=== STEP_031C LOAD VPN3 UCI ONLY === timestamp=20260708-103447 intent: load vpn3 config into UCI only remote changes expected: /etc/config/network only forbidden: ifup vpn3, firewall changes, routing switch, global network restart === BEFORE SAFE STATE === date=Wed Jul 8 10:34:48 UTC 2026 === loader === -rwx------ 1 root root 4331 Jul 8 10:33 /root/hmn/hmn-load-egress-slot.sh 26168d15e99c72d445c640171252953617877c7b747fd9146c1d39b78b567532 /root/hmn/hmn-load-egress-slot.sh loader_ash_n=OK === config exists === -rw------- 1 root root 359 Jun 1 10:07 /root/hmn/configs/awg1/20260601-100614/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf === ip -br addr === lo UNKNOWN 127.0.0.1/8 ::1/128 eth0 UP 95.165.105.4/20 fe80::be24:11ff:fe42:83cf/64 eth1 UP 10.200.0.2/24 fe80::be24:11ff:fe09:4e2c/64 eth2 UP 10.71.100.2/24 fe80::be24:11ff:fe4d:7a71/64 eth3 UP 10.201.0.2/24 fe80::be24:11ff:fec8:2ee1/64 vpn1 UNKNOWN 10.91.233.132/32 === ip rule === 0: from all lookup local 10019: from all iif eth1 lookup 200 10020: from 10.200.0.0/24 lookup 200 32766: from all lookup main 32767: from all lookup default === tables 200-205 === TABLE 200 default dev vpn1 scope link 10.200.0.0/24 dev eth1 scope link src 10.200.0.2 10.201.0.0/24 dev eth3 scope link src 10.201.0.2 TABLE 201 TABLE 202 TABLE 203 TABLE 204 TABLE 205 === firewall vpn_out before === firewall.@zone[3].name='vpn_in' firewall.@zone[3].network='vpn_in' firewall.@zone[4].name='vpn_out' firewall.@zone[4].network='vpn1' 'vpn2' 'vpn_user' firewall.@rule[7].name='Allow-ICMP-from-vpn_in-to-router' firewall.@rule[7].src='vpn_in' firewall.@forwarding[0]=forwarding firewall.@forwarding[0].src='direct_in' firewall.@forwarding[0].dest='wan' firewall.@forwarding[1]=forwarding firewall.@forwarding[1].src='vpn_in' firewall.@forwarding[1].dest='vpn_out' firewall.@forwarding[2]=forwarding firewall.@forwarding[2].src='vpn_in' firewall.@forwarding[2].dest='wan' === vpn3 before safe fields === === uci pending changes before === === legacy processes before === === ACTION: loader vpn3 load, NO ifup === HMN generic egress slot loader slot=vpn3 config=/root/hmn/configs/awg1/20260601-100614/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf endpoint=95.211.68.119:45176 address=10.104.58.24/32 action=load Backup: /root/hmn/backups/network-before-egress-load-vpn3-20260708-103448 Interface vpn3 not found Loaded slot vpn3. Slot remains down unless action=load-up. LOAD_RC=0 === AFTER SAFE STATE === date=Wed Jul 8 10:34:49 UTC 2026 === ip -br addr === lo UNKNOWN 127.0.0.1/8 ::1/128 eth0 UP 95.165.105.4/20 fe80::be24:11ff:fe42:83cf/64 eth1 UP 10.200.0.2/24 fe80::be24:11ff:fe09:4e2c/64 eth2 UP 10.71.100.2/24 fe80::be24:11ff:fe4d:7a71/64 eth3 UP 10.201.0.2/24 fe80::be24:11ff:fec8:2ee1/64 vpn1 UNKNOWN 10.91.233.132/32 === ip rule === 0: from all lookup local 10019: from all iif eth1 lookup 200 10020: from 10.200.0.0/24 lookup 200 32766: from all lookup main 32767: from all lookup default === tables 200-205 === TABLE 200 default dev vpn1 scope link 10.200.0.0/24 dev eth1 scope link src 10.200.0.2 10.201.0.0/24 dev eth3 scope link src 10.201.0.2 TABLE 201 TABLE 202 TABLE 203 TABLE 204 TABLE 205 === firewall vpn_out after === firewall.@zone[3].name='vpn_in' firewall.@zone[3].network='vpn_in' firewall.@zone[4].name='vpn_out' firewall.@zone[4].network='vpn1' 'vpn2' 'vpn_user' firewall.@rule[7].name='Allow-ICMP-from-vpn_in-to-router' firewall.@rule[7].src='vpn_in' firewall.@forwarding[0]=forwarding firewall.@forwarding[0].src='direct_in' firewall.@forwarding[0].dest='wan' firewall.@forwarding[1]=forwarding firewall.@forwarding[1].src='vpn_in' firewall.@forwarding[1].dest='vpn_out' firewall.@forwarding[2]=forwarding firewall.@forwarding[2].src='vpn_in' firewall.@forwarding[2].dest='wan' === vpn3 after safe fields === proto=amneziawg auto=0 disabled=0 addresses=10.104.58.24/32 hmn_role=egress_pool_slot hmn_endpoint=95.211.68.119:45176 hmn_source_config=/root/hmn/configs/awg1/20260601-100614/075-NL-Netherlands-Amsterdam-H13-95.211.68.119-awg1.conf hmn_loaded_at=2026-07-08T10:34:48+00:00 === vpn3 interface runtime === vpn3_runtime_absent === wg vpn3 runtime === wg_vpn3_absent_or_down === uci pending changes after === === legacy processes after === === network backup files === -rw------- 1 root root 5018 Jul 8 10:34 /root/hmn/backups/network-before-egress-load-vpn3-20260708-103448 === STEP_031C RESULT === load_rc=0 uci_pending_change_lines_after=0 vpn3_proto=proto=amneziawg vpn3_role=hmn_role=egress_pool_slot vpn3_endpoint=hmn_endpoint=95.211.68.119:45176 vpn3_runtime_line_count=0 table203_nonempty_lines=0 decision=PASS_VPN3_UCI_ONLY === SAFE CAPTURE === REPORT=/opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/REPORT.txt SAFE_ARCHIVE=/opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447.safe.tar.gz RAW_LOCAL_ONLY=/opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw -rw-r--r-- 1 ops ops 25K Jul 8 10:35 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447.safe.tar.gz -rw------- 1 ops ops 171K Jul 8 10:35 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/REPORT.txt === RC SUMMARY === /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/local_access_map.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/local_date.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/local_router_ops_tree.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_bridges.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_qm_list.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_snapshots_100.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_snapshots_101.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_vm100_config.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/pve_vm101_config.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_basic.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_relevant_files.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_uci_firewall.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_uci_network.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm100_wg_show.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_basic.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_hmn_tree.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_rt_nft.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_services_cron.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_uci_firewall.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_uci_network.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm101_wg_show.txt:rc=0 /opt/router-ops/captures/20260708-103449_step031c_load_vpn3_uci_only_20260708-103447/raw/vm121_state.txt:rc=0