homelab-runtime-publisher
34 lines
8.8 KiB
Plaintext
34 lines
8.8 KiB
Plaintext
CHAT_OUTPUT_BEGIN
|
|
COMMAND_ID=GITEA-V4-DRY-RUN-TIMEOUT-SOURCE-PROBE-20260730T194343Z
|
|
STATUS=OK
|
|
RC=0
|
|
HOST=pve01
|
|
MODE=verify
|
|
COMPONENT=gitea-machine-identity
|
|
REFERENCE_REGISTER_CHECK=OK
|
|
REFERENCE_SHA256=5763f2f8edc75fcf6f3951f8c95896d1cc112ceccb6cf5b64a383f540a4deb8e
|
|
ERROR_REGISTER_CHECK=OK
|
|
ERROR_REGISTER_SHA256=24934a2c7fa5c26f6e828583c4aefac7f143b40c0171736ed7571e617d55ab83
|
|
COMMAND_SHA256=a571191a9f200a5086dfa94a7a08706bc0babddd80e4220a0d7f85b936f88d7c
|
|
DUPLICATE_FAILED_COMMAND_BLOCKED=false
|
|
EXECUTION_STARTED=true
|
|
CHANGE_DECLARED=false
|
|
RESULT_CONTRACT_VALID=true
|
|
RESULT_CONTRACT_STATUS=NOT_APPLICABLE
|
|
RESULT_CONTRACT_ERROR=NONE
|
|
COMMAND_RC=0
|
|
CHANGES_MADE=false
|
|
ROLLBACK_STARTED=false
|
|
ROLLBACK_RESTORED=null
|
|
MUTATION_OUTCOME=NO_MUTATION
|
|
SANITIZED=yes
|
|
SECRETS_INCLUDED=no
|
|
PRIVATE_ADDRESSES_INCLUDED=no
|
|
RAW_EVIDENCE_SHA256=d5b93af3b15139eeb2a8a4294b3e4031eea04f404d051eaac1501e886051d677
|
|
SANITIZED_OUTPUT_SHA256=d5b93af3b15139eeb2a8a4294b3e4031eea04f404d051eaac1501e886051d677
|
|
OUTPUT_BEGIN
|
|
{"capability_branch":[],"changes_made":false,"command_id":"GITEA-V4-DRY-RUN-TIMEOUT-SOURCE-PROBE-20260730T194343Z","dry_run":{"bytes":2784,"interesting_context":["0004: on_err(){","0005: local rc=$?","0006: trap - ERR","0007: printf 'ROOT_CAUSE=UNEXPECTED_PHASE_ERROR","0008: '","0009: printf 'ROOT_CAUSE_COUNT=1","0010: '","0011: printf 'DETAIL=line:%s rc:%s","0012: ' \"${1:-0}\" \"$rc\"","0013: exit \"$rc\"","0014: }","0015: trap 'on_err \"$LINENO\"' ERR","0016: ","0017: TASK_ID=\"gitea-machine-identity-controlled-migration-v4\"","0018: STAGING=\"/var/lib/homelab-admin/staging/$TASK_ID\"","0019: PINNED=\"$STAGING/known_hosts.vm170\"","0020: REMOTE=\"https://git.gram1.ru/homelab-admin/homelab-ops.git\"","0021: CREDENTIAL_FILE=\"/etc/homelab-admin/credentials/gitea-homelab-ops\"","0022: HELPER_FILE=\"/usr/local/libexec/homelab-git-credential\"","0023: ","0024: OUT=\"$HOMELAB_RUN_DIR/vm170-capability.txt\"","....","0034: host=git.gram1.ru","0035: path=unrelated/repo.git","0036: ","0037: ' | \"$HOMELAB_TASK_DIR/assets/git-credential-helper.sh\" get | grep -q . && { printf 'ROOT_CAUSE=HELPER_LEAKS_TO_UNRELATED_REPO","0038: ROOT_CAUSE_COUNT=1","0039: '; exit 1; } || true","0040: ","0041: ","0042: set +e","0043: timeout --signal=TERM --kill-after=2s 24s ssh \\","0044: -o BatchMode=yes \\","0045: -o ConnectTimeout=6 \\","0046: -o IdentitiesOnly=yes \\","0047: -o IdentityFile=[SENSITIVE_SSH_PATH] \\","0048: -o StrictHostKeyChecking=yes \\","0049: -o UserKnownHostsFile=\"$PINNED\" \\","0050: root@[PRIVATE_IP] \\","0051: 'bash -s --' capability \"$TASK_ID\" \"$plan_b64\" \\","0052: <\"$HOMELAB_TASK_DIR/assets/vm170-machine-identity.sh\" \\","0053: >\"$OUT\" 2>&1","0054: ssh_rc=$?","0055: set -e","0056: case \"$ssh_rc\" in","0057: 0) ;;","0058: 124|137|143)","0059: printf 'ROOT_CAUSE=VM170_CAPABILITY_SSH_TIMEOUT","0060: ROOT_CAUSE_COUNT=1","0061: DETAIL=24s","0062: '","0063: exit 1","0064: ;;","0065: *)","0066: sed -n '/^[A-Z][A-Z0-9_]*=/p' \"$OUT\"","0067: printf 'ROOT_CAUSE=VM170_CAPABILITY_FAILED","0068: ROOT_CAUSE_COUNT=1","0069: DETAIL=rc:%s","0070: ' \"$ssh_rc\"","0071: exit \"$ssh_rc\"","0072: ;;","0073: esac","0074: ","....","0076: grep -Fq 'GITEA_CLI_CALLS=1' \"$OUT\"","0077: grep -Fq 'PASSWORD_FLAGS_FOR_BOT=ABSENT_BY_PLAN' \"$OUT\"","0078: ","0079: jq -n --arg task_id \"$TASK_ID\" '{status:\"OK\",root_cause_count:0,task_id:$task_id,production_changed:false,bot_capability:true,single_call_material_capability:true,password_flags_for_bot:false,helper_scope_contract:true,gitea_cli_calls:1,package_tests:true}' >\"$HOMELAB_RUN_DIR/dry-run.json\"","0080: printf 'DRY_RUN_STATUS=OK","0081: '","0082: printf 'ROOT_CAUSE_COUNT=0","0083: '","0084: printf 'GITEA_BOT_USER_CAPABILITY=YES","0085: '"],"lines":97,"path":"/root/gitea-machine-identity-controlled-migration-v4/phases/dry-run.sh","sha256":"c5edfe7553ffb7f44a80dd530b805fb732ee0e09097f5b3a6ca77d1f9bc27329","timeout_records":[{"durations":["2s","24s"],"line":43,"text":"timeout --signal=TERM --kill-after=2s 24s ssh \\"},{"durations":[],"line":45,"text":" -o ConnectTimeout=6 \\"}]},"dry_run_lines_34_65":["0034: host=git.gram1.ru","0035: path=unrelated/repo.git","0036: ","0037: ' | \"$HOMELAB_TASK_DIR/assets/git-credential-helper.sh\" get | grep -q . && { printf 'ROOT_CAUSE=HELPER_LEAKS_TO_UNRELATED_REPO","0038: ROOT_CAUSE_COUNT=1","0039: '; exit 1; } || true","0040: ","0041: ","0042: set +e","0043: timeout --signal=TERM --kill-after=2s 24s ssh \\","0044: -o BatchMode=yes \\","0045: -o ConnectTimeout=6 \\","0046: -o IdentitiesOnly=yes \\","0047: -o IdentityFile=[SENSITIVE_SSH_PATH] \\","0048: -o StrictHostKeyChecking=yes \\","0049: -o UserKnownHostsFile=\"$PINNED\" \\","0050: root@[PRIVATE_IP] \\","0051: 'bash -s --' capability \"$TASK_ID\" \"$plan_b64\" \\","0052: <\"$HOMELAB_TASK_DIR/assets/vm170-machine-identity.sh\" \\","0053: >\"$OUT\" 2>&1","0054: ssh_rc=$?","0055: set -e","0056: case \"$ssh_rc\" in","0057: 0) ;;","0058: 124|137|143)","0059: printf 'ROOT_CAUSE=VM170_CAPABILITY_SSH_TIMEOUT","0060: ROOT_CAUSE_COUNT=1","0061: DETAIL=24s","0062: '","0063: exit 1","0064: ;;","0065: *)"],"mutation_outcome":"NO_MUTATION","next_stage":"PATCH_EXACT_INTERNAL_TIMEOUT_AND_RUN_MIGRATION","output_truncated_in_json":false,"private_addresses_included":false,"rc":0,"remote_asset":{"bytes":7616,"interesting_context":["0002: set -Eeuo pipefail","0003: ","0004: fail(){","0005: printf 'ROOT_CAUSE=%s","0006: ROOT_CAUSE_COUNT=1","0007: DETAIL=%s","0008: ' \"$1\" \"$2\"","0009: exit 1","0010: }","....","0014: task_id=\"$2\"","0015: plan_b64=\"${3:-}\"","0016: ","0017: [[ \"$task_id\" == \"gitea-machine-identity-controlled-migration-v4\" ]] || fail TASK_ID_MISMATCH \"$task_id\"","0018: case \"$mode\" in","0019: capability|apply|verify-state|rollback|cleanup-owned|seal) ;;","0020: *) fail INVALID_MODE \"$mode\" ;;","....","0036: shift","0037: local captured rc","0038: set +e","0039: captured=\"$(timeout --signal=TERM --kill-after=1s 3s docker \"$@\" 2>&1)\"","0040: rc=$?","0041: set -e","0042: case \"$rc\" in","....","0048: }","0049: ","0050: find_container(){","0051: container_id=\"$(docker_capture container-discovery ps --filter 'ancestor=docker.gitea.com/gitea:1.26.2' --format '{{.ID}}')\"","0052: [[ \"$(printf '%s","0053: ' \"$container_id\" | awk 'NF{n++} END{print n+0}')\" -eq 1 ]] ||","0054: fail GITEA_CONTAINER_CARDINALITY vm170","0055: image_value=\"$(docker_capture container-inspect inspect \"$container_id\" --format '{{.Config.Image}}')\"","0056: [[ \"$image_value\" == 'docker.gitea.com/gitea:1.26.2' ]] ||","0057: fail GITEA_IMAGE_MISMATCH \"$image_value\"","0058: }","0059: ","....","0063: shift 2","0064: local captured rc","0065: set +e","0066: captured=\"$(timeout --signal=TERM --kill-after=2s \"$seconds_value\" docker exec --user git \"$container_id\" gitea \"$@\" 2>&1)\"","0067: rc=$?","0068: set -e","0069: case \"$rc\" in","....","0076: ","0077: gitea_quiet_best_effort(){","0078: set +e","0079: timeout --signal=TERM --kill-after=2s 18s docker exec --user git \"$container_id\" gitea \"$@\" >/dev/null 2>&1","0080: local rc=$?","0081: set -e","0082: return \"$rc\"","....","0101: if [[ \"$mode\" == 'seal' ]]; then","0102: [[ -n \"$plan_b64\" ]] || fail PLAN_MISSING seal","0103: plan_json=\"$(printf '%s' \"$plan_b64\" | base64 -d)\"","0104: jq -e '.task_id==\"gitea-machine-identity-controlled-migration-v4\" and .machine_user==\"homelab-ops-bot\"' <<<\"$plan_json\" >/dev/null","0105: [[ -f \"$state_dir/verified\" ]] || fail VERIFY_MARKER_MISSING vm170","0106: [[ -f \"$state_dir/user-type-bot\" ]] || fail BOT_TYPE_MARKER_MISSING vm170","0107: [[ -f \"$state_dir/admin-flag-absent\" ]] || fail ADMIN_FLAG_MARKER_MISSING vm170","....","0120: [[ -n \"$plan_b64\" ]] || fail PLAN_MISSING \"$mode\"","0121: plan_json=\"$(printf '%s' \"$plan_b64\" | base64 -d)\"","0122: jq -e '","0123: .task_id==\"gitea-machine-identity-controlled-migration-v4\" and","0124: .machine_user==\"homelab-ops-bot\" and","0125: .repository==\"homelab-admin/homelab-ops\" and","0126: .permission==\"write\" and"],"lines":248,"path":"/root/gitea-machine-identity-controlled-migration-v4/assets/vm170-machine-identity.sh","sha256":"6281daf0cb4cd27345b4c63f90d0c4908387d86e09f3acee371d23fc63ab3aa4","timeout_records":[{"durations":["1s","3s"],"line":39,"text":" captured=\"$(timeout --signal=TERM --kill-after=1s 3s docker \"$@\" 2>&1)\""},{"durations":["2s"],"line":66,"text":" captured=\"$(timeout --signal=TERM --kill-after=2s \"$seconds_value\" docker exec --user git \"$container_id\" gitea \"$@\" 2>&1)\""},{"durations":["2s","18s"],"line":79,"text":" timeout --signal=TERM --kill-after=2s 18s docker exec --user git \"$container_id\" gitea \"$@\" >/dev/null 2>&1"}]},"rollback_restored":null,"rollback_started":false,"schema":1,"secrets_included":false,"stage":"DRY_RUN_TIMEOUT_SOURCE_CAPTURED","status":"OK"}
|
|
|
|
OUTPUT_END
|
|
CHAT_OUTPUT_END
|