Plex2Shell impact on Felhom: verdict NOT REACHED; R-1241 (P1), R-1242 (P3) opened (register 186 -> 188)
gates / gates (push) Successful in 12m37s
gates / gates (push) Successful in 12m37s
Read-only audit of whether the hacked Plex pod on DooPlex (HM-040, 2026-10-17 -> 10-23) reached Felhom's secrets. Two no-login doors existed (the Longhorn NFS export and the Longhorn API); neither was used: nfsd accepted 0 new connections in the window (positive control), no off-schedule Longhorn backup or volume. Evidence in documentation/audits/plex2shell-felhom-impact-2026-10-23/. The NFS export was narrowed from * to 10.42.0.0/16 on the operator's yes (host change, not in git). 13-threat-model.md: attacker j and one boundary row. STATUS: verdict, the P1, one do item.
This commit is contained in:
@@ -0,0 +1,75 @@
|
||||
# REPORT — did the Plex attack on DooPlex reach Felhom's secrets? (2026-10-23)
|
||||
|
||||
## Plain words first
|
||||
|
||||
1. **Verdict: NOT REACHED.** Two open doors led from the hacked Plex to Felhom's secrets. Neither was used in the attack
|
||||
days: the backup folder got no new connection at all, and Longhorn made no backup or disk outside its normal plan.
|
||||
2. **The shared backup folder: closed to the home network and the tailnet** (your yes). It is **still open to every app
|
||||
on DooPlex** — Longhorn needs that, so the real fix is the homelab session's.
|
||||
3. **What you do next:** give the homelab session the hand-over list (`documentation/audits/plex2shell-felhom-impact-2026-10-23/README.md`,
|
||||
last section). Nothing needs to be rotated.
|
||||
|
||||
## The Part 4 table
|
||||
|
||||
In `documentation/audits/plex2shell-felhom-impact-2026-10-23/README.md` § Part 4. Short form: every Felhom secret on
|
||||
DooPlex has exposure **none**. The ones a hacked pod *could* have reached: the hub's unencrypted nightly copies (with the
|
||||
unsealed Cloudflare/tunnel/git tokens, R-975) through the NFS export or a Longhorn backup, and the operator signing keys
|
||||
through the NFS file-handle escape (documented, not exercised). Sealed hub columns need a key that is not in the copies;
|
||||
escrow blobs need each household's recovery code; the k8s API, the kubelet and the hub refuse a caller with no credential
|
||||
(measured).
|
||||
|
||||
## The paths and the evidence per path
|
||||
|
||||
| path | existed? | evidence of use (window 10-17 04:00Z → 10-23 08:04Z) |
|
||||
|---|---|---|
|
||||
| NFS export `longhorn-pvc` (`*`, `no_root_squash`, `no_subtree_check`; `secure` void in pods) | yes | **unused** — `node_nfsd_connections_total` flat at 288 for 13 days, 3902 samples, no gap; positive control: today's three probe connections moved it to 4. nfsd is TCP-only. Reads only in Longhorn's backup hours |
|
||||
| Longhorn API :9500, no login | yes | **no sign of use** — 0 backups first seen off-schedule (1-min scrape); every night wrote to the local store; no unexplained volume; the backup target is the 2025-11-29 one. Manager logs: lost (reboot) |
|
||||
| hub `hub:8080` direct | yes, but no secret without a credential | 0 requests from 10.42.0.52 in `/data/access-log` (from 10-18 10:25Z; positive control: the probe's IP is logged). 10-17 04:00Z → 10-18 10:25Z: no record |
|
||||
| k8s API, kubelet | no (401) | — |
|
||||
| SSH, Samba on DooPlex | login needed | 0 sshd lines from the pod network (control: 61 from the LAN); no Samba client file for 10.42.0.52 (positive control: the probe made one) |
|
||||
| Vaultwarden | login needed; vault encrypted | logs lost (reboot) |
|
||||
|
||||
**Evidence lost before this session started:** the 13:20Z maintenance reboot erased the pre-reboot container logs of
|
||||
longhorn-manager, longhorn-ui, the ingress, the hub, Gitea, Vaultwarden, Grafana and Prometheus. Reproduced
|
||||
independently from records that survived: Prometheus history (nfsd, Longhorn, cAdvisor, node network), the hub's own
|
||||
access log, the journal (boot -1), Samba per-client files, CoreDNS error lines, the Alertmanager silence list. The
|
||||
incident session's pre-reboot greps (10.42.0.52 in longhorn-manager, CNPG, Gitea, authentik: 0) are cited as theirs.
|
||||
|
||||
## For the homelab session
|
||||
|
||||
The seven items at the end of the audit README: the export still open to pods (and `secure` is void there); Longhorn API
|
||||
and UI with no login; an unattributed Longhorn delete of the old Plex volume at 11:24:15Z; **~1.5 TB sent out by the Plex
|
||||
pod 10-18 → 10-22** (not in INCIDENT.md) plus `hand.genddos.st` DNS lookups on 10-19; the reboot that erased the logs;
|
||||
the monitoring stack and Headlamp reachable from every pod; a `python3 main.py` listener on :8443. No HM numbers minted;
|
||||
`homelab-manifests` not touched.
|
||||
|
||||
## What this session changed
|
||||
|
||||
- **DooPlex `/etc/exports`** (operator yes, ~15:18Z): `longhorn-pvc` from `*` to `10.42.0.0/16`, `exportfs -ra`; Longhorn
|
||||
target `available: true` at 15:20:10Z. Backup `/etc/exports.bak-2026-10-23-plex2shell`. The only change on DooPlex.
|
||||
- **Probe pod** `default/cc-p2s-probe`: created 15:19:46Z, removed 15:33:44Z; before/after listings in the evidence. No
|
||||
other object created. The incident's NetworkPolicies untouched.
|
||||
- **felhom.eu:** the audit folder; R-1241 and R-1242 in `OPEN-ITEMS.md`; `13-threat-model.md` (attacker j, one boundary
|
||||
row); `STATUS.md` (verdict in „What works", the P1 in „What is broken", one „do" item; the old „Updated" paragraph moved to
|
||||
`STATUS-HISTORY.md`).
|
||||
- Nothing rotated. No secret value written anywhere (evidence scanned for secret shapes; the only 64-hex string is the
|
||||
sha256 of `/etc/exports`).
|
||||
|
||||
## Rows
|
||||
|
||||
Before 186, after 188; opened 2 (R-1241 P1, R-1242 P3), closed 0.
|
||||
|
||||
## Observations
|
||||
|
||||
- Hacked pod → hub backups + signing keys through the NFS export and the Longhorn API — FILED: R-1241.
|
||||
- Demo NAS export on the same disk with `no_subtree_check` — FILED: R-1242.
|
||||
- The hub answers pods without the geo filter — NOT-A-FINDING: the geo filter is not authentication; every no-token path refused.
|
||||
- demo-felhom's Proxmox UI and SSH reachable from any DooPlex pod — NOT-A-FINDING: the door of R-982; added as attacker j in `13` §3.
|
||||
- Pod logs erased by the reboot — NOT-A-FINDING for Felhom (the hub's access log persisted, R-1140); handed to the homelab session.
|
||||
|
||||
## Notes for the next session
|
||||
|
||||
- Teardown, three layers: machine — probe pod removed, export change kept on purpose (operator yes); host — none; hub —
|
||||
none (read-only access-log aggregation in the running pod).
|
||||
- System poster: no fact on it changed (none of the three applied).
|
||||
- `unproven.py`: not run — no capability claim changed.
|
||||
@@ -2,9 +2,10 @@
|
||||
|
||||
**Ready for Tester 2? Yes — tell the friend go (hand-over list: `documentation/pilot/TESTER2-handover.md`).**
|
||||
|
||||
**Updated 2026-10-23 (afternoon).** Your D39 = B is built and live: an app with a public security hole can now get its fix at night on every box, after one test on the test box — controller 0.341.0 is the floor since 13:24 (your yes). The test: Plex moved by itself at night on the test box, and an older controller safely waited for a hand press. Nothing needs you.
|
||||
**Updated 2026-10-23 (evening).** The Plex attack on DooPlex did NOT reach Felhom's secrets: the two open doors to them (a shared backup folder and Longhorn's page) were not used in the attack days. The backup folder is now closed to the home network (your yes); it is still open to every app on DooPlex, so a hacked app there could read the hub's backups (R-1241, the homelab session's fix).
|
||||
|
||||
## What works
|
||||
- **The Plex attack (2026-10-17 → 10-23) did not reach Felhom's secrets** — no connection to the backup folder, no unplanned backup (R-1241).
|
||||
- A box installs from nothing with the public installer, links to the hub, and moves to the floor by itself (map A1, A3, A4).
|
||||
- 65 catalog apps install, update one tested step at a time, and a failed update undoes itself (map B1, B3, B4, B6).
|
||||
- Backups: database dumps, a second-drive copy, an off-site copy and whole-box copies; restore tests run by themselves (map C1–C4, A17, A18).
|
||||
@@ -16,7 +17,7 @@
|
||||
- The hub mails alarms and recoveries, and keeps one whole-box copy per week on ep0; CC uses its own limited token, not your password (map F1, F11, G15).
|
||||
|
||||
## What is broken
|
||||
- **P1:** about 12 homelab logins still use a password that was public, and the public Gitea repo is not decided (R-925, yours).
|
||||
- **P1:** any hacked app on DooPlex can read the hub's nightly backups, and maybe the signing keys (R-1241, homelab session); about 12 homelab logins still use a password that was public, and the public Gitea repo is not decided (R-925, yours).
|
||||
- Tester 2 is off since 2026-10-04: old emergency password, no off-site check, no bootstrap (R-1139, R-1104, R-862).
|
||||
- DooPlex: the failed disk is still in the box, its alarms silenced (R-934); something sets the shared checkout to „bare" (R-935).
|
||||
- The scratch box cannot use agent features (R-1083).
|
||||
@@ -50,6 +51,7 @@ Newest first. CC's pick is in the „Pick" column. Each row also has its full te
|
||||
1. Print the break-glass sheet (`documentation/runbooks/break-glass-sheet.md`, the part from „The sheet”, one A4), fill it by hand, keep it outside the home (D32; R-923, R-924). If not: after a DooPlex loss no off-site copy opens.
|
||||
2. On the hub's Hosts page: Discard appliance 49, and delete host Tester4-16fdef. If not: two dead entries alarm.
|
||||
3. D37 and D38 in the table (two small yes/no). If not: Gitea may restart in release hours; no golden in the release copy.
|
||||
4. Give the homelab session R-1241 and R-1242 and the hand-over list in `documentation/audits/plex2shell-felhom-impact-2026-10-23/README.md` (7 items: the backup folder is still open to every app, Longhorn needs no login, an unknown Longhorn delete at 13:24, ~1.5 TB sent out by Plex, lost logs). If not: the next hacked app on DooPlex can read the hub's backups.
|
||||
**The rest**
|
||||
- System poster needs a refresh: the new 01:40 „release copy” arrow from DooPlex to ep0 (D33); the hub-database label already says every 6 hours. If not: the drawing misses one copy.
|
||||
- Pull the failed disk Z6A07P2G out of DooPlex (R-934). If not: its alarms return on 11 November. Since 2026-10-12.
|
||||
|
||||
@@ -36,6 +36,7 @@ decision (R-925).
|
||||
| g | a compromised Gitea / registry / build | push to the catalog, the images and the installer tag |
|
||||
| h | a thief with the box | the disks |
|
||||
| i | Cloudflare | the plaintext of tunnel traffic — **accepted** (R-904) |
|
||||
| j | **added 2026-10-23:** a hacked homelab app pod on DooPlex (happened: Plex2Shell, HM-040) | the pod network with free egress: every cluster Service, the node's ports (NFS, kubelet, k3s API), the LAN masqueraded as DooPlex; no service-account token |
|
||||
|
||||
## 4. Entry points
|
||||
|
||||
@@ -75,6 +76,7 @@ OS packages (exact versions, apt-signed), the installer script (by tag, R-980).
|
||||
| **added:** LAN ↔ box | partly | root password SSH on the host from the LAN (R-982) |
|
||||
| **added:** hub ↔ box (inbound) | **does not hold** | `01` §4 says the box exposes no control endpoint; a hub-key route can replace the box's settings (R-970) |
|
||||
| **added:** catalog ↔ every box | **design gap** | a catalog push reaches every box with no check on the box (R-971) |
|
||||
| **added 2026-10-23 (R-1241):** a hacked app pod on DooPlex ↔ Felhom's secrets | **does not hold**; not used in the Plex2Shell window | two no-login doors: the Longhorn NFS export (the hub's unencrypted nightly copies with the unsealed tokens of R-975; by a published file-handle escape the whole sda1 disk, the operator signing keys included — not exercised) and the Longhorn API (backup a volume to any target). Plex2Shell, 2026-10-17 → 10-23: **NOT REACHED** — 0 new NFS connections in the window, no off-schedule backup or volume; the hub, the k8s API and the kubelet refuse a caller with no credential (measured). The export was narrowed to the pod network on 2026-10-23; the pod side stays open (`audits/plex2shell-felhom-impact-2026-10-23/`) |
|
||||
|
||||
## 6. What we accept (do not re-report)
|
||||
|
||||
|
||||
@@ -0,0 +1,148 @@
|
||||
# Plex2Shell on DooPlex — did the attack reach Felhom's secrets? (2026-10-23)
|
||||
|
||||
Read-only investigation. Source of the incident facts: `~/incident-plex-2026-10-23/INCIDENT.md` on DooPlex (HM-040,
|
||||
homelab session). Architecture read first: `architecture/01-topology-and-trust.md`, `04-control-plane-authorization.md`
|
||||
§3.1, `05-hub-architecture.md` §16.2, `13-threat-model.md`, `runbooks/secrets.md`, `runbooks/total-loss-of-dooplex.md`,
|
||||
`runbooks/target-selection.md` (DooPlex = Tier 2). Window: **2026-10-17 04:00Z → 2026-10-23 08:04:34Z** (the isolation
|
||||
NetworkPolicy `incident-2026-10-23-plex-isolate`, `creationTimestamp` in INCIDENT.md Phase 2a).
|
||||
|
||||
## Verdict: **NOT REACHED**
|
||||
|
||||
Two open paths led from the hacked Plex pod to Felhom secrets. Each would have left a trace in a record that survived,
|
||||
and neither trace exists:
|
||||
|
||||
1. **NFS export** (`/mnt/5_hdd/backup/longhorn-pvc`, `*(rw,no_root_squash,no_subtree_check)`): the NFS server accepted
|
||||
**zero new TCP connections from 2026-10-10 00:00Z to 2026-10-23 13:05Z** — `node_nfsd_connections_total` flat at 288,
|
||||
3902 five-minute samples, no gap. Every NFS request needs a TCP connection (nfsd listens on TCP only: `portlist`,
|
||||
`rpcinfo`). **Positive control:** after this session's probe pod made three TCP connections to :2049 today the counter
|
||||
read 4 (one Longhorn client + three probes), in `/proc/net/rpc/nfsd` and in Prometheus alike. The only NFS client in
|
||||
the window was Longhorn's own manager (one long-lived NFSv4.2 connection). Read operations happened only in Longhorn's
|
||||
backup hours; bytes read per day stayed at 18–39 MiB.
|
||||
2. **Longhorn manager API** (no login, port 9500 — can create backups, backup targets, volumes): no backup was created
|
||||
outside the two recurring jobs' times (`longhorn_backup_state` series, 1-minute scrape); every scheduled night of the
|
||||
window wrote its backups to DooPlex's own NFS store (so the target was local each night); no volume existed in the
|
||||
window that is not explained; the backup target object is the one created 2025-11-29; DooPlex's network card sent
|
||||
no more than the Plex pod itself sent.
|
||||
|
||||
**What would change this verdict:** evidence of a container escape to the host (the incident session found none,
|
||||
`INCIDENT.md` „Anything OUTSIDE the Plex pod"), or a Longhorn target swap + backup + delete inside one minute (no
|
||||
record either way; Longhorn manager logs were lost, below).
|
||||
|
||||
## Part 1 — the shared backup folder
|
||||
|
||||
| what | value | evidence |
|
||||
|---|---|---|
|
||||
| export (before) | `/mnt/5_hdd/backup/longhorn-pvc *(rw,sync,no_subtree_check,no_root_squash)` | `p1-nfs-exports-clients.txt` |
|
||||
| who can reach :2049 | the host firewall accepts 192.168.0.0/24, 10.42.0.0/16 (pods), 10.43.0.0/16, 100.64.0.0/10 (tailnet) | `nft list ruleset`, input chain |
|
||||
| `secure` option | **no protection inside a pod**: containerd 2.x sets `net.ipv4.ip_unprivileged_port_start=0` in every pod; a uid-1000 probe with CapEff 0 bound port 700 and connected to :2049 | `p2-targeted-probes.txt` (last line), sysctl read in the Plex pod netns = 0, host = 1024 |
|
||||
| filesystem | the export is a sub-directory of `/dev/sda1` (ext4, mounted at `/mnt/5_hdd`); root inode 2 has generation 0 | `findmnt`, `lsattr -vd /mnt/5_hdd` |
|
||||
| contents | Longhorn backup store, 119 GB: nightly backups of every Longhorn volume, **including `felhom-system/hub-data` (the hub database), NOT encrypted** (`spec.encrypted=false` on all four felhom-system volumes) | `p1-backup-folder-listing.txt` |
|
||||
| v4 pseudo-root | `/`, `/mnt`, `/mnt/5_hdd`, `/mnt/5_hdd/backup` appear read-only as path components only; no other directory under `/mnt/5_hdd/backup` is exported | `/proc/fs/nfsd/exports` |
|
||||
| clients now | one: `longhorn-manager-w4tf6` 10.42.0.214, NFSv4.2 | `/proc/fs/nfsd/clients/*/info` |
|
||||
| NFS logging | NFSv3 mounts are logged only at debug level; NFSv4 attaches are not logged at all (**positive control:** client 3 is attached and the journal has no attach line); detaches are logged (2 lines in boot -1, none in the window); illegal-port refusals are logged (none). An absent line proves nothing for v4. | `journalctl -t rpc.mountd`, `strings rpc.mountd` |
|
||||
|
||||
**No subtree check matters beyond the folder.** With `no_subtree_check` on a sub-directory export, the server checks
|
||||
only that a file handle belongs to the exported *filesystem*. A published technique (HvS-Consulting's
|
||||
`nfs-security-tooling`, 2024) builds the handle of the filesystem's root directory and walks the whole disk; with
|
||||
`no_root_squash` it does so as root. On `/dev/sda1` that reaches the **operator signing keys** (`/mnt/5_hdd/felhom.eu/
|
||||
felhom-op-operational`, `felhom-rec-recovery`, `felhom_op_ed25519`, no passphrase, R-924), the private security-review
|
||||
evidence, the workspace, the encrypted `sec` store (its age key is on `/dev/sdb1`, not reachable) and the other backup
|
||||
trees. **Grade: documented technique, every precondition measured here, NOT exercised** (doing it would be an attack on
|
||||
a Tier-2 machine).
|
||||
|
||||
**The change (operator yes, 2026-10-23 ~15:18Z):** the line became
|
||||
`/mnt/5_hdd/backup/longhorn-pvc 10.42.0.0/16(rw,sync,no_subtree_check,no_root_squash)`; `exportfs -ra` rc 0. Read back:
|
||||
`exportfs -v` and `/proc/fs/nfsd/exports` show `10.42.0.0/16`; Longhorn's backup target synced at 15:20:10Z with
|
||||
`available: true`; the Longhorn client is still attached. Backup of the old file: `/etc/exports.bak-2026-10-23-plex2shell`.
|
||||
Undo: `sudo cp -p /etc/exports.bak-2026-10-23-plex2shell /etc/exports && sudo exportfs -ra`. **This closes the folder to
|
||||
the home network and the tailnet. It does NOT close it to a hacked pod** — Longhorn connects from its pod address, so
|
||||
the pod network must stay allowed; limiting it to DooPlex itself would break Longhorn. Root squash is not possible either
|
||||
(the store is root-owned 0700 and Longhorn writes as root). `p1-export-change.txt`.
|
||||
|
||||
## Part 2 — what the hacked Plex could reach without a login
|
||||
|
||||
Measured from probe pod `default/cc-p2s-probe` (uid 1000, CapEff 0, no service-account token, no NetworkPolicy in
|
||||
`default` — the Plex pod's position before the isolation). Created 15:19:46Z, removed 15:33:44Z
|
||||
(`p2-probe-lifecycle.txt`, before/after listings). 186 of 196 TCP Service ports answered (`p2-service-sweep.txt`).
|
||||
|
||||
| target | no-login result | what a no-login caller gets |
|
||||
|---|---|---|
|
||||
| Longhorn manager API `longhorn-backend:9500`, UI `longhorn-frontend:80` | 200 | every volume (234 names), backup targets, backup volumes; actions `snapshotCreate`, `snapshotBackup`, `attach`, `detach`, `pvcCreate`, `activate` offered on `hub-data` |
|
||||
| NFS on the node :2049, :111 | open | see Part 1 |
|
||||
| Felhom hub `hub:8080` (bypasses the ingress geo filter) | `/healthz` 200, `/login` 200, every data path 401/403/302 | nothing (matches `13` §4: health, login, register, armed re-enroll) |
|
||||
| kube-apiserver 10.43.0.1:443 / 192.168.0.180:6443 | 401 | nothing (k3s `config.yaml` unchanged since 2026-08-05) |
|
||||
| kubelet :10250 | 401; :10255 closed | nothing |
|
||||
| Prometheus, Grafana (anonymous Viewer), Alertmanager, node-exporter, kube-state-metrics | 200 | metrics and dashboards; Alertmanager also lets anyone create a silence. No secret values |
|
||||
| Gitea | 200 | the public repos (R-925 ruling); registry `/v2/` 401 |
|
||||
| Vaultwarden | `/alive`, `/api/config`, `/admin` login page 200 | nothing without the master password |
|
||||
| ArgoCD, Headlamp, the filebrowsers | 401 on the API | nothing (Headlamp's own service account can read every Secret — behind OIDC) |
|
||||
| `felhom-system/umami-db` 5432, other databases | open | password needed |
|
||||
| LAN | router admin (.1), a TP-Link (.254), a printer (.20), **demo-felhom's Proxmox UI and SSH (.162)**, PBS UI on DooPlex :8007, Samba :445 | logins needed; `p2-lan-reach.txt` |
|
||||
|
||||
## Part 3 — evidence of use in the window, per path
|
||||
|
||||
| path | best record that exists | result |
|
||||
|---|---|---|
|
||||
| NFS | nfsd counters in Prometheus (connections, ops by method, bytes, RPC errors) — `p3-nfsd-*.json` | **unused** (verdict 1). RPC errors (auth/fmt/cInt) 0 |
|
||||
| Longhorn API | `longhorn_backup_state`, `longhorn_volume_state` series; nfsd bytes written per night; Backup/Snapshot/BackupTarget/Volume `creationTimestamp` — `p3-longhorn-*` | **no sign of use**: 106 backups in the window = 53 daily (10-23 02:00Z) + 53 weekly (10-18 03:00Z), all to the local URL; 0 backups first seen off-schedule; no unexplained volume. Longhorn CRs carry **no managedFields**, so who changed what is not recorded there (`p3-longhorn-objects.txt`, CORRECTION) |
|
||||
| Longhorn manager/UI logs | — | **no record: lost.** DooPlex was rebooted at 13:20Z by the maintenance session (`~/maintenance/2026-10-window`); the pre-reboot container logs of longhorn-manager, longhorn-ui, the hub, the ingress, Gitea, Vaultwarden, Grafana and Prometheus are gone. The incident session's earlier greps (before the reboot) found 10.42.0.52 in none of longhorn-manager, CNPG, Gitea (from 10-21 20:59), authentik; that is their record, not re-verifiable |
|
||||
| hub | `/data/access-log` (R-1140), 10-18 10:25Z → now, 12 764 lines — `p3-hub-access-log.txt` | **no call from the Plex pod** (10.42.0.52: 0; positive control: the probe's 10.42.0.107 is logged). Credentialed requests come only from the boxes' LAN addresses, the home WAN and the operator's sessions. **Gap:** 10-17 04:00Z → 10-18 10:25Z no record (the log started then) — but no hub route gives a secret without a credential |
|
||||
| SSH to DooPlex | journal (boot -1 survives) | 0 sshd lines from 10.42/10.43 in the window (control: 61 lines from 192.168.x) |
|
||||
| Samba | per-client log files `log.%m` | no file for 10.42.0.52 (positive control: `log.10.42.0.107` appeared when the probe touched :445) — `p3-samba-clients.txt` |
|
||||
| Alertmanager | silences API (keeps expired ones) | only two silences, both CC's, both outside the attack |
|
||||
| DNS | CoreDNS keeps **no query log**; only upstream-timeout lines name a domain, without the client | names in `p3-coredns-error-names.txt`; `hand.genddos.st` looked up 10 times on 10-19 08:31–09:50Z (client unknown) |
|
||||
| network bytes | cAdvisor per pod (no peer label) — `p3-network-bytes.txt` | **the Plex pod sent ~1.5 TB** (143 / 202 / 528 / 441 / 206 GiB per day, 10-18 → 10-22; before: 0.04 GiB/day) and received ≤ 7.9 GiB/day. DooPlex's NIC `eno1` sent the same extra out. Outbound-heavy: the shape of a flood tool or of streaming, not of a download. It did **not** come from the NFS store (nfsd reads flat) or from other pods (bridge-to-pod bytes flat) |
|
||||
|
||||
## Part 4 — Felhom's secrets on DooPlex
|
||||
|
||||
Exposure = what a path could read, judged with Part 3. „Possible path" means the door existed; it does not mean it was used.
|
||||
|
||||
| secret | where it lives | path that could read it (Part 2) | evidence of use | exposure |
|
||||
|---|---|---|---|---|
|
||||
| hub DB: Cloudflare API tokens, tunnel tokens, git tokens (**unsealed**, R-975) | `hub.db` on Longhorn `hub-data`; **unencrypted nightly copies in the NFS store** | NFS export (direct, no escape needed); Longhorn API backup to an outside target | none (Part 3) | **none** |
|
||||
| hub DB: box API keys, controller keys, owner passphrases, PBS-DR tokens, break-glass passwords, Storage Box sub-account passwords (**sealed**, AES-GCM, key `OFFSITE_SECRET_KEY`) | same | same — but the key is a k8s Secret, not in the DB or its backups | none | **none** (sealed values useless without the key) |
|
||||
| escrow blobs `host_escrow.blob` / `identity_blob` | same | same | none | **none** — sealed means: wrapped by each household's recovery code, which the hub never holds (`03-host-agent.md`, escrow retention: „the hub never decrypts either table") |
|
||||
| hub tokens (`api_tokens.token_hash`), self-bind / claim codes | same, hashed | same | none | **none** (hashes) |
|
||||
| k8s Secrets in `felhom-system` (report-api global key, offsite-secret-key, storagebox = main Storage Box/Hetzner login, resend-api, tenantsync, agent-poke, wg-endpoint-ssh, gitea-creds, umami, TLS keys) | etcd/k3s datastore (`/var/lib/rancher`, sdb1); also the nightly GPG secrets export on sda1 (`/mnt/5_hdd/backup/secrets/exports`, symmetric, passphrase file on sdb1) | k8s API anonymous: 401. NFS escape → the `.gpg` files only (key not on sda1) | none | **none** |
|
||||
| hub session / signing material | k8s Secret / hub DB | as above | none | **none** |
|
||||
| **operator signing keys** (operational + recovery + `felhom_op_ed25519`, no passphrase) | `/mnt/5_hdd/felhom.eu/` on **sda1** | NFS export → file-handle escape (documented, not exercised) | none (no NFS connection at all) | **none** — but the door is still open to any pod (row filed) |
|
||||
| `sec` store | `cc-secrets/store/cc.sops.yaml` on sda1, age key `~/.config/sops/age/keys.txt` on sdb1 | escape → ciphertext only | none | **none** |
|
||||
| registry login, Gitea tokens | `~/.docker/config.json`, `~/.git-credentials` (sdb1, 0600) | none from the pod network (registry 401, Gitea API anonymous = public repos only) | — | **none** |
|
||||
| Vaultwarden (operator's password manager, R-923) | Longhorn volume; nightly unencrypted Longhorn copy in the NFS store (vault items stay encrypted by the master password) | login page; NFS export → encrypted vault DB | none for NFS; login logs lost | **none** (no record of login attempts — logs lost, and the vault is encrypted at rest) |
|
||||
| off-site ciphertext (ep0 copy, demo-felhom backups) | sda1 | escape → ciphertext only | none | **none** |
|
||||
|
||||
## Part 5 — plan
|
||||
|
||||
Verdict NOT REACHED → **no rotation plan.** The open doors are filed instead (rows below). Nothing was rotated.
|
||||
|
||||
## Observations
|
||||
|
||||
- **A hacked pod on DooPlex can still read the hub's unencrypted nightly backups and, by the file-handle escape, the
|
||||
operator signing keys through the NFS export.** → FILED: R-1241 (P1).
|
||||
- **The Felhom demo NAS export `/mnt/5_hdd/felhom-data → 192.168.0.162` is a sub-directory of the same disk with
|
||||
`no_subtree_check`**: a compromised demo-felhom host could walk all of sda1 as uid 101000 (world-readable files only,
|
||||
e.g. the `.gpg` secrets exports and every repo). → FILED: R-1242 (P3).
|
||||
- The hub answers pods directly, without the ingress geo filter. → NOT-A-FINDING: the geo filter is not an
|
||||
authentication control; every no-token path refused (measured).
|
||||
- demo-felhom's Proxmox UI and SSH are reachable from any DooPlex pod (masqueraded as 192.168.0.180). → NOT-A-FINDING:
|
||||
same door as R-982 (root password SSH from the LAN), now with „a hacked DooPlex pod" as one more LAN attacker; added
|
||||
to `13` §3.
|
||||
- Pre-reboot pod logs were erased by the 13:20Z reboot. → NOT-A-FINDING for Felhom: the hub's own access log
|
||||
persisted (R-1140 did its job). Homelab item, below.
|
||||
|
||||
## For the homelab session (no HM numbers minted; evidence paths in this folder)
|
||||
|
||||
1. **The NFS export is still open to every pod**, `no_root_squash`, `no_subtree_check`, on the disk that holds the
|
||||
Felhom signing keys. `secure` does nothing in pods (containerd sets `ip_unprivileged_port_start=0`). Options: an
|
||||
egress NetworkPolicy so only `longhorn-system` reaches :2049/:111, and/or move the store to its own filesystem
|
||||
(LV or loop) so the subtree escape has nothing else to reach. Not managed by Ansible — the narrowed line persists.
|
||||
2. **Longhorn manager API and UI need no login** from any pod (create backups/targets/volumes, delete volumes).
|
||||
3. **The old Plex volume was deleted through Longhorn's API at 11:24:15Z** by nobody identified (`INCIDENT.md`
|
||||
EVIDENCE NOTE). Ask the operator whether it was them; if not, it is an unattributed write on an open API.
|
||||
4. **The Plex pod sent ~1.5 TB out on 10-18 → 10-22** (not in INCIDENT.md); and CoreDNS saw `hand.genddos.st`
|
||||
lookups on 10-19. Possibly a flood tool riding the same compromise.
|
||||
5. **The maintenance reboot at 13:20Z erased the window's pod logs** (longhorn-manager, ingress, hub, Gitea, …): no log
|
||||
shipping, kubelet keeps one previous container log. Evidence rule R-320 applies to the homelab too.
|
||||
6. Prometheus, Alertmanager (silences!), Grafana (anonymous Viewer), kube-state-metrics, node-exporter, MinIO console,
|
||||
Headlamp (its service account can read every Secret and write RBAC — behind OIDC) all answer every pod.
|
||||
7. A user process `python3 main.py -d -i` (kisfenyo) listens on 0.0.0.0:8443 on DooPlex.
|
||||
@@ -0,0 +1,49 @@
|
||||
# captured 2026-10-23T14:24:03Z
|
||||
$ sudo ls -la /mnt/5_hdd/backup
|
||||
total 64
|
||||
drwxr-xr-x 16 root root 4096 2026-10-03 21:12 .
|
||||
drwxr-xr-x 17 kisfenyo kisfenyo 4096 2026-10-23 11:01 ..
|
||||
drwxr-xr-x 3 root root 4096 2026-01-05 16:07 data
|
||||
drwxr-xr-x 5 backup backup 4096 2026-07-10 19:42 demo-felhom
|
||||
drwxr-xr-x 4 backup backup 4096 2026-10-18 08:30 ep0-copy
|
||||
drwxr-xr-x 4 root root 4096 2026-10-23 03:01 homelab-manifests
|
||||
drwxrwxr-x 3 kisfenyo kisfenyo 4096 2026-10-23 04:00 jarrs.eu
|
||||
drwxr-xr-x 3 root root 4096 2026-01-05 16:07 k3s
|
||||
drwxr-xr-x 2 root root 4096 2026-01-05 16:35 logs
|
||||
drwxr-xr-x 3 root root 4096 2026-01-06 04:00 longhorn-pvc
|
||||
drwxr-x--- 2 kisfenyo kisfenyo 4096 2026-10-23 15:55 minecraft-tlauncher
|
||||
drwxr-xr-x 2 root root 4096 2026-08-10 18:28 paperless
|
||||
drwxr-xr-x 4 26 tape 4096 2026-06-25 11:32 postgresql
|
||||
drwxr-xr-x 2 root root 4096 2026-08-10 18:16 romm
|
||||
drwxr-xr-x 4 root root 4096 2026-01-05 16:07 secrets
|
||||
drwxr-xr-x 2 root root 4096 2026-10-08 07:24 sparkyfitness
|
||||
|
||||
$ sudo ls /mnt/5_hdd/backup/longhorn-pvc
|
||||
total 12
|
||||
drwxr-xr-x 3 root root 4096 2026-01-06 04:00 .
|
||||
drwxr-xr-x 16 root root 4096 2026-10-03 21:12 ..
|
||||
drwx------ 3 root root 4096 2026-01-06 04:00 backupstore
|
||||
|
||||
$ dirs depth<=4
|
||||
/mnt/5_hdd/backup/longhorn-pvc
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/4f
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/4f/33
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/9f
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/9f/fc
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/1d
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/1d/5c
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/a9
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/a9/95
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/3b
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/3b/f9
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/5f
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/5f/21
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/bb
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/bb/3f
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/0e
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/0e/6e
|
||||
/mnt/5_hdd/backup/longhorn-pvc/backupstore/volumes/11
|
||||
|
||||
$ du per backup volume (sizes only)
|
||||
@@ -0,0 +1,29 @@
|
||||
# Part 1 change, operator OK 'Yes, narrow it' — 2026-10-23T15:18:52Z
|
||||
$ sha256sum /etc/exports (before)
|
||||
bb9047fd8bf9cebd589ac680dbbb45746bc621591c68add15f0ae410e0c6cd76 /etc/exports
|
||||
$ backup copy: /etc/exports.bak-2026-10-23-plex2shell
|
||||
$ diff old new
|
||||
12c12
|
||||
< /mnt/5_hdd/backup/longhorn-pvc *(rw,sync,no_subtree_check,no_root_squash)
|
||||
---
|
||||
> /mnt/5_hdd/backup/longhorn-pvc 10.42.0.0/16(rw,sync,no_subtree_check,no_root_squash)
|
||||
rc=1
|
||||
$ sudo exportfs -ra
|
||||
rc=0
|
||||
$ sudo exportfs -v
|
||||
/mnt/5_hdd/felhom-data
|
||||
192.168.0.162(sync,wdelay,hide,no_subtree_check,anonuid=101000,anongid=101000,sec=sys,rw,secure,root_squash,all_squash)
|
||||
/mnt/5_hdd/backup/longhorn-pvc
|
||||
10.42.0.0/16(sync,wdelay,hide,no_subtree_check,sec=sys,rw,secure,no_root_squash,no_all_squash)
|
||||
|
||||
# read-back 2026-10-23T15:21:36Z
|
||||
$ backuptarget default: available lastSyncedAt (sync AFTER the 15:18:52Z change)
|
||||
true 2026-10-23T15:20:10Z
|
||||
$ nfsd v4 clients now
|
||||
address: "10.42.0.214:669"
|
||||
seconds from last renew: 16
|
||||
name: "Linux NFSv4.2 longhorn-manager-w4tf6"
|
||||
callback address: "10.42.0.214:0"
|
||||
$ grep longhorn-pvc /proc/fs/nfsd/exports
|
||||
/mnt/5_hdd/backup/longhorn-pvc 10.42.0.0/16(rw,no_root_squash,sync,wdelay,no_subtree_check,uuid=2fb0cf66:1b3d4fcc:850508ca:f5a7f8fc,sec=1)
|
||||
UNDO: sudo cp -p /etc/exports.bak-2026-10-23-plex2shell /etc/exports && sudo exportfs -ra
|
||||
@@ -0,0 +1,126 @@
|
||||
# captured 2026-10-23T14:21:56Z on dooplex
|
||||
$ cat /etc/exports (comments stripped)
|
||||
/mnt/5_hdd/backup/longhorn-pvc *(rw,sync,no_subtree_check,no_root_squash)
|
||||
/mnt/5_hdd/felhom-data 192.168.0.162(rw,all_squash,anonuid=101000,anongid=101000,no_subtree_check)
|
||||
ls: cannot access '/etc/exports.d': No such file or directory
|
||||
-rw-r--r-- 1 root root 680 Aug 14 06:59 /etc/exports
|
||||
|
||||
$ sudo exportfs -v
|
||||
/mnt/5_hdd/felhom-data
|
||||
192.168.0.162(sync,wdelay,hide,no_subtree_check,anonuid=101000,anongid=101000,sec=sys,rw,secure,root_squash,all_squash)
|
||||
/mnt/5_hdd/backup/longhorn-pvc
|
||||
<world>(sync,wdelay,hide,no_subtree_check,sec=sys,rw,secure,no_root_squash,no_all_squash)
|
||||
|
||||
$ showmount -a localhost
|
||||
All mount points on localhost:
|
||||
|
||||
$ /var/lib/nfs/rmtab
|
||||
|
||||
$ /proc/fs/nfsd/clients/*/info
|
||||
== /proc/fs/nfsd/clients/*/info
|
||||
cat: '/proc/fs/nfsd/clients/*/info': No such file or directory
|
||||
|
||||
$ /proc/fs/nfsd/versions
|
||||
+3 +4 +4.1 +4.2
|
||||
$ /etc/nfs.conf (non-comment)
|
||||
[general]
|
||||
pipefs-directory=/run/rpc_pipefs
|
||||
[nfsrahead]
|
||||
[exports]
|
||||
[exportfs]
|
||||
[gssd]
|
||||
[lockd]
|
||||
[exportd]
|
||||
[mountd]
|
||||
manage-gids=y
|
||||
[nfsdcld]
|
||||
[nfsd]
|
||||
[statd]
|
||||
[sm-notify]
|
||||
[svcgssd]
|
||||
|
||||
$ ss -tnp sport/dport 2049, 111, 20048
|
||||
State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
|
||||
LISTEN 0 4096 0.0.0.0:2049 0.0.0.0:*
|
||||
LISTEN 0 4096 0.0.0.0:111 0.0.0.0:* users:(("rpcbind",pid=1932,fd=4),("systemd",pid=1,fd=47))
|
||||
ESTAB 0 0 192.168.0.180:38514 10.43.69.49:2049
|
||||
ESTAB 0 0 192.168.0.180:58280 10.43.31.240:2049
|
||||
ESTAB 0 0 192.168.0.180:2049 10.42.0.214:669
|
||||
LISTEN 0 4096 [::]:2049 [::]:*
|
||||
LISTEN 0 4096 [::]:111 [::]:* users:(("rpcbind",pid=1932,fd=6),("systemd",pid=1,fd=49))
|
||||
|
||||
$ ss -lntup nfs/rpc listeners
|
||||
udp UNCONN 0 0 0.0.0.0:111 0.0.0.0:* users:(("rpcbind",pid=1932,fd=5),("systemd",pid=1,fd=48))
|
||||
udp UNCONN 0 0 0.0.0.0:33506 0.0.0.0:* users:(("tailscaled",pid=86160,fd=19))
|
||||
udp UNCONN 0 0 0.0.0.0:34514 0.0.0.0:* users:(("rpc.mountd",pid=2203,fd=8))
|
||||
udp UNCONN 0 0 0.0.0.0:38607 0.0.0.0:* users:(("rpc.mountd",pid=2203,fd=4))
|
||||
udp UNCONN 0 0 [::]:111 [::]:* users:(("rpcbind",pid=1932,fd=7),("systemd",pid=1,fd=50))
|
||||
udp UNCONN 0 0 [::]:34707 [::]:* users:(("tailscaled",pid=86160,fd=18))
|
||||
tcp LISTEN 0 64 0.0.0.0:37541 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:36457 0.0.0.0:* users:(("rpc.mountd",pid=2203,fd=9))
|
||||
tcp LISTEN 0 4096 0.0.0.0:2049 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:111 0.0.0.0:* users:(("rpcbind",pid=1932,fd=4),("systemd",pid=1,fd=47))
|
||||
tcp LISTEN 0 4096 [::]:2049 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:111 [::]:* users:(("rpcbind",pid=1932,fd=6),("systemd",pid=1,fd=49))
|
||||
tcp LISTEN 0 4096 [fd7a:115c:a1e0::fc01:579a]%tailscale0:33516 [::]:* users:(("tailscaled",pid=86160,fd=24))
|
||||
tcp LISTEN 0 4096 *:31983 *:* users:(("k3s-server",pid=2231,fd=41))
|
||||
tcp LISTEN 0 4096 *:31433 *:* users:(("k3s-server",pid=2231,fd=80))
|
||||
tcp LISTEN 0 4096 *:30196 *:* users:(("k3s-server",pid=2231,fd=324))
|
||||
tcp LISTEN 0 4096 *:30239 *:* users:(("k3s-server",pid=2231,fd=320))
|
||||
tcp LISTEN 0 4096 *:30627 *:* users:(("k3s-server",pid=2231,fd=317))
|
||||
|
||||
$ rpcinfo -p
|
||||
program vers proto port service
|
||||
100000 4 tcp 111 portmapper
|
||||
100000 3 tcp 111 portmapper
|
||||
100000 2 tcp 111 portmapper
|
||||
100000 4 udp 111 portmapper
|
||||
100000 3 udp 111 portmapper
|
||||
100000 2 udp 111 portmapper
|
||||
100005 1 udp 38607 mountd
|
||||
100005 1 tcp 51925 mountd
|
||||
100005 2 udp 34514 mountd
|
||||
100005 2 tcp 36457 mountd
|
||||
100005 3 udp 42427 mountd
|
||||
100005 3 tcp 57549 mountd
|
||||
100024 1 udp 56119 status
|
||||
100024 1 tcp 52519 status
|
||||
100003 3 tcp 2049 nfs
|
||||
100003 4 tcp 2049 nfs
|
||||
100227 3 tcp 2049 nfs_acl
|
||||
100021 1 udp 45443 nlockmgr
|
||||
100021 3 udp 45443 nlockmgr
|
||||
100021 4 udp 45443 nlockmgr
|
||||
100021 1 tcp 37541 nlockmgr
|
||||
100021 3 tcp 37541 nlockmgr
|
||||
100021 4 tcp 37541 nlockmgr
|
||||
|
||||
# appended 2026-10-23T14:22:12Z
|
||||
$ sudo ls /proc/fs/nfsd/clients; cat */info
|
||||
== client 3
|
||||
clientid: 0x6c6ec1426adb63eb
|
||||
address: "10.42.0.214:669"
|
||||
status: confirmed
|
||||
seconds from last renew: 49
|
||||
name: "Linux NFSv4.2 longhorn-manager-w4tf6"
|
||||
minor version: 2
|
||||
Implementation domain: "kernel.org"
|
||||
Implementation name: "Linux 6.12.113+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.113-1 (2026-10-15) x86_64"
|
||||
Implementation time: [0, 0]
|
||||
callback state: UP
|
||||
callback address: "10.42.0.214:0"
|
||||
admin-revoked states: 0
|
||||
$ sudo cat /proc/fs/nfsd/exports
|
||||
# Version 1.1
|
||||
# Path Client(Flags) # IPs
|
||||
/mnt/5_hdd *(ro,insecure,no_root_squash,sync,no_wdelay,no_subtree_check,v4root,uuid=d2423144:e2585cd2:bcf24caa:707cadf0,sec=1)
|
||||
/mnt *(ro,insecure,no_root_squash,sync,no_wdelay,no_subtree_check,v4root,uuid=0a4bfb73:2e6b5931:9b78e97b:7691fb97,sec=1)
|
||||
/mnt/5_hdd/backup/longhorn-pvc *(rw,no_root_squash,sync,wdelay,no_subtree_check,uuid=2fb0cf66:1b3d4fcc:850508ca:f5a7f8fc,sec=1)
|
||||
/mnt/5_hdd/backup *(ro,insecure,no_root_squash,sync,no_wdelay,no_subtree_check,v4root,uuid=a14fb08e:93ef58c9:8e149646:540a8430,sec=1)
|
||||
/ *(ro,insecure,no_root_squash,sync,no_wdelay,no_subtree_check,v4root,fsid=0,sec=1)
|
||||
$ peer 10.42.0.214 = pod longhorn-system/longhorn-manager-w4tf6 (kubectl get pods -A -o wide)
|
||||
$ 10.43.31.240 / 10.43.69.49 = longhorn-system ClusterIP services pvc-1d4ec717 / pvc-8ed5eea5 (RWX share-managers; DooPlex is the CLIENT there)
|
||||
$ uptime / nfs-server active since
|
||||
16:22:12 up 41 min, 7 users, load average: 3.38, 4.81, 5.47
|
||||
ActiveEnterTimestamp=Fri 2026-10-23 15:40:59 CEST
|
||||
ActiveEnterTimestamp=Fri 2026-10-23 15:40:56 CEST
|
||||
@@ -0,0 +1,21 @@
|
||||
# P2 LAN reach from cc-p2s-probe (pod egress, masqueraded to 192.168.0.180), TCP connect only, 16 ports, 2026-10-23T15:22:57Z
|
||||
192.168.0.1 open: 22 53 80 443
|
||||
192.168.0.20 open: 80 631 9100
|
||||
192.168.0.110 open: 22 139 445
|
||||
192.168.0.149 open: 22 80 443
|
||||
192.168.0.162 open: 22 53 111 8006
|
||||
192.168.0.180 open: 22 111 139 445 2049 8007 8443 9100
|
||||
192.168.0.192 open: 80 443
|
||||
192.168.0.203 open: 3000
|
||||
192.168.0.209 open: 80
|
||||
192.168.0.250 open: 53 80
|
||||
192.168.0.254 open: 22 80
|
||||
# end 2026-10-23T15:24:51Z
|
||||
# identification (GET / title, no login), 2026-10-23T15:26Z
|
||||
# 192.168.0.162:8006 demo-felhom - Proxmox Virtual Environment (the lived-in N100 box's host; also the felhom-data NFS client)
|
||||
# 192.168.0.180:8007 dooplex - Proxmox Backup Server (login page)
|
||||
# 192.168.0.180:8443 a user process `python3 main.py -d -i` (kisfenyo), 302
|
||||
# 192.168.0.180:139/445 smbd; :111/:2049 NFS; :6443 k3s API (401 anonymous); :10250 kubelet (401 anonymous)
|
||||
# 192.168.0.254 TP-LINK Archer C5 admin page; 192.168.0.1 router admin (200)
|
||||
# 192.168.0.20 printer-shaped (80, 631 IPP, 9100 JetDirect)
|
||||
# 192.168.0.192/.203/.209/.250 k3s LoadBalancer IPs (ingress, gitea ssh/3000, pihole)
|
||||
@@ -0,0 +1,23 @@
|
||||
# 2026-10-23T15:19:46Z BEFORE: pods in default
|
||||
No resources found in default namespace.
|
||||
networkpolicies in default:
|
||||
No resources found in default namespace.
|
||||
pod/cc-p2s-probe created
|
||||
pod/cc-p2s-probe condition met
|
||||
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
|
||||
cc-p2s-probe 1/1 Running 0 1s 10.42.0.107 dooplex <none> <none>
|
||||
|
||||
# 2026-10-23T15:33:44Z TEARDOWN
|
||||
before:
|
||||
NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES
|
||||
cc-p2s-probe 1/1 Running 0 13m 10.42.0.107 dooplex <none> <none>
|
||||
pod "cc-p2s-probe" deleted
|
||||
after:
|
||||
No resources found in default namespace.
|
||||
No resources found in default namespace.
|
||||
no namespace, NetworkPolicy, ServiceAccount or other object was created; the incident's NetworkPolicies were not touched:
|
||||
networkpolicy.networking.k8s.io/allow-acme-solver
|
||||
networkpolicy.networking.k8s.io/allow-dns
|
||||
networkpolicy.networking.k8s.io/allow-plex-clients
|
||||
networkpolicy.networking.k8s.io/allow-plex-egress-https
|
||||
networkpolicy.networking.k8s.io/default-deny-all
|
||||
@@ -0,0 +1,20 @@
|
||||
apiVersion: v1
|
||||
kind: Pod
|
||||
metadata:
|
||||
name: cc-p2s-probe
|
||||
namespace: default
|
||||
labels: {purpose: plex2shell-felhom-impact-probe}
|
||||
annotations: {note: "read-only reach probe, CC 2026-10-23; removed after"}
|
||||
spec:
|
||||
automountServiceAccountToken: false
|
||||
enableServiceLinks: false
|
||||
activeDeadlineSeconds: 5400
|
||||
restartPolicy: Never
|
||||
securityContext: {runAsUser: 1000, runAsGroup: 1000, runAsNonRoot: true}
|
||||
containers:
|
||||
- name: probe
|
||||
image: docker.io/curlimages/curl:8.11.1
|
||||
imagePullPolicy: IfNotPresent
|
||||
command: ["sleep", "5400"]
|
||||
securityContext: {allowPrivilegeEscalation: false, capabilities: {drop: ["ALL"]}}
|
||||
resources: {limits: {cpu: "500m", memory: "128Mi"}}
|
||||
@@ -0,0 +1,201 @@
|
||||
# P2 in-cluster service sweep from cc-p2s-probe (10.42.0.107, uid 1000, CapEff 0, no SA token, ns default, no NetworkPolicy) 2026-10-23T15:20:04Z
|
||||
# format: ns/service ip:port OPEN scheme http_code <title> — GET / only, no credentials
|
||||
actualbudget-system/actualbudget 10.43.212.93:5006 OPEN http 200 Actual
|
||||
admin-system/smartctl-exporter 10.43.107.224:9633 OPEN http 200 smartctl_exporter
|
||||
admin-system/upsnap 10.43.71.31:8090 OPEN http 200 UpSnap
|
||||
admin-system/wan-monitor 10.43.247.236:9115 OPEN http 200 Blackbox Exporter
|
||||
admin-system/wan-monitor 10.43.247.236:9116 OPEN http 404 404 Not Found
|
||||
adventurelog-system/adventurelog-backend 10.43.25.95:80 OPEN http 200 AdventureLog API Server
|
||||
adventurelog-system/adventurelog-frontend 10.43.144.156:3000 OPEN http 200 AdventureLog
|
||||
adventurelog-system/adventurelog-postgres 10.43.27.145:5432 OPEN https 000 AdventureLog
|
||||
arcade-system/romm 10.43.212.194:8080 OPEN http 200 RomM
|
||||
arcade-system/romm-db 10.43.59.10:3306 OPEN https 000 RomM
|
||||
arcade-system/romm-redis 10.43.2.16:6379 OPEN https 000 RomM
|
||||
argocd/argocd-applicationset-controller 10.43.107.242:7000 OPEN http 404
|
||||
argocd/argocd-applicationset-controller 10.43.107.242:8080 OPEN http 404
|
||||
argocd/argocd-dex-server 10.43.116.227:5556 closed-or-filtered
|
||||
argocd/argocd-dex-server 10.43.116.227:5557 closed-or-filtered
|
||||
argocd/argocd-dex-server 10.43.116.227:5558 OPEN http 404
|
||||
argocd/argocd-metrics 10.43.211.46:8082 OPEN http 404
|
||||
argocd/argocd-notifications-controller-metrics 10.43.213.199:9001 OPEN http 404
|
||||
argocd/argocd-redis 10.43.241.255:6379 closed-or-filtered
|
||||
argocd/argocd-repo-server 10.43.146.85:8081 closed-or-filtered
|
||||
argocd/argocd-repo-server 10.43.146.85:8084 OPEN http 404
|
||||
argocd/argocd-server 10.43.16.170:80 OPEN http 200 Argo CD
|
||||
argocd/argocd-server 10.43.16.170:443 OPEN http 200 Argo CD
|
||||
argocd/argocd-server-metrics 10.43.225.99:8083 OPEN http 404
|
||||
audiobookshelf-system/audiobookshelf 10.43.219.190:80 OPEN http 200 Audiobookshelf
|
||||
auth-system/ak-outpost-arr-outpost 10.43.47.195:9000 OPEN http 400
|
||||
auth-system/ak-outpost-arr-outpost 10.43.47.195:9443 OPEN http 400
|
||||
auth-system/ak-outpost-arr-outpost-metrics 10.43.233.224:9300 OPEN http 404
|
||||
auth-system/ak-outpost-authentik-embedded-outpost 10.43.101.194:9000 OPEN http 302
|
||||
auth-system/ak-outpost-authentik-embedded-outpost 10.43.101.194:9443 OPEN http 400
|
||||
auth-system/ak-outpost-code-outpost 10.43.148.172:9000 OPEN http 404
|
||||
auth-system/ak-outpost-code-outpost 10.43.148.172:9443 OPEN http 400
|
||||
auth-system/ak-outpost-code-outpost-metrics 10.43.58.49:9300 OPEN http 404
|
||||
auth-system/ak-outpost-crafty-outpost 10.43.44.155:9000 OPEN http 404
|
||||
auth-system/ak-outpost-crafty-outpost 10.43.44.155:9443 OPEN http 400
|
||||
auth-system/ak-outpost-crafty-outpost-metrics 10.43.27.113:9300 OPEN http 404
|
||||
auth-system/ak-outpost-filebrowser-outpost 10.43.7.249:9000 OPEN http 404
|
||||
auth-system/ak-outpost-filebrowser-outpost 10.43.7.249:9443 OPEN http 400
|
||||
auth-system/ak-outpost-filebrowser-outpost-metrics 10.43.85.99:9300 OPEN http 404
|
||||
auth-system/ak-outpost-glance-orsi-outpost 10.43.196.9:9000 OPEN http 404
|
||||
auth-system/ak-outpost-glance-orsi-outpost 10.43.196.9:9443 OPEN http 400
|
||||
auth-system/ak-outpost-glance-orsi-outpost-metrics 10.43.196.125:9300 OPEN http 404
|
||||
auth-system/ak-outpost-glance-outpost 10.43.142.74:9000 OPEN http 404
|
||||
auth-system/ak-outpost-glance-outpost 10.43.142.74:9443 OPEN http 400
|
||||
auth-system/ak-outpost-glance-outpost-metrics 10.43.201.140:9300 OPEN http 404
|
||||
auth-system/ak-outpost-homepage-orsi-outpost 10.43.66.136:9000 OPEN http 404
|
||||
auth-system/ak-outpost-homepage-orsi-outpost 10.43.66.136:9443 OPEN http 400
|
||||
auth-system/ak-outpost-homepage-orsi-outpost-metrics 10.43.244.43:9300 OPEN http 404
|
||||
auth-system/ak-outpost-homepage-outpost 10.43.199.21:9000 OPEN http 404
|
||||
auth-system/ak-outpost-homepage-outpost 10.43.199.21:9443 OPEN http 400
|
||||
auth-system/ak-outpost-homepage-outpost-metrics 10.43.187.161:9300 OPEN http 404
|
||||
auth-system/ak-outpost-kisfenyo-outpost 10.43.176.115:9000 OPEN http 404
|
||||
auth-system/ak-outpost-kisfenyo-outpost 10.43.176.115:9443 OPEN http 400
|
||||
auth-system/ak-outpost-kisfenyo-outpost-metrics 10.43.233.48:9300 OPEN http 404
|
||||
auth-system/ak-outpost-ldap-outpost 10.43.162.147:389 OPEN https 000
|
||||
auth-system/ak-outpost-ldap-outpost 10.43.162.147:636 OPEN https 000
|
||||
auth-system/ak-outpost-ldap-outpost 10.43.162.147:9300 OPEN http 404
|
||||
auth-system/ak-outpost-ldap-outpost-metrics 10.43.108.223:9300 OPEN http 404
|
||||
auth-system/ak-outpost-orsi-outpost 10.43.208.171:9000 OPEN http 404
|
||||
auth-system/ak-outpost-orsi-outpost 10.43.208.171:9443 OPEN http 400
|
||||
auth-system/ak-outpost-orsi-outpost-metrics 10.43.112.181:9300 OPEN http 404
|
||||
auth-system/ak-outpost-pihole-outpost 10.43.89.237:9000 OPEN http 404
|
||||
auth-system/ak-outpost-pihole-outpost 10.43.89.237:9443 OPEN http 400
|
||||
auth-system/ak-outpost-pihole-outpost-metrics 10.43.161.157:9300 OPEN http 404
|
||||
auth-system/ak-outpost-plantit-outpost 10.43.20.58:9000 OPEN http 404
|
||||
auth-system/ak-outpost-plantit-outpost 10.43.20.58:9443 OPEN http 400
|
||||
auth-system/ak-outpost-plantit-outpost-metrics 10.43.253.17:9300 OPEN http 404
|
||||
auth-system/ak-outpost-privatebin-outpost 10.43.41.96:9000 OPEN http 404
|
||||
auth-system/ak-outpost-privatebin-outpost 10.43.41.96:9443 OPEN http 400
|
||||
auth-system/ak-outpost-privatebin-outpost-metrics 10.43.87.152:9300 OPEN http 404
|
||||
auth-system/ak-outpost-uptimekuma-outpost 10.43.15.220:9000 OPEN http 404
|
||||
auth-system/ak-outpost-uptimekuma-outpost 10.43.15.220:9443 OPEN http 400
|
||||
auth-system/ak-outpost-uptimekuma-outpost-metrics 10.43.77.209:9300 OPEN http 404
|
||||
auth-system/authentik-server 10.43.142.123:80 OPEN http 302
|
||||
auth-system/authentik-server 10.43.142.123:443 OPEN http 400
|
||||
auth-system/authentik-server-metrics 10.43.224.102:9300 OPEN http 404
|
||||
auth-system/authentik-worker-metrics 10.43.107.115:9300 OPEN http 200
|
||||
booking-system/calcom 10.43.105.14:3000 OPEN http 307
|
||||
booking-system/calcom-redis 10.43.160.2:6379 OPEN https 000
|
||||
bookstack-system/bookstack 10.43.209.167:80 OPEN http 302 Redirecting to https://bookstack.dooplex.hu/login
|
||||
bookstack-system/bookstack-mariadb 10.43.65.20:3306 OPEN https 000 Redirecting to https://bookstack.dooplex.hu/login
|
||||
calibre-system/calibre-web-automated 10.43.232.53:8083 OPEN http 302 Redirecting...
|
||||
cert-manager/cert-manager 10.43.71.177:9402 OPEN http 404
|
||||
cert-manager/cert-manager-cainjector 10.43.152.171:9402 OPEN http 404
|
||||
cert-manager/cert-manager-webhook 10.43.210.109:443 OPEN http 400
|
||||
cert-manager/cert-manager-webhook 10.43.210.109:9402 OPEN http 404
|
||||
cnpg-system/cnpg-webhook-service 10.43.220.80:8080 OPEN http 400
|
||||
code-system/code-server 10.43.200.176:8080 OPEN http 302
|
||||
crafty-system/craftycontroller-https 10.43.35.97:8443 OPEN https 302
|
||||
crafty-system/serverpackcreator 10.43.246.127:8080 OPEN http 200 ServerPackCreator
|
||||
database-system/postgresql-r 10.43.232.70:5432 OPEN https 000 ServerPackCreator
|
||||
database-system/postgresql-ro 10.43.242.254:5432 closed-or-filtered
|
||||
database-system/postgresql-rw 10.43.190.86:5432 OPEN https 000 ServerPackCreator
|
||||
default/kubernetes 10.43.0.1:443 OPEN http 400
|
||||
felhom-system/contact-mailer 10.43.202.255:80 OPEN http 404
|
||||
felhom-system/felhom-webpage 10.43.10.226:80 OPEN http 200 Felhom.eu — Saját felhőd, saját szabályaid | Otthoni szerver
|
||||
felhom-system/filebrowser 10.43.219.38:80 OPEN http 200 File Browser
|
||||
felhom-system/hub 10.43.52.34:8080 OPEN http 302
|
||||
felhom-system/umami 10.43.41.11:80 OPEN http 200 Umami
|
||||
felhom-system/umami-db 10.43.90.120:5432 OPEN https 000 Umami
|
||||
fileshare-system/gokapi 10.43.217.203:53842 OPEN http 200
|
||||
gitea-system/gitea 10.43.8.106:3000 OPEN http 200 Gitea: Git with a cup of tea
|
||||
gitea-system/gitea 10.43.8.106:2222 OPEN https 000 Gitea: Git with a cup of tea
|
||||
glance-system/glance-helper 10.43.236.190:8000 OPEN http 404
|
||||
glance-system/glance-kisfenyo 10.43.96.155:8080 OPEN http 200 Home
|
||||
glance-system/glance-orsi 10.43.42.102:8080 OPEN http 200 Home
|
||||
glance-system/idokep-scraper 10.43.34.231:8000 OPEN http 404
|
||||
headlamp-system/headlamp 10.43.47.50:80 OPEN http 200 Headlamp
|
||||
homepage-system/homepage 10.43.34.4:3000 OPEN http 200
|
||||
homepage-system/homepage-orsi 10.43.33.155:3000 OPEN http 200
|
||||
immich-system/immich-machine-learning 10.43.134.146:3003 OPEN http 200
|
||||
immich-system/immich-postgres 10.43.216.166:5432 OPEN https 000
|
||||
immich-system/immich-server 10.43.69.28:2283 OPEN http 200
|
||||
immich-system/immich-valkey 10.43.245.230:6379 OPEN https 000
|
||||
jarr-nightly-system/nightly-jarr 10.43.41.156:3000 closed-or-filtered
|
||||
jarr-nightly-system/nightly-jarr-postgres 10.43.212.186:5432 closed-or-filtered
|
||||
jarr-nightly-system/nightly-jarr-redis 10.43.46.139:6379 closed-or-filtered
|
||||
jarrs-system/dev-jarr 10.43.3.168:3000 OPEN http 200 JARR — Just A Random Result
|
||||
jarrs-system/dev-jarr-postgres 10.43.28.40:5432 OPEN https 000 JARR — Just A Random Result
|
||||
jarrs-system/dev-jarr-redis 10.43.168.17:6379 OPEN https 000 JARR — Just A Random Result
|
||||
kisfenyo-system/guacamole 10.43.198.33:8080 OPEN http 200
|
||||
kisfenyo-system/guacd 10.43.84.231:4822 OPEN https 000
|
||||
kisfenyo-system/kisfenyo-filebrowser 10.43.14.45:80 OPEN http 200 "FileBrowser Quantum"
|
||||
kube-system/kube-dns 10.43.0.10:53 UDP skip-udp
|
||||
kube-system/kube-dns 10.43.0.10:53 OPEN https 000 "FileBrowser Quantum"
|
||||
kube-system/kube-dns 10.43.0.10:9153 OPEN http 404
|
||||
kube-system/metrics-server 10.43.183.127:443 OPEN http 400
|
||||
longhorn-system/longhorn-admission-webhook 10.43.91.126:9502 OPEN http 400
|
||||
longhorn-system/longhorn-backend 10.43.241.105:9500 OPEN http 200
|
||||
longhorn-system/longhorn-frontend 10.43.195.177:80 OPEN http 200
|
||||
longhorn-system/longhorn-recovery-backend 10.43.98.183:9503 OPEN http 404
|
||||
longhorn-system/pvc-1d4ec717-7ee5-40a0-b093-3a62fd2a81a4 10.43.31.240:2049 OPEN https 000
|
||||
longhorn-system/pvc-8ed5eea5-67d4-46fc-9806-6b8fdd61e42e 10.43.69.49:2049 OPEN https 000
|
||||
mediaserver-system/plex-plex-media-server 10.43.190.78:32400 closed-or-filtered
|
||||
metallb-system/metallb-webhook-service 10.43.36.127:443 OPEN http 400
|
||||
mon-system/alertmanager 10.43.143.131:9093 OPEN http 200 Alertmanager
|
||||
mon-system/exportarr-prowlarr 10.43.171.82:9709 OPEN http 200
|
||||
mon-system/exportarr-radarr 10.43.126.173:9708 OPEN http 200
|
||||
mon-system/exportarr-sonarr 10.43.232.101:9707 OPEN http 200
|
||||
mon-system/grafana 10.43.32.171:3000 OPEN http 200 Grafana
|
||||
mon-system/kube-state-metrics 10.43.77.239:8080 OPEN http 200 kube-state-metrics
|
||||
mon-system/kube-state-metrics 10.43.77.239:8081 OPEN http 200 kube-state-metrics
|
||||
mon-system/node-exporter 10.43.42.73:9100 OPEN http 200 Node Exporter
|
||||
mon-system/prometheus 10.43.75.209:9090 OPEN http 302
|
||||
nextcloud-system/nextcloud 10.43.181.86:80 OPEN http 400 Nextcloud
|
||||
nextcloud-system/nextcloud-postgresql 10.43.18.100:5432 OPEN https 000 Nextcloud
|
||||
nginx-system/ingress-nginx-internal-controller 10.43.166.147:80 OPEN http 404 404 Not Found
|
||||
nginx-system/ingress-nginx-internal-controller 10.43.166.147:443 OPEN http 400 400 The plain HTTP request was sent to HTTPS port
|
||||
nginx-system/ingress-nginx-internal-controller-admission 10.43.90.248:443 OPEN http 400
|
||||
nginx-system/ingress-nginx-internal-controller-metrics 10.43.83.22:10254 OPEN http 404
|
||||
office-system/bentopdf 10.43.169.90:8080 OPEN http 200 BentoPDF - Free Online PDF Tools | Privacy-First PDF Toolkit
|
||||
office-system/onlyoffice 10.43.79.155:80 OPEN http 302 302 Found
|
||||
opengist-system/opengist 10.43.253.238:80 OPEN http 302
|
||||
opengist-system/opengist 10.43.253.238:2222 OPEN https 000
|
||||
orsi-system/orsi-filebrowser 10.43.188.12:80 OPEN http 200 File Browser
|
||||
orsi-system/revfulop-calendar 10.43.213.82:3000 OPEN http 200 Révfülöp · Nyaraló Naptár
|
||||
outline-system/outline 10.43.46.49:3000 OPEN http 301
|
||||
outline-system/outline-minio 10.43.166.151:9000 OPEN http 403
|
||||
outline-system/outline-minio 10.43.166.151:9001 OPEN http 200 MinIO Console
|
||||
outline-system/outline-redis 10.43.65.17:6379 OPEN https 000 MinIO Console
|
||||
paperless-system/paperless 10.43.218.141:8000 OPEN http 302
|
||||
paperless-system/paperless-redis 10.43.183.83:6379 OPEN https 000
|
||||
pihole-system/external-dns-pihole 10.43.18.28:7979 OPEN http 404
|
||||
pihole-system/pihole-dhcp 10.43.72.243:67 UDP skip-udp
|
||||
pihole-system/pihole-dns-tcp 10.43.236.96:53 OPEN https 000
|
||||
pihole-system/pihole-dns-udp 10.43.192.211:53 UDP skip-udp
|
||||
pihole-system/pihole-exporter 10.43.102.172:9617 OPEN http 404
|
||||
pihole-system/pihole-web 10.43.182.233:80 OPEN http 403 Pi-hole pihole-786ff65bd7-5zhzx
|
||||
pihole-system/pihole-web 10.43.182.233:443 closed-or-filtered
|
||||
plantit-system/plantit 10.43.56.143:3000 OPEN http 200 app
|
||||
plantit-system/plantit 10.43.56.143:8080 OPEN http 404 HTTP Status 404 – Not Found
|
||||
plantit-system/plantit-cache 10.43.134.91:6379 OPEN https 000 HTTP Status 404 – Not Found
|
||||
plantit-system/plantit-db 10.43.105.32:3306 OPEN https 000 HTTP Status 404 – Not Found
|
||||
privatebin-system/privatebin 10.43.30.60:80 OPEN http 200 Dooplex Paste
|
||||
servarr-system/ak-outpost-arr-outpost null:9000 closed-or-filtered
|
||||
servarr-system/prowlarr 10.43.41.42:9696 OPEN http 200 Prowlarr
|
||||
servarr-system/qbittorrent 10.43.174.87:8080 OPEN http 200 qBittorrent WebUI
|
||||
servarr-system/qbittorrent 10.43.174.87:6881 OPEN https 000 qBittorrent WebUI
|
||||
servarr-system/radarr 10.43.45.108:7878 OPEN http 200 Radarr
|
||||
servarr-system/radarrkids 10.43.244.174:7879 OPEN http 200 Radarr
|
||||
servarr-system/seerr 10.43.135.162:5055 OPEN http 307
|
||||
servarr-system/sonarr 10.43.176.56:8989 OPEN http 200 Sonarr
|
||||
servarr-system/tautulli 10.43.36.206:8181 OPEN http 303
|
||||
tandoor-system/recipe-importer 10.43.182.17:8000 OPEN http 401
|
||||
tandoor-system/tandoor 10.43.31.47:8080 OPEN http 302
|
||||
termix-system/termix 10.43.236.34:8080 OPEN http 200 Termix
|
||||
uptimekuma-system/uptimekuma 10.43.214.117:3001 OPEN http 302
|
||||
vaultwarden-system/vaultwarden 10.43.38.33:80 OPEN http 200
|
||||
version-checker-system/version-checker 10.43.124.2:8080 OPEN http 404
|
||||
wanderer-system/wanderer-db 10.43.111.144:8090 OPEN http 404
|
||||
wanderer-system/wanderer-meilisearch 10.43.152.86:7700 OPEN http 200
|
||||
wanderer-system/wanderer-web 10.43.207.245:3000 OPEN http 200 Home | wanderer
|
||||
web-system/filebrowser 10.43.204.98:80 OPEN http 200 File Browser
|
||||
web-system/static-server 10.43.92.56:80 OPEN http 403 403 Forbidden
|
||||
workout-system/sparkyfitness-db 10.43.190.119:5432 OPEN https 000 403 Forbidden
|
||||
workout-system/sparkyfitness-export 10.43.253.80:80 OPEN http 200 SparkyFitness export
|
||||
workout-system/sparkyfitness-frontend 10.43.83.16:80 OPEN http 200 SparkyFitness
|
||||
workout-system/sparkyfitness-server 10.43.66.255:3010 OPEN http 401
|
||||
zipline-system/zipline 10.43.175.211:80 OPEN http 301
|
||||
@@ -0,0 +1,88 @@
|
||||
# P2 targeted no-login probes from cc-p2s-probe 2026-10-23T15:22:24Z. Response bodies stay in the pod's /tmp; only codes, sizes and counts are recorded.
|
||||
== Longhorn manager API (longhorn-backend 9500) and UI proxy (longhorn-frontend 80) — GET only
|
||||
http://10.43.241.105:9500/v1 200 bytes=6028
|
||||
http://10.43.241.105:9500/v1/volumes 200 bytes=797538
|
||||
http://10.43.241.105:9500/v1/backuptargets 200 bytes=638
|
||||
http://10.43.241.105:9500/v1/backupvolumes 200 bytes=196193
|
||||
http://10.43.241.105:9500/v1/settings/backup-target 500 bytes=245
|
||||
http://10.43.241.105:9500/v1/recurringjobs 200 bytes=667
|
||||
volumes listed via API: 234
|
||||
hub-data volume visible via API: 1
|
||||
actions offered on a volume (names only): "activate" "attach" "detach" "pvcCreate" "snapshotBackup" "snapshotCreate" "updateReplicaCount"
|
||||
http://10.43.195.177/v1/volumes 200 bytes=781928
|
||||
== Felhom hub (service hub:8080, bypasses the ingress geo filter) — GET, no token
|
||||
http://10.43.52.34:8080/healthz 200 bytes=2
|
||||
http://10.43.52.34:8080/ 302 bytes=29
|
||||
http://10.43.52.34:8080/login 200 bytes=554
|
||||
http://10.43.52.34:8080/api/v1/customers 403 bytes=31
|
||||
http://10.43.52.34:8080/api/v1/hosts 404 bytes=19
|
||||
http://10.43.52.34:8080/api/v1/preferences 401 bytes=13
|
||||
http://10.43.52.34:8080/api/v1/box-config/x 401 bytes=13
|
||||
http://10.43.52.34:8080/api/v1/artifacts/x 401 bytes=51
|
||||
http://10.43.52.34:8080/api/v1/assets/file/x 401 bytes=13
|
||||
http://10.43.52.34:8080/api/v1/wait 401 bytes=13
|
||||
http://10.43.52.34:8080/api/v1/appliance/poll 401 bytes=13
|
||||
http://10.43.52.34:8080/metrics 302 bytes=29
|
||||
http://10.43.52.34:8080/hosts 302 bytes=29
|
||||
http://10.43.52.34:8080/configs 302 bytes=29
|
||||
http://10.43.52.34:8080/customers 302 bytes=29
|
||||
http://10.43.52.34:8080/escrow 302 bytes=29
|
||||
http://10.43.52.34:8080/export 302 bytes=29
|
||||
http://10.43.52.34:8080/backup 302 bytes=29
|
||||
== kube-apiserver anonymous
|
||||
https://10.43.0.1:443/version 401 bytes=157
|
||||
https://10.43.0.1:443/api 401 bytes=157
|
||||
https://10.43.0.1:443/api/v1/namespaces 401 bytes=157
|
||||
https://10.43.0.1:443/api/v1/namespaces/felhom-system/secrets 401 bytes=157
|
||||
https://192.168.0.180:6443/version 401 bytes=157
|
||||
https://192.168.0.180:6443/api/v1/namespaces/felhom-system/secrets 401 bytes=157
|
||||
== kubelet anonymous
|
||||
https://192.168.0.180:10250/pods 401 bytes=12
|
||||
https://192.168.0.180:10250/healthz 401 bytes=12
|
||||
https://192.168.0.180:10250/metrics 401 bytes=12
|
||||
http://192.168.0.180:10255/pods 000 bytes=0
|
||||
== monitoring
|
||||
http://10.43.75.209:9090/api/v1/status/buildinfo 200 bytes=205
|
||||
http://10.43.75.209:9090/api/v1/query?query=up 200 bytes=5924
|
||||
http://10.43.143.131:9093/api/v2/status 200 bytes=3340
|
||||
http://10.43.143.131:9093/api/v2/silences 200 bytes=758
|
||||
http://10.43.32.171:3000/api/health 200 bytes=101
|
||||
http://10.43.32.171:3000/api/search 200 bytes=7276
|
||||
http://10.43.32.171:3000/api/datasources 200 bytes=1053
|
||||
http://10.43.42.73:9100/metrics 200 bytes=880412
|
||||
== Gitea + registry
|
||||
http://10.43.8.106:3000/api/v1/repos/search?limit=50 200 bytes=16231
|
||||
anon-visible repos: "full_name":"authentik Default Admin" "full_name":"admin/app-catalog-felhom.eu" "full_name":"authentik Default Admin" "full_name":"admin/felhom-agent" "full_name":"authentik Default Admin" "full_name":"admin/felhom-controller" "full_name":"authentik Default Admin" "full_name":"admin/felhom.eu" "full_name":"authentik Default Admin" "full_name":"admin/misc-scripts" "full_name":"authentik Default Admin" "full_name":"admin/recipe-importer" "full_name":"authentik Default Admin" "full_name":"admin/revfulop-calendar"
|
||||
http://10.43.8.106:3000/v2/ 401 bytes=49
|
||||
http://10.43.8.106:3000/v2/_catalog 401 bytes=49
|
||||
http://10.43.8.106:3000/v2/admin/felhom-hub/tags/list 401 bytes=49
|
||||
http://10.43.8.106:3000/v2/admin/felhom-controller/tags/list 401 bytes=49
|
||||
== Vaultwarden
|
||||
http://10.43.38.33/alive 200 bytes=29
|
||||
http://10.43.38.33/api/config 200 bytes=596
|
||||
http://10.43.38.33/admin 200 bytes=6364
|
||||
== ArgoCD
|
||||
http://10.43.16.170/api/v1/applications 401 bytes=79
|
||||
http://10.43.16.170/api/version 200 bytes=28
|
||||
== filebrowsers (felhom-system one + others): API without login
|
||||
http://10.43.219.38/api/resources/ 401 bytes=17
|
||||
http://10.43.204.98/api/resources/ 401 bytes=17
|
||||
http://10.43.188.12/api/resources/ 401 bytes=17
|
||||
http://10.43.14.45/api/resources 401 bytes=54
|
||||
== felhom-system/umami + contact-mailer
|
||||
http://10.43.41.11/api/auth/verify 405 bytes=0
|
||||
http://10.43.202.255/healthz 200 bytes=55
|
||||
== DooPlex node ports from the pod (TCP connect only)
|
||||
node 192.168.0.180:22 open
|
||||
node 192.168.0.180:111 open
|
||||
node 192.168.0.180:2049 open
|
||||
node 192.168.0.180:3000 closed
|
||||
node 192.168.0.180:5000 closed
|
||||
node 192.168.0.180:6443 open
|
||||
node 192.168.0.180:8006 closed
|
||||
node 192.168.0.180:9100 open
|
||||
node 192.168.0.180:10250 open
|
||||
node 192.168.0.180:10255 closed
|
||||
node 192.168.0.180:32400 closed
|
||||
== NFS from a PRIVILEGED source port as uid 1000 (connect only; the 'secure' option checks this)
|
||||
bind :700 + connect 2049: SUCCESS
|
||||
@@ -0,0 +1,57 @@
|
||||
# CoreDNS has NO query log (Corefile: errors/health/ready/kubernetes/hosts/prometheus/cache/loop/reload/loadbalance/forward — no 'log' plugin). Only upstream-timeout ERROR lines name a domain, and they carry the COREDNS pod's upstream socket, not the client. Names below: ERROR lines 2026-10-17T06:00+02 .. 2026-10-23T10:06+02, counted. Source: /var/log/pods/kube-system_coredns-65d746d599-d56mt_77a81c54-d56d-4921-8043-db05a3138b17/coredns/3.log (survived the 13:20Z reboot).
|
||||
391 metrics.jarrs.eu.
|
||||
372 _grpc_config.argocd-repo-server.
|
||||
259 authentik.dooplex.hu.
|
||||
247 store.steampowered.com.
|
||||
234 _grpc_config.localhost.
|
||||
224 hetzner.abonet.hu.
|
||||
208 api.github.com.
|
||||
184 gitea.dooplex.hu.
|
||||
153 telex.hu.
|
||||
142 outline.dooplex.hu.
|
||||
137 pb.wanderer.dooplex.hu.
|
||||
135 jarrs.eu.
|
||||
127 bookstack.dooplex.hu.
|
||||
122 nextcloud.dooplex.hu.
|
||||
82 quay.io.
|
||||
69 registry.hub.docker.com.
|
||||
64 log.tailscale.com.
|
||||
63 smtp.gmail.com.
|
||||
48 pubsub00.pop.fra.plex.bz.
|
||||
40 plex.enkisfelhom.hu.
|
||||
39 pubsub13.pop.fra.plex.bz.
|
||||
23 plex.tv.
|
||||
22 ncore.pro.
|
||||
16 grafana.com.
|
||||
16 dl.k8s.io.
|
||||
15 v4.plex.tv.
|
||||
11 smtp.resend.com.
|
||||
11 pubsub07.pop.fra.plex.bz.
|
||||
10 pubsub01.pop.atl.plex.bz.
|
||||
10 pubsub00.pop.dfw.plex.bz.
|
||||
10 hand.genddos.st.
|
||||
9 api.hetzner.com.
|
||||
8 t.ncore.sh.
|
||||
8 registry.k8s.io.
|
||||
8 raw.githubusercontent.com.
|
||||
7 version.goauthentik.io.
|
||||
4 t.ncore.pro.
|
||||
4 api.segment.io.
|
||||
4 10-42-0-52.abcdefghijklmnopqrstuvwxyz012345.plex.direct.
|
||||
3 version.immich.cloud.
|
||||
3 controlplane.tailscale.com.
|
||||
2 scrobbles.plex.tv.
|
||||
2 pubsub08.pop.ewr.plex.bz.
|
||||
1 thexem.info.
|
||||
1 api.resend.com.
|
||||
# hand.genddos.st lookups (all, local time +02:00):
|
||||
2026-10-19T10:31:55
|
||||
2026-10-19T10:48:24
|
||||
2026-10-19T10:49:27
|
||||
2026-10-19T11:43:02
|
||||
2026-10-19T11:43:19
|
||||
2026-10-19T11:43:36
|
||||
2026-10-19T11:43:45
|
||||
2026-10-19T11:43:47
|
||||
2026-10-19T11:50:01
|
||||
2026-10-19T11:50:48
|
||||
@@ -0,0 +1,98 @@
|
||||
# P3 hub access log (/data/access-log, R-1140) aggregates, read in the running hub pod 2026-10-23T15:28:30Z. Lines carry path/status/remote/xff/cred/auth only.
|
||||
files: access-2026-10-18.log
|
||||
access-2026-10-19.log
|
||||
access-2026-10-20.log
|
||||
access-2026-10-21.log
|
||||
access-2026-10-22.log
|
||||
access-2026-10-23.log
|
||||
first line: 2026-10-18T10:25:05Z
|
||||
lines total: 12764
|
||||
== remote= values (count)
|
||||
12481 remote=10.42.0.200
|
||||
210 remote=10.42.0.1
|
||||
54 remote=10.42.0.213
|
||||
19 remote=10.42.0.107
|
||||
== xff= first hop, grouped by /24 (count) — positive control: ingress traffic must show a client here
|
||||
11728 192.168.0.x
|
||||
762 37.191.56.x
|
||||
38 176.77.140.x
|
||||
4 176.77.139.x
|
||||
3 10.42.0.x
|
||||
== any remote or xff in the pod CIDR 10.42.x other than the ingress 10.42.0.200 (count, then lines)
|
||||
283
|
||||
2026-10-18T10:28:45Z GET /healthz 200 0ms remote=10.42.0.1 xff=- cred=- auth=-
|
||||
2026-10-18T10:28:45Z GET /bind/[redacted] 200 0ms remote=10.42.0.1 xff=- cred=- auth=-
|
||||
2026-10-18T10:28:45Z GET /configuration 302 0ms remote=10.42.0.1 xff=- cred=- auth=-
|
||||
2026-10-18T10:28:45Z GET /api/v1/wait 401 0ms remote=10.42.0.1 xff=- cred=bearer+session-cookie auth=-
|
||||
2026-10-18T10:28:45Z POST /login 401 187ms remote=10.42.0.1 xff=- cred=- auth=-
|
||||
2026-10-18T10:29:00Z GET /configuration 200 1403ms remote=10.42.0.1 xff=- cred=token auth=token
|
||||
2026-10-18T10:29:02Z GET /configuration/artifacts 403 0ms remote=10.42.0.1 xff=- cred=token auth=-
|
||||
2026-10-18T10:29:10Z GET /configuration 200 7ms remote=10.42.0.1 xff=- cred=token auth=token
|
||||
2026-10-18T10:39:55Z GET /api/v1/admin/hosts/demo-hp-bb76ea/recovery-credential 200 9ms remote=10.42.0.1 xff=- cred=bearer auth=global
|
||||
2026-10-18T10:43:43Z GET /api/v1/admin/hosts/demo-hp-bb76ea/recovery-credential 200 0ms remote=10.42.0.1 xff=- cred=bearer auth=global
|
||||
2026-10-18T10:55:13Z POST /api/v1/admin/hosts/demo-hp-bb76ea/jobs 201 26ms remote=10.42.0.1 xff=- cred=bearer auth=global
|
||||
2026-10-18T10:55:13Z POST /api/v1/admin/hosts/demo-hp-bb76ea/jobs 201 4ms remote=10.42.0.1 xff=- cred=bearer auth=global
|
||||
2026-10-18T11:09:23Z POST /customers/tester-1/floor 303 13ms remote=10.42.0.1 xff=- cred=token auth=token
|
||||
2026-10-18T11:09:24Z POST /customers/demo-hp/floor 303 11ms remote=10.42.0.1 xff=- cred=token auth=token
|
||||
2026-10-18T11:09:24Z POST /customers/demo-felhom/floor 303 9ms remote=10.42.0.1 xff=- cred=token auth=token
|
||||
2026-10-18T11:10:59Z POST /configuration/global-floor 303 39ms remote=10.42.0.1 xff=- cred=token auth=token
|
||||
2026-10-18T11:10:59Z POST /customers/tester-1/floor 303 8ms remote=10.42.0.1 xff=- cred=token auth=token
|
||||
2026-10-18T11:11:00Z POST /customers/demo-hp/floor 303 11ms remote=10.42.0.1 xff=- cred=token auth=token
|
||||
2026-10-18T11:11:00Z POST /customers/demo-felhom/floor 303 7ms remote=10.42.0.1 xff=- cred=token auth=token
|
||||
2026-10-18T12:22:00Z POST /api/v1/admin/hosts/tester-1-d70be4/jobs 201 14ms remote=10.42.0.1 xff=- cred=bearer auth=global
|
||||
== negative-control search: plex pod IP 10.42.0.52 anywhere
|
||||
0
|
||||
== credentialed requests (cred!=none) by xff and auth (count)
|
||||
2511 xff=192.168.0.155 cred=bearer auth=customer
|
||||
2444 xff=192.168.0.149 cred=bearer auth=customer
|
||||
1889 xff=192.168.0.148 cred=bearer auth=customer
|
||||
1272 xff=192.168.0.110 cred=session-cookie auth=session
|
||||
552 xff=192.168.0.104 cred=bearer auth=host
|
||||
549 xff=37.191.56.193 cred=bearer auth=host
|
||||
531 xff=192.168.0.154 cred=bearer auth=host
|
||||
523 xff=192.168.0.101 cred=bearer auth=customer
|
||||
444 xff=192.168.0.133 cred=bearer auth=customer
|
||||
263 xff=192.168.0.134 cred=bearer auth=-
|
||||
261 xff=192.168.0.151 cred=bearer auth=customer
|
||||
241 xff=192.168.0.125 cred=bearer auth=customer
|
||||
173 xff=37.191.56.193 cred=bearer auth=customer
|
||||
160 xff=- cred=token auth=token
|
||||
130 xff=192.168.0.139 cred=bearer auth=customer
|
||||
112 xff=192.168.0.128 cred=bearer auth=host
|
||||
95 xff=192.168.0.134 cred=bearer auth=host
|
||||
48 xff=192.168.0.128 cred=bearer auth=-
|
||||
42 xff=192.168.0.159 cred=bearer auth=-
|
||||
32 xff=192.168.0.110 cred=session-cookie auth=-
|
||||
32 xff=- cred=bearer auth=global
|
||||
27 xff=192.168.0.133 cred=bearer auth=host
|
||||
23 xff=176.77.140.26 cred=session-cookie auth=session
|
||||
22 xff=192.168.0.157 cred=bearer auth=customer
|
||||
22 xff=192.168.0.135 cred=bearer auth=customer
|
||||
20 xff=192.168.0.109 cred=bearer auth=-
|
||||
15 xff=176.77.140.26 cred=session-cookie auth=-
|
||||
14 xff=192.168.0.128 cred=passphrase auth=-
|
||||
13 xff=- cred=token auth=-
|
||||
9 xff=37.191.56.193 cred=session-cookie auth=session
|
||||
|
||||
== lines with xff in 10.42.x (all)
|
||||
2026-10-23T13:00:38Z GET / 302 0ms remote=10.42.0.200 xff=10.42.0.1 cred=- auth=-
|
||||
2026-10-23T13:02:09Z GET / 302 0ms remote=10.42.0.200 xff=10.42.0.1 cred=- auth=-
|
||||
2026-10-23T14:00:08Z GET / 302 0ms remote=10.42.0.213 xff=10.42.0.1 cred=- auth=-
|
||||
== remote=10.42.0.213: first/last and path set
|
||||
2026-10-23T14:00:08Z GET / 302 0ms remote=10.42.0.213 xff=10.42.0.1 cred=- auth=-
|
||||
2026-10-23T15:21:24Z GET /api/v1/wait 200 240000ms remote=10.42.0.213 xff=37.191.56.193 cred=bearer auth=customer
|
||||
8 GET / 200
|
||||
2 GET / 302
|
||||
22 GET /api/v1/wait 200
|
||||
1 GET /configuration 200
|
||||
4 GET /hosts 200
|
||||
1 GET /login 200
|
||||
1 GET /style.css 200
|
||||
6 POST /api/v1/host-report 200
|
||||
7 POST /api/v1/report 200
|
||||
1 POST /appliances/49/discard 303
|
||||
1 POST /login 303
|
||||
== remote=10.42.0.107 = this session's probe pod cc-p2s-probe (positive control: a direct pod call is logged with the pod IP)
|
||||
2026-10-23T15:20:21Z GET / 302 0ms remote=10.42.0.107 xff=- cred=- auth=-
|
||||
2026-10-23T15:22:25Z GET /healthz 200 0ms remote=10.42.0.107 xff=- cred=- auth=-
|
||||
2026-10-23T15:22:25Z GET / 302 0ms remote=10.42.0.107 xff=- cred=- auth=-
|
||||
+1
File diff suppressed because one or more lines are too long
BIN
Binary file not shown.
@@ -0,0 +1,370 @@
|
||||
# P3 Longhorn objects created or changed in the window 2026-10-17T04:00:00Z .. 2026-10-23T08:05:00Z (and to now), 2026-10-23T15:26:52Z
|
||||
== backuptargets: total 1
|
||||
== volumes: total 78
|
||||
2026-10-23T10:29:26Z pvc-625fd054-e576-46bb-89df-44df916705d0 created-in-window=true changes=[] {"longhornvolume":"pvc-625fd054-e576-46bb-89df-44df916705d0","recurring-job-group.longhorn.io/default":"enabled"}
|
||||
== engines: total 78
|
||||
2026-10-23T10:29:26Z pvc-625fd054-e576-46bb-89df-44df916705d0-e-0 created-in-window=true changes=[] {"longhornvolume":"pvc-625fd054-e576-46bb-89df-44df916705d0"}
|
||||
== replicas: total 78
|
||||
2026-10-23T10:29:26Z pvc-625fd054-e576-46bb-89df-44df916705d0-r-39bf02b9 created-in-window=true changes=[] {"longhornvolume":"pvc-625fd054-e576-46bb-89df-44df916705d0"}
|
||||
== backups: total 178
|
||||
2026-10-18T03:00:06Z backup-83f5ca7773d241dd created-in-window=true changes=[] {"backup-volume":"pvc-486c9809-4672-4b56-b70e-0bf01d0c3628"}
|
||||
2026-10-18T03:00:06Z backup-9cb157e9f9404406 created-in-window=true changes=[] {"backup-volume":"pvc-1ae51535-0b2b-4975-bd9f-e651cc7a1edd"}
|
||||
2026-10-18T03:00:21Z backup-831843c912bf4b12 created-in-window=true changes=[] {"backup-volume":"pvc-4e3fd336-9f09-4251-bd90-cdc259ef739e"}
|
||||
2026-10-18T03:00:26Z backup-8b2ca7e2fbe34bf0 created-in-window=true changes=[] {"backup-volume":"pvc-71cbab32-86f9-40a5-8f3b-220ad626c492"}
|
||||
2026-10-18T03:00:42Z backup-6e03f6813d7748cb created-in-window=true changes=[] {"backup-volume":"pvc-4e4aba1e-b414-4016-8895-ecdf0fb04a6b"}
|
||||
2026-10-18T03:01:17Z backup-c64693c622f34710 created-in-window=true changes=[] {"backup-volume":"pvc-4fdd6da2-e795-4fa9-9e36-96f212c7018b"}
|
||||
2026-10-18T03:01:22Z backup-1929a083d7244abc created-in-window=true changes=[] {"backup-volume":"pvc-11b257b2-8edc-4bf6-b846-00979feb195f"}
|
||||
2026-10-18T03:01:33Z backup-68391531c3af4b10 created-in-window=true changes=[] {"backup-volume":"pvc-297c20e6-4ac0-42c4-9c69-24580a7f12ee"}
|
||||
2026-10-18T03:01:42Z backup-11c551d5375b4b73 created-in-window=true changes=[] {"backup-volume":"pvc-1c47727a-d5ac-4171-ac36-26c2df3d0d63"}
|
||||
2026-10-18T03:01:48Z backup-e830ec38da3e4aa0 created-in-window=true changes=[] {"backup-volume":"pvc-202e3bf2-9e61-4c59-ae0c-43fa6a42b403"}
|
||||
2026-10-18T03:01:58Z backup-f7f8ab0ab97d4123 created-in-window=true changes=[] {"backup-volume":"pvc-42695a34-d921-4007-b5e5-e40aa728e104"}
|
||||
2026-10-18T03:02:03Z backup-4388930c28b249ac created-in-window=true changes=[] {"backup-volume":"pvc-22343573-266d-492e-bd0a-37296217b523"}
|
||||
2026-10-18T03:02:13Z backup-265f326237f943bc created-in-window=true changes=[] {"backup-volume":"pvc-459e6d2a-92b8-438e-a339-ff7e40089f3d"}
|
||||
2026-10-18T03:02:38Z backup-31058e4d796843e0 created-in-window=true changes=[] {"backup-volume":"pvc-2e2e8c4c-4ba3-4dcf-9ed4-78acaf7ef92b"}
|
||||
2026-10-18T03:02:49Z backup-d118ae8350584600 created-in-window=true changes=[] {"backup-volume":"pvc-6ed74c1a-3f10-4638-9baa-9330cbff980d"}
|
||||
2026-10-18T03:02:54Z backup-6cc7894ae5d548e1 created-in-window=true changes=[] {"backup-volume":"pvc-38e8c624-5717-483b-8da1-613e703e36c8"}
|
||||
2026-10-18T03:03:04Z backup-f9ef84c50f2a4f64 created-in-window=true changes=[] {"backup-volume":"pvc-b359d7de-1c7c-4b6a-9f6d-6776c2f876ef"}
|
||||
2026-10-18T03:03:09Z backup-247107e8a9f4438a created-in-window=true changes=[] {"backup-volume":"pvc-79478678-07e4-4140-aef1-771ff763ab3f"}
|
||||
2026-10-18T03:03:25Z backup-ef8d1e513d754e0a created-in-window=true changes=[] {"backup-volume":"pvc-7d6dec2c-0cda-43c7-ad1d-44ffebcb8cb6"}
|
||||
2026-10-18T03:03:29Z backup-e0e842ed504b47f6 created-in-window=true changes=[] {"backup-volume":"pvc-cbfd55b0-4f44-487d-90fd-9c80b916ced7"}
|
||||
2026-10-18T03:03:40Z backup-3c9743af9aba4880 created-in-window=true changes=[] {"backup-volume":"pvc-c6b9ab63-24b8-46f2-b52a-06da86393de8"}
|
||||
2026-10-18T03:03:50Z backup-c6b2adafd1104326 created-in-window=true changes=[] {"backup-volume":"pvc-c8c0d0f1-c9ea-4ed3-9e22-1e254a026c49"}
|
||||
2026-10-18T03:03:55Z backup-d43ed113492441e9 created-in-window=true changes=[] {"backup-volume":"pvc-c911715e-56ee-4d97-836e-89efc448ad9d"}
|
||||
2026-10-18T03:04:16Z backup-64df95594d61410e created-in-window=true changes=[] {"backup-volume":"pvc-d9f09398-17cf-44b0-b3a2-9475bc773fec"}
|
||||
2026-10-18T03:04:30Z backup-ddb8de7a110845a8 created-in-window=true changes=[] {"backup-volume":"pvc-d2ea5b66-d251-4467-9829-14654fab7a2f"}
|
||||
2026-10-18T03:04:31Z backup-642f2c4d5e1f46e4 created-in-window=true changes=[] {"backup-volume":"pvc-e2151b14-2b24-4128-993a-c392c8d9706a"}
|
||||
2026-10-18T03:04:46Z backup-324ef5fac7c04cf3 created-in-window=true changes=[] {"backup-volume":"pvc-8401df55-4668-40e3-97d2-d53e2c1090f1"}
|
||||
2026-10-18T03:04:52Z backup-3df2312ae5834927 created-in-window=true changes=[] {"backup-volume":"pvc-7fc61dcd-52f0-45b4-97f1-9c82b28ab714"}
|
||||
2026-10-18T03:05:01Z backup-36eb129a7fa340bf created-in-window=true changes=[] {"backup-volume":"pvc-a9dd6c7c-19eb-4a0a-935d-d2c30545c378"}
|
||||
2026-10-18T03:05:07Z backup-affa5f905744417d created-in-window=true changes=[] {"backup-volume":"pvc-e3b26fdc-fd52-4fdf-9fa2-1d1ecfd029e4"}
|
||||
2026-10-18T03:05:21Z backup-7954dead7a2f4ac0 created-in-window=true changes=[] {"backup-volume":"pvc-9ca6a486-40bb-46ac-ac48-bd49d4399f4b"}
|
||||
2026-10-18T03:05:22Z backup-2c527e242af3442c created-in-window=true changes=[] {"backup-volume":"pvc-85be87dc-3351-4459-9f82-55f8cc598a2f"}
|
||||
2026-10-18T03:05:43Z backup-05d9bbb684154607 created-in-window=true changes=[] {"backup-volume":"pvc-e5b8f824-7720-454c-b546-a098608df24a"}
|
||||
2026-10-18T03:05:57Z backup-d8f19882fa7d464f created-in-window=true changes=[] {"backup-volume":"pvc-e57c220f-bc92-4815-89c9-0dee35eab3c3"}
|
||||
2026-10-18T03:05:58Z backup-158db9819d8940a9 created-in-window=true changes=[] {"backup-volume":"pvc-8ed5eea5-67d4-46fc-9806-6b8fdd61e42e"}
|
||||
2026-10-18T03:06:12Z backup-8ae6abaa0da54230 created-in-window=true changes=[] {"backup-volume":"pvc-88b4d7b4-cb5d-48e0-871e-9e150872d0bd"}
|
||||
2026-10-18T03:06:13Z backup-12a5c7d715754fe4 created-in-window=true changes=[] {"backup-volume":"pvc-be9d7813-1881-462e-8951-1bd1315f7dc5"}
|
||||
2026-10-18T03:06:27Z backup-935a9c3d36d7480a created-in-window=true changes=[] {"backup-volume":"pvc-ea977627-fb0a-4dee-8678-9ceceea448da"}
|
||||
2026-10-18T03:06:29Z backup-c8d9e42845514f20 created-in-window=true changes=[] {"backup-volume":"pvc-b10da48e-6fcc-42ef-8414-d5d617028d68"}
|
||||
2026-10-18T03:06:44Z backup-b9301ac86e494ac4 created-in-window=true changes=[] {"backup-volume":"pvc-beb0ad8a-755a-4152-a0af-f7367b32b19c"}
|
||||
2026-10-18T03:06:48Z backup-50ba4beb9ca741d3 created-in-window=true changes=[] {"backup-volume":"pvc-b0e94be5-7cd8-4a4c-9295-901614e9eeb7"}
|
||||
2026-10-18T03:07:00Z backup-7c33f6000bba49ad created-in-window=true changes=[] {"backup-volume":"pvc-8931072a-e34e-4333-9ab5-9629b6078505"}
|
||||
2026-10-18T03:07:08Z backup-25ffadfcb65a4236 created-in-window=true changes=[] {"backup-volume":"pvc-c4dfbc43-2c35-4ef0-9cfe-39b3dc885dae"}
|
||||
2026-10-18T03:07:30Z backup-f377a53003b44ec2 created-in-window=true changes=[] {"backup-volume":"pvc-7eb1f195-6a35-46c3-bbb1-5bab48209624"}
|
||||
2026-10-18T03:07:34Z backup-5bc64db7e1854620 created-in-window=true changes=[] {"backup-volume":"pvc-17e3b3cc-9c6a-4d70-85cc-c2ae72e0b4ec"}
|
||||
2026-10-18T03:07:49Z backup-70a99267481e466a created-in-window=true changes=[] {"backup-volume":"pvc-0113bbbf-fd5c-441b-9d58-6943ffa8c133"}
|
||||
2026-10-18T03:07:50Z backup-2a7db97121514867 created-in-window=true changes=[] {"backup-volume":"pvc-5fbd3bbc-fb14-406d-954c-1a232ce313ce"}
|
||||
2026-10-18T03:08:04Z backup-b736b062e3244ec5 created-in-window=true changes=[] {"backup-volume":"pvc-63f3b34f-3ac6-41a5-8790-3a27db0b5a2b"}
|
||||
2026-10-18T03:08:06Z backup-d1654988274b4ef6 created-in-window=true changes=[] {"backup-volume":"pvc-2382e7bb-9514-409b-a2cc-e97c9725512a"}
|
||||
2026-10-18T03:08:20Z backup-99f7cf4d8a6843c4 created-in-window=true changes=[] {"backup-volume":"pvc-3b23c214-ea15-40f8-aac5-61f783bf5beb"}
|
||||
2026-10-18T03:08:21Z backup-d357833443b84351 created-in-window=true changes=[] {"backup-volume":"pvc-5acabaa7-6017-4793-b45e-f1f4fd80ab97"}
|
||||
2026-10-18T03:08:35Z backup-0172504296ed493e created-in-window=true changes=[] {"backup-volume":"pvc-fc3d2f7f-6569-473c-acb4-002c613e5f18"}
|
||||
2026-10-18T03:08:47Z backup-5bbbc3ddca4b4a62 created-in-window=true changes=[] {"backup-volume":"pvc-0eae2db7-47f1-477b-b9a9-9968c2d49a6d"}
|
||||
2026-10-23T02:00:06Z backup-81b6314085e24457 created-in-window=true changes=[] {"backup-volume":"pvc-486c9809-4672-4b56-b70e-0bf01d0c3628"}
|
||||
2026-10-23T02:00:06Z backup-e77c1fd337bb456b created-in-window=true changes=[] {"backup-volume":"pvc-71cbab32-86f9-40a5-8f3b-220ad626c492"}
|
||||
2026-10-23T02:00:22Z backup-eb26a242694a4235 created-in-window=true changes=[] {"backup-volume":"pvc-5acabaa7-6017-4793-b45e-f1f4fd80ab97"}
|
||||
2026-10-23T02:00:42Z backup-45644a4760604077 created-in-window=true changes=[] {"backup-volume":"pvc-4e3fd336-9f09-4251-bd90-cdc259ef739e"}
|
||||
2026-10-23T02:01:08Z backup-3a373d05a9764a36 created-in-window=true changes=[] {"backup-volume":"pvc-4e4aba1e-b414-4016-8895-ecdf0fb04a6b"}
|
||||
2026-10-23T02:01:32Z backup-9ccd1d94f68c485e created-in-window=true changes=[] {"backup-volume":"pvc-4fdd6da2-e795-4fa9-9e36-96f212c7018b"}
|
||||
2026-10-23T02:01:33Z backup-1a5d5f5f6f254880 created-in-window=true changes=[] {"backup-volume":"pvc-22343573-266d-492e-bd0a-37296217b523"}
|
||||
== backupvolumes: total 91
|
||||
== backupbackingimages: total 0
|
||||
== systembackups: total 0
|
||||
== systemrestores: total 0
|
||||
== recurringjobs: total 2
|
||||
== volumeattachments: total 78
|
||||
2026-10-23T10:29:26Z pvc-625fd054-e576-46bb-89df-44df916705d0 created-in-window=true changes=[] {"longhornvolume":"pvc-625fd054-e576-46bb-89df-44df916705d0"}
|
||||
== snapshots: total 149
|
||||
2026-10-18T03:00:01Z backup-w-9e561c5f-39bf-4de0-b86d-4154538ced31 created-in-window=true changes=[] {"longhornvolume":"pvc-1ae51535-0b2b-4975-bd9f-e651cc7a1edd"}
|
||||
2026-10-18T03:00:01Z backup-w-c9cb53aa-4359-4309-9976-530a6faf3310 created-in-window=true changes=[] {"longhornvolume":"pvc-486c9809-4672-4b56-b70e-0bf01d0c3628"}
|
||||
2026-10-18T03:00:16Z backup-w-8822d0fe-6849-4df1-bed1-7ea948861d7b created-in-window=true changes=[] {"longhornvolume":"pvc-71cbab32-86f9-40a5-8f3b-220ad626c492"}
|
||||
2026-10-18T03:00:16Z backup-w-ce5a0dec-ec88-4da1-b14f-7acf37cda9e2 created-in-window=true changes=[] {"longhornvolume":"pvc-4e3fd336-9f09-4251-bd90-cdc259ef739e"}
|
||||
2026-10-18T03:00:37Z backup-w-f36ce009-f2ec-4da5-bef2-e72746c50eae created-in-window=true changes=[] {"longhornvolume":"pvc-4e4aba1e-b414-4016-8895-ecdf0fb04a6b"}
|
||||
2026-10-18T03:01:12Z backup-w-152bc04c-cfb0-494e-a020-b8edceb99208 created-in-window=true changes=[] {"longhornvolume":"pvc-4fdd6da2-e795-4fa9-9e36-96f212c7018b"}
|
||||
2026-10-18T03:01:17Z backup-w-7be4c31e-99c9-4858-abc0-8b2b102fa6eb created-in-window=true changes=[] {"longhornvolume":"pvc-11b257b2-8edc-4bf6-b846-00979feb195f"}
|
||||
2026-10-18T03:01:28Z backup-w-492c52b6-af58-4b56-b031-e1a2f610e656 created-in-window=true changes=[] {"longhornvolume":"pvc-297c20e6-4ac0-42c4-9c69-24580a7f12ee"}
|
||||
2026-10-18T03:01:32Z backup-w-500c8206-b274-4c95-adc1-7dbf77b41806 created-in-window=true changes=[] {"longhornvolume":"pvc-1c47727a-d5ac-4171-ac36-26c2df3d0d63"}
|
||||
2026-10-18T03:01:43Z backup-w-477bb594-f177-4d5b-be17-2db7fc908486 created-in-window=true changes=[] {"longhornvolume":"pvc-202e3bf2-9e61-4c59-ae0c-43fa6a42b403"}
|
||||
2026-10-18T03:01:52Z backup-w-5a54721b-bdfc-48ae-8f5f-8612bff3525d created-in-window=true changes=[] {"longhornvolume":"pvc-42695a34-d921-4007-b5e5-e40aa728e104"}
|
||||
2026-10-18T03:01:53Z backup-w-dea6667f-c93f-4bb7-ad59-b8b3bc772476 created-in-window=true changes=[] {"longhornvolume":"pvc-22343573-266d-492e-bd0a-37296217b523"}
|
||||
2026-10-18T03:02:08Z backup-w-069a5b3f-1600-4147-9566-29f351d2bb39 created-in-window=true changes=[] {"longhornvolume":"pvc-459e6d2a-92b8-438e-a339-ff7e40089f3d"}
|
||||
2026-10-18T03:02:33Z backup-w-a493d271-9d5e-41d5-a93c-7954e173eb0f created-in-window=true changes=[] {"longhornvolume":"pvc-2e2e8c4c-4ba3-4dcf-9ed4-78acaf7ef92b"}
|
||||
2026-10-18T03:02:44Z backup-w-34fa0b60-8201-4c21-aad1-f73656d1fc4c created-in-window=true changes=[] {"longhornvolume":"pvc-6ed74c1a-3f10-4638-9baa-9330cbff980d"}
|
||||
2026-10-18T03:02:44Z backup-w-db1904d5-7bfe-45f4-81c6-e17010691225 created-in-window=true changes=[] {"longhornvolume":"pvc-38e8c624-5717-483b-8da1-613e703e36c8"}
|
||||
2026-10-18T03:02:59Z backup-w-e06ba46d-8847-4f8c-9a9c-ad67982d4f5c created-in-window=true changes=[] {"longhornvolume":"pvc-b359d7de-1c7c-4b6a-9f6d-6776c2f876ef"}
|
||||
2026-10-18T03:03:04Z backup-w-cac58903-1e3d-4c60-95ed-72e4d7ac4662 created-in-window=true changes=[] {"longhornvolume":"pvc-79478678-07e4-4140-aef1-771ff763ab3f"}
|
||||
2026-10-18T03:03:14Z backup-w-80d619fb-2f32-4af8-aa0c-7d6c034896a7 created-in-window=true changes=[] {"longhornvolume":"pvc-7d6dec2c-0cda-43c7-ad1d-44ffebcb8cb6"}
|
||||
2026-10-18T03:03:19Z backup-w-34af7ebb-cca6-47a6-a668-541a5f4124a3 created-in-window=true changes=[] {"longhornvolume":"pvc-cbfd55b0-4f44-487d-90fd-9c80b916ced7"}
|
||||
2026-10-18T03:03:35Z backup-w-ec972d0f-02f6-47de-8252-f3471a63d29a created-in-window=true changes=[] {"longhornvolume":"pvc-c6b9ab63-24b8-46f2-b52a-06da86393de8"}
|
||||
2026-10-18T03:03:40Z backup-w-336bb191-b457-432c-8b3b-a49b8fbcb844 created-in-window=true changes=[] {"longhornvolume":"pvc-c8c0d0f1-c9ea-4ed3-9e22-1e254a026c49"}
|
||||
2026-10-18T03:03:50Z backup-w-132be759-46d9-48f4-9b7f-731dbf00aa5a created-in-window=true changes=[] {"longhornvolume":"pvc-c911715e-56ee-4d97-836e-89efc448ad9d"}
|
||||
2026-10-18T03:04:06Z backup-w-81d52611-6488-4b98-aced-cb0dd836c4c0 created-in-window=true changes=[] {"longhornvolume":"pvc-d9f09398-17cf-44b0-b3a2-9475bc773fec"}
|
||||
2026-10-18T03:04:25Z backup-w-f12dd015-e375-4aeb-903d-a6d24adb621a created-in-window=true changes=[] {"longhornvolume":"pvc-d2ea5b66-d251-4467-9829-14654fab7a2f"}
|
||||
2026-10-18T03:04:26Z backup-w-b5f21af2-a32d-4a2d-954d-4853baf4520b created-in-window=true changes=[] {"longhornvolume":"pvc-e2151b14-2b24-4128-993a-c392c8d9706a"}
|
||||
2026-10-18T03:04:40Z backup-w-501e9c93-1004-4c30-acea-26b58f69f598 created-in-window=true changes=[] {"longhornvolume":"pvc-8401df55-4668-40e3-97d2-d53e2c1090f1"}
|
||||
2026-10-18T03:04:41Z backup-w-9929ed08-8a85-4c29-83a9-c0e3bfb23b33 created-in-window=true changes=[] {"longhornvolume":"pvc-7fc61dcd-52f0-45b4-97f1-9c82b28ab714"}
|
||||
2026-10-18T03:04:56Z backup-w-44cb1d12-6aeb-4ced-9977-029cf9296c86 created-in-window=true changes=[] {"longhornvolume":"pvc-a9dd6c7c-19eb-4a0a-935d-d2c30545c378"}
|
||||
2026-10-18T03:05:02Z backup-w-5c387443-5da4-4918-b5b7-c23f0873d081 created-in-window=true changes=[] {"longhornvolume":"pvc-e3b26fdc-fd52-4fdf-9fa2-1d1ecfd029e4"}
|
||||
2026-10-18T03:05:11Z backup-w-908f1c40-5b75-4a93-bd0b-c5ec6c3b5c5a created-in-window=true changes=[] {"longhornvolume":"pvc-9ca6a486-40bb-46ac-ac48-bd49d4399f4b"}
|
||||
2026-10-18T03:05:17Z backup-w-a26221ac-ad81-45a1-93cd-c730ebf48fa9 created-in-window=true changes=[] {"longhornvolume":"pvc-85be87dc-3351-4459-9f82-55f8cc598a2f"}
|
||||
2026-10-18T03:05:32Z backup-w-8af31417-1f16-4ed5-9bb4-1e3ec016f766 created-in-window=true changes=[] {"longhornvolume":"pvc-e5b8f824-7720-454c-b546-a098608df24a"}
|
||||
2026-10-18T03:05:52Z backup-w-24190c0e-85a4-480b-9451-91a931351415 created-in-window=true changes=[] {"longhornvolume":"pvc-e57c220f-bc92-4815-89c9-0dee35eab3c3"}
|
||||
2026-10-18T03:05:53Z backup-w-ce360270-a851-4ff8-a481-ad9933848b48 created-in-window=true changes=[] {"longhornvolume":"pvc-8ed5eea5-67d4-46fc-9806-6b8fdd61e42e"}
|
||||
2026-10-18T03:06:07Z backup-w-768fe287-8ac0-43ce-b7c4-017f340a6276 created-in-window=true changes=[] {"longhornvolume":"pvc-88b4d7b4-cb5d-48e0-871e-9e150872d0bd"}
|
||||
2026-10-18T03:06:08Z backup-w-55284120-f572-42de-a65d-f32ce33b8d6b created-in-window=true changes=[] {"longhornvolume":"pvc-be9d7813-1881-462e-8951-1bd1315f7dc5"}
|
||||
2026-10-18T03:06:22Z backup-w-89e8e1d8-e924-4911-80da-d88420c47ab6 created-in-window=true changes=[] {"longhornvolume":"pvc-ea977627-fb0a-4dee-8678-9ceceea448da"}
|
||||
2026-10-18T03:06:24Z backup-w-6ec192d8-7928-4fed-bba5-8d3db7f4ccaf created-in-window=true changes=[] {"longhornvolume":"pvc-b10da48e-6fcc-42ef-8414-d5d617028d68"}
|
||||
2026-10-18T03:06:39Z backup-w-5c4c2d48-70be-402d-8ef6-0665f01012cf created-in-window=true changes=[] {"longhornvolume":"pvc-beb0ad8a-755a-4152-a0af-f7367b32b19c"}
|
||||
2026-10-18T03:06:43Z backup-w-073e62b6-6177-4d87-a7e2-28b55567d729 created-in-window=true changes=[] {"longhornvolume":"pvc-b0e94be5-7cd8-4a4c-9295-901614e9eeb7"}
|
||||
2026-10-18T03:06:54Z backup-w-9689a569-2397-4947-b1b5-94042bc973f4 created-in-window=true changes=[] {"longhornvolume":"pvc-8931072a-e34e-4333-9ab5-9629b6078505"}
|
||||
2026-10-18T03:07:03Z backup-w-47b6014f-5f34-4484-9d80-10bab2b2633f created-in-window=true changes=[] {"longhornvolume":"pvc-c4dfbc43-2c35-4ef0-9cfe-39b3dc885dae"}
|
||||
2026-10-18T03:07:25Z backup-w-d0f4fe40-8c48-4990-969a-d421e45e734c created-in-window=true changes=[] {"longhornvolume":"pvc-7eb1f195-6a35-46c3-bbb1-5bab48209624"}
|
||||
2026-10-18T03:07:29Z backup-w-cf531882-6842-4629-8470-97a63d9f1263 created-in-window=true changes=[] {"longhornvolume":"pvc-17e3b3cc-9c6a-4d70-85cc-c2ae72e0b4ec"}
|
||||
2026-10-18T03:07:40Z backup-w-94e25d95-26b5-441f-b57c-6c38dcfd1bd5 created-in-window=true changes=[] {"longhornvolume":"pvc-5fbd3bbc-fb14-406d-954c-1a232ce313ce"}
|
||||
2026-10-18T03:07:44Z backup-w-7c27529f-7e1c-4515-b4e3-5a92eef9904a created-in-window=true changes=[] {"longhornvolume":"pvc-0113bbbf-fd5c-441b-9d58-6943ffa8c133"}
|
||||
2026-10-18T03:07:59Z backup-w-9e4f3b48-85bb-4b17-a504-3774ea4e6e14 created-in-window=true changes=[] {"longhornvolume":"pvc-63f3b34f-3ac6-41a5-8790-3a27db0b5a2b"}
|
||||
2026-10-18T03:08:01Z backup-w-3c194f84-d8a0-4ecb-baf0-9c4a16318987 created-in-window=true changes=[] {"longhornvolume":"pvc-2382e7bb-9514-409b-a2cc-e97c9725512a"}
|
||||
2026-10-18T03:08:15Z backup-w-849c9f2d-fbab-4084-998b-2dcbc5b8e3af created-in-window=true changes=[] {"longhornvolume":"pvc-3b23c214-ea15-40f8-aac5-61f783bf5beb"}
|
||||
2026-10-18T03:08:16Z backup-w-6a5d4be2-a059-40b4-bee8-abf12199ae05 created-in-window=true changes=[] {"longhornvolume":"pvc-5acabaa7-6017-4793-b45e-f1f4fd80ab97"}
|
||||
2026-10-18T03:08:30Z backup-w-aec12d6b-becd-4ca1-9590-a60f5f4a4f45 created-in-window=true changes=[] {"longhornvolume":"pvc-fc3d2f7f-6569-473c-acb4-002c613e5f18"}
|
||||
2026-10-18T03:08:41Z backup-w-b3049de0-fe68-472b-8964-f0140a6b2c54 created-in-window=true changes=[] {"longhornvolume":"pvc-0eae2db7-47f1-477b-b9a9-9968c2d49a6d"}
|
||||
2026-10-23T02:00:01Z backup-d-bcf88ff5-ab92-4511-bcd4-a4686c8941f2 created-in-window=true changes=[] {"longhornvolume":"pvc-71cbab32-86f9-40a5-8f3b-220ad626c492"}
|
||||
2026-10-23T02:00:01Z backup-d-d8d68af0-acc6-4a07-bd57-1eb283dc8588 created-in-window=true changes=[] {"longhornvolume":"pvc-486c9809-4672-4b56-b70e-0bf01d0c3628"}
|
||||
2026-10-23T02:00:17Z backup-d-6afe7cd9-fd63-48ff-96b7-b8bd7ba03aa0 created-in-window=true changes=[] {"longhornvolume":"pvc-5acabaa7-6017-4793-b45e-f1f4fd80ab97"}
|
||||
2026-10-23T02:00:37Z backup-d-ab86b601-8c71-4e9e-ab5f-6211e6bccc2f created-in-window=true changes=[] {"longhornvolume":"pvc-4e3fd336-9f09-4251-bd90-cdc259ef739e"}
|
||||
2026-10-23T02:01:03Z backup-d-723e6872-0483-4fa0-8482-2f449b038fbd created-in-window=true changes=[] {"longhornvolume":"pvc-4e4aba1e-b414-4016-8895-ecdf0fb04a6b"}
|
||||
2026-10-23T02:01:27Z backup-d-532d9238-ffdd-43ae-a17e-02e263490801 created-in-window=true changes=[] {"longhornvolume":"pvc-4fdd6da2-e795-4fa9-9e36-96f212c7018b"}
|
||||
2026-10-23T02:01:28Z backup-d-d2227be3-7347-4bdc-a023-9164ce5a0b0b created-in-window=true changes=[] {"longhornvolume":"pvc-22343573-266d-492e-bd0a-37296217b523"}
|
||||
== settings: total 97
|
||||
== nodes: total 1
|
||||
== orphans: total 0
|
||||
== sharemanagers: total 2
|
||||
== backingimages: total 0
|
||||
|
||||
# CORRECTION 2026-10-23T15:27:30Z: Longhorn CRs carry NO managedFields (checked: backuptarget 'default' mf=[] while its generation is 93466). The 'changes=' column above is therefore EMPTY BY CONSTRUCTION and proves nothing. Only creationTimestamp is evidence.
|
||||
|
||||
== backups created in window, by volume, with target URL and labels
|
||||
2026-10-18T03:00:06Z pvc-1ae51535-0b2b-4975-bd9f-e651cc7a1edd state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-9e561c5f-39bf-4de0-b86d-4154538
|
||||
2026-10-18T03:00:06Z pvc-486c9809-4672-4b56-b70e-0bf01d0c3628 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-c9cb53aa-4359-4309-9976-530a6fa
|
||||
2026-10-18T03:00:21Z pvc-4e3fd336-9f09-4251-bd90-cdc259ef739e state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-ce5a0dec-ec88-4da1-b14f-7acf37c
|
||||
2026-10-18T03:00:26Z pvc-71cbab32-86f9-40a5-8f3b-220ad626c492 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-8822d0fe-6849-4df1-bed1-7ea9488
|
||||
2026-10-18T03:00:42Z pvc-4e4aba1e-b414-4016-8895-ecdf0fb04a6b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-f36ce009-f2ec-4da5-bef2-e72746c
|
||||
2026-10-18T03:01:17Z pvc-4fdd6da2-e795-4fa9-9e36-96f212c7018b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-152bc04c-cfb0-494e-a020-b8edceb
|
||||
2026-10-18T03:01:22Z pvc-11b257b2-8edc-4bf6-b846-00979feb195f state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-7be4c31e-99c9-4858-abc0-8b2b102
|
||||
2026-10-18T03:01:33Z pvc-297c20e6-4ac0-42c4-9c69-24580a7f12ee state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-492c52b6-af58-4b56-b031-e1a2f61
|
||||
2026-10-18T03:01:42Z pvc-1c47727a-d5ac-4171-ac36-26c2df3d0d63 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-500c8206-b274-4c95-adc1-7dbf77b
|
||||
2026-10-18T03:01:48Z pvc-202e3bf2-9e61-4c59-ae0c-43fa6a42b403 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-477bb594-f177-4d5b-be17-2db7fc9
|
||||
2026-10-18T03:01:58Z pvc-42695a34-d921-4007-b5e5-e40aa728e104 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-5a54721b-bdfc-48ae-8f5f-8612bff
|
||||
2026-10-18T03:02:03Z pvc-22343573-266d-492e-bd0a-37296217b523 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-dea6667f-c93f-4bb7-ad59-b8b3bc7
|
||||
2026-10-18T03:02:13Z pvc-459e6d2a-92b8-438e-a339-ff7e40089f3d state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-069a5b3f-1600-4147-9566-29f351d
|
||||
2026-10-18T03:02:38Z pvc-2e2e8c4c-4ba3-4dcf-9ed4-78acaf7ef92b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-a493d271-9d5e-41d5-a93c-7954e17
|
||||
2026-10-18T03:02:49Z pvc-6ed74c1a-3f10-4638-9baa-9330cbff980d state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-34fa0b60-8201-4c21-aad1-f73656d
|
||||
2026-10-18T03:02:54Z pvc-38e8c624-5717-483b-8da1-613e703e36c8 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-db1904d5-7bfe-45f4-81c6-e170106
|
||||
2026-10-18T03:03:04Z pvc-b359d7de-1c7c-4b6a-9f6d-6776c2f876ef state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-e06ba46d-8847-4f8c-9a9c-ad67982
|
||||
2026-10-18T03:03:09Z pvc-79478678-07e4-4140-aef1-771ff763ab3f state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-cac58903-1e3d-4c60-95ed-72e4d7a
|
||||
2026-10-18T03:03:25Z pvc-7d6dec2c-0cda-43c7-ad1d-44ffebcb8cb6 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-80d619fb-2f32-4af8-aa0c-7d6c034
|
||||
2026-10-18T03:03:29Z pvc-cbfd55b0-4f44-487d-90fd-9c80b916ced7 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-34af7ebb-cca6-47a6-a668-541a5f4
|
||||
2026-10-18T03:03:40Z pvc-c6b9ab63-24b8-46f2-b52a-06da86393de8 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-ec972d0f-02f6-47de-8252-f3471a6
|
||||
2026-10-18T03:03:50Z pvc-c8c0d0f1-c9ea-4ed3-9e22-1e254a026c49 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-336bb191-b457-432c-8b3b-a49b8fb
|
||||
2026-10-18T03:03:55Z pvc-c911715e-56ee-4d97-836e-89efc448ad9d state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-132be759-46d9-48f4-9b7f-731dbf0
|
||||
2026-10-18T03:04:16Z pvc-d9f09398-17cf-44b0-b3a2-9475bc773fec state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-81d52611-6488-4b98-aced-cb0dd83
|
||||
2026-10-18T03:04:30Z pvc-d2ea5b66-d251-4467-9829-14654fab7a2f state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-f12dd015-e375-4aeb-903d-a6d24ad
|
||||
2026-10-18T03:04:31Z pvc-e2151b14-2b24-4128-993a-c392c8d9706a state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-b5f21af2-a32d-4a2d-954d-4853baf
|
||||
2026-10-18T03:04:46Z pvc-8401df55-4668-40e3-97d2-d53e2c1090f1 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-501e9c93-1004-4c30-acea-26b58f6
|
||||
2026-10-18T03:04:52Z pvc-7fc61dcd-52f0-45b4-97f1-9c82b28ab714 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-9929ed08-8a85-4c29-83a9-c0e3bfb
|
||||
2026-10-18T03:05:01Z pvc-a9dd6c7c-19eb-4a0a-935d-d2c30545c378 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-44cb1d12-6aeb-4ced-9977-029cf92
|
||||
2026-10-18T03:05:07Z pvc-e3b26fdc-fd52-4fdf-9fa2-1d1ecfd029e4 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-5c387443-5da4-4918-b5b7-c23f087
|
||||
2026-10-18T03:05:21Z pvc-9ca6a486-40bb-46ac-ac48-bd49d4399f4b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-908f1c40-5b75-4a93-bd0b-c5ec6c3
|
||||
2026-10-18T03:05:22Z pvc-85be87dc-3351-4459-9f82-55f8cc598a2f state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-a26221ac-ad81-45a1-93cd-c730ebf
|
||||
2026-10-18T03:05:43Z pvc-e5b8f824-7720-454c-b546-a098608df24a state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-8af31417-1f16-4ed5-9bb4-1e3ec01
|
||||
2026-10-18T03:05:57Z pvc-e57c220f-bc92-4815-89c9-0dee35eab3c3 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-24190c0e-85a4-480b-9451-91a9313
|
||||
2026-10-18T03:05:58Z pvc-8ed5eea5-67d4-46fc-9806-6b8fdd61e42e state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-ce360270-a851-4ff8-a481-ad99338
|
||||
2026-10-18T03:06:12Z pvc-88b4d7b4-cb5d-48e0-871e-9e150872d0bd state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-768fe287-8ac0-43ce-b7c4-017f340
|
||||
2026-10-18T03:06:13Z pvc-be9d7813-1881-462e-8951-1bd1315f7dc5 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-55284120-f572-42de-a65d-f32ce33
|
||||
2026-10-18T03:06:27Z pvc-ea977627-fb0a-4dee-8678-9ceceea448da state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-89e8e1d8-e924-4911-80da-d88420c
|
||||
2026-10-18T03:06:29Z pvc-b10da48e-6fcc-42ef-8414-d5d617028d68 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-6ec192d8-7928-4fed-bba5-8d3db7f
|
||||
2026-10-18T03:06:44Z pvc-beb0ad8a-755a-4152-a0af-f7367b32b19c state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-5c4c2d48-70be-402d-8ef6-0665f01
|
||||
2026-10-18T03:06:48Z pvc-b0e94be5-7cd8-4a4c-9295-901614e9eeb7 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-073e62b6-6177-4d87-a7e2-28b5556
|
||||
2026-10-18T03:07:00Z pvc-8931072a-e34e-4333-9ab5-9629b6078505 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-9689a569-2397-4947-b1b5-94042bc
|
||||
2026-10-18T03:07:08Z pvc-c4dfbc43-2c35-4ef0-9cfe-39b3dc885dae state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-47b6014f-5f34-4484-9d80-10bab2b
|
||||
2026-10-18T03:07:30Z pvc-7eb1f195-6a35-46c3-bbb1-5bab48209624 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-d0f4fe40-8c48-4990-969a-d421e45
|
||||
2026-10-18T03:07:34Z pvc-17e3b3cc-9c6a-4d70-85cc-c2ae72e0b4ec state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-cf531882-6842-4629-8470-97a63d9
|
||||
2026-10-18T03:07:49Z pvc-0113bbbf-fd5c-441b-9d58-6943ffa8c133 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-7c27529f-7e1c-4515-b4e3-5a92eef
|
||||
2026-10-18T03:07:50Z pvc-5fbd3bbc-fb14-406d-954c-1a232ce313ce state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-94e25d95-26b5-441f-b57c-6c38dcf
|
||||
2026-10-18T03:08:04Z pvc-63f3b34f-3ac6-41a5-8790-3a27db0b5a2b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-9e4f3b48-85bb-4b17-a504-3774ea4
|
||||
2026-10-18T03:08:06Z pvc-2382e7bb-9514-409b-a2cc-e97c9725512a state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-3c194f84-d8a0-4ecb-baf0-9c4a163
|
||||
2026-10-18T03:08:20Z pvc-3b23c214-ea15-40f8-aac5-61f783bf5beb state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-849c9f2d-fbab-4084-998b-2dcbc5b
|
||||
2026-10-18T03:08:21Z pvc-5acabaa7-6017-4793-b45e-f1f4fd80ab97 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-6a5d4be2-a059-40b4-bee8-abf1219
|
||||
2026-10-18T03:08:35Z pvc-fc3d2f7f-6569-473c-acb4-002c613e5f18 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-aec12d6b-becd-4ca1-9590-a60f5f4
|
||||
2026-10-18T03:08:47Z pvc-0eae2db7-47f1-477b-b9a9-9968c2d49a6d state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-weekly snap=backup-w-b3049de0-fe68-472b-8964-f0140a6
|
||||
2026-10-23T02:00:06Z pvc-486c9809-4672-4b56-b70e-0bf01d0c3628 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-d8d68af0-acc6-4a07-bd57-1eb283d
|
||||
2026-10-23T02:00:06Z pvc-71cbab32-86f9-40a5-8f3b-220ad626c492 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-bcf88ff5-ab92-4511-bcd4-a4686c8
|
||||
2026-10-23T02:00:22Z pvc-5acabaa7-6017-4793-b45e-f1f4fd80ab97 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-6afe7cd9-fd63-48ff-96b7-b8bd7ba
|
||||
2026-10-23T02:00:42Z pvc-4e3fd336-9f09-4251-bd90-cdc259ef739e state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-ab86b601-8c71-4e9e-ab5f-6211e6b
|
||||
2026-10-23T02:01:08Z pvc-4e4aba1e-b414-4016-8895-ecdf0fb04a6b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-723e6872-0483-4fa0-8482-2f449b0
|
||||
2026-10-23T02:01:32Z pvc-4fdd6da2-e795-4fa9-9e36-96f212c7018b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-532d9238-ffdd-43ae-a17e-02e2634
|
||||
2026-10-23T02:01:33Z pvc-22343573-266d-492e-bd0a-37296217b523 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-d2227be3-7347-4bdc-a023-9164ce5
|
||||
2026-10-23T02:01:47Z pvc-0113bbbf-fd5c-441b-9d58-6943ffa8c133 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-c1f5fc70-576c-4da0-815c-aa93c64
|
||||
2026-10-23T02:02:03Z pvc-0eae2db7-47f1-477b-b9a9-9968c2d49a6d state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-c564cba5-6d62-49e5-b496-53b964e
|
||||
2026-10-23T02:02:18Z pvc-11b257b2-8edc-4bf6-b846-00979feb195f state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-54a62590-1809-41dd-9c31-b14134f
|
||||
2026-10-23T02:02:33Z pvc-17e3b3cc-9c6a-4d70-85cc-c2ae72e0b4ec state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-07db40a9-4578-4056-a6ab-2a8791b
|
||||
2026-10-23T02:02:49Z pvc-1ae51535-0b2b-4975-bd9f-e651cc7a1edd state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-bdd24928-efdd-4a6e-95c4-abf6858
|
||||
2026-10-23T02:03:04Z pvc-1c47727a-d5ac-4171-ac36-26c2df3d0d63 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-66d2dfd3-666d-456d-83a4-8d22f24
|
||||
2026-10-23T02:03:04Z pvc-202e3bf2-9e61-4c59-ae0c-43fa6a42b403 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-6fb4220e-6a1c-445e-92cd-a40e4c6
|
||||
2026-10-23T02:03:24Z pvc-63f3b34f-3ac6-41a5-8790-3a27db0b5a2b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-4f745b2c-2216-4bff-996e-dd2baa0
|
||||
2026-10-23T02:03:39Z pvc-5fbd3bbc-fb14-406d-954c-1a232ce313ce state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-cc1aff9c-16cd-495a-b6b2-0e47d26
|
||||
2026-10-23T02:03:40Z pvc-38e8c624-5717-483b-8da1-613e703e36c8 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-c0247496-c63a-4579-8b68-f63d205
|
||||
2026-10-23T02:04:05Z pvc-2382e7bb-9514-409b-a2cc-e97c9725512a state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-7ff78535-6dfa-411c-a1a4-cdbb45a
|
||||
2026-10-23T02:04:31Z pvc-297c20e6-4ac0-42c4-9c69-24580a7f12ee state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-a4575f47-f837-4a26-bdab-b55c1ab
|
||||
2026-10-23T02:04:46Z pvc-2e2e8c4c-4ba3-4dcf-9ed4-78acaf7ef92b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-6bba495f-15a9-420f-9ea8-4bae806
|
||||
2026-10-23T02:05:07Z pvc-42695a34-d921-4007-b5e5-e40aa728e104 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-a25c4421-048a-453f-ad6e-34fef26
|
||||
2026-10-23T02:05:22Z pvc-3b23c214-ea15-40f8-aac5-61f783bf5beb state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-95457e62-4a17-4a59-8d72-8047e00
|
||||
2026-10-23T02:05:42Z pvc-459e6d2a-92b8-438e-a339-ff7e40089f3d state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-4e5b167a-7310-47cb-a6b1-916168d
|
||||
2026-10-23T02:06:13Z pvc-6ed74c1a-3f10-4638-9baa-9330cbff980d state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-4cd91122-6d04-4a72-ad69-3b0d0a6
|
||||
2026-10-23T02:06:28Z pvc-b359d7de-1c7c-4b6a-9f6d-6776c2f876ef state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-8b778723-11a9-46d4-aa2b-f025a71
|
||||
2026-10-23T02:06:44Z pvc-79478678-07e4-4140-aef1-771ff763ab3f state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-0bd019c6-6214-4a71-9d9f-d6907b8
|
||||
2026-10-23T02:06:59Z pvc-7d6dec2c-0cda-43c7-ad1d-44ffebcb8cb6 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-1585fad0-6ac0-44c7-80b2-1ec603b
|
||||
2026-10-23T02:07:00Z pvc-8ed5eea5-67d4-46fc-9806-6b8fdd61e42e state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-d2ce1852-9284-491e-b424-f23bfba
|
||||
2026-10-23T02:07:20Z pvc-9ca6a486-40bb-46ac-ac48-bd49d4399f4b state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-ad0e30e9-aff2-427c-b040-aa41144
|
||||
2026-10-23T02:07:29Z pvc-a9dd6c7c-19eb-4a0a-935d-d2c30545c378 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-a3eb95b8-4c3c-40cd-a797-0b58af2
|
||||
2026-10-23T02:07:54Z pvc-b0e94be5-7cd8-4a4c-9295-901614e9eeb7 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-8f350533-d46e-4bc1-afe4-698ac27
|
||||
2026-10-23T02:08:25Z pvc-b10da48e-6fcc-42ef-8414-d5d617028d68 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-f6ef4e55-80ab-4e52-8c2c-1df09e7
|
||||
2026-10-23T02:08:45Z pvc-8401df55-4668-40e3-97d2-d53e2c1090f1 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-e2b7b133-2dd3-4b22-bec1-bab0622
|
||||
2026-10-23T02:08:56Z pvc-7fc61dcd-52f0-45b4-97f1-9c82b28ab714 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-887bfdd7-1804-4c5a-83be-80c5253
|
||||
2026-10-23T02:09:11Z pvc-e5b8f824-7720-454c-b546-a098608df24a state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-d7e129b7-5d88-4bc9-bfc0-7564ab7
|
||||
2026-10-23T02:09:26Z pvc-e57c220f-bc92-4815-89c9-0dee35eab3c3 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-ae2f297d-5714-49a9-a712-1ce8ac6
|
||||
2026-10-23T02:09:41Z pvc-c4dfbc43-2c35-4ef0-9cfe-39b3dc885dae state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-9206b338-5612-421b-83a5-1c13499
|
||||
2026-10-23T02:09:42Z pvc-d9f09398-17cf-44b0-b3a2-9475bc773fec state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-ce08dc5f-8f83-4644-8ac0-880ee0e
|
||||
2026-10-23T02:09:57Z pvc-85be87dc-3351-4459-9f82-55f8cc598a2f state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-7349021f-8111-4d08-aa74-3ec18e1
|
||||
2026-10-23T02:10:17Z pvc-c911715e-56ee-4d97-836e-89efc448ad9d state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-f18a8f97-7fd3-4bb0-ba92-f7b5704
|
||||
2026-10-23T02:10:37Z pvc-ea977627-fb0a-4dee-8678-9ceceea448da state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-1b632b7b-e42c-4516-bffd-bdc6e7e
|
||||
2026-10-23T02:10:38Z pvc-88b4d7b4-cb5d-48e0-871e-9e150872d0bd state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-4deb82a5-7b2f-42f4-a206-9778ee9
|
||||
2026-10-23T02:10:53Z pvc-beb0ad8a-755a-4152-a0af-f7367b32b19c state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-2fce6324-4e8c-4cfd-9c00-f500bbd
|
||||
2026-10-23T02:11:09Z pvc-c8c0d0f1-c9ea-4ed3-9e22-1e254a026c49 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-5524b832-3049-48f3-b6c9-ec8aefd
|
||||
2026-10-23T02:11:27Z pvc-be9d7813-1881-462e-8951-1bd1315f7dc5 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-29a6b089-b40d-473c-bcbb-4f565c7
|
||||
2026-10-23T02:11:42Z pvc-fc3d2f7f-6569-473c-acb4-002c613e5f18 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-6ad56202-8675-4dd3-9476-447b2a3
|
||||
2026-10-23T02:12:03Z pvc-e2151b14-2b24-4128-993a-c392c8d9706a state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-d10cb97e-7e9d-4904-970e-fd4607a
|
||||
2026-10-23T02:12:23Z pvc-d2ea5b66-d251-4467-9829-14654fab7a2f state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-289d6573-4b0c-4ef5-85cd-91431bf
|
||||
2026-10-23T02:12:29Z pvc-7eb1f195-6a35-46c3-bbb1-5bab48209624 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-10b20200-bcf7-4388-b919-c1b66a5
|
||||
2026-10-23T02:12:39Z pvc-c6b9ab63-24b8-46f2-b52a-06da86393de8 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-945b6c37-6893-49a5-a15e-41a9212
|
||||
2026-10-23T02:12:54Z pvc-cbfd55b0-4f44-487d-90fd-9c80b916ced7 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-949f00a2-f4e3-475a-808e-62dc20d
|
||||
2026-10-23T02:13:14Z pvc-8931072a-e34e-4333-9ab5-9629b6078505 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-25fdc074-8997-4edf-a9c6-e884269
|
||||
2026-10-23T02:13:14Z pvc-e3b26fdc-fd52-4fdf-9fa2-1d1ecfd029e4 state=Completed url=nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?backup=ba target=default rj=backup-daily snap=backup-d-f04f9565-79a1-4d11-92cf-03c0ab1
|
||||
|
||||
== snapshots created in window (name, volume, createdBy labels)
|
||||
2026-10-18T03:00:01Z pvc-1ae51535-0b2b-4975-bd9f-e651cc7a1edd backup-w-9e561c5f-39bf-4de0-b86d-4154538ced31 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:00:01Z pvc-486c9809-4672-4b56-b70e-0bf01d0c3628 backup-w-c9cb53aa-4359-4309-9976-530a6faf3310 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:00:16Z pvc-4e3fd336-9f09-4251-bd90-cdc259ef739e backup-w-ce5a0dec-ec88-4da1-b14f-7acf37cda9e2 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:00:16Z pvc-71cbab32-86f9-40a5-8f3b-220ad626c492 backup-w-8822d0fe-6849-4df1-bed1-7ea948861d7b usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:00:37Z pvc-4e4aba1e-b414-4016-8895-ecdf0fb04a6b backup-w-f36ce009-f2ec-4da5-bef2-e72746c50eae usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:01:12Z pvc-4fdd6da2-e795-4fa9-9e36-96f212c7018b backup-w-152bc04c-cfb0-494e-a020-b8edceb99208 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:01:17Z pvc-11b257b2-8edc-4bf6-b846-00979feb195f backup-w-7be4c31e-99c9-4858-abc0-8b2b102fa6eb usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:01:28Z pvc-297c20e6-4ac0-42c4-9c69-24580a7f12ee backup-w-492c52b6-af58-4b56-b031-e1a2f610e656 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:01:32Z pvc-1c47727a-d5ac-4171-ac36-26c2df3d0d63 backup-w-500c8206-b274-4c95-adc1-7dbf77b41806 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:01:43Z pvc-202e3bf2-9e61-4c59-ae0c-43fa6a42b403 backup-w-477bb594-f177-4d5b-be17-2db7fc908486 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:01:52Z pvc-42695a34-d921-4007-b5e5-e40aa728e104 backup-w-5a54721b-bdfc-48ae-8f5f-8612bff3525d usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:01:53Z pvc-22343573-266d-492e-bd0a-37296217b523 backup-w-dea6667f-c93f-4bb7-ad59-b8b3bc772476 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:02:08Z pvc-459e6d2a-92b8-438e-a339-ff7e40089f3d backup-w-069a5b3f-1600-4147-9566-29f351d2bb39 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:02:33Z pvc-2e2e8c4c-4ba3-4dcf-9ed4-78acaf7ef92b backup-w-a493d271-9d5e-41d5-a93c-7954e173eb0f usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:02:44Z pvc-38e8c624-5717-483b-8da1-613e703e36c8 backup-w-db1904d5-7bfe-45f4-81c6-e17010691225 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:02:44Z pvc-6ed74c1a-3f10-4638-9baa-9330cbff980d backup-w-34fa0b60-8201-4c21-aad1-f73656d1fc4c usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:02:59Z pvc-b359d7de-1c7c-4b6a-9f6d-6776c2f876ef backup-w-e06ba46d-8847-4f8c-9a9c-ad67982d4f5c usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:03:04Z pvc-79478678-07e4-4140-aef1-771ff763ab3f backup-w-cac58903-1e3d-4c60-95ed-72e4d7ac4662 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:03:14Z pvc-7d6dec2c-0cda-43c7-ad1d-44ffebcb8cb6 backup-w-80d619fb-2f32-4af8-aa0c-7d6c034896a7 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:03:19Z pvc-cbfd55b0-4f44-487d-90fd-9c80b916ced7 backup-w-34af7ebb-cca6-47a6-a668-541a5f4124a3 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:03:35Z pvc-c6b9ab63-24b8-46f2-b52a-06da86393de8 backup-w-ec972d0f-02f6-47de-8252-f3471a63d29a usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:03:40Z pvc-c8c0d0f1-c9ea-4ed3-9e22-1e254a026c49 backup-w-336bb191-b457-432c-8b3b-a49b8fbcb844 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:03:50Z pvc-c911715e-56ee-4d97-836e-89efc448ad9d backup-w-132be759-46d9-48f4-9b7f-731dbf00aa5a usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:04:06Z pvc-d9f09398-17cf-44b0-b3a2-9475bc773fec backup-w-81d52611-6488-4b98-aced-cb0dd836c4c0 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:04:25Z pvc-d2ea5b66-d251-4467-9829-14654fab7a2f backup-w-f12dd015-e375-4aeb-903d-a6d24adb621a usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:04:26Z pvc-e2151b14-2b24-4128-993a-c392c8d9706a backup-w-b5f21af2-a32d-4a2d-954d-4853baf4520b usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:04:40Z pvc-8401df55-4668-40e3-97d2-d53e2c1090f1 backup-w-501e9c93-1004-4c30-acea-26b58f69f598 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:04:41Z pvc-7fc61dcd-52f0-45b4-97f1-9c82b28ab714 backup-w-9929ed08-8a85-4c29-83a9-c0e3bfb23b33 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:04:56Z pvc-a9dd6c7c-19eb-4a0a-935d-d2c30545c378 backup-w-44cb1d12-6aeb-4ced-9977-029cf9296c86 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:05:02Z pvc-e3b26fdc-fd52-4fdf-9fa2-1d1ecfd029e4 backup-w-5c387443-5da4-4918-b5b7-c23f0873d081 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:05:11Z pvc-9ca6a486-40bb-46ac-ac48-bd49d4399f4b backup-w-908f1c40-5b75-4a93-bd0b-c5ec6c3b5c5a usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:05:17Z pvc-85be87dc-3351-4459-9f82-55f8cc598a2f backup-w-a26221ac-ad81-45a1-93cd-c730ebf48fa9 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:05:32Z pvc-e5b8f824-7720-454c-b546-a098608df24a backup-w-8af31417-1f16-4ed5-9bb4-1e3ec016f766 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:05:52Z pvc-e57c220f-bc92-4815-89c9-0dee35eab3c3 backup-w-24190c0e-85a4-480b-9451-91a931351415 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:05:53Z pvc-8ed5eea5-67d4-46fc-9806-6b8fdd61e42e backup-w-ce360270-a851-4ff8-a481-ad9933848b48 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:06:07Z pvc-88b4d7b4-cb5d-48e0-871e-9e150872d0bd backup-w-768fe287-8ac0-43ce-b7c4-017f340a6276 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:06:08Z pvc-be9d7813-1881-462e-8951-1bd1315f7dc5 backup-w-55284120-f572-42de-a65d-f32ce33b8d6b usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:06:22Z pvc-ea977627-fb0a-4dee-8678-9ceceea448da backup-w-89e8e1d8-e924-4911-80da-d88420c47ab6 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:06:24Z pvc-b10da48e-6fcc-42ef-8414-d5d617028d68 backup-w-6ec192d8-7928-4fed-bba5-8d3db7f4ccaf usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:06:39Z pvc-beb0ad8a-755a-4152-a0af-f7367b32b19c backup-w-5c4c2d48-70be-402d-8ef6-0665f01012cf usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:06:43Z pvc-b0e94be5-7cd8-4a4c-9295-901614e9eeb7 backup-w-073e62b6-6177-4d87-a7e2-28b55567d729 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:06:54Z pvc-8931072a-e34e-4333-9ab5-9629b6078505 backup-w-9689a569-2397-4947-b1b5-94042bc973f4 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:07:03Z pvc-c4dfbc43-2c35-4ef0-9cfe-39b3dc885dae backup-w-47b6014f-5f34-4484-9d80-10bab2b2633f usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:07:25Z pvc-7eb1f195-6a35-46c3-bbb1-5bab48209624 backup-w-d0f4fe40-8c48-4990-969a-d421e45e734c usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:07:29Z pvc-17e3b3cc-9c6a-4d70-85cc-c2ae72e0b4ec backup-w-cf531882-6842-4629-8470-97a63d9f1263 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:07:40Z pvc-5fbd3bbc-fb14-406d-954c-1a232ce313ce backup-w-94e25d95-26b5-441f-b57c-6c38dcfd1bd5 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:07:44Z pvc-0113bbbf-fd5c-441b-9d58-6943ffa8c133 backup-w-7c27529f-7e1c-4515-b4e3-5a92eef9904a usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:07:59Z pvc-63f3b34f-3ac6-41a5-8790-3a27db0b5a2b backup-w-9e4f3b48-85bb-4b17-a504-3774ea4e6e14 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:08:01Z pvc-2382e7bb-9514-409b-a2cc-e97c9725512a backup-w-3c194f84-d8a0-4ecb-baf0-9c4a16318987 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:08:15Z pvc-3b23c214-ea15-40f8-aac5-61f783bf5beb backup-w-849c9f2d-fbab-4084-998b-2dcbc5b8e3af usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:08:16Z pvc-5acabaa7-6017-4793-b45e-f1f4fd80ab97 backup-w-6a5d4be2-a059-40b4-bee8-abf12199ae05 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:08:30Z pvc-fc3d2f7f-6569-473c-acb4-002c613e5f18 backup-w-aec12d6b-becd-4ca1-9590-a60f5f4a4f45 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-18T03:08:41Z pvc-0eae2db7-47f1-477b-b9a9-9968c2d49a6d backup-w-b3049de0-fe68-472b-8964-f0140a6b2c54 usercreated=true labels={"RecurringJob":"backup-weekly"}
|
||||
2026-10-23T02:00:01Z pvc-486c9809-4672-4b56-b70e-0bf01d0c3628 backup-d-d8d68af0-acc6-4a07-bd57-1eb283dc8588 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:00:01Z pvc-71cbab32-86f9-40a5-8f3b-220ad626c492 backup-d-bcf88ff5-ab92-4511-bcd4-a4686c8941f2 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:00:17Z pvc-5acabaa7-6017-4793-b45e-f1f4fd80ab97 backup-d-6afe7cd9-fd63-48ff-96b7-b8bd7ba03aa0 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:00:37Z pvc-4e3fd336-9f09-4251-bd90-cdc259ef739e backup-d-ab86b601-8c71-4e9e-ab5f-6211e6bccc2f usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:01:03Z pvc-4e4aba1e-b414-4016-8895-ecdf0fb04a6b backup-d-723e6872-0483-4fa0-8482-2f449b038fbd usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:01:27Z pvc-4fdd6da2-e795-4fa9-9e36-96f212c7018b backup-d-532d9238-ffdd-43ae-a17e-02e263490801 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:01:28Z pvc-22343573-266d-492e-bd0a-37296217b523 backup-d-d2227be3-7347-4bdc-a023-9164ce5a0b0b usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:01:42Z pvc-0113bbbf-fd5c-441b-9d58-6943ffa8c133 backup-d-c1f5fc70-576c-4da0-815c-aa93c6462d62 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:01:58Z pvc-0eae2db7-47f1-477b-b9a9-9968c2d49a6d backup-d-c564cba5-6d62-49e5-b496-53b964ed07eb usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:02:13Z pvc-11b257b2-8edc-4bf6-b846-00979feb195f backup-d-54a62590-1809-41dd-9c31-b14134f340df usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:02:28Z pvc-17e3b3cc-9c6a-4d70-85cc-c2ae72e0b4ec backup-d-07db40a9-4578-4056-a6ab-2a8791bb14d1 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:02:39Z pvc-1ae51535-0b2b-4975-bd9f-e651cc7a1edd backup-d-bdd24928-efdd-4a6e-95c4-abf68582861a usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:02:58Z pvc-1c47727a-d5ac-4171-ac36-26c2df3d0d63 backup-d-66d2dfd3-666d-456d-83a4-8d22f24ee2c9 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:02:59Z pvc-202e3bf2-9e61-4c59-ae0c-43fa6a42b403 backup-d-6fb4220e-6a1c-445e-92cd-a40e4c66351c usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:03:19Z pvc-63f3b34f-3ac6-41a5-8790-3a27db0b5a2b backup-d-4f745b2c-2216-4bff-996e-dd2baa03838e usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:03:34Z pvc-5fbd3bbc-fb14-406d-954c-1a232ce313ce backup-d-cc1aff9c-16cd-495a-b6b2-0e47d2674a7b usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:03:35Z pvc-38e8c624-5717-483b-8da1-613e703e36c8 backup-d-c0247496-c63a-4579-8b68-f63d2051b3f4 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:04:00Z pvc-2382e7bb-9514-409b-a2cc-e97c9725512a backup-d-7ff78535-6dfa-411c-a1a4-cdbb45a179d3 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:04:21Z pvc-297c20e6-4ac0-42c4-9c69-24580a7f12ee backup-d-a4575f47-f837-4a26-bdab-b55c1abba818 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:04:41Z pvc-2e2e8c4c-4ba3-4dcf-9ed4-78acaf7ef92b backup-d-6bba495f-15a9-420f-9ea8-4bae8064b71e usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:04:57Z pvc-42695a34-d921-4007-b5e5-e40aa728e104 backup-d-a25c4421-048a-453f-ad6e-34fef264c2b7 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:05:17Z pvc-3b23c214-ea15-40f8-aac5-61f783bf5beb backup-d-95457e62-4a17-4a59-8d72-8047e00b8cc0 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:05:32Z pvc-459e6d2a-92b8-438e-a339-ff7e40089f3d backup-d-4e5b167a-7310-47cb-a6b1-916168db3f2b usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:06:08Z pvc-6ed74c1a-3f10-4638-9baa-9330cbff980d backup-d-4cd91122-6d04-4a72-ad69-3b0d0a625622 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:06:23Z pvc-b359d7de-1c7c-4b6a-9f6d-6776c2f876ef backup-d-8b778723-11a9-46d4-aa2b-f025a714fd31 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:06:39Z pvc-79478678-07e4-4140-aef1-771ff763ab3f backup-d-0bd019c6-6214-4a71-9d9f-d6907b8703ce usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:06:53Z pvc-7d6dec2c-0cda-43c7-ad1d-44ffebcb8cb6 backup-d-1585fad0-6ac0-44c7-80b2-1ec603b5df27 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:06:55Z pvc-8ed5eea5-67d4-46fc-9806-6b8fdd61e42e backup-d-d2ce1852-9284-491e-b424-f23bfba48b39 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:07:10Z pvc-9ca6a486-40bb-46ac-ac48-bd49d4399f4b backup-d-ad0e30e9-aff2-427c-b040-aa41144177ea usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:07:24Z pvc-a9dd6c7c-19eb-4a0a-935d-d2c30545c378 backup-d-a3eb95b8-4c3c-40cd-a797-0b58af2c8bbb usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:07:44Z pvc-b0e94be5-7cd8-4a4c-9295-901614e9eeb7 backup-d-8f350533-d46e-4bc1-afe4-698ac2730f06 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:08:20Z pvc-b10da48e-6fcc-42ef-8414-d5d617028d68 backup-d-f6ef4e55-80ab-4e52-8c2c-1df09e712ffe usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:08:40Z pvc-8401df55-4668-40e3-97d2-d53e2c1090f1 backup-d-e2b7b133-2dd3-4b22-bec1-bab062295efa usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:08:46Z pvc-7fc61dcd-52f0-45b4-97f1-9c82b28ab714 backup-d-887bfdd7-1804-4c5a-83be-80c52535d5e2 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:09:06Z pvc-e5b8f824-7720-454c-b546-a098608df24a backup-d-d7e129b7-5d88-4bc9-bfc0-7564ab7a8d11 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:09:16Z pvc-e57c220f-bc92-4815-89c9-0dee35eab3c3 backup-d-ae2f297d-5714-49a9-a712-1ce8ac64913a usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:09:31Z pvc-d9f09398-17cf-44b0-b3a2-9475bc773fec backup-d-ce08dc5f-8f83-4644-8ac0-880ee0e7c662 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:09:36Z pvc-c4dfbc43-2c35-4ef0-9cfe-39b3dc885dae backup-d-9206b338-5612-421b-83a5-1c13499d9263 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:09:52Z pvc-85be87dc-3351-4459-9f82-55f8cc598a2f backup-d-7349021f-8111-4d08-aa74-3ec18e12e05a usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:10:07Z pvc-c911715e-56ee-4d97-836e-89efc448ad9d backup-d-f18a8f97-7fd3-4bb0-ba92-f7b5704c0b9a usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:10:26Z pvc-ea977627-fb0a-4dee-8678-9ceceea448da backup-d-1b632b7b-e42c-4516-bffd-bdc6e7e2ba57 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:10:28Z pvc-88b4d7b4-cb5d-48e0-871e-9e150872d0bd backup-d-4deb82a5-7b2f-42f4-a206-9778ee95aeab usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:10:48Z pvc-beb0ad8a-755a-4152-a0af-f7367b32b19c backup-d-2fce6324-4e8c-4cfd-9c00-f500bbdc44c8 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:11:03Z pvc-c8c0d0f1-c9ea-4ed3-9e22-1e254a026c49 backup-d-5524b832-3049-48f3-b6c9-ec8aefd868b4 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:11:22Z pvc-be9d7813-1881-462e-8951-1bd1315f7dc5 backup-d-29a6b089-b40d-473c-bcbb-4f565c70b062 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:11:37Z pvc-fc3d2f7f-6569-473c-acb4-002c613e5f18 backup-d-6ad56202-8675-4dd3-9476-447b2a36d07a usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:11:53Z pvc-e2151b14-2b24-4128-993a-c392c8d9706a backup-d-d10cb97e-7e9d-4904-970e-fd4607adf4f4 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:12:13Z pvc-d2ea5b66-d251-4467-9829-14654fab7a2f backup-d-289d6573-4b0c-4ef5-85cd-91431bfe3ac4 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:12:24Z pvc-7eb1f195-6a35-46c3-bbb1-5bab48209624 backup-d-10b20200-bcf7-4388-b919-c1b66a5ae153 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:12:33Z pvc-c6b9ab63-24b8-46f2-b52a-06da86393de8 backup-d-945b6c37-6893-49a5-a15e-41a9212638e2 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:12:49Z pvc-cbfd55b0-4f44-487d-90fd-9c80b916ced7 backup-d-949f00a2-f4e3-475a-808e-62dc20d59bf5 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:13:09Z pvc-8931072a-e34e-4333-9ab5-9629b6078505 backup-d-25fdc074-8997-4edf-a9c6-e88426915a57 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
2026-10-23T02:13:09Z pvc-e3b26fdc-fd52-4fdf-9fa2-1d1ecfd029e4 backup-d-f04f9565-79a1-4d11-92cf-03c0ab1fdcc2 usercreated=true labels={"RecurringJob":"backup-daily"}
|
||||
|
||||
== volumeattachment tickets (all), with ticket ids and types
|
||||
pvc-1d4ec717-7ee5-40a0-b093-3a62fd2a81a4 ticket=share-manager-controller-pvc-1d4ec717-7ee5-40a0-b093-3a62fd2a81a4 type=share-manager-controller node=dooplex
|
||||
pvc-8ed5eea5-67d4-46fc-9806-6b8fdd61e42e ticket=share-manager-controller-pvc-8ed5eea5-67d4-46fc-9806-6b8fdd61e42e type=share-manager-controller node=dooplex
|
||||
|
||||
== recurring jobs
|
||||
2026-01-05T18:23:17Z backup-daily 0 4 * * * backup
|
||||
2026-01-05T18:23:17Z backup-weekly 0 5 * * 0 backup
|
||||
== backuptargets
|
||||
2025-11-29T10:22:32Z default nfs://192.168.0.180:/mnt/5_hdd/backup/longhorn-pvc?nfsOptions=soft,timeo=330,retrans=3
|
||||
@@ -0,0 +1,45 @@
|
||||
# P3.5 container network bytes (cAdvisor), window 2026-10-17T04:00Z..10-23T08:05Z, 2026-10-23T15:30:10Z
|
||||
== transmit bytes per day, Plex pod (GiB)
|
||||
2026-10-11T00:00:00Z 0.04
|
||||
2026-10-12T00:00:00Z 0.04
|
||||
2026-10-13T00:00:00Z 0.04
|
||||
2026-10-14T00:00:00Z 0.04
|
||||
2026-10-15T00:00:00Z 0.26
|
||||
2026-10-16T00:00:00Z 0.08
|
||||
2026-10-17T00:00:00Z 2.25
|
||||
2026-10-18T00:00:00Z 142.97
|
||||
2026-10-19T00:00:00Z 202.37
|
||||
2026-10-20T00:00:00Z 528.45
|
||||
2026-10-21T00:00:00Z 441.46
|
||||
2026-10-22T00:00:00Z 206.1
|
||||
2026-10-23T00:00:00Z 0.09
|
||||
== receive bytes per day, Plex pod (GiB)
|
||||
2026-10-11T00:00:00Z 0.01
|
||||
2026-10-12T00:00:00Z 0.01
|
||||
2026-10-13T00:00:00Z 0.01
|
||||
2026-10-14T00:00:00Z 0.01
|
||||
2026-10-15T00:00:00Z 0.03
|
||||
2026-10-16T00:00:00Z 0.02
|
||||
2026-10-17T00:00:00Z 0.03
|
||||
2026-10-18T00:00:00Z 2.25
|
||||
2026-10-19T00:00:00Z 7.87
|
||||
2026-10-20T00:00:00Z 1.03
|
||||
2026-10-21T00:00:00Z 0.04
|
||||
2026-10-22T00:00:00Z 1.05
|
||||
2026-10-23T00:00:00Z 0.02
|
||||
== labels available on the metric (does any give the PEER?)
|
||||
["__name__","beta_kubernetes_io_arch","beta_kubernetes_io_instance_type","beta_kubernetes_io_os","id","image","instance","interface","job","kubernetes_io_arch","kubernetes_io_hostname","kubernetes_io_os","name","namespace","node_kubernetes_io_instance_type","node_role_kubernetes_io_control_plane","node_role_kubernetes_io_master","pod"]
|
||||
== longhorn-system pods: transmit bytes per day (GiB) — an off-site backup would show here
|
||||
2026-10-11T00:00:00Z 25.56
|
||||
2026-10-12T00:00:00Z 22.86
|
||||
2026-10-13T00:00:00Z 25.3
|
||||
2026-10-14T00:00:00Z 26.44
|
||||
2026-10-15T00:00:00Z 29.03
|
||||
2026-10-16T00:00:00Z 44.67
|
||||
2026-10-17T00:00:00Z 45.61
|
||||
2026-10-18T00:00:00Z 36.08
|
||||
2026-10-19T00:00:00Z 66.68
|
||||
2026-10-20T00:00:00Z 76.98
|
||||
2026-10-21T00:00:00Z 39.77
|
||||
2026-10-22T00:00:00Z 35.41
|
||||
2026-10-23T00:00:00Z 38.63
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
BIN
Binary file not shown.
File diff suppressed because one or more lines are too long
@@ -0,0 +1,4 @@
|
||||
# Samba per-client logs (log file = /var/log/samba/log.%m) 2026-10-23T15:31:45Z
|
||||
# positive control: this session's probe pod 10.42.0.107 connected to :445 during the LAN scan (15:22-15:24Z) and a file log.10.42.0.107 appeared at 17:24 CEST.
|
||||
-rw-r--r-- 1 root root 0 2026-10-23 17:24 log.10.42.0.107
|
||||
# files named for any 10.42.x address: 1
|
||||
@@ -218,12 +218,14 @@ stopping line that lies.
|
||||
| **R-1094** | Storage & devices | P4 | **The whole-disk format refusal tells the household to format the free part — which is refused while the other part is in use.** SEEN 2026-10-16 (controller 0.318.0): 409 „Ezen a lemezen egy használatban lévő meghajtó van, ezért a teljes lemez nem formázható. Csak a szabad részét formázhatod." — since agent 0.158.1 a part next to a mounted part can only be USED (the root wrapper trusts no „Felhom's own" claim). Evidence: `audits/storage-identity-buildB-2026-10-15/live/14-samedisk-refusal-offer.txt`. | READY | — | Reword `err.web.meghajto_hasznalatban_formazas` (hu + en): „… nem formázható. A szabad részét használatba veheted." Next controller release; the copy gates run. | CC |
|
||||
| **R-1213** | Storage & devices | P4 | **Operator detail still on two household pages:** the registered drive card's `ext4 · /dev/sdb1 · Model` line (`templates/storage.html`; W14 hid only the agent drive cards), and the heading „Távoli mentés (3. mentés) — titkosított, offsite" with the English „offsite". Found by the night helper 2026-10-21 (W11/W14 follow-up). | OPEN | — | Move the line behind „Részletek"; „…titkosított, házon kívüli" | CC |
|
||||
|
||||
## Security & access — 19 rows (P1 1, P2 2, P3 10, P4 6)
|
||||
## Security & access — 21 rows (P1 2, P2 2, P3 11, P4 6)
|
||||
|
||||
| ID | Category | Sev | What | State | Blocked on | Next action | Owner |
|
||||
|---|---|---|---|---|---|---|---|
|
||||
| **R-1241** | Security & access | P1 | **A hacked app pod on DooPlex can read the hub's nightly database copies — with every customer's unsealed Cloudflare, tunnel and git token (R-975) — through the Longhorn NFS export, and by a published file-handle escape the operator signing keys on the same disk: whoever breaks one homelab app can take over the boxes' tunnels and sign agent updates.** MEASURED 2026-10-23 (Plex2Shell impact audit, `audits/plex2shell-felhom-impact-2026-10-23/`): export `/mnt/5_hdd/backup/longhorn-pvc` rw, `no_root_squash`, `no_subtree_check`, a sub-directory of sda1, which also holds `/mnt/5_hdd/felhom.eu/felhom-op-*` (no passphrase, R-924); `secure` is void in pods (containerd sets `ip_unprivileged_port_start=0`; a uid-1000 probe with no capabilities bound port 700); the four `felhom-system` volumes have `encrypted=false`; Longhorn's API on :9500 answers any pod with no login (backups, targets, volumes). In the Plex2Shell window neither door was used — verdict NOT REACHED (nfsd accepted 0 new connections 10-10 → 10-23, positive control; no off-schedule Longhorn backup or volume). 2026-10-23 ~15:18Z, operator yes: the export was narrowed from `*` to `10.42.0.0/16` — the home network and the tailnet are closed, pods are not (Longhorn connects from its pod address). Not exercised: the escape itself (Tier-2 machine). | OPEN | the homelab session (DooPlex host + cluster); the operator (R-924) | Homelab: a NetworkPolicy so only `longhorn-system` reaches :2049/:111 and :9500, or the backup store on its own filesystem. Felhom: seal R-975; a passphrase on the signing keys (R-924) | operator |
|
||||
| **R-1139** | Security & access | P2 | **Tester 2's break-glass root password was not rotated with the others (R-954, operator decision D1 = A, 2026-10-17): the box has been offline since 2026-10-04.** demo-hp, Tester 1 and demo-felhom were rotated and proven on 2026-10-17 (`audits/agent-allowlist-rotation-2026-10-17/P3/`). | OPEN — filed 2026-10-17 **2026-10-22: closes when Tester 2 is reinstalled (operator ruling 2026-10-22 14:11 — a fresh install sets and vaults a new console password).** | Tester 2 reporting again | When it reports: the installer's step 4b alone (`P3/rotate-step4b.sh` shape), then the vaulted value logs in (PVE API 200) and the old one is refused | CC |
|
||||
| **R-1042** | Security & access | P3 | **The boxes' Cloudflare keys cannot change zone settings, so Cloudflare's own „Always Use HTTPS” cannot be switched on.** Measured 2026-10-14 on all three zones (`audits/https-only-2026-10-14/``1A-1-zones-and-keys.txt`): each `cf_api_token` is valid and sees only its own zone, but GET/PATCH `settings/always_use_https`, `ssl`, `security_header` answer 403; the redirect and transform rule phases too. The https-only fix therefore lives on the box (decision 246). A second layer at Cloudflare needs „Zone Settings: Edit” (and, for headers, „Transform Rules”) added to each customer's key — the hub's zone-reach check stays. | **WAITING-ON-OPERATOR** — filed 2026-10-14 | a key permission only the operator can grant | Optional: widen each customer key, then switch „Always Use HTTPS” on per zone | operator |
|
||||
| **R-1242** | Security & access | P3 | **The demo NAS export `/mnt/5_hdd/felhom-data` → 192.168.0.162 (demo-felhom) is a sub-directory of DooPlex's sda1 with `no_subtree_check`, so a compromised demo-felhom host could walk the whole disk as uid 101000 and read every world-readable file there (the GPG secrets exports are 0644, every repo, the public keys).** Measured 2026-10-23 (`audits/plex2shell-felhom-impact-2026-10-23/` Part 1; `exportfs -v`: `all_squash,anonuid=101000`). 0600 files (the signing keys) stay out of reach. Not exercised. | OPEN | a DooPlex host change (fence) | Give the demo share its own filesystem, or `subtree_check`; or remove other-read from `/mnt/5_hdd/backup/secrets/exports` | operator |
|
||||
| **R-1104** | Security & access | P3 | **Check https-only on Tester 2 when it reports again.** R-1033 (plain http on every public name) is closed on the three boxes that report (35 names → 301, 2026-10-16). Tester 2 (`sajatfelhom.hu`) has been off since 2026-10-04 on controller 0.292.0; its addresses answer Cloudflare 530 (tunnel down), so nothing is served in plain http while it is off. When it comes back it takes the floor (≥ 0.312.0 carries the redirect). | OPEN — filed 2026-10-16 | Tester 2 reporting again | Run `scripts/https_only_check.py` with Tester 2 in it; close | CC |
|
||||
| **R-1141** | Security & access | P3 | **`felhom-host-install --rotate-recovery` exists only as part of a full installer re-run, which also reinstalls the vouched agent and the root files.** On a box running a newer agent than the vouched one (demo-hp on the candidate, 2026-10-17) it would move the agent back; on a household box it is a much larger act than a password change. The 2026-10-17 rotation therefore ran the installer's own `step_break_glass` ALONE (`audits/agent-allowlist-rotation-2026-10-17/P3/`). | **NARROWED 2026-10-18 — built on `main`, not published.** `felhom-host-install.sh --rotate-recovery-only` runs step 4b alone (felhom.eu `7d64038f`): reads the hub, host id and host key from the agent config, refuses byo and every other mode flag, asks the hub's `/healthz` before the password changes, never touches the agent or root files. The default install path is unchanged in behaviour (harness verdicts and 9 transcripts identical old vs new; demo-hp `--preflight-only` identical; `--rotate-recovery-only --dry-run` on demo-hp changed nothing). `step_break_glass` moved, byte-identical, ahead of the argument parse. `break-glass.md` §5 points at it. Publishes only with the next `installer-v…` tag. | the next installer tag | Cut the next `installer-v…` tag (with the other untagged installer changes); close | CC |
|
||||
| **R-955** | Security & access | P4 | **The cross-box check of the hub API is done in source and tests but not fully proven: if a later check masks a missing id check, a box's key could read or change another box's hub record without any test noticing.** Read 2026-10-12: every box-facing `/api/v1` route takes the box from its own key or refuses a different id; 14 routes already had a refusal test, 5 got one (`crossbox_refusal_test.go`). Left: red-prove the 4 new tests that were not red-proved (as the restore-directive one was), and the live read-only check with one demo box's key against the other demo box's id. | OPEN — filed 2026-10-12 by the security review | — | Red-prove the 4 tests; run the live GET check on the two demo boxes | CC |
|
||||
|
||||
@@ -5,6 +5,10 @@ Moved here byte for byte on 2026-10-14 (night session), newest first, so that `S
|
||||
|
||||
**Updated 2026-10-13 (night): demo-hp, demo-felhom and Tester 1 run agent 0.155.0; demo-felhom runs controller 0.310.0, the other two 0.309.0 until the floor is raised. The open-items list is at 127. Reports: `REPORT-poweroff.md`, `REPORT-plugmeter.md`, `REPORT-usenet-2026-10-12.md`, `REPORT-newapps-2026-10-12.md`, `REPORT-disk-evening-2026-10-12.md`, `REPORT-answers-2026-10-12.md`, `REPORT-m3-2026-10-11.md`, `REPORT-redesign-2026-10-10.md`, `REPORT-testers-2026-10-10.md`, `REPORT-register-shrink-2026-10-10.md`, `REPORT-new-apps-2026-10-10.md`, `REPORT-release-2026-10-10.md`, `REPORT-break-the-circle-2026-10-09.md`, `REPORT-dooplex-survival-2026-10-09.md`, `REPORT-day4-2026-10-09.md`.**
|
||||
|
||||
## Moved from STATUS on 2026-10-23 (evening)
|
||||
|
||||
**Updated 2026-10-23 (afternoon).** Your D39 = B is built and live: an app with a public security hole can now get its fix at night on every box, after one test on the test box — controller 0.341.0 is the floor since 13:24 (your yes). The test: Plex moved by itself at night on the test box, and an older controller safely waited for a hand press. Nothing needs you.
|
||||
|
||||
## Moved from STATUS on 2026-10-23 (afternoon)
|
||||
|
||||
**Updated 2026-10-23 (day).** Released on your go: controller 0.340.0 (the floor), agent 0.163.0 (vouched; root SSH by key only on the three test boxes), installer 1.36.0, hub 0.167.0, and the website with your two sentences. The hub database now leaves every 6 hours and the released images and agent packages every night, both read back from ep0; the break-glass sheet is current — please print it. One false failure mail reached you at 10:28 (my install of the 6-hour copy, fixed in the same hour).
|
||||
|
||||
Reference in New Issue
Block a user