>>> [router-machine-close] machine=vm103 mode=--publish >>> [vm103-source] precheck MODE=--publish REPOSITORY_URL=https://github.com/DChuvelev/wg-paid-vm103.git REPO_DIR=/opt/router-ops/state/source-repositories/wg-paid-vm103 >>> [vm103-source] run VM103 git publisher through approved direct SSH >>> [vm103-git] precheck MODE=--publish PROFILE=/etc/router-machine-git-source.conf PROFILE_VERSION=2 PROFILE_SHA256=3716d87690e142a6abd938f3328f5ffdfcf9039c7e55e3a51ed88acf3ecb7a80 MACHINE_ID=vm103 GIT_DIR=/root/.vm103-source.git WORK_TREE=/ BRANCH=main REMOTE_URL=git@github.com:DChuvelev/wg-paid-vm103.git LOCAL_HEAD=8ef55ea24f8368e9ae0f128109d9709e596d1290 >>> [vm103-git] verify remote branch REMOTE_HEAD=8ef55ea24f8368e9ae0f128109d9709e596d1290 >>> [vm103-git] build current project allowlist >>> [vm103-git] read paths already tracked by git CURRENT_ALLOWED_COUNT=23 TRACKED_COUNT=21 MANAGED_UNION_COUNT=23 >>> [vm103-git] strict path validation STRICT_PATH_VALIDATION=true >>> [vm103-git] show tracked files now missing from machine TRACKED_PATH_MISSING_COUNT=0 >>> [vm103-git] build simulated git index STAGED_CHANGE_COUNT=3 === STAGED PATHS === etc/router-machine-git-source.conf etc/ssh/sshd_config.d/90-secret-studio-library-sftp.conf etc/systemd/system/srv-sftp-library.mount >>> [vm103-git] validate simulated staged paths STAGED_PATH_VALIDATION=true SIMULATED_TREE_SHA=fd1e4443e11bb5b5794d446373e608411fa6bcd6 SIMULATED_TREE_FILE_COUNT=23 >>> [vm103-git] high-confidence secret scan of simulated tree HIGH_CONFIDENCE_SECRET_MATCHES=0 >>> [vm103-git] keyword review scan === FILES REQUIRING KEYWORD REVIEW === fd1e4443e11bb5b5794d446373e608411fa6bcd6:etc/caddy/Caddyfile fd1e4443e11bb5b5794d446373e608411fa6bcd6:etc/router-machine-git-source.conf fd1e4443e11bb5b5794d446373e608411fa6bcd6:etc/ssh/sshd_config.d/90-secret-studio-library-sftp.conf fd1e4443e11bb5b5794d446373e608411fa6bcd6:etc/systemd/system/secret-studio-sample-library.service fd1e4443e11bb5b5794d446373e608411fa6bcd6:etc/systemd/system/srv-sftp-library.mount fd1e4443e11bb5b5794d446373e608411fa6bcd6:etc/wg-paid-machine-role fd1e4443e11bb5b5794d446373e608411fa6bcd6:srv/wg-paid/access-web/assets/index-DUDZDpP5.css fd1e4443e11bb5b5794d446373e608411fa6bcd6:srv/wg-paid/access-web/assets/index-DXT2dH8A.js fd1e4443e11bb5b5794d446373e608411fa6bcd6:srv/wg-paid/admin-web/assets/index-BFO04yXl.js fd1e4443e11bb5b5794d446373e608411fa6bcd6:srv/wg-paid/web-meta/robots.txt fd1e4443e11bb5b5794d446373e608411fa6bcd6:srv/wg-paid/web-meta/sitemap-reports.xml fd1e4443e11bb5b5794d446373e608411fa6bcd6:srv/wg-paid/web-meta/sitemap-reports001.xml fd1e4443e11bb5b5794d446373e608411fa6bcd6:usr/local/sbin/router-machine-git-publish.sh fd1e4443e11bb5b5794d446373e608411fa6bcd6:usr/local/sbin/router-vm103-admin-cert-renew.sh fd1e4443e11bb5b5794d446373e608411fa6bcd6:usr/local/sbin/router-vm103-ingress-health.sh >>> [vm103-git] verify real git index has no pre-staged changes >>> [vm103-git] install validated simulated index >>> [vm103-git] create commit [main e23aef4] vm103: publish managed source 2026-09-30T18:16:16Z 3 files changed, 29 insertions(+) create mode 100644 etc/ssh/sshd_config.d/90-secret-studio-library-sftp.conf create mode 100644 etc/systemd/system/srv-sftp-library.mount NEW_COMMIT=e23aef435b6342f32a980046411397c944cb04a5 NEW_TREE=fd1e4443e11bb5b5794d446373e608411fa6bcd6 >>> [vm103-git] push branch to remote To github.com:DChuvelev/wg-paid-vm103.git 8ef55ea..e23aef4 main -> main >>> [vm103-git] verify remote commit LOCAL_COMMIT=e23aef435b6342f32a980046411397c944cb04a5 REMOTE_COMMIT=e23aef435b6342f32a980046411397c944cb04a5 RESULT=PASS_VM103_GIT_PUBLISH MACHINE_ID=vm103 GIT_COMMIT=e23aef435b6342f32a980046411397c944cb04a5 GIT_TREE=fd1e4443e11bb5b5794d446373e608411fa6bcd6 GIT_FILE_COUNT=23 COMMIT_CREATED=true PUSH_PERFORMED=true REPOSITORY=https://github.com/DChuvelev/wg-paid-vm103 VM103_RESULT=PASS_VM103_GIT_PUBLISH VM103_COMMIT=e23aef435b6342f32a980046411397c944cb04a5 VM103_REMOTE_COMMIT=e23aef435b6342f32a980046411397c944cb04a5 >>> [vm103-source] clone or refresh repository on VM130 CURRENT_ORIGIN=https://github.com/DChuvelev/wg-paid-vm103.git From https://github.com/DChuvelev/wg-paid-vm103 * branch main -> FETCH_HEAD 8ef55ea..e23aef4 main -> origin/main Reset branch 'main' branch 'main' set up to track 'origin/main'. Your branch is up to date with 'origin/main'. HEAD is now at e23aef4 vm103: publish managed source 2026-09-30T18:16:16Z VM130_COMMIT=e23aef435b6342f32a980046411397c944cb04a5 VM130_TREE=fd1e4443e11bb5b5794d446373e608411fa6bcd6 VM130_FILE_COUNT=23 VM130_STATUS=CLEAN >>> [vm103-source] verify required managed paths REQUIRED_PATH_OK=etc/router-machine-git-source.conf REQUIRED_PATH_OK=etc/wg-paid-machine-role REQUIRED_PATH_OK=usr/local/sbin/router-machine-git-publish.sh REQUIRED_PATH_OK=usr/local/sbin/router-vm103-git-publish.sh >>> [vm103-source] create archive and metadata from exact Git commit ARCHIVE=/tmp/vm103-git-source-publish.pycHia/wg-paid-vm103-e23aef435b63.tar.gz ARCHIVE_SHA256=b8a22b80582c9db1472ae5751f4d480a3f8cb524ce8d930a0479675f0ab6f2b5 ARCHIVE_BASE64=/tmp/vm103-git-source-publish.pycHia/wg-paid-vm103-e23aef435b63.tar.gz.b64.txt MANIFEST=/tmp/vm103-git-source-publish.pycHia/git-tree-manifest.txt PATHS=/tmp/vm103-git-source-publish.pycHia/managed-paths.txt FACTS=/tmp/vm103-git-source-publish.pycHia/facts.json >>> [vm103-source] publish atomically into latest/ and archive prior version into old/ PUBLISHED_DIR=/opt/router-ops/public/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260930-181623_vm103_git_source_e23aef435b63 PUBLISHED_RELATIVE_PATH=latest/20260930-181623_vm103_git_source_e23aef435b63 PUBLIC_OBJECT_KIND=vm103 PREVIOUS_MOVED_COUNT=1 COLLISION_DEDUPLICATED_COUNT=0 PUBLICATION_REUSED=false PUBLICATION_TRANSACTION_ID=20260930-181623_2634179_11396 PUBLICATION_COMMITTED=true LOCAL_POSTCHECK=PASS LATEST_INDEX_CONTAINS_FOLDER=true LOCAL_INDEX=http://192.168.30.84:8099/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260930-181623_vm103_git_source_e23aef435b63/ LATEST_ROOT_URL=https://reports.secret-studio.ru/latest/ OLD_ROOT_URL=https://reports.secret-studio.ru/old/ PUBLIC_INDEX=https://reports.secret-studio.ru/latest/ PUBLIC_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/ VM103_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/ TRYCF_INDEX=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/ TRYCF_REPORT=https://receiver-rejected-average-combat.trycloudflare.com/r/e94a0859747d7b96f29c7fdafc2d0351ba603bb0a7e9e5a4/latest/20260930-181623_vm103_git_source_e23aef435b63/ VM103_REPORT_MIRROR=PASS RESULT=PASS_ROUTER_PUBLISH_REPORT ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=c18e58da760c09b8fb72eda5ea9edf140e50b8a7f5befbeae0d4d47d7343ab76 RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/ HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=c18e58da760c09b8fb72eda5ea9edf140e50b8a7f5befbeae0d4d47d7343ab76 HTTP_OUTPUT=/tmp/vm103-git-source-publish.pycHia/http-index.html ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=b8a22b80582c9db1472ae5751f4d480a3f8cb524ce8d930a0479675f0ab6f2b5 RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/wg-paid-vm103-e23aef435b63.tar.gz HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=b8a22b80582c9db1472ae5751f4d480a3f8cb524ce8d930a0479675f0ab6f2b5 HTTP_OUTPUT=/tmp/vm103-git-source-publish.pycHia/http-archive.tar.gz ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=62128e47909e62ade6d5979e3f21d4a02bd59ecb0afe8183bdf36dfe512abd23 RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/facts.json HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=62128e47909e62ade6d5979e3f21d4a02bd59ecb0afe8183bdf36dfe512abd23 HTTP_OUTPUT=/tmp/vm103-git-source-publish.pycHia/http-facts.json ATTEMPT=1 HTTP_RC=0 HTTP_CODE=200 BODY_SHA256=2409969119dcbc0e1470c1e9b52b30943e04ee8bcef1f712cb0ad2d06dd086ea RESULT=PASS_ROUTER_HTTP_VERIFY HTTP_POSTCHECK=PASS HTTP_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/git-tree-manifest.txt HTTP_CODE=200 HTTP_ATTEMPTS=1 HTTP_SHA256=2409969119dcbc0e1470c1e9b52b30943e04ee8bcef1f712cb0ad2d06dd086ea HTTP_OUTPUT=/tmp/vm103-git-source-publish.pycHia/http-manifest.txt >>> [vm103-source] save current source archive state RESULT=PASS_VM130_VM103_GIT_SOURCE_PUBLISH VM103_GIT_SOURCE_COMMIT=e23aef435b6342f32a980046411397c944cb04a5 VM103_GIT_SOURCE_TREE=fd1e4443e11bb5b5794d446373e608411fa6bcd6 VM103_GIT_SOURCE_FILE_COUNT=23 VM103_GIT_SOURCE_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/ VM103_GIT_SOURCE_ARCHIVE_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/wg-paid-vm103-e23aef435b63.tar.gz VM103_GIT_SOURCE_ARCHIVE_B64_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/wg-paid-vm103-e23aef435b63.tar.gz.b64.txt VM103_GIT_SOURCE_FACTS_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/facts.json VM103_GIT_SOURCE_MANIFEST_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/git-tree-manifest.txt VM103_GIT_SOURCE_ARCHIVE_SHA256=b8a22b80582c9db1472ae5751f4d480a3f8cb524ce8d930a0479675f0ab6f2b5 VM103_PUSH_PERFORMED=true ARCHIVE_CREATED=true PUBLISHER_RESULT=PASS_ROUTER_PUBLISH_REPORT PUBLISHER_RC=0 PUBLISHER_RC_NONZERO_SALVAGED=false PUBLICATION_COMMITTED=true LOCAL_POSTCHECK=PASS LATEST_INDEX_CONTAINS_FOLDER=true HTTP_POSTCHECK=PASS SOURCE_STATE_UPDATED=true PERMANENT_HTTPS_PUBLISHED=true RESULT=PASS_ROUTER_MACHINE_CLOSE MACHINE=vm103 DESCRIPTION=STEP_050M07P32I_R01_VM103_LIBRARY_SFTP add locked chrooted internal-sftp library upload account and bind mount; no password secret in STEP; preserve Caddy and current P32H web bytes COMMIT=e23aef435b6342f32a980046411397c944cb04a5 TREE=fd1e4443e11bb5b5794d446373e608411fa6bcd6 GIT_FILE_COUNT=23 SOURCE_PUBLISH_BACKEND=/opt/router-ops/bin/router-vm103-git-source-publish BACKEND_LOG=/opt/router-ops/state/machine-close-runs/20260930-181613_vm103_2634113/backend.txt BACKEND_RC=0 BACKEND_RC_NONZERO_SALVAGED=false CLASSIFICATION=PASS_AUTHORITATIVE_BACKEND_AND_PUBLICATION VM103_PUBLIC_URL=https://reports.secret-studio.ru/latest/20260930-181623_vm103_git_source_e23aef435b63/