>>> [vm100-bootstrap] verify installed builder files
ACTUAL_ENGINE_SHA256=de795151f06b8ab7ba7c921e0260332ad27b715b597a4fe81af9998f26e262f2
ACTUAL_PROFILE_SHA256=b84ee561fd1576e2a0df83e867943aba6b15836aa8111c91abebd2603c9ad8dc
ACTUAL_WRAPPER_SHA256=481abae22e6dc554082700f590c40a809fc3dff44cc78dceb7adb3974f331a6a
>>> [vm100-bootstrap] verify unborn local repository
GIT_BRANCH=main
GIT_REMOTE=git@github.com:DChuvelev/wg-paid-vm100.git
LOCAL_BASELINE_PRESENT=false
>>> [vm100-bootstrap] verify deploy-key access and empty GitHub repository
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
ssh: Ignoring unknown configuration option 'SendEnv=GIT_PROTOCOL'
ssh: 
Host 'github.com' key accepted unconditionally.
(ssh-ed25519 fingerprint SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqU)

REMOTE_REF_COUNT=0
REMOTE_REPOSITORY_EMPTY=true
DEPLOY_KEY_ACCESS=true
>>> [vm100-bootstrap] build current managed path set from profile
MANAGED_FILE_COUNT=22
=== MANAGED PATHS ===
etc/config/dhcp
etc/config/firewall
etc/config/pbr
etc/hotplug.d/iface/99-pbr-delayed-restart
etc/init.d/router-egress-activity
etc/init.d/router-wgpay-canary
etc/init.d/router-wgpay-egress-local
etc/nftables.d/90-wg-remote-snat-to-pc.nft
etc/pbr.d/default_lan_to_vpn.sh
etc/pbr.d/ru_to_direct.sh
etc/router-egress-activity/router_egress_activity.nft
etc/router-machine-git-source.conf
etc/router-wgpay-egress-local.conf
etc/router-wgpay-selector.d/peers.conf
root/ru.zone
usr/local/sbin/router-egress-activity-apply.sh
usr/local/sbin/router-egress-activity-read.sh
usr/local/sbin/router-machine-git-publish.sh
usr/local/sbin/router-vm100-git-publish.sh
usr/local/sbin/router-wgpay-canary-apply.sh
usr/local/sbin/router-wgpay-egress-local-loop.sh
usr/local/sbin/router-wgpay-egress-local.sh
>>> [vm100-bootstrap] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm100-bootstrap] verify mandatory baseline components
MANDATORY_PATH_OK=etc/router-machine-git-source.conf
MANDATORY_PATH_OK=usr/local/sbin/router-machine-git-publish.sh
MANDATORY_PATH_OK=usr/local/sbin/router-vm100-git-publish.sh
MANDATORY_PATH_OK=etc/config/pbr
MANDATORY_PATH_OK=etc/config/firewall
MANDATORY_PATH_OK=etc/config/dhcp
MANDATORY_PATH_OK=etc/router-wgpay-selector.d/peers.conf
MANDATORY_PATH_OK=root/ru.zone
>>> [vm100-bootstrap] build simulated initial Git index
STAGED_FILE_COUNT=22
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=d66997d799fa5d4c0003939fefb7cfe3eb0ea6d5
SIMULATED_TREE_FILE_COUNT=22
>>> [vm100-bootstrap] high-confidence secret scan of future tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm100-bootstrap] keyword-only review
KEYWORD_REVIEW_FILES=NONE
>>> [vm100-bootstrap] install validated initial index
REAL_STAGED_FILE_COUNT=22
>>> [vm100-bootstrap] create baseline commit
[main (root-commit) 951958c] vm100: baseline managed router and PBR source
 22 files changed, 15737 insertions(+)
 create mode 100644 etc/config/dhcp
 create mode 100644 etc/config/firewall
 create mode 100644 etc/config/pbr
 create mode 100755 etc/hotplug.d/iface/99-pbr-delayed-restart
 create mode 100755 etc/init.d/router-egress-activity
 create mode 100755 etc/init.d/router-wgpay-canary
 create mode 100755 etc/init.d/router-wgpay-egress-local
 create mode 100644 etc/nftables.d/90-wg-remote-snat-to-pc.nft
 create mode 100755 etc/pbr.d/default_lan_to_vpn.sh
 create mode 100755 etc/pbr.d/ru_to_direct.sh
 create mode 100644 etc/router-egress-activity/router_egress_activity.nft
 create mode 100644 etc/router-machine-git-source.conf
 create mode 100644 etc/router-wgpay-egress-local.conf
 create mode 100644 etc/router-wgpay-selector.d/peers.conf
 create mode 100644 root/ru.zone
 create mode 100755 usr/local/sbin/router-egress-activity-apply.sh
 create mode 100755 usr/local/sbin/router-egress-activity-read.sh
 create mode 100755 usr/local/sbin/router-machine-git-publish.sh
 create mode 100755 usr/local/sbin/router-vm100-git-publish.sh
 create mode 100755 usr/local/sbin/router-wgpay-canary-apply.sh
 create mode 100755 usr/local/sbin/router-wgpay-egress-local-loop.sh
 create mode 100755 usr/local/sbin/router-wgpay-egress-local.sh
BASELINE_COMMIT=951958cb66386b6995863a22801d3bd3a80a2e9a
BASELINE_TREE=d66997d799fa5d4c0003939fefb7cfe3eb0ea6d5
BASELINE_FILE_COUNT=22
>>> [vm100-bootstrap] push baseline to GitHub
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
branch 'main' set up to track 'origin/main'.
To github.com:DChuvelev/wg-paid-vm100.git
 * [new branch]      main -> main
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
ssh: Ignoring unknown configuration option 'SendEnv=GIT_PROTOCOL'
LOCAL_COMMIT=951958cb66386b6995863a22801d3bd3a80a2e9a
REMOTE_COMMIT=951958cb66386b6995863a22801d3bd3a80a2e9a
>>> [vm100-bootstrap] run common publisher clean check
>>> [vm100-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=1
PROFILE_SHA256=b84ee561fd1576e2a0df83e867943aba6b15836aa8111c91abebd2603c9ad8dc
MACHINE_ID=vm100
GIT_DIR=/root/.vm100-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm100.git
LOCAL_HEAD=951958cb66386b6995863a22801d3bd3a80a2e9a
>>> [vm100-git] verify remote branch
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
REMOTE_HEAD=951958cb66386b6995863a22801d3bd3a80a2e9a
>>> [vm100-git] build current project allowlist
etc/config/dhcp
etc/config/firewall
etc/config/pbr
etc/hotplug.d/iface/99-pbr-delayed-restart
etc/init.d/router-egress-activity
etc/init.d/router-wgpay-canary
etc/init.d/router-wgpay-egress-local
etc/nftables.d/90-wg-remote-snat-to-pc.nft
etc/pbr.d/default_lan_to_vpn.sh
etc/pbr.d/ru_to_direct.sh
etc/router-egress-activity/router_egress_activity.nft
etc/router-machine-git-source.conf
etc/router-wgpay-egress-local.conf
etc/router-wgpay-selector.d/peers.conf
root/ru.zone
usr/local/sbin/router-egress-activity-apply.sh
usr/local/sbin/router-egress-activity-read.sh
usr/local/sbin/router-machine-git-publish.sh
usr/local/sbin/router-vm100-git-publish.sh
usr/local/sbin/router-wgpay-canary-apply.sh
usr/local/sbin/router-wgpay-egress-local-loop.sh
usr/local/sbin/router-wgpay-egress-local.sh
>>> [vm100-git] read paths already tracked by git
etc/config/dhcp
etc/config/firewall
etc/config/pbr
etc/hotplug.d/iface/99-pbr-delayed-restart
etc/init.d/router-egress-activity
etc/init.d/router-wgpay-canary
etc/init.d/router-wgpay-egress-local
etc/nftables.d/90-wg-remote-snat-to-pc.nft
etc/pbr.d/default_lan_to_vpn.sh
etc/pbr.d/ru_to_direct.sh
etc/router-egress-activity/router_egress_activity.nft
etc/router-machine-git-source.conf
etc/router-wgpay-egress-local.conf
etc/router-wgpay-selector.d/peers.conf
root/ru.zone
usr/local/sbin/router-egress-activity-apply.sh
usr/local/sbin/router-egress-activity-read.sh
usr/local/sbin/router-machine-git-publish.sh
usr/local/sbin/router-vm100-git-publish.sh
usr/local/sbin/router-wgpay-canary-apply.sh
usr/local/sbin/router-wgpay-egress-local-loop.sh
usr/local/sbin/router-wgpay-egress-local.sh
CURRENT_ALLOWED_COUNT=24
TRACKED_COUNT=22
MANAGED_UNION_COUNT=22
>>> [vm100-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm100-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm100-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm100-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=d66997d799fa5d4c0003939fefb7cfe3eb0ea6d5
SIMULATED_TREE_FILE_COUNT=22
>>> [vm100-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm100-git] keyword review scan
KEYWORD_REVIEW_FILES=NONE

RESULT=PASS_vm100_GIT_PUBLISH_CHECK
MACHINE_ID=vm100
GIT_COMMIT=951958cb66386b6995863a22801d3bd3a80a2e9a
GIT_TREE=d66997d799fa5d4c0003939fefb7cfe3eb0ea6d5
GIT_FILE_COUNT=22
COMMIT_CREATED=false
PUSH_PERFORMED=false

RESULT=PASS_VM100_GIT_BASELINE_AND_VERIFY
GIT_COMMIT=951958cb66386b6995863a22801d3bd3a80a2e9a
GIT_TREE=d66997d799fa5d4c0003939fefb7cfe3eb0ea6d5
GIT_FILE_COUNT=22
COMMIT_CREATED=true
PUSH_PERFORMED=true
LOCAL_REMOTE_MATCH=true