admin
0daae92c4f
key.go: create-once 0600/0700, corrupt-refusal (never overwrite — may be escrowed identity), clamp for CANONICAL STORED form (x/crypto X25519 clamps derivation internally — discovered during red-proof (c); the stored-clamped test is the real anchor). Fixed vectors generated with real wg pubkey (provenance in test). hub: WireDesiredState.Wireguard + WireguardStatus report stanza + RegisterWG client (typed errors, token-free). S2 golden copied BYTE-IDENTICAL + field-exact decode test. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6
34 lines
853 B
JSON
34 lines
853 B
JSON
{
|
|
"generation": 5,
|
|
"desired_state": {
|
|
"guests": [
|
|
{
|
|
"vmid": 100,
|
|
"run": "running",
|
|
"spec": { "cores": 2, "memory_bytes": 2147483648, "disk_bytes": 21474836480 },
|
|
"description": "felhom: acme prod"
|
|
},
|
|
{
|
|
"vmid": 200,
|
|
"decommission": true
|
|
}
|
|
],
|
|
"pbs_namespace": "felhom-cust-acme",
|
|
"restore_directive": {
|
|
"mode": "guest_loss",
|
|
"archive": "local:backup/vzdump-lxc-200-2026_06_09-11_00_00.tar.zst",
|
|
"vmid": 200
|
|
},
|
|
"wireguard": {
|
|
"endpoint": {
|
|
"dns_name": "ep0.felhom.eu",
|
|
"wg_port": 443,
|
|
"server_pubkey": "CQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJCQk=",
|
|
"pbs_tunnel_ip": "10.77.0.1"
|
|
},
|
|
"pubkey": "AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE=",
|
|
"assigned_ip": "10.77.0.2/32"
|
|
}
|
|
}
|
|
}
|