-overall-health.timer homelab-overall-health.service -Tue [PRIVATE_IP] 08:11:56 MSK 21h Mon [PRIVATE_IP] 08:09:50 MSK 2h 7min ago homelab-kuma-monitor-policy.timer homelab-kuma-monitor-policy.service -Tue [PRIVATE_IP] 08:15:29 MSK 21h Mon [PRIVATE_IP] 08:18:04 MSK 1h 58min ago homelab-final-readiness-gate.timer homelab-final-readiness-gate.service -Tue [PRIVATE_IP] 08:34:11 MSK 22h Mon [PRIVATE_IP] 08:27:04 MSK 1h 49min ago homelab-capacity-risk.timer homelab-capacity-risk.service -Tue [PRIVATE_IP] 08:44:09 MSK 22h Mon [PRIVATE_IP] 08:47:15 MSK 1h 29min ago homelab-cluster-passport.timer homelab-cluster-passport.service -Tue [PRIVATE_IP] 08:44:30 MSK 22h Mon [PRIVATE_IP] 08:39:38 MSK 1h 37min ago homelab-secret-exposure-guard.timer homelab-secret-exposure-guard.service -Tue [PRIVATE_IP] 08:45:49 MSK 22h Mon [PRIVATE_IP] 09:01:45 MSK 1h 15min ago homelab-golden-state-index.timer homelab-golden-state-index.service -Tue [PRIVATE_IP] 08:49:07 MSK 22h Mon [PRIVATE_IP] 08:53:04 MSK 1h 23min ago immich-media-offhost-sync.timer immich-media-offhost-sync.service -Tue [PRIVATE_IP] 09:17:13 MSK 23h Mon [PRIVATE_IP] 09:16:04 MSK 1h 0min ago memos-offhost-sync.timer memos-offhost-sync.service -Tue [PRIVATE_IP] 10:15:00 MSK 23h Mon [PRIVATE_IP] 10:15:04 MSK 1min 58s ago skladchik-reports-monitor-monthly-selftest-watch.timer skladchik-reports-monitor-monthly-selftest-watch.service -Tue [PRIVATE_IP] 10:20:26 MSK 24h Mon [PRIVATE_IP] 05:04:49 MSK 5h 12min ago man-db.timer man-db.service -Sun [PRIVATE_IP] 03:10:03 MSK 5 days Sun [PRIVATE_IP] 03:10:15 MSK 1 day 7h ago e2scrub_all.timer e2scrub_all.service -Sun [PRIVATE_IP] 03:10:09 MSK 5 days Sun [PRIVATE_IP] 03:10:15 MSK 1 day 7h ago xfs_scrub_all.timer xfs_scrub_all.service -Mon [PRIVATE_IP] 00:10:14 MSK 6 days Mon [PRIVATE_IP] 00:13:29 MSK 10h ago homelab-secret-sanity.timer homelab-secret-sanity.service -Mon [PRIVATE_IP] 00:24:11 MSK 6 days Mon [PRIVATE_IP] 01:18:15 MSK 8h ago fstrim.timer fstrim.service -- - - - prometheus-node-exporter-ipmitool-sensor.timer prometheus-node-exporter-ipmitool-sensor.service -- - - - prometheus-node-exporter-mellanox-hca-temp.timer prometheus-node-exporter-mellanox-hca-temp.service -- - - - prometheus-node-exporter-smartmon.timer prometheus-node-exporter-smartmon.service - -58 timers listed. -- Обрезанная, повреждённая или частично вставленная команда считается невыполненной; сначала проводится side-effect audit. -- Хвост parse-ошибки закрывается только после доказательства отсутствия изменений и временных артефактов. -- Proof: /var/lib/homelab-change-sets/operator-command-size-guard-v[PRIVATE_IP]T182653Z/report.txt - -## HOMELAB_ADMIN_CLI_CONTRACT_[PRIVATE_IP] -- Поддерживаемые команды: version, status, lint TASK_DIR, validate TASK_DIR, run TASK_DIR PHASE. -- Отдельная команда --help отсутствует. Неизвестный аргумент печатает usage и штатно возвращает RC=64. -- Нельзя трактовать RC=64 от --help как неисправность runner. -- Для проверки доступности runner использовать homelab-admin version; для структуры CLI использовать зафиксированную usage-строку. -- Proof: /var/lib/homelab-change-sets/homelab-admin-cli-contract-fix-v[PRIVATE_IP]T183338Z/report.txt - -AUTOMATIC_CLUSTER_CONTEXT_REFRESH_[PRIVATE_IP] -Collector: /usr/local/sbin/homelab-context-collect -Scheduler: hourly at minute 17 via /etc/cron.d/homelab-context-refresh -Destination: immutable Gitea runtime history with CONTEXT-AUTO UTC command IDs. - -AUTOMATIC_CLUSTER_CONTEXT_REFRESH_DIRECT_[PRIVATE_IP] -Publisher: /usr/local/sbin/homelab-context-refresh-direct -Schedule: hourly at minute 17. -Destination: immutable assistant-runtime history with CONTEXT-AUTO UTC IDs. -ANTI_REGRESSION_TOKEN=HOMELAB_VM_2CLOUD_444_OUTER_LAUNCHER_BOUNDARY_REQUIRED -- Anti-regression: validate the complete outer launcher with a shell syntax check and verify the wrapper argument boundary before issuing it. -- Infrastructure action executed: none. -- Backup payload impact: none. -- Production impact: none. -- Status: CLOSED; UNRESOLVED_TAIL_COUNT=0. -- Registered at: [PRIVATE_IP]T11:20:32Z - -## ERROR_[PRIVATE_IP]_HOMELAB_VM_2CLOUD_DRAIN_CLOSURE_PREFLIGHT_446 -COMMAND_ID=HOMELAB-VM-2CLOUD-DRAIN-CLOSURE-PREFLIGHT-446 -- Symptom: homelab-chat-run-linked printed Usage and skipped result-feed publication as invalid input. -- Root cause: the diagnostic script was piped to wrapper stdin and the mandatory double-dash command separator was omitted. -- Correction: invoke homelab-chat-run-linked as COMMAND_ID MODE COMPONENT -- command arguments; stdin is not its command interface. -ANTI_REGRESSION_TOKEN=HOMELAB_CHAT_RUN_COMMAND_REQUIRES_DOUBLE_DASH -- Anti-regression: treat wrapper Usage as the authoritative CLI contract and syntax-check the complete launcher, not only its inner payload. -- Infrastructure action executed: none. -- Backup payload impact: none. -- Production impact: none. -- Status: CLOSED; UNRESOLVED_TAIL_COUNT=0. -- Registered at: [PRIVATE_IP]T11:20:32Z OUTPUT_END CHAT_OUTPUT_END