Files
felhom.eu/documentation/audits/release-2026-10-26/byo/byo-proof.txt
T

74 lines
10 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# BYO test host byo-test (VM 9371 on demo-hp), host_id Tester4-f967d4, 2026-10-25
## planted before the install: our 0.164.0 drop-in, sha256 f0485da5… (copied from Tester 1)
felhom-agent 0.165.0
root 644 /var/lib/felhom-install/state.json
install mode: byo
## sshd_config.d now:
total 8
drwxr-xr-x 2 root root 4096 Oct 25 18:22 .
drwxr-xr-x 4 root root 4096 Oct 25 17:37 ..
permitrootlogin yes
passwordauthentication yes
## journal (os-apply + agent, 17:40–18:25)
Oct 25 17:52:07 byo-test felhom-os-apply[4082]: os-apply: BUNDLE START agent=0.164.0 sha=1d7b54d39d0c1aff authority=installer files=32 write=26 same=2 kept=0 skipped=4
Oct 25 17:52:07 byo-test felhom-os-apply[4083]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-mkfs-guarded (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4084]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-selfupdate-guarded (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4085]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-pbs-apply (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4086]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-backup-target-apply (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4087]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-vzdump-partial-clean (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4088]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-thin-check (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4089]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-internal-place (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4090]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-crash-guard (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4091]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-priv-apply (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4092]: os-apply: BUNDLE WROTE /var/lib/vz/snippets/felhom-guest-hook.sh (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4093]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-shared-parent.sh (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4094]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-shared-parent.service (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4095]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-crash-guard.service (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4096]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-crash-guard-check.service (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4097]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-crash-guard-check.timer (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4098]: os-apply: BUNDLE WROTE /etc/felhom/crash-guard.conf (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4099]: os-apply: BUNDLE WROTE /etc/grub.d/01_felhom_oneshot (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4100]: os-apply: BUNDLE WROTE /etc/grub.d/42_felhom_oneshot (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4101]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-agent.service (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4102]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-agent-rollback.service (new)
Oct 25 17:52:07 byo-test felhom-os-apply[4103]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-agent.service.d/felhom-agent-limits.conf (new)
Oct 25 17:52:08 byo-test felhom-os-apply[4104]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-mgmt-watchdog (new)
Oct 25 17:52:08 byo-test felhom-os-apply[4105]: os-apply: BUNDLE WROTE /etc/tmpfiles.d/felhom-privsep.conf (new)
Oct 25 17:52:08 byo-test felhom-os-apply[4106]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-mgmt-watchdog.service (new)
Oct 25 17:52:08 byo-test felhom-os-apply[4107]: os-apply: BUNDLE WROTE /etc/systemd/system/felhom-mgmt-watchdog.timer (new)
Oct 25 17:52:08 byo-test felhom-os-apply[4108]: os-apply: BUNDLE WROTE /etc/sudoers.d/felhom-agent (new)
Oct 25 17:52:09 byo-test felhom-os-apply[4235]: os-apply: BUNDLE DONE agent=0.164.0 written=26 same=2 self-check=ok signers-created=False
Oct 25 17:52:11 byo-test felhom-os-apply[4417]: os-apply: REFUSED: R12 this box was installed as 'byo', not appliance — its host belongs to its owner
Oct 25 17:52:11 byo-test felhom-agent[4389]: time=2026-10-25T17:52:11.013+01:00 level=INFO msg="osupdate: wrapper" line="os-apply: REFUSED: R12 this box was installed as 'byo', not appliance — its host belongs to its owner"
Oct 25 17:52:12 byo-test felhom-agent[4389]: time=2026-10-25T17:52:12.970+01:00 level=INFO msg="capabilities self-check" ok=70 total=76 degraded=1 inactive=5
Oct 25 18:02:41 byo-test felhom-agent[4389]: time=2026-10-25T18:02:41.293+01:00 level=INFO msg="osupdate: docker step skipped — ring 1 takes an engine set only inside a signed operator job (`11` §5.8)" run=20261025T170128Z vmid=9201 trigger=night ring=1 enabled=true
Oct 25 18:02:41 byo-test felhom-agent[4389]: time=2026-10-25T18:02:41.293+01:00 level=INFO msg="osupdate: pve step skipped — ring 1 takes a Proxmox set only inside a signed operator job (`11` §5.10)" run=20261025T170128Z vmid=9201 trigger=night ring=1 enabled=true
Oct 25 18:07:19 byo-test felhom-agent[4389]: time=2026-10-25T18:07:19.468+01:00 level=INFO msg="desired: hub reports pending signed ops (fetch/execute is slice 10B)"
Oct 25 18:07:19 byo-test felhom-agent[4389]: time=2026-10-25T18:07:19.475+01:00 level=WARN msg="signedjobs: AUTHORIZED signed op — executing" job=1c622afc4aec7208 op=agent_update key_id=felhom-op-1 nonce=8abd1cd5faf79f4ce21dfc5b55d49d84
Oct 25 18:07:20 byo-test felhom-os-apply[27473]: os-apply: AGENT-UPDATE signed by the operator: version=0.165.0 sha=e9d04a47ee85222c — handing the root copy to the A/B wrapper
Oct 25 18:07:20 byo-test felhom-agent[4389]: time=2026-10-25T18:07:20.446+01:00 level=WARN msg="signedjobs: signed op COMPLETED" job=1c622afc4aec7208 op=agent_update
Oct 25 18:07:20 byo-test felhom-agent[4389]: time=2026-10-25T18:07:20.497+01:00 level=WARN msg="signedjobs: AUTHORIZED signed op — executing" job=d885aae390b02162 op=agent_config_update key_id=felhom-op-1 nonce=2cfa2580f3917ea3ed018d0c2233f81f
Oct 25 18:07:20 byo-test felhom-os-apply[27523]: os-apply: BUNDLE START agent=0.165.0 sha=8dea1f34d77ba40a authority=signed files=32 write=1 same=26 kept=1 skipped=4
Oct 25 18:07:20 byo-test felhom-os-apply[27527]: os-apply: BUNDLE WROTE /usr/local/sbin/felhom-os-apply (replaced)
Oct 25 18:07:21 byo-test felhom-os-apply[27603]: os-apply: BUNDLE DONE agent=0.165.0 written=1 same=26 self-check=ok signers-created=False
Oct 25 18:07:21 byo-test felhom-agent[4389]: time=2026-10-25T18:07:21.547+01:00 level=INFO msg="osupdate: wrapper" line="os-apply: BUNDLE START agent=0.165.0 sha=8dea1f34d77ba40a authority=signed files=32 write=1 same=26 kept=1 skipped=4"
Oct 25 18:07:21 byo-test felhom-agent[4389]: time=2026-10-25T18:07:21.547+01:00 level=INFO msg="osupdate: wrapper" line="os-apply: BUNDLE WROTE /usr/local/sbin/felhom-os-apply (replaced)"
Oct 25 18:07:21 byo-test felhom-agent[4389]: time=2026-10-25T18:07:21.547+01:00 level=INFO msg="osupdate: wrapper" line="os-apply: BUNDLE DONE agent=0.165.0 written=1 same=26 self-check=ok signers-created=False"
Oct 25 18:07:22 byo-test felhom-agent[4389]: time=2026-10-25T18:07:22.499+01:00 level=WARN msg="osupdate: capability probe after the config bundle" ok=71 total=76 degraded=pve:store-grant:felhom-pbs
Oct 25 18:07:22 byo-test felhom-agent[4389]: time=2026-10-25T18:07:22.500+01:00 level=WARN msg="signedjobs: signed op COMPLETED" job=d885aae390b02162 op=agent_config_update
Oct 25 18:07:23 byo-test felhom-os-apply[27793]: os-apply: REFUSED: R12 this box was installed as 'byo', not appliance — its host belongs to its owner
Oct 25 18:07:23 byo-test felhom-agent[27763]: time=2026-10-25T18:07:23.572+01:00 level=INFO msg="osupdate: wrapper" line="os-apply: REFUSED: R12 this box was installed as 'byo', not appliance — its host belongs to its owner"
Oct 25 18:07:24 byo-test felhom-agent[27763]: time=2026-10-25T18:07:24.350+01:00 level=INFO msg="capabilities self-check" ok=76 total=76 degraded=0 inactive=0
Oct 25 18:08:25 byo-test felhom-agent[27763]: time=2026-10-25T18:08:25.030+01:00 level=WARN msg="selfupdate: update committed" version=0.165.0 wrapper=""
Oct 25 18:22:34 byo-test felhom-agent[27763]: time=2026-10-25T18:22:34.999+01:00 level=WARN msg="signedjobs: AUTHORIZED signed op — executing" job=cc915dd2020e42b0 op=agent_config_update key_id=felhom-op-1 nonce=8083346e293da88779c3c975d4e8abae
Oct 25 18:22:35 byo-test felhom-os-apply[39714]: os-apply: BUNDLE /etc/ssh/sshd_config.d/10-felhom-root-key-only.conf: a BYO host keeps its own settings (D43) — removing the copy we wrote
Oct 25 18:22:35 byo-test felhom-os-apply[39715]: os-apply: BUNDLE START agent=0.165.0 sha=8dea1f34d77ba40a authority=signed files=32 write=0 same=26 kept=1 skipped=4
Oct 25 18:22:35 byo-test felhom-os-apply[39716]: os-apply: BUNDLE REMOVED /etc/ssh/sshd_config.d/10-felhom-root-key-only.conf (ours, on a BYO host — D43)
Oct 25 18:22:36 byo-test felhom-os-apply[39816]: os-apply: BUNDLE DONE agent=0.165.0 written=0 same=26 self-check=ok signers-created=False
Oct 25 18:22:36 byo-test felhom-agent[27763]: time=2026-10-25T18:22:36.194+01:00 level=INFO msg="osupdate: wrapper" line="os-apply: BUNDLE /etc/ssh/sshd_config.d/10-felhom-root-key-only.conf: a BYO host keeps its own settings (D43) — removing the copy we wrote"
Oct 25 18:22:36 byo-test felhom-agent[27763]: time=2026-10-25T18:22:36.194+01:00 level=INFO msg="osupdate: wrapper" line="os-apply: BUNDLE START agent=0.165.0 sha=8dea1f34d77ba40a authority=signed files=32 write=0 same=26 kept=1 skipped=4"
Oct 25 18:22:36 byo-test felhom-agent[27763]: time=2026-10-25T18:22:36.194+01:00 level=INFO msg="osupdate: wrapper" line="os-apply: BUNDLE REMOVED /etc/ssh/sshd_config.d/10-felhom-root-key-only.conf (ours, on a BYO host — D43)"
Oct 25 18:22:36 byo-test felhom-agent[27763]: time=2026-10-25T18:22:36.194+01:00 level=INFO msg="osupdate: wrapper" line="os-apply: BUNDLE DONE agent=0.165.0 written=0 same=26 self-check=ok signers-created=False"
Oct 25 18:22:37 byo-test felhom-agent[27763]: time=2026-10-25T18:22:37.238+01:00 level=WARN msg="osupdate: capability probe after the config bundle" ok=76 total=76 degraded=""
Oct 25 18:22:37 byo-test felhom-agent[27763]: time=2026-10-25T18:22:37.238+01:00 level=WARN msg="signedjobs: signed op COMPLETED" job=cc915dd2020e42b0 op=agent_config_update