>>> [vm100-source] precheck
MODE=--check
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm100.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm100
>>> [vm100-source] run VM100 git publisher through approved nested SSH
>>> [vm100-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=7fb74efae900ca49d741d643daa1135ad2cb1805b7d7168b08ec37091f99ddd1
MACHINE_ID=vm100
GIT_DIR=/root/.vm100-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm100.git
LOCAL_HEAD=c074af59a8dc05008607575af4f3130988f9b264
>>> [vm100-git] verify remote branch
ssh: Ignoring unknown configuration option 'IdentitiesOnly=yes'
REMOTE_HEAD=c074af59a8dc05008607575af4f3130988f9b264
>>> [vm100-git] build current project allowlist
>>> [vm100-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=26
TRACKED_COUNT=26
MANAGED_UNION_COUNT=26
>>> [vm100-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm100-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm100-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm100-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=6d2cb40273e3d18e7b778a151b0126e2ead55c9b
SIMULATED_TREE_FILE_COUNT=26
>>> [vm100-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm100-git] keyword review scan
KEYWORD_REVIEW_FILES=NONE

RESULT=PASS_vm100_GIT_PUBLISH_CHECK
MACHINE_ID=vm100
GIT_COMMIT=c074af59a8dc05008607575af4f3130988f9b264
GIT_TREE=6d2cb40273e3d18e7b778a151b0126e2ead55c9b
GIT_FILE_COUNT=26
COMMIT_CREATED=false
PUSH_PERFORMED=false

VM100_RESULT=PASS_vm100_GIT_PUBLISH_CHECK
VM100_COMMIT=c074af59a8dc05008607575af4f3130988f9b264
VM100_REMOTE_COMMIT=c074af59a8dc05008607575af4f3130988f9b264
>>> [vm100-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm100.git
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at c074af5 vm100: publish managed source 2026-07-25T18:46:50Z

VM130_COMMIT=c074af59a8dc05008607575af4f3130988f9b264
VM130_TREE=6d2cb40273e3d18e7b778a151b0126e2ead55c9b
VM130_FILE_COUNT=26
VM130_STATUS=CLEAN
>>> [vm100-source] verify required managed paths
REQUIRED_PATH_OK=etc/router-machine-git-source.conf
REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh
REQUIRED_PATH_OK=usr/local/sbin/router-vm100-git-publish.sh

RESULT=PASS_VM130_VM100_GIT_SOURCE_CHECK
VM100_COMMIT=c074af59a8dc05008607575af4f3130988f9b264
VM130_COMMIT=c074af59a8dc05008607575af4f3130988f9b264
VM130_TREE=6d2cb40273e3d18e7b778a151b0126e2ead55c9b
VM130_FILE_COUNT=26
VM100_PUSH_PERFORMED=false
ARCHIVE_CREATED=false
PERMANENT_HTTPS_PUBLISHED=false
>>> [vm101-source] precheck
MODE=--check
REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm101.git
REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm101
>>> [vm101-source] run VM101 git publisher through approved nested SSH
>>> [vm101-git] precheck
MODE=--check
PROFILE=/etc/router-machine-git-source.conf
PROFILE_VERSION=2
PROFILE_SHA256=e15305b4bacee57d8a058d94abdd7d708470f7079a8e90cbecaf705927cc98fd
MACHINE_ID=vm101
GIT_DIR=/root/.vm101-source.git
WORK_TREE=/
BRANCH=main
REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm101.git
LOCAL_HEAD=928b5966711ca0a62dc204ff255abad36ab22e13
>>> [vm101-git] verify remote branch
REMOTE_HEAD=928b5966711ca0a62dc204ff255abad36ab22e13
>>> [vm101-git] build current project allowlist
>>> [vm101-git] read paths already tracked by git
CURRENT_ALLOWED_COUNT=44
TRACKED_COUNT=44
MANAGED_UNION_COUNT=44
>>> [vm101-git] strict path validation
STRICT_PATH_VALIDATION=true
>>> [vm101-git] show tracked files now missing from machine
TRACKED_PATH_MISSING_COUNT=0
>>> [vm101-git] build simulated git index
STAGED_CHANGE_COUNT=0
STAGED_PATHS=NONE
>>> [vm101-git] validate simulated staged paths
STAGED_PATH_VALIDATION=true
SIMULATED_TREE_SHA=ea2081075c58e76905d21b4befef059f1a5a571c
SIMULATED_TREE_FILE_COUNT=44
>>> [vm101-git] high-confidence secret scan of simulated tree
HIGH_CONFIDENCE_SECRET_MATCHES=0
>>> [vm101-git] keyword review scan
=== FILES REQUIRING KEYWORD REVIEW ===
ea2081075c58e76905d21b4befef059f1a5a571c:hmn/hmn-load-vpn-test.sh
ea2081075c58e76905d21b4befef059f1a5a571c:hmn/hmn-set-code.sh

RESULT=PASS_vm101_GIT_PUBLISH_CHECK
MACHINE_ID=vm101
GIT_COMMIT=928b5966711ca0a62dc204ff255abad36ab22e13
GIT_TREE=ea2081075c58e76905d21b4befef059f1a5a571c
GIT_FILE_COUNT=44
COMMIT_CREATED=false
PUSH_PERFORMED=false

VM101_PUBLISHER_RC=0

VM101_RESULT=PASS_vm101_GIT_PUBLISH_CHECK
VM101_COMMIT=928b5966711ca0a62dc204ff255abad36ab22e13
VM101_REMOTE_COMMIT=928b5966711ca0a62dc204ff255abad36ab22e13
>>> [vm101-source] clone or refresh repository on VM130
CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm101.git
branch 'main' set up to track 'origin/main'.
Your branch is up to date with 'origin/main'.
HEAD is now at 928b596 vm101: publish managed source 2026-07-26T13:47:38Z

VM130_COMMIT=928b5966711ca0a62dc204ff255abad36ab22e13
VM130_TREE=ea2081075c58e76905d21b4befef059f1a5a571c
VM130_FILE_COUNT=44
VM130_STATUS=CLEAN
>>> [vm101-source] verify required managed paths
REQUIRED_PATH_OK=etc/crontabs/root
REQUIRED_PATH_OK=usr/local/sbin/router-vm101-git-publish.sh

RESULT=PASS_VM130_VM101_GIT_SOURCE_CHECK
VM101_COMMIT=928b5966711ca0a62dc204ff255abad36ab22e13
VM130_COMMIT=928b5966711ca0a62dc204ff255abad36ab22e13
VM130_TREE=ea2081075c58e76905d21b4befef059f1a5a571c
VM130_FILE_COUNT=44
VM101_PUSH_PERFORMED=false
ARCHIVE_CREATED=false
PERMANENT_HTTPS_PUBLISHED=false
VM100_STATUS=status: running
VM101_STATUS=status: running
RESULT=PASS_R20QF_PVE_PREFLIGHT
VM100_BASELINE_COMMIT=c074af59a8dc05008607575af4f3130988f9b264
VM100_BASELINE_TREE=6d2cb40273e3d18e7b778a151b0126e2ead55c9b
VM100_BASELINE_FILE_COUNT=26
GIT_TRACKED_STATUS_CLEAN=true
FILE_SHA256=/etc/router-machine-git-source.conf:7fb74efae900ca49d741d643daa1135ad2cb1805b7d7168b08ec37091f99ddd1
FILE_SHA256=/etc/router-wgpay-slot-topology.conf:894a62c633cb5d528a78380fda32b91c274d1e075add39459a4f2f92ffa7f4b0
FILE_SHA256=/usr/local/lib/router-wgpay-slot-topology-lib.sh:9d025e6cfcf9889671412cf66130c829e3ea6435b9a689a8d87029a36f83a6e9
FILE_SHA256=/usr/local/sbin/router-wgpay-slot-topology-apply.sh:c8b58580a51733255d161dc72a261ff6de16c095eede67d57f97b97a3ee2b039
FILE_SHA256=/usr/local/sbin/router-wgpay-slot-topology-forced-command.sh:82cde2c97caf0ae438c773cd7be1d695d9dacb53cce94647158f0af7e73617d1
FILE_SHA256=/usr/local/sbin/router-wgpay-egress-local.sh:501e7fbb83b1d2153218cd44299bb2245beb876f45961bf539ccad198aa4152c
VM100_HOSTKEY_COUNT=2
AUTHORIZED_KEYS_SHA256_BEFORE=0aa2f7d0d667c68e6cacd309bf6b104544fc4d7bd4892a7e086792d8efa01ff4
VM100_SELECTOR_SHA256_BEFORE=2db1a0c46c1b93d9ede5f560d2d00db2dad3283adbc8f6ca6b0434ab695d8460
VM100_NFT_NORMALIZED_SHA256_BEFORE=f0b1b44c9defc342eab12172f46e875bc707d3cd4658079105861d1662333423
RESULT=PASS_R20QF_VM100_PREFLIGHT
VM101_BASELINE_COMMIT=928b5966711ca0a62dc204ff255abad36ab22e13
VM101_BASELINE_TREE=ea2081075c58e76905d21b4befef059f1a5a571c
VM101_BASELINE_FILE_COUNT=44
GIT_TRACKED_STATUS_CLEAN=true
FILE_SHA256=/etc/router-machine-git-source.conf:e15305b4bacee57d8a058d94abdd7d708470f7079a8e90cbecaf705927cc98fd
FILE_SHA256=/etc/router-wgpay-topology-delivery.conf:111c3641a888affb2a0447be4824b554baf3c8d99286f5a329c8e333bd36bfdc
FILE_SHA256=/etc/init.d/router-wgpay-topology-delivery:2fb7440a4e71e0bc13dda641b8098ce220aeb0e8da72d2595b05ba149ad80bf5
FILE_SHA256=/usr/local/lib/router-wgpay-topology-delivery-lib.sh:24fd113fb94f83f89b72a6d5343aa44546e29ff83f6ad44438f9bbc160c67480
FILE_SHA256=/usr/local/sbin/router-wgpay-topology-delivery-loop.sh:9123e241cd7d14c33f7fbd4b45a641fbc88afbab5137b737823ae44270d79138
FILE_SHA256=/usr/local/sbin/router-wgpay-topology-outbox.sh:94bd8d75841fbd991e1c461fffa49b37a7708e7e01a11cbc10908c247e7b9c65
FILE_SHA256=/usr/local/lib/router-wgpay-fallback-map.sh:cb4d1248544406869b292c5cb9387a238db61d925aee2057597d42da48132bde
FILE_SHA256=/usr/local/sbin/router-wgpay-canary-apply.sh:5035dbc1755d8e1cbf1396f3608f6b9931ceb31a06138a04224da6569ffec9a6
FILE_SHA256=/usr/local/sbin/router-wgpay-fallback-state.sh:1bc92a03db3bfb79ddfc5e6af695e230279e7bc249662d08d38ba37938610049
OUTBOX_STATE_SHA256_BEFORE=6bb1b765ac0e4290252925c9932ae0c4ca36432e514c73793d2a31445badc30c
PENDING_SHA256_BEFORE=754310dccf2dd6ec16dec0de2c9fec35afb27902d69e1b51f212636e988c96e5
KNOWN_HOSTS_SHA256_BEFORE=6233fddbb0a29afc8c4e8c699733c1a188c3a41f2fb63a2640653dc4aea624ce
PENDING_GENERATION_BEFORE=000000000001
DELIVERY_ENABLED_BEFORE=false
RESULT=PASS_R20QF_VM101_PREFLIGHT
RESULT=PASS_R20QF_PREFLIGHT