diff --git a/REPORT-doorstep-1271.md b/REPORT-doorstep-1271.md new file mode 100644 index 00000000..6e708e18 --- /dev/null +++ b/REPORT-doorstep-1271.md @@ -0,0 +1,94 @@ +# REPORT — the doorstep: installer 1.27.1, hub 0.113.0, walked again (2026-09-14) + +**Supervised task. STOPPED before publishing, as required.** Findings: `documentation/audits/DOORSTEP-walk-1270-2026-09-14.md`. +A parallel session owns root `REPORT.md`; this is a topic sibling. + +## 0. Claims in the brief that turned out wrong — named first + +1. **"The ISO is built to install itself with no questions."** Wrong for the public image. `--release` + builds carry no answer file by construction (G1); the 1.26.1 manifest says `answer-file: NONE` and + `automated-entry: NOT PRESENT`. The README's auto-install text describes the old operator-built images. + Nothing "failed to engage". +2. **"The installer installs itself, in Hungarian" / "no English reaches a volunteer."** Not achievable + under the operator's ruling: offered an install-time disk rule, he kept the interactive installer. The + Proxmox auto-installer has no local chooser or stop page; its screens stay English. Felhom's own text is + Hungarian (G16). +3. **"Tester 1, fully configured."** It has no e-mail (R-508) and its tunnel gives a new box no routes + (R-505). +4. **"The hub could create the tunnel later" as the only gap in A.1.** `day0-install.md` A.1 also claimed the + controller creates the hostnames; it does not (R-506, corrected). +5. **"Host a Hungarian chooser; else a Hungarian stop."** Not built — follows from 2. + +## 1. Baselines (re-verified) + +felhom.eu `8c7f882` at start · ISO `1.26.1` · host installer `1.28.0` (unchanged) · hub `0.112.0` · +controller `0.242.0`, golden `0.242.0`. Highest row R-501. + +## 2. Operator decisions taken in this task + +| when | question | answer | +|---|---|---| +| Phase 0 | reverse to auto-install, or keep interactive? | **keep interactive** | +| Phase 4 | test domain for the walk? | **use customer `tester-1`** | +| Phase 4 | tunnel has no routes — add, or continue? | "works for me on mobile network … pi-hole" — see §5 | + +## 3. What shipped, and what did not + +| artifact | commit | state | +|---|---|---| +| hub **v0.113.0** — hand-over sentence on create + Credentials; self-bind mail names the operator (R-497) | `6fd8c87` code, `63f29c6` deploy | **LIVE** — ArgoCD Synced, image `0.113.0`, page renders it | +| ISO **1.27.0** — console fix at first boot | `6fd8c87` | built, gated, **superseded** (first boot still showed the Proxmox block) | +| ISO **1.27.1** — postinst masks `pvebanner` + writes `/etc/issue` | `27e8ec8` | built, **gate PASS**, proven live, **NOT PUBLISHED** · sha256 `25637007d5a7120ff9faa6b5b7ead3e33c0a361ac2d67e9fd4e0ee77c034c053` | +| release gate **G14–G16**; domain + installer rulings in `01-topology-and-trust.md` and `CONTEXT.md`; guide + day-0 A.1/A.2 aligned | `6fd8c87`, this commit | committed | +| download page `felhom.eu/letoltes` | — | **not written to the website** — the website publishes on push; it goes with the ISO after yes | + +Tests: hub `passphrase_handover_test.go` red first, full `go test ./...` green; bootstrap harness 55/55, +eight R-496 checks and scenario PI red first; `shellcheck` clean; felhom.eu gates green on every push; +CI jobs 583, 585 `success`. + +## 4. The walk + +**Interventions: 1** — reaching the dashboard by LAN address (R-505, filed 16:07:59Z before acting). +Everything else held: install on 3 disks and 1, first-boot console Felhom-only on 1.27.1 with a proven +reboot, deploy, use, backup-now, removal, **byte-identical restore**, power cut on the same versions, typo +and lockout. Harness substitutions H1–H5 in the findings doc §4. + +## 5. The tunnel, measured — the one thing that stops a volunteer + +12 requests from DooPlex through public DNS → **12 × 503**; the box's `cloudflared` logged **12** +`No ingress rules were defined` in the same window and **0** remote-config updates since connecting. The +guest's own front door answers the name. **The operator's phone loads the dashboard** — not explained by +anything the session can see; a second connector reached from another Cloudflare location is the likeliest +cause and is **not established**. The Pi-hole is excluded for these probes (public DNS, Cloudflare ray ids). + +## 6. STOP — for the operator + +- **Intervention count: 1.** By the rule set for this task, **do not publish.** +- **The disk rule:** the installer never picks; it lists every disk with size and model and erases the one + you choose; unplug the backup drive; call the operator if unsure. One disk, three disks and nobody at + the keyboard were each seen (findings §2). +- **Gate:** 1.27.1 PASS on every criterion runnable before publish (G1–G10, G13–G16); G11/G12 are + publish-time; the graphical entry is proven only to its password screen (R-507). +- **Ready: NO** — until the `tester-1` tunnel answers from our network, and the record has an e-mail. +- **What publishing would do, on yes:** upload 1.27.1 + `.sha256` + manifest to the bucket, add the + download page to the website, round-trip the checksum over `https://iso.felhom.eu/`, keep 1.26.1 online + so rollback is one link change. + +## 7. Rows + +Opened **R-502 … R-508** (7). Closed **R-497**. Fixed awaiting publish **R-496**; answered awaiting publish +**R-495**; **R-493** open; **R-494** narrowed to P3. Register table rows **209 → 216**. + +## 8. Teardown + +Layers 1–2 done (VMs 331/332 destroyed; ≈12.8 GiB back on `nvme-scratch`; both ISOs and `/root/doorstep` +gone; 9201/9202 untouched). Layer 3: appliance 27 discarded; host `tester-1-8603a2` delete pending its +stale window (see the follow-up commit). **Customer `tester-1` KEPT.** Left on ep0 by the DR tier: +namespace `tester-1`, token `felhom@pbs!tester-1` — retained with the customer for the operator's ruling. +The hub's event stream and three operator mails are append-only and stay. + +## 9. Observations + +- `iso-release-gate.md`'s "both entries" proof depends on a person for the graphical entry today (R-507). +- The bootstrap harness is run by hand only (R-502); the pairing banner had never been exercised. +- A closed row still lives in the open register (R-497) until the next compression sweep — the gates accept it. diff --git a/STATUS.md b/STATUS.md index 02a8c428..348c4b2b 100644 --- a/STATUS.md +++ b/STATUS.md @@ -1,5 +1,38 @@ # STATUS — what works, what's broken, what's next +**Updated 2026-09-14 (evening) — the doorstep: installer fixed, walked again, NOT published.** + +> **Ready for a volunteer: not yet — one thing stops them.** On the test customer you chose, the +> dashboard link does not open from our network: the box's Cloudflare tunnel connects but gets no routes +> (12 of 12 tries failed). Your phone reaches it, so something differs between connectors — only you can +> see that in Cloudflare. Everything this task changed works. + +**Decisions you took today.** Keep the installer interactive (a person chooses the disk). Every customer +has their own domain; you create the tunnel. Use the „Tester 1" record for the walk. + +**What I did.** The box's first screen is now Felhom's in Hungarian, from the very first boot — the first +build still showed the English admin line on that boot, so I fixed it again and rebuilt (1.27.1). The +passphrase has one name everywhere, and the hub now tells you, when you create a customer, to hand it +over in person. That hub change is live. The installer was built and checked against the release gate, +then walked end to end: install on a three-disk and a one-disk machine, apps, backup, restore +(byte-identical), removal, power cut, wrong code. Nothing was published. + +**What broke on the way.** The test customer has no e-mail, so no code or link could be sent. The +tunnel has no routes for a new box. I could not drive the graphical installer screen with my tools, +only the text one. One of our install documents wrongly says the controller creates the web addresses. + +**Rows.** Opened 7, closed 1 (the passphrase hand-over). Three more are fixed and close when you publish. + +**Needs you.** (1) **Look at the „Tester 1" tunnel in Cloudflare**: which connectors are there, and does it +have public hostnames? **If you do nothing:** a volunteer on a network like ours cannot open their +dashboard. (2) **Put the volunteer's e-mail on their customer record.** **If you do nothing:** they get no +setup code. (3) **Say yes or no to publishing installer 1.27.1** — only after (1) is sorted, by the rule +you set. **If you do nothing:** the old installer stays online, with the English admin line on screen. +(4) **The test left a backup namespace for „Tester 1" on the off-site server**, created by its DR setting; +removing it would also remove the customer's tunnel. **If you do nothing:** it stays, empty. + +--- + **Updated 2026-09-14 (afternoon) — the first-hour drill on a fresh box.** > **Ready for a volunteer: not yet.** Two things would stop a stranger before their first app: **there diff --git a/documentation/architecture/00-capability-map.md b/documentation/architecture/00-capability-map.md index 895c3d19..490b9987 100644 --- a/documentation/architecture/00-capability-map.md +++ b/documentation/architecture/00-capability-map.md @@ -88,7 +88,7 @@ likewise silent. Evidence: `audits/DRILL-r361-2026-08-22/evidence/06-part3-decis **NARROWED 2026-08-21 by the backup-truth drill — kept as history; both halves have since closed, see the entry immediately above.** Proven that night on `demo-hp` with planted, hash-recorded files: the **declared-userdata** leg of a **drive-declaring** app does come back byte-identical (`calibre-web`, 5/5 including two Hungarian accented filenames). **Two legs of the same story do NOT:** (a) the off-site restore has **no named-volume leg at all**, so an app's volume tar sits in the unit, in the snapshot and in the checking folder and is never replayed (**R-354**); (b) for the **40 of 53** apps that declare no data drive the off-site restore **refuses outright**, saying a running app „nincs telepítve" (**R-356**). Since the 40-class keeps ALL its data in named volumes, the end-to-end story is **unproven for that class and disproven for the volume leg generally**. The escrow/key half of this row is untouched by that and still stands. Evidence: `audits/DRILL-backup-truth-2026-08-21/evidence/` and `REPORT.md` (2026-08-21). | | **The customer's own UNAIDED recovery journey, end to end** | controller v0.206.0, hub v0.98.0, agent v0.127.0 | **PROVEN-LIVE (2026-08-07, the fifth walk) — an unaided customer journey on a real installation, SCOPED: see what it does not claim** | A throwaway appliance was built from the published ISO on demo-hp, claimed, given three sentinels, escrowed, backed up off-site, then destroyed — guest purged and both enrolled drives wiped. The rebuild and the customer's route were then walked with **no command line inside the guest**. **Data: PASS.** All three sentinels byte-identical (`beb9175d…`, `7c8cb0ad…`, `e012e76f…`), including a 12 MB binary and `C11-őrszem-ékezetes-árvíztűrő.txt` — the Hungarian filename survived disk → restic → SFTP → Storage Box → restore → disk intact. Restored in **16 s** out of the pre-wipe snapshot `f3d9cd67`, non-destructively. **Journey: FAIL.** Four interventions, three of them root on the appliance: R-216 (a correct code called wrong), R-218 (the store never opened; the box stopped asking), R-219 (the promised listing structurally could not render), R-220 (the app could not be redeployed — its drives were unenrollable). Evidence: `tests/campaign11-evidence-2026-08-05/journal.md` | **WHAT IT DOES NOT CLAIM, and what the v0.201.0/v0.97.1 fixes do and do not change.** Six of the nine findings are fixed and each is red-proofed (R-216, R-218, R-219, R-217, R-222, R-215) — but **fixes are not a journey.** This row goes green only when the walk is repeated end to end and completes with no operator intervention. **Three findings are deliberately still open and each is a live blocker for some flow:** **R-214** (the console never stops showing a stale pairing code), **R-220** (after a rebuild the customer's drives cannot be re-enrolled — the deploy refuses and the wizard's list is empty, so no app can be redeployed onto its own data drive), **R-221** (a rebuilt box cannot run the escrow ceremony at all, because the pbsdr convergence marker survives on the host while the seeded `escrow.pbs_storage_id` is rewritten out of `agent.json`). **And R-216's fix does not by itself make a NEW box work:** with the hub guard corrected but the Day-0 manifest still vouching agent 0.120.0, a new box is **HELD, not served** — it stops being lied to, which is better, but the feature does not work for it until agent 0.125.0 is vouched. **⚠ CAMPAIGN-11 PHASES 2 + 4 RAN OVERNIGHT 2026-08-05/06 AND THIS ROW STAYS **FAIL**.** **What they add:** eleven injected faults against the recovery journey, each with a positive control, and a full unattended scheduled cycle. **The backup promise strengthened** — the off-site tier ran itself at 04:15 on a box rebuilt twice and set aside hours earlier (`snapshot_count` 1 → 2), all five daily jobs fired exactly once, and nothing on the must-not list fired. **R-217's and R-215's fixes were proven live under exactly their faults**, the set-aside proved it does not delete (12 535 KB byte-exact at the far end), and a wrong code was refused three times with nothing written and no lockout. **What they do NOT add: any progress on the JOURNEY.** These faults are **not a re-walk** — no customer route was walked end to end — and four new findings say the journey got no better where it matters: **R-224** (a hub outage and a stopped agent are BOTH reported to the customer as a bad recovery code, in 0.056 s and 0.030 s — no unseal attempted; the agent's own `err` distinguishes them and it is discarded at the HTTP boundary, and R-216's gate answers `source=version` so it cannot see reachability — **Phase 1's headline defect relocated from the version channel to the transport**), **R-226** (M1, the only message telling a customer to check their typing, is unreachable on any box that has re-escrowed), **R-225** (an unread store renders `0 pillanatkép · 0 GB` above a card saying it holds backups — 1 snapshot and 12 535 KB were really there), **R-228** (the set-aside history is recorded in `orphaned_renamed_to` and shown by nobody — `OrphanedRenamedTo` has zero references in any template or handler). **§4.1 is now MEASURED rather than deduced** — the floor IS served, from the box's own rendered `GetFloor()` and a cold-started controller's settle-gate line. **§4.2's positive half is still NOT measured** and needs a rebuild. Evidence: `audits/CAMPAIGN-11-recovery-journey-2026-08-05.md`, `tests/campaign11-evidence-2026-08-05/journal-phase24.md` **2026-08-06 — THE FIVE PHASE-2 FINDINGS ARE FIXED AND THIS ROW STILL SAYS FAIL.** controller **v0.202.0** + agent **v0.126.0** close R-224, R-226, R-225, R-227, R-228. **What changed:** the unlock path now classifies WHY it failed, from the value and never the text, and the message that mentions typing is reachable from exactly one class — a real refusal — with **unknown defaulting to neutral**. Proven live on the venue with the same wrong code and only the hub's reachability changed: `400 → 502 → 400`. **What it does NOT change: this row.** Fixes are not a journey; nothing here walked a customer end to end, and three of the blockers that made Phase 1 fail are still open (**R-220** in particular is worked around BY HAND on the venue — without that unmount no app can be deployed on a rebuilt box). **What still needs proving:** a re-walk with no operator intervention, and specifically the customer-facing messages end-to-end — they were NOT re-driven, because `/recovery` correctly retires itself once the old data is set aside and restoring that state would be the reconfiguration the fix task forbade. Evidence: `felhom-controller/REPORT.md` **⚠ THE RE-WALK RAN 2026-08-06 (R-201, attended) AND THIS ROW STAYS FAIL — but it is a nearer no.** A brand-new appliance was built from the published ISO, given three sentinels, escrowed, backed up off-site, destroyed (guest purged AND both drives wiped), reinstalled and walked. **THE DATA: PASS** — all three sentinels byte-identical, including a 12 MB binary and an accented Hungarian filename **whose NAME BYTES are also identical**, restored in **23 s** out of the pre-destruction snapshot through the customer's own flow. **THE JOURNEY: FAIL — TWO dead ends against Phase 1's four.** (1) **R-218's CONSUME half**: the hub re-staged the credential and said "the box re-consumes on its next cycle"; a full cycle ran (positive control) and it did not — no customer-reachable action fetches it, and the only lever is a command line INSIDE THE GUEST. (2) **R-220**: the drives are still unenrollable after a rebuild, needing a Proxmox-host unmount, without which no app can be redeployed and the restore page stays empty. **The unaided RTO is therefore STILL UNDEFINED**; the attended figure was 30 m 13 s and must not be quoted as the customer number. **What passed and is new:** the recovery screen appeared WITHOUT being sought, answered all three of its questions with a seal date matching the hub exactly, the emailed reset code worked first try, and the unlock was a real 1.528 s unseal that placed the key. **⚠ AND IT DOES NOT CLAIM DELIVERY:** the fresh install landed on controller 0.201.0 / agent 0.125.0 — the vouched versions, neither carrying the fixes — which were installed BY HAND. Fleet delivery needs a golden carrying the fixed controller and a vouched agent, and nothing was vouched. Evidence: `tests/rewalk-r201-2026-08-06/journal.md`   **⚠ 2026-08-06 (later the same day) — THE TWO DEAD ENDS ARE CLOSED AND VOUCHED, AND THIS ROW STILL SAYS FAIL.** controller **v0.203.0** + agent **v0.127.0** close **R-218's consume half** and **R-220**, and golden **0.203.0** / agent **0.127.0** / `min_agent` **0.127.0** are now VOUCHED — so the delivery gap the re-walk recorded (“the fresh install landed on versions neither carrying the fixes”) is gone. **Both were then proven live on a genuinely rebuilt box** (Part 4 venue, VM 323): the reinstall landed on agent 0.127.0 with **no downgrade and no hand upgrade** (the previous re-walk's reinstall downgraded 0.126.0→0.125.0), `/disks/candidates` returned **both drives** after the guest was purged with the raw mounts still on the surviving host — before the fix, two empty lists — and both **re-attached through the customer endpoint**; the off-site credential was re-staged by `offsiteheal` at 13:24:57Z and **collected by the box on a tick, unaided**. **Why the row is still FAIL:** the walk did not finish. It stopped at the restore surface — **R-237**, the list was keyed on apps that are currently INSTALLED and currently TOGGLED ON for future backups, so a rebuilt box was shown nothing to restore while the repository held its snapshots. Fixed in **controller v0.204.0** (the store is now the source of the list) and proven live on that same venue with the toggle switched OFF, but **no sentinel was restored in that walk**, so the data half is unproven in EITHER direction for this venue. **R-238 was RECLASSIFIED, not fixed as filed:** `mode=full` without `confirm=1` is step 1 of a deliberate two-step that starts no job by design; the endpoint driver did not carry `?full_prep=` forward. The operator drove the same restore to completion in a browser. Its real residue — that step logging nothing at all, including when the headroom gate refuses — is fixed. **R-236 was WITHDRAWN: not a defect.** **This row goes green only when a walk completes end to end with no operator intervention, restoring a byte-identical sentinel.** Evidence: `tests/part4-rewalk-2026-08-06/journal.md`, `tests/teardown-2026-08-06.md`, `felhom-controller/REPORT.md` **⚠ THE FINAL WALK RAN OVERNIGHT 2026-08-06/07 AND THIS ROW STAYS FAIL — the data half passed again, the journey half failed further from the line than before.** A brand-new appliance was built from the published ISO, fixtured, soaked through a real scheduled cycle, destroyed and rebuilt. **THE DATA: PASS** — all three sentinels byte-identical out of snapshot `f5c53b03`, including a 12 MB binary and an accented Hungarian filename **whose name BYTES are identical too**. **THE JOURNEY: FAIL, and this time the customer has NO route at all** — `/` lands on the launcher with no recovery pointer, `/recovery` **302s away**, and the remote-backup page offers to **CREATE a new recovery code**, which would orphan the very history the customer's code protects. **There is no field anywhere to enter the code they hold**, and the operator's documented remedy refuses too. Cause (**R-241**): the credential self-heal — proven working unaided in the same walk, six hours earlier, as its best result — writes a FRESH repository password, which moves the box out of `OffsiteRecoveryOffer()`'s (a) pristine case while (b) orphan-detected is unreachable because runs are blocked by `escrow_state: pending`. **R-218's shape one level up.** **What DID pass, and is new:** the whole credential chain ran end to end with zero human action on an unclaimed box — declare, `offsiteheal` re-stages after two reports, the box's 5-minute retry collects it, tier applied — the **first live sighting** of that success line, settling R-218's consume half and R-236's withdrawal. Also new: **R-239** — a fresh install lands on controller **0.203.0** while 0.205.0 is released, so R-234 and R-237 are written but **not delivered**, proven from the customer's side (T2, T3). **This row goes green only when a walk completes with no operator intervention AND a byte-identical sentinel.** Evidence: `tests/finalwalk-r201-2026-08-07/journal.md` **⚠ 2026-08-07 — R-241 WAS DIAGNOSED BY A READ-ONLY SPIKE ON THE STANDING VENUE, AND THE DIAGNOSIS REVERSES THE FIX. This row is unchanged: still FAIL, and no code was written.** The question was whether R-241 is a screen-predicate defect or a minting defect. **It is a MINTING defect.** The screen was telling the truth — there genuinely was nothing recoverable under the key the box held, because the box minted that key itself over the top of a sealed package it already knew the hub was holding. **Three measurements, from the venue rather than from the earlier report:** (1) `WriteOffboxSecrets` (`offbox.go:411`) mints on ONE input — does the file exist — while `OffsiteRecoveryOffer()` and `needsOffsiteCredential()`, both in the same file, consult `GetHubEscrowIdentityPresent()`; the same fact is available on three paths and used on two. (2) That flag was the **precondition of the chain that reached the minting**: the retry job logs only when the declaration is live, and the venue logged `credential retry: … (the box still declares a need; retrying)` at **02:48:03Z** — thirty minutes and six ticks before the mint at 03:18:06Z. (3) **The box computed the answer and discarded it**: at **03:28:03Z**, thirty-five minutes before the customer looked, `EscrowAutoConfirmer.Reconcile` (`escrow_confirm.go:154`) logged `the hub's escrow blob does not cover the CURRENT repo password (hub hash 30ef574fe492… != local 9b4a9a9dcec7…)`. It is recomputed every report cycle and never persisted. **And the hub explicitly disclaims doing this** — `offsiteheal`'s package doc: *"credential automatic, key customer-present — the ruling this session implements and must not quietly widen."* **Shape (b) is structurally unreachable on this box** (the escrow gate at `offbox.go:743` sits upstream of `ensureOffboxRepo`, the only producer of `RepoState="orphaned"`; positive control: the scheduler was alive, 241 `agent-channel-health` ticks, and `offbox-backup` is a `sched.Daily` leg whose slot fell before the destruction). **Two by-products:** **R-243** — a box in this state silently stops backing up off-site and **no alarm fires** (`isStale` requires `escrowed`, `offsite_delivery_stuck` skips the `applied` shape, `backup_failed` needs a run that never happens); and the trap in the obvious fix — `ResetOrphanedRepo` clears the orphan flag without a ceremony, so a hash-mismatch discriminator alone would re-offer the screen forever to a customer who declined the old data. **Q7:** the „Helyreállítási kód létrehozása" button does NOT destroy the data — R-198's retention copies the `identity_blob` — but it converts a self-service recovery into one needing an unbuilt read path (R-199), and it re-enables the screen while invalidating the code that screen accepts. Evidence: `audits/SPIKE-r241-recovery-offer-2026-08-07.md` **⚠ 2026-08-07 (later) — R-241 IS FIXED (controller v0.206.0 + hub v0.98.0) AND THIS ROW STILL SAYS FAIL.** Three changes, following the spike's ruling rather than the obvious reading: the box **no longer mints a repository key while the hub holds a sealed package** (a conjunction, so a first-time box is untouched; the refusal is a HOLDING state that still writes the transport, declared as `offsite.state=awaiting_recovery_key` and shown inert to every existing hub reader); the **hub-vs-local key comparison that was computed every cycle and discarded is now persisted** and drives the offer as **shape (c)**; and **abandoning starts a 14-day countdown** whose terminal step removes the set-aside store and the sealed package **together**, so the offer ends because the state is right rather than because a flag suppresses it. Surface: the full page appears **once per ENTRY into the offered state**, three dismissal levers with three scopes, and **none removes the entry point**. Q7's trap is closed — „Helyreállítási kód létrehozása" is **unavailable** while a recovery is outstanding. **WHY THE ROW STAYS FAIL: these are fixes, not a walk.** Nothing here walked a customer end to end, and this row goes green only when one completes with **no operator intervention AND a byte-identical sentinel**. Two of Phase 1's blockers are also still open (**R-214**, **R-202**), and **R-240** is untouched. Evidence: `felhom-controller/CHANGELOG.md` v0.206.0, `hub/CHANGELOG.md` v0.98.0. **DELIVERY, separately: R-239 is CLOSED 2026-08-07** — golden **0.205.0** baked, published, round-trip verified (`./etc/felhom-controller-image` read OUT of the downloaded archive) and **VOUCHED**, so a fresh install now lands on 0.205.0 carrying R-234 and R-237. In the event it was a ONE-field change: `agent_version` and `min_agent` both stayed 0.127.0. Evidence: `tests/golden-0.205.0-2026-08-07/`. **The row still says FAIL** — delivery is not a journey, and R-241 is diagnosed, not fixed. **✅ 2026-08-07 — THE FIFTH WALK PASSED, BOTH HALVES, AND THIS ROW TURNS.** A brand-new appliance (VM **325**, customer `walk5`) was installed from the published ISO on `demo-hp`, claimed, given three sentinels, escrowed, backed up off-site, then **destroyed on purpose** — guest purged, both data drives wiped — and rebuilt through the documented day-0 path. **THE DATA: PASS** — all three sentinels byte-identical out of snapshot `5b0f20f7` (`11eb7fb2…`, `6b504d1e…`, `0baaf402…`), including a 12 MB binary and `WALK5-őrszem-ékezetes-árvíztűrő.txt` **whose name BYTES are identical too**, read back with `os.listdir` on a bytes path so no decode round trip could launder a `U+FFFD`. **THE JOURNEY: PASS — ZERO guest command lines were needed to progress**, against three on the previous walk. **RTO 71.7 s** from login to an open store (12.44 s of it the unseal; ~22 s a harness retry). The recovery screen **appeared without being sought** (`/` → `/launcher` → `/recovery`), answered all three of its questions, and its sealed-at timestamp matched `host_escrow.created_at` exactly. **WHAT MADE THE DIFFERENCE — R-241's mint guard, exercised live for the first time:** at **14:58:52Z**, unaided and before anyone logged in, the rebuilt box collected its re-staged credential, configured the transport and **refused to mint a repository password** over the sealed package — `NOT minting a repository password: the hub holds a sealed recovery package for this box`. Sampled every 20 s from T0: **no key at any moment**, with the scheduler proven alive throughout. At the equivalent moment the previous walk minted one and lost the journey silently. **AND DELIVERY IS PART OF THE PASS:** the fresh install landed on **controller 0.206.0 + agent 0.127.0 — the vouched set, no hand upgrade**, both times, so the box under test is the box a customer receives. **WHAT THIS ROW STILL DOES NOT CLAIM.** (1) **Putting files back in place is built and worked here** — `reconstitute` placed 6 files — but **only after two obstacles the customer must guess past**: **R-252** (the restore refuses with „nincs elérhető adatmeghajtó" because a rebuild loses the drive *registration*, and nothing on the recovery path says to re-attach) and **R-253** (the restore refuses because the app is not installed, on a page that says three lines above that the restore reinstalls it). Both were cleared **from the dashboard with no shell** — which is why the journey passes — but neither is signposted, so *unaided* here means *possible without a shell*, not *obvious*. (2) **Shape (c) did NOT fire positively.** With the mint guard holding there is no local key, so the offer comes from **shape (a)**; shape (c) was measured in Phase A in its **negative** half (hub hash == local hash, correctly silent). The mint guard is proven positively; the discriminator only negatively. (3) **R-214, R-202 and R-240 are untouched.** (4) The venue is **torn down** (2026-08-08) — full-schema census 168 rows → 67, of which 37 are audit-by-design and **30 are R-244**, predicted before the run rather than found after; every layer verified absent against a surviving positive control, and **16.64 GiB** returned. `tests/walk5-r201-2026-08-07/teardown-walk5-2026-08-08.md`. Evidence: `tests/walk5-r201-2026-08-07/journal.md` **SCOPE NOTE 2026-09-14 — not re-walked.** The first-hour drill on 0.242.0 (`audits/DRILL-fresh-install-0242-2026-09-14.md`) walked install → first use → restore of a deleted page on a fresh box, NOT a rebuild with off-site recovery (DR tier and off-site were off). This row is therefore neither re-proven nor contradicted on 0.242.0; its PROVEN-LIVE stands on 0.206.0 only. The first hour has its own row below. | -| **A stranger's FIRST HOUR on a fresh install — download → install → claim → two apps → use → backup → remove → restore, plus a power cut and a mistyped code** | controller **v0.242.0**, agent **v0.130.0**, hub **v0.112.0**, golden **0.242.0**, installer ISO **1.26.1** | **PARTIAL (2026-09-14) — every mechanism PASSED on a fresh box; the UNAIDED journey FAILS before the first app** | `audits/DRILL-fresh-install-0242-2026-09-14.md`, evidence `audits/evidence-drill-fresh-install-0242-2026-09-14/journal.md`. A nested VM on demo-hp installed from the public ISO landed on the vouched set (controller 0.242.0, agent 0.130.0) with no hand upgrade; BookStack and PrivateBin deployed in 68 s / 21 s and were used through their front doors; backup-now moved both dates to the true time; removal with every delete box ticked left no volume, no backup and a 404; a page deleted in BookStack came back **byte-identical with its attachment** 32 s after restore; a hard power cut returned every app on the **same version** with data intact and no alarm; a typo in the code was refused and the right code then accepted, five failures locking for 15 min with an honest Hungarian message. **ONE intervention a volunteer could not make:** the setup-code mail's dashboard link does not resolve for a new customer (no tunnel/DNS is created — **R-494**), so the dashboard was reached by LAN address. **And no instruction exists to begin with (R-493).** **WHAT IT DOES NOT CLAIM:** the self-bind page and the mailed setup code were not exercised (no mailbox in the harness — the operator bind and a box-printed code stood in); DR tier and off-site were off (ep0 fence), so escrow and off-site screens were not walked; no browser, so script-rendered state was not observed. Goes green when a volunteer, from written instructions alone, reaches a working dashboard and a first app with zero interventions. | Rows **R-493 … R-500** | +| **A stranger's FIRST HOUR on a fresh install — download → install → claim → two apps → use → backup → remove → restore, plus a power cut and a mistyped code** | controller **v0.242.0**, agent **v0.130.0**, hub **v0.112.0**, golden **0.242.0**, installer ISO **1.26.1** | **PARTIAL (2026-09-14) — every mechanism PASSED on a fresh box; the UNAIDED journey FAILS before the first app** | `audits/DRILL-fresh-install-0242-2026-09-14.md`, evidence `audits/evidence-drill-fresh-install-0242-2026-09-14/journal.md`. A nested VM on demo-hp installed from the public ISO landed on the vouched set (controller 0.242.0, agent 0.130.0) with no hand upgrade; BookStack and PrivateBin deployed in 68 s / 21 s and were used through their front doors; backup-now moved both dates to the true time; removal with every delete box ticked left no volume, no backup and a 404; a page deleted in BookStack came back **byte-identical with its attachment** 32 s after restore; a hard power cut returned every app on the **same version** with data intact and no alarm; a typo in the code was refused and the right code then accepted, five failures locking for 15 min with an honest Hungarian message. **ONE intervention a volunteer could not make:** the setup-code mail's dashboard link does not resolve for a new customer (no tunnel/DNS is created — **R-494**), so the dashboard was reached by LAN address. **And no instruction exists to begin with (R-493).** **WHAT IT DOES NOT CLAIM:** the self-bind page and the mailed setup code were not exercised (no mailbox in the harness — the operator bind and a box-printed code stood in); DR tier and off-site were off (ep0 fence), so escrow and off-site screens were not walked; no browser, so script-rendered state was not observed. Goes green when a volunteer, from written instructions alone, reaches a working dashboard and a first app with zero interventions. **2026-09-14 (evening) — WALKED AGAIN on ISO 1.27.0/1.27.1 + hub v0.113.0, STILL PARTIAL.** `audits/DOORSTEP-walk-1270-2026-09-14.md`. Held again on a new customer (`tester-1`, real domain + tunnel token): install on three disks and on one, the vouched set, deploy, use, backup-now, removal, byte-identical restore, power cut (same versions), typo + lockout. New and proven: the console is Felhom-only from the FIRST boot on 1.27.1 (VM 332, reboot proven, `pvebanner` masked); the hub tells the operator to hand the passphrase over (live). Still ONE intervention: the tunnel connected but received no routes (R-505), and the record has no e-mail (R-508). The graphical installer was proven only to its password screen (R-507). Goes green on a walk with zero interventions on a published installer. | Rows **R-493 … R-500** | | **Off-site app-data capture covers the paths an app declares MANDATORY — on BOTH drive layouts** | controller v0.197.0 | **PROVEN-LIVE (2026-08-04) — and this row was OPTIMISTIC before it** | On demo-hp, an app on the **system-data fallback** bound `/mnt/sys_drive/userdata/media/books` while the capture set looked in `/mnt/sys_drive/felhom-data/userdata/media/books`: the declared-mandatory directory was in **no** snapshot and the run reported `ok` (R-203). After v0.197.0 the capture log reads `1 mandatory path(s)` and the file is **listed inside the snapshot** — `restic ls -l latest --tag calibre-web` → `-rw-r--r-- 1000 1000 181 … /DRILL-SENTINEL.txt`. Evidence: `audits/DRILL-r201-offsite-recovery-2026-08-04.md` §2 and the v0.197.0 CHANGELOG | **WHAT IT DOES NOT CLAIM.** It covers CAPTURE, not RESTORE: **no file has ever been restored from an off-site backup after a wipe** (R-201, ready to resume). It also does not claim the enrolled-drive layout was ever wrong — it was not, which is precisely why this survived. And a run that still misses a mandatory directory now reports **`incomplete`** rather than `ok`, so this row's guarantee is one the status can express. **Widened 2026-08-06 (controller v0.205.0, R-234):** the same verdict now also covers an app skipped ENTIRELY — until then a missing declared FOLDER made the run incomplete while an app with no recovery unit at all still reported `ok`, so the smaller gap moved the verdict and the bigger one did not. **This row still claims CAPTURE, not that a newly-selected app is protected by the next run** — for a DEPLOYED app it is (the run's own pre-dump phase writes the unit, measured 2026-08-06), and for an undeployed one it is not and the card now says so || **Recurring offsite (PBS) whole-guest backups actually LAND, and RESTORE** — local daily + offsite weekly as scheduled work | agent v0.97–0.103, controller v0.174/0.175, hub v0.76.0, host-install 1.20.0 | **PROVEN-LIVE (2026-07-26)** | `audits/SPIKE-r82-phase0-2026-07-26.md`; per-repo CHANGELOGs/REPORTs. **Restore round-trip on demo-hp:** `--selftest=restore-test` against `felhom-pbs:backup/ct/9201/2026-07-26T15:42:42Z` → `pass:true`, `verified:"boot+running"`, **`mount_parity:"ok"`** (`mp0=/var/lib/docker 50G`, `mp1=/mnt/sys_drive 20G`, mp8/mp9 throwaway stand-ins for the archived binds), `source_tier:"pbs"`, 4m5s restore+boot+verify+teardown, scratch band clean afterwards and the live guest untouched. | **This row is distinct from the DR-tier row above, which proves ACTIVATION, not ARRIVAL.** That tier was PROVEN-LIVE as `applied` since 2026-07-21 while demo-felhom held ONE snapshot (a healing artifact) and demo-hp held **zero, ever** — "applied and empty", the R-39 shape one level quieter. **What earns PROVEN-LIVE here:** (a) demo-hp's FIRST EVER offsite backup landed (4.25 GB into a verifiably empty namespace); (b) it **restores into a bootable, mount-complete guest** — `mount_parity` is the non-hollow half, since a boot-only verify cannot see a missing data volume; (c) **the multi-tier quiesce ran through the real UI endpoint** (`POST /api/guest-backup/trigger`, authed+CSRF) and produced **exactly ONE stop/start pair with BOTH backups inside it** — `quiescing 1 stack(s)` 17:01:39 → local done 17:02:56 *"next tier may start (app still quiesced)"* → felhom-pbs snapshotted 17:03:06 → `unquiescing` 17:03:06. **App downtime 1m27s for both tiers**, and the app came back healthy. **Known gaps, recorded not hidden:** the SCHEDULED restore-test still only selects the PRIMARY tier, so the offsite tier is never AUTOMATICALLY restore-tested (the manual/selftest path is proven, the unattended one is not); the hub infers "PBS ⇒ weekly" from storage TYPE rather than a reported cadence; the installer-default fleet flip awaits a full weekly cycle. → **R-82** | | **Restore-proof is UNATTENDED — the scheduler covers EVERY tier, follows the BACKUP rather than the clock, and a failure is heard** | agent v0.104.0 → **v0.121.0**, hub v0.77.0 → **v0.91.0** | **PROVEN-LIVE (2026-08-03)** | per-repo CHANGELOGs; `backlog/SPEC-r85-phase4-5-2026-07-26.md`. Unit red-proofs for tier rotation, restart-survival, the one-heavy-op gate, failure-emits-an-event, and newborn silence. | **The row above is earned by a MANUAL `--selftest=restore-test`; this one is about the SCHEDULED path, and the distinction is the whole point.** Before R-85 the scheduler could only ever see `cfg.Backup.BackupTarget()`, so the offsite tier was never a candidate — and a failed restore-test was a `[WARN]` line with no event at all, which was true for the LOCAL tier that WAS being tested. Now: oldest-first rotation across every configured tier (operator ruling 2026-07-26), persisted so it survives a restart; a restore-test joins the host-wide one-heavy-operation gate so it never contends with a backup over the same tunnel; and the hub raises two DISTINCT operator-tier signals — `restore_test_failed` (broken now) and `restore_test_stale` (unverified, not known-broken), anchored on R-81 so a newborn box never alarms. **Why this was NOT PROVEN-LIVE until now:** rotation had not been observed selecting both tiers across consecutive UNATTENDED cadences — at a 24h cadence a multi-day window — and a single passing run proves the code path, not the schedule. → **R-85**. **R-86 (agent v0.121.0 + hub v0.91.0, 2026-08-03) replaced the schedule and the observation became possible in one afternoon**, because what has to be observed is no longer a multi-day rotation but a RULE: a tier is due when its newest archive that has settled ~24 h has not been proven. **UPGRADE EVIDENCE — a real unattended run on demo-felhom (2026-08-03), triggered by DUE-NESS, not by a timer.** The scheduler's own log: `15:14:38 restore-test tier is DUE … target=felhom-pbs archive=felhom-pbs:backup/ct/9201/2026-07-28T04:49:43Z … reason="newest settled archive … has not been proven"` → `proxmox-backup-client restore --crypt-mode=encrypt` under the agent's own token → `15:25:08 gate decision class=guest_destroy guest=990000 allowed=true` → `15:25:14 scratch guest torn down` → **`15:25:14 backup: scheduled restore-test passed archive=felhom-pbs:… duration_s=635.1`**. A **14.5 GB encrypted offsite archive pulled from ep0 over the WAN**, restored, booted, verified and destroyed in 635 s, unattended. **The three things a timer could not show**, all verified after it: the state names THAT archive (`{"felhom-pbs":{"archive":"…2026-07-28T04:49:43Z","proven_at":"2026-08-03T13:25:14Z"}}`); a second evaluation reports `due=false … is already proven` and runs nothing; and **an agent restart runs nothing**, which is the defect a person actually noticed — every deploy used to restart the timer. Teardown verified at all three layers: guest absent from `pct list`, **zero** `990000` volumes in `lvs`, and the hub-side `restore_tests[]` entry deliberately RETAINED (it IS the proof the staleness check reads). **R-189 (agent v0.122.0, 2026-08-03) closed the reporting half of this row, and it was a REAL gap in the evidence path:** the proof above reached the hub only because no restart intervened — `restore_tests[]` came solely from an in-memory store, so the 15:25:14 PASS was in fact LOST when the agent restarted 2 m 43 s later for a deploy (`0 restore-tests` on the next two host-reports). Under per-archive due-ness the box would not have repeated the work for a week. The persisted per-tier proof (with the archive, and now the tier) is merged into the report, so a proof survives a restart — one entry per tier, newest wins, and a record that cannot be described honestly is not emitted. **THE HOST TIER'S HALF OF THIS ROW WAS OPTIMISTIC UNTIL 2026-08-03, and it is worth saying plainly.** Every live restore-test cited here is on the OFFSITE tier. The HOST tier was not merely unproven on demo-felhom — it was **unprovable**, and on demo-hp equally: the agent's token had no ACL on `/storage/felhom-backup`, the storage both boxes configure as `local_backup_target`, so the content API answered `{"data":[]}` through the token while root listed three archives. The scheduler skipped it as *"no settled archive yet"* — which is exactly what a brand-new tier reports — so nothing ever said so (**R-185**). **CLOSED 2026-08-03 — agent v0.123.0 + installer 1.24.0.** The grant is applied on both demo boxes (the token now lists 3 and 4 archives), the installer's reuse arm grants on a pre-existing target, and the agent now **asks whether it may read each tier it depends on** instead of inferring it from an empty list: a critical degraded capability naming the storage and the missing role, which the hub alerted and emailed on **while the box was still blind**. **THE HOST TIER IS NOW PROVEN-LIVE, UNATTENDED, ON BOTH DEMO BOXES (2026-08-04) — this row's optimistic half is cashed.** Four SCHEDULED runs, nothing triggered by hand: **demo-felhom** host tier `…2026_08_02-04_42_14.tar.zst` **passed in 83.8 s** at 00:55, offsite `…2026-07-28T04:49:43Z` **passed in 540.4 s** at 06:55; **demo-hp** host tier `…2026_08_02-04_49_29.tar.zst` **passed in 109.3 s** at 02:05, offsite `…2026-07-28T19:19:45Z` **passed in 300.1 s** at 08:05. Each restored into a scratch guest, booted, verified and destroyed itself; `pct list` and `lvs` show zero `990000` afterwards on both, and both boxes' `local-lvm` returned to their pre-run figures (1.95 % and 30.83 %). **Both boxes had BOTH tiers due at once and the ordering was observed live for the first time under R-86's rule:** never-proven sorted first, so each box took its HOST tier, deferred the offsite one, and picked it up on the following evaluation six hours later — one heavy operation at a time, per box, without anyone sequencing it. **The proofs reached the hub**, which is R-189 carrying a host-tier entry for the first time: demo-felhom's report holds **two** entries, one per tier, and the `local` one can only have come from the persisted state because the in-memory store held only that morning's offsite run. **SCOPE, stated because one box proving something does not make it a fleet property:** this covers `demo-felhom` and `demo-hp`. The tester's box is untested and untouched. Evidence: `felhom-agent/REPORT.md`, `felhom.eu/REPORT.md` | | Customer RESET (middle lifecycle tier: host delete < RESET < customer Delete): one operator action → pre-first-install; all operational state destroyed, identity + basic config survive | hub v0.61.0, felhom-tenantsync v1.1.0 | **PROVEN-LIVE (external teardown, incl. two real firings)** | **`tests/VALIDATION-n100-rehearsal-2026-07-18.md` — two live firings, both host-delete-first, on two different customers** (`demo-vm-felhom` 15:49:57, `demo-felhom` 16:08:51): every leg `ok` (`claim`, `db_purge`, `descriptor`, `hetzner`, `pbs`), escrow acked separately, each completing in 8–9 s (`hub-state.txt` `customer_resets`). The **Hetzner sub-account destruction is now verified against the live pool box** — and produced the run's sharpest lesson: **a sub-account is an access-control object, not a data object.** Deleting it left its `/home` intact, so re-enabling offsite recreated an account over the previous lifecycle's ciphertext under a key this same RESET had destroyed — which is why the orphan guard fired at 16:58:14 (**a finding by S7's own criterion**) and why RESET now needs a base-dir purge → **R-32**. Prior: hub v0.61.0 REPORT; **ep0 live drill 2026-07-17** (throwaway `drill-reset-01` with a real backup: deprovision `deleted:true` destroyed the namespace + backup group + token, idempotent re-run `deleted:false`, all 3 real tenants + shared user survived); red-proofs (ack-gate, partial-failure resumability) + orchestration/store/offsite/render tests | External teardown FIRST, DB purge LAST, every leg idempotent; refuses while any host row exists; separate escrow-custody ack; clears claim (fresh code next onboarding); keeps the offsite tier CHOICE, drops provisioned fields. **Live-clicked 2026-07-18** (twice, by Viktor) — this supersedes the earlier "not live-clicked / Hetzner delete unit-tested only" note. **R-25b CLOSED (hub v0.69.0, 2026-07-21):** the Danger-zone DELETE is now the guided full-teardown cascade that runs this very sequence as its middle leg — see the row below | diff --git a/documentation/audits/DOORSTEP-walk-1270-2026-09-14.md b/documentation/audits/DOORSTEP-walk-1270-2026-09-14.md new file mode 100644 index 00000000..49f350f5 --- /dev/null +++ b/documentation/audits/DOORSTEP-walk-1270-2026-09-14.md @@ -0,0 +1,105 @@ +# DOORSTEP — the first hour again, on the unpublished installer (2026-09-14) + +**Interventions a volunteer could not have made: 1** — I1 again, now with a different cause (R-505). +**Ready for a volunteer: NO — because on customer `tester-1` the dashboard link answers 503 from our +network: the box's tunnel connects but receives no routes. Everything the task changed held.** + +Evidence: `evidence-doorstep-walk-1270-2026-09-14/` — `screens-331/`, `screens-332/`, `box-logs-331/`, +`A1-power-cut-331.txt`, `A2-typo-331.txt`, `step10-remove-observe-331.txt`, `G15-live-332-iso1271.txt`, +`teardown-*.txt`. Gate records: `../tests/iso-release-1.27.0-2026-09-14/`, +`../tests/iso-release-1.27.1-2026-09-14/`. Yesterday's walk for comparison: +`DRILL-fresh-install-0242-2026-09-14.md` and its `screens/`. + +--- + +## 0. Phase 0 — why the installer asked questions (named first, because the brief assumed otherwise) + +**The auto-install never engaged, by construction.** The public 1.26.1 manifest (downloaded from +`iso.felhom.eu`) reads `answer-file : NONE — no answer.toml, no auto-installer-mode.toml (release gate +G1)` and `automated-entry : NOT PRESENT`; `build-felhom-iso.sh --release` refuses a profile and skips +`prepare-iso`; `grub/grub-release.cfg.tmpl` explains why — SPIKE-universal-iso-1 measured that no udev +property separates an internal disk from a USB backup drive and that a two-disk filter silently wipes +one. The operator's 2026-07-31 ruling made the interactive installer the product. **Offered an +install-time disk rule on 2026-09-14, the operator kept that ruling.** The auto-installer has no local +chooser or stop page (its modes are a static answer from the image or a partition, or an HTTP answer +service), so "no English reaches a volunteer" cannot hold on the installer's own screens; the +Felhom-written text around them is Hungarian (G16) and the guide answers each screen. + +## 1. What was built + +| artifact | change | status | +|---|---|---| +| ISO **1.27.0** | `felhom-bootstrap.sh` masks `pvebanner` + writes Felhom `/etc/issue` at first boot; banner names the Tulajdonosi jelmondat | built, gated, **superseded** — its proof install still showed the Proxmox block on the first boot | +| ISO **1.27.1** | the postinst does the mask (symlink) and the issue write at install time; issue text without ő/ű | built, **gated PASS**, proven live on VM 332, **NOT PUBLISHED** | +| hub **v0.113.0** | hand-over sentence on customer create + Credentials; self-bind mail names the operator | **deployed**, rendered live on `tester-1`'s page | + +## 2. The disk rule, and what a volunteer sees in each case + +**The installer never picks a disk for you.** It lists every disk with size and model; you choose the +one the system goes on, and that disk is erased. Unplug the external backup drive during the install. +If you do not know which internal disk is right, stop and call the operator. + +| case | what the screen shows (measured) | +|---|---| +| **one disk** (VM 332, TUI and graphical) | TUI: `Target harddisk: /dev/sda (QEMU HARDDISK) (64.00 GiB)`; graphical: „Please verify the installation target … All existing partitions and data will be lost." with `Target Harddisk /dev/sda (64.00GiB, QEMU HARDDISK)` | +| **three disks** (VM 331, TUI) | the same field pre-set to `/dev/sda (200.00 GiB)`; opening it lists `/dev/sda (200.00 GiB)`, `/dev/sdb (50.00 GiB)`, `/dev/sdc (50.00 GiB)` (screen `331-s07`); **the installer does not ask "which one?" by itself** — the guide's disk row covers it | +| **nobody at the keyboard** (VM 332) | the 15 s menu boots the **graphical** installer, which stops at the EULA and waits (screen `332-s02`) — nothing installs unattended | +| zero disks | not exercised | + +## 3. The walk, step by step + +Customer **`tester-1`** (operator's choice), domain `enkicsifelhom.hu`, tunnel token set, DR tier on, +**no e-mail registered**. VM 331 = ISO 1.27.0, three disks, TUI. VM 332 = ISO 1.27.1, one disk. + +| # | step | result | time | +|---|---|---|---| +| 1 | installer | built from `main`, not downloaded (unpublished) | — | +| 2 | install (331) | same English Proxmox screens as yesterday; host name `felhom.enkicsifelhom.hu` per the guide | copy ≤ 3 m 21 s | +| 3a | first screen (331, **1.27.0**) | **Proxmox `:8006` block still on top**; Felhom text below with ő/ű dropped → fixed in 1.27.1 | registered at hub +41 s | +| 3b | first screen (332, **1.27.1**) | **Felhom text only** — „Felhom otthoni szerver · Ezen a gépen most nincs dolgod, és bejelentkezni sem kell." — then the pairing banner naming the Tulajdonosi jelmondat; identical after a **proven** reboot (boot 16:14:11Z > reboot 16:13:56Z, `pvebanner` masked, `/etc/issue` 0 × `8006`) | — | +| 3c | bind + claim (331) | operator bind (no link: no e-mail); hub `claim code generated … but customer tester-1 has NO registered email` (R-508); **dashboard 503 via the tunnel → I1 (R-505, filed 16:07:59Z before acting)**; claim by LAN + box-printed code (H1) → 302 | controller 0.242.0 at +2 m 31 s after bind | +| 4 | version | controller 0.242.0, agent 0.130.0 — the vouched set | — | +| 5 | deploy | BookStack 68 s, PrivateBin 22 s | — | +| 6 | use | BookStack: default login → changed (old refused, new accepted), book, Hungarian page, 256 KiB attachment, **sha equal**; PrivateBin: encrypted paste round trip, wrong key `InvalidTag` | — | +| 7 | backup pages | same honest warnings; R-499's „(PBS)" sentence still present (not this task) | — | +| 8 | backup now | points move to 16:11:56Z; page „18:11 (most)" | 16 s | +| 9 | versions | installed == catalog for both; no update offered — skipped | — | +| 10 | remove PrivateBin (stop → remove, every box) | volume, container, backup dir, restore points gone; front door 404 | <1 s | +| 11 | restore BookStack after deleting its page | **page + attachment byte-identical**, finish message „2 adatkötet és az adatbázis visszaállítva" | healthy 36 s | +| 12 | status pages | launcher BookStack + Filebrowser; dashboard 4 running | — | +| A1 | power cut | same six image tags, agent 0.130.0, data byte-identical, hub `controller_started` only | dashboard +123 s, BookStack +133 s | +| A2 | typo | „Hibás vagy lejárt kód" → right code accepted → 6th attempt „Túl sok próbálkozás — próbáld újra 15 perc múlva."; `claim_lockout` + operator mail | — | + +## 4. Harness substitutions (not interventions) + +H1 no mailbox (and `tester-1` has none) → operator bind, box-printed codes · H2 U.S. keyboard on 331/332-TUI +· H3 auto-reboot unticked, ISO detached · H4 TUI entry. **H5 (new): the graphical installer did not take +Tab or mouse input from `qm sendkey`/`mouse_move`; Alt+N worked** — the 1.27.1 graphical path was proven +to boot, wait at the EULA, show the one-disk target and reach the password screen, not to install +(R-507). + +## 5. Findings + +| row | rank | | +|---|---|---| +| **R-505** | **P1** | `tester-1`'s tunnel gives a fresh box no routes → 503 (12/12 probes, 12 box warnings, 0 config updates); operator's phone reaches it — cause not visible to the session | +| R-508 | P2 | `tester-1` has no registered e-mail: the setup code and self-bind link cannot be delivered | +| R-506 | P3 | `day0-install.md` A.1 says the controller manages hostnames — it does not | +| R-507 | P3 | the proof-install harness cannot drive the graphical installer | +| R-502 | P3 | the bootstrap harness runs in no gate/CI; the banner was never tested | +| R-503 | P3 | spike for an install-time disk rule (not chosen) | +| R-504 | P3 | `iso.felhom.eu/` has no index; download page goes on the website | + +Closed with this evidence: **R-497** (hub v0.113.0 live). Fixed, awaiting publish: **R-496** (ISO 1.27.1), +**R-495** (answered by the guide + G14). **R-493** stays open until the download page and ISO are live. + +## 6. Teardown + +Layers 1–2 measured in `teardown-layers-1-2.txt` (VMs 331/332 destroyed; `nvme-scratch` used 23 528 192 +→ 10 132 924 KiB; `local` 26 489 992 → 23 033 320 KiB; ISOs and `/root/doorstep` gone; 9201/9202 running; +`local-lvm` 44.17 % unchanged). Layer 3 in `teardown-layer3-hub.txt`: appliance 27 discarded; host +`tester-1-8603a2` deleted once stale (**customer `tester-1` is KEPT** — the operator's fixture; a RESET or +DELETE would remove its tunnel and zone). **Left on ep0 by design of the DR tier, named:** namespace +`tester-1` and token `felhom@pbs!tester-1`, provisioned at enrolment; a host delete does not deprovision +tenancy — only the customer RESET does, which would also remove the tunnel. Disposition: retained with +the customer, for the operator to rule. diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/A1-power-cut-331.txt b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/A1-power-cut-331.txt new file mode 100644 index 00000000..7be51d8c --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/A1-power-cut-331.txt @@ -0,0 +1,35 @@ +=== A1 BEFORE 16:14:15 +bookstack lscr.io/linuxserver/bookstack:26.05.2 Up About a minute (healthy) +bookstack-db mariadb:12.3 Up About a minute (healthy) +filebrowser gtstef/filebrowser:1.3.3-stable Up 24 minutes (healthy) +felhom-controller gitea.dooplex.hu/admin/felhom-controller:0.242.0 Up 24 minutes (healthy) +cloudflared cloudflare/cloudflared:2026.6.0 Up 24 minutes +traefik traefik:v3.6.7 Up 24 minutes +felhom-agent 0.130.0 +T_A1_hardstop 16:14:17 +status: stopped +T_A1_poweron 16:15:22 +=== A1 AFTER 16:17:35 appliance +42s dashboard +123s bookstack healthy +133s after power-on +felhom-controller gitea.dooplex.hu/admin/felhom-controller:0.242.0 Up 15 seconds (healthy) +bookstack lscr.io/linuxserver/bookstack:26.05.2 Up 17 seconds (healthy) +bookstack-db mariadb:12.3 Up 17 seconds (healthy) +filebrowser gtstef/filebrowser:1.3.3-stable Up 17 seconds (healthy) +cloudflared cloudflare/cloudflared:2026.6.0 Up 17 seconds +traefik traefik:v3.6.7 Up 17 seconds +felhom-agent 0.130.0 +T_readback 16:17:38 +page 200 sentence 2 (neg 0) hungarian 2 +attachment 200 262144B equal: YES +2026/09/14 18:08:45 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:08:45 [INFO] [claim] customer tester-1 CLAIMED its dashboard (password set by the customer) +2026/09/14 18:08:45 [INFO] [claim] notification prefs for tester-1 left untouched (row exists or no registered email) +2026/09/14 18:09:06 [INFO] Event from tester-1: app_deployed (info) — Alkalmazás telepítve: BookStack +2026/09/14 18:09:08 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:10:14 [INFO] Event from tester-1: app_deployed (info) — Alkalmazás telepítve: PrivateBin +2026/09/14 18:10:16 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:13:22 [INFO] Event from tester-1: app_removed (info) — Alkalmazás eltávolítva: privatebin +2026/09/14 18:13:25 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:15:48 [INFO] DR-recipe host-half stored for customer tester-1 (host tester-1-8603a2, v1) +2026/09/14 18:16:47 [INFO] restore-test staleness: tester-1 pbs tier: not restore-proven yet, but only watching for 0s (grace 288h0m0s since first contact 2026-09-14T15:48:35Z) — newborn, not a fault +2026/09/14 18:17:27 [INFO] Event from tester-1: controller_started (info) — Controller elindult (0.242.0) +2026/09/14 18:17:27 [INFO] DR-recipe app-half stored for customer tester-1 (v1) diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/A2-typo-331.txt b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/A2-typo-331.txt new file mode 100644 index 00000000..c19469ab --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/A2-typo-331.txt @@ -0,0 +1,13 @@ +=== A2 on box 331 (ISO 1.27.0 install, controller 0.242.0) +page title on a claimed box: Jelszó visszaállítása — Felhom +16:18:08 typo (1 letter) -> HTTP/2 200 | error: Hibás vagy lejárt kód +16:18:08 right code -> HTTP/2 302 location: / | error: +login NEW password -> HTTP/2 302 +login OLD password -> HTTP/2 200 +16:18:09 wrong #2 -> HTTP/2 200 | error: Hibás vagy lejárt kód +16:18:10 wrong #3 -> HTTP/2 200 | error: Hibás vagy lejárt kód +16:18:10 wrong #4 -> HTTP/2 200 | error: Hibás vagy lejárt kód +16:18:11 wrong #5 -> HTTP/2 200 | error: Hibás vagy lejárt kód +16:18:11 wrong #6 -> HTTP/2 200 | error: Túl sok próbálkozás — próbáld újra 15 perc múlva. +2026/09/14 18:18:11 [INFO] Event from tester-1: claim_lockout (warning) — Túl sok hibás beállító kód — a beállító oldal 15 percre zárolva +2026/09/14 18:18:11 [INFO] Operator email sent for tester-1/claim_lockout diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/G15-live-332-iso1271.txt b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/G15-live-332-iso1271.txt new file mode 100644 index 00000000..655b8b2c --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/G15-live-332-iso1271.txt @@ -0,0 +1,24 @@ +=== VM 332 (ISO 1.27.1), live G15 2026-09-14T16:19:01Z +boot time (uptime -s): 2026-09-14 18:14:11 +boots recorded by journald: 3 +pvebanner.service: masked +symlink: /dev/null +/etc/issue lines naming 8006: 0 +/etc/issue Felhom line: 1 +--- postinst log +felhom-bootstrap postinst: arg1=configure date=2026-09-14T16:09:52+00:00 +felhom-bootstrap postinst: pvebanner.service masked (symlink) +felhom-bootstrap postinst: /etc/issue is the Felhom text +Created symlink '/etc/systemd/system/multi-user.target.wants/felhom-bootstrap.service' -> '/usr/lib/systemd/system/felhom-bootstrap.service'. +felhom-bootstrap postinst: enabled felhom-bootstrap.service via systemctl +--- bootstrap journal: console lines +felhom-bootstrap: console: pvebanner.service masked (it would rewrite /etc/issue with the Proxmox admin URL on every boot) +felhom-bootstrap: console: /etc/issue is the Felhom text (no admin URL) +felhom-bootstrap: console font -> Lat2-Terminus16 (Latin-2, ő/ű capable) +felhom-bootstrap: console: pvebanner.service masked (it would rewrite /etc/issue with the Proxmox admin URL on every boot) +package: felhom-bootstrap 1.27.1 +CORRECTED: qm reboot was sent at 16:13:56Z (T_reboot_332b below; an earlier draft of this line said 16:15:41Z, which is wrong). Boot time 18:14:11 CEST = 16:14:11Z is after it: the reboot happened. +T_firstboot_332b 16:12:01 +qm> T_shot_firstboot 16:13:42 +T_reboot_332b 16:13:56 +qm> T_shot_reboot 16:15:47 diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/agent-journal.log b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/agent-journal.log new file mode 100644 index 00000000..83a59726 --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/agent-journal.log @@ -0,0 +1,2918 @@ +2026-09-14T17:48:33+02:00 felhom systemd[1]: Started felhom-agent.service - Felhom host agent (Proxmox host tier; hub control loop + PBS verify + storage watchdog). +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.055+02:00 level=INFO msg="felhom-agent daemon starting" version=0.130.0 host_id=tester-1-8603a2 hub_url=https://hub.felhom.eu interval_s=900 +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.062+02:00 level=INFO msg="daemon: operator signers pinned" count=2 +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.069+02:00 level=WARN msg="local-api leaf REGENERATED — any previously issued bootstrap pins are now INVALID; controllers will fail the pin check until re-bootstrapped (or restore the prior leaf)" fingerprint_sha256=7bf6119f955f2011bf98514f87101fa3cea82adb4e4028e04b6cd79ac7103218 cert=/var/lib/felhom-agent/local-api.crt +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.069+02:00 level=INFO msg="backup tier armed" target=local cadence=24h0m0s keep_last=3 wait_timeout=30m0s prune_pbs_allowed=false primary=true +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.069+02:00 level=INFO msg="backup tier armed" target=felhom-pbs cadence=168h0m0s keep_last=0 wait_timeout=12h0m0s prune_pbs_allowed=false primary=false +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.069+02:00 level=INFO msg="lanresolver: enabled" host_ip=192.168.0.133 upstreams="[1.1.1.1 8.8.8.8]" interval_s=300 +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.069+02:00 level=INFO msg="wgtunnel: enabled" interval_s=60 state_dir=/var/lib/felhom-agent +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.069+02:00 level=INFO msg="poke: agent-plane sync listener enabled" port=51822 +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.069+02:00 level=INFO msg="felhomsshd (OOB): enabled" interval_s=60 state_dir=/var/lib/felhom-agent +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.069+02:00 level=INFO msg="pbsdr: bridge enabled (hub-driven; no-op until a pbs_dr descriptor arrives)" +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.842+02:00 level=INFO msg="capabilities self-check" ok=65 total=70 degraded=0 inactive=5 +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.842+02:00 level=INFO msg="storage: watchdog starting" interval=5s debounce=15s +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.842+02:00 level=INFO msg="pbs: verify loop starting" cadence=6h0m0s +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.842+02:00 level=INFO msg="backup: restore-test scheduler starting (per-archive due-check)" eval_interval=6h0m0s settle=24h0m0s +2026-09-14T17:48:33+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:33.842+02:00 level=INFO msg="fast-tick armed: 30s out-of-band cadence while desired-state is unapplied" interval=30s +2026-09-14T17:48:33+02:00 felhom sudo[2628]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:48:33+02:00 felhom sudo[2628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:33+02:00 felhom sudo[2628]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:33+02:00 felhom sudo[2631]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mount --bind /mnt/felhom-drives /mnt/felhom-drives +2026-09-14T17:48:33+02:00 felhom sudo[2631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:33+02:00 felhom sudo[2631]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:33+02:00 felhom sudo[2634]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mount --make-private /mnt/felhom-drives +2026-09-14T17:48:33+02:00 felhom sudo[2634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:33+02:00 felhom sudo[2634]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:33+02:00 felhom sudo[2638]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mount --make-shared /mnt/felhom-drives +2026-09-14T17:48:33+02:00 felhom sudo[2638]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:33+02:00 felhom sudo[2638]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:33+02:00 felhom sudo[2641]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -m 0755 -- /tmp/felhom-shared-parent-1905050689.sh /usr/local/sbin/felhom-shared-parent.sh +2026-09-14T17:48:33+02:00 felhom sudo[2641]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:33+02:00 felhom sudo[2641]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:33+02:00 felhom sudo[2645]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -m 0644 -- /tmp/felhom-shared-parent-2484771509.service /etc/systemd/system/felhom-shared-parent.service +2026-09-14T17:48:33+02:00 felhom sudo[2645]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:33+02:00 felhom sudo[2645]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:33+02:00 felhom sudo[2648]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl daemon-reload +2026-09-14T17:48:33+02:00 felhom sudo[2648]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:33+02:00 felhom sudo[2653]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:48:33+02:00 felhom sudo[2653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:34+02:00 felhom sudo[2653]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:34+02:00 felhom sudo[2656]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:48:34+02:00 felhom sudo[2656]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:34+02:00 felhom sudo[2656]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:34+02:00 felhom sudo[2648]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:34+02:00 felhom sudo[2693]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl enable felhom-shared-parent.service +2026-09-14T17:48:34+02:00 felhom sudo[2693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:34+02:00 felhom sudo[2693]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:34+02:00 felhom sudo[2810]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:48:34+02:00 felhom sudo[2810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:34+02:00 felhom sudo[2810]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:34+02:00 felhom sudo[2821]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:48:34+02:00 felhom sudo[2821]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:34+02:00 felhom sudo[2821]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:34.762+02:00 level=INFO msg="selfheal: node watchdog starting" mode=appliance interval_s=60 +2026-09-14T17:48:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:34.762+02:00 level=INFO msg="guestnet: watchdog starting" interval=1m0s min_heal_interval=10m0s max_heals_per_hour=3 settle=3m0s +2026-09-14T17:48:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:34.784+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=0 scanned=0 +2026-09-14T17:48:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:34.790+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=0 scanned=0 +2026-09-14T17:48:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:34.790+02:00 level=INFO msg="lanresolver: dnsmasq absent — installing" +2026-09-14T17:48:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:34.791+02:00 level=INFO msg="wgtunnel: generated new WG keypair" pubkey="Ee6/brA1P/ST8N1cw5BD1x3lgJxYjhngS0sCySB2VT0=" +2026-09-14T17:48:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:34.791+02:00 level=INFO msg="guest-power: watchdog started" interval=1m0s max_attempts=3 +2026-09-14T17:48:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:34.793+02:00 level=INFO msg="local-api server listening" addr=169.254.253.1:8443 +2026-09-14T17:48:34+02:00 felhom sudo[2836]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/apt-get install -y -q dnsmasq +2026-09-14T17:48:34+02:00 felhom sudo[2836]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:34+02:00 felhom sudo[2850]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/sshd -t -f /var/lib/felhom-agent/felhom-sshd/sshd_config +2026-09-14T17:48:34+02:00 felhom sudo[2850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:34+02:00 felhom sudo[2850]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:34+02:00 felhom sudo[2857]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -o root -g root -m 0644 -- /var/lib/felhom-agent/felhom-sshd/sshd_config /etc/felhom-sshd/sshd_config +2026-09-14T17:48:34+02:00 felhom sudo[2857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:34+02:00 felhom sudo[2857]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:34+02:00 felhom sudo[2862]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl enable --now felhom-sshd +2026-09-14T17:48:34+02:00 felhom sudo[2862]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2862]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:35.282+02:00 level=INFO msg="felhomsshd: config applied" port=8822 action=enable +2026-09-14T17:48:35+02:00 felhom sudo[2936]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:48:35+02:00 felhom sudo[2936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2936]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom sudo[2939]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft flush set inet felhom_oob ssh_port +2026-09-14T17:48:35+02:00 felhom sudo[2939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2939]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom sudo[2942]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft add element inet felhom_oob ssh_port '{ 8822 }' +2026-09-14T17:48:35+02:00 felhom sudo[2942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2942]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:35.353+02:00 level=INFO msg="felhomsshd belt: set synced" set=ssh_port elements=8822 +2026-09-14T17:48:35+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:35.446+02:00 level=INFO msg="wgtunnel: registered with hub" pubkey="Ee6/brA1P/ST8N1cw5BD1x3lgJxYjhngS0sCySB2VT0=" assigned_ip=10.77.0.5/32 existed=false generation=1 sync=ok +2026-09-14T17:48:35+02:00 felhom sudo[2949]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/sshd -T -f /etc/felhom-sshd/sshd_config +2026-09-14T17:48:35+02:00 felhom sudo[2949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2949]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom sudo[2952]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/sshd -t -f /etc/felhom-sshd/sshd_config +2026-09-14T17:48:35+02:00 felhom sudo[2952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2952]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom sudo[2956]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:48:35+02:00 felhom sudo[2956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2956]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom sudo[2960]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:48:35+02:00 felhom sudo[2960]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2960]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:35.588+02:00 level=INFO msg="desired: updated from hub" generation=1 guests=0 +2026-09-14T17:48:35+02:00 felhom sudo[2963]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -o root -g root -m 0644 -- /var/lib/felhom-agent/felhom-sshd/authorized_keys.felhom-op /etc/felhom-sshd/authorized_keys/felhom-op +2026-09-14T17:48:35+02:00 felhom sudo[2963]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2963]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:35.606+02:00 level=INFO msg="felhomsshd: operator authorized_keys updated" user=felhom-op present=true +2026-09-14T17:48:35+02:00 felhom sudo[2967]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:48:35+02:00 felhom sudo[2967]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2967]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom sudo[2970]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -o root -g root -m 0600 -- /var/lib/felhom-agent/wg/wg-felhom.conf /etc/wireguard/wg-felhom.conf +2026-09-14T17:48:35+02:00 felhom sudo[2970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2970]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom sudo[2972]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:48:35+02:00 felhom sudo[2972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2972]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom sudo[2975]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl enable --now wg-quick@wg-felhom +2026-09-14T17:48:35+02:00 felhom sudo[2975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2979]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft flush set inet felhom_oob operator_ips +2026-09-14T17:48:35+02:00 felhom sudo[2979]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2979]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom sudo[2983]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft add element inet felhom_oob operator_ips '{ 10.77.0.250 }' +2026-09-14T17:48:35+02:00 felhom sudo[2983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:35+02:00 felhom sudo[2983]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:35+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:35.701+02:00 level=INFO msg="felhomsshd belt: set synced" set=operator_ips elements=10.77.0.250 +2026-09-14T17:48:36+02:00 felhom sudo[2975]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:36+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:36.018+02:00 level=INFO msg="wgtunnel: tunnel conf applied" endpoint=167.233.158.164:443 dns_name=ep0.felhom.eu assigned_ip=10.77.0.5/32 action=enable +2026-09-14T17:48:36+02:00 felhom sudo[3059]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:48:36+02:00 felhom sudo[3059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:36+02:00 felhom sudo[3059]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:36+02:00 felhom useradd[3147]: new user: name=dnsmasq, UID=997, GID=65534, home=/var/lib/misc, shell=/usr/sbin/nologin, from=none +2026-09-14T17:48:38+02:00 felhom sudo[2836]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:38+02:00 felhom sudo[3282]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -m 0644 /tmp/felhom-resolver-1902682497.conf /etc/dnsmasq.d/felhom-resolver-base.conf +2026-09-14T17:48:38+02:00 felhom sudo[3282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:38+02:00 felhom sudo[3282]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:38+02:00 felhom sudo[3285]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl enable --now dnsmasq +2026-09-14T17:48:38+02:00 felhom sudo[3285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:38+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:48:38.843+02:00 level=INFO msg="poke: listening for hub sync-pokes (WG-confined, contentless)" addr=10.77.0.5:51822 +2026-09-14T17:48:39+02:00 felhom sudo[3285]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:39+02:00 felhom sudo[3396]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl restart dnsmasq +2026-09-14T17:48:39+02:00 felhom sudo[3396]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:39+02:00 felhom sudo[3396]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:54+02:00 felhom sudo[3627]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:48:54+02:00 felhom sudo[3627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:54+02:00 felhom sudo[3627]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:54+02:00 felhom sudo[3634]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:48:54+02:00 felhom sudo[3634]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:54+02:00 felhom sudo[3634]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:48:54+02:00 felhom sudo[3637]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:48:54+02:00 felhom sudo[3637]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:48:55+02:00 felhom sudo[3637]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:14+02:00 felhom sudo[3742]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:49:14+02:00 felhom sudo[3742]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:14+02:00 felhom sudo[3742]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:14+02:00 felhom sudo[3749]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:14+02:00 felhom sudo[3749]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:14+02:00 felhom sudo[3749]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:14+02:00 felhom sudo[3752]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:14+02:00 felhom sudo[3752]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:14+02:00 felhom sudo[3752]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:34+02:00 felhom sudo[4457]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:49:34+02:00 felhom sudo[4457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:34+02:00 felhom sudo[4457]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:49:34.815+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:49:34+02:00 felhom sudo[4468]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:49:34+02:00 felhom sudo[4468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:49:34.839+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:49:34+02:00 felhom sudo[4473]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:34+02:00 felhom sudo[4473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:34+02:00 felhom sudo[4473]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:34+02:00 felhom sudo[4476]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:34+02:00 felhom sudo[4476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:34+02:00 felhom sudo[4476]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:35+02:00 felhom sudo[4492]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:49:35+02:00 felhom sudo[4492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:35+02:00 felhom sudo[4492]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:35+02:00 felhom sudo[4495]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:49:35+02:00 felhom sudo[4495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:35+02:00 felhom sudo[4495]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:35+02:00 felhom sudo[4502]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:49:35+02:00 felhom sudo[4502]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:35+02:00 felhom sudo[4502]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:35+02:00 felhom sudo[4468]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:35+02:00 felhom sudo[4508]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:49:35+02:00 felhom sudo[4508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:36+02:00 felhom sudo[4653]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:36+02:00 felhom sudo[4653]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:36+02:00 felhom sudo[4508]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:36+02:00 felhom sudo[4659]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:49:36+02:00 felhom sudo[4659]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:36+02:00 felhom sudo[4653]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:36+02:00 felhom sudo[4662]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:36+02:00 felhom sudo[4662]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:37+02:00 felhom sudo[4662]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:38+02:00 felhom sudo[4659]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:38+02:00 felhom sudo[5093]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:49:38+02:00 felhom sudo[5093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:38+02:00 felhom sudo[5163]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:38+02:00 felhom sudo[5163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:38+02:00 felhom sudo[5163]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:38+02:00 felhom sudo[5181]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:38+02:00 felhom sudo[5181]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:38+02:00 felhom sudo[5181]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:38+02:00 felhom sudo[5205]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:49:38+02:00 felhom sudo[5205]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:38+02:00 felhom sudo[5205]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:38+02:00 felhom sudo[5230]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:38+02:00 felhom sudo[5230]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:38+02:00 felhom sudo[5230]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:38+02:00 felhom sudo[5239]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:38+02:00 felhom sudo[5239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:38+02:00 felhom sudo[5239]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:38+02:00 felhom sudo[5255]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:49:38+02:00 felhom sudo[5255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:38+02:00 felhom sudo[5255]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:39+02:00 felhom sudo[5093]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:39+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:49:39.471+02:00 level=INFO msg="guestnet: guest network unhealthy but not acting" vmid=9201 reason="agent started less than 3m0s ago" detail="no IPv4 address on eth0" +2026-09-14T17:49:50+02:00 felhom sudo[6627]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:50+02:00 felhom sudo[6627]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:50+02:00 felhom sudo[6627]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:50+02:00 felhom sudo[6640]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:50+02:00 felhom sudo[6640]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:50+02:00 felhom sudo[6640]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:51+02:00 felhom sudo[6794]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:51+02:00 felhom sudo[6794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:51+02:00 felhom sudo[6794]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:51+02:00 felhom sudo[6797]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:51+02:00 felhom sudo[6797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:51+02:00 felhom sudo[6797]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:52+02:00 felhom sudo[7034]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:52+02:00 felhom sudo[7034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:52+02:00 felhom sudo[7034]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:52+02:00 felhom sudo[7040]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:52+02:00 felhom sudo[7040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:52+02:00 felhom sudo[7040]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:52+02:00 felhom sudo[7060]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:49:52+02:00 felhom sudo[7060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:52+02:00 felhom sudo[7060]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:52+02:00 felhom sudo[7097]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:52+02:00 felhom sudo[7097]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:52+02:00 felhom sudo[7097]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:52+02:00 felhom sudo[7100]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:52+02:00 felhom sudo[7100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:52+02:00 felhom sudo[7100]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:52+02:00 felhom sudo[7103]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:49:52+02:00 felhom sudo[7103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:52+02:00 felhom sudo[7103]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:54+02:00 felhom sudo[7206]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:49:54+02:00 felhom sudo[7206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:54+02:00 felhom sudo[7206]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:54+02:00 felhom sudo[7213]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:49:54+02:00 felhom sudo[7213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:54+02:00 felhom sudo[7213]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:54+02:00 felhom sudo[7216]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:49:54+02:00 felhom sudo[7216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:49:54+02:00 felhom sudo[7216]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:14+02:00 felhom sudo[7608]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:50:14+02:00 felhom sudo[7608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:14+02:00 felhom sudo[7608]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:14+02:00 felhom sudo[7615]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:50:14+02:00 felhom sudo[7615]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:14+02:00 felhom sudo[7615]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:14+02:00 felhom sudo[7618]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:50:14+02:00 felhom sudo[7618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:14+02:00 felhom sudo[7618]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:22+02:00 felhom sudo[7665]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:50:22+02:00 felhom sudo[7665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:22+02:00 felhom sudo[7665]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:22+02:00 felhom sudo[7668]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:50:22+02:00 felhom sudo[7668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:22+02:00 felhom sudo[7668]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:22+02:00 felhom sudo[7671]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:50:22+02:00 felhom sudo[7671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:22+02:00 felhom sudo[7671]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:22+02:00 felhom sudo[7678]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:50:22+02:00 felhom sudo[7678]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:22+02:00 felhom sudo[7678]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:22+02:00 felhom sudo[7681]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:50:22+02:00 felhom sudo[7681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:22+02:00 felhom sudo[7681]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:22+02:00 felhom sudo[7684]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:50:22+02:00 felhom sudo[7684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:22+02:00 felhom sudo[7684]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:34+02:00 felhom sudo[7777]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:50:34+02:00 felhom sudo[7777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:34+02:00 felhom sudo[7777]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:50:34.808+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:50:34+02:00 felhom sudo[7786]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:50:34+02:00 felhom sudo[7786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:50:34.833+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:50:34+02:00 felhom sudo[7793]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:50:34+02:00 felhom sudo[7793]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:34+02:00 felhom sudo[7793]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:34+02:00 felhom sudo[7796]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:50:34+02:00 felhom sudo[7796]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:34+02:00 felhom sudo[7796]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:35+02:00 felhom sudo[7800]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:50:35+02:00 felhom sudo[7800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:35+02:00 felhom sudo[7800]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:35+02:00 felhom sudo[7803]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:50:35+02:00 felhom sudo[7803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:35+02:00 felhom sudo[7803]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:35+02:00 felhom sudo[7810]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:50:35+02:00 felhom sudo[7810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:35+02:00 felhom sudo[7810]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:35+02:00 felhom sudo[7786]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:35+02:00 felhom sudo[7816]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:50:35+02:00 felhom sudo[7816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:36+02:00 felhom sudo[7816]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:36+02:00 felhom sudo[7824]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:50:36+02:00 felhom sudo[7824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:37+02:00 felhom sudo[7824]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:37+02:00 felhom sudo[7830]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:50:37+02:00 felhom sudo[7830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:38+02:00 felhom sudo[7830]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:38+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:50:38.514+02:00 level=INFO msg="guestnet: guest network recovered" vmid=9201 previous_state=unhealthy +2026-09-14T17:50:52+02:00 felhom sudo[7942]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:50:52+02:00 felhom sudo[7942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:52+02:00 felhom sudo[7942]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:52+02:00 felhom sudo[7945]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:50:52+02:00 felhom sudo[7945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:52+02:00 felhom sudo[7945]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:52+02:00 felhom sudo[7952]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:50:52+02:00 felhom sudo[7952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:52+02:00 felhom sudo[7952]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:52+02:00 felhom sudo[7955]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:50:52+02:00 felhom sudo[7955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:52+02:00 felhom sudo[7955]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:52+02:00 felhom sudo[7958]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:50:52+02:00 felhom sudo[7958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:52+02:00 felhom sudo[7958]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:52+02:00 felhom sudo[7965]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:50:52+02:00 felhom sudo[7965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:52+02:00 felhom sudo[7965]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:52+02:00 felhom sudo[7968]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:50:52+02:00 felhom sudo[7968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:52+02:00 felhom sudo[7968]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:52+02:00 felhom sudo[7971]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:50:52+02:00 felhom sudo[7971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:52+02:00 felhom sudo[7971]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:54+02:00 felhom sudo[7974]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:50:54+02:00 felhom sudo[7974]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:54+02:00 felhom sudo[7974]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:54+02:00 felhom sudo[7981]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:50:54+02:00 felhom sudo[7981]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:54+02:00 felhom sudo[7981]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:50:54+02:00 felhom sudo[7984]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:50:54+02:00 felhom sudo[7984]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:50:54+02:00 felhom sudo[7984]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:14+02:00 felhom sudo[8103]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:51:14+02:00 felhom sudo[8103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:14+02:00 felhom sudo[8103]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:14+02:00 felhom sudo[8110]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:51:14+02:00 felhom sudo[8110]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:14+02:00 felhom sudo[8110]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:14+02:00 felhom sudo[8113]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:51:14+02:00 felhom sudo[8113]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:14+02:00 felhom sudo[8113]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:22+02:00 felhom sudo[8157]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:51:22+02:00 felhom sudo[8157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:22+02:00 felhom sudo[8157]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:22+02:00 felhom sudo[8160]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:51:22+02:00 felhom sudo[8160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:22+02:00 felhom sudo[8160]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:22+02:00 felhom sudo[8163]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:51:22+02:00 felhom sudo[8163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:22+02:00 felhom sudo[8163]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:22+02:00 felhom sudo[8170]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:51:22+02:00 felhom sudo[8170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:22+02:00 felhom sudo[8170]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:22+02:00 felhom sudo[8173]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:51:22+02:00 felhom sudo[8173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:22+02:00 felhom sudo[8173]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:22+02:00 felhom sudo[8176]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:51:22+02:00 felhom sudo[8176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:22+02:00 felhom sudo[8176]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:34+02:00 felhom sudo[8261]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:51:34+02:00 felhom sudo[8261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:34+02:00 felhom sudo[8261]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:51:34.807+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:51:34+02:00 felhom sudo[8275]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:51:34+02:00 felhom sudo[8275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:51:34.843+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:51:34+02:00 felhom sudo[8284]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:51:34+02:00 felhom sudo[8284]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:34+02:00 felhom sudo[8284]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:34+02:00 felhom sudo[8287]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:51:34+02:00 felhom sudo[8287]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:34+02:00 felhom sudo[8287]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:35+02:00 felhom sudo[8291]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:51:35+02:00 felhom sudo[8291]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:35+02:00 felhom sudo[8291]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:35+02:00 felhom sudo[8294]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:51:35+02:00 felhom sudo[8294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:35+02:00 felhom sudo[8294]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:35+02:00 felhom sudo[8301]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:51:35+02:00 felhom sudo[8301]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:35+02:00 felhom sudo[8301]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:35+02:00 felhom sudo[8275]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:35+02:00 felhom sudo[8307]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:51:35+02:00 felhom sudo[8307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:36+02:00 felhom sudo[8307]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:36+02:00 felhom sudo[8313]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:51:36+02:00 felhom sudo[8313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:37+02:00 felhom sudo[8313]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:37+02:00 felhom sudo[8321]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:51:37+02:00 felhom sudo[8321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:38+02:00 felhom sudo[8321]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:52+02:00 felhom sudo[8442]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:51:52+02:00 felhom sudo[8442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:52+02:00 felhom sudo[8442]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:52+02:00 felhom sudo[8445]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:51:52+02:00 felhom sudo[8445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:52+02:00 felhom sudo[8445]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:52+02:00 felhom sudo[8452]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:51:52+02:00 felhom sudo[8452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:52+02:00 felhom sudo[8452]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:52+02:00 felhom sudo[8455]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:51:52+02:00 felhom sudo[8455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:52+02:00 felhom sudo[8455]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:52+02:00 felhom sudo[8458]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:51:52+02:00 felhom sudo[8458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:52+02:00 felhom sudo[8458]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:52+02:00 felhom sudo[8465]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:51:52+02:00 felhom sudo[8465]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:52+02:00 felhom sudo[8465]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:52+02:00 felhom sudo[8468]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:51:52+02:00 felhom sudo[8468]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:52+02:00 felhom sudo[8468]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:52+02:00 felhom sudo[8471]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:51:52+02:00 felhom sudo[8471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:52+02:00 felhom sudo[8471]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:54+02:00 felhom sudo[8474]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:51:54+02:00 felhom sudo[8474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:54+02:00 felhom sudo[8474]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:54+02:00 felhom sudo[8481]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:51:54+02:00 felhom sudo[8481]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:54+02:00 felhom sudo[8481]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:51:54+02:00 felhom sudo[8484]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:51:54+02:00 felhom sudo[8484]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:51:54+02:00 felhom sudo[8484]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:14+02:00 felhom sudo[8603]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:52:14+02:00 felhom sudo[8603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:14+02:00 felhom sudo[8603]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:14+02:00 felhom sudo[8610]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:52:14+02:00 felhom sudo[8610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:14+02:00 felhom sudo[8610]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:14+02:00 felhom sudo[8613]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:52:14+02:00 felhom sudo[8613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:14+02:00 felhom sudo[8613]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:22+02:00 felhom sudo[8657]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:52:22+02:00 felhom sudo[8657]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:22+02:00 felhom sudo[8657]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:22+02:00 felhom sudo[8660]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:52:22+02:00 felhom sudo[8660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:22+02:00 felhom sudo[8660]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:22+02:00 felhom sudo[8663]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:52:22+02:00 felhom sudo[8663]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:22+02:00 felhom sudo[8663]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:22+02:00 felhom sudo[8670]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:52:22+02:00 felhom sudo[8670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:22+02:00 felhom sudo[8670]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:22+02:00 felhom sudo[8673]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:52:22+02:00 felhom sudo[8673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:22+02:00 felhom sudo[8673]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:22+02:00 felhom sudo[8676]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:52:22+02:00 felhom sudo[8676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:22+02:00 felhom sudo[8676]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:34+02:00 felhom sudo[8760]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:52:34+02:00 felhom sudo[8760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:34+02:00 felhom sudo[8760]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:52:34.810+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:52:34+02:00 felhom sudo[8768]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:52:34+02:00 felhom sudo[8768]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:52:34.834+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:52:34+02:00 felhom sudo[8776]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:52:34+02:00 felhom sudo[8776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:34+02:00 felhom sudo[8776]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:34+02:00 felhom sudo[8779]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:52:34+02:00 felhom sudo[8779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:34+02:00 felhom sudo[8779]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:35+02:00 felhom sudo[8783]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:52:35+02:00 felhom sudo[8783]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:35+02:00 felhom sudo[8783]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:35+02:00 felhom sudo[8790]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:52:35+02:00 felhom sudo[8790]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:35+02:00 felhom sudo[8790]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:35+02:00 felhom sudo[8800]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:52:35+02:00 felhom sudo[8800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:35+02:00 felhom sudo[8800]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:35+02:00 felhom sudo[8768]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:35+02:00 felhom sudo[8806]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:52:35+02:00 felhom sudo[8806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:36+02:00 felhom sudo[8806]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:36+02:00 felhom sudo[8812]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:52:36+02:00 felhom sudo[8812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:37+02:00 felhom sudo[8812]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:37+02:00 felhom sudo[8820]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:52:37+02:00 felhom sudo[8820]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:38+02:00 felhom sudo[8820]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:52+02:00 felhom sudo[8933]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:52:52+02:00 felhom sudo[8933]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:52+02:00 felhom sudo[8933]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:52+02:00 felhom sudo[8936]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:52:52+02:00 felhom sudo[8936]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:52+02:00 felhom sudo[8936]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:52+02:00 felhom sudo[8943]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:52:52+02:00 felhom sudo[8943]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:52+02:00 felhom sudo[8943]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:52+02:00 felhom sudo[8946]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:52:52+02:00 felhom sudo[8946]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:52+02:00 felhom sudo[8946]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:52+02:00 felhom sudo[8949]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:52:52+02:00 felhom sudo[8949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:52+02:00 felhom sudo[8949]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:52+02:00 felhom sudo[8956]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:52:52+02:00 felhom sudo[8956]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:52+02:00 felhom sudo[8956]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:52+02:00 felhom sudo[8959]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:52:52+02:00 felhom sudo[8959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:52+02:00 felhom sudo[8959]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:52+02:00 felhom sudo[8962]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:52:52+02:00 felhom sudo[8962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:52+02:00 felhom sudo[8962]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:54+02:00 felhom sudo[8965]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:52:54+02:00 felhom sudo[8965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:54+02:00 felhom sudo[8965]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:54+02:00 felhom sudo[8972]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:52:54+02:00 felhom sudo[8972]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:54+02:00 felhom sudo[8972]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:52:54+02:00 felhom sudo[8975]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:52:54+02:00 felhom sudo[8975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:52:54+02:00 felhom sudo[8975]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:14+02:00 felhom sudo[9093]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:53:14+02:00 felhom sudo[9093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:14+02:00 felhom sudo[9093]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:14+02:00 felhom sudo[9100]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:53:14+02:00 felhom sudo[9100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:14+02:00 felhom sudo[9100]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:14+02:00 felhom sudo[9103]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:53:14+02:00 felhom sudo[9103]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:14+02:00 felhom sudo[9103]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:22+02:00 felhom sudo[9147]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:53:22+02:00 felhom sudo[9147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:22+02:00 felhom sudo[9147]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:22+02:00 felhom sudo[9150]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:53:22+02:00 felhom sudo[9150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:22+02:00 felhom sudo[9150]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:22+02:00 felhom sudo[9153]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:53:22+02:00 felhom sudo[9153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:22+02:00 felhom sudo[9153]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:22+02:00 felhom sudo[9160]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:53:22+02:00 felhom sudo[9160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:22+02:00 felhom sudo[9160]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:22+02:00 felhom sudo[9163]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:53:22+02:00 felhom sudo[9163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:22+02:00 felhom sudo[9163]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:22+02:00 felhom sudo[9166]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:53:22+02:00 felhom sudo[9166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:22+02:00 felhom sudo[9166]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:34+02:00 felhom sudo[9250]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:53:34+02:00 felhom sudo[9250]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:34+02:00 felhom sudo[9250]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:53:34.817+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:53:34+02:00 felhom sudo[9259]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:53:34+02:00 felhom sudo[9259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:53:34.844+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:53:34+02:00 felhom sudo[9266]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:53:34+02:00 felhom sudo[9266]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:34+02:00 felhom sudo[9266]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:34+02:00 felhom sudo[9269]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:53:34+02:00 felhom sudo[9269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:34+02:00 felhom sudo[9269]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:35+02:00 felhom sudo[9273]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:53:35+02:00 felhom sudo[9273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:35+02:00 felhom sudo[9273]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:35+02:00 felhom sudo[9276]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:53:35+02:00 felhom sudo[9276]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:35+02:00 felhom sudo[9276]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:35+02:00 felhom sudo[9290]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:53:35+02:00 felhom sudo[9290]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:35+02:00 felhom sudo[9290]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:35+02:00 felhom sudo[9259]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:35+02:00 felhom sudo[9296]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:53:35+02:00 felhom sudo[9296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:36+02:00 felhom sudo[9296]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:36+02:00 felhom sudo[9302]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:53:36+02:00 felhom sudo[9302]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:37+02:00 felhom sudo[9302]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:37+02:00 felhom sudo[9310]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:53:37+02:00 felhom sudo[9310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:38+02:00 felhom sudo[9310]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:39+02:00 felhom sudo[9316]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:53:39+02:00 felhom sudo[9316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:40+02:00 felhom sudo[9316]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:40+02:00 felhom sudo[9323]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- docker exec felhom-controller cat /opt/docker/felhom-controller/controller.yaml +2026-09-14T17:53:40+02:00 felhom sudo[9323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:41+02:00 felhom sudo[9323]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:41+02:00 felhom sudo[9379]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -m 0644 /tmp/felhom-resolver-4153609411.conf /etc/dnsmasq.d/felhom-guest-9201.conf +2026-09-14T17:53:41+02:00 felhom sudo[9379]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:41+02:00 felhom sudo[9379]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:41+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:53:41.272+02:00 level=INFO msg="lanresolver: applied split-horizon record" vmid=9201 customer=guest-9201 domain=enkicsifelhom.hu ip=192.168.0.107 +2026-09-14T17:53:41+02:00 felhom sudo[9382]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl restart dnsmasq +2026-09-14T17:53:41+02:00 felhom sudo[9382]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:41+02:00 felhom sudo[9382]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:52+02:00 felhom sudo[9497]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:53:52+02:00 felhom sudo[9497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:52+02:00 felhom sudo[9497]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:52+02:00 felhom sudo[9500]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:53:52+02:00 felhom sudo[9500]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:52+02:00 felhom sudo[9500]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:52+02:00 felhom sudo[9509]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:53:52+02:00 felhom sudo[9509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:52+02:00 felhom sudo[9509]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:52+02:00 felhom sudo[9512]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:53:52+02:00 felhom sudo[9512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:52+02:00 felhom sudo[9512]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:52+02:00 felhom sudo[9515]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:53:52+02:00 felhom sudo[9515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:52+02:00 felhom sudo[9515]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:52+02:00 felhom sudo[9522]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:53:52+02:00 felhom sudo[9522]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:52+02:00 felhom sudo[9522]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:52+02:00 felhom sudo[9525]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:53:52+02:00 felhom sudo[9525]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:52+02:00 felhom sudo[9525]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:52+02:00 felhom sudo[9528]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:53:52+02:00 felhom sudo[9528]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:52+02:00 felhom sudo[9528]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:54+02:00 felhom sudo[9531]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:53:54+02:00 felhom sudo[9531]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:54+02:00 felhom sudo[9531]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:54+02:00 felhom sudo[9538]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:53:54+02:00 felhom sudo[9538]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:54+02:00 felhom sudo[9538]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:53:54+02:00 felhom sudo[9541]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:53:54+02:00 felhom sudo[9541]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:53:54+02:00 felhom sudo[9541]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:14+02:00 felhom sudo[9740]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:54:14+02:00 felhom sudo[9740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:14+02:00 felhom sudo[9740]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:14+02:00 felhom sudo[9747]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:14+02:00 felhom sudo[9747]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:14+02:00 felhom sudo[9747]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:14+02:00 felhom sudo[9750]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:14+02:00 felhom sudo[9750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:14+02:00 felhom sudo[9750]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:22+02:00 felhom sudo[9794]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:22+02:00 felhom sudo[9794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:22+02:00 felhom sudo[9794]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:22+02:00 felhom sudo[9797]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:22+02:00 felhom sudo[9797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:22+02:00 felhom sudo[9797]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:22+02:00 felhom sudo[9800]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:54:22+02:00 felhom sudo[9800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:22+02:00 felhom sudo[9800]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:22+02:00 felhom sudo[9807]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:22+02:00 felhom sudo[9807]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:22+02:00 felhom sudo[9807]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:22+02:00 felhom sudo[9810]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:22+02:00 felhom sudo[9810]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:22+02:00 felhom sudo[9810]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:23+02:00 felhom sudo[9813]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:54:23+02:00 felhom sudo[9813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:23+02:00 felhom sudo[9813]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:34+02:00 felhom sudo[9899]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:54:34+02:00 felhom sudo[9899]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:34+02:00 felhom sudo[9899]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:54:34.812+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:54:34+02:00 felhom sudo[9908]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:54:34+02:00 felhom sudo[9908]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:54:34.830+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:54:34+02:00 felhom sudo[9915]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:34+02:00 felhom sudo[9915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:34+02:00 felhom sudo[9915]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:34+02:00 felhom sudo[9918]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:34+02:00 felhom sudo[9918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:34+02:00 felhom sudo[9918]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:35+02:00 felhom sudo[9922]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:54:35+02:00 felhom sudo[9922]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:35+02:00 felhom sudo[9922]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:35+02:00 felhom sudo[9925]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:54:35+02:00 felhom sudo[9925]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:35+02:00 felhom sudo[9925]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:35+02:00 felhom sudo[9935]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:54:35+02:00 felhom sudo[9935]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:35+02:00 felhom sudo[9935]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:35+02:00 felhom sudo[9908]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:35+02:00 felhom sudo[9945]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:54:35+02:00 felhom sudo[9945]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:36+02:00 felhom sudo[9945]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:36+02:00 felhom sudo[9951]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:54:36+02:00 felhom sudo[9951]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:37+02:00 felhom sudo[9951]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:37+02:00 felhom sudo[9959]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:54:37+02:00 felhom sudo[9959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:38+02:00 felhom sudo[9959]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:51+02:00 felhom sudo[10061]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:51+02:00 felhom sudo[10061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:51+02:00 felhom sudo[10061]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:51+02:00 felhom sudo[10064]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:51+02:00 felhom sudo[10064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:51+02:00 felhom sudo[10064]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:52+02:00 felhom sudo[10112]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:52+02:00 felhom sudo[10112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:52+02:00 felhom sudo[10112]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:52+02:00 felhom sudo[10130]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:52+02:00 felhom sudo[10130]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:52+02:00 felhom sudo[10130]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:52+02:00 felhom sudo[10150]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:52+02:00 felhom sudo[10150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:52+02:00 felhom sudo[10150]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:52+02:00 felhom sudo[10168]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:52+02:00 felhom sudo[10168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:52+02:00 felhom sudo[10168]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:52+02:00 felhom sudo[10260]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:52+02:00 felhom sudo[10260]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:52+02:00 felhom sudo[10260]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:52+02:00 felhom sudo[10271]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:52+02:00 felhom sudo[10271]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:52+02:00 felhom sudo[10271]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:52+02:00 felhom sudo[10281]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:54:52+02:00 felhom sudo[10281]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:52+02:00 felhom sudo[10281]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:52+02:00 felhom sudo[10294]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:52+02:00 felhom sudo[10294]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:53+02:00 felhom sudo[10294]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:53+02:00 felhom sudo[10297]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:53+02:00 felhom sudo[10297]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:53+02:00 felhom sudo[10297]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:53+02:00 felhom sudo[10300]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:54:53+02:00 felhom sudo[10300]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:53+02:00 felhom sudo[10300]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:53+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:54:53.182+02:00 level=INFO msg="local-api: backup reached snapshotted (app may resume)" vmid=9201 target=local job=backup-9201-1789401292139324460 +2026-09-14T17:54:54+02:00 felhom sudo[10318]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:54:54+02:00 felhom sudo[10318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:54+02:00 felhom sudo[10318]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:54+02:00 felhom sudo[10325]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:54:54+02:00 felhom sudo[10325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:54+02:00 felhom sudo[10325]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:54:54+02:00 felhom sudo[10328]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:54:54+02:00 felhom sudo[10328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:54:54+02:00 felhom sudo[10328]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:14+02:00 felhom sudo[10507]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:55:14+02:00 felhom sudo[10507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:14+02:00 felhom sudo[10507]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:14+02:00 felhom sudo[10514]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:55:14+02:00 felhom sudo[10514]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:14+02:00 felhom sudo[10514]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:15+02:00 felhom sudo[10517]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:55:15+02:00 felhom sudo[10517]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:15+02:00 felhom sudo[10517]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:22+02:00 felhom sudo[10582]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:55:22+02:00 felhom sudo[10582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:22+02:00 felhom sudo[10582]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:22+02:00 felhom sudo[10587]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:55:22+02:00 felhom sudo[10587]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:22+02:00 felhom sudo[10587]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:22+02:00 felhom sudo[10590]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:55:22+02:00 felhom sudo[10590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:22+02:00 felhom sudo[10590]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:22+02:00 felhom sudo[10597]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:55:22+02:00 felhom sudo[10597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:22+02:00 felhom sudo[10597]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:22+02:00 felhom sudo[10600]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:55:22+02:00 felhom sudo[10600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:22+02:00 felhom sudo[10600]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:22+02:00 felhom sudo[10603]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:55:22+02:00 felhom sudo[10603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:22+02:00 felhom sudo[10603]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:23+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:55:23.332+02:00 level=INFO msg="backup: completed" vmid=9201 target=local archive=local:backup/vzdump-lxc-9201-2026_09_14-17_54_52.tar.zst size_bytes=654076576 uncovered_volumes=2 +2026-09-14T17:55:23+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:55:23.332+02:00 level=INFO msg="local-api: backup job complete" vmid=9201 target=local job=backup-9201-1789401292139324460 archive=local:backup/vzdump-lxc-9201-2026_09_14-17_54_52.tar.zst +2026-09-14T17:55:34+02:00 felhom sudo[10688]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:55:34+02:00 felhom sudo[10688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:34+02:00 felhom sudo[10688]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:55:34.808+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:55:34+02:00 felhom sudo[10697]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:55:34+02:00 felhom sudo[10697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:55:34.831+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:55:34+02:00 felhom sudo[10704]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:55:34+02:00 felhom sudo[10704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:34+02:00 felhom sudo[10704]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:34+02:00 felhom sudo[10707]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:55:34+02:00 felhom sudo[10707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:34+02:00 felhom sudo[10707]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:35+02:00 felhom sudo[10711]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:55:35+02:00 felhom sudo[10711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:35+02:00 felhom sudo[10711]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:35+02:00 felhom sudo[10714]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:55:35+02:00 felhom sudo[10714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:35+02:00 felhom sudo[10714]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:35+02:00 felhom sudo[10722]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:55:35+02:00 felhom sudo[10722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:35+02:00 felhom sudo[10722]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:35+02:00 felhom sudo[10697]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:35+02:00 felhom sudo[10734]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:55:35+02:00 felhom sudo[10734]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:36+02:00 felhom sudo[10734]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:36+02:00 felhom sudo[10740]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:55:36+02:00 felhom sudo[10740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:37+02:00 felhom sudo[10740]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:37+02:00 felhom sudo[10746]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:55:37+02:00 felhom sudo[10746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:38+02:00 felhom sudo[10746]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:52+02:00 felhom sudo[10934]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:55:52+02:00 felhom sudo[10934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:52+02:00 felhom sudo[10934]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:52+02:00 felhom sudo[10937]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:55:52+02:00 felhom sudo[10937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:52+02:00 felhom sudo[10937]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:52+02:00 felhom sudo[10944]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:55:52+02:00 felhom sudo[10944]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:52+02:00 felhom sudo[10944]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:52+02:00 felhom sudo[10947]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:55:52+02:00 felhom sudo[10947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:52+02:00 felhom sudo[10947]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:52+02:00 felhom sudo[10950]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:55:52+02:00 felhom sudo[10950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:52+02:00 felhom sudo[10950]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:52+02:00 felhom sudo[10959]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:55:52+02:00 felhom sudo[10959]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:52+02:00 felhom sudo[10959]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:52+02:00 felhom sudo[10962]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:55:52+02:00 felhom sudo[10962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:52+02:00 felhom sudo[10962]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:52+02:00 felhom sudo[10965]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:55:52+02:00 felhom sudo[10965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:53+02:00 felhom sudo[10965]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:54+02:00 felhom sudo[10968]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:55:54+02:00 felhom sudo[10968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:54+02:00 felhom sudo[10968]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:54+02:00 felhom sudo[10975]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:55:54+02:00 felhom sudo[10975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:54+02:00 felhom sudo[10975]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:55:54+02:00 felhom sudo[10978]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:55:54+02:00 felhom sudo[10978]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:55:54+02:00 felhom sudo[10978]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:14+02:00 felhom sudo[11111]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:56:14+02:00 felhom sudo[11111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:14+02:00 felhom sudo[11111]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:14+02:00 felhom sudo[11118]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:56:14+02:00 felhom sudo[11118]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:14+02:00 felhom sudo[11118]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:14+02:00 felhom sudo[11121]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:56:14+02:00 felhom sudo[11121]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:14+02:00 felhom sudo[11121]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:22+02:00 felhom sudo[11163]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:56:22+02:00 felhom sudo[11163]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:22+02:00 felhom sudo[11163]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:22+02:00 felhom sudo[11166]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:56:22+02:00 felhom sudo[11166]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:22+02:00 felhom sudo[11166]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:22+02:00 felhom sudo[11169]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:56:22+02:00 felhom sudo[11169]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:22+02:00 felhom sudo[11169]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:22+02:00 felhom sudo[11176]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:56:22+02:00 felhom sudo[11176]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:22+02:00 felhom sudo[11176]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:22+02:00 felhom sudo[11179]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:56:22+02:00 felhom sudo[11179]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:22+02:00 felhom sudo[11179]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:22+02:00 felhom sudo[11184]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:56:22+02:00 felhom sudo[11184]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:22+02:00 felhom sudo[11184]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:34+02:00 felhom sudo[11269]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:56:34+02:00 felhom sudo[11269]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:34+02:00 felhom sudo[11269]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:56:34.813+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:56:34+02:00 felhom sudo[11280]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:56:34+02:00 felhom sudo[11280]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:56:34.837+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:56:34+02:00 felhom sudo[11286]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:56:34+02:00 felhom sudo[11286]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:34+02:00 felhom sudo[11286]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:34+02:00 felhom sudo[11289]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:56:34+02:00 felhom sudo[11289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:34+02:00 felhom sudo[11289]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:35+02:00 felhom sudo[11293]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:56:35+02:00 felhom sudo[11293]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:35+02:00 felhom sudo[11293]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:35+02:00 felhom sudo[11296]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:56:35+02:00 felhom sudo[11296]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:35+02:00 felhom sudo[11296]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:35+02:00 felhom sudo[11303]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:56:35+02:00 felhom sudo[11303]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:35+02:00 felhom sudo[11303]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:35+02:00 felhom sudo[11280]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:35+02:00 felhom sudo[11316]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:56:35+02:00 felhom sudo[11316]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:36+02:00 felhom sudo[11316]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:36+02:00 felhom sudo[11322]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:56:36+02:00 felhom sudo[11322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:37+02:00 felhom sudo[11322]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:37+02:00 felhom sudo[11328]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:56:37+02:00 felhom sudo[11328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:38+02:00 felhom sudo[11328]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:52+02:00 felhom sudo[11441]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:56:52+02:00 felhom sudo[11441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:52+02:00 felhom sudo[11441]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:52+02:00 felhom sudo[11444]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:56:52+02:00 felhom sudo[11444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:52+02:00 felhom sudo[11444]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:52+02:00 felhom sudo[11451]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:56:52+02:00 felhom sudo[11451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:52+02:00 felhom sudo[11451]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:52+02:00 felhom sudo[11454]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:56:52+02:00 felhom sudo[11454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:52+02:00 felhom sudo[11454]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:52+02:00 felhom sudo[11457]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:56:52+02:00 felhom sudo[11457]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:52+02:00 felhom sudo[11457]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:52+02:00 felhom sudo[11464]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:56:52+02:00 felhom sudo[11464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:52+02:00 felhom sudo[11464]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:52+02:00 felhom sudo[11467]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:56:52+02:00 felhom sudo[11467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:52+02:00 felhom sudo[11467]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:52+02:00 felhom sudo[11470]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:56:52+02:00 felhom sudo[11470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:52+02:00 felhom sudo[11470]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:54+02:00 felhom sudo[11475]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:56:54+02:00 felhom sudo[11475]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:54+02:00 felhom sudo[11475]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:54+02:00 felhom sudo[11482]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:56:54+02:00 felhom sudo[11482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:54+02:00 felhom sudo[11482]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:56:54+02:00 felhom sudo[11485]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:56:54+02:00 felhom sudo[11485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:56:54+02:00 felhom sudo[11485]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:14+02:00 felhom sudo[11603]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:57:14+02:00 felhom sudo[11603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:14+02:00 felhom sudo[11603]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:14+02:00 felhom sudo[11610]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:57:14+02:00 felhom sudo[11610]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:14+02:00 felhom sudo[11610]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:14+02:00 felhom sudo[11613]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:57:14+02:00 felhom sudo[11613]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:14+02:00 felhom sudo[11613]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:22+02:00 felhom sudo[11655]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:57:22+02:00 felhom sudo[11655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:22+02:00 felhom sudo[11655]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:22+02:00 felhom sudo[11658]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:57:22+02:00 felhom sudo[11658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:22+02:00 felhom sudo[11658]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:22+02:00 felhom sudo[11661]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:57:22+02:00 felhom sudo[11661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:22+02:00 felhom sudo[11661]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:22+02:00 felhom sudo[11668]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:57:22+02:00 felhom sudo[11668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:22+02:00 felhom sudo[11668]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:22+02:00 felhom sudo[11671]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:57:22+02:00 felhom sudo[11671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:22+02:00 felhom sudo[11671]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:22+02:00 felhom sudo[11674]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:57:22+02:00 felhom sudo[11674]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:22+02:00 felhom sudo[11674]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:34+02:00 felhom sudo[11761]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:57:34+02:00 felhom sudo[11761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:34+02:00 felhom sudo[11761]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:57:34.814+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:57:34+02:00 felhom sudo[11770]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:57:34+02:00 felhom sudo[11770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:57:34.837+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:57:34+02:00 felhom sudo[11777]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:57:34+02:00 felhom sudo[11777]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:34+02:00 felhom sudo[11777]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:34+02:00 felhom sudo[11780]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:57:34+02:00 felhom sudo[11780]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:34+02:00 felhom sudo[11780]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:35+02:00 felhom sudo[11784]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:57:35+02:00 felhom sudo[11784]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:35+02:00 felhom sudo[11784]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:35+02:00 felhom sudo[11787]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:57:35+02:00 felhom sudo[11787]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:35+02:00 felhom sudo[11787]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:35+02:00 felhom sudo[11794]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:57:35+02:00 felhom sudo[11794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:35+02:00 felhom sudo[11794]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:35+02:00 felhom sudo[11770]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:35+02:00 felhom sudo[11800]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:57:35+02:00 felhom sudo[11800]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:36+02:00 felhom sudo[11800]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:36+02:00 felhom sudo[11806]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:57:36+02:00 felhom sudo[11806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:37+02:00 felhom sudo[11806]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:37+02:00 felhom sudo[11812]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:57:37+02:00 felhom sudo[11812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:38+02:00 felhom sudo[11812]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:52+02:00 felhom sudo[11939]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:57:52+02:00 felhom sudo[11939]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:52+02:00 felhom sudo[11939]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:52+02:00 felhom sudo[11942]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:57:52+02:00 felhom sudo[11942]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:52+02:00 felhom sudo[11942]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:52+02:00 felhom sudo[11949]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:57:52+02:00 felhom sudo[11949]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:52+02:00 felhom sudo[11949]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:52+02:00 felhom sudo[11952]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:57:52+02:00 felhom sudo[11952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:52+02:00 felhom sudo[11952]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:52+02:00 felhom sudo[11955]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:57:52+02:00 felhom sudo[11955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:52+02:00 felhom sudo[11955]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:52+02:00 felhom sudo[11962]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:57:52+02:00 felhom sudo[11962]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:52+02:00 felhom sudo[11962]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:52+02:00 felhom sudo[11965]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:57:52+02:00 felhom sudo[11965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:52+02:00 felhom sudo[11965]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:52+02:00 felhom sudo[11968]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:57:52+02:00 felhom sudo[11968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:52+02:00 felhom sudo[11968]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:54+02:00 felhom sudo[11973]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:57:54+02:00 felhom sudo[11973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:54+02:00 felhom sudo[11973]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:54+02:00 felhom sudo[11980]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:57:54+02:00 felhom sudo[11980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:54+02:00 felhom sudo[11980]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:57:54+02:00 felhom sudo[11983]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:57:54+02:00 felhom sudo[11983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:57:54+02:00 felhom sudo[11983]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:14+02:00 felhom sudo[12102]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:58:14+02:00 felhom sudo[12102]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:14+02:00 felhom sudo[12102]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:14+02:00 felhom sudo[12109]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:58:14+02:00 felhom sudo[12109]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:14+02:00 felhom sudo[12109]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:14+02:00 felhom sudo[12112]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:58:14+02:00 felhom sudo[12112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:14+02:00 felhom sudo[12112]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:22+02:00 felhom sudo[12154]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:58:22+02:00 felhom sudo[12154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:22+02:00 felhom sudo[12154]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:22+02:00 felhom sudo[12157]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:58:22+02:00 felhom sudo[12157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:22+02:00 felhom sudo[12157]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:22+02:00 felhom sudo[12160]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:58:22+02:00 felhom sudo[12160]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:22+02:00 felhom sudo[12160]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:22+02:00 felhom sudo[12167]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:58:22+02:00 felhom sudo[12167]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:22+02:00 felhom sudo[12167]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:22+02:00 felhom sudo[12170]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:58:22+02:00 felhom sudo[12170]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:22+02:00 felhom sudo[12170]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:22+02:00 felhom sudo[12173]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:58:22+02:00 felhom sudo[12173]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:22+02:00 felhom sudo[12173]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:34+02:00 felhom sudo[12259]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:58:34+02:00 felhom sudo[12259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:34+02:00 felhom sudo[12259]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:58:34.811+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:58:34+02:00 felhom sudo[12267]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:58:34+02:00 felhom sudo[12267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:58:34.833+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:58:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:58:34.833+02:00 level=INFO msg="guest-power: watchdog alive" sweeps_since_boot=10 guests_evaluated=1 currently_stopped=0 +2026-09-14T17:58:34+02:00 felhom sudo[12275]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:58:34+02:00 felhom sudo[12275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:34+02:00 felhom sudo[12275]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:34+02:00 felhom sudo[12278]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:58:34+02:00 felhom sudo[12278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:34+02:00 felhom sudo[12278]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:35+02:00 felhom sudo[12282]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:58:35+02:00 felhom sudo[12282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:35+02:00 felhom sudo[12282]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:35+02:00 felhom sudo[12285]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:58:35+02:00 felhom sudo[12285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:35+02:00 felhom sudo[12285]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:35+02:00 felhom sudo[12292]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:58:35+02:00 felhom sudo[12292]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:35+02:00 felhom sudo[12292]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:35+02:00 felhom sudo[12267]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:35+02:00 felhom sudo[12298]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:58:35+02:00 felhom sudo[12298]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:36+02:00 felhom sudo[12298]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:36+02:00 felhom sudo[12304]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:58:36+02:00 felhom sudo[12304]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:37+02:00 felhom sudo[12304]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:37+02:00 felhom sudo[12310]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:58:37+02:00 felhom sudo[12310]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:38+02:00 felhom sudo[12310]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:39+02:00 felhom sudo[12318]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:58:39+02:00 felhom sudo[12318]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:40+02:00 felhom sudo[12318]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:40+02:00 felhom sudo[12324]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- docker exec felhom-controller cat /opt/docker/felhom-controller/controller.yaml +2026-09-14T17:58:40+02:00 felhom sudo[12324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:41+02:00 felhom sudo[12324]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:52+02:00 felhom sudo[12467]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:58:52+02:00 felhom sudo[12467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:52+02:00 felhom sudo[12467]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:52+02:00 felhom sudo[12470]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:58:52+02:00 felhom sudo[12470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:52+02:00 felhom sudo[12470]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:52+02:00 felhom sudo[12477]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:58:52+02:00 felhom sudo[12477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:52+02:00 felhom sudo[12477]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:52+02:00 felhom sudo[12480]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:58:52+02:00 felhom sudo[12480]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:52+02:00 felhom sudo[12480]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:52+02:00 felhom sudo[12483]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:58:52+02:00 felhom sudo[12483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:52+02:00 felhom sudo[12483]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:52+02:00 felhom sudo[12490]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:58:52+02:00 felhom sudo[12490]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:52+02:00 felhom sudo[12490]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:52+02:00 felhom sudo[12493]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:58:52+02:00 felhom sudo[12493]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:52+02:00 felhom sudo[12493]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:52+02:00 felhom sudo[12496]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:58:52+02:00 felhom sudo[12496]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:52+02:00 felhom sudo[12496]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:54+02:00 felhom sudo[12501]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:58:54+02:00 felhom sudo[12501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:54+02:00 felhom sudo[12501]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:54+02:00 felhom sudo[12508]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:58:54+02:00 felhom sudo[12508]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:54+02:00 felhom sudo[12508]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:58:54+02:00 felhom sudo[12511]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:58:54+02:00 felhom sudo[12511]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:58:54+02:00 felhom sudo[12511]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:14+02:00 felhom sudo[12629]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:59:14+02:00 felhom sudo[12629]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:14+02:00 felhom sudo[12629]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:14+02:00 felhom sudo[12636]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:14+02:00 felhom sudo[12636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:14+02:00 felhom sudo[12636]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:14+02:00 felhom sudo[12639]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:14+02:00 felhom sudo[12639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:14+02:00 felhom sudo[12639]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:22+02:00 felhom sudo[12681]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:22+02:00 felhom sudo[12681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:22+02:00 felhom sudo[12681]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:22+02:00 felhom sudo[12684]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:22+02:00 felhom sudo[12684]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:22+02:00 felhom sudo[12684]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:22+02:00 felhom sudo[12687]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:59:22+02:00 felhom sudo[12687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:22+02:00 felhom sudo[12687]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:22+02:00 felhom sudo[12694]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:22+02:00 felhom sudo[12694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:22+02:00 felhom sudo[12694]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:22+02:00 felhom sudo[12697]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:22+02:00 felhom sudo[12697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:22+02:00 felhom sudo[12697]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:22+02:00 felhom sudo[12700]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:59:22+02:00 felhom sudo[12700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:22+02:00 felhom sudo[12700]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:34+02:00 felhom sudo[12786]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:59:34+02:00 felhom sudo[12786]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:34+02:00 felhom sudo[12786]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:59:34.815+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:59:34+02:00 felhom sudo[12794]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T17:59:34+02:00 felhom sudo[12794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T17:59:34.839+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T17:59:34+02:00 felhom sudo[12802]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:34+02:00 felhom sudo[12802]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:34+02:00 felhom sudo[12802]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:35+02:00 felhom sudo[12805]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:35+02:00 felhom sudo[12805]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:35+02:00 felhom sudo[12805]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:35+02:00 felhom sudo[12809]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T17:59:35+02:00 felhom sudo[12809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:35+02:00 felhom sudo[12809]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:35+02:00 felhom sudo[12812]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T17:59:35+02:00 felhom sudo[12812]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:35+02:00 felhom sudo[12812]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:35+02:00 felhom sudo[12819]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T17:59:35+02:00 felhom sudo[12819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:35+02:00 felhom sudo[12819]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:35+02:00 felhom sudo[12794]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:35+02:00 felhom sudo[12825]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T17:59:35+02:00 felhom sudo[12825]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:36+02:00 felhom sudo[12825]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:36+02:00 felhom sudo[12831]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T17:59:36+02:00 felhom sudo[12831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:37+02:00 felhom sudo[12831]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:37+02:00 felhom sudo[12837]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T17:59:37+02:00 felhom sudo[12837]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:38+02:00 felhom sudo[12837]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:51+02:00 felhom sudo[12947]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:51+02:00 felhom sudo[12947]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:51+02:00 felhom sudo[12947]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:51+02:00 felhom sudo[12950]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:51+02:00 felhom sudo[12950]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:51+02:00 felhom sudo[12950]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13022]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:52+02:00 felhom sudo[13022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13022]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13042]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:52+02:00 felhom sudo[13042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13044]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:52+02:00 felhom sudo[13044]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13042]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13044]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13059]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:52+02:00 felhom sudo[13059]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13059]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13122]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:52+02:00 felhom sudo[13122]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13122]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13125]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:52+02:00 felhom sudo[13125]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13125]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13128]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:59:52+02:00 felhom sudo[13128]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13128]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13135]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:52+02:00 felhom sudo[13135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13135]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13138]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:52+02:00 felhom sudo[13138]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13138]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:52+02:00 felhom sudo[13141]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T17:59:52+02:00 felhom sudo[13141]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:52+02:00 felhom sudo[13141]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:54+02:00 felhom sudo[13146]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:59:54+02:00 felhom sudo[13146]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:54+02:00 felhom sudo[13146]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:54+02:00 felhom sudo[13153]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T17:59:54+02:00 felhom sudo[13153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:54+02:00 felhom sudo[13153]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:59:54+02:00 felhom sudo[13156]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T17:59:54+02:00 felhom sudo[13156]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T17:59:54+02:00 felhom sudo[13156]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:14+02:00 felhom sudo[13275]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:00:14+02:00 felhom sudo[13275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:14+02:00 felhom sudo[13275]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:14+02:00 felhom sudo[13283]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:00:14+02:00 felhom sudo[13283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:14+02:00 felhom sudo[13283]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:14+02:00 felhom sudo[13289]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:00:14+02:00 felhom sudo[13289]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:14+02:00 felhom sudo[13289]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:22+02:00 felhom sudo[13696]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:00:22+02:00 felhom sudo[13696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:22+02:00 felhom sudo[13696]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:22+02:00 felhom sudo[13702]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:00:22+02:00 felhom sudo[13702]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:22+02:00 felhom sudo[13702]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:22+02:00 felhom sudo[13708]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:00:22+02:00 felhom sudo[13708]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:22+02:00 felhom sudo[13708]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:22+02:00 felhom sudo[13723]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:00:22+02:00 felhom sudo[13723]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:22+02:00 felhom sudo[13723]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:22+02:00 felhom sudo[13728]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:00:22+02:00 felhom sudo[13728]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:22+02:00 felhom sudo[13728]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:23+02:00 felhom sudo[13735]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:00:23+02:00 felhom sudo[13735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:23+02:00 felhom sudo[13735]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:34+02:00 felhom sudo[14567]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:00:34+02:00 felhom sudo[14567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:34+02:00 felhom sudo[14567]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:00:34.813+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:00:34+02:00 felhom sudo[14576]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:00:34+02:00 felhom sudo[14576]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:00:34.836+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:00:34+02:00 felhom sudo[14583]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:00:34+02:00 felhom sudo[14583]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:34+02:00 felhom sudo[14583]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:34+02:00 felhom sudo[14586]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:00:34+02:00 felhom sudo[14586]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:34+02:00 felhom sudo[14586]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:35+02:00 felhom sudo[14590]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:00:35+02:00 felhom sudo[14590]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:35+02:00 felhom sudo[14590]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:35+02:00 felhom sudo[14593]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:00:35+02:00 felhom sudo[14593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:35+02:00 felhom sudo[14593]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:35+02:00 felhom sudo[14600]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:00:35+02:00 felhom sudo[14600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:35+02:00 felhom sudo[14600]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:35+02:00 felhom sudo[14576]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:35+02:00 felhom sudo[14606]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:00:35+02:00 felhom sudo[14606]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:36+02:00 felhom sudo[14606]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:36+02:00 felhom sudo[14612]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:00:36+02:00 felhom sudo[14612]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:37+02:00 felhom sudo[14612]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:37+02:00 felhom sudo[14618]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:00:37+02:00 felhom sudo[14618]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:38+02:00 felhom sudo[14618]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:52+02:00 felhom sudo[14731]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:00:52+02:00 felhom sudo[14731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:52+02:00 felhom sudo[14731]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:52+02:00 felhom sudo[14735]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:00:52+02:00 felhom sudo[14735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:52+02:00 felhom sudo[14735]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:52+02:00 felhom sudo[14748]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:00:52+02:00 felhom sudo[14748]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:52+02:00 felhom sudo[14748]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:52+02:00 felhom sudo[14751]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:00:52+02:00 felhom sudo[14751]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:52+02:00 felhom sudo[14751]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:52+02:00 felhom sudo[14754]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:00:52+02:00 felhom sudo[14754]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:52+02:00 felhom sudo[14754]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:52+02:00 felhom sudo[14761]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:00:52+02:00 felhom sudo[14761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:52+02:00 felhom sudo[14761]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:52+02:00 felhom sudo[14764]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:00:52+02:00 felhom sudo[14764]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:52+02:00 felhom sudo[14764]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:52+02:00 felhom sudo[14767]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:00:52+02:00 felhom sudo[14767]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:52+02:00 felhom sudo[14767]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:54+02:00 felhom sudo[14772]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:00:54+02:00 felhom sudo[14772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:54+02:00 felhom sudo[14772]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:54+02:00 felhom sudo[14779]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:00:54+02:00 felhom sudo[14779]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:54+02:00 felhom sudo[14779]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:00:54+02:00 felhom sudo[14782]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:00:54+02:00 felhom sudo[14782]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:00:54+02:00 felhom sudo[14782]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:14+02:00 felhom sudo[14900]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:01:14+02:00 felhom sudo[14900]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:14+02:00 felhom sudo[14900]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:14+02:00 felhom sudo[14907]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:01:14+02:00 felhom sudo[14907]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:14+02:00 felhom sudo[14907]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:14+02:00 felhom sudo[14910]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:01:14+02:00 felhom sudo[14910]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:14+02:00 felhom sudo[14910]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:22+02:00 felhom sudo[14952]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:01:22+02:00 felhom sudo[14952]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:22+02:00 felhom sudo[14952]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:22+02:00 felhom sudo[14955]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:01:22+02:00 felhom sudo[14955]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:22+02:00 felhom sudo[14955]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:22+02:00 felhom sudo[14958]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:01:22+02:00 felhom sudo[14958]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:22+02:00 felhom sudo[14958]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:22+02:00 felhom sudo[14965]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:01:22+02:00 felhom sudo[14965]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:22+02:00 felhom sudo[14965]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:22+02:00 felhom sudo[14968]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:01:22+02:00 felhom sudo[14968]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:22+02:00 felhom sudo[14968]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:22+02:00 felhom sudo[14971]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:01:22+02:00 felhom sudo[14971]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:22+02:00 felhom sudo[14971]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:34+02:00 felhom sudo[15060]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:01:34+02:00 felhom sudo[15060]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:34+02:00 felhom sudo[15060]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:01:34.813+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:01:34+02:00 felhom sudo[15071]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:01:34+02:00 felhom sudo[15071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:01:34.835+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:01:34+02:00 felhom sudo[15077]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:01:34+02:00 felhom sudo[15077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:34+02:00 felhom sudo[15077]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:34+02:00 felhom sudo[15080]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:01:34+02:00 felhom sudo[15080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:34+02:00 felhom sudo[15080]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:35+02:00 felhom sudo[15084]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:01:35+02:00 felhom sudo[15084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:35+02:00 felhom sudo[15084]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:35+02:00 felhom sudo[15087]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:01:35+02:00 felhom sudo[15087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:35+02:00 felhom sudo[15087]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:35+02:00 felhom sudo[15094]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:01:35+02:00 felhom sudo[15094]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:35+02:00 felhom sudo[15094]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:35+02:00 felhom sudo[15071]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:35+02:00 felhom sudo[15100]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:01:35+02:00 felhom sudo[15100]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:36+02:00 felhom sudo[15100]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:36+02:00 felhom sudo[15106]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:01:36+02:00 felhom sudo[15106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:37+02:00 felhom sudo[15106]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:37+02:00 felhom sudo[15112]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:01:37+02:00 felhom sudo[15112]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:38+02:00 felhom sudo[15112]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:52+02:00 felhom sudo[15232]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:01:52+02:00 felhom sudo[15232]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:52+02:00 felhom sudo[15232]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:52+02:00 felhom sudo[15235]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:01:52+02:00 felhom sudo[15235]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:52+02:00 felhom sudo[15235]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:52+02:00 felhom sudo[15245]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:01:52+02:00 felhom sudo[15245]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:52+02:00 felhom sudo[15245]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:52+02:00 felhom sudo[15248]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:01:52+02:00 felhom sudo[15248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:52+02:00 felhom sudo[15248]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:52+02:00 felhom sudo[15261]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:01:52+02:00 felhom sudo[15261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:52+02:00 felhom sudo[15261]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:52+02:00 felhom sudo[15275]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:01:52+02:00 felhom sudo[15275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:52+02:00 felhom sudo[15275]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:52+02:00 felhom sudo[15278]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:01:52+02:00 felhom sudo[15278]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:52+02:00 felhom sudo[15278]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:52+02:00 felhom sudo[15282]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:01:52+02:00 felhom sudo[15282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:52+02:00 felhom sudo[15282]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:54+02:00 felhom sudo[15329]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:01:54+02:00 felhom sudo[15329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:54+02:00 felhom sudo[15329]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:54+02:00 felhom sudo[15336]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:01:54+02:00 felhom sudo[15336]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:54+02:00 felhom sudo[15336]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:01:54+02:00 felhom sudo[15339]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:01:54+02:00 felhom sudo[15339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:01:54+02:00 felhom sudo[15339]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:14+02:00 felhom sudo[15485]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:02:14+02:00 felhom sudo[15485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:14+02:00 felhom sudo[15485]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:14+02:00 felhom sudo[15492]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:02:14+02:00 felhom sudo[15492]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:14+02:00 felhom sudo[15492]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:14+02:00 felhom sudo[15495]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:02:14+02:00 felhom sudo[15495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:14+02:00 felhom sudo[15495]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:22+02:00 felhom sudo[15537]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:02:22+02:00 felhom sudo[15537]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:22+02:00 felhom sudo[15537]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:22+02:00 felhom sudo[15540]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:02:22+02:00 felhom sudo[15540]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:22+02:00 felhom sudo[15540]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:22+02:00 felhom sudo[15543]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:02:22+02:00 felhom sudo[15543]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:22+02:00 felhom sudo[15543]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:22+02:00 felhom sudo[15550]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:02:22+02:00 felhom sudo[15550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:22+02:00 felhom sudo[15550]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:22+02:00 felhom sudo[15553]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:02:22+02:00 felhom sudo[15553]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:22+02:00 felhom sudo[15553]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:22+02:00 felhom sudo[15556]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:02:22+02:00 felhom sudo[15556]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:22+02:00 felhom sudo[15556]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:34+02:00 felhom sudo[15642]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:02:34+02:00 felhom sudo[15642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:34+02:00 felhom sudo[15642]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:02:34.810+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:02:34+02:00 felhom sudo[15651]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:02:34+02:00 felhom sudo[15651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:02:34.831+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:02:34+02:00 felhom sudo[15658]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:02:34+02:00 felhom sudo[15658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:34+02:00 felhom sudo[15658]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:34+02:00 felhom sudo[15661]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:02:34+02:00 felhom sudo[15661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:34+02:00 felhom sudo[15661]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:35+02:00 felhom sudo[15665]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:02:35+02:00 felhom sudo[15665]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:35+02:00 felhom sudo[15665]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:35+02:00 felhom sudo[15668]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:02:35+02:00 felhom sudo[15668]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:35+02:00 felhom sudo[15668]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:35+02:00 felhom sudo[15675]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:02:35+02:00 felhom sudo[15675]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:35+02:00 felhom sudo[15675]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:35+02:00 felhom sudo[15651]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:35+02:00 felhom sudo[15681]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:02:35+02:00 felhom sudo[15681]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:36+02:00 felhom sudo[15681]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:36+02:00 felhom sudo[15687]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:02:36+02:00 felhom sudo[15687]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:37+02:00 felhom sudo[15687]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:37+02:00 felhom sudo[15693]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:02:37+02:00 felhom sudo[15693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:38+02:00 felhom sudo[15693]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:52+02:00 felhom sudo[15806]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:02:52+02:00 felhom sudo[15806]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:52+02:00 felhom sudo[15806]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:52+02:00 felhom sudo[15809]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:02:52+02:00 felhom sudo[15809]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:52+02:00 felhom sudo[15809]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:52+02:00 felhom sudo[15816]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:02:52+02:00 felhom sudo[15816]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:52+02:00 felhom sudo[15816]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:52+02:00 felhom sudo[15819]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:02:52+02:00 felhom sudo[15819]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:52+02:00 felhom sudo[15819]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:52+02:00 felhom sudo[15822]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:02:52+02:00 felhom sudo[15822]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:52+02:00 felhom sudo[15822]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:52+02:00 felhom sudo[15829]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:02:52+02:00 felhom sudo[15829]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:52+02:00 felhom sudo[15829]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:52+02:00 felhom sudo[15832]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:02:52+02:00 felhom sudo[15832]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:52+02:00 felhom sudo[15832]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:53+02:00 felhom sudo[15835]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:02:53+02:00 felhom sudo[15835]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:53+02:00 felhom sudo[15835]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:54+02:00 felhom sudo[15840]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:02:54+02:00 felhom sudo[15840]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:54+02:00 felhom sudo[15840]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:54+02:00 felhom sudo[15847]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:02:54+02:00 felhom sudo[15847]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:54+02:00 felhom sudo[15847]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:02:54+02:00 felhom sudo[15850]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:02:54+02:00 felhom sudo[15850]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:02:54+02:00 felhom sudo[15850]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:14+02:00 felhom sudo[15975]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:03:14+02:00 felhom sudo[15975]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:14+02:00 felhom sudo[15975]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:14+02:00 felhom sudo[15982]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:03:14+02:00 felhom sudo[15982]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:14+02:00 felhom sudo[15982]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:14+02:00 felhom sudo[15985]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:03:14+02:00 felhom sudo[15985]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:14+02:00 felhom sudo[15985]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:22+02:00 felhom sudo[16027]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:03:22+02:00 felhom sudo[16027]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:22+02:00 felhom sudo[16027]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:22+02:00 felhom sudo[16030]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:03:22+02:00 felhom sudo[16030]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:22+02:00 felhom sudo[16030]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:22+02:00 felhom sudo[16033]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:03:22+02:00 felhom sudo[16033]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:22+02:00 felhom sudo[16033]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:22+02:00 felhom sudo[16040]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:03:22+02:00 felhom sudo[16040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:22+02:00 felhom sudo[16040]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:22+02:00 felhom sudo[16043]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:03:22+02:00 felhom sudo[16043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:22+02:00 felhom sudo[16043]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:23+02:00 felhom sudo[16046]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:03:23+02:00 felhom sudo[16046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:23+02:00 felhom sudo[16046]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:34+02:00 felhom sudo[16135]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:03:34+02:00 felhom sudo[16135]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:34+02:00 felhom sudo[16135]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:03:34.808+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:03:34+02:00 felhom sudo[16142]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:03:34+02:00 felhom sudo[16142]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:03:34.839+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:03:34+02:00 felhom sudo[16151]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:03:34+02:00 felhom sudo[16151]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:34+02:00 felhom sudo[16151]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:34+02:00 felhom sudo[16154]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:03:34+02:00 felhom sudo[16154]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:35+02:00 felhom sudo[16154]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:35+02:00 felhom sudo[16158]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:03:35+02:00 felhom sudo[16158]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:35+02:00 felhom sudo[16158]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:35+02:00 felhom sudo[16161]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:03:35+02:00 felhom sudo[16161]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:35+02:00 felhom sudo[16161]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:35+02:00 felhom sudo[16168]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:03:35+02:00 felhom sudo[16168]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:35+02:00 felhom sudo[16168]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:35+02:00 felhom sudo[16177]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:03:35+02:00 felhom sudo[16177]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:35+02:00 felhom sudo[16177]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:35+02:00 felhom sudo[16180]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:03:35+02:00 felhom sudo[16180]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:35+02:00 felhom sudo[16142]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:35+02:00 felhom sudo[16186]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:03:35+02:00 felhom sudo[16186]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:35+02:00 felhom sudo[16180]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:36+02:00 felhom sudo[16327]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:03:36+02:00 felhom sudo[16327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:36+02:00 felhom sudo[16327]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:36+02:00 felhom sudo[16332]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/sshd -T -f /etc/felhom-sshd/sshd_config +2026-09-14T18:03:36+02:00 felhom sudo[16332]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:36+02:00 felhom sudo[16332]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:36+02:00 felhom sudo[16335]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/sshd -t -f /etc/felhom-sshd/sshd_config +2026-09-14T18:03:36+02:00 felhom sudo[16335]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:36+02:00 felhom sudo[16335]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:36+02:00 felhom sudo[16339]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:03:36+02:00 felhom sudo[16339]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:36+02:00 felhom sudo[16339]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:36+02:00 felhom sudo[16342]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:03:36+02:00 felhom sudo[16342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:36+02:00 felhom sudo[16342]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:36+02:00 felhom sudo[16186]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:36+02:00 felhom sudo[16348]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:03:36+02:00 felhom sudo[16348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:37+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:03:37.048+02:00 level=INFO msg="desired: updated from hub" generation=2 guests=0 +2026-09-14T18:03:37+02:00 felhom sudo[16354]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:03:37+02:00 felhom sudo[16354]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:37+02:00 felhom sudo[16354]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:37+02:00 felhom sudo[16358]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:03:37+02:00 felhom sudo[16358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:37+02:00 felhom sudo[16359]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:03:37+02:00 felhom sudo[16359]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:37+02:00 felhom sudo[16358]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:37+02:00 felhom sudo[16359]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:37+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:03:37.139+02:00 level=INFO msg="pbsdr: one-time token secret consumed (single-use; value withheld from logs)" storage_id=felhom-pbs secret_len=36 +2026-09-14T18:03:37+02:00 felhom sudo[16365]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/local/sbin/felhom-pbs-apply create felhom-pbs 10.77.0.1 felhom-offsite tester-1 felhom@pbs!tester-1 c6:07:28:3f:5b:7b:5a:41:90:28:d7:ca:4f:37:14:70:56:39:2e:2f:0b:71:e8:06:ca:60:4a:d5:56:5f:3c:fd /etc/pve/priv/storage +2026-09-14T18:03:37+02:00 felhom sudo[16365]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:37+02:00 felhom sudo[16348]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:37+02:00 felhom sudo[16377]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:03:37+02:00 felhom sudo[16377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:37+02:00 felhom sudo[16365]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:38+02:00 felhom sudo[16380]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/local/sbin/felhom-pbs-apply grant felhom-pbs +2026-09-14T18:03:38+02:00 felhom sudo[16380]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:38+02:00 felhom sudo[16377]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:39+02:00 felhom sudo[16380]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:39+02:00 felhom sudo[16392]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:03:39+02:00 felhom sudo[16392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:39+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:03:39.652+02:00 level=INFO msg="pbsdr: seeded escrow.pbs_storage_id (the ceremony one-liner needs no flags)" storage_id=felhom-pbs +2026-09-14T18:03:39+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:03:39.652+02:00 level=INFO msg="pbsdr: converged" state=applied storage_id=felhom-pbs +2026-09-14T18:03:40+02:00 felhom sudo[16392]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:40+02:00 felhom sudo[16412]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- docker exec felhom-controller cat /opt/docker/felhom-controller/controller.yaml +2026-09-14T18:03:40+02:00 felhom sudo[16412]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:41+02:00 felhom sudo[16412]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:52+02:00 felhom sudo[16564]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:03:52+02:00 felhom sudo[16564]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:52+02:00 felhom sudo[16564]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:52+02:00 felhom sudo[16567]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:03:52+02:00 felhom sudo[16567]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:52+02:00 felhom sudo[16567]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:52+02:00 felhom sudo[16579]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:03:52+02:00 felhom sudo[16579]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:53+02:00 felhom sudo[16579]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:53+02:00 felhom sudo[16582]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:03:53+02:00 felhom sudo[16582]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:53+02:00 felhom sudo[16582]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:53+02:00 felhom sudo[16585]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:03:53+02:00 felhom sudo[16585]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:53+02:00 felhom sudo[16585]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:53+02:00 felhom sudo[16597]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:03:53+02:00 felhom sudo[16597]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:53+02:00 felhom sudo[16597]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:53+02:00 felhom sudo[16600]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:03:53+02:00 felhom sudo[16600]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:53+02:00 felhom sudo[16600]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:53+02:00 felhom sudo[16603]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:03:53+02:00 felhom sudo[16603]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:53+02:00 felhom sudo[16603]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:54+02:00 felhom sudo[16608]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:03:54+02:00 felhom sudo[16608]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:54+02:00 felhom sudo[16608]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:55+02:00 felhom sudo[16620]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:03:55+02:00 felhom sudo[16620]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:55+02:00 felhom sudo[16620]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:03:55+02:00 felhom sudo[16623]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:03:55+02:00 felhom sudo[16623]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:03:55+02:00 felhom sudo[16623]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:14+02:00 felhom sudo[16758]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:04:14+02:00 felhom sudo[16758]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:14+02:00 felhom sudo[16758]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:15+02:00 felhom sudo[16772]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:15+02:00 felhom sudo[16772]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:15+02:00 felhom sudo[16772]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:15+02:00 felhom sudo[16775]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:15+02:00 felhom sudo[16775]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:15+02:00 felhom sudo[16775]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:23+02:00 felhom sudo[16827]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:23+02:00 felhom sudo[16827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:23+02:00 felhom sudo[16827]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:23+02:00 felhom sudo[16830]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:23+02:00 felhom sudo[16830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:23+02:00 felhom sudo[16830]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:23+02:00 felhom sudo[16833]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:04:23+02:00 felhom sudo[16833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:23+02:00 felhom sudo[16833]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:23+02:00 felhom sudo[16845]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:23+02:00 felhom sudo[16845]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:23+02:00 felhom sudo[16845]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:23+02:00 felhom sudo[16848]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:23+02:00 felhom sudo[16848]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:23+02:00 felhom sudo[16848]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:23+02:00 felhom sudo[16851]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:04:23+02:00 felhom sudo[16851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:23+02:00 felhom sudo[16851]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:34+02:00 felhom sudo[16940]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:04:34+02:00 felhom sudo[16940]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:34+02:00 felhom sudo[16940]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:04:34.816+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:04:34+02:00 felhom sudo[16948]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:04:34+02:00 felhom sudo[16948]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:35+02:00 felhom sudo[16961]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:35+02:00 felhom sudo[16961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:35+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:04:35.217+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:04:35+02:00 felhom sudo[16961]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:35+02:00 felhom sudo[16966]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:35+02:00 felhom sudo[16966]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:35+02:00 felhom sudo[16966]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:35+02:00 felhom sudo[16970]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:04:35+02:00 felhom sudo[16970]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:35+02:00 felhom sudo[16970]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:35+02:00 felhom sudo[16973]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:04:35+02:00 felhom sudo[16973]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:35+02:00 felhom sudo[16973]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:35+02:00 felhom sudo[16980]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:04:35+02:00 felhom sudo[16980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:35+02:00 felhom sudo[16980]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:35+02:00 felhom sudo[16948]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:35+02:00 felhom sudo[16986]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:04:35+02:00 felhom sudo[16986]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:36+02:00 felhom sudo[16986]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:36+02:00 felhom sudo[16992]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:04:36+02:00 felhom sudo[16992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:37+02:00 felhom sudo[16992]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:37+02:00 felhom sudo[16998]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:04:37+02:00 felhom sudo[16998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:38+02:00 felhom sudo[16998]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:52+02:00 felhom sudo[17259]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:52+02:00 felhom sudo[17259]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:52+02:00 felhom sudo[17259]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:52+02:00 felhom sudo[17285]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:52+02:00 felhom sudo[17285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:52+02:00 felhom sudo[17285]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:52+02:00 felhom sudo[17374]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:52+02:00 felhom sudo[17374]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:52+02:00 felhom sudo[17374]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:52+02:00 felhom sudo[17377]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:52+02:00 felhom sudo[17377]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:52+02:00 felhom sudo[17377]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:52+02:00 felhom sudo[17387]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:52+02:00 felhom sudo[17387]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:52+02:00 felhom sudo[17387]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:52+02:00 felhom sudo[17390]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:52+02:00 felhom sudo[17390]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:52+02:00 felhom sudo[17390]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:52+02:00 felhom sudo[17402]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:52+02:00 felhom sudo[17402]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:53+02:00 felhom sudo[17402]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:53+02:00 felhom sudo[17405]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:53+02:00 felhom sudo[17405]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:53+02:00 felhom sudo[17405]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:53+02:00 felhom sudo[17408]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:04:53+02:00 felhom sudo[17408]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:53+02:00 felhom sudo[17408]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:53+02:00 felhom sudo[17429]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:53+02:00 felhom sudo[17429]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:53+02:00 felhom sudo[17429]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:53+02:00 felhom sudo[17440]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:53+02:00 felhom sudo[17440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:53+02:00 felhom sudo[17440]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:53+02:00 felhom sudo[17444]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:04:53+02:00 felhom sudo[17444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:53+02:00 felhom sudo[17444]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:54+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:04:54.106+02:00 level=INFO msg="local-api: backup reached snapshotted (app may resume)" vmid=9201 target=felhom-pbs job=backup-9201-felhom-pbs-1789401893066955376 +2026-09-14T18:04:54+02:00 felhom sudo[17499]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:04:54+02:00 felhom sudo[17499]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:54+02:00 felhom sudo[17499]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:55+02:00 felhom sudo[17513]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:04:55+02:00 felhom sudo[17513]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:55+02:00 felhom sudo[17513]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:04:55+02:00 felhom sudo[17516]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:04:55+02:00 felhom sudo[17516]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:04:55+02:00 felhom sudo[17516]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:14+02:00 felhom sudo[17650]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:05:14+02:00 felhom sudo[17650]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:14+02:00 felhom sudo[17650]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:15+02:00 felhom sudo[17664]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:05:15+02:00 felhom sudo[17664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:15+02:00 felhom sudo[17664]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:15+02:00 felhom sudo[17667]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:05:15+02:00 felhom sudo[17667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:15+02:00 felhom sudo[17667]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:23+02:00 felhom sudo[17719]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:05:23+02:00 felhom sudo[17719]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:23+02:00 felhom sudo[17719]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:23+02:00 felhom sudo[17722]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:05:23+02:00 felhom sudo[17722]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:23+02:00 felhom sudo[17722]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:23+02:00 felhom sudo[17725]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:05:23+02:00 felhom sudo[17725]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:23+02:00 felhom sudo[17725]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:23+02:00 felhom sudo[17737]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:05:23+02:00 felhom sudo[17737]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:23+02:00 felhom sudo[17737]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:23+02:00 felhom sudo[17740]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:05:23+02:00 felhom sudo[17740]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:23+02:00 felhom sudo[17740]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:23+02:00 felhom sudo[17743]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:05:23+02:00 felhom sudo[17743]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:23+02:00 felhom sudo[17743]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:34+02:00 felhom sudo[17833]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:05:34+02:00 felhom sudo[17833]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:34+02:00 felhom sudo[17833]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:05:34.832+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:05:34+02:00 felhom sudo[17841]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:05:34+02:00 felhom sudo[17841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:35+02:00 felhom sudo[17854]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:05:35+02:00 felhom sudo[17854]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:35+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:05:35.355+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:05:35+02:00 felhom sudo[17854]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:35+02:00 felhom sudo[17860]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:05:35+02:00 felhom sudo[17860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:35+02:00 felhom sudo[17861]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:05:35+02:00 felhom sudo[17861]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:35+02:00 felhom sudo[17861]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:35+02:00 felhom sudo[17860]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:35+02:00 felhom sudo[17866]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:05:35+02:00 felhom sudo[17866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:35+02:00 felhom sudo[17866]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:35+02:00 felhom sudo[17873]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:05:35+02:00 felhom sudo[17873]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:35+02:00 felhom sudo[17873]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:36+02:00 felhom sudo[17841]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:36+02:00 felhom sudo[17879]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:05:36+02:00 felhom sudo[17879]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:37+02:00 felhom sudo[17879]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:37+02:00 felhom sudo[17886]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:05:37+02:00 felhom sudo[17886]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:38+02:00 felhom sudo[17886]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:38+02:00 felhom sudo[17892]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:05:38+02:00 felhom sudo[17892]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:39+02:00 felhom sudo[17892]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:52+02:00 felhom sudo[18028]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:05:52+02:00 felhom sudo[18028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:52+02:00 felhom sudo[18028]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:52+02:00 felhom sudo[18031]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:05:52+02:00 felhom sudo[18031]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:52+02:00 felhom sudo[18031]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:53+02:00 felhom sudo[18043]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:05:53+02:00 felhom sudo[18043]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:53+02:00 felhom sudo[18043]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:53+02:00 felhom sudo[18046]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:05:53+02:00 felhom sudo[18046]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:53+02:00 felhom sudo[18046]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:53+02:00 felhom sudo[18049]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:05:53+02:00 felhom sudo[18049]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:53+02:00 felhom sudo[18049]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:53+02:00 felhom sudo[18061]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:05:53+02:00 felhom sudo[18061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:53+02:00 felhom sudo[18061]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:53+02:00 felhom sudo[18064]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:05:53+02:00 felhom sudo[18064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:53+02:00 felhom sudo[18064]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:53+02:00 felhom sudo[18067]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:05:53+02:00 felhom sudo[18067]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:53+02:00 felhom sudo[18067]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:54+02:00 felhom sudo[18070]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:05:54+02:00 felhom sudo[18070]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:54+02:00 felhom sudo[18070]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:55+02:00 felhom sudo[18084]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:05:55+02:00 felhom sudo[18084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:55+02:00 felhom sudo[18084]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:55+02:00 felhom sudo[18087]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:05:55+02:00 felhom sudo[18087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:05:55+02:00 felhom sudo[18087]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:05:59+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:05:59.822+02:00 level=INFO msg="backup: completed" vmid=9201 target=felhom-pbs archive=felhom-pbs:backup/ct/9201/2026-09-14T16:04:53Z size_bytes=1928820562 uncovered_volumes=2 +2026-09-14T18:05:59+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:05:59.822+02:00 level=INFO msg="local-api: backup job complete" vmid=9201 target=felhom-pbs job=backup-9201-felhom-pbs-1789401893066955376 archive=felhom-pbs:backup/ct/9201/2026-09-14T16:04:53Z +2026-09-14T18:06:14+02:00 felhom sudo[18258]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:06:14+02:00 felhom sudo[18258]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:14+02:00 felhom sudo[18258]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:15+02:00 felhom sudo[18270]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:06:15+02:00 felhom sudo[18270]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:15+02:00 felhom sudo[18270]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:15+02:00 felhom sudo[18273]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:06:15+02:00 felhom sudo[18273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:15+02:00 felhom sudo[18273]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:22+02:00 felhom sudo[18327]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:06:22+02:00 felhom sudo[18327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:23+02:00 felhom sudo[18327]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:23+02:00 felhom sudo[18330]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:06:23+02:00 felhom sudo[18330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:23+02:00 felhom sudo[18330]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:23+02:00 felhom sudo[18333]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:06:23+02:00 felhom sudo[18333]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:23+02:00 felhom sudo[18333]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:23+02:00 felhom sudo[18345]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:06:23+02:00 felhom sudo[18345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:23+02:00 felhom sudo[18345]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:23+02:00 felhom sudo[18348]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:06:23+02:00 felhom sudo[18348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:23+02:00 felhom sudo[18348]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:23+02:00 felhom sudo[18351]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:06:23+02:00 felhom sudo[18351]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:23+02:00 felhom sudo[18351]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:34+02:00 felhom sudo[18442]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:06:34+02:00 felhom sudo[18442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:34+02:00 felhom sudo[18442]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:06:34.817+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:06:34+02:00 felhom sudo[18452]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:06:34+02:00 felhom sudo[18452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:06:34.842+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:06:35+02:00 felhom sudo[18464]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:06:35+02:00 felhom sudo[18464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:35+02:00 felhom sudo[18464]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:35+02:00 felhom sudo[18467]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:06:35+02:00 felhom sudo[18467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:35+02:00 felhom sudo[18467]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:35+02:00 felhom sudo[18473]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:06:35+02:00 felhom sudo[18473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:35+02:00 felhom sudo[18473]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:35+02:00 felhom sudo[18476]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:06:35+02:00 felhom sudo[18476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:35+02:00 felhom sudo[18476]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:35+02:00 felhom sudo[18483]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:06:35+02:00 felhom sudo[18483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:35+02:00 felhom sudo[18483]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:35+02:00 felhom sudo[18452]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:35+02:00 felhom sudo[18489]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:06:35+02:00 felhom sudo[18489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:36+02:00 felhom sudo[18489]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:36+02:00 felhom sudo[18495]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:06:36+02:00 felhom sudo[18495]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:37+02:00 felhom sudo[18495]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:37+02:00 felhom sudo[18501]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:06:37+02:00 felhom sudo[18501]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:38+02:00 felhom sudo[18501]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:52+02:00 felhom sudo[18628]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:06:52+02:00 felhom sudo[18628]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:52+02:00 felhom sudo[18628]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:52+02:00 felhom sudo[18631]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:06:52+02:00 felhom sudo[18631]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:52+02:00 felhom sudo[18631]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:52+02:00 felhom sudo[18643]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:06:52+02:00 felhom sudo[18643]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:53+02:00 felhom sudo[18643]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:53+02:00 felhom sudo[18646]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:06:53+02:00 felhom sudo[18646]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:53+02:00 felhom sudo[18646]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:53+02:00 felhom sudo[18649]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:06:53+02:00 felhom sudo[18649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:53+02:00 felhom sudo[18649]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:53+02:00 felhom sudo[18661]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:06:53+02:00 felhom sudo[18661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:53+02:00 felhom sudo[18661]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:53+02:00 felhom sudo[18664]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:06:53+02:00 felhom sudo[18664]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:53+02:00 felhom sudo[18664]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:53+02:00 felhom sudo[18667]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:06:53+02:00 felhom sudo[18667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:53+02:00 felhom sudo[18667]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:54+02:00 felhom sudo[18670]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:06:54+02:00 felhom sudo[18670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:54+02:00 felhom sudo[18670]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:55+02:00 felhom sudo[18682]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:06:55+02:00 felhom sudo[18682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:55+02:00 felhom sudo[18682]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:06:55+02:00 felhom sudo[18685]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:06:55+02:00 felhom sudo[18685]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:06:55+02:00 felhom sudo[18685]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:14+02:00 felhom sudo[18815]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:07:14+02:00 felhom sudo[18815]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:14+02:00 felhom sudo[18815]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:15+02:00 felhom sudo[18827]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:07:15+02:00 felhom sudo[18827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:15+02:00 felhom sudo[18827]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:15+02:00 felhom sudo[18830]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:07:15+02:00 felhom sudo[18830]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:15+02:00 felhom sudo[18830]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:22+02:00 felhom sudo[18891]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:07:22+02:00 felhom sudo[18891]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:23+02:00 felhom sudo[18891]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:23+02:00 felhom sudo[18894]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:07:23+02:00 felhom sudo[18894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:23+02:00 felhom sudo[18894]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:23+02:00 felhom sudo[18897]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:07:23+02:00 felhom sudo[18897]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:23+02:00 felhom sudo[18897]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:23+02:00 felhom sudo[18909]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:07:23+02:00 felhom sudo[18909]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:23+02:00 felhom sudo[18909]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:23+02:00 felhom sudo[18912]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:07:23+02:00 felhom sudo[18912]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:23+02:00 felhom sudo[18912]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:23+02:00 felhom sudo[18915]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:07:23+02:00 felhom sudo[18915]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:23+02:00 felhom sudo[18915]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:34+02:00 felhom sudo[19004]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:07:34+02:00 felhom sudo[19004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:34+02:00 felhom sudo[19004]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:07:34.817+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:07:34+02:00 felhom sudo[19014]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:07:34+02:00 felhom sudo[19014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:07:34.837+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:07:35+02:00 felhom sudo[19025]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:07:35+02:00 felhom sudo[19025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:35+02:00 felhom sudo[19025]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:35+02:00 felhom sudo[19028]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:07:35+02:00 felhom sudo[19028]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:35+02:00 felhom sudo[19028]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:35+02:00 felhom sudo[19032]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:07:35+02:00 felhom sudo[19032]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:35+02:00 felhom sudo[19032]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:35+02:00 felhom sudo[19035]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:07:35+02:00 felhom sudo[19035]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:35+02:00 felhom sudo[19035]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:35+02:00 felhom sudo[19042]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:07:35+02:00 felhom sudo[19042]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:35+02:00 felhom sudo[19042]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:35+02:00 felhom sudo[19014]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:35+02:00 felhom sudo[19050]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:07:35+02:00 felhom sudo[19050]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:36+02:00 felhom sudo[19050]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:36+02:00 felhom sudo[19056]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:07:36+02:00 felhom sudo[19056]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:37+02:00 felhom sudo[19056]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:37+02:00 felhom sudo[19062]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:07:37+02:00 felhom sudo[19062]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:38+02:00 felhom sudo[19062]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:52+02:00 felhom sudo[19198]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:07:52+02:00 felhom sudo[19198]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:52+02:00 felhom sudo[19198]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:52+02:00 felhom sudo[19201]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:07:52+02:00 felhom sudo[19201]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:52+02:00 felhom sudo[19201]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:52+02:00 felhom sudo[19213]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:07:52+02:00 felhom sudo[19213]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:53+02:00 felhom sudo[19213]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:53+02:00 felhom sudo[19216]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:07:53+02:00 felhom sudo[19216]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:53+02:00 felhom sudo[19216]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:53+02:00 felhom sudo[19219]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:07:53+02:00 felhom sudo[19219]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:53+02:00 felhom sudo[19219]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:53+02:00 felhom sudo[19231]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:07:53+02:00 felhom sudo[19231]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:53+02:00 felhom sudo[19231]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:53+02:00 felhom sudo[19234]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:07:53+02:00 felhom sudo[19234]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:53+02:00 felhom sudo[19234]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:53+02:00 felhom sudo[19237]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:07:53+02:00 felhom sudo[19237]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:53+02:00 felhom sudo[19237]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:54+02:00 felhom sudo[19240]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:07:54+02:00 felhom sudo[19240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:54+02:00 felhom sudo[19240]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:55+02:00 felhom sudo[19252]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:07:55+02:00 felhom sudo[19252]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:55+02:00 felhom sudo[19252]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:07:55+02:00 felhom sudo[19255]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:07:55+02:00 felhom sudo[19255]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:07:55+02:00 felhom sudo[19255]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:14+02:00 felhom sudo[19448]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:08:14+02:00 felhom sudo[19448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:14+02:00 felhom sudo[19448]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:15+02:00 felhom sudo[19460]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:08:15+02:00 felhom sudo[19460]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:15+02:00 felhom sudo[19460]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:15+02:00 felhom sudo[19463]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:08:15+02:00 felhom sudo[19463]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:15+02:00 felhom sudo[19463]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:22+02:00 felhom sudo[19539]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:08:22+02:00 felhom sudo[19539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:22+02:00 felhom sudo[19539]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:23+02:00 felhom sudo[19542]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:08:23+02:00 felhom sudo[19542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:23+02:00 felhom sudo[19542]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:23+02:00 felhom sudo[19545]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:08:23+02:00 felhom sudo[19545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:23+02:00 felhom sudo[19545]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:23+02:00 felhom sudo[19557]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:08:23+02:00 felhom sudo[19557]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:23+02:00 felhom sudo[19557]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:23+02:00 felhom sudo[19560]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:08:23+02:00 felhom sudo[19560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:23+02:00 felhom sudo[19560]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:23+02:00 felhom sudo[19563]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:08:23+02:00 felhom sudo[19563]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:23+02:00 felhom sudo[19563]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:34+02:00 felhom sudo[19652]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:08:34+02:00 felhom sudo[19652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:34+02:00 felhom sudo[19652]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:08:34.813+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:08:34+02:00 felhom sudo[19661]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:08:34+02:00 felhom sudo[19661]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:08:34.833+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:08:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:08:34.833+02:00 level=INFO msg="guest-power: watchdog alive" sweeps_since_boot=20 guests_evaluated=1 currently_stopped=0 +2026-09-14T18:08:35+02:00 felhom sudo[19673]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:08:35+02:00 felhom sudo[19673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:35+02:00 felhom sudo[19673]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:35+02:00 felhom sudo[19676]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:08:35+02:00 felhom sudo[19676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:35+02:00 felhom sudo[19676]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:35+02:00 felhom sudo[19680]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:08:35+02:00 felhom sudo[19680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:35+02:00 felhom sudo[19680]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:35+02:00 felhom sudo[19683]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:08:35+02:00 felhom sudo[19683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:35+02:00 felhom sudo[19683]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:35+02:00 felhom sudo[19690]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:08:35+02:00 felhom sudo[19690]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:35+02:00 felhom sudo[19690]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:35+02:00 felhom sudo[19661]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:35+02:00 felhom sudo[19696]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:08:35+02:00 felhom sudo[19696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:36+02:00 felhom sudo[19696]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:36+02:00 felhom sudo[19704]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:08:36+02:00 felhom sudo[19704]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:37+02:00 felhom sudo[19704]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:37+02:00 felhom sudo[19710]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:08:37+02:00 felhom sudo[19710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:38+02:00 felhom sudo[19710]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:39+02:00 felhom sudo[19716]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:08:39+02:00 felhom sudo[19716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:40+02:00 felhom sudo[19716]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:40+02:00 felhom sudo[19732]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- docker exec felhom-controller cat /opt/docker/felhom-controller/controller.yaml +2026-09-14T18:08:40+02:00 felhom sudo[19732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:41+02:00 felhom sudo[19732]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:52+02:00 felhom sudo[19980]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:08:52+02:00 felhom sudo[19980]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:52+02:00 felhom sudo[19980]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:52+02:00 felhom sudo[19983]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:08:52+02:00 felhom sudo[19983]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:52+02:00 felhom sudo[19983]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:52+02:00 felhom sudo[19995]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:08:52+02:00 felhom sudo[19995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:53+02:00 felhom sudo[19995]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:53+02:00 felhom sudo[19998]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:08:53+02:00 felhom sudo[19998]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:53+02:00 felhom sudo[19998]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:53+02:00 felhom sudo[20001]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:08:53+02:00 felhom sudo[20001]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:53+02:00 felhom sudo[20001]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:53+02:00 felhom sudo[20013]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:08:53+02:00 felhom sudo[20013]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:53+02:00 felhom sudo[20013]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:53+02:00 felhom sudo[20016]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:08:53+02:00 felhom sudo[20016]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:53+02:00 felhom sudo[20016]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:53+02:00 felhom sudo[20019]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:08:53+02:00 felhom sudo[20019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:53+02:00 felhom sudo[20019]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:54+02:00 felhom sudo[20022]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:08:54+02:00 felhom sudo[20022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:54+02:00 felhom sudo[20022]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:55+02:00 felhom sudo[20034]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:08:55+02:00 felhom sudo[20034]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:55+02:00 felhom sudo[20034]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:08:55+02:00 felhom sudo[20037]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:08:55+02:00 felhom sudo[20037]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:08:55+02:00 felhom sudo[20037]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:14+02:00 felhom sudo[20435]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:09:14+02:00 felhom sudo[20435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:14+02:00 felhom sudo[20435]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:15+02:00 felhom sudo[20448]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:15+02:00 felhom sudo[20448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:15+02:00 felhom sudo[20448]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:15+02:00 felhom sudo[20451]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:15+02:00 felhom sudo[20451]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:15+02:00 felhom sudo[20451]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:22+02:00 felhom sudo[20527]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:22+02:00 felhom sudo[20527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:23+02:00 felhom sudo[20527]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:23+02:00 felhom sudo[20530]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:23+02:00 felhom sudo[20530]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:23+02:00 felhom sudo[20530]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:23+02:00 felhom sudo[20533]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:09:23+02:00 felhom sudo[20533]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:23+02:00 felhom sudo[20533]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:23+02:00 felhom sudo[20545]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:23+02:00 felhom sudo[20545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:23+02:00 felhom sudo[20545]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:23+02:00 felhom sudo[20548]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:23+02:00 felhom sudo[20548]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:23+02:00 felhom sudo[20548]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:23+02:00 felhom sudo[20551]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:09:23+02:00 felhom sudo[20551]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:23+02:00 felhom sudo[20551]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:34+02:00 felhom sudo[20803]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:09:34+02:00 felhom sudo[20803]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:34+02:00 felhom sudo[20803]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:09:34.816+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:09:34+02:00 felhom sudo[20813]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:09:34+02:00 felhom sudo[20813]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:09:34.841+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:09:35+02:00 felhom sudo[20824]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:35+02:00 felhom sudo[20824]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:35+02:00 felhom sudo[20824]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:35+02:00 felhom sudo[20827]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:35+02:00 felhom sudo[20827]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:35+02:00 felhom sudo[20827]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:35+02:00 felhom sudo[20831]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:09:35+02:00 felhom sudo[20831]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:35+02:00 felhom sudo[20831]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:35+02:00 felhom sudo[20834]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:09:35+02:00 felhom sudo[20834]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:35+02:00 felhom sudo[20834]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:35+02:00 felhom sudo[20841]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:09:35+02:00 felhom sudo[20841]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:35+02:00 felhom sudo[20841]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:36+02:00 felhom sudo[20813]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:36+02:00 felhom sudo[20851]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:09:36+02:00 felhom sudo[20851]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:37+02:00 felhom sudo[20851]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:37+02:00 felhom sudo[20857]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:09:37+02:00 felhom sudo[20857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:38+02:00 felhom sudo[20857]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:38+02:00 felhom sudo[20884]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:09:38+02:00 felhom sudo[20884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:40+02:00 felhom sudo[20884]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:52+02:00 felhom sudo[21542]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:52+02:00 felhom sudo[21542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:52+02:00 felhom sudo[21542]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:52+02:00 felhom sudo[21560]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:52+02:00 felhom sudo[21560]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:52+02:00 felhom sudo[21560]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:52+02:00 felhom sudo[21622]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:52+02:00 felhom sudo[21622]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:52+02:00 felhom sudo[21622]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:52+02:00 felhom sudo[21625]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:52+02:00 felhom sudo[21625]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:52+02:00 felhom sudo[21625]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:52+02:00 felhom sudo[21639]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:52+02:00 felhom sudo[21639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:52+02:00 felhom sudo[21639]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:52+02:00 felhom sudo[21642]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:52+02:00 felhom sudo[21642]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:52+02:00 felhom sudo[21642]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:52+02:00 felhom sudo[21652]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:52+02:00 felhom sudo[21652]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:52+02:00 felhom sudo[21652]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:52+02:00 felhom sudo[21655]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:52+02:00 felhom sudo[21655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:53+02:00 felhom sudo[21655]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:53+02:00 felhom sudo[21658]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:09:53+02:00 felhom sudo[21658]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:53+02:00 felhom sudo[21658]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:53+02:00 felhom sudo[21670]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:53+02:00 felhom sudo[21670]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:53+02:00 felhom sudo[21670]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:53+02:00 felhom sudo[21673]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:53+02:00 felhom sudo[21673]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:53+02:00 felhom sudo[21673]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:53+02:00 felhom sudo[21676]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:09:53+02:00 felhom sudo[21676]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:53+02:00 felhom sudo[21676]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:54+02:00 felhom sudo[21720]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:09:54+02:00 felhom sudo[21720]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:54+02:00 felhom sudo[21720]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:55+02:00 felhom sudo[21732]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:09:55+02:00 felhom sudo[21732]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:55+02:00 felhom sudo[21732]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:09:55+02:00 felhom sudo[21735]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:09:55+02:00 felhom sudo[21735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:09:55+02:00 felhom sudo[21735]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:14+02:00 felhom sudo[22132]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:10:14+02:00 felhom sudo[22132]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:14+02:00 felhom sudo[22132]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:15+02:00 felhom sudo[22144]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:10:15+02:00 felhom sudo[22144]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:15+02:00 felhom sudo[22144]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:15+02:00 felhom sudo[22147]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:10:15+02:00 felhom sudo[22147]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:15+02:00 felhom sudo[22147]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:22+02:00 felhom sudo[22467]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:10:22+02:00 felhom sudo[22467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:23+02:00 felhom sudo[22467]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:23+02:00 felhom sudo[22470]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:10:23+02:00 felhom sudo[22470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:23+02:00 felhom sudo[22470]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:23+02:00 felhom sudo[22474]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:10:23+02:00 felhom sudo[22474]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:23+02:00 felhom sudo[22474]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:23+02:00 felhom sudo[22509]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:10:23+02:00 felhom sudo[22509]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:23+02:00 felhom sudo[22509]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:23+02:00 felhom sudo[22512]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:10:23+02:00 felhom sudo[22512]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:23+02:00 felhom sudo[22512]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:23+02:00 felhom sudo[22515]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:10:23+02:00 felhom sudo[22515]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:23+02:00 felhom sudo[22515]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:34+02:00 felhom sudo[22672]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:10:34+02:00 felhom sudo[22672]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:34+02:00 felhom sudo[22672]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:10:34.818+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:10:34+02:00 felhom sudo[22680]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:10:34+02:00 felhom sudo[22680]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:10:34.842+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:10:35+02:00 felhom sudo[22693]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:10:35+02:00 felhom sudo[22693]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:35+02:00 felhom sudo[22693]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:35+02:00 felhom sudo[22696]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:10:35+02:00 felhom sudo[22696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:35+02:00 felhom sudo[22696]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:35+02:00 felhom sudo[22700]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:10:35+02:00 felhom sudo[22700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:35+02:00 felhom sudo[22700]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:35+02:00 felhom sudo[22703]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:10:35+02:00 felhom sudo[22703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:35+02:00 felhom sudo[22703]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:35+02:00 felhom sudo[22710]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:10:35+02:00 felhom sudo[22710]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:35+02:00 felhom sudo[22710]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:36+02:00 felhom sudo[22680]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:36+02:00 felhom sudo[22716]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:10:36+02:00 felhom sudo[22716]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:37+02:00 felhom sudo[22716]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:37+02:00 felhom sudo[22724]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:10:37+02:00 felhom sudo[22724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:38+02:00 felhom sudo[22724]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:38+02:00 felhom sudo[22730]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:10:38+02:00 felhom sudo[22730]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:39+02:00 felhom sudo[22730]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:52+02:00 felhom sudo[22898]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:10:52+02:00 felhom sudo[22898]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:52+02:00 felhom sudo[22898]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:52+02:00 felhom sudo[22901]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:10:52+02:00 felhom sudo[22901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:52+02:00 felhom sudo[22901]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:52+02:00 felhom sudo[22913]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:10:52+02:00 felhom sudo[22913]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:53+02:00 felhom sudo[22913]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:53+02:00 felhom sudo[22916]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:10:53+02:00 felhom sudo[22916]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:53+02:00 felhom sudo[22916]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:53+02:00 felhom sudo[22919]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:10:53+02:00 felhom sudo[22919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:53+02:00 felhom sudo[22919]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:53+02:00 felhom sudo[22931]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:10:53+02:00 felhom sudo[22931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:53+02:00 felhom sudo[22931]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:53+02:00 felhom sudo[22934]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:10:53+02:00 felhom sudo[22934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:53+02:00 felhom sudo[22934]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:53+02:00 felhom sudo[22937]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:10:53+02:00 felhom sudo[22937]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:53+02:00 felhom sudo[22937]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:54+02:00 felhom sudo[22961]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:10:54+02:00 felhom sudo[22961]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:54+02:00 felhom sudo[22961]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:55+02:00 felhom sudo[22992]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:10:55+02:00 felhom sudo[22992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:55+02:00 felhom sudo[22992]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:10:55+02:00 felhom sudo[22995]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:10:55+02:00 felhom sudo[22995]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:10:55+02:00 felhom sudo[22995]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:14+02:00 felhom sudo[23191]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:11:14+02:00 felhom sudo[23191]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:14+02:00 felhom sudo[23191]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:15+02:00 felhom sudo[23203]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:15+02:00 felhom sudo[23203]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:15+02:00 felhom sudo[23203]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:15+02:00 felhom sudo[23206]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:15+02:00 felhom sudo[23206]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:15+02:00 felhom sudo[23206]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:22+02:00 felhom sudo[23261]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:22+02:00 felhom sudo[23261]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:23+02:00 felhom sudo[23261]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:23+02:00 felhom sudo[23264]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:23+02:00 felhom sudo[23264]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:23+02:00 felhom sudo[23264]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:23+02:00 felhom sudo[23267]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:11:23+02:00 felhom sudo[23267]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:23+02:00 felhom sudo[23267]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:23+02:00 felhom sudo[23279]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:23+02:00 felhom sudo[23279]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:23+02:00 felhom sudo[23279]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:23+02:00 felhom sudo[23282]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:23+02:00 felhom sudo[23282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:23+02:00 felhom sudo[23282]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:23+02:00 felhom sudo[23285]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:11:23+02:00 felhom sudo[23285]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:23+02:00 felhom sudo[23285]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:34+02:00 felhom sudo[23444]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:11:34+02:00 felhom sudo[23444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:34+02:00 felhom sudo[23444]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:11:34.811+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:11:34+02:00 felhom sudo[23454]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:11:34+02:00 felhom sudo[23454]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:11:34.840+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:11:35+02:00 felhom sudo[23466]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:35+02:00 felhom sudo[23466]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:35+02:00 felhom sudo[23466]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:35+02:00 felhom sudo[23469]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:35+02:00 felhom sudo[23469]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:35+02:00 felhom sudo[23469]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:35+02:00 felhom sudo[23473]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:11:35+02:00 felhom sudo[23473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:35+02:00 felhom sudo[23473]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:35+02:00 felhom sudo[23476]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:11:35+02:00 felhom sudo[23476]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:35+02:00 felhom sudo[23476]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:35+02:00 felhom sudo[23483]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:11:35+02:00 felhom sudo[23483]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:35+02:00 felhom sudo[23483]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:35+02:00 felhom sudo[23454]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:35+02:00 felhom sudo[23489]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:11:35+02:00 felhom sudo[23489]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:36+02:00 felhom sudo[23489]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:36+02:00 felhom sudo[23497]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:11:36+02:00 felhom sudo[23497]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:37+02:00 felhom sudo[23497]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:37+02:00 felhom sudo[23503]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:11:37+02:00 felhom sudo[23503]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:38+02:00 felhom sudo[23503]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:39+02:00 felhom sudo[23539]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:39+02:00 felhom sudo[23539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:39+02:00 felhom sudo[23539]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:39+02:00 felhom sudo[23542]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:39+02:00 felhom sudo[23542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:39+02:00 felhom sudo[23542]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:40+02:00 felhom sudo[23555]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:40+02:00 felhom sudo[23555]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:40+02:00 felhom sudo[23555]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:40+02:00 felhom sudo[23558]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:40+02:00 felhom sudo[23558]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:40+02:00 felhom sudo[23558]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:40+02:00 felhom sudo[23561]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:11:40+02:00 felhom sudo[23561]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:40+02:00 felhom sudo[23561]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:52+02:00 felhom sudo[24419]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:52+02:00 felhom sudo[24419]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:52+02:00 felhom sudo[24419]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:52+02:00 felhom sudo[24422]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:52+02:00 felhom sudo[24422]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:52+02:00 felhom sudo[24422]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:52+02:00 felhom sudo[24434]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:52+02:00 felhom sudo[24434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:53+02:00 felhom sudo[24434]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:53+02:00 felhom sudo[24437]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:53+02:00 felhom sudo[24437]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:53+02:00 felhom sudo[24437]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:53+02:00 felhom sudo[24440]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:11:53+02:00 felhom sudo[24440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:53+02:00 felhom sudo[24440]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:53+02:00 felhom sudo[24452]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:53+02:00 felhom sudo[24452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:53+02:00 felhom sudo[24452]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:53+02:00 felhom sudo[24455]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:53+02:00 felhom sudo[24455]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:53+02:00 felhom sudo[24455]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:53+02:00 felhom sudo[24458]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:11:53+02:00 felhom sudo[24458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:53+02:00 felhom sudo[24458]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:54+02:00 felhom sudo[24573]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:11:54+02:00 felhom sudo[24573]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:54+02:00 felhom sudo[24573]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:55+02:00 felhom sudo[24761]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:11:55+02:00 felhom sudo[24761]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:55+02:00 felhom sudo[24761]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:11:55+02:00 felhom sudo[24788]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:11:55+02:00 felhom sudo[24788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:11:55+02:00 felhom sudo[24788]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:14+02:00 felhom sudo[25452]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:12:14+02:00 felhom sudo[25452]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:14+02:00 felhom sudo[25452]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:15+02:00 felhom sudo[25464]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:12:15+02:00 felhom sudo[25464]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:15+02:00 felhom sudo[25464]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:15+02:00 felhom sudo[25467]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:12:15+02:00 felhom sudo[25467]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:15+02:00 felhom sudo[25467]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:23+02:00 felhom sudo[25521]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:12:23+02:00 felhom sudo[25521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:23+02:00 felhom sudo[25521]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:23+02:00 felhom sudo[25524]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:12:23+02:00 felhom sudo[25524]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:23+02:00 felhom sudo[25524]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:23+02:00 felhom sudo[25527]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:12:23+02:00 felhom sudo[25527]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:23+02:00 felhom sudo[25527]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:23+02:00 felhom sudo[25539]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:12:23+02:00 felhom sudo[25539]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:23+02:00 felhom sudo[25539]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:23+02:00 felhom sudo[25542]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:12:23+02:00 felhom sudo[25542]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:23+02:00 felhom sudo[25542]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:23+02:00 felhom sudo[25545]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:12:23+02:00 felhom sudo[25545]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:23+02:00 felhom sudo[25545]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:34+02:00 felhom sudo[25696]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:12:34+02:00 felhom sudo[25696]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:34+02:00 felhom sudo[25696]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:12:34.828+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:12:34+02:00 felhom sudo[25711]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:12:34+02:00 felhom sudo[25711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:12:34.845+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:12:35+02:00 felhom sudo[25724]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:12:35+02:00 felhom sudo[25724]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:35+02:00 felhom sudo[25724]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:35+02:00 felhom sudo[25746]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:12:35+02:00 felhom sudo[25746]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:35+02:00 felhom sudo[25746]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:35+02:00 felhom sudo[25750]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:12:35+02:00 felhom sudo[25750]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:35+02:00 felhom sudo[25750]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:35+02:00 felhom sudo[25753]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:12:35+02:00 felhom sudo[25753]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:35+02:00 felhom sudo[25753]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:35+02:00 felhom sudo[25760]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:12:35+02:00 felhom sudo[25760]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:35+02:00 felhom sudo[25760]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:36+02:00 felhom sudo[25711]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:36+02:00 felhom sudo[25766]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:12:36+02:00 felhom sudo[25766]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:37+02:00 felhom sudo[25766]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:37+02:00 felhom sudo[25774]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:12:37+02:00 felhom sudo[25774]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:38+02:00 felhom sudo[25774]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:38+02:00 felhom sudo[25921]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:12:38+02:00 felhom sudo[25921]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:39+02:00 felhom sudo[25921]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:52+02:00 felhom sudo[27004]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:12:52+02:00 felhom sudo[27004]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:52+02:00 felhom sudo[27004]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:52+02:00 felhom sudo[27007]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:12:52+02:00 felhom sudo[27007]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:52+02:00 felhom sudo[27007]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:52+02:00 felhom sudo[27019]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:12:52+02:00 felhom sudo[27019]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:53+02:00 felhom sudo[27019]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:53+02:00 felhom sudo[27022]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:12:53+02:00 felhom sudo[27022]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:53+02:00 felhom sudo[27022]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:53+02:00 felhom sudo[27025]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:12:53+02:00 felhom sudo[27025]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:53+02:00 felhom sudo[27025]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:53+02:00 felhom sudo[27071]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:12:53+02:00 felhom sudo[27071]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:53+02:00 felhom sudo[27071]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:53+02:00 felhom sudo[27074]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:12:53+02:00 felhom sudo[27074]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:53+02:00 felhom sudo[27074]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:53+02:00 felhom sudo[27077]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:12:53+02:00 felhom sudo[27077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:53+02:00 felhom sudo[27077]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:54+02:00 felhom sudo[27080]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:12:54+02:00 felhom sudo[27080]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:54+02:00 felhom sudo[27080]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:55+02:00 felhom sudo[27111]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:12:55+02:00 felhom sudo[27111]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:55+02:00 felhom sudo[27111]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:12:55+02:00 felhom sudo[27114]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:12:55+02:00 felhom sudo[27114]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:12:55+02:00 felhom sudo[27114]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:14+02:00 felhom sudo[27428]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:13:14+02:00 felhom sudo[27428]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:14+02:00 felhom sudo[27428]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:15+02:00 felhom sudo[27440]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:13:15+02:00 felhom sudo[27440]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:15+02:00 felhom sudo[27440]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:15+02:00 felhom sudo[27445]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:13:15+02:00 felhom sudo[27445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:15+02:00 felhom sudo[27445]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:22+02:00 felhom sudo[27688]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:13:22+02:00 felhom sudo[27688]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:22+02:00 felhom sudo[27688]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:23+02:00 felhom sudo[27691]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:13:23+02:00 felhom sudo[27691]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:23+02:00 felhom sudo[27691]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:23+02:00 felhom sudo[27694]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:13:23+02:00 felhom sudo[27694]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:23+02:00 felhom sudo[27694]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:23+02:00 felhom sudo[27706]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:13:23+02:00 felhom sudo[27706]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:23+02:00 felhom sudo[27706]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:23+02:00 felhom sudo[27709]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:13:23+02:00 felhom sudo[27709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:23+02:00 felhom sudo[27709]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:23+02:00 felhom sudo[27712]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:13:23+02:00 felhom sudo[27712]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:23+02:00 felhom sudo[27712]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:34+02:00 felhom sudo[28040]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:13:34+02:00 felhom sudo[28040]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:34+02:00 felhom sudo[28040]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:13:34.808+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:13:34+02:00 felhom sudo[28048]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:13:34+02:00 felhom sudo[28048]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:34+02:00 felhom felhom-agent[2479]: time=2026-09-14T18:13:34.838+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:13:35+02:00 felhom sudo[28061]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:13:35+02:00 felhom sudo[28061]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:35+02:00 felhom sudo[28061]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:35+02:00 felhom sudo[28064]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:13:35+02:00 felhom sudo[28064]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:35+02:00 felhom sudo[28064]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:35+02:00 felhom sudo[28068]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:13:35+02:00 felhom sudo[28068]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:35+02:00 felhom sudo[28068]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:35+02:00 felhom sudo[28077]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:13:35+02:00 felhom sudo[28077]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:35+02:00 felhom sudo[28077]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:35+02:00 felhom sudo[28086]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:13:35+02:00 felhom sudo[28086]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:35+02:00 felhom sudo[28086]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:35+02:00 felhom sudo[28048]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:35+02:00 felhom sudo[28092]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:13:35+02:00 felhom sudo[28092]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:36+02:00 felhom sudo[28092]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:36+02:00 felhom sudo[28098]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:13:36+02:00 felhom sudo[28098]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:37+02:00 felhom sudo[28098]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:37+02:00 felhom sudo[28106]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:13:37+02:00 felhom sudo[28106]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:38+02:00 felhom sudo[28106]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:39+02:00 felhom sudo[28133]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:13:39+02:00 felhom sudo[28133]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:40+02:00 felhom sudo[28133]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:13:40+02:00 felhom sudo[28165]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- docker exec felhom-controller cat /opt/docker/felhom-controller/controller.yaml +2026-09-14T18:13:40+02:00 felhom sudo[28165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:13:41+02:00 felhom sudo[28165]: pam_unix(sudo:session): session closed for user root +-- Boot 12eb2079cf4f467a9d06c4154dba21d1 -- +2026-09-14T18:15:43+02:00 felhom systemd[1]: Started felhom-agent.service - Felhom host agent (Proxmox host tier; hub control loop + PBS verify + storage watchdog). +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.582+02:00 level=INFO msg="felhom-agent daemon starting" version=0.130.0 host_id=tester-1-8603a2 hub_url=https://hub.felhom.eu interval_s=900 +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.587+02:00 level=INFO msg="daemon: operator signers pinned" count=2 +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.590+02:00 level=INFO msg="local-api leaf LOADED" fingerprint_sha256=7bf6119f955f2011bf98514f87101fa3cea82adb4e4028e04b6cd79ac7103218 cert=/var/lib/felhom-agent/local-api.crt +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.590+02:00 level=INFO msg="backup tier armed" target=local cadence=24h0m0s keep_last=3 wait_timeout=30m0s prune_pbs_allowed=false primary=true +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.590+02:00 level=INFO msg="backup tier armed" target=felhom-pbs cadence=168h0m0s keep_last=0 wait_timeout=12h0m0s prune_pbs_allowed=false primary=false +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.590+02:00 level=INFO msg="lanresolver: enabled" host_ip=192.168.0.133 upstreams="[1.1.1.1 8.8.8.8]" interval_s=300 +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.591+02:00 level=INFO msg="wgtunnel: enabled" interval_s=60 state_dir=/var/lib/felhom-agent +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.591+02:00 level=INFO msg="poke: agent-plane sync listener enabled" port=51822 +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.591+02:00 level=INFO msg="felhomsshd (OOB): enabled" interval_s=60 state_dir=/var/lib/felhom-agent +2026-09-14T18:15:45+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:45.591+02:00 level=INFO msg="pbsdr: bridge enabled (hub-driven; no-op until a pbs_dr descriptor arrives)" +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.394+02:00 level=INFO msg="capabilities self-check" ok=70 total=70 degraded=0 inactive=0 +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.394+02:00 level=INFO msg="backup: restore-test scheduler starting (per-archive due-check)" eval_interval=6h0m0s settle=24h0m0s +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.396+02:00 level=INFO msg="storage: watchdog starting" interval=5s debounce=15s +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.396+02:00 level=INFO msg="fast-tick armed: 30s out-of-band cadence while desired-state is unapplied" interval=30s +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.396+02:00 level=INFO msg="pbs: verify loop starting" cadence=6h0m0s +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.400+02:00 level=INFO msg="poke: listening for hub sync-pokes (WG-confined, contentless)" addr=10.77.0.5:51822 +2026-09-14T18:15:46+02:00 felhom sudo[1325]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:15:46+02:00 felhom sudo[1325]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:46+02:00 felhom sudo[1325]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:46+02:00 felhom sudo[1328]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/local/sbin/felhom-pbs-apply read felhom-pbs /etc/pve/priv/storage +2026-09-14T18:15:46+02:00 felhom sudo[1328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:46+02:00 felhom sudo[1328]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:46+02:00 felhom sudo[1357]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:15:46+02:00 felhom sudo[1357]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:46+02:00 felhom sudo[1357]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:46+02:00 felhom sudo[1360]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:15:46+02:00 felhom sudo[1360]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:46+02:00 felhom sudo[1361]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:15:46+02:00 felhom sudo[1361]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:46+02:00 felhom sudo[1360]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:46+02:00 felhom sudo[1366]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:15:46+02:00 felhom sudo[1366]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:46+02:00 felhom sudo[1361]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.964+02:00 level=INFO msg="selfheal: node watchdog starting" mode=appliance interval_s=60 +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.965+02:00 level=INFO msg="guestnet: watchdog starting" interval=1m0s min_heal_interval=10m0s max_heals_per_hour=3 settle=3m0s +2026-09-14T18:15:46+02:00 felhom sudo[1366]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.987+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.994+02:00 level=INFO msg="guest-power: watchdog started" interval=1m0s max_attempts=3 +2026-09-14T18:15:46+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:46.994+02:00 level=INFO msg="local-api server listening" addr=169.254.253.1:8443 +2026-09-14T18:15:47+02:00 felhom sudo[1373]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/local/sbin/felhom-pbs-apply read felhom-pbs /etc/pve/priv/storage +2026-09-14T18:15:47+02:00 felhom sudo[1372]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl enable --now dnsmasq +2026-09-14T18:15:47+02:00 felhom sudo[1373]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:47+02:00 felhom sudo[1372]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:47+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:47.016+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:15:47+02:00 felhom sudo[1373]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:47+02:00 felhom sudo[1381]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/sshd -t -f /var/lib/felhom-agent/felhom-sshd/sshd_config +2026-09-14T18:15:47+02:00 felhom sudo[1381]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:47+02:00 felhom sudo[1381]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:47+02:00 felhom sudo[1389]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -o root -g root -m 0644 -- /var/lib/felhom-agent/felhom-sshd/sshd_config /etc/felhom-sshd/sshd_config +2026-09-14T18:15:47+02:00 felhom sudo[1389]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:47+02:00 felhom sudo[1389]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:47+02:00 felhom sudo[1392]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/systemctl reload felhom-sshd +2026-09-14T18:15:47+02:00 felhom sudo[1392]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:47+02:00 felhom sudo[1392]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:47+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:47.661+02:00 level=INFO msg="felhomsshd: config applied" port=8822 action=reload +2026-09-14T18:15:47+02:00 felhom sudo[1521]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:15:47+02:00 felhom sudo[1521]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:47+02:00 felhom sudo[1521]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:47+02:00 felhom sudo[1529]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft flush set inet felhom_oob ssh_port +2026-09-14T18:15:47+02:00 felhom sudo[1529]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:47+02:00 felhom sudo[1529]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:47+02:00 felhom sudo[1534]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft add element inet felhom_oob ssh_port '{ 8822 }' +2026-09-14T18:15:47+02:00 felhom sudo[1534]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:47+02:00 felhom sudo[1534]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:47+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:47.731+02:00 level=INFO msg="felhomsshd belt: set synced" set=ssh_port elements=8822 +2026-09-14T18:15:47+02:00 felhom sudo[1372]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom sudo[1616]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:15:48+02:00 felhom sudo[1616]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1660]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:15:48+02:00 felhom sudo[1660]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1660]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom sudo[1667]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/sshd -T -f /etc/felhom-sshd/sshd_config +2026-09-14T18:15:48+02:00 felhom sudo[1667]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1667]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom sudo[1671]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/sshd -t -f /etc/felhom-sshd/sshd_config +2026-09-14T18:15:48+02:00 felhom sudo[1671]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1671]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom sudo[1679]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:15:48+02:00 felhom sudo[1679]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1679]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom sudo[1683]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:15:48+02:00 felhom sudo[1683]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1683]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:48.493+02:00 level=INFO msg="desired: updated from hub" generation=2 guests=0 +2026-09-14T18:15:48+02:00 felhom sudo[1700]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -o root -g root -m 0644 -- /var/lib/felhom-agent/felhom-sshd/authorized_keys.felhom-op /etc/felhom-sshd/authorized_keys/felhom-op +2026-09-14T18:15:48+02:00 felhom sudo[1700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1700]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:48.512+02:00 level=INFO msg="felhomsshd: operator authorized_keys updated" user=felhom-op present=true +2026-09-14T18:15:48+02:00 felhom sudo[1709]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:15:48+02:00 felhom sudo[1709]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1711]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:15:48+02:00 felhom sudo[1711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1711]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom sudo[1709]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom sudo[1717]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:15:48+02:00 felhom sudo[1717]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1717]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom sudo[1727]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft flush set inet felhom_oob operator_ips +2026-09-14T18:15:48+02:00 felhom sudo[1727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1727]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom sudo[1731]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft add element inet felhom_oob operator_ips '{ 10.77.0.250 }' +2026-09-14T18:15:48+02:00 felhom sudo[1731]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:15:48+02:00 felhom sudo[1731]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:15:48+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:48.588+02:00 level=INFO msg="felhomsshd belt: set synced" set=operator_ips elements=10.77.0.250 +2026-09-14T18:15:52+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:15:52.644+02:00 level=INFO msg="pbs: verify cycle complete" datastore=felhom-offsite snapshots=1 +2026-09-14T18:16:06+02:00 felhom sudo[1843]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:16:06+02:00 felhom sudo[1843]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:06+02:00 felhom sudo[1843]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:07+02:00 felhom sudo[1855]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:16:07+02:00 felhom sudo[1855]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:07+02:00 felhom sudo[1855]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:07+02:00 felhom sudo[1860]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:16:07+02:00 felhom sudo[1860]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:07+02:00 felhom sudo[1860]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:26+02:00 felhom sudo[1919]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:16:26+02:00 felhom sudo[1919]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:26+02:00 felhom sudo[1919]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:27+02:00 felhom sudo[1931]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:16:27+02:00 felhom sudo[1931]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:27+02:00 felhom sudo[1931]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:27+02:00 felhom sudo[1934]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:16:27+02:00 felhom sudo[1934]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:27+02:00 felhom sudo[1934]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:46+02:00 felhom sudo[1992]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:16:46+02:00 felhom sudo[1992]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:46+02:00 felhom sudo[1992]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:47+02:00 felhom sudo[2003]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:16:47+02:00 felhom sudo[2003]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:47+02:00 felhom sudo[2003]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:47+02:00 felhom sudo[2014]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:16:47+02:00 felhom sudo[2014]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:47+02:00 felhom sudo[2014]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:47+02:00 felhom sudo[2017]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:16:47+02:00 felhom sudo[2017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:47+02:00 felhom sudo[2017]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:48+02:00 felhom sudo[2023]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:16:48+02:00 felhom sudo[2023]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:48+02:00 felhom sudo[2023]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:16:48+02:00 felhom sudo[2026]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:16:48+02:00 felhom sudo[2026]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:16:48+02:00 felhom sudo[2026]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:06+02:00 felhom sudo[2081]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:17:06+02:00 felhom sudo[2081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:06+02:00 felhom sudo[2081]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:07+02:00 felhom sudo[2093]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:17:07+02:00 felhom sudo[2093]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:07+02:00 felhom sudo[2093]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:07+02:00 felhom sudo[2096]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:17:07+02:00 felhom sudo[2096]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:07+02:00 felhom sudo[2096]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:16+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:17:16.966+02:00 level=WARN msg="guestnet: guest list unavailable — skipping sweep (ownership unproven)" err="proxmox: GET /nodes/felhom/lxc: Get \"https://127.0.0.1:8006/api2/json/nodes/felhom/lxc\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" +2026-09-14T18:17:16+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:17:16.995+02:00 level=WARN msg="guest-power: guest list unavailable — skipping sweep (ownership unproven)" err="proxmox: GET /nodes/felhom/lxc: Get \"https://127.0.0.1:8006/api2/json/nodes/felhom/lxc\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" +2026-09-14T18:17:17+02:00 felhom sudo[1616]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:17+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:17:17.322+02:00 level=INFO msg="lanresolver: guest IP not yet leased — skipping (will retry)" vmid=9201 +2026-09-14T18:17:21+02:00 felhom sudo[3445]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:17:21+02:00 felhom sudo[3445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:21+02:00 felhom sudo[3445]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:21+02:00 felhom sudo[3458]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:17:21+02:00 felhom sudo[3458]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:22+02:00 felhom sudo[3794]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:17:22+02:00 felhom sudo[3794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:22+02:00 felhom sudo[3794]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:22+02:00 felhom sudo[3797]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:17:22+02:00 felhom sudo[3797]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:22+02:00 felhom sudo[3797]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:23+02:00 felhom sudo[4081]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:17:23+02:00 felhom sudo[4081]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:23+02:00 felhom sudo[4081]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:23+02:00 felhom sudo[4084]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:17:23+02:00 felhom sudo[4084]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:23+02:00 felhom sudo[4084]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:23+02:00 felhom sudo[4087]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:17:23+02:00 felhom sudo[4087]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:23+02:00 felhom sudo[4087]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:23+02:00 felhom sudo[4101]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:17:23+02:00 felhom sudo[4101]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:23+02:00 felhom sudo[4101]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:23+02:00 felhom sudo[4104]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:17:23+02:00 felhom sudo[4104]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:23+02:00 felhom sudo[4104]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:23+02:00 felhom sudo[4107]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:17:23+02:00 felhom sudo[4107]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:23+02:00 felhom sudo[4107]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:26+02:00 felhom sudo[4283]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:17:26+02:00 felhom sudo[4283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:26+02:00 felhom sudo[4283]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:27+02:00 felhom sudo[4314]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:17:27+02:00 felhom sudo[4314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:27+02:00 felhom sudo[4314]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:27+02:00 felhom sudo[4317]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:17:27+02:00 felhom sudo[4317]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:27+02:00 felhom sudo[4317]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:46+02:00 felhom sudo[4639]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:17:46+02:00 felhom sudo[4639]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:46+02:00 felhom sudo[4639]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:47+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:17:47.021+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:17:47+02:00 felhom sudo[4651]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:17:47+02:00 felhom sudo[4651]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:47+02:00 felhom sudo[4655]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:17:47+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:17:47.057+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:17:47+02:00 felhom sudo[4655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:47+02:00 felhom sudo[4655]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:47+02:00 felhom sudo[4677]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:17:47+02:00 felhom sudo[4677]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:47+02:00 felhom sudo[4677]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:47+02:00 felhom sudo[4682]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:17:47+02:00 felhom sudo[4682]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:47+02:00 felhom sudo[4682]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:47+02:00 felhom sudo[4651]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:47+02:00 felhom sudo[4707]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:17:47+02:00 felhom sudo[4707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:48+02:00 felhom sudo[4711]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:17:48+02:00 felhom sudo[4711]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:48+02:00 felhom sudo[4711]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:48+02:00 felhom sudo[4714]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:17:48+02:00 felhom sudo[4714]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:48+02:00 felhom sudo[4714]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:48+02:00 felhom sudo[4707]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:48+02:00 felhom sudo[4721]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:17:48+02:00 felhom sudo[4721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:49+02:00 felhom sudo[4721]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:49+02:00 felhom sudo[4727]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:17:49+02:00 felhom sudo[4727]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:50+02:00 felhom sudo[4727]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:54+02:00 felhom sudo[4770]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:17:54+02:00 felhom sudo[4770]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:54+02:00 felhom sudo[4770]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:54+02:00 felhom sudo[4773]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:17:54+02:00 felhom sudo[4773]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:54+02:00 felhom sudo[4773]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:54+02:00 felhom sudo[4776]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:17:54+02:00 felhom sudo[4776]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:54+02:00 felhom sudo[4776]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:54+02:00 felhom sudo[4788]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:17:54+02:00 felhom sudo[4788]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:54+02:00 felhom sudo[4788]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:54+02:00 felhom sudo[4791]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:17:54+02:00 felhom sudo[4791]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:54+02:00 felhom sudo[4791]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:17:54+02:00 felhom sudo[4794]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:17:54+02:00 felhom sudo[4794]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:17:54+02:00 felhom sudo[4794]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:06+02:00 felhom sudo[4977]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:18:06+02:00 felhom sudo[4977]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:06+02:00 felhom sudo[4977]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:07+02:00 felhom sudo[5006]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:18:07+02:00 felhom sudo[5006]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:07+02:00 felhom sudo[5006]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:07+02:00 felhom sudo[5017]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:18:07+02:00 felhom sudo[5017]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:07+02:00 felhom sudo[5017]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:23+02:00 felhom sudo[5309]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:18:23+02:00 felhom sudo[5309]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:23+02:00 felhom sudo[5309]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:23+02:00 felhom sudo[5312]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:18:23+02:00 felhom sudo[5312]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:23+02:00 felhom sudo[5312]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:24+02:00 felhom sudo[5324]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:18:24+02:00 felhom sudo[5324]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:24+02:00 felhom sudo[5324]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:24+02:00 felhom sudo[5327]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:18:24+02:00 felhom sudo[5327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:24+02:00 felhom sudo[5327]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:24+02:00 felhom sudo[5330]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:18:24+02:00 felhom sudo[5330]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:24+02:00 felhom sudo[5330]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:24+02:00 felhom sudo[5342]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:18:24+02:00 felhom sudo[5342]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:24+02:00 felhom sudo[5342]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:24+02:00 felhom sudo[5345]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:18:24+02:00 felhom sudo[5345]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:24+02:00 felhom sudo[5345]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:24+02:00 felhom sudo[5348]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:18:24+02:00 felhom sudo[5348]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:24+02:00 felhom sudo[5348]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:26+02:00 felhom sudo[5433]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:18:26+02:00 felhom sudo[5433]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:26+02:00 felhom sudo[5433]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:27+02:00 felhom sudo[5445]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:18:27+02:00 felhom sudo[5445]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:27+02:00 felhom sudo[5445]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:27+02:00 felhom sudo[5448]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:18:27+02:00 felhom sudo[5448]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:27+02:00 felhom sudo[5448]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:46+02:00 felhom sudo[5584]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:18:46+02:00 felhom sudo[5584]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:46+02:00 felhom sudo[5584]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:47+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:18:47.011+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:18:47+02:00 felhom sudo[5593]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip -4 -o addr show dev eth0 +2026-09-14T18:18:47+02:00 felhom sudo[5593]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:47+02:00 felhom sudo[5598]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/wg show wg-felhom latest-handshakes +2026-09-14T18:18:47+02:00 felhom sudo[5598]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:47+02:00 felhom felhom-agent[1171]: time=2026-09-14T18:18:47.037+02:00 level=INFO msg="stale-lock: scanning pool guests" pool=felhom listed=1 scanned=1 +2026-09-14T18:18:47+02:00 felhom sudo[5598]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:47+02:00 felhom sudo[5611]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:18:47+02:00 felhom sudo[5611]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:47+02:00 felhom sudo[5611]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:47+02:00 felhom sudo[5614]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:18:47+02:00 felhom sudo[5614]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:47+02:00 felhom sudo[5614]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:47+02:00 felhom sudo[5593]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:47+02:00 felhom sudo[5624]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- ip route show default +2026-09-14T18:18:47+02:00 felhom sudo[5624]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:48+02:00 felhom sudo[5633]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob ssh_port +2026-09-14T18:18:48+02:00 felhom sudo[5633]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:48+02:00 felhom sudo[5633]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:48+02:00 felhom sudo[5636]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/nft list set inet felhom_oob operator_ips +2026-09-14T18:18:48+02:00 felhom sudo[5636]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:48+02:00 felhom sudo[5636]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:48+02:00 felhom sudo[5624]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:48+02:00 felhom sudo[5649]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- cat /etc/network/interfaces +2026-09-14T18:18:48+02:00 felhom sudo[5649]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:49+02:00 felhom sudo[5649]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:49+02:00 felhom sudo[5655]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct exec 9201 -- pgrep -x dhclient +2026-09-14T18:18:49+02:00 felhom sudo[5655]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:50+02:00 felhom sudo[5655]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:54+02:00 felhom sudo[5697]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:18:54+02:00 felhom sudo[5697]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:54+02:00 felhom sudo[5697]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:54+02:00 felhom sudo[5700]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:18:54+02:00 felhom sudo[5700]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:54+02:00 felhom sudo[5700]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:54+02:00 felhom sudo[5703]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:18:54+02:00 felhom sudo[5703]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:54+02:00 felhom sudo[5703]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:54+02:00 felhom sudo[5715]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:18:54+02:00 felhom sudo[5715]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:54+02:00 felhom sudo[5715]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:54+02:00 felhom sudo[5718]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:18:54+02:00 felhom sudo[5718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:54+02:00 felhom sudo[5718]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:18:54+02:00 felhom sudo[5721]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/lxc-info -n 9201 -p -H +2026-09-14T18:18:54+02:00 felhom sudo[5721]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:18:54+02:00 felhom sudo[5721]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:19:06+02:00 felhom sudo[5869]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T18:19:06+02:00 felhom sudo[5869]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:19:06+02:00 felhom sudo[5869]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:19:07+02:00 felhom sudo[5881]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -a -j /dev/sda +2026-09-14T18:19:07+02:00 felhom sudo[5881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:19:07+02:00 felhom sudo[5881]: pam_unix(sudo:session): session closed for user root +2026-09-14T18:19:07+02:00 felhom sudo[5884]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/sbin/lvs --reportformat json --units b -o lv_name,data_percent,metadata_percent -- pve/data +2026-09-14T18:19:07+02:00 felhom sudo[5884]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=999) +2026-09-14T18:19:07+02:00 felhom sudo[5884]: pam_unix(sudo:session): session closed for user root diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/bootstrap-and-console.txt b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/bootstrap-and-console.txt new file mode 100644 index 00000000..8f959e3a --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/bootstrap-and-console.txt @@ -0,0 +1,182 @@ +2026-09-14T17:46:41+02:00 felhom systemd[1]: Starting felhom-bootstrap.service - Felhom host bootstrap (fetch + run felhom-host-install.sh unattended, retry until success)... +2026-09-14T17:46:41+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: console: pvebanner.service masked (it would rewrite /etc/issue with the Proxmox admin URL on every boot) +2026-09-14T17:46:41+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: console: /etc/issue is the Felhom text (no admin URL) +2026-09-14T17:46:41+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: PAIRING mode (generic ISO, no baked customer/passphrase) — hub=https://hub.felhom.eu +2026-09-14T17:46:41+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: registering unclaimed appliance at the hub +2026-09-14T17:46:41+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: registered — appliance token stored (0600); waiting for the operator or a customer self-bind +2026-09-14T17:46:41+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: console font -> Lat2-Terminus16 (Latin-2, ő/ű capable) +2026-09-14T17:46:42+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: not bound yet — polling every 30s until the operator or a customer self-bind lands (this is the normal waiting state, not an error) +2026-09-14T17:47:42+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: bind DELIVERED — writing credentials to the env and switching to direct install +2026-09-14T17:47:42+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: fetching host-install: https://felhom.eu/scripts/felhom-host-install.sh +2026-09-14T17:47:42+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: running host-install (customer=tester-1 mode=appliance hub=https://hub.felhom.eu) +2026-09-14T17:47:42+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] auto-sized guest RAM: 4096 MiB (host 7872 MiB; clamp(host-4096, min 4096, max host-2048), ceiling host-1024) +2026-09-14T17:47:42+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] auto-sized guest cores: 3 (host 4 cores; host-1, min 2) +2026-09-14T17:47:42+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] felhom-host-install v1.28.0 — mode=appliance customer=tester-1 vmid=9201 +2026-09-14T17:47:42+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] 1/8 pre-flight +2026-09-14T17:47:43+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] pve-manager/9.2.2/b9984c6d90a4bd80 (running kernel: 7.0.2-6-pve) +2026-09-14T17:47:44+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] node: felhom (auto) +2026-09-14T17:47:44+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] agent config: /etc/felhom-agent/agent.json +2026-09-14T17:47:44+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] agent: not installed yet — will be fetched + installed in step 5/8 +2026-09-14T17:47:44+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] local-lvm free: ~113 GiB +2026-09-14T17:47:44+02:00 felhom felhom-bootstrap.sh[1446]: [WARN] local-lvm free ~113 GiB < hard min 120 GiB +2026-09-14T17:47:44+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] free RAM: ~6295 MiB +2026-09-14T17:47:46+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] existing guests on this host: 0 (pct+qm) +2026-09-14T17:47:46+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] archive storage 'local' present +2026-09-14T17:47:48+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] acl storage 'felhom-pbs' not present yet — expected: the PBS-DR tier creates it; the grant is pre-positioned deliberately +2026-09-14T17:47:48+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] dnsmasq: not present before Felhom — recorded; uninstall will remove it again if we install it +2026-09-14T17:47:49+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] hub reachable (https://hub.felhom.eu) +2026-09-14T17:47:49+02:00 felhom felhom-bootstrap.sh[1446]: [OK] customer 'tester-1' exists + passphrase valid +2026-09-14T17:47:49+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] golden: none local — will fetch + verify from Gitea in step 7/8 +2026-09-14T17:47:51+02:00 felhom felhom-bootstrap.sh[1446]: [OK] pre-flight passed +2026-09-14T17:47:51+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] 2/8 Proxmox API token +2026-09-14T17:47:55+02:00 felhom felhom-bootstrap.sh[1446]: [OK] token minted (secret captured, not logged) +2026-09-14T17:48:15+02:00 felhom felhom-bootstrap.sh[1446]: [OK] scoped ACL applied (Base@/, Guest@/pool/felhom + /vms/990000..990009, Store@[local local-lvm felhom-pbs]) +2026-09-14T17:48:17+02:00 felhom felhom-bootstrap.sh[1446]: [SKIP] old broad role FelhomAgent already absent +2026-09-14T17:48:17+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] 3/8 compute volume grows +2026-09-14T17:48:17+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] auto-computed from ~113 GiB free (ONE volume since R-165) +2026-09-14T17:48:17+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] grows: rootfs +0G (->32G), data +46G (->70G, ONE volume) +2026-09-14T17:48:17+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] 4/8 host enrollment (POST /host-enroll) +2026-09-14T17:48:17+02:00 felhom felhom-bootstrap.sh[1446]: [OK] host MINTED (first enroll) +2026-09-14T17:48:17+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] host_id: tester-1-8603a2 (api_key captured, not logged) +2026-09-14T17:48:17+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] 4b/8 break-glass credential (root@pam console password → hub vault) +2026-09-14T17:48:18+02:00 felhom chpasswd[1696]: pam_unix(chpasswd:chauthtok): password changed for root +2026-09-14T17:48:18+02:00 felhom felhom-bootstrap.sh[1446]: [OK] root@pam password set + vaulted to the hub (retrieve via the operator /admin path; never logged here) +2026-09-14T17:48:18+02:00 felhom felhom-bootstrap.sh[1446]: [WARN] NOTE: the root@pam password just CHANGED — the old one now fails at the PVE web GUI (:8006). +2026-09-14T17:48:18+02:00 felhom felhom-bootstrap.sh[1446]: [WARN] Retrieve the new one at hub → host page (vaulted recovery credential). +2026-09-14T17:48:18+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] 5/8 agent install (fetch + verify + install) +2026-09-14T17:48:18+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] disabled pve-enterprise.sources (Enabled: no) +2026-09-14T17:48:18+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] disabled ceph.sources (Enabled: no) +2026-09-14T17:48:18+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] added pve-no-subscription.sources (suite=trixie) +2026-09-14T17:48:19+02:00 felhom felhom-bootstrap.sh[1446]: [OK] apt repos aligned to no-subscription (changed; apt-get update OK) +2026-09-14T17:48:19+02:00 felhom felhom-bootstrap.sh[1446]: [WARN] no git credential in controller.yaml — fetching artifacts ANONYMOUSLY (they are world-readable; sha256 verification unchanged) +2026-09-14T17:48:19+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] manifest: agent v0.130.0 (sha a56a92a7bd68f5b4…), golden v0.242.0 +2026-09-14T17:48:19+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] fetching agent binary v0.130.0 from Gitea … +2026-09-14T17:48:19+02:00 felhom felhom-bootstrap.sh[1446]: [OK] verified sha256 a56a92a7bd68f5b4… matches the hub manifest +2026-09-14T17:48:19+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed /usr/local/bin/felhom-agent (felhom-agent 0.130.0) +2026-09-14T17:48:19+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] installing the 'sudo' package (required for the non-root agent model) … +2026-09-14T17:48:23+02:00 felhom felhom-bootstrap.sh[1446]: [OK] sudo installed (Sudo version 1.9.16p2) +2026-09-14T17:48:23+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] installing the 'age' package (escrow ceremony identity-wrap dependency) … +2026-09-14T17:48:25+02:00 felhom felhom-bootstrap.sh[1446]: [OK] age installed (1.2.1) +2026-09-14T17:48:25+02:00 felhom useradd[1933]: new group: name=felhom-agent, GID=990 +2026-09-14T17:48:25+02:00 felhom useradd[1933]: new user: name=felhom-agent, UID=999, GID=990, home=/home/felhom-agent, shell=/usr/sbin/nologin, from=none +2026-09-14T17:48:25+02:00 felhom felhom-bootstrap.sh[1446]: [OK] created service user felhom-agent +2026-09-14T17:48:25+02:00 felhom usermod[1941]: add 'felhom-agent' to group 'systemd-journal' +2026-09-14T17:48:25+02:00 felhom usermod[1941]: add 'felhom-agent' to shadow group 'systemd-journal' +2026-09-14T17:48:25+02:00 felhom felhom-bootstrap.sh[1446]: [OK] added felhom-agent to systemd-journal (unprivileged journal read for NAS verify) +2026-09-14T17:48:27+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed /usr/local/sbin/felhom-mkfs-guarded (0755, the guarded mkfs path) +2026-09-14T17:48:27+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed /usr/local/sbin/felhom-selfupdate-guarded (0755, the guarded A/B binary-swap path) +2026-09-14T17:48:27+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed /usr/local/sbin/felhom-pbs-apply (0755, the guarded PBS-DR apply path) +2026-09-14T17:48:27+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed /usr/local/sbin/felhom-backup-target-apply (0755, the guarded backup-target path) +2026-09-14T17:48:27+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed /etc/sudoers.d/felhom-agent (0440, visudo-validated) +2026-09-14T17:48:28+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed /etc/systemd/system/felhom-agent.service + enabled (started in step 6 after config) +2026-09-14T17:48:28+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed self-update rollback unit + start-limit drop-in (auto-rollback armed) +2026-09-14T17:48:29+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed break-glass layers 1+2 (tmpfiles /run/sshd + agent-independent watchdog timer) +2026-09-14T17:48:29+02:00 felhom useradd[2209]: new group: name=felhom-op, GID=1000 +2026-09-14T17:48:29+02:00 felhom useradd[2209]: new user: name=felhom-op, UID=1000, GID=1000, home=/home/felhom-op, shell=/bin/bash, from=none +2026-09-14T17:48:31+02:00 felhom felhom-bootstrap.sh[1446]: [OK] installed OOB felhom-sshd instance + static belt (agent renders config + fills sets once oob.enabled) +2026-09-14T17:48:31+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] 6/8 agent config + service +2026-09-14T17:48:32+02:00 felhom felhom-bootstrap.sh[1446]: [WARN] backup target: DEGRADED — no eligible second drive, so the whole-system backup stays on the SYSTEM drive. +2026-09-14T17:48:32+02:00 felhom felhom-bootstrap.sh[1446]: [WARN] It protects against file corruption but NOT against a disk failure. Attach a second drive and assign it in the dashboard. +2026-09-14T17:48:32+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] creating island bridge vmbr9 (portless, 169.254.253.1/30) +2026-09-14T17:48:32+02:00 felhom felhom-bootstrap.sh[1446]: [OK] vmbr9 up: 169.254.253.1/30 +2026-09-14T17:48:32+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] R-50 island ON: local_api=169.254.253.1:8443 (vmbr9); guest net1=169.254.253.2/30; lan_resolver.host_ip=192.168.0.133 +2026-09-14T17:48:32+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] node=felhom local_api=169.254.253.1:8443 tls_fp=E1:57:97:F0:1B:32… +2026-09-14T17:48:32+02:00 felhom felhom-bootstrap.sh[1446]: [OK] wrote /etc/felhom-agent/agent.json (0600 felhom-agent) +2026-09-14T17:48:32+02:00 felhom felhom-bootstrap.sh[1446]: [OK] agent --selftest (read-only) passed +2026-09-14T17:48:36+02:00 felhom felhom-bootstrap.sh[1446]: [OK] felhom-agent service active (non-root felhom-agent reads the config OK) +2026-09-14T17:48:36+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] 7/8 golden archive +2026-09-14T17:48:36+02:00 felhom felhom-bootstrap.sh[1446]: [WARN] no git credential in controller.yaml — fetching artifacts ANONYMOUSLY (they are world-readable; sha256 verification unchanged) +2026-09-14T17:48:36+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] fetching golden v0.242.0 from Gitea → /var/lib/vz/dump/vzdump-lxc-9100-2026_09_14-17_48_36.tar.zst +2026-09-14T17:48:44+02:00 felhom felhom-bootstrap.sh[1446]: [OK] verified sha256 3ab480ddb7c1e690… matches the hub manifest +2026-09-14T17:48:45+02:00 felhom felhom-bootstrap.sh[1446]: [OK] golden imported + verified: local:backup/vzdump-lxc-9100-2026_09_14-17_48_36.tar.zst +2026-09-14T17:48:45+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] 8/8 provision guest 9201 +2026-09-14T17:48:46+02:00 felhom felhom-bootstrap.sh[1446]: [SKIP] pool felhom already exists +2026-09-14T17:48:46+02:00 felhom felhom-bootstrap.sh[3458]: === felhom-agent 0.130.0 selftest=provision (vmid=9201 customer=tester-1 hostname=tester-1) === +2026-09-14T17:48:46+02:00 felhom felhom-bootstrap.sh[3458]: --- front half: bring-up (provision) local:backup/vzdump-lxc-9100-2026_09_14-17_48_36.tar.zst → vmid 9201 --- +2026-09-14T17:49:34+02:00 felhom felhom-bootstrap.sh[3458]: time=2026-09-14T17:49:34.992+02:00 level=INFO msg="bring-up: pool membership re-asserted" vmid=9201 pool=felhom +2026-09-14T17:49:34+02:00 felhom felhom-bootstrap.sh[3458]: [OK] front half: vmid 9201 up (boot+running) in 49s; MAC=BC:24:11:B7:25:AA +2026-09-14T17:49:34+02:00 felhom felhom-bootstrap.sh[3458]: --- back half: mint per-guest token + populate bootstrap config mount --- +2026-09-14T17:49:35+02:00 felhom sudo[4482]: root : PWD=/ ; USER=root ; COMMAND=/usr/bin/chown --reference=/var/lib/felhom-agent /var/lib/felhom-agent/guests /var/lib/felhom-agent/guests/9201 +2026-09-14T17:49:35+02:00 felhom sudo[4482]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) +2026-09-14T17:49:35+02:00 felhom sudo[4482]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:35+02:00 felhom sudo[4485]: root : PWD=/ ; USER=root ; COMMAND=/usr/bin/chown -R 100000:100000 /var/lib/felhom-agent/guests/9201/bootstrap +2026-09-14T17:49:35+02:00 felhom sudo[4485]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) +2026-09-14T17:49:35+02:00 felhom sudo[4485]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:35+02:00 felhom sudo[4488]: root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct set 9201 -mp9 /var/lib/felhom-agent/guests/9201/bootstrap,mp=/etc/felhom-bootstrap,ro=1 +2026-09-14T17:49:35+02:00 felhom sudo[4488]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) +2026-09-14T17:49:36+02:00 felhom sudo[4488]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:36+02:00 felhom sudo[4550]: root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct set 9201 -onboot 1 +2026-09-14T17:49:36+02:00 felhom sudo[4550]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) +2026-09-14T17:49:37+02:00 felhom sudo[4550]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:37+02:00 felhom sudo[4707]: root : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /var/lib/vz/snippets +2026-09-14T17:49:37+02:00 felhom sudo[4707]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) +2026-09-14T17:49:37+02:00 felhom sudo[4707]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:37+02:00 felhom sudo[4718]: root : PWD=/ ; USER=root ; COMMAND=/usr/bin/install -m 0755 -- /tmp/felhom-guest-hook-3285855649.sh /var/lib/vz/snippets/felhom-guest-hook.sh +2026-09-14T17:49:37+02:00 felhom sudo[4718]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) +2026-09-14T17:49:37+02:00 felhom sudo[4718]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:37+02:00 felhom sudo[4735]: root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct set 9201 --hookscript local:snippets/felhom-guest-hook.sh +2026-09-14T17:49:37+02:00 felhom sudo[4735]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) +2026-09-14T17:49:38+02:00 felhom sudo[4735]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:38+02:00 felhom sudo[5150]: root : PWD=/ ; USER=root ; COMMAND=/usr/bin/mkdir -p /mnt/felhom-drives +2026-09-14T17:49:38+02:00 felhom sudo[5150]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) +2026-09-14T17:49:38+02:00 felhom sudo[5150]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:38+02:00 felhom sudo[5153]: root : PWD=/ ; USER=root ; COMMAND=/usr/sbin/pct set 9201 -mp8 /mnt/felhom-drives,mp=/mnt/felhom-drives +2026-09-14T17:49:38+02:00 felhom sudo[5153]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) +2026-09-14T17:49:39+02:00 felhom sudo[5153]: pam_unix(sudo:session): session closed for user root +2026-09-14T17:49:39+02:00 felhom felhom-bootstrap.sh[3458]: time=2026-09-14T17:49:39.648+02:00 level=INFO msg="provision: back-half complete" vmid=9201 mount=mp9 guest_path=/etc/felhom-bootstrap endpoint=169.254.253.1:8443 +2026-09-14T17:49:39+02:00 felhom felhom-bootstrap.sh[3458]: [OK] back half: bootstrap mount mp9 → /etc/felhom-bootstrap on vmid 9201 (host dir /var/lib/felhom-agent/guests/9201/bootstrap) +2026-09-14T17:49:39+02:00 felhom felhom-bootstrap.sh[3458]: local-api endpoint 169.254.253.1:8443 · leaf fp 7bf6119f955f2011bf98514f87101fa3cea82adb4e4028e04b6cd79ac7103218 · token: minted (not printed) +2026-09-14T17:49:39+02:00 felhom felhom-bootstrap.sh[3458]: === selftest=provision OK — guest 9201 provisioned + bootstrap-mounted (KEPT) === +2026-09-14T17:49:39+02:00 felhom felhom-bootstrap.sh[3458]: next: reboot the guest → the golden's baked controller-bootstrap unit deploys the controller, +2026-09-14T17:49:39+02:00 felhom felhom-bootstrap.sh[3458]: which PULLS its controller.yaml from the hub (retrieval passphrase) and merges in this local_api. +2026-09-14T17:49:39+02:00 felhom felhom-bootstrap.sh[1446]: [OK] provision completed +2026-09-14T17:49:39+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] rebooting guest 9201 so the baked controller-bootstrap unit picks up the mount +2026-09-14T17:49:41+02:00 felhom pct[5370]: starting task UPID:felhom:00001517:00004D76:6AA81795:vzreboot:9201:root@pam: +2026-09-14T17:49:41+02:00 felhom pct[5399]: requesting reboot of CT 9201: UPID:felhom:00001517:00004D76:6AA81795:vzreboot:9201:root@pam: +2026-09-14T17:49:47+02:00 felhom pct[5370]: end task UPID:felhom:00001517:00004D76:6AA81795:vzreboot:9201:root@pam: OK +2026-09-14T17:49:47+02:00 felhom felhom-bootstrap.sh[1446]: [STEP] verify +2026-09-14T17:49:48+02:00 felhom felhom-bootstrap.sh[1446]: [OK] pct status: running +2026-09-14T17:49:49+02:00 felhom felhom-bootstrap.sh[1446]: [OK] onboot: 1 +2026-09-14T17:49:50+02:00 felhom felhom-bootstrap.sh[6179]: mp0: local-lvm:vm-9201-disk-1,mp=/var/lib/felhom,backup=1,size=70G +2026-09-14T17:49:50+02:00 felhom felhom-bootstrap.sh[6179]: mp8: /mnt/felhom-drives,mp=/mnt/felhom-drives +2026-09-14T17:49:50+02:00 felhom felhom-bootstrap.sh[6179]: rootfs: local-lvm:vm-9201-disk-0,size=32G +2026-09-14T17:49:52+02:00 felhom felhom-bootstrap.sh[1446]: [OK] pool: guest 9201 is a member of felhom +2026-09-14T17:49:53+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentBase@/ present (user+token) +2026-09-14T17:49:54+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/pool/felhom present (user+token) +2026-09-14T17:49:55+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentStore@/storage/local present (user+token) +2026-09-14T17:49:57+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentStore@/storage/local-lvm present (user+token) +2026-09-14T17:49:58+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentStore@/storage/felhom-pbs present (user+token) +2026-09-14T17:49:59+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990000 present (user+token) +2026-09-14T17:50:00+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990001 present (user+token) +2026-09-14T17:50:01+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990002 present (user+token) +2026-09-14T17:50:02+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990003 present (user+token) +2026-09-14T17:50:03+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990004 present (user+token) +2026-09-14T17:50:04+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990005 present (user+token) +2026-09-14T17:50:06+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990006 present (user+token) +2026-09-14T17:50:07+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990007 present (user+token) +2026-09-14T17:50:08+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990008 present (user+token) +2026-09-14T17:50:09+02:00 felhom felhom-bootstrap.sh[1446]: [OK] acl: FelhomAgentGuest@/vms/990009 present (user+token) +2026-09-14T17:50:09+02:00 felhom felhom-bootstrap.sh[1446]: [OK] authz signers: 2 (operator-signed self-update armed) +2026-09-14T17:50:10+02:00 felhom felhom-bootstrap.sh[1446]: [OK] controller: Up 19 seconds (healthy) (after ~0s) +2026-09-14T17:50:11+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] controller image: gitea.dooplex.hu/admin/felhom-controller:0.242.0 +2026-09-14T17:50:12+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] cloudflared: Up 22 seconds +2026-09-14T17:50:12+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] (confirm in the hub UI that host tester-1-8603a2 reports guest 9201) +2026-09-14T17:50:12+02:00 felhom felhom-bootstrap.sh[1446]: [OK] Day-0 provision SUCCESS — vmid=9201 host_id=tester-1-8603a2 customer=tester-1 golden=local:backup/vzdump-lxc-9100-2026_09_14-17_48_36.tar.zst +2026-09-14T17:50:12+02:00 felhom felhom-bootstrap.sh[1446]: [INFO] root@pam was rotated + vaulted at step 4b — retrieve at hub → host page (the old GUI password no longer works). +2026-09-14T17:50:12+02:00 felhom felhom-bootstrap.sh[1168]: felhom-bootstrap: host-install SUCCESS — writing done-flag, disabling unit, scrubbing secrets +2026-09-14T17:50:12+02:00 felhom systemd[1]: felhom-bootstrap.service: Deactivated successfully. +2026-09-14T17:50:12+02:00 felhom systemd[1]: Finished felhom-bootstrap.service - Felhom host bootstrap (fetch + run felhom-host-install.sh unattended, retry until success). +2026-09-14T17:50:12+02:00 felhom systemd[1]: felhom-bootstrap.service: Consumed 1min 24.426s CPU time, 903.4M memory peak. +=== +felhom-bootstrap postinst: arg1=configure date=2026-09-14T15:43:14+00:00 +Created symlink '/etc/systemd/system/multi-user.target.wants/felhom-bootstrap.service' -> '/usr/lib/systemd/system/felhom-bootstrap.service'. +felhom-bootstrap postinst: enabled felhom-bootstrap.service via systemctl +=== +masked +/dev/null + + Felhom otthoni szerver + + Ezen a képernyőn nincs teendőd, bejelentkezni sem kell. + A beállításhoz kövesd a Felhomtól kapott útmutatót. + diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/box-state.txt b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/box-state.txt new file mode 100644 index 00000000..77ed72f2 --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/box-state.txt @@ -0,0 +1,23 @@ +felhom-controller gitea.dooplex.hu/admin/felhom-controller:0.242.0 Up About a minute (healthy) +bookstack lscr.io/linuxserver/bookstack:26.05.2 Up 2 minutes (healthy) +bookstack-db mariadb:12.3 Up 2 minutes (healthy) +filebrowser gtstef/filebrowser:1.3.3-stable Up 2 minutes (healthy) +cloudflared cloudflare/cloudflared:2026.6.0 Up 2 minutes +traefik traefik:v3.6.7 Up 2 minutes +felhom-agent 0.130.0 +arch: amd64 +cores: 3 +features: nesting=1,keyctl=1 +hookscript: local:snippets/felhom-guest-hook.sh +hostname: tester-1 +memory: 4096 +mp0: local-lvm:vm-9201-disk-1,mp=/var/lib/felhom,backup=1,size=70G +mp8: /mnt/felhom-drives,mp=/mnt/felhom-drives +mp9: /var/lib/felhom-agent/guests/9201/bootstrap,mp=/etc/felhom-bootstrap,ro=1 +net0: name=eth0,bridge=vmbr0,hwaddr=BC:24:11:B7:25:AA,ip=dhcp,type=veth +net1: name=eth1,bridge=vmbr9,hwaddr=BC:24:11:3E:48:A0,ip=169.254.253.2/30,type=veth +onboot: 1 +ostype: debian +rootfs: local-lvm:vm-9201-disk-0,size=32G +swap: 512 +unprivileged: 1 diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/cloudflared.log b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/cloudflared.log new file mode 100644 index 00000000..039f1f53 --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/cloudflared.log @@ -0,0 +1,151 @@ +2026-09-14T15:49:38.999512914Z 2026-09-14T15:49:38Z INF Starting tunnel tunnelID=52d0c214-b833-477c-86d8-f787d9b550dd +2026-09-14T15:49:38.999576343Z 2026-09-14T15:49:38Z INF Version 2026.6.0 (Checksum 17d853580a4dd9d4d6613691c9123039c20712c38e504f028c0bb4454d43e19f) +2026-09-14T15:49:38.999728849Z 2026-09-14T15:49:38Z INF GOOS: linux, GOVersion: go1.26.4, GoArch: amd64 +2026-09-14T15:49:38.999785145Z 2026-09-14T15:49:38Z INF Settings: map[no-autoupdate:true] +2026-09-14T15:49:38.999857390Z 2026-09-14T15:49:38Z INF Environmental variables map[TUNNEL_TOKEN:*****] +2026-09-14T15:49:39.024367804Z 2026-09-14T15:49:39Z INF Generated Connector ID: ea77a4c7-c3b9-4aea-8fe5-5c68522bb6cc +2026-09-14T15:49:39.049982099Z 2026-09-14T15:49:39Z INF Initial protocol quic +2026-09-14T15:49:39.066203986Z 2026-09-14T15:49:39Z INF ICMP proxy will use 172.18.0.4 as source for IPv4 +2026-09-14T15:49:39.066233351Z 2026-09-14T15:49:39Z INF ICMP proxy will use ::1 in zone lo as source for IPv6 +2026-09-14T15:49:39.066236206Z 2026-09-14T15:49:39Z WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a group the user is already in by modifying /proc/sys/net/ipv4/ping_group_range. Otherwise cloudflared will not be able to ping this network error="Group ID 65532 is not between ping group 65534 to 65534" +2026-09-14T15:49:39.066238942Z 2026-09-14T15:49:39Z WRN ICMP proxy feature is disabled error="cannot create ICMPv4 proxy: Group ID 65532 is not between ping group 65534 to 65534 nor ICMPv6 proxy: socket: permission denied" +2026-09-14T15:49:39.134260940Z 2026-09-14T15:49:39Z INF ICMP proxy will use 172.18.0.4 as source for IPv4 +2026-09-14T15:49:39.134540283Z 2026-09-14T15:49:39Z INF ICMP proxy will use ::1 in zone lo as source for IPv6 +2026-09-14T15:49:39.134867357Z 2026-09-14T15:49:39Z INF Starting metrics server on [::]:20241/metrics +2026-09-14T15:49:39.204767098Z 2026-09-14T15:49:39Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=0 event=0 ip=198.41.200.13 +2026-09-14T15:49:39.599958014Z 2026-09-14T15:49:39Z INF Registered tunnel connection connIndex=0 connection=9556646b-50ba-46db-a002-66d974889db7 event=0 ip=198.41.200.13 location=vie05 protocol=quic +2026-09-14T15:49:39.600280209Z 2026-09-14T15:49:39Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=1 event=0 ip=198.41.192.227 +2026-09-14T15:49:40.306157317Z 2026-09-14T15:49:40Z INF Registered tunnel connection connIndex=1 connection=acf83f3b-2b0a-4fa9-aeb9-3cc5382caf42 event=0 ip=198.41.192.227 location=bud01 protocol=quic +2026-09-14T15:49:40.600067753Z 2026-09-14T15:49:40Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=2 event=0 ip=198.41.192.37 +2026-09-14T15:49:41.174547902Z 2026-09-14T15:49:41Z INF Initiating graceful shutdown due to signal terminated ... +2026-09-14T15:49:41.192128808Z 2026-09-14T15:49:41Z ERR failed to run the datagram handler error="context canceled" connIndex=0 event=0 ip=198.41.200.13 +2026-09-14T15:49:41.192155028Z 2026-09-14T15:49:41Z ERR failed to serve tunnel connection error="accept stream listener encountered a failure while serving" connIndex=0 event=0 ip=198.41.200.13 +2026-09-14T15:49:41.192166198Z 2026-09-14T15:49:41Z ERR Serve tunnel error error="accept stream listener encountered a failure while serving" connIndex=0 event=0 ip=198.41.200.13 +2026-09-14T15:49:41.192169044Z 2026-09-14T15:49:41Z INF Retrying connection in up to 1s connIndex=0 event=0 ip=198.41.200.13 +2026-09-14T15:49:41.194385401Z 2026-09-14T15:49:41Z ERR failed to run the datagram handler error="context canceled" connIndex=1 event=0 ip=198.41.192.227 +2026-09-14T15:49:41.194437338Z 2026-09-14T15:49:41Z ERR failed to serve tunnel connection error="accept stream listener encountered a failure while serving" connIndex=1 event=0 ip=198.41.192.227 +2026-09-14T15:49:41.194441867Z 2026-09-14T15:49:41Z ERR Serve tunnel error error="accept stream listener encountered a failure while serving" connIndex=1 event=0 ip=198.41.192.227 +2026-09-14T15:49:41.194444342Z 2026-09-14T15:49:41Z INF Retrying connection in up to 1s connIndex=1 event=0 ip=198.41.192.227 +2026-09-14T15:49:41.296656821Z 2026-09-14T15:49:41Z INF Registered tunnel connection connIndex=2 connection=42080413-3923-4da5-9d97-f4f49082e35c event=0 ip=198.41.192.37 location=bud01 protocol=quic +2026-09-14T15:49:41.322984373Z 2026-09-14T15:49:41Z ERR failed to run the datagram handler error="Application error 0x0 (remote)" connIndex=2 event=0 ip=198.41.192.37 +2026-09-14T15:49:41.323015802Z 2026-09-14T15:49:41Z ERR failed to serve tunnel connection error="accept stream listener encountered a failure while serving" connIndex=2 event=0 ip=198.41.192.37 +2026-09-14T15:49:41.323020481Z 2026-09-14T15:49:41Z ERR Serve tunnel error error="accept stream listener encountered a failure while serving" connIndex=2 event=0 ip=198.41.192.37 +2026-09-14T15:49:41.323023917Z 2026-09-14T15:49:41Z INF Retrying connection in up to 1s connIndex=2 event=0 ip=198.41.192.37 +2026-09-14T15:49:41.601241508Z 2026-09-14T15:49:41Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=3 event=0 ip=198.41.200.23 +2026-09-14T15:49:41.917089812Z 2026-09-14T15:49:41Z INF Registered tunnel connection connIndex=3 connection=3fd734ce-d1d6-401d-b315-ed2ac8a6584f event=0 ip=198.41.200.23 location=vie06 protocol=quic +2026-09-14T15:49:41.944469648Z 2026-09-14T15:49:41Z ERR failed to run the datagram handler error="Application error 0x0 (remote)" connIndex=3 event=0 ip=198.41.200.23 +2026-09-14T15:49:41.944506507Z 2026-09-14T15:49:41Z ERR failed to serve tunnel connection error="accept stream listener encountered a failure while serving" connIndex=3 event=0 ip=198.41.200.23 +2026-09-14T15:49:41.944585806Z 2026-09-14T15:49:41Z ERR Serve tunnel error error="accept stream listener encountered a failure while serving" connIndex=3 event=0 ip=198.41.200.23 +2026-09-14T15:49:41.944660667Z 2026-09-14T15:49:41Z INF Retrying connection in up to 1s connIndex=3 event=0 ip=198.41.200.23 +2026-09-14T15:49:42.601150420Z 2026-09-14T15:49:42Z ERR Connection terminated connIndex=0 +2026-09-14T15:49:42.601186098Z 2026-09-14T15:49:42Z ERR Connection terminated connIndex=1 +2026-09-14T15:49:42.601190225Z 2026-09-14T15:49:42Z ERR Connection terminated connIndex=2 +2026-09-14T15:49:42.601193632Z 2026-09-14T15:49:42Z ERR Connection terminated connIndex=3 +2026-09-14T15:49:42.601210032Z 2026-09-14T15:49:42Z ERR no more connections active and exiting +2026-09-14T15:49:42.601212557Z 2026-09-14T15:49:42Z INF Tunnel server stopped +2026-09-14T15:49:42.601291795Z 2026-09-14T15:49:42Z INF Metrics server stopped +2026-09-14T15:49:50.440523819Z 2026-09-14T15:49:50Z INF Starting tunnel tunnelID=52d0c214-b833-477c-86d8-f787d9b550dd +2026-09-14T15:49:50.441128914Z 2026-09-14T15:49:50Z INF Version 2026.6.0 (Checksum 17d853580a4dd9d4d6613691c9123039c20712c38e504f028c0bb4454d43e19f) +2026-09-14T15:49:50.441275599Z 2026-09-14T15:49:50Z INF GOOS: linux, GOVersion: go1.26.4, GoArch: amd64 +2026-09-14T15:49:50.441460837Z 2026-09-14T15:49:50Z INF Settings: map[no-autoupdate:true] +2026-09-14T15:49:50.441796176Z 2026-09-14T15:49:50Z INF Environmental variables map[TUNNEL_TOKEN:*****] +2026-09-14T15:49:50.463992058Z 2026-09-14T15:49:50Z INF Generated Connector ID: 8ac0a821-f4db-47f5-b996-5496f31ea266 +2026-09-14T15:49:50.494034178Z 2026-09-14T15:49:50Z INF Initial protocol quic +2026-09-14T15:49:50.531026985Z 2026-09-14T15:49:50Z INF ICMP proxy will use 172.18.0.2 as source for IPv4 +2026-09-14T15:49:50.534817545Z 2026-09-14T15:49:50Z INF ICMP proxy will use ::1 in zone lo as source for IPv6 +2026-09-14T15:49:50.534846500Z 2026-09-14T15:49:50Z WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a group the user is already in by modifying /proc/sys/net/ipv4/ping_group_range. Otherwise cloudflared will not be able to ping this network error="Group ID 65532 is not between ping group 65534 to 65534" +2026-09-14T15:49:50.534858192Z 2026-09-14T15:49:50Z WRN ICMP proxy feature is disabled error="cannot create ICMPv4 proxy: Group ID 65532 is not between ping group 65534 to 65534 nor ICMPv6 proxy: socket: permission denied" +2026-09-14T15:49:50.613981012Z 2026-09-14T15:49:50Z INF ICMP proxy will use 172.18.0.2 as source for IPv4 +2026-09-14T15:49:50.614011629Z 2026-09-14T15:49:50Z INF ICMP proxy will use ::1 in zone lo as source for IPv6 +2026-09-14T15:49:50.614014604Z 2026-09-14T15:49:50Z INF Starting metrics server on [::]:20241/metrics +2026-09-14T15:49:50.695759212Z 2026-09-14T15:49:50Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=0 event=0 ip=198.41.192.57 +2026-09-14T15:49:51.300625796Z 2026-09-14T15:49:51Z INF Registered tunnel connection connIndex=0 connection=c9deac37-2853-48f3-bd84-3539af676872 event=0 ip=198.41.192.57 location=bud01 protocol=quic +2026-09-14T15:49:51.300842583Z 2026-09-14T15:49:51Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=1 event=0 ip=198.41.200.63 +2026-09-14T15:49:51.597962161Z 2026-09-14T15:49:51Z INF Registered tunnel connection connIndex=1 connection=e7c269fa-8f91-4786-81ee-d478b90c1144 event=0 ip=198.41.200.63 location=vie06 protocol=quic +2026-09-14T15:49:52.337158979Z 2026-09-14T15:49:52Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=2 event=0 ip=198.41.200.43 +2026-09-14T15:49:52.660786683Z 2026-09-14T15:49:52Z INF Registered tunnel connection connIndex=2 connection=8cae61f1-446f-4fa9-b8e5-11fafd2b0de8 event=0 ip=198.41.200.43 location=vie05 protocol=quic +2026-09-14T15:49:53.337206513Z 2026-09-14T15:49:53Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=3 event=0 ip=198.41.192.167 +2026-09-14T15:49:53.956135989Z 2026-09-14T15:49:53Z INF Registered tunnel connection connIndex=3 connection=80ca33ef-e8f2-4334-8d20-009ec3712025 event=0 ip=198.41.192.167 location=bud01 protocol=quic +2026-09-14T15:49:56.690559748Z 2026-09-14T15:49:56Z INF +-------------------------------------------------------------------------------------+ +2026-09-14T15:49:56.690624090Z 2026-09-14T15:49:56Z INF | CONNECTIVITY PRE-CHECKS | +2026-09-14T15:49:56.690631473Z 2026-09-14T15:49:56Z INF +-------------------------------------------------------------------------------------+ +2026-09-14T15:49:56.690637494Z 2026-09-14T15:49:56Z INF | COMPONENT TARGET STATUS DETAILS | +2026-09-14T15:49:56.690642294Z 2026-09-14T15:49:56Z INF | DNS Resolution region1.v2.argotunnel.com PASS DNS Resolved successfully | +2026-09-14T15:49:56.690646481Z 2026-09-14T15:49:56Z INF | DNS Resolution region2.v2.argotunnel.com PASS DNS Resolved successfully | +2026-09-14T15:49:56.690649858Z 2026-09-14T15:49:56Z INF | UDP Connectivity region1.v2.argotunnel.com PASS QUIC connection successful | +2026-09-14T15:49:56.690837050Z 2026-09-14T15:49:56Z INF | UDP Connectivity region2.v2.argotunnel.com PASS QUIC connection successful | +2026-09-14T15:49:56.690842430Z 2026-09-14T15:49:56Z INF | TCP Connectivity region1.v2.argotunnel.com PASS HTTP/2 connection successful | +2026-09-14T15:49:56.690845656Z 2026-09-14T15:49:56Z INF | TCP Connectivity region2.v2.argotunnel.com PASS HTTP/2 connection successful | +2026-09-14T15:49:56.690849062Z 2026-09-14T15:49:56Z INF | Cloudflare API api.cloudflare.com:443 PASS API is reachable | +2026-09-14T15:49:56.690852989Z 2026-09-14T15:49:56Z INF | | +2026-09-14T15:49:56.690855895Z 2026-09-14T15:49:56Z INF | SUMMARY: Environment is healthy. cloudflared will use 'quic' as primary protocol. | +2026-09-14T15:49:56.690858911Z 2026-09-14T15:49:56Z INF +-------------------------------------------------------------------------------------+ +2026-09-14T15:49:56.690861846Z 2026-09-14T15:49:56Z INF precheck component="DNS Resolution" details="DNS Resolved successfully" run_id=09f3250c-5ae6-4a5a-8827-e3f2e36091f5 status=pass target=region1.v2.argotunnel.com +2026-09-14T15:49:56.690867828Z 2026-09-14T15:49:56Z INF precheck component="DNS Resolution" details="DNS Resolved successfully" run_id=09f3250c-5ae6-4a5a-8827-e3f2e36091f5 status=pass target=region2.v2.argotunnel.com +2026-09-14T15:49:56.690870773Z 2026-09-14T15:49:56Z INF precheck component="UDP Connectivity" details="QUIC connection successful" run_id=09f3250c-5ae6-4a5a-8827-e3f2e36091f5 status=pass target=region1.v2.argotunnel.com +2026-09-14T15:49:56.690898194Z 2026-09-14T15:49:56Z INF precheck component="UDP Connectivity" details="QUIC connection successful" run_id=09f3250c-5ae6-4a5a-8827-e3f2e36091f5 status=pass target=region2.v2.argotunnel.com +2026-09-14T15:49:56.690919945Z 2026-09-14T15:49:56Z INF precheck component="TCP Connectivity" details="HTTP/2 connection successful" run_id=09f3250c-5ae6-4a5a-8827-e3f2e36091f5 status=pass target=region1.v2.argotunnel.com +2026-09-14T15:49:56.690924283Z 2026-09-14T15:49:56Z INF precheck component="TCP Connectivity" details="HTTP/2 connection successful" run_id=09f3250c-5ae6-4a5a-8827-e3f2e36091f5 status=pass target=region2.v2.argotunnel.com +2026-09-14T15:49:56.690928090Z 2026-09-14T15:49:56Z INF precheck component="Cloudflare API" details="API is reachable" run_id=09f3250c-5ae6-4a5a-8827-e3f2e36091f5 status=pass target=api.cloudflare.com:443 +2026-09-14T15:49:56.690932559Z 2026-09-14T15:49:56Z INF precheck complete hard_fail=false run_id=09f3250c-5ae6-4a5a-8827-e3f2e36091f5 suggested_protocol=quic +2026-09-14T15:51:18.127552753Z 2026-09-14T15:51:18Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T15:51:18.382956475Z 2026-09-14T15:51:18Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T15:53:26.645683195Z 2026-09-14T15:53:26Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:00:49.819488978Z 2026-09-14T16:00:49Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:00:55.068310269Z 2026-09-14T16:00:55Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:00.288754117Z 2026-09-14T16:01:00Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:05.511590962Z 2026-09-14T16:01:05Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:10.687833923Z 2026-09-14T16:01:10Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:15.868177506Z 2026-09-14T16:01:15Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:21.073440415Z 2026-09-14T16:01:21Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:26.298439413Z 2026-09-14T16:01:26Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:31.483912452Z 2026-09-14T16:01:31Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:36.664012316Z 2026-09-14T16:01:36Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:41.847764896Z 2026-09-14T16:01:41Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:01:47.029641011Z 2026-09-14T16:01:47Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:08:41.383715295Z 2026-09-14T16:08:41Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:08:47.706971475Z 2026-09-14T16:08:47Z WRN No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests +2026-09-14T16:17:20.849332808Z 2026-09-14T16:17:20Z INF Starting tunnel tunnelID=52d0c214-b833-477c-86d8-f787d9b550dd +2026-09-14T16:17:20.852203639Z 2026-09-14T16:17:20Z INF Version 2026.6.0 (Checksum 17d853580a4dd9d4d6613691c9123039c20712c38e504f028c0bb4454d43e19f) +2026-09-14T16:17:20.852256829Z 2026-09-14T16:17:20Z INF GOOS: linux, GOVersion: go1.26.4, GoArch: amd64 +2026-09-14T16:17:20.852260846Z 2026-09-14T16:17:20Z INF Settings: map[no-autoupdate:true] +2026-09-14T16:17:20.852263752Z 2026-09-14T16:17:20Z INF Environmental variables map[TUNNEL_TOKEN:*****] +2026-09-14T16:17:20.871223708Z 2026-09-14T16:17:20Z INF Generated Connector ID: daa6aa70-d3a8-4bb3-98d7-3929ced4bae9 +2026-09-14T16:17:20.912520359Z 2026-09-14T16:17:20Z INF Initial protocol quic +2026-09-14T16:17:20.934920384Z 2026-09-14T16:17:20Z INF ICMP proxy will use 172.18.0.4 as source for IPv4 +2026-09-14T16:17:20.934966972Z 2026-09-14T16:17:20Z INF ICMP proxy will use ::1 in zone lo as source for IPv6 +2026-09-14T16:17:20.934983923Z 2026-09-14T16:17:20Z WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a group the user is already in by modifying /proc/sys/net/ipv4/ping_group_range. Otherwise cloudflared will not be able to ping this network error="Group ID 65532 is not between ping group 65534 to 65534" +2026-09-14T16:17:20.934988492Z 2026-09-14T16:17:20Z WRN ICMP proxy feature is disabled error="cannot create ICMPv4 proxy: Group ID 65532 is not between ping group 65534 to 65534 nor ICMPv6 proxy: socket: permission denied" +2026-09-14T16:17:21.014053052Z 2026-09-14T16:17:21Z INF ICMP proxy will use 172.18.0.4 as source for IPv4 +2026-09-14T16:17:21.014718419Z 2026-09-14T16:17:21Z INF ICMP proxy will use ::1 in zone lo as source for IPv6 +2026-09-14T16:17:21.015779168Z 2026-09-14T16:17:21Z INF Starting metrics server on [::]:20241/metrics +2026-09-14T16:17:21.115256506Z 2026-09-14T16:17:21Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=0 event=0 ip=198.41.192.47 +2026-09-14T16:17:21.519415740Z 2026-09-14T16:17:21Z INF Registered tunnel connection connIndex=0 connection=f21803bc-ba29-4b78-80d0-65fb5e95313c event=0 ip=198.41.192.47 location=bud01 protocol=quic +2026-09-14T16:17:21.519485050Z 2026-09-14T16:17:21Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=1 event=0 ip=198.41.200.193 +2026-09-14T16:17:21.926166721Z 2026-09-14T16:17:21Z INF Registered tunnel connection connIndex=1 connection=6ea3cc36-fe6f-493e-9774-820e1b618503 event=0 ip=198.41.200.193 location=vie06 protocol=quic +2026-09-14T16:17:22.518251261Z 2026-09-14T16:17:22Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=2 event=0 ip=198.41.200.23 +2026-09-14T16:17:22.785054529Z 2026-09-14T16:17:22Z INF Registered tunnel connection connIndex=2 connection=97263e3a-2595-4950-b349-de9bd2782c14 event=0 ip=198.41.200.23 location=vie06 protocol=quic +2026-09-14T16:17:23.518709784Z 2026-09-14T16:17:23Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(65074) CurveP256] connIndex=3 event=0 ip=198.41.192.37 +2026-09-14T16:17:24.199823321Z 2026-09-14T16:17:24Z INF Registered tunnel connection connIndex=3 connection=9456de1f-d1e5-4a84-bfe1-555a12c6de89 event=0 ip=198.41.192.37 location=bud01 protocol=quic +2026-09-14T16:17:27.091056710Z 2026-09-14T16:17:27Z INF +-------------------------------------------------------------------------------------+ +2026-09-14T16:17:27.091104571Z 2026-09-14T16:17:27Z INF | CONNECTIVITY PRE-CHECKS | +2026-09-14T16:17:27.091109660Z 2026-09-14T16:17:27Z INF +-------------------------------------------------------------------------------------+ +2026-09-14T16:17:27.091170153Z 2026-09-14T16:17:27Z INF | COMPONENT TARGET STATUS DETAILS | +2026-09-14T16:17:27.091175353Z 2026-09-14T16:17:27Z INF | DNS Resolution region1.v2.argotunnel.com PASS DNS Resolved successfully | +2026-09-14T16:17:27.091178058Z 2026-09-14T16:17:27Z INF | DNS Resolution region2.v2.argotunnel.com PASS DNS Resolved successfully | +2026-09-14T16:17:27.091180513Z 2026-09-14T16:17:27Z INF | UDP Connectivity region1.v2.argotunnel.com PASS QUIC connection successful | +2026-09-14T16:17:27.091182867Z 2026-09-14T16:17:27Z INF | UDP Connectivity region2.v2.argotunnel.com PASS QUIC connection successful | +2026-09-14T16:17:27.091185151Z 2026-09-14T16:17:27Z INF | TCP Connectivity region1.v2.argotunnel.com PASS HTTP/2 connection successful | +2026-09-14T16:17:27.091187376Z 2026-09-14T16:17:27Z INF | TCP Connectivity region2.v2.argotunnel.com PASS HTTP/2 connection successful | +2026-09-14T16:17:27.091189600Z 2026-09-14T16:17:27Z INF | Cloudflare API api.cloudflare.com:443 PASS API is reachable | +2026-09-14T16:17:27.091191834Z 2026-09-14T16:17:27Z INF | | +2026-09-14T16:17:27.091194048Z 2026-09-14T16:17:27Z INF | SUMMARY: Environment is healthy. cloudflared will use 'quic' as primary protocol. | +2026-09-14T16:17:27.091196272Z 2026-09-14T16:17:27Z INF +-------------------------------------------------------------------------------------+ +2026-09-14T16:17:27.091198616Z 2026-09-14T16:17:27Z INF precheck component="DNS Resolution" details="DNS Resolved successfully" run_id=365159b5-4e86-4a0d-89ec-81c445e60ca9 status=pass target=region1.v2.argotunnel.com +2026-09-14T16:17:27.091359839Z 2026-09-14T16:17:27Z INF precheck component="DNS Resolution" details="DNS Resolved successfully" run_id=365159b5-4e86-4a0d-89ec-81c445e60ca9 status=pass target=region2.v2.argotunnel.com +2026-09-14T16:17:27.091381139Z 2026-09-14T16:17:27Z INF precheck component="UDP Connectivity" details="QUIC connection successful" run_id=365159b5-4e86-4a0d-89ec-81c445e60ca9 status=pass target=region1.v2.argotunnel.com +2026-09-14T16:17:27.091384055Z 2026-09-14T16:17:27Z INF precheck component="UDP Connectivity" details="QUIC connection successful" run_id=365159b5-4e86-4a0d-89ec-81c445e60ca9 status=pass target=region2.v2.argotunnel.com +2026-09-14T16:17:27.091386700Z 2026-09-14T16:17:27Z INF precheck component="TCP Connectivity" details="HTTP/2 connection successful" run_id=365159b5-4e86-4a0d-89ec-81c445e60ca9 status=pass target=region1.v2.argotunnel.com +2026-09-14T16:17:27.091389305Z 2026-09-14T16:17:27Z INF precheck component="TCP Connectivity" details="HTTP/2 connection successful" run_id=365159b5-4e86-4a0d-89ec-81c445e60ca9 status=pass target=region2.v2.argotunnel.com +2026-09-14T16:17:27.091391809Z 2026-09-14T16:17:27Z INF precheck component="Cloudflare API" details="API is reachable" run_id=365159b5-4e86-4a0d-89ec-81c445e60ca9 status=pass target=api.cloudflare.com:443 +2026-09-14T16:17:27.091394263Z 2026-09-14T16:17:27Z INF precheck complete hard_fail=false run_id=365159b5-4e86-4a0d-89ec-81c445e60ca9 suggested_protocol=quic diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/controller.log b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/controller.log new file mode 100644 index 00000000..5035c772 --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/controller.log @@ -0,0 +1,116 @@ +2026-09-14T16:17:22.093450581Z 2026/09/14 16:17:22 [INFO] local-api: channel up (agent 169.254.253.1:8443) — guest 9201, 3 mount(s) visible +2026-09-14T16:17:22.093536461Z 2026/09/14 16:17:22 [INFO] local-api: mount mp0 → /var/lib/felhom (storage=local-lvm, class=, backup=true) +2026-09-14T16:17:22.093544305Z 2026/09/14 16:17:22 [INFO] local-api: mount mp9 → /etc/felhom-bootstrap (storage=/var/lib/felhom-agent/guests/9201/bootstrap, class=, backup=false) +2026-09-14T16:17:22.093548503Z 2026/09/14 16:17:22 [INFO] local-api: mount mp8 → /mnt/felhom-drives (storage=/mnt/felhom-drives, class=, backup=false) +2026-09-14T16:17:22.093552290Z 2026/09/14 16:17:22 [INFO] felhom-controller 0.242.0 starting (customer: tester-1, domain: enkicsifelhom.hu) +2026-09-14T16:17:22.094298018Z 2026/09/14 16:17:22 [INFO] [settings] Loaded settings from /opt/docker/felhom-controller/data/settings.json +2026-09-14T16:17:22.105255566Z 2026/09/14 16:17:22 [INFO] Encryption key loaded from /opt/docker/felhom-controller/data/encryption.key +2026-09-14T16:17:22.252842877Z 2026/09/14 16:17:22 [INFO] [stacks] Using compose command: docker compose +2026-09-14T16:17:22.297738956Z 2026/09/14 16:17:22 [INFO] [stacks] ScanStacks complete: 56 stacks found (1 deployed, 55 available) +2026-09-14T16:17:22.319230718Z 2026/09/14 16:17:22 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:17:22.319717500Z 2026/09/14 16:17:22 [INFO] [stacks] InjectMissingFields: processed 1 stacks +2026-09-14T16:17:22.319989961Z 2026/09/14 16:17:22 [INFO] [stacks] Encryption migration: no stacks needed migration +2026-09-14T16:17:22.322142385Z 2026/09/14 16:17:22 [INFO] [quiesce] loop started (poll 5m0s, max-quiesce 30m0s) +2026-09-14T16:17:22.324331619Z 2026/09/14 16:17:22 [DEBUG] [stacks] SaveAppConfig: saving /opt/docker/stacks/bookstack — 4 env vars, 0 encrypted, 2 sensitive fields +2026-09-14T16:17:22.324351686Z 2026/09/14 16:17:22 [INFO] [stacks] SaveAppConfig: saved config for bookstack +2026-09-14T16:17:22.324464578Z 2026/09/14 16:17:22 [INFO] [stacks] desired state for bookstack recorded as "running" (was "") +2026-09-14T16:17:22.324641239Z 2026/09/14 16:17:22 [INFO] [stacks] desired-state backfill: 1 app(s) recorded as running, 0 left unrecorded (state ambiguous — legacy boot behaviour retained) +2026-09-14T16:17:22.327457628Z 2026/09/14 16:17:22 [INFO] [stacks] installed-images backfill: 0 app(s) recorded, 1 already had a record, 0 left unrecorded (could not be observed completely — unknown, which renders nothing) +2026-09-14T16:17:22.327678311Z 2026/09/14 16:17:22 [INFO] [stacks] pin adoption: 0 pinned, 1 already pinned, 0 left unpinned (0 not completely observed, 0 running something the template no longer offers) +2026-09-14T16:17:22.327786123Z 2026/09/14 16:17:22 [INFO] [sync] Starting catalog sync (repo: https://gitea.dooplex.hu/admin/app-catalog-felhom.eu.git, interval: 15m0s) +2026-09-14T16:17:22.328750331Z 2026/09/14 16:17:22 [INFO] [sync] Starting catalog sync +2026-09-14T16:17:22.330730121Z 2026/09/14 16:17:22 [INFO] [sync] Pulling latest from https://gitea.dooplex.hu/admin/app-catalog-felhom.eu.git (branch: main) +2026-09-14T16:17:22.337597072Z 2026/09/14 16:17:22 [INFO] Metrics store opened at /opt/docker/felhom-controller/data/metrics.db +2026-09-14T16:17:22.337731824Z 2026/09/14 16:17:22 [INFO] Metrics collector started (60s interval) +2026-09-14T16:17:22.338642081Z 2026/09/14 16:17:22 [INFO] Notifier enabled (hub: https://hub.felhom.eu) +2026-09-14T16:17:22.338806309Z 2026/09/14 16:17:22 [INFO] Self-update enabled (check every 6h, auto-update: false, auto-update time: 04:30) +2026-09-14T16:17:22.338900355Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: status-refresh (every 10s) +2026-09-14T16:17:22.339080212Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: stack-scan (every 2m0s) +2026-09-14T16:17:22.339301146Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: health-probes (every 10s) +2026-09-14T16:17:22.340259623Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: system-health (every 5m0s) +2026-09-14T16:17:22.342519258Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: deadapp-check (every 30s) +2026-09-14T16:17:22.343381133Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: ring-spill (every 30s) +2026-09-14T16:17:22.346197972Z 2026/09/14 16:17:22 [INFO] [scheduler] Daily job db-dump scheduled for 2026-09-15 02:30 CEST +2026-09-14T16:17:22.346247035Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: offsite-credential-retry (every 5m0s) +2026-09-14T16:17:22.346251804Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: backup-cache (every 5m0s) +2026-09-14T16:17:22.346254548Z 2026/09/14 16:17:22 [INFO] [scheduler] Daily job tier2-backup scheduled for 2026-09-15 03:30 CEST +2026-09-14T16:17:22.346257193Z 2026/09/14 16:17:22 [INFO] [scheduler] Daily job offbox-backup scheduled for 2026-09-15 04:15 CEST +2026-09-14T16:17:22.346259728Z 2026/09/14 16:17:22 [INFO] [scheduler] Daily job offsite-abandon-sweep scheduled for 2026-09-15 05:10 CEST +2026-09-14T16:17:22.346262353Z 2026/09/14 16:17:22 [INFO] [scheduler] Daily job offsite-integrity scheduled for 2026-09-15 06:00 CEST +2026-09-14T16:17:22.346264718Z 2026/09/14 16:17:22 [INFO] [scheduler] Daily job offsite-proof scheduled for 2026-09-15 05:30 CEST +2026-09-14T16:17:22.346266851Z 2026/09/14 16:17:22 [INFO] [scheduler] Daily job metrics-prune scheduled for 2026-09-15 04:00 CEST +2026-09-14T16:17:22.346269086Z 2026/09/14 16:17:22 [INFO] [scheduler] Daily job fill-watch scheduled for 2026-09-15 03:30 CEST +2026-09-14T16:17:22.346272131Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: hub-report (every 15m0s) +2026-09-14T16:17:22.346274576Z 2026/09/14 16:17:22 [INFO] Hub reporting enabled (every 15m0s to https://hub.felhom.eu) +2026-09-14T16:17:22.346276990Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: selfupdate-check (every 6h0m0s) +2026-09-14T16:17:22.346279475Z 2026/09/14 16:17:22 [INFO] ========== Startup Self-Test ========== +2026-09-14T16:17:22.448502973Z 2026/09/14 16:17:22 [INFO] [PASS] Docker socket: reachable (v29.8.0) +2026-09-14T16:17:22.448660177Z 2026/09/14 16:17:22 [INFO] [PASS] Stacks directory: /opt/docker/stacks +2026-09-14T16:17:22.448865200Z 2026/09/14 16:17:22 [INFO] [PASS] Data directory: /opt/docker/felhom-controller/data (writable) +2026-09-14T16:17:22.449009150Z 2026/09/14 16:17:22 [INFO] [PASS] System data path: /mnt/sys_drive +2026-09-14T16:17:22.449107415Z 2026/09/14 16:17:22 [INFO] [WARN] Storage paths: no storage paths registered +2026-09-14T16:17:22.450150230Z 2026/09/14 16:17:22 [INFO] [PASS] Git catalog: 53 app definitions found +2026-09-14T16:17:22.479120078Z 2026/09/14 16:17:22 [ERROR] [sync] Catalog sync failed: git fetch: git fetch --depth 1 origin main: exit status 128 +2026-09-14T16:17:22.479169010Z stderr: fatal: unable to access 'https://gitea.dooplex.hu/admin/app-catalog-felhom.eu.git/': Could not resolve host: gitea.dooplex.hu +2026-09-14T16:17:22.484564001Z 2026/09/14 16:17:22 [INFO] [sync] Initial sync: Git hiba: git fetch: git fetch --depth 1 origin main: exit status 128 +2026-09-14T16:17:22.484588046Z stderr: fatal: unable to access 'https://gitea.dooplex.hu/admin/app-catalog-felhom.eu.git/': Could not resolve host: gitea.dooplex.hu +2026-09-14T16:17:22.524872060Z 2026/09/14 16:17:22 [INFO] [infra] connected felhom-controller to traefik-public +2026-09-14T16:17:22.588233929Z 2026/09/14 16:17:22 [INFO] [PASS] Hub connectivity: https://hub.felhom.eu reachable (HTTP 200) +2026-09-14T16:17:22.588263995Z 2026/09/14 16:17:22 [INFO] [PASS] Metrics DB: 0.0 MB +2026-09-14T16:17:22.588266971Z 2026/09/14 16:17:22 [INFO] ======================================== +2026-09-14T16:17:22.588269536Z 2026/09/14 16:17:22 [INFO] Self-test complete: 7 passed, 1 warnings, 0 failed +2026-09-14T16:17:22.588475332Z 2026/09/14 16:17:22 [INFO] [scheduler] Starting scheduler with 18 jobs +2026-09-14T16:17:22.588482996Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: geo-verify (every 6h0m0s) +2026-09-14T16:17:22.588485491Z 2026/09/14 16:17:22 [INFO] Geo-restriction support enabled (CF API token configured) +2026-09-14T16:17:22.591267224Z 2026/09/14 16:17:22 [INFO] [report] hub wait channel active (hold ≤240s) +2026-09-14T16:17:22.594608337Z 2026/09/14 16:17:22 [INFO] [backup] Found 1 DB dump files across drives +2026-09-14T16:17:22.600961754Z 2026/09/14 16:17:22 [INFO] [web] Auth: using password from settings.json +2026-09-14T16:17:22.600989857Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: disk-health-check (every 1h0m0s) +2026-09-14T16:17:22.601050020Z 2026/09/14 16:17:22 [INFO] [scheduler] Registered periodic job: agent-channel-health (every 1m0s) +2026-09-14T16:17:22.605270630Z 2026/09/14 16:17:22 [INFO] Web UI listening on :8080 +2026-09-14T16:17:22.709642144Z 2026/09/14 16:17:22 [INFO] [backup] Discovered 1 databases +2026-09-14T16:17:22.712867710Z 2026/09/14 16:17:22 [INFO] [backup] Discovered app data: 1 apps +2026-09-14T16:17:22.720556050Z 2026/09/14 16:17:22 [INFO] [backup] Backup status cache refreshed +2026-09-14T16:17:22.774454782Z 2026/09/14 16:17:22 [INFO] [web] FileBrowser sync — no config/compose change, ensured running without recreate (0 storage path(s)) +2026-09-14T16:17:22.829681433Z 2026/09/14 16:17:22 [INFO] [monitor] Health check: status=ok +2026-09-14T16:17:23.138736543Z 2026/09/14 16:17:23 [INFO] [settings] Settings saved +2026-09-14T16:17:25.542761932Z 2026/09/14 16:17:25 [INFO] [web] Login from 172.18.0.3:37808 +2026-09-14T16:17:27.354315855Z 2026/09/14 16:17:27 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:17:27.589948881Z 2026/09/14 16:17:27 [INFO] [report] Building system report +2026-09-14T16:17:27.624464263Z 2026/09/14 16:17:27 [INFO] Event pushed: controller_started (info) — Controller elindult (0.242.0) +2026-09-14T16:17:27.818015896Z 2026/09/14 16:17:27 [INFO] [monitor] Health check: status=ok +2026-09-14T16:17:27.949792003Z 2026/09/14 16:17:27 [INFO] [report] Hub report pushed successfully (6358 bytes) +2026-09-14T16:17:27.950384844Z 2026/09/14 16:17:27 [INFO] [settings] Settings saved +2026-09-14T16:17:27.950400453Z 2026/09/14 16:17:27 [INFO] Startup hub report sent +2026-09-14T16:17:32.378015723Z 2026/09/14 16:17:32 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:17:32.609574042Z 2026/09/14 16:17:32 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:17:32.642262139Z 2026/09/14 16:17:32 [INFO] Health probes: 1 ok (of 1 probed) +2026-09-14T16:17:37.402284027Z 2026/09/14 16:17:37 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:17:37.402316608Z 2026/09/14 16:17:37 [INFO] [bootrecon] boot window: fleet settled after 10s (3 identical samples 5s apart) — sweeping +2026-09-14T16:17:37.402320966Z 2026/09/14 16:17:37 [INFO] [bootrecon] Boot reconciliation: no boot-orphaned apps (nothing to start) +2026-09-14T16:17:42.610551820Z 2026/09/14 16:17:42 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:17:52.610339138Z 2026/09/14 16:17:52 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:17:52.996198672Z 2026/09/14 16:17:52 [INFO] [selfupdate] Current version 0.242.0 is up to date +2026-09-14T16:18:02.611786522Z 2026/09/14 16:18:02 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:18:08.774750839Z 2026/09/14 16:18:08 [INFO] [settings] Settings saved +2026-09-14T16:18:08.775181799Z 2026/09/14 16:18:08 [INFO] [settings] Settings saved +2026-09-14T16:18:08.775335858Z 2026/09/14 16:18:08 [INFO] [web] All sessions invalidated (cleared 1) +2026-09-14T16:18:08.775347510Z 2026/09/14 16:18:08 [INFO] [web] dashboard password reset by the customer from 192.168.0.104 (code generation 3 consumed) +2026-09-14T16:18:09.047157522Z 2026/09/14 16:18:09 [INFO] [web] Login from 172.18.0.3:37808 +2026-09-14T16:18:09.295046550Z 2026/09/14 16:18:09 [WARN] [web] Failed login from 172.18.0.3:37808 +2026-09-14T16:18:10.775548035Z 2026/09/14 16:18:10 [INFO] [report] Building system report +2026-09-14T16:18:11.023199356Z 2026/09/14 16:18:11 [INFO] [monitor] Health check: status=ok +2026-09-14T16:18:11.143298831Z 2026/09/14 16:18:11 [INFO] [report] Hub report pushed successfully (6501 bytes) +2026-09-14T16:18:11.143686499Z 2026/09/14 16:18:11 [INFO] [settings] Settings saved +2026-09-14T16:18:11.435340789Z 2026/09/14 16:18:11 [WARN] [web] claim: code lockout tripped (source 192.168.0.104) — 15 min +2026-09-14T16:18:11.441716970Z 2026/09/14 16:18:11 [INFO] Event pushed: claim_lockout (warning) — Túl sok hibás beállító kód — a beállító oldal 15 percre zárolva +2026-09-14T16:18:12.609271261Z 2026/09/14 16:18:12 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:18:22.604841397Z 2026/09/14 16:18:22 [INFO] [scheduler] Running job: agent-channel-health +2026-09-14T16:18:22.613215808Z 2026/09/14 16:18:22 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:18:23.067644662Z 2026/09/14 16:18:23 [INFO] [scheduler] Job agent-channel-health completed (took 463ms) +2026-09-14T16:18:32.612327038Z 2026/09/14 16:18:32 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:18:42.610608310Z 2026/09/14 16:18:42 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:18:52.346850450Z 2026/09/14 16:18:52 [INFO] [fillwatch] checked 2 filesystem(s), 0 unreadable/skipped, 0 notification(s); bands: all ok +2026-09-14T16:18:52.610364229Z 2026/09/14 16:18:52 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:19:02.614431007Z 2026/09/14 16:19:02 [INFO] [stacks] Status refresh: 5 containers across 56 stacks +2026-09-14T16:19:12.610521414Z 2026/09/14 16:19:12 [INFO] [stacks] Status refresh: 5 containers across 56 stacks diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/hub-log.txt b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/hub-log.txt new file mode 100644 index 00000000..1eb29977 --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/box-logs-331/hub-log.txt @@ -0,0 +1,51 @@ +2026/09/14 17:47:26 [INFO] appliance 26 BOUND to customer tester-1 (mode=appliance) — delivery staged for its next poll +2026/09/14 17:47:42 [INFO] appliance credentials DELIVERED once to appliance 26 (customer=tester-1 mode=appliance; passphrase withheld) +2026/09/14 17:47:49 [ERROR] [claim] claim code generated (gen 1) but customer tester-1 has NO registered email — deliver via resend after setting one +2026/09/14 17:47:49 [WARN] claim issue for tester-1 on config retrieve: claim: customer tester-1 has no registered email +2026/09/14 17:47:49 [INFO] Config downloaded for customer tester-1 +2026/09/14 17:48:17 [INFO] host enrolled: tester-1-8603a2 (customer tester-1) +2026/09/14 17:48:18 [INFO] vaulted break-glass recovery credential for host tester-1-8603a2 (user=root@pam, secret 32 chars) +2026/09/14 17:48:19 [INFO] Artifact manifest served for customer tester-1 (agent=0.130.0 golden=0.242.0) +2026/09/14 17:48:19 [INFO] Config downloaded for customer tester-1 +2026/09/14 17:48:35 [INFO] wg registered: host=tester-1-8603a2 pubkey=Ee6/brA1P/ST8N1cw5BD1x3lgJxYjhngS0sCySB2VT0= ip=10.77.0.5/32 changed=true gen=1 sync=ok +2026/09/14 17:48:35 [INFO] host-report from tester-1-8603a2 (0 guests, 2 storage targets, 0 backups, 0 restore-tests, 0 pbs-snapshots, 10206 bytes) +2026/09/14 17:48:35 [INFO] DR-recipe host-half stored for customer tester-1 (host tester-1-8603a2, v1) +2026/09/14 17:48:36 [INFO] tenantsync: provision ok for tester-1 (ns=tester-1, token_id=felhom@pbs!tester-1; secret withheld from logs) +2026/09/14 17:48:36 [INFO] pbsdr provisioned for tester-1 (host tester-1-8603a2, ns tester-1, token_id felhom@pbs!tester-1, gen 2; secret stored consume-once, withheld from logs) +2026/09/14 17:48:36 [INFO] pbsdr auto-provisioned for tester-1 on WG registration (hands-free cascade) +2026/09/14 17:48:36 [INFO] Config downloaded for customer tester-1 +2026/09/14 17:48:47 [INFO] restore-test staleness: tester-1 local tier: not restore-proven yet, but only watching for 0s (grace 168h0m0s since first contact 2026-09-14T15:48:35Z) — newborn, not a fault +2026/09/14 17:49:36 [INFO] Config downloaded for customer tester-1 +2026/09/14 17:49:57 [INFO] Event from tester-1: controller_started (info) — Controller elindult (0.242.0) +2026/09/14 17:49:57 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 17:49:57 [INFO] Received report from tester-1 (2245 bytes) +2026/09/14 17:49:57 [INFO] managed floor SERVED for tester-1: floor 0.242.0, agent requirement "0.129.0" from manifest (golden 0.242.0) +2026/09/14 17:53:58 [INFO] operator revealed break-glass console credential for host tester-1-8603a2 (user=root@pam, secret 32 chars) +2026/09/14 18:03:37 [INFO] host-report from tester-1-8603a2 (1 guests, 2 storage targets, 1 backups, 0 restore-tests, 0 pbs-snapshots, 11091 bytes) +2026/09/14 18:03:37 [INFO] DR-recipe host-half stored for customer tester-1 (host tester-1-8603a2, v1) +2026/09/14 18:03:37 [INFO] pbs token secret consumed by host tester-1-8603a2 (single-use; value withheld from logs) +2026/09/14 18:04:52 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:04:52 [INFO] Received report from tester-1 (2104 bytes) +2026/09/14 18:08:45 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:08:45 [INFO] Received report from tester-1 (2113 bytes) +2026/09/14 18:08:45 [INFO] [claim] customer tester-1 CLAIMED its dashboard (password set by the customer) +2026/09/14 18:08:45 [INFO] [claim] notification prefs for tester-1 left untouched (row exists or no registered email) +2026/09/14 18:09:06 [INFO] Event from tester-1: app_deployed (info) — Alkalmazás telepítve: BookStack +2026/09/14 18:09:08 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:09:08 [INFO] Received report from tester-1 (2162 bytes) +2026/09/14 18:10:14 [INFO] Event from tester-1: app_deployed (info) — Alkalmazás telepítve: PrivateBin +2026/09/14 18:10:16 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:10:16 [INFO] Received report from tester-1 (4482 bytes) +2026/09/14 18:13:22 [INFO] Event from tester-1: app_removed (info) — Alkalmazás eltávolítva: privatebin +2026/09/14 18:13:25 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:13:25 [INFO] Received report from tester-1 (3587 bytes) +2026/09/14 18:15:48 [INFO] host-report from tester-1-8603a2 (1 guests, 3 storage targets, 0 backups, 0 restore-tests, 1 pbs-snapshots, 11404 bytes) +2026/09/14 18:15:48 [INFO] DR-recipe host-half stored for customer tester-1 (host tester-1-8603a2, v1) +2026/09/14 18:16:47 [INFO] restore-test staleness: tester-1 pbs tier: not restore-proven yet, but only watching for 0s (grace 288h0m0s since first contact 2026-09-14T15:48:35Z) — newborn, not a fault +2026/09/14 18:17:27 [INFO] Event from tester-1: controller_started (info) — Controller elindult (0.242.0) +2026/09/14 18:17:27 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:17:27 [INFO] Received report from tester-1 (6358 bytes) +2026/09/14 18:18:11 [INFO] DR-recipe app-half stored for customer tester-1 (v1) +2026/09/14 18:18:11 [INFO] Received report from tester-1 (6501 bytes) +2026/09/14 18:18:11 [INFO] Event from tester-1: claim_lockout (warning) — Túl sok hibás beállító kód — a beállító oldal 15 percre zárolva +2026/09/14 18:18:11 [INFO] Operator email sent for tester-1/claim_lockout diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s01-grub.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s01-grub.png new file mode 100644 index 00000000..47d6b142 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s01-grub.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s02-grub-tui-selected.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s02-grub-tui-selected.png new file mode 100644 index 00000000..1bc18a84 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s02-grub-tui-selected.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s03-first-screen.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s03-first-screen.png new file mode 100644 index 00000000..ee0ded9e Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s03-first-screen.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s04-disk-screen.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s04-disk-screen.png new file mode 100644 index 00000000..35717dfb Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s04-disk-screen.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s05-disk-focus.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s05-disk-focus.png new file mode 100644 index 00000000..e8a3855a Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s05-disk-focus.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s06-disk-focus2.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s06-disk-focus2.png new file mode 100644 index 00000000..9c95ca00 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s06-disk-focus2.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s07-disk-list.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s07-disk-list.png new file mode 100644 index 00000000..c4c5036d Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s07-disk-list.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s08-after-esc.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s08-after-esc.png new file mode 100644 index 00000000..0653fdc5 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s08-after-esc.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s09-disk-next-focus.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s09-disk-next-focus.png new file mode 100644 index 00000000..70550947 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s09-disk-next-focus.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s10-locale.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s10-locale.png new file mode 100644 index 00000000..9f8e4c9c Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s10-locale.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s11-kb-us-next-focus.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s11-kb-us-next-focus.png new file mode 100644 index 00000000..2812bb2e Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s11-kb-us-next-focus.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s12-password-next-focus.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s12-password-next-focus.png new file mode 100644 index 00000000..e7e63e3c Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s12-password-next-focus.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s13-network.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s13-network.png new file mode 100644 index 00000000..aa355a0a Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s13-network.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s14-hostname-typed.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s14-hostname-typed.png new file mode 100644 index 00000000..d67e7485 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s14-hostname-typed.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s15-network-next-focus.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s15-network-next-focus.png new file mode 100644 index 00000000..23cf490e Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s15-network-next-focus.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s16-summary.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s16-summary.png new file mode 100644 index 00000000..f03f4318 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s16-summary.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s17-autoreboot-focus.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s17-autoreboot-focus.png new file mode 100644 index 00000000..a0ef2035 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s17-autoreboot-focus.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s18-install-focus.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s18-install-focus.png new file mode 100644 index 00000000..b7e05dad Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s18-install-focus.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s19-install-progress.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s19-install-progress.png new file mode 100644 index 00000000..948addae Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s19-install-progress.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s20-firstboot-console.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s20-firstboot-console.png new file mode 100644 index 00000000..e455efe2 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-331/331-s20-firstboot-console.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b01-grub.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b01-grub.png new file mode 100644 index 00000000..972db8a8 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b01-grub.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b02-grub-tui.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b02-grub-tui.png new file mode 100644 index 00000000..9f51c527 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b02-grub-tui.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b03-eula.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b03-eula.png new file mode 100644 index 00000000..ddb9a866 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b03-eula.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b04-disk-one.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b04-disk-one.png new file mode 100644 index 00000000..ad6c05ad Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b04-disk-one.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b05-locale.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b05-locale.png new file mode 100644 index 00000000..61d0bfc7 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b05-locale.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b06-kb-us-next.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b06-kb-us-next.png new file mode 100644 index 00000000..43fb8a46 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b06-kb-us-next.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b07-password-next.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b07-password-next.png new file mode 100644 index 00000000..a10ccc5c Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b07-password-next.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b08-network-next.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b08-network-next.png new file mode 100644 index 00000000..f731beb8 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b08-network-next.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b09-summary.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b09-summary.png new file mode 100644 index 00000000..bbac96d0 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b09-summary.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b10-install-focus.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b10-install-focus.png new file mode 100644 index 00000000..d94251eb Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b10-install-focus.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b11-install-done.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b11-install-done.png new file mode 100644 index 00000000..6a71aa8f Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b11-install-done.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b12-firstboot-console.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b12-firstboot-console.png new file mode 100644 index 00000000..27adfadb Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b12-firstboot-console.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b13-after-reboot-console.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b13-after-reboot-console.png new file mode 100644 index 00000000..27adfadb Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-b13-after-reboot-console.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s01-grub.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s01-grub.png new file mode 100644 index 00000000..c7be58db Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s01-grub.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s02-after-timeout.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s02-after-timeout.png new file mode 100644 index 00000000..1a8b64dd Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s02-after-timeout.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s03-after-agree.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s03-after-agree.png new file mode 100644 index 00000000..afa09e42 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s03-after-agree.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s04-after-next.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s04-after-next.png new file mode 100644 index 00000000..e0160426 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s04-after-next.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s05-location-tab5.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s05-location-tab5.png new file mode 100644 index 00000000..89fcdffb Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s05-location-tab5.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s06-mouse-on-next.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s06-mouse-on-next.png new file mode 100644 index 00000000..384accb0 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s06-mouse-on-next.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s07-after-click.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s07-after-click.png new file mode 100644 index 00000000..bd302b93 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s07-after-click.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s08-after-alt-n.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s08-after-alt-n.png new file mode 100644 index 00000000..391567f9 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s08-after-alt-n.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s09-after-password-alt-n.png b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s09-after-password-alt-n.png new file mode 100644 index 00000000..3b46d388 Binary files /dev/null and b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/screens-332/332-s09-after-password-alt-n.png differ diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/step10-remove-observe-331.txt b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/step10-remove-observe-331.txt new file mode 100644 index 00000000..8e8a37ae --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/step10-remove-observe-331.txt @@ -0,0 +1,10 @@ +--- before 16:13:15 +volumes: 1 +containers: 1 +backup-dir: 40K /mnt/sys_drive/felhom-data/backups/primary/privatebin +--- after 16:13:27 +volumes: 0 +containers: 0 +backup-dir: du: cannot access '/mnt/sys_drive/felhom-data/backups/primary/privatebin': No such file or directory +front door paste.: 404 +restore points: {"ok":true,"data":[]} diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/teardown-layer3-hub.txt b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/teardown-layer3-hub.txt new file mode 100644 index 00000000..fc71e367 --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/teardown-layer3-hub.txt @@ -0,0 +1,8 @@ +=== LAYER 3 start 2026-09-14T16:20:10Z +unclaimed appliances listed (id mac): +27 bc:24:11:60:0f:ed +VM 332 appliance id: 27 +HTTP/1.1 303 See Other +Location: /hosts?flash=appliance_discarded +332 MAC still on hosts page: 0 +host tester-1-8603a2 delete-impact: {"deletable":false,"escrow_present":false,"guests":1,"log_bundles":0,"pbs_secret_present":true,"recovery_present":true,"reports":3,"status":"ok","wg_peer_bound":true} diff --git a/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/teardown-layers-1-2.txt b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/teardown-layers-1-2.txt new file mode 100644 index 00000000..439491dd --- /dev/null +++ b/documentation/audits/evidence-doorstep-walk-1270-2026-09-14/teardown-layers-1-2.txt @@ -0,0 +1,39 @@ +=== BEFORE 2026-09-14T16:19:54Z + VMID NAME STATUS MEM(MB) BOOTDISK(GB) PID + 331 doorstep-3disk-walk running 8192 200.00 2987289 + 332 doorstep-1disk-control running 4096 64.00 2983525 +VMID Status Lock Name +9201 running demo-hp +9202 running demo-hp-scratch +Name Type Status Total (KiB) Used (KiB) Available (KiB) % +felhom-pbs pbs active 0 0 0 0.00% +local dir active 40453376 26489992 11876268 65.48% +local-lvm lvmthin active 56487936 24950721 31537214 44.17% +nvme-scratch dir active 983379700 23528192 909824896 2.39% +/dev/nvme0n1 1006980812800 24092868608 931660693504 3% /mnt/hdd_1 +total 3330728 +drwxr-xr-x 2 root root 4096 Sep 14 17:59 . +drwxr-xr-x 4 root root 4096 Aug 21 17:42 .. +-rw-r--r-- 1 root root 1705322496 Sep 14 17:31 felhom-installer-1.27.0-pve9.2-1.iso +-rw-r--r-- 1 root root 1705322496 Sep 14 18:00 felhom-installer-1.27.1-pve9.2-1.iso +331 +332 +9202 +48 +purging VM 331 from related configurations.. +purging VM 332 from related configurations.. +=== AFTER 2026-09-14T16:20:06Z +VMID Status Lock Name +9201 running demo-hp +9202 running demo-hp-scratch +Name Type Status Total (KiB) Used (KiB) Available (KiB) % +felhom-pbs pbs active 0 0 0 0.00% +local dir active 40453376 23033320 15332940 56.94% +local-lvm lvmthin active 56487936 24950721 31537214 44.17% +nvme-scratch dir active 983379700 10132924 923220164 1.03% +/dev/nvme0n1 1006980812800 10376114176 945377447936 2% /mnt/hdd_1 +total 8 +drwxr-xr-x 2 root root 4096 Sep 14 18:20 . +drwxr-xr-x 4 root root 4096 Aug 21 17:42 .. +9202 +ls: cannot access '/root/doorstep': No such file or directory diff --git a/documentation/backlog/OPEN-ITEMS.md b/documentation/backlog/OPEN-ITEMS.md index 46e4ce45..2826a7a4 100644 --- a/documentation/backlog/OPEN-ITEMS.md +++ b/documentation/backlog/OPEN-ITEMS.md @@ -696,11 +696,11 @@ class (an image `VOLUME` at an unmounted path) is still live — `immich-server` | **R-488** | **[P3-LOW] `go test ./internal/backup` takes 5½ minutes: 89 off-site tests wait on real clocks.** MEASURED 2026-09-13 (`-v` timings, run alone: 581 tests, 333 s in total, 89 of them ≥ 1 s — `TestOffbox*`, `TestOffbox3a*`, `TestOffboxRun*`, `TestR4xx*` reconstitute fixtures at 3–8 s each). The controller's per-commit gate is therefore ~6 minutes, most of it sleeping, and two concurrent runs of the package looked like a hang. **Fix shape:** the waits are `waitForHealthy`-style polls and retry back-offs with fixed durations; make them seams the fixtures shorten (the R-457 rule: one clock). Not a correctness defect. | **READY — rank P3-LOW; owner: CC** | | **R-489** | **[P3-LOW] `POST /api/stacks/{name}/remove` reports `volumes_removed: null` over named volumes it DID remove.** MEASURED 2026-09-13 on demo-hp five times (gokapi, actualbudget, adventurelog ×2, glance): `docker compose down --volumes` removed the app's named volumes (`docker volume ls` count 2 → 0) and the response carried `"volumes_removed":null`. The customer's confirmation dialog therefore cannot say what it deleted. Split out of R-474 (closed in v0.240.0 for the backups half). **Fix shape:** list the volumes before `down --volumes`, diff after, and report the difference (`[]` when none, never `null`). **PARTLY SHIPPED in v0.242.0 (`d698ce3`), measured live on 9202 the same night:** the difference is computed and a fresh compose-created volume IS reported (`["opengist_opengist_data"]`), but the listing filters on the compose project LABEL and a volume recreated by a unit restore (`docker volume create `, `restore.go:154`) carries no labels — compose still removes it and the response says `[]` (`audits/v0242-2026-09-14/19-R489-cause.txt`). **Remaining fix:** list by the `_` name prefix as well (union), or label the recreated volume as compose would. | **READY — rank P3-LOW; owner: CC (residual)** | | **R-492** | **[P3-LOW] `cfg.Paths.HDDPath` is empty on every box and still has readers; delete it.** R-465 audited its six readers and found every one falling back; R-490 (v0.242.0) gave the last one, `systemInfo`, the same fallback. The global now carries no information on any box and its deletion was deferred twice. **Fix shape:** remove the field, its env binding and the readers' fallback branches; a build proves nothing reads it. Next controller release. | **READY — rank P3-LOW; owner: CC** | -| **R-493** | **[P1-HIGH] There are NO customer-facing install instructions, so a volunteer cannot begin — this blocks inviting anyone.** MEASURED 2026-09-14 (drill `audits/DRILL-fresh-install-0242-2026-09-14.md`, Phase 0.2), each source with what was searched: the website's 9 pages carry no mention of the installer, of `iso.felhom.eu`, or of any install step (`iso`, `letolt`, `telepit`); `https://iso.felhom.eu/` and `/index.html` both return **404** — only the exact object name `felhom-installer-1.26.1-pve9.2-1.iso` answers, so the file cannot be found without being told its name; `RUNBOOK-onboarding-draft-v4.md` is an operator-attended script; the R-11 tester one-pager was ruled 2026-07-21 and never written; no `email.md` exists in the workspace; the two hub mails a new customer receives (`Kösd össze a Felhom dobozodat`, `Elindult a Felhom szervered — beállító kód`) assume the box is already installed. **Stopgap written by the drill:** `documentation/runbooks/VOLUNTEER-first-hour.md` (Hungarian, the steps the product really needs, each addition over today listed at its top). **What it needs:** the operator to choose the channel and approve the text. | **WAITING-ON-OPERATOR — rank P1-HIGH; owner: operator (channel + text), CC (draft)** | +| **R-493** | **[P1-HIGH] There are NO customer-facing install instructions, so a volunteer cannot begin — this blocks inviting anyone.** MEASURED 2026-09-14 (drill `audits/DRILL-fresh-install-0242-2026-09-14.md`, Phase 0.2), each source with what was searched: the website's 9 pages carry no mention of the installer, of `iso.felhom.eu`, or of any install step (`iso`, `letolt`, `telepit`); `https://iso.felhom.eu/` and `/index.html` both return **404** — only the exact object name `felhom-installer-1.26.1-pve9.2-1.iso` answers, so the file cannot be found without being told its name; `RUNBOOK-onboarding-draft-v4.md` is an operator-attended script; the R-11 tester one-pager was ruled 2026-07-21 and never written; no `email.md` exists in the workspace; the two hub mails a new customer receives (`Kösd össze a Felhom dobozodat`, `Elindult a Felhom szervered — beállító kód`) assume the box is already installed. **Stopgap written by the drill:** `documentation/runbooks/VOLUNTEER-first-hour.md` (Hungarian, the steps the product really needs, each addition over today listed at its top). **What it needs:** the operator to choose the channel and approve the text. **2026-09-14:** guide approved by the operator and aligned to ISO 1.27.1; download page planned at `felhom.eu/letoltes` (R-504). Stays open until the page and ISO are live. | **WAITING-ON-OPERATOR — publish yes; rank P1-HIGH** | | **R-494** | **NARROWED 2026-09-14 by operator ruling → [P3-LOW] the hub COULD create the tunnel at customer creation, for a domain already on Cloudflare. Not blocking: every customer has their own domain and the operator creates the tunnel per day-0 A.1 (`architecture/01-topology-and-trust.md`).** *Original finding, kept:* **[P1-HIGH] A new customer's dashboard has NO reachable address unless the operator hand-makes a Cloudflare tunnel — the link in the setup-code mail is dead.** MEASURED 2026-09-14 on a fresh install from the public ISO (drill intervention **I1**): the claim mail points at `https://felhom.drill0242.felhom.eu`; that name has **no A and no AAAA** record (`dig @1.1.1.1`, control `felhom.enkisfelhom.hu` resolves); the hub has **no tunnel- or DNS-creation code** (`hub/internal/cloudflare/` holds only geo-rule removal; `cf_tunnel_token` is a pasted, optional form field, `configs.go:1478`) — day-0 runbook A.1 makes it a manual Cloudflare-dashboard step that nothing on the customer-create page asks for; the box's own split-horizon resolver on the appliance LAN IP answered `google.com` but not the dashboard name at 13:27:39Z; the agent applied the record at **13:27:44Z** (`lanresolver: applied split-horizon record … ip=192.168.0.158`, 3 m 46 s after the controller started), so the box CAN answer the name — **but only to a device that uses the box as its DNS server, and no document, screen or mail tells a household to do that**; the router and the installer-offered DNS answer nothing. The page was reachable only at the guest's LAN address with the name forced (`curl --resolve …:443:192.168.0.158`). **A volunteer could not have done that.** **What it needs:** an operator ruling — the hub creates the tunnel and DNS at customer creation, or the product gives a household a LAN address that works with no DNS change. | **READY — rank P3-LOW; owner: CC** | -| **R-495** | **[P2-MEDIUM] The public installer asks a stranger four questions nothing answers, and REFUSES its own default on one of them.** MEASURED 2026-09-14 on `felhom-installer-1.26.1` (drill screens `s04`–`s22`): every screen after the GRUB menu is **English** Proxmox (EULA, disk, locale, password, network, summary); **three disks are offered with no guidance which is the system disk** (the default happened to be right); the administrator e-mail is prefilled `mail@example.invalid`; the hostname is prefilled `pve.example.invalid` and pressing Next on it returns **„Invalid values: hostname does not look valid”** — a volunteer who accepts the defaults cannot continue; at the end, with the stick still in, the default-ticked auto-reboot boots back into the installer. None of this is wrong for Proxmox; all of it is unanswered for a Felhom household. **Fix shape (cheap first):** the volunteer instructions answer each question (done in `runbooks/VOLUNTEER-first-hour.md`); later, prefill hostname and e-mail from the ISO build. | **READY — rank P2-MEDIUM; owner: CC (ISO prefill), operator (instruction text via R-493)** | -| **R-496** | **[P2-MEDIUM] The box's console tells a stranger, in English and FIRST, to open the Proxmox admin page — and calls the owner passphrase „a jelszavadat”.** MEASURED 2026-09-14 (drill screen `s29`): above the Hungarian pairing banner the console prints Proxmox's own `Welcome to the Proxmox Virtual Environment. Please use your web browser to configure this server - connect to: https://192.168.0.134:8006/` — the operator admin UI, which a household must never be sent to; the Felhom banner below says „add meg ezt a kódot és **a jelszavadat**”, while the self-bind mail and page name the same secret **„Tulajdonosi jelmondat”** (R-323 renamed the mail; `scripts/iso/felhom-bootstrap.sh:71-72` was not renamed). **Fix shape:** replace the Proxmox `/etc/issue` block on appliance installs; rename the console word. Both live in `felhom-bootstrap.sh`, a frozen ISO payload (G9), so it ships with the next ISO. | **READY — rank P2-MEDIUM; owner: CC** | -| **R-497** | **[P2-MEDIUM] No product channel ever gives the customer the „Tulajdonosi jelmondat”, yet the self-bind mail says they received it at setup.** MEASURED 2026-09-14: the 5-word phrase is minted at customer creation (`hub/internal/web/configs.go`, `RandomPassphrase(5)`) and shown **only on the operator's customer page**; the self-bind mail (`FormatSelfBindEmail`) says „amelyet a beállításkor kaptál” and the console asks for it; nothing sends it. Day-0 runbook A.2 says the operator must dictate or hand it over — a step that exists only in an operator document. A volunteer whose operator forgets cannot bind the box and is told they already have the phrase. **Fix shape:** the operator's customer-create confirmation says, in one line, to hand this phrase to the customer now; the volunteer instructions say where it comes from (done in `VOLUNTEER-first-hour.md`). | **READY — rank P2-MEDIUM; owner: operator (process), CC (hub copy)** | +| **R-495** | **[P2-MEDIUM] The public installer asks a stranger four questions nothing answers, and REFUSES its own default on one of them.** MEASURED 2026-09-14 on `felhom-installer-1.26.1` (drill screens `s04`–`s22`): every screen after the GRUB menu is **English** Proxmox (EULA, disk, locale, password, network, summary); **three disks are offered with no guidance which is the system disk** (the default happened to be right); the administrator e-mail is prefilled `mail@example.invalid`; the hostname is prefilled `pve.example.invalid` and pressing Next on it returns **„Invalid values: hostname does not look valid”** — a volunteer who accepts the defaults cannot continue; at the end, with the stick still in, the default-ticked auto-reboot boots back into the installer. None of this is wrong for Proxmox; all of it is unanswered for a Felhom household. **Fix shape (cheap first):** the volunteer instructions answer each question (done in `runbooks/VOLUNTEER-first-hour.md`); later, prefill hostname and e-mail from the ISO build. **ANSWERED 2026-09-14 by operator ruling + guide, not by code:** the interactive installer stays (the 2026-07-31 ruling re-affirmed); `VOLUNTEER-first-hour.md` answers every screen (disk, keyboard, password, e-mail, host name, stick) and release gate G14 pins the disk rule. The English screens remain by ruling. Closes when the guide and ISO are published. | **ANSWERED — awaiting publish; owner: operator (publish)** | +| **R-496** | **[P2-MEDIUM] The box's console tells a stranger, in English and FIRST, to open the Proxmox admin page — and calls the owner passphrase „a jelszavadat”.** MEASURED 2026-09-14 (drill screen `s29`): above the Hungarian pairing banner the console prints Proxmox's own `Welcome to the Proxmox Virtual Environment. Please use your web browser to configure this server - connect to: https://192.168.0.134:8006/` — the operator admin UI, which a household must never be sent to; the Felhom banner below says „add meg ezt a kódot és **a jelszavadat**”, while the self-bind mail and page name the same secret **„Tulajdonosi jelmondat”** (R-323 renamed the mail; `scripts/iso/felhom-bootstrap.sh:71-72` was not renamed). **Fix shape:** replace the Proxmox `/etc/issue` block on appliance installs; rename the console word. Both live in `felhom-bootstrap.sh`, a frozen ISO payload (G9), so it ships with the next ISO. **FIXED IN ISO 1.27.1, NOT YET PUBLISHED (2026-09-14).** 1.27.0 masked `pvebanner` at first boot and still showed the Proxmox block on that boot (VM 331 screen s20); 1.27.1 masks by symlink in the postinst and writes a no-ő/ű `/etc/issue`. Live on VM 332: first-boot console Felhom-only; after a proven reboot `pvebanner` masked, `/etc/issue` 0 × 8006. Harness 55/55, red first. Closes when 1.27.1 is published. | **FIXED — awaiting publish (operator yes); owner: CC** | +| **R-497** | **[P2-MEDIUM] No product channel ever gives the customer the „Tulajdonosi jelmondat”, yet the self-bind mail says they received it at setup.** MEASURED 2026-09-14: the 5-word phrase is minted at customer creation (`hub/internal/web/configs.go`, `RandomPassphrase(5)`) and shown **only on the operator's customer page**; the self-bind mail (`FormatSelfBindEmail`) says „amelyet a beállításkor kaptál” and the console asks for it; nothing sends it. Day-0 runbook A.2 says the operator must dictate or hand it over — a step that exists only in an operator document. A volunteer whose operator forgets cannot bind the box and is told they already have the phrase. **Fix shape:** the operator's customer-create confirmation says, in one line, to hand this phrase to the customer now; the volunteer instructions say where it comes from (done in `VOLUNTEER-first-hour.md`). **CLOSED 2026-09-14 — hub v0.113.0 deployed (ArgoCD Synced, image 0.113.0). Tests red first (`passphrase_handover_test.go`); live: `tester-1`'s page renders the hand-over sentence 1× (2× with `?flash=created`), negative control 0. The mail change is pinned by test; no mail could be read live (no mailbox).** Evidence: `audits/DOORSTEP-walk-1270-2026-09-14.md` §5. | **CLOSED — hub v0.113.0** | | **R-498** | **[P3-LOW] The „Első lépések" on 52 of 53 app pages tell a customer to open a literal `wiki.DOMAIN` — the placeholder is never filled in.** MEASURED 2026-09-14 on a fresh 0.242.0 box (drill step 5): BookStack's app page renders „Nyisd meg a **wiki.DOMAIN** címet a böngészőben", PrivateBin's „Nyisd meg a **paste.DOMAIN** címet". `grep -rl '\.DOMAIN c[íi]m' app-catalog-felhom.eu/templates/*/.felhom.yml` → **52 of 53** templates carry it in `first_steps`; the controller renders the string as text (`internal/stacks/metadata.go`). A stranger reading their first instruction meets a word that is not an address. **Fix shape:** substitute the stack's real `SUBDOMAIN.DOMAIN` at render time (one place in the controller), with a render test per template that fails on a literal `DOMAIN`. | **READY — rank P3-LOW; owner: CC** | | **R-499** | **[P2-MEDIUM] Every app without a data drive is told its data is „already in the full system backup (PBS)" and there is „nothing to do" — on a box with no PBS, whose only whole-box copy sits on the same disk.** MEASURED 2026-09-14 on a fresh 0.242.0 box with the DR tier off (drill step 7): `GET /stacks/bookstack/backup` renders „Ennek az alkalmazásnak az adatai a belső rendszerlemezen vannak, amelyek **már szerepelnek a teljes rendszermentésben (PBS)** … ehhez az alkalmazáshoz nincs külön teendő." The sentence sits under `{{if not .IsHDDApp}}` in `controller/internal/web/templates/tier2_config.html:20-26` and consults nothing about where the whole-guest backup goes. On the same box `/backups` says, correctly, „Helyi tároló (local)" and „A rendszermentés jelenleg ugyanazon a lemezen van, mint a rendszer — így hibás fájlok ellen véd, lemezhiba ellen nem." **Two pages of one product contradict each other, and the reassuring one is the false one.** **Fix shape:** branch the sentence on the box's actual whole-guest target (PBS vs local, same-disk flag the overview already computes); a render test per branch. | **READY — rank P2-MEDIUM; owner: CC** | | **R-500** | **[P3-LOW] The dashboard shows the last backup in UTC while every backup page shows it in local time — two different clock times for one backup.** MEASURED 2026-09-14 on a fresh 0.242.0 box (drill step 12): the same backup (`last_run 2026-09-14T13:41:37Z`) reads „Utolsó mentés: **2026-09-14 13:41**" on `/dashboard` and „Utolsó adatbázis mentés: **2026-09-14 15:41** (most)" on `/backups/apps`. Cause, from source: `controller/internal/web/templates/dashboard.html:154` renders `{{.BackupStatus.LastRun.Format "2006-01-02 15:04"}}` with no conversion to the box's zone, while the backup pages go through the zone-aware helpers in `funcmap.go`. A household comparing the two screens sees a backup two hours apart from itself. **Fix shape:** format through the same zone-aware helper; a render test that pins a non-UTC zone and asserts the local hour. | **READY — rank P3-LOW; owner: CC** | @@ -708,6 +708,10 @@ class (an image `VOLUME` at an unmounted path) is still live — `immich-server` | **R-502** | **[P3-LOW] The bootstrap regression harness is run by NO gate and NO CI — and it had never exercised the pairing banner.** MEASURED 2026-09-14: `grep -rn bootstrap-modes scripts/*.py .gitea/workflows` → nothing; the harness is run by hand in `felhom-iso-assistant:trixie`. While adding the R-496 checks, its fake hub's `register` reply turned out to carry no `pairing_code`, so `print_pairing_banner` returned early in every run: the banner that a household reads first had no test at all until ISO v1.27.0. **Fix shape:** register the harness in `repo_gates.py` behind a container-available check that reports INCONCLUSIVE (never skip-as-pass) when docker is absent, with a decoy. | **READY — rank P3-LOW; owner: CC** | | **R-503** | **[P3-LOW] SPIKE (not built): an install-time disk rule for the public ISO — "exactly one internal disk → install; otherwise stop in Hungarian".** Offered to the operator 2026-09-14 and **not chosen**: the 2026-07-31 ruling (a person chooses the disk) stands. Recorded so a reversal starts from measurements, not from the offer. **What must be measured first:** (1) whether the Proxmox auto-installer's HTTP answer mode can serve a per-machine answer from posted system info without network being a precondition a volunteer can miss; (2) whether USB transport is reliably visible in sysfs (`/sys/block/*/device` path, `removable`) where udev properties were measured blind (SPIKE-universal-iso-1 §3.2); (3) whether any refusal can be shown in Hungarian without modifying the Proxmox installer squashfs. **Reverses two rulings if built — needs an operator word.** | **WAITING-ON-OPERATOR — rank P3-LOW; owner: operator (ruling), CC (spike)** | | **R-504** | **[P3-LOW] `iso.felhom.eu` cannot show an index page on its own — its root returns 404, and the download page lives on the website instead.** MEASURED 2026-09-14: `https://iso.felhom.eu/` and `/index.html` → 404; only named objects answer. The host is an R2 bucket behind a custom domain; whether R2 would serve an uploaded `index.html` at `/` was **not measured** (uploading anything to the public bucket is a publication). The ISO v1.27.0 task puts the Hungarian download page at `felhom.eu/letoltes` (published with the ISO, after the operator's yes). **Remaining:** a redirect from `iso.felhom.eu/` to that page needs a Cloudflare rule the session has no credential for. | **WAITING-ON-OPERATOR — rank P3-LOW; owner: operator (Cloudflare rule)** | +| **R-505** | **[P1-HIGH] A fresh box on customer `tester-1` connects its Cloudflare tunnel but receives NO routes, so the dashboard answers 503 — the doorstep walk's intervention I1, again.** MEASURED 2026-09-14 on VM 331 (ISO 1.27.0, bound 15:47:26Z): `cloudflared` in the guest registered four connections (bud01, vie06, vie05, bud01) and then logged `No ingress rules were defined in provided config (if any) nor from the cli, cloudflared will return 503 for all incoming HTTP requests`; it ran `tunnel run` with the token, the same start mode as demo-hp's guest, and received **0** `Updated to new configuration` events. From DooPlex through public DNS, 12 requests 16:00:49–16:01:46Z → **12 × 503**, and the box logged **exactly 12** "No ingress" warnings in the same window — every request reached this connector. The guest's own front door answers the name (302). **The operator reports the dashboard loads on a phone over mobile data**; that is not explained by these measurements (no Cloudflare access to list the tunnel's connectors). **Leading hypothesis, not established:** the tunnel's routes live somewhere this connector never receives — a locally-managed config on another connector, or routes defined for a different tunnel. **Why P1:** from a network that reaches this connector, a volunteer cannot open their dashboard. **What it needs:** the operator checks the `tester-1` tunnel in Cloudflare Zero Trust (connectors, and public hostnames), or rules which tunnel this record should carry. | **WAITING-ON-OPERATOR — rank P1-HIGH; owner: operator** | +| **R-506** | **[P3-LOW] `day0-install.md` A.1 says "the controller manages per-app hostnames itself via the tunnel" — it does not.** MEASURED 2026-09-14: no code under `felhom-controller/controller/internal` creates tunnel ingress, DNS records or tunnel configurations (`grep -i 'ingress\|cfd_tunnel\|/configurations\|dns_records'` → only comments saying cloudflared is deployed when a token exists; positive control: the geo-restriction CF API use IS found in `cmd/controller/main.go`). The controller's only Cloudflare act is geo-restriction; the tunnel runs `tunnel run` with the token, so its routes come from Cloudflare's remote config set by the operator. A reader following A.1 skips the one step that makes the dashboard reachable (R-505). **Fix shape:** A.1 names the public-hostname step and its service settings, copied from a working tunnel. | **READY — rank P3-LOW; owner: CC (doc), operator (the settings to copy)** | +| **R-507** | **[P3-LOW] The proof-install harness cannot drive the graphical installer, so a release's graphical entry is proven only up to its password screen.** MEASURED 2026-09-14 on VM 332 (ISO 1.27.0): `qm sendkey 332 tab` did not move focus (both password copies landed in one field), `mouse_move 1237 772` + `mouse_button 1` did not move the cursor or press Next, while `alt-n` did advance a page. The TUI entry is fully drivable. The gate's "proof install on BOTH menu entries" was met for 1.26.1 (by a person) and not for 1.27.x. **Fix shape:** measure QEMU `input-send-event` with absolute coordinates, or a VNC client on DooPlex; until then a release's graphical proof is an operator click-through. | **READY — rank P3-LOW; owner: CC** | +| **R-508** | **[P2-MEDIUM] Customer `tester-1` has no registered e-mail, so neither the self-bind link nor the setup code can reach a volunteer.** MEASURED 2026-09-14: the edit form's `email` value is empty; on bind the hub logged `[ERROR] [claim] claim code generated (gen 1) but customer tester-1 has NO registered email — deliver via resend after setting one`. A volunteer onboarded on this record would sit at „A szerver beállítása" with no code. **What it needs:** the operator sets the volunteer's address on the record before sending the guide (day-0 A.2). The hub's customer page could warn when a record with an unclaimed box has no e-mail — the log line exists, the page says nothing. | **WAITING-ON-OPERATOR — rank P2-MEDIUM; owner: operator (record), CC (page warning)** |