snapshot100_name=S048O100_20260710_1816 snapshot101_name=S048O101_20260710_1816 snapshot100_name_len=22 snapshot101_name_len=22 snapshotting 'drive-sata1' (local-lvm:vm-100-disk-0) Logical volume "snap_vm-100-disk-0_S048O100_20260710_1816" created. snapshot100_rc=0 snapshotting 'drive-sata1' (local-lvm:vm-101-disk-0) Logical volume "snap_vm-101-disk-0_S048O101_20260710_1816" created. snapshot101_rc=0 snapshot100_list_has_name=true snapshot101_list_has_name=true `-> MGTS_INTERNAL_LAN_RENUMBERED_OK 2026-07-06 12:52:29 pve-wg-paid: VM100 LAN renumbered to 10.71.100.1, wg_remote 10.250.100.1 `-> MGTS_VM100_WG_REMOTE_ROTATED_OK 2026-07-06 13:04:15 pve-wg-paid: VM100 wg_remote keys rotated for 10.250.100.0/24; client configs stored on VM100 `-> MGTS_VM100_ROUTER_OPS_WG_PEER_OK 2026-07-06 14:08:27 pve-wg-paid: VM100 wg_remote has router-ops-mgts peer 10.250.100.4/32; management path via WG `-> MGTS_VM100_BEFORE_WG_PAID_CREATE 2026-07-06 17:37:41 Before creating wg_paid on MGTS VM100 for WG Paid migration `-> MGTS_VM100_WG_PAID_BASE_OK 2026-07-06 17:47:21 MGTS VM100: wg_paid created; 10.253.1.1/16; UDP 51830; firewall wg_paid; live wg set dummy peer add/remove OK `-> STEP_004B_WG_PAID_CLIENT_PATH_OK 2026-07-06 18:33:19 MGTS VM100: wg_paid live client smoke OK; client can reach 10.253.1.1 and internet via VM101 `-> STEP_004C_ACCESS_MAP_VM121_DIRECT_OK 2026-07-06 18:43:30 MGTS VM100: VM121 direct wg-mgts admin access documented in access-map `-> STEP_005_MGTS_EGRESS_PANEL_OK 2026-07-06 20:52:45 MGTS/WG Paid: VM100 PBR fixed; VM101 egress OK; vpn_user manual mode smoke OK; VM105 control panel identified; deferred UI/cleanup tasks recorded `-> STEP_028A_MGTS_WG_PAID_E2E_OK 2026-07-06 22:01:22 MGTS VM100: wg_paid target E2E smoke OK; peer lifecycle via agent OK; PBR direct/vpn route decision OK; final test peer removed `-> S034K_WGPAY_DSCP_CANARY_PROVEN 2026-07-08 15:23:36 WGPay canary peer 10.253.1.10 DSCP/fwmark path proven to vpn3 after STEP_034J `-> S034O_WGPAY_PERSISTED_CANARY_OK 2026-07-08 15:31:52 WGPay persisted per-peer DSCP canary proven by real traffic after STEP_034N `-> S035D_WGPAY_SELECTOR_CANARY_OK 2026-07-08 15:41:26 WGPay selector-file canary proven by real traffic after STEP_035C `-> S035H_WGPAY_MULTICLASS_MAPPER_OK 2026-07-08 15:48:57 WGPay multiclass mapper proven by real canary traffic after STEP_035G `-> S036H_WGPAY_5SLOT_POLICY_PERSISTED 2026-07-08 16:02:14 WGPay VM101 persistent 5-slot policy routes/rules OK after STEP_036G `-> S036K_WGPAY_5CLASS_MAPPER_OK 2026-07-08 16:30:01 WGPay 5-class mapper proven by canary traffic after STEP_036J `-> S037D_WGPAY_CS2_PROVEN_OK 2026-07-08 17:00:09 WG Paid STEP_037D cs2 proven checkpoint: cs2 peer 10.253.1.11 -> fwmark 0x204 -> vpn4 `-> S038D_WGPAY_CS3_PROVEN_OK 2026-07-08 17:13:59 WG Paid STEP_038D cs3 proven checkpoint: 10.253.1.12 -> cs3 -> fwmark 0x205 -> table205/vpn5 `-> S039E_WGPAY_CS4_PROVEN_OK 2026-07-08 18:18:57 WG Paid checkpoint: cs1/cs2/cs3/cs4 proven; cs4 10.253.1.13 -> cs4 -> 0x201 -> vpn1 `-> STEP_042F_BEFORE_VM100_REBOOT_TEST 2026-07-09 13:53:53 before STEP_042F VM100 reboot recovery test `-> S042K_OK_20260709_1110 2026-07-09 14:10:08 STEP_042K agent automation + VM100 reboot recovery OK `-> S046U_OK_20260710_1216 2026-07-10 15:16:14 WG Paid 046U OK: VM100 local commit loop reboot survival OK `-> S047C_OK_20260710_1230 2026-07-10 15:33:07 WG Paid 047C v7 cooldown/reboot OK `-> S047E_OK_20260710_1305 2026-07-10 16:05:57 WG Paid 047E old VM121 reconcile proof OK `-> S048O100_20260710_1816 2026-07-10 21:16:55 STEP_048O2 clean post-quarantine checkpoint VM100 `-> current You are here! `-> MGTS_VM101_BEFORE_WG_PAID_DNAT_51830 2026-07-06 17:37:42 Before adding UDP 51830 DNAT to MGTS VM100 wg_paid `-> MGTS_VM101_WG_PAID_DNAT_51830_OK 2026-07-06 17:47:22 MGTS VM101: DNAT UDP 51830 to MGTS VM100 10.71.100.1:51830 `-> STEP_004B_WG_PAID_CLIENT_PATH_OK 2026-07-06 18:33:20 MGTS VM101: current direct egress OK for wg_paid smoke; before installing paid HideMyName key `-> STEP_004C_ACCESS_MAP_VM121_DIRECT_OK 2026-07-06 18:43:31 MGTS VM101: VM121 direct wg-mgts admin access documented in access-map `-> STEP_005_MGTS_EGRESS_PANEL_OK 2026-07-06 20:52:47 MGTS/WG Paid: VM100 PBR fixed; VM101 egress OK; vpn_user manual mode smoke OK; VM105 control panel identified; deferred UI/cleanup tasks recorded `-> STEP_028A_MGTS_WG_PAID_E2E_OK 2026-07-06 22:01:24 MGTS VM101: edge/DNAT side preserved after wg_paid MGTS E2E smoke; UDP 51830 DNAT path configured `-> S029A_EGRESS_PRE_20260708-082358 2026-07-08 11:23:58 VM101 before in-place egress rework; keep WAN/DNAT untouched `-> S031A_PRE_APPLY_20260708-102627 2026-07-08 13:26:30 VM101 before first egress apply/deploy; preserve WAN/DNAT/VM100 `-> S031H_3SLOT_OK_20260708-104500 2026-07-08 13:45:04 VM101 isolated 3-slot egress pool OK: vpn3/vpn4/vpn5 up, tables 203-205, no policy switch `-> S032C_FW_POOL_OK_20260708-105809 2026-07-08 13:58:14 VM101 egress pool firewall integration OK: vpn3/vpn4/vpn5 in vpn_out, no policy switch `-> S034K_WGPAY_DSCP_CANARY_PROVEN 2026-07-08 15:23:39 WGPay canary peer 10.253.1.10 DSCP/fwmark path proven to vpn3 after STEP_034J `-> S034O_WGPAY_PERSISTED_CANARY_OK 2026-07-08 15:31:55 WGPay persisted per-peer DSCP canary proven by real traffic after STEP_034N `-> S035D_WGPAY_SELECTOR_CANARY_OK 2026-07-08 15:41:28 WGPay selector-file canary proven by real traffic after STEP_035C `-> S035H_WGPAY_MULTICLASS_MAPPER_OK 2026-07-08 15:48:58 WGPay multiclass mapper proven by real canary traffic after STEP_035G `-> S036H_WGPAY_5SLOT_POLICY_PERSISTED 2026-07-08 16:02:15 WGPay VM101 persistent 5-slot policy routes/rules OK after STEP_036G `-> S036K_WGPAY_5CLASS_MAPPER_OK 2026-07-08 16:30:02 WGPay 5-class mapper proven by canary traffic after STEP_036J `-> S037D_WGPAY_CS2_PROVEN_OK 2026-07-08 17:00:12 WG Paid STEP_037D cs2 proven checkpoint: cs2 peer 10.253.1.11 -> fwmark 0x204 -> vpn4 `-> S038D_WGPAY_CS3_PROVEN_OK 2026-07-08 17:14:03 WG Paid STEP_038D cs3 proven checkpoint: 10.253.1.12 -> cs3 -> fwmark 0x205 -> table205/vpn5 `-> S039E_WGPAY_CS4_PROVEN_OK 2026-07-08 18:19:01 WG Paid checkpoint: cs1/cs2/cs3/cs4 proven; cs4 10.253.1.13 -> cs4 -> 0x201 -> vpn1 `-> S042K_OK_20260709_1110 2026-07-09 14:10:10 STEP_042K agent automation + VM100 reboot recovery OK `-> S046U_OK_20260710_1216 2026-07-10 15:16:17 WG Paid 046U OK: VM100 local commit loop reboot survival OK `-> S047C_OK_20260710_1230 2026-07-10 15:33:09 WG Paid 047C v7 cooldown/reboot OK `-> S047E_OK_20260710_1305 2026-07-10 16:05:58 WG Paid 047E old VM121 reconcile proof OK `-> S048O101_20260710_1816 2026-07-10 21:16:56 STEP_048O2 clean post-quarantine checkpoint VM101 `-> current You are here!