>>> [vm100-source] precheck
MODE=--check
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm100.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm100
>>> [vm100-source] run VM100 git publisher through approved nested SSH
>>> [vm100-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=1ab9b29bc9b55c359164350e0112e5deec893d279e8212cce516477b76f67635
MACHINE_ID=vm100
GIT_DIR=/root/.vm100-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm100.git
LOCAL_HEAD=8746d2803c61070f4c8e04f89b993a8d9725206c
>>> [vm100-git] verify remote branch
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
REMOTE_HEAD=8746d2803c61070f4c8e04f89b993a8d9725206c
>>> [vm100-git] build current project allowlist
>>> [vm100-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=27
TRACKED_COUNT=27
MANAGED_UNION_COUNT=27
>>> [vm100-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm100-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm100-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm100-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=0dc733135177b75065497437e270777019c5337d
SIMULATED_TREE_FILE_COUNT=27
>>> [vm100-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm100-git] keyword review scan
KEYWORD_REVIEW_FILES=NONE

RESULT=PASS_vm100_GIT_PUBLISH_CHECK
MACHINE_ID=vm100
GIT_COMMIT=8746d2803c61070f4c8e04f89b993a8d9725206c
GIT_TREE=0dc733135177b75065497437e270777019c5337d
GIT_FILE_COUNT=27
COMMIT_CREATED=false
PUSH_PERFORMED=false

VM100_RESULT=PASS_vm100_GIT_PUBLISH_CHECK
VM100_COMMIT=8746d2803c61070f4c8e04f89b993a8d9725206c
VM100_REMOTE_COMMIT=8746d2803c61070f4c8e04f89b993a8d9725206c
>>> [vm100-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm100.git
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 8746d28 vm100: publish managed source 2026-07-26T19:12:57Z

VM130_COMMIT=8746d2803c61070f4c8e04f89b993a8d9725206c
VM130_TREE=0dc733135177b75065497437e270777019c5337d
VM130_FILE_COUNT=27
VM130_STATUS=CLEAN
>>> [vm100-source] verify required managed paths
REQUIRED_PATH_OK=etc/router-machine-git-source.conf
REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh
REQUIRED_PATH_OK=usr/local/sbin/router-vm100-git-publish.sh

RESULT=PASS_VM130_VM100_GIT_SOURCE_CHECK
VM100_COMMIT=8746d2803c61070f4c8e04f89b993a8d9725206c
VM130_COMMIT=8746d2803c61070f4c8e04f89b993a8d9725206c
VM130_TREE=0dc733135177b75065497437e270777019c5337d
VM130_FILE_COUNT=27
VM100_PUSH_PERFORMED=false
ARCHIVE_CREATED=false
PERMANENT_HTTPS_PUBLISHED=false
>>> [vm101-source] precheck
MODE=--check
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm101.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm101
>>> [vm101-source] run VM101 git publisher through approved nested SSH
>>> [vm101-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=38d1c76fefbf2a9203a10019d91b25c0c7ec5b67a9f97af623fd89058751d6fc
MACHINE_ID=vm101
GIT_DIR=/root/.vm101-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm101.git
LOCAL_HEAD=567413db2a9ba33e1d25cd4812af2c92e0f5378f
>>> [vm101-git] verify remote branch
REMOTE_HEAD=567413db2a9ba33e1d25cd4812af2c92e0f5378f
>>> [vm101-git] build current project allowlist
>>> [vm101-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=48
TRACKED_COUNT=48
MANAGED_UNION_COUNT=48
>>> [vm101-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm101-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm101-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm101-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=d352213e2943081e83d5b73bde529ce3d99d155c
SIMULATED_TREE_FILE_COUNT=48
>>> [vm101-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm101-git] keyword review scan
=== FILES REQUIRING KEYWORD REVIEW ===
d352213e2943081e83d5b73bde529ce3d99d155c:hmn/hmn-load-vpn-test.sh
d352213e2943081e83d5b73bde529ce3d99d155c:hmn/hmn-set-code.sh

RESULT=PASS_vm101_GIT_PUBLISH_CHECK
MACHINE_ID=vm101
GIT_COMMIT=567413db2a9ba33e1d25cd4812af2c92e0f5378f
GIT_TREE=d352213e2943081e83d5b73bde529ce3d99d155c
GIT_FILE_COUNT=48
COMMIT_CREATED=false
PUSH_PERFORMED=false

VM101_PUBLISHER_RC=0

VM101_RESULT=PASS_vm101_GIT_PUBLISH_CHECK
VM101_COMMIT=567413db2a9ba33e1d25cd4812af2c92e0f5378f
VM101_REMOTE_COMMIT=567413db2a9ba33e1d25cd4812af2c92e0f5378f
>>> [vm101-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm101.git
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 567413d vm101: publish managed source 2026-07-27T05:46:02Z

VM130_COMMIT=567413db2a9ba33e1d25cd4812af2c92e0f5378f
VM130_TREE=d352213e2943081e83d5b73bde529ce3d99d155c
VM130_FILE_COUNT=48
VM130_STATUS=CLEAN
>>> [vm101-source] verify required managed paths
REQUIRED_PATH_OK=etc/crontabs/root
REQUIRED_PATH_OK=usr/local/sbin/router-vm101-git-publish.sh

RESULT=PASS_VM130_VM101_GIT_SOURCE_CHECK
VM101_COMMIT=567413db2a9ba33e1d25cd4812af2c92e0f5378f
VM130_COMMIT=567413db2a9ba33e1d25cd4812af2c92e0f5378f
VM130_TREE=d352213e2943081e83d5b73bde529ce3d99d155c
VM130_FILE_COUNT=48
VM101_PUSH_PERFORMED=false
ARCHIVE_CREATED=false
PERMANENT_HTTPS_PUBLISHED=false
VM100_STATUS=status: running
VM101_STATUS=status: running
RESULT=PASS_R20QH_PVE_PREFLIGHT
VM100_BASELINE_COMMIT=8746d2803c61070f4c8e04f89b993a8d9725206c
VM100_BASELINE_TREE=0dc733135177b75065497437e270777019c5337d
VM100_BASELINE_FILE_COUNT=27
VM100_SELECTOR_SHA256_BEFORE=2db1a0c46c1b93d9ede5f560d2d00db2dad3283adbc8f6ca6b0434ab695d8460
VM100_AUTHORIZED_KEYS_SHA256_BEFORE=498fdfcfcaa43abba4549547d88619aae0b481ffe8c3bab1292765c9916c7274
VM100_ACCEPTED_GENERATION_BEFORE=000000000001
VM100_SELECTOR_COUNTS_BEFORE=1,1,1,1,1
RESULT=PASS_R20QH_VM100_PREFLIGHT
VM101_BASELINE_COMMIT=567413db2a9ba33e1d25cd4812af2c92e0f5378f
VM101_BASELINE_TREE=d352213e2943081e83d5b73bde529ce3d99d155c
VM101_BASELINE_FILE_COUNT=48
GIT_TRACKED_STATUS_CLEAN=true
FILE_SHA256=/usr/local/sbin/router-egress-health-repair-watch.sh:71e03cadbf0df366c9f22430832259f5f906cbbf0b704f90854e41df2a7728f1
FILE_SHA256=/usr/local/lib/router-egress-recovery-dispatcher-core.sh:839f14d9d2ba741735b1125e2f897e04b09b74a6e70749ec328f052500f176ad
FILE_SHA256=/usr/local/sbin/router-egress-recovery-dispatcher.sh:03cd4346cdea25117509005b1bcf5297945eb49e0607a9156a47024966fcc8c8
FILE_SHA256=/usr/local/sbin/router-wgpay-watcher-topology-sync.sh:89e4e7a66ccae33d476d52a4a3772f1339a8068e5b9c873251f1f3123a28816e
FILE_SHA256=/usr/local/sbin/router-wgpay-topology-outbox.sh:94bd8d75841fbd991e1c461fffa49b37a7708e7e01a11cbc10908c247e7b9c65
FILE_SHA256=/usr/local/sbin/router-wgpay-topology-transport.sh:ed7063bd479bb25c140c2e1f3713339bd7e88a7b78e247a7732485203761e84f
FALLBACK_MODE=NORMAL
FALLBACK_ACCEPTED_GENERATION=000000000000
FALLBACK_EXHAUSTED_SLOTS=
OUTBOX_LAST_ACKED_GENERATION=000000000001
OUTBOX_NEXT_GENERATION=000000000002
PENDING_PRESENT=false
DELIVERY_ENABLED_LINK=/etc/rc.d/S96router-wgpay-topology-delivery
WATCHER_ENABLED_LINK=/etc/rc.d/S98router-egress-health-repair
DELIVERY_PROCESS_PRESENT=true
WATCHER_PROCESS_PRESENT=true
RUNTIME_INVARIANTS_STABLE=true
SLOT_RUNTIME_OK=vpn1:peer_and_endpoint_present:table201
SLOT_RUNTIME_OK=vpn2:peer_and_endpoint_present:table202
SLOT_RUNTIME_OK=vpn3:peer_and_endpoint_present:table203
SLOT_RUNTIME_OK=vpn4:peer_and_endpoint_present:table204
SLOT_RUNTIME_OK=vpn5:peer_and_endpoint_present:table205
CONTROLLED_TEST_NFT_TABLE_ABSENT=true
TARGET_EGRESS_PREFLIGHT_RESILIENT_PING=true
TARGET_EGRESS_PREFLIGHT_PING_TARGET=1.1.1.1
TARGET_EGRESS_PREFLIGHT_HANDSHAKE_BEFORE=1785240480
TARGET_EGRESS_PREFLIGHT_HANDSHAKE_AFTER=1785240480
TARGET_SLOT=egress2
TARGET_INTERFACE=vpn2
TARGET_SELECTOR=cs5
TARGET_PEER_SECTION=@amneziawg_vpn2[0]
TARGET_ENDPOINT_HOST=192.121.163.235
TARGET_ENDPOINT_PORT=42530
TARGET_PEER_PUBLIC_KEY=4c5teOPebMxBd3Cn80pG3uRPvJWtfxv2jv9DTMOZaH0=
TARGET_LIVE_ENDPOINT=192.121.163.235:42530
CONTROLLED_FAILURE_METHOD=NFT_OUTPUT_DROP_EXACT_ENDPOINT
VPN2_CONFIG_MUTATION_PLANNED=false
FALLBACK_GENERATION_BEFORE=000000000000
OUTBOX_ACKED_GENERATION_BEFORE=000000000001
OUTBOX_NEXT_GENERATION_BEFORE=000000000002
RESULT=PASS_R20QH_VM101_PREFLIGHT
RESULT=PASS_R20QH_PREFLIGHT