===== backup.txt ===== VM100_BACKUP_DIR=/root/router-step-backups/r20qv-r02-20260801-190510 ===== vm100-apply.rc.txt ===== REMOTE_RC=0 MACHINE=vm100 INPUT=/opt/router-ops/state/detached-step-runs/STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4/runs/20260801-190505-700211-18571/work/vm100-apply-input.sh ===== vm100-apply.stderr.txt ===== ===== vm100-apply.stdout.txt ===== RESULT=PASS_R20QV_VM100_APPLY CORE_CHANGE_COMPLETE=true ROLLBACK_STATUS=not_run_apply_verified VM100_BACKUP_DIR=/root/router-step-backups/r20qv-r02-20260801-190510 VM100_TARGET_FILE=/etc/nftables.d/91-wg-remote-default-selector.nft VM100_TARGET_FILE_SHA256=d4bc25c4b9aa995799f6734a8c12bd260cf54e7450161f17edf5c156c60bd5da VM100_TARGET_CHAIN=wg_remote_default_selector WG_REMOTE_DEFAULT_SELECTOR=cs4 ===== vm100-machine-close.rc.txt ===== LOCAL_RC=0 ===== vm100-machine-close.stderr.txt ===== ===== vm100-machine-close.stdout.txt ===== >>> [router-machine-close] machine=vm100 mode=--publish >>> [vm100-source] precheck MODE=--publish REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm100.git REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm100 >>> [vm100-source] run VM100 git publisher through approved nested SSH >>> [vm100-git] precheck MODE=--publish PROFILE=/etc/router-machine-git-source.conf PROFILE_VERSION=2 PROFILE_SHA256=ee2c3b5366d8eb4c4ebf9766c07f6926ecc927e9c38a3766d870fc7397ab2743 MACHINE_ID=vm100 GIT_DIR=/root/.vm100-source.git WORK_TREE=/ BRANCH=main REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm100.git LOCAL_HEAD=2973959bbb942b23cf7fe3d68474111aa063d4f2 >>> [vm100-git] verify remote branch ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes' REMOTE_HEAD=2973959bbb942b23cf7fe3d68474111aa063d4f2 >>> [vm100-git] build current project allowlist >>> [vm100-git] read paths already tracked by git CURRENT_ALLOWED_COUNT=30 TRACKED_COUNT=29 MANAGED_UNION_COUNT=30 >>> [vm100-git] strict path validation STRICT_PATH_VALIDATION=true >>> [vm100-git] show tracked files now missing from machine TRACKED_PATH_MISSING_COUNT=0 >>> [vm100-git] build simulated git index STAGED_CHANGE_COUNT=1 === STAGED PATHS === etc/nftables.d/91-wg-remote-default-selector.nft >>> [vm100-git] validate simulated staged paths STAGED_PATH_VALIDATION=true SIMULATED_TREE_SHA=9bf4d21d4088629d5469c8f5659391c96e150fc5 SIMULATED_TREE_FILE_COUNT=30 >>> [vm100-git] high-confidence secret scan of simulated tree HIGH_CONFIDENCE_SECRET_MATCHES=0 >>> [vm100-git] keyword review scan KEYWORD_REVIEW_FILES=NONE >>> [vm100-git] verify real git index has no pre-staged changes >>> [vm100-git] install validated simulated index >>> [vm100-git] create commit [main a8b7337] vm100: publish managed source 2026-08-01T19:05:18Z 1 file changed, 5 insertions(+) create mode 100644 etc/nftables.d/91-wg-remote-default-selector.nft NEW_COMMIT=a8b7337674b931c2e73f9b4bd7ebe76866e6a81f NEW_TREE=9bf4d21d4088629d5469c8f5659391c96e150fc5 >>> [vm100-git] push branch to remote ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes' To github.com:DChuvelev/wg-paid-vm100.git 2973959..a8b7337 main -> main >>> [vm100-git] verify remote commit ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes' LOCAL_COMMIT=a8b7337674b931c2e73f9b4bd7ebe76866e6a81f REMOTE_COMMIT=a8b7337674b931c2e73f9b4bd7ebe76866e6a81f RESULT=PASS_vm100_GIT_PUBLISH MACHINE_ID=vm100 GIT_COMMIT=a8b7337674b931c2e73f9b4bd7ebe76866e6a81f GIT_TREE=9bf4d21d4088629d5469c8f5659391c96e150fc5 GIT_FILE_COUNT=30 COMMIT_CREATED=true PUSH_PERFORMED=true REPOSITORY=https://github.com/DChuvelev/wg-paid-vm100 VM100_RESULT=PASS_vm100_GIT_PUBLISH VM100_COMMIT=a8b7337674b931c2e73f9b4bd7ebe76866e6a81f VM100_REMOTE_COMMIT=a8b7337674b931c2e73f9b4bd7ebe76866e6a81f >>> [vm100-source] clone or refresh repository on VM130 CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm100.git From https://github.com/DChuvelev/wg-paid-vm100 * branch main -> FETCH_HEAD 2973959..a8b7337 main -> origin/main Reset branch 'main' branch 'main' set up to track 'origin/main'. Your branch is up to date with 'origin/main'. HEAD is now at a8b7337 vm100: publish managed source 2026-08-01T19:05:18Z VM130_COMMIT=a8b7337674b931c2e73f9b4bd7ebe76866e6a81f VM130_TREE=9bf4d21d4088629d5469c8f5659391c96e150fc5 VM130_FILE_COUNT=30 VM130_STATUS=CLEAN >>> [vm100-source] verify required managed paths REQUIRED_PATH_OK=etc/router-machine-git-source.conf REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh REQUIRED_PATH_OK=usr/local/sbin/router-vm100-git-publish.sh >>> [vm100-source] create archive and metadata from exact Git commit ARCHIVE=/tmp/vm100-git-source-publish.YdzkCd/wg-paid-vm100-a8b7337674b9.tar.gz ARCHIVE_SHA256=33ffde7930fd1cebba72dc57ebd93e2b7ebb7f738821ba6ee9912b928ca122d8 ARCHIVE_BASE64=/tmp/vm100-git-source-publish.YdzkCd/wg-paid-vm100-a8b7337674b9.tar.gz.b64.txt MANIFEST=/tmp/vm100-git-source-publish.YdzkCd/git-tree-manifest.txt PATHS=/tmp/vm100-git-source-publish.YdzkCd/managed-paths.txt FACTS=/tmp/vm100-git-source-publish.YdzkCd/facts.json >>> [vm100-source] publish atomically into latest/ and archive prior version into old/ PUBLISHED_DIR=/opt/router-ops/public/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260801-190522_vm100_git_source_a8b7337674b9 PUBLISHED_RELATIVE_PATH=latest/20260801-190522_vm100_git_source_a8b7337674b9 PUBLIC_OBJECT_KIND=vm100 PREVIOUS_MOVED_COUNT=1 COLLISION_DEDUPLICATED_COUNT=0 PUBLICATION_REUSED=false PUBLICATION_TRANSACTION_ID=20260801-190522_700393_11992 PUBLICATION_COMMITTED=true LOCAL_POSTCHECK=PASS LATEST_INDEX_CONTAINS_FOLDER=true LOCAL_INDEX=http://192.168.30.84:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260801-190522_vm100_git_source_a8b7337674b9/ LATEST_ROOT_URL=https://reports.secret-studio.ru/latest/ OLD_ROOT_URL=https://reports.secret-studio.ru/old/ PUBLIC_INDEX=https://reports.secret-studio.ru/latest/ PUBLIC_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/ VM100_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/ TRYCF_INDEX=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/ TRYCF_REPORT=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260801-190522_vm100_git_source_a8b7337674b9/ RESULT=PASS_ROUTER_PUBLISH_REPORT ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=be83524af0d76a1a212158589fe640e289e02b8f5f513ddb6d9208bb7f57b791 RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/ HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=be83524af0d76a1a212158589fe640e289e02b8f5f513ddb6d9208bb7f57b791 HTTP_OUTPUT=/tmp/vm100-git-source-publish.YdzkCd/http-index.html ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=33ffde7930fd1cebba72dc57ebd93e2b7ebb7f738821ba6ee9912b928ca122d8 RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/wg-paid-vm100-a8b7337674b9.tar.gz HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=33ffde7930fd1cebba72dc57ebd93e2b7ebb7f738821ba6ee9912b928ca122d8 HTTP_OUTPUT=/tmp/vm100-git-source-publish.YdzkCd/http-archive.tar.gz ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=3452a9efdb628025351bf14ed2e2d45922197a3ef0004d508a74cbb4a3635388 RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/facts.json HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=3452a9efdb628025351bf14ed2e2d45922197a3ef0004d508a74cbb4a3635388 HTTP_OUTPUT=/tmp/vm100-git-source-publish.YdzkCd/http-facts.json ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=0c217d586d9ae4a3d7c86de51116a12986915fa02a1b79b340fb86de95b11eea RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/git-tree-manifest.txt HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=0c217d586d9ae4a3d7c86de51116a12986915fa02a1b79b340fb86de95b11eea HTTP_OUTPUT=/tmp/vm100-git-source-publish.YdzkCd/http-manifest.txt >>> [vm100-source] save current source archive state RESULT=PASS_VM130_VM100_GIT_SOURCE_PUBLISH VM100_GIT_SOURCE_COMMIT=a8b7337674b931c2e73f9b4bd7ebe76866e6a81f VM100_GIT_SOURCE_TREE=9bf4d21d4088629d5469c8f5659391c96e150fc5 VM100_GIT_SOURCE_FILE_COUNT=30 VM100_GIT_SOURCE_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/ VM100_GIT_SOURCE_ARCHIVE_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/wg-paid-vm100-a8b7337674b9.tar.gz VM100_GIT_SOURCE_ARCHIVE_B64_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/wg-paid-vm100-a8b7337674b9.tar.gz.b64.txt VM100_GIT_SOURCE_FACTS_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/facts.json VM100_GIT_SOURCE_MANIFEST_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/git-tree-manifest.txt VM100_GIT_SOURCE_ARCHIVE_SHA256=33ffde7930fd1cebba72dc57ebd93e2b7ebb7f738821ba6ee9912b928ca122d8 VM100_PUSH_PERFORMED=true ARCHIVE_CREATED=true PUBLISHER_RESULT=PASS_ROUTER_PUBLISH_REPORT PUBLISHER_RC=0 PUBLISHER_RC_NONZERO_SALVAGED=false PUBLICATION_COMMITTED=true LOCAL_POSTCHECK=PASS LATEST_INDEX_CONTAINS_FOLDER=true HTTP_POSTCHECK=PASS SOURCE_STATE_UPDATED=true PERMANENT_HTTPS_PUBLISHED=true RESULT=PASS_ROUTER_MACHINE_CLOSE MACHINE=vm100 DESCRIPTION=STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4: persistent wg_remote default selector cs4 COMMIT=a8b7337674b931c2e73f9b4bd7ebe76866e6a81f TREE=9bf4d21d4088629d5469c8f5659391c96e150fc5 GIT_FILE_COUNT=30 SOURCE_PUBLISH_BACKEND=/opt/router-ops/bin/router-vm100-git-source-publish BACKEND_LOG=/opt/router-ops/state/machine-close-runs/20260801-190516_vm100_700350/backend.txt BACKEND_RC=0 BACKEND_RC_NONZERO_SALVAGED=false CLASSIFICATION=PASS_AUTHORITATIVE_BACKEND_AND_PUBLICATION VM100_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260801-190522_vm100_git_source_a8b7337674b9/ ===== vm100-postcheck.rc.txt ===== REMOTE_RC=0 MACHINE=vm100 INPUT=/opt/router-ops/state/detached-step-runs/STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4/runs/20260801-190505-700211-18571/work/vm100-verify-input.sh ===== vm100-postcheck.stderr.txt ===== [!] Automatically including '/usr/share/nftables.d/ruleset-post/30-pbr.nft' ===== vm100-postcheck.stdout.txt ===== RESULT=PASS_R20QV_VM100_POSTCHECK CORE_CHANGE_COMPLETE=true VM100_TARGET_FILE_SHA256=d4bc25c4b9aa995799f6734a8c12bd260cf54e7450161f17edf5c156c60bd5da WG_REMOTE_DEFAULT_SELECTOR=cs4 ===== vm100-preflight.rc.txt ===== REMOTE_RC=0 MACHINE=vm100 INPUT=/opt/router-ops/state/detached-step-runs/STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4/runs/20260801-190505-700211-18571/extracted/STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4/scripts/preflight-vm100.sh ===== vm100-preflight.stderr.txt ===== [!] Automatically including '/usr/share/nftables.d/ruleset-post/30-pbr.nft' ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes' ===== vm100-preflight.stdout.txt ===== RESULT=PASS_R20QV_VM100_PREFLIGHT VM100_GIT_COMMIT=2973959bbb942b23cf7fe3d68474111aa063d4f2 VM100_GIT_TREE=4b35b85779e10d5b1465b44060aef11a9c99c4aa VM100_GIT_FILE_COUNT=29 VM100_GIT_CLEAN=true VM100_SELECTOR_SHA256=46d41783effb8d80ea1b09895f829b98a0946e0edbff1e29e7651eb3ef9b036a VM100_SELECTOR_CANONICAL=true WG_REMOTE_PRESENT=true TARGET_FILE_ABSENT=true TARGET_CHAIN_ABSENT=true PBR_ADMIN_WG_SOURCE_PRESENT=true ===== vm100-source-precheck.rc.txt ===== REMOTE_RC=0 MACHINE=vm100 INPUT=/opt/router-ops/state/detached-step-runs/STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4/runs/20260801-190505-700211-18571/work/vm100-source-precheck-input.sh ===== vm100-source-precheck.stderr.txt ===== ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes' ===== vm100-source-precheck.stdout.txt ===== RESULT=PASS_R20QV_VM100_SOURCE_PRECHECK VM100_BASE_COMMIT=2973959bbb942b23cf7fe3d68474111aa063d4f2 VM100_SIMULATED_TREE=9bf4d21d4088629d5469c8f5659391c96e150fc5 VM100_SIMULATED_FILE_COUNT=30 STAGED_CHANGE_COUNT=1 STAGED_PATH=etc/nftables.d/91-wg-remote-default-selector.nft SELECTOR_UNCHANGED_AND_CANONICAL=true ===== vm101-postcheck.rc.txt ===== REMOTE_RC=0 MACHINE=vm101 INPUT=/opt/router-ops/state/detached-step-runs/STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4/runs/20260801-190505-700211-18571/extracted/STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4/scripts/preflight-vm101.sh ===== vm101-postcheck.stderr.txt ===== ===== vm101-postcheck.stdout.txt ===== RESULT=PASS_R20QV_VM101_READONLY_PREFLIGHT VM101_GIT_COMMIT=ac678d1b3164e0201d221967fa131e354a211881 VM101_GIT_TREE=0d00ec84743795ff4dde671e42ac3e77241591ef VM101_GIT_FILE_COUNT=58 VM101_GIT_CLEAN=true HEALTHY_SLOTS=5 CS4_CANONICAL_TARGET=egress1 CS4_CANONICAL_INTERFACE=vpn1 CS4_CANONICAL_MARK=0x201 CS4_CANONICAL_TABLE=201 ===== vm101-preflight.rc.txt ===== REMOTE_RC=0 MACHINE=vm101 INPUT=/opt/router-ops/state/detached-step-runs/STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4/runs/20260801-190505-700211-18571/extracted/STEP_050M07R20QV_R02_VM100_WG_REMOTE_DEFAULT_CS4/scripts/preflight-vm101.sh ===== vm101-preflight.stderr.txt ===== ===== vm101-preflight.stdout.txt ===== RESULT=PASS_R20QV_VM101_READONLY_PREFLIGHT VM101_GIT_COMMIT=ac678d1b3164e0201d221967fa131e354a211881 VM101_GIT_TREE=0d00ec84743795ff4dde671e42ac3e77241591ef VM101_GIT_FILE_COUNT=58 VM101_GIT_CLEAN=true HEALTHY_SLOTS=5 CS4_CANONICAL_TARGET=egress1 CS4_CANONICAL_INTERFACE=vpn1 CS4_CANONICAL_MARK=0x201 CS4_CANONICAL_TABLE=201