pve=pve-mgts snap=S046U_OK_20260710_1216 snap_len=22 __SNAPSHOT_VM_100_BEGIN__ vmid=100 exists_pre=false snapshot_rc=0 snapshot_action=create snapshot_stdout=snapshotting 'drive-sata1' (local-lvm:vm-100-disk-0)| Logical volume "snap_vm-100-disk-0_S046U_OK_20260710_1216" created.| snapshot_stderr= `-> MGTS_RESTORED_BEFORE_FIRST_BOOT 2026-07-06 12:28:36 pve-wg-paid: VM100 restored from golden, before first boot `-> MGTS_INTERNAL_LAN_RENUMBERED_OK 2026-07-06 12:52:29 pve-wg-paid: VM100 LAN renumbered to 10.71.100.1, wg_remote 10.250.100.1 `-> MGTS_VM100_WG_REMOTE_ROTATED_OK 2026-07-06 13:04:15 pve-wg-paid: VM100 wg_remote keys rotated for 10.250.100.0/24; client configs stored on VM100 `-> MGTS_VM100_ROUTER_OPS_WG_PEER_OK 2026-07-06 14:08:27 pve-wg-paid: VM100 wg_remote has router-ops-mgts peer 10.250.100.4/32; management path via WG `-> MGTS_VM100_BEFORE_WG_PAID_CREATE 2026-07-06 17:37:41 Before creating wg_paid on MGTS VM100 for WG Paid migration `-> MGTS_VM100_WG_PAID_BASE_OK 2026-07-06 17:47:21 MGTS VM100: wg_paid created; 10.253.1.1/16; UDP 51830; firewall wg_paid; live wg set dummy peer add/remove OK `-> STEP_004B_WG_PAID_CLIENT_PATH_OK 2026-07-06 18:33:19 MGTS VM100: wg_paid live client smoke OK; client can reach 10.253.1.1 and internet via VM101 `-> STEP_004C_ACCESS_MAP_VM121_DIRECT_OK 2026-07-06 18:43:30 MGTS VM100: VM121 direct wg-mgts admin access documented in access-map `-> STEP_005_MGTS_EGRESS_PANEL_OK 2026-07-06 20:52:45 MGTS/WG Paid: VM100 PBR fixed; VM101 egress OK; vpn_user manual mode smoke OK; VM105 control panel identified; deferred UI/cleanup tasks recorded `-> STEP_028A_MGTS_WG_PAID_E2E_OK 2026-07-06 22:01:22 MGTS VM100: wg_paid target E2E smoke OK; peer lifecycle via agent OK; PBR direct/vpn route decision OK; final test peer removed `-> S034K_WGPAY_DSCP_CANARY_PROVEN 2026-07-08 15:23:36 WGPay canary peer 10.253.1.10 DSCP/fwmark path proven to vpn3 after STEP_034J `-> S034O_WGPAY_PERSISTED_CANARY_OK 2026-07-08 15:31:52 WGPay persisted per-peer DSCP canary proven by real traffic after STEP_034N `-> S035D_WGPAY_SELECTOR_CANARY_OK 2026-07-08 15:41:26 WGPay selector-file canary proven by real traffic after STEP_035C `-> S035H_WGPAY_MULTICLASS_MAPPER_OK 2026-07-08 15:48:57 WGPay multiclass mapper proven by real canary traffic after STEP_035G `-> S036H_WGPAY_5SLOT_POLICY_PERSISTED 2026-07-08 16:02:14 WGPay VM101 persistent 5-slot policy routes/rules OK after STEP_036G `-> S036K_WGPAY_5CLASS_MAPPER_OK 2026-07-08 16:30:01 WGPay 5-class mapper proven by canary traffic after STEP_036J `-> S037D_WGPAY_CS2_PROVEN_OK 2026-07-08 17:00:09 WG Paid STEP_037D cs2 proven checkpoint: cs2 peer 10.253.1.11 -> fwmark 0x204 -> vpn4 `-> S038D_WGPAY_CS3_PROVEN_OK 2026-07-08 17:13:59 WG Paid STEP_038D cs3 proven checkpoint: 10.253.1.12 -> cs3 -> fwmark 0x205 -> table205/vpn5 `-> S039E_WGPAY_CS4_PROVEN_OK 2026-07-08 18:18:57 WG Paid checkpoint: cs1/cs2/cs3/cs4 proven; cs4 10.253.1.13 -> cs4 -> 0x201 -> vpn1 `-> STEP_042F_BEFORE_VM100_REBOOT_TEST 2026-07-09 13:53:53 before STEP_042F VM100 reboot recovery test `-> S042K_OK_20260709_1110 2026-07-09 14:10:08 STEP_042K agent automation + VM100 reboot recovery OK `-> S046U_OK_20260710_1216 2026-07-10 15:16:14 WG Paid 046U OK: VM100 local commit loop reboot survival OK `-> current You are here! __SNAPSHOT_VM_100_END__ __SNAPSHOT_VM_101_BEGIN__ vmid=101 exists_pre=false snapshot_rc=0 snapshot_action=create snapshot_stdout=snapshotting 'drive-sata1' (local-lvm:vm-101-disk-0)| Logical volume "snap_vm-101-disk-0_S046U_OK_20260710_1216" created.| snapshot_stderr= `-> MGTS_VM101_CURRENT_20260702_OK 2026-07-06 13:01:44 pve-wg-paid: VM101 current backend 20260702 applied: vpn_user base, override backend, revive script; WAN still link_down `-> MGTS_BEFORE_WG_REMOTE_DNAT 2026-07-06 13:15:47 pve-wg-paid: before VM101 DNAT UDP 51820 to VM100 wg_remote `-> MGTS_VM101_WAN_DHCP_WG_REMOTE_DNAT_OK 2026-07-06 13:31:39 pve-wg-paid: VM101 WAN DHCP enabled, UDP 51820 DNAT to VM100 wg_remote; WG remote tested `-> MGTS_VM101_BEFORE_WG_PAID_DNAT_51830 2026-07-06 17:37:42 Before adding UDP 51830 DNAT to MGTS VM100 wg_paid `-> MGTS_VM101_WG_PAID_DNAT_51830_OK 2026-07-06 17:47:22 MGTS VM101: DNAT UDP 51830 to MGTS VM100 10.71.100.1:51830 `-> STEP_004B_WG_PAID_CLIENT_PATH_OK 2026-07-06 18:33:20 MGTS VM101: current direct egress OK for wg_paid smoke; before installing paid HideMyName key `-> STEP_004C_ACCESS_MAP_VM121_DIRECT_OK 2026-07-06 18:43:31 MGTS VM101: VM121 direct wg-mgts admin access documented in access-map `-> STEP_005_MGTS_EGRESS_PANEL_OK 2026-07-06 20:52:47 MGTS/WG Paid: VM100 PBR fixed; VM101 egress OK; vpn_user manual mode smoke OK; VM105 control panel identified; deferred UI/cleanup tasks recorded `-> STEP_028A_MGTS_WG_PAID_E2E_OK 2026-07-06 22:01:24 MGTS VM101: edge/DNAT side preserved after wg_paid MGTS E2E smoke; UDP 51830 DNAT path configured `-> S029A_EGRESS_PRE_20260708-082358 2026-07-08 11:23:58 VM101 before in-place egress rework; keep WAN/DNAT untouched `-> S031A_PRE_APPLY_20260708-102627 2026-07-08 13:26:30 VM101 before first egress apply/deploy; preserve WAN/DNAT/VM100 `-> S031H_3SLOT_OK_20260708-104500 2026-07-08 13:45:04 VM101 isolated 3-slot egress pool OK: vpn3/vpn4/vpn5 up, tables 203-205, no policy switch `-> S032C_FW_POOL_OK_20260708-105809 2026-07-08 13:58:14 VM101 egress pool firewall integration OK: vpn3/vpn4/vpn5 in vpn_out, no policy switch `-> S034K_WGPAY_DSCP_CANARY_PROVEN 2026-07-08 15:23:39 WGPay canary peer 10.253.1.10 DSCP/fwmark path proven to vpn3 after STEP_034J `-> S034O_WGPAY_PERSISTED_CANARY_OK 2026-07-08 15:31:55 WGPay persisted per-peer DSCP canary proven by real traffic after STEP_034N `-> S035D_WGPAY_SELECTOR_CANARY_OK 2026-07-08 15:41:28 WGPay selector-file canary proven by real traffic after STEP_035C `-> S035H_WGPAY_MULTICLASS_MAPPER_OK 2026-07-08 15:48:58 WGPay multiclass mapper proven by real canary traffic after STEP_035G `-> S036H_WGPAY_5SLOT_POLICY_PERSISTED 2026-07-08 16:02:15 WGPay VM101 persistent 5-slot policy routes/rules OK after STEP_036G `-> S036K_WGPAY_5CLASS_MAPPER_OK 2026-07-08 16:30:02 WGPay 5-class mapper proven by canary traffic after STEP_036J `-> S037D_WGPAY_CS2_PROVEN_OK 2026-07-08 17:00:12 WG Paid STEP_037D cs2 proven checkpoint: cs2 peer 10.253.1.11 -> fwmark 0x204 -> vpn4 `-> S038D_WGPAY_CS3_PROVEN_OK 2026-07-08 17:14:03 WG Paid STEP_038D cs3 proven checkpoint: 10.253.1.12 -> cs3 -> fwmark 0x205 -> table205/vpn5 `-> S039E_WGPAY_CS4_PROVEN_OK 2026-07-08 18:19:01 WG Paid checkpoint: cs1/cs2/cs3/cs4 proven; cs4 10.253.1.13 -> cs4 -> 0x201 -> vpn1 `-> S042K_OK_20260709_1110 2026-07-09 14:10:10 STEP_042K agent automation + VM100 reboot recovery OK `-> S046U_OK_20260710_1216 2026-07-10 15:16:17 WG Paid 046U OK: VM100 local commit loop reboot survival OK `-> current You are here! __SNAPSHOT_VM_101_END__