# demo-hp host reads, 2026-10-12T15:13:29+02:00, via ssh demo-hp (read-only)
felhom-agent 0.154.0
## listening sockets
tcp *:3128 users:(("spiceproxy
tcp *:8006 users:(("pveproxy
tcp 0.0.0.0:111 users:(("rpcbind",pid=689,fd=4),("systemd",pid=1,fd=169))
tcp 0.0.0.0:22 users:(("sshd",pid=1010,fd=6))
tcp 0.0.0.0:8822 users:(("sshd",pid=1004,fd=7))
tcp 127.0.0.1:25 users:(("master",pid=1185,fd=13))
tcp 127.0.0.1:53 users:(("dnsmasq",pid=1001,fd=7))
tcp 127.0.0.1:85 users:(("pvedaemon
tcp 169.254.253.1:8443 users:(("felhom-agent",pid=1265,fd=16))
tcp 192.168.0.104:53 users:(("dnsmasq",pid=1001,fd=5))
tcp [::1]:25 users:(("master",pid=1185,fd=14))
tcp [::]:111 users:(("rpcbind",pid=689,fd=6),("systemd",pid=1,fd=171))
tcp [::]:22 users:(("sshd",pid=1010,fd=7))
tcp [::]:8822 users:(("sshd",pid=1004,fd=6))
udp 0.0.0.0:111 users:(("rpcbind",pid=689,fd=5),("systemd",pid=1,fd=170))
udp 0.0.0.0:55675 
udp 10.77.0.3:51822 users:(("felhom-agent",pid=1265,fd=24))
udp 127.0.0.1:323 users:(("chronyd",pid=777,fd=4))
udp 127.0.0.1:53 users:(("dnsmasq",pid=1001,fd=6))
udp 192.168.0.104:53 users:(("dnsmasq",pid=1001,fd=4))
udp [::1]:323 users:(("chronyd",pid=777,fd=5))
udp [::]:111 users:(("rpcbind",pid=689,fd=7),("systemd",pid=1,fd=172))
udp [::]:55675 
## sshd -T (auth lines)
port 22
listenaddress [::]:22
listenaddress 0.0.0.0:22
maxauthtries 6
permitrootlogin yes
pubkeyauthentication yes
passwordauthentication yes
kbdinteractiveauthentication no
## nft felhom_oob
	chain input {
		type filter hook input priority filter - 5; policy accept;
		iifname "wg-felhom" tcp dport @ssh_port ip saddr @operator_ips accept
		iifname "wg-felhom" tcp dport @ssh_port drop
		tcp dport @ssh_port iifname != "wg-felhom" drop
## sudoers.d
total 36
-r--r----- 1 root root  1068 Apr 11  2026 README
-r--r----- 1 root root 24335 Oct  7 13:36 felhom-agent
-r--r----- 1 root root  1466 Oct  7 13:36 felhom-op
-r--r----- 1 root root   666 May 20  2023 zfs
## guest LXC 9201 (mac masked)
arch: amd64
cores: 7
features: nesting=1,keyctl=1
hookscript: local:snippets/felhom-guest-hook.sh
hostname: demo-hp
memory: 25898
mp0: local-lvm:vm-9201-disk-1,mp=/var/lib/felhom,backup=1,size=70G
mp8: /mnt/felhom-drives,mp=/mnt/felhom-drives
mp9: /var/lib/felhom-agent/guests/9201/bootstrap,mp=/etc/felhom-bootstrap,ro=1
net0: name=eth0,bridge=vmbr0,hwaddr=<mac>,ip=dhcp,type=veth
net1: name=eth1,bridge=vmbr9,hwaddr=<mac>,ip=169.254.253.2/30,type=veth
onboot: 1
ostype: debian
rootfs: local-lvm:vm-9201-disk-0,size=32G
swap: 512
unprivileged: 1
## secret-file modes (paths/modes only)
600 felhom-agent:felhom-agent 2454 /etc/felhom-agent/agent.json
600 felhom-agent:felhom-agent 2498 /etc/felhom-agent/agent.json.night-0925-off
600 felhom-agent:felhom-agent 2451 /etc/felhom-agent/agent.json.pre-a4-retention
600 felhom-agent:felhom-agent 2451 /etc/felhom-agent/agent.json.pre-d44
600 root:root 2451 /etc/felhom-agent/agent.json.pre-r672
644 root:root 0 /etc/felhom/.bootstrap-done
644 root:root 7 /etc/felhom/appliance-pairing-code
644 root:root 3429 /etc/felhom/config-bundle.json
644 root:root 456 /etc/felhom/crash-guard.conf
644 root:root 131 /etc/felhom/operator-signers
644 root:root 61 /etc/felhom/os-trust.json
600 felhom-agent:felhom-agent 189 /var/lib/felhom-agent/backup-success-state.json
600 felhom-agent:felhom-agent 290 /var/lib/felhom-agent/controller-swap-9201.json
600 felhom-agent:felhom-agent 61 /var/lib/felhom-agent/drive-intents.json
600 felhom-agent:felhom-agent 64 /var/lib/felhom-agent/escrow-stage/restic_repo_password
600 felhom-agent:felhom-agent 93 /var/lib/felhom-agent/felhom-sshd/authorized_keys.felhom-op
600 felhom-agent:felhom-agent 5 /var/lib/felhom-agent/felhom-sshd/port
600 felhom-agent:felhom-agent 433 /var/lib/felhom-agent/felhom-sshd/sshd_config
600 felhom-agent:felhom-agent 67 /var/lib/felhom-agent/guest-binds.json
600 felhom-agent:felhom-agent 241 /var/lib/felhom-agent/guest-disk-trim.json
600 100000:100000 403 /var/lib/felhom-agent/guests/9201/bootstrap/bootstrap.json
600 felhom-agent:felhom-agent 234 /var/lib/felhom-agent/guests/9201/controller-restarts-24h.json
644 root:root 254 /var/lib/felhom-agent/guests/9202/bootstrap/bootstrap.json
600 felhom-agent:felhom-agent 31342 /var/lib/felhom-agent/journal.log
644 felhom-agent:felhom-agent 591 /var/lib/felhom-agent/local-api.crt
600 felhom-agent:felhom-agent 227 /var/lib/felhom-agent/local-api.key
600 felhom-agent:felhom-agent 82 /var/lib/felhom-agent/local-tokens.log
600 felhom-agent:felhom-agent 3196 /var/lib/felhom-agent/nonces.log
600 felhom-agent:felhom-agent 20 /var/lib/felhom-agent/os/last-night-run
600 felhom-agent:felhom-agent 79 /var/lib/felhom-agent/os/os-update-block.json
600 felhom-agent:felhom-agent 0 /var/lib/felhom-agent/os/pass.lock
600 felhom-agent:felhom-agent 148 /var/lib/felhom-agent/os/plan-20261005T025659Z-guest-apply.json
600 felhom-agent:felhom-agent 203 /var/lib/felhom-agent/os/plan-20261005T054446Z-guest-apply.json
600 felhom-agent:felhom-agent 203 /var/lib/felhom-agent/os/plan-20261005T061334Z-guest-apply.json
600 felhom-agent:felhom-agent 203 /var/lib/felhom-agent/os/plan-20261005T075541Z-guest-apply.json
600 felhom-agent:felhom-agent 2398 /var/lib/felhom-agent/pbsdr/agent.json.pre-seed
600 felhom-agent:felhom-agent 129 /var/lib/felhom-agent/pbsdr/marker.json
600 felhom-agent:felhom-agent 367 /var/lib/felhom-agent/restore-test-state.json
644 felhom-agent:felhom-agent 288 /var/lib/felhom-agent/units/mnt-hdd_1.mount
600 felhom-agent:felhom-agent 64 /var/lib/felhom-agent/wg/last-applied.sha
600 felhom-agent:felhom-agent 45 /var/lib/felhom-agent/wg/private.key
600 felhom-agent:felhom-agent 101 /var/lib/felhom-agent/wg/registered.json
600 felhom-agent:felhom-agent 327 /var/lib/felhom-agent/wg/wg-felhom.conf
