=== STEP_036H CHECKPOINT 5SLOT POLICY ===
timestamp=20260708-130214
mode=snapshot VM100/VM101 + VM101/VM100/VM121 read-only checkpoint
snapshot_name=S036H_WGPAY_5SLOT_POLICY_PERSISTED
forbidden: policy switch, peer disable, wg reload, network/firewall reload, backend restart
=== snapshots VM100/VM101 ===
--- create snapshot VM100 S036H_WGPAY_5SLOT_POLICY_PERSISTED ---
snapshotting 'drive-sata1' (local-lvm:vm-100-disk-0)
  Logical volume "snap_vm-100-disk-0_S036H_WGPAY_5SLOT_POLICY_PERSISTED" created.
snapshot_vm100_rc=0
snapshot_vm100_visible_rc=0
--- create snapshot VM101 S036H_WGPAY_5SLOT_POLICY_PERSISTED ---
snapshotting 'drive-sata1' (local-lvm:vm-101-disk-0)
  Logical volume "snap_vm-101-disk-0_S036H_WGPAY_5SLOT_POLICY_PERSISTED" created.
snapshot_vm101_rc=0
snapshot_vm101_visible_rc=0
pve_snapshot_done=1

=== VM101 5-slot policy verify ===
egress_slots_service_enabled_rc=0
egress_slots_apply_exists_rc=0
vpn1_link_rc=0
table201_vpn1_rc=0
rule_0x201_table201_rc=0
mark0x201_route_vpn1_rc=0
vpn2_link_rc=0
table202_vpn2_rc=0
rule_0x202_table202_rc=0
mark0x202_route_vpn2_rc=0
vpn3_link_rc=0
table203_vpn3_rc=0
rule_0x203_table203_rc=0
mark0x203_route_vpn3_rc=0
vpn4_link_rc=0
table204_vpn4_rc=0
rule_0x204_table204_rc=0
mark0x204_route_vpn4_rc=0
vpn5_link_rc=0
table205_vpn5_rc=0
rule_0x205_table205_rc=0
mark0x205_route_vpn5_rc=0
table200_default_vpn1_rc=0

=== VM101 mapper unchanged ===
mapper_service_enabled_rc=0
mapper_prerouting_rule_count=3
mapper_postrouting_clear_rule_count=3
mapper_cs1_visible_rc=0
mapper_cs2_visible_rc=0
mapper_cs3_visible_rc=0

=== concise state ===
10011:	from all fwmark 0x201 lookup 201
10012:	from all fwmark 0x202 lookup 202
10013:	from all fwmark 0x203 lookup 203
10014:	from all fwmark 0x204 lookup 204
10015:	from all fwmark 0x205 lookup 205
10019:	from all iif eth1 lookup 200
10020:	from 10.200.0.0/24 lookup 200
--- table 200 ---
default dev vpn1 scope link 
10.200.0.0/24 dev eth1 scope link src 10.200.0.2 
10.201.0.0/24 dev eth3 scope link src 10.201.0.2 
--- table 201 ---
default dev vpn1 scope link 
--- table 202 ---
default dev vpn2 scope link 
--- table 203 ---
default dev vpn3 scope link 
--- table 204 ---
default dev vpn4 scope link 
--- table 205 ---
default dev vpn5 scope link 

=== UCI changes ===
vm101_uci_changes_rc=0
no_policy_switch_vm101=1
no_wg_reload_vm101=1
no_network_reload_vm101=1
no_firewall_reload_vm101=1
no_peer_change_vm101=1
vm101_verify_done=1

=== VM100 selector verify ===
vm100_selector_entry_rc=0
vm100_selector_active_entry_count=1
vm100_selector_service_enabled_rc=0
vm100_selector_rule_visible_rc=0
vm100_wg_paid_peer_count=1
vm100_canary_ip_in_wg_paid_rc=0
vm100_uci_changes_rc=0
no_wg_reload_vm100=1
no_network_reload_vm100=1
no_firewall_reload_vm100=1
no_peer_change_vm100=1
vm100_verify_done=1

=== VM121 DB/API checkpoint ===
remote_backup_dir=/root/router-ops-backups/checkpoint-5slot-policy-20260708-130219
backend_container=wgaccess-backend
postgres_container=wgaccess-postgres
{"status":"ok","service":"wg-access-backend","environment":"dev"}
{"status":"ok","db":1}
peers_curl_rc=0
jobs_curl_rc=0
peer_count 21
enabled_peer_count 1
job_count 37
pending_job_count 0
canary_peer_found=True
canary_peer_enabled=True
canary_peer_tunnel_ip=10.253.1.10
canary_tunnel_ip_matches=True
canary_job_found=True
canary_job_status=completed
canary_job_attempts=1
pg_dump_rc=0
-rw-r--r-- 1 root root 24K Jul  8 13:02 /root/router-ops-backups/checkpoint-5slot-policy-20260708-130219/wg-access-db-after-5slot-policy.dump
WG_CLIENT_ENDPOINT=wg-studio.secret-studio.ru:51830
no_peer_disable=1
no_wg_reload_vm121=1
no_backend_restart=1
vm121_checkpoint_done=1

=== STEP_036H RESULT ===
snapshot_name=S036H_WGPAY_5SLOT_POLICY_PERSISTED
snapshot_vm100_rc=0
snapshot_vm100_visible_rc=0
snapshot_vm101_rc=0
snapshot_vm101_visible_rc=0
egress_slots_service_enabled_rc=0
egress_slots_apply_exists_rc=0
table201_vpn1_rc=0
table202_vpn2_rc=0
table203_vpn3_rc=0
table204_vpn4_rc=0
table205_vpn5_rc=0
rule_0x201_table201_rc=0
rule_0x202_table202_rc=0
rule_0x203_table203_rc=0
rule_0x204_table204_rc=0
rule_0x205_table205_rc=0
mark0x201_route_vpn1_rc=0
mark0x202_route_vpn2_rc=0
mark0x203_route_vpn3_rc=0
mark0x204_route_vpn4_rc=0
mark0x205_route_vpn5_rc=0
table200_default_vpn1_rc=0
mapper_service_enabled_rc=0
mapper_prerouting_rule_count=3
mapper_postrouting_clear_rule_count=3
vm100_selector_active_entry_count=1
vm100_wg_paid_peer_count=1
peer_count=21
enabled_peer_count=1
job_count=37
pending_job_count=0
canary_peer_enabled=True
canary_tunnel_ip_matches=True
canary_job_status=completed
pg_dump_rc=0
endpoint_final_lines=1
backend_health_ok_lines=2
decision=PASS_5SLOT_POLICY_CHECKPOINT