docs: lock in storage philosophy and PDM migration capability
Storage philosophy (user directive):
- NVMe/SSD: k8s worker scratch + ultix-streaming (dev workstation
running "cluster of 1" pre-prod jobs before full k8s deployment)
- Spinning rust: all infrastructure VMs (UCS, netinfra, LibreNMS, SIEM)
Clarified that hosts are standalone but managed via Proxmox Datacenter
Manager (PDM), which supports VM migration between nodes through the
UI -- eliminating the need for manual disk copies in the migration plan.
Updated all migration steps to reference PDM storage migrate instead
of manual cp commands.
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
This commit is contained in:
@@ -0,0 +1,720 @@
|
||||
This system is the property of Known Element Enterprises LLC.
|
||||
|
||||
Authorized uses only. All activity may be monitored and reported.
|
||||
|
||||
All activities subject to monitoring/recording/review in real time and/or at a later time.##### AUDIT START 2026-07-28T02:41:34Z #####
|
||||
Audit host: pfv-netboot.knel.net
|
||||
Audit user: localuser
|
||||
Script: audit-netboot.sh (READ-ONLY)
|
||||
|
||||
========================================================================
|
||||
SECTION: 1. SYSTEM BASICS
|
||||
========================================================================
|
||||
-- uname --
|
||||
Linux pfv-netboot 6.1.0-44-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.164-1 (2026-03-09) x86_64 GNU/Linux
|
||||
-- /etc/os-release --
|
||||
PRETTY_NAME="Debian GNU/Linux 12 (bookworm)"
|
||||
NAME="Debian GNU/Linux"
|
||||
VERSION_ID="12"
|
||||
VERSION="12 (bookworm)"
|
||||
VERSION_CODENAME=bookworm
|
||||
ID=debian
|
||||
HOME_URL="https://www.debian.org/"
|
||||
SUPPORT_URL="https://www.debian.org/support"
|
||||
BUG_REPORT_URL="https://bugs.debian.org/"
|
||||
-- uptime --
|
||||
21:41:34 up 113 days, 15:32, 2 users, load average: 0.07, 0.07, 0.06
|
||||
-- timezone --
|
||||
Local time: Mon 2026-07-27 21:41:34 CDT
|
||||
Universal time: Tue 2026-07-28 02:41:34 UTC
|
||||
RTC time: Tue 2026-07-28 02:41:34
|
||||
Time zone: US/Central (CDT, -0500)
|
||||
System clock synchronized: yes
|
||||
NTP service: n/a
|
||||
RTC in local TZ: no
|
||||
-- arch --
|
||||
amd64
|
||||
-- memory --
|
||||
total used free shared buff/cache available
|
||||
Mem: 1.9Gi 940Mi 66Mi 65Mi 1.1Gi 961Mi
|
||||
Swap: 974Mi 315Mi 659Mi
|
||||
-- disk --
|
||||
Filesystem Size Used Avail Use% Mounted on
|
||||
/dev/sda1 491G 18G 448G 4% /
|
||||
-- cpu count --
|
||||
2
|
||||
|
||||
========================================================================
|
||||
SECTION: 2. NETWORK
|
||||
========================================================================
|
||||
-- hostname --
|
||||
pfv-netboot
|
||||
pfv-netboot.knel.net
|
||||
192.168.3.250 172.24.0.1 172.18.0.1 172.19.0.1 172.23.0.1 172.17.0.1 172.20.0.1 172.22.0.1 100.103.64.82 2600:1700:1d1:eb00:215:5dff:fe64:e81e fd7a:115c:a1e0::2901:4052
|
||||
-- ip addr --
|
||||
lo UNKNOWN 127.0.0.1/8 ::1/128
|
||||
eth0 UP 192.168.3.250/22 2600:1700:1d1:eb00:215:5dff:fe64:e81e/64 fe80::215:5dff:fe64:e81e/64
|
||||
eth1 UP
|
||||
br-3d55385c5e7d UP 172.24.0.1/16 fe80::d883:2ff:fef8:79cd/64
|
||||
br-50e2988e78eb DOWN 172.18.0.1/16
|
||||
br-748fea589ab8 DOWN 172.19.0.1/16
|
||||
br-b52d11330b20 DOWN 172.23.0.1/16
|
||||
docker0 DOWN 172.17.0.1/16
|
||||
br-f91c61cdba28 DOWN 172.20.0.1/16
|
||||
br-25187260f675 DOWN 172.22.0.1/16
|
||||
tailscale0 UNKNOWN 100.103.64.82/32 fd7a:115c:a1e0::2901:4052/128 fe80::42db:e6ff:fe57:431c/64
|
||||
veth9ecb986@if2 UP fe80::c45b:62ff:fe19:6258/64
|
||||
|
||||
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
|
||||
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
|
||||
inet 127.0.0.1/8 scope host lo
|
||||
valid_lft forever preferred_lft forever
|
||||
inet6 ::1/128 scope host noprefixroute
|
||||
valid_lft forever preferred_lft forever
|
||||
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
|
||||
link/ether 00:15:5d:64:e8:1e brd ff:ff:ff:ff:ff:ff
|
||||
inet 192.168.3.250/22 brd 192.168.3.255 scope global eth0
|
||||
valid_lft forever preferred_lft forever
|
||||
inet6 2600:1700:1d1:eb00:215:5dff:fe64:e81e/64 scope global dynamic mngtmpaddr
|
||||
valid_lft 3391sec preferred_lft 3391sec
|
||||
inet6 fe80::215:5dff:fe64:e81e/64 scope link
|
||||
valid_lft forever preferred_lft forever
|
||||
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
|
||||
link/ether 00:15:5d:64:e8:2a brd ff:ff:ff:ff:ff:ff
|
||||
5: br-3d55385c5e7d: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
|
||||
link/ether da:83:02:f8:79:cd brd ff:ff:ff:ff:ff:ff
|
||||
inet 172.24.0.1/16 brd 172.24.255.255 scope global br-3d55385c5e7d
|
||||
valid_lft forever preferred_lft forever
|
||||
inet6 fe80::d883:2ff:fef8:79cd/64 scope link
|
||||
valid_lft forever preferred_lft forever
|
||||
6: br-50e2988e78eb: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
|
||||
link/ether ca:f9:33:b2:b6:bb brd ff:ff:ff:ff:ff:ff
|
||||
inet 172.18.0.1/16 brd 172.18.255.255 scope global br-50e2988e78eb
|
||||
valid_lft forever preferred_lft forever
|
||||
7: br-748fea589ab8: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
|
||||
link/ether 82:e8:2b:47:1e:91 brd ff:ff:ff:ff:ff:ff
|
||||
inet 172.19.0.1/16 brd 172.19.255.255 scope global br-748fea589ab8
|
||||
valid_lft forever preferred_lft forever
|
||||
8: br-b52d11330b20: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
|
||||
link/ether de:6e:f1:ec:24:64 brd ff:ff:ff:ff:ff:ff
|
||||
inet 172.23.0.1/16 brd 172.23.255.255 scope global br-b52d11330b20
|
||||
valid_lft forever preferred_lft forever
|
||||
9: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
|
||||
link/ether 56:f9:55:99:fa:af brd ff:ff:ff:ff:ff:ff
|
||||
inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
|
||||
valid_lft forever preferred_lft forever
|
||||
10: br-f91c61cdba28: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
|
||||
link/ether 8e:ed:24:fa:4b:4a brd ff:ff:ff:ff:ff:ff
|
||||
inet 172.20.0.1/16 brd 172.20.255.255 scope global br-f91c61cdba28
|
||||
valid_lft forever preferred_lft forever
|
||||
11: br-25187260f675: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
|
||||
link/ether 82:af:8a:0a:64:01 brd ff:ff:ff:ff:ff:ff
|
||||
inet 172.22.0.1/16 brd 172.22.255.255 scope global br-25187260f675
|
||||
valid_lft forever preferred_lft forever
|
||||
18: tailscale0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1280 qdisc fq_codel state UNKNOWN group default qlen 500
|
||||
link/none
|
||||
inet 100.103.64.82/32 scope global tailscale0
|
||||
valid_lft forever preferred_lft forever
|
||||
inet6 fd7a:115c:a1e0::2901:4052/128 scope global
|
||||
valid_lft forever preferred_lft forever
|
||||
inet6 fe80::42db:e6ff:fe57:431c/64 scope link stable-privacy
|
||||
valid_lft forever preferred_lft forever
|
||||
24: veth9ecb986@if2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-3d55385c5e7d state UP group default
|
||||
link/ether c6:5b:62:19:62:58 brd ff:ff:ff:ff:ff:ff link-netnsid 0
|
||||
inet6 fe80::c45b:62ff:fe19:6258/64 scope link
|
||||
valid_lft forever preferred_lft forever
|
||||
-- default route --
|
||||
default via 192.168.3.254 dev eth0 onlink
|
||||
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
|
||||
172.18.0.0/16 dev br-50e2988e78eb proto kernel scope link src 172.18.0.1 linkdown
|
||||
172.19.0.0/16 dev br-748fea589ab8 proto kernel scope link src 172.19.0.1 linkdown
|
||||
172.20.0.0/16 dev br-f91c61cdba28 proto kernel scope link src 172.20.0.1 linkdown
|
||||
172.22.0.0/16 dev br-25187260f675 proto kernel scope link src 172.22.0.1 linkdown
|
||||
172.23.0.0/16 dev br-b52d11330b20 proto kernel scope link src 172.23.0.1 linkdown
|
||||
172.24.0.0/16 dev br-3d55385c5e7d proto kernel scope link src 172.24.0.1
|
||||
192.168.0.0/22 dev eth0 proto kernel scope link src 192.168.3.250
|
||||
-- /etc/resolv.conf --
|
||||
# resolv.conf(5) file generated by tailscale
|
||||
# For more info, see https://tailscale.com/s/resolvconf-overwrite
|
||||
# DO NOT EDIT THIS FILE BY HAND -- CHANGES WILL BE OVERWRITTEN
|
||||
|
||||
nameserver 100.100.100.100
|
||||
nameserver fd7a:115c:a1e0::53
|
||||
search knel.net
|
||||
-- /etc/hosts --
|
||||
127.0.0.1 localhost
|
||||
127.0.1.1 pfv-netboot.knel.net pfv-netboot
|
||||
|
||||
# The following lines are desirable for IPv6 capable hosts
|
||||
::1 localhost ip6-localhost ip6-loopback
|
||||
ff02::1 ip6-allnodes
|
||||
ff02::2 ip6-allrouters
|
||||
-- listening TCP/UDP sockets --
|
||||
Netid State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
|
||||
udp UNCONN 0 0 0.0.0.0:38908 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:53 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:67 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:46164 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:111 0.0.0.0:*
|
||||
udp UNCONN 0 0 100.103.64.82:123 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.24.0.1:123 0.0.0.0:*
|
||||
udp UNCONN 0 0 192.168.3.250:123 0.0.0.0:*
|
||||
udp UNCONN 0 0 127.0.0.1:123 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:123 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.17.255.255:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.17.0.1:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.18.255.255:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.18.0.1:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.19.255.255:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.19.0.1:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.20.255.255:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.20.0.1:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.22.255.255:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.22.0.1:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.23.255.255:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.23.0.1:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.24.255.255:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.24.0.1:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 192.168.3.255:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 192.168.3.250:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:137 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.17.255.255:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.17.0.1:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.18.255.255:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.18.0.1:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.19.255.255:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.19.0.1:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.20.255.255:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.20.0.1:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.22.255.255:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.22.0.1:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.23.255.255:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.23.0.1:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.24.255.255:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 172.24.0.1:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 192.168.3.255:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 192.168.3.250:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:138 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:161 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:41257 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:20000 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:41641 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:59092 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:10000 0.0.0.0:*
|
||||
udp UNCONN 0 0 127.0.0.1:786 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:40725 0.0.0.0:*
|
||||
udp UNCONN 0 0 0.0.0.0:37749 0.0.0.0:*
|
||||
udp UNCONN 0 0 [::]:53 [::]:*
|
||||
udp UNCONN 0 0 [::]:34901 [::]:*
|
||||
udp UNCONN 0 0 [::]:111 [::]:*
|
||||
udp UNCONN 0 0 [fe80::c45b:62ff:fe19:6258]%veth9ecb986:123 [::]:*
|
||||
udp UNCONN 0 0 [fe80::42db:e6ff:fe57:431c]%tailscale0:123 [::]:*
|
||||
udp UNCONN 0 0 [fd7a:115c:a1e0::2901:4052]:123 [::]:*
|
||||
udp UNCONN 0 0 [fe80::d883:2ff:fef8:79cd]%br-3d55385c5e7d:123 [::]:*
|
||||
udp UNCONN 0 0 [fe80::215:5dff:fe64:e81e]%eth0:123 [::]:*
|
||||
udp UNCONN 0 0 [2600:1700:1d1:eb00:215:5dff:fe64:e81e]:123 [::]:*
|
||||
udp UNCONN 0 0 [::1]:123 [::]:*
|
||||
udp UNCONN 0 0 [::]:123 [::]:*
|
||||
udp UNCONN 0 0 [::]:43257 [::]:*
|
||||
udp UNCONN 0 0 [::]:44469 [::]:*
|
||||
udp UNCONN 0 0 [::]:41641 [::]:*
|
||||
udp UNCONN 0 0 [::]:55132 [::]:*
|
||||
udp UNCONN 0 0 [::]:34667 [::]:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:38435 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:20000 0.0.0.0:*
|
||||
tcp LISTEN 0 5 127.0.0.1:555 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:10002 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:10003 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:10000 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 100.103.64.82:64362 0.0.0.0:*
|
||||
tcp LISTEN 0 5 127.0.0.1:61209 0.0.0.0:*
|
||||
tcp LISTEN 0 50 0.0.0.0:139 0.0.0.0:*
|
||||
tcp LISTEN 0 64 0.0.0.0:36079 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:45295 0.0.0.0:*
|
||||
tcp LISTEN 0 5 0.0.0.0:4330 0.0.0.0:*
|
||||
tcp LISTEN 0 100 0.0.0.0:25 0.0.0.0:*
|
||||
tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:*
|
||||
tcp LISTEN 0 64 0.0.0.0:2049 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:53 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:40029 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:111 0.0.0.0:*
|
||||
tcp LISTEN 0 50 0.0.0.0:445 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 0.0.0.0:58853 0.0.0.0:*
|
||||
tcp LISTEN 0 128 0.0.0.0:44322 0.0.0.0:*
|
||||
tcp LISTEN 0 128 0.0.0.0:44323 0.0.0.0:*
|
||||
tcp LISTEN 0 5 0.0.0.0:44321 0.0.0.0:*
|
||||
tcp LISTEN 0 4096 [fd7a:115c:a1e0::2901:4052]:52472 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:45755 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:60951 [::]:*
|
||||
tcp LISTEN 0 4096 *:9090 *:*
|
||||
tcp LISTEN 0 64 [::]:37813 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:10002 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:10003 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:10000 [::]:*
|
||||
tcp LISTEN 0 4096 *:45876 *:*
|
||||
tcp LISTEN 0 50 [::]:139 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:44271 [::]:*
|
||||
tcp LISTEN 0 5 [::]:4330 [::]:*
|
||||
tcp LISTEN 0 128 [::]:22 [::]:*
|
||||
tcp LISTEN 0 64 [::]:2049 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:53 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:111 [::]:*
|
||||
tcp LISTEN 0 4096 *:6556 *:*
|
||||
tcp LISTEN 0 50 [::]:445 [::]:*
|
||||
tcp LISTEN 0 4096 [::]:60725 [::]:*
|
||||
tcp LISTEN 0 128 [::]:44322 [::]:*
|
||||
tcp LISTEN 0 128 [::]:44323 [::]:*
|
||||
tcp LISTEN 0 5 [::]:44321 [::]:*
|
||||
-- /etc/network/interfaces --
|
||||
# This file describes the network interfaces available on your system
|
||||
# and how to activate them. For more information, see interfaces(5).
|
||||
|
||||
source /etc/network/interfaces.d/*
|
||||
|
||||
# The loopback network interface
|
||||
auto lo
|
||||
iface lo inet loopback
|
||||
|
||||
# The primary network interface
|
||||
allow-hotplug eth0
|
||||
iface eth0 inet static
|
||||
address 192.168.3.250
|
||||
netmask 255.255.252.0
|
||||
gateway 192.168.3.254
|
||||
|
||||
#allow-hotplug eth1
|
||||
#iface eth1 inet static
|
||||
# address 10.100.100.4
|
||||
# netmask 255.255.255.0
|
||||
-- netplan --
|
||||
-- systemd-networkd --
|
||||
total 8
|
||||
drwxr-xr-x 2 root root 4096 Mar 6 2025 .
|
||||
drwxr-xr-x 5 root root 4096 Jul 20 17:55 ..
|
||||
● State: n/a
|
||||
Online state: unknown
|
||||
Address: 192.168.3.250 on eth0
|
||||
172.24.0.1 on br-3d55385c5e7d
|
||||
172.18.0.1 on br-50e2988e78eb
|
||||
172.19.0.1 on br-748fea589ab8
|
||||
172.23.0.1 on br-b52d11330b20
|
||||
172.17.0.1 on docker0
|
||||
172.20.0.1 on br-f91c61cdba28
|
||||
172.22.0.1 on br-25187260f675
|
||||
100.103.64.82 on tailscale0
|
||||
2600:1700:1d1:eb00:215:5dff:fe64:e81e on eth0
|
||||
fd7a:115c:a1e0::2901:4052 on tailscale0
|
||||
fe80::215:5dff:fe64:e81e on eth0
|
||||
fe80::d883:2ff:fef8:79cd on br-3d55385c5e7d
|
||||
fe80::42db:e6ff:fe57:431c on tailscale0
|
||||
fe80::c45b:62ff:fe19:6258 on veth9ecb986
|
||||
Gateway: 192.168.3.254 on eth0
|
||||
fe80::6e4b:b4ff:fe10:4061 on eth0
|
||||
|
||||
========================================================================
|
||||
SECTION: 3. RELEVANT SYSTEMD UNITS
|
||||
========================================================================
|
||||
-- all units matching dns|pihole|dnsmasq|technitium|ftl|ntp|chrony|timesync --
|
||||
initrd-parse-etc.service loaded inactive dead Mountpoints Configured in the Real Root
|
||||
ntpsec-rotate-stats.service loaded inactive dead Rotate ntpd stats
|
||||
ntpsec-systemd-netif.service loaded inactive dead ntpsec-systemd-netif.service
|
||||
ntpsec.service loaded active running Network Time Service
|
||||
● systemd-resolved.service not-found inactive dead systemd-resolved.service
|
||||
● systemd-timesyncd.service not-found inactive dead systemd-timesyncd.service
|
||||
-- unit files (enabled state) --
|
||||
ntpsec-systemd-netif.path enabled enabled
|
||||
postfix-resolvconf.path disabled enabled
|
||||
ntp.service alias -
|
||||
ntpd.service alias -
|
||||
ntpsec-rotate-stats.service static -
|
||||
ntpsec-systemd-netif.service static -
|
||||
ntpsec-wait.service disabled enabled
|
||||
ntpsec.service enabled enabled
|
||||
postfix-resolvconf.service disabled enabled
|
||||
ntpsec-rotate-stats.timer enabled enabled
|
||||
ntpsec.timer masked enabled
|
||||
-- installed packages of interest --
|
||||
ii dnsmasq-base 2.90-4~deb12u2 amd64 Small caching DNS proxy and DHCP/TFTP server - executable
|
||||
ii ntpsec 1.2.2+dfsg1-1+deb12u1 amd64 Network Time Protocol daemon and utility programs
|
||||
ii ntpsec-ntpdate 1.2.2+dfsg1-1+deb12u1 amd64 client for setting system time from NTP servers
|
||||
ii ntpsec-ntpdig 1.2.2+dfsg1-1+deb12u1 amd64 ntpdig SNTP client
|
||||
ii python3-ntp 1.2.2+dfsg1-1+deb12u1 amd64 Python 3 NTP Helper Classes
|
||||
|
||||
========================================================================
|
||||
SECTION: 4. NTP
|
||||
========================================================================
|
||||
-- chrony --
|
||||
|
||||
-- chronyc sources/stats (if available) --
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
-- ntpsec / ntp classic --
|
||||
● ntpsec.service - Network Time Service
|
||||
Loaded: loaded (/lib/systemd/system/ntpsec.service; enabled; preset: enabled)
|
||||
Active: active (running) since Mon 2026-07-20 17:56:32 CDT; 1 week 0 days ago
|
||||
Docs: man:ntpd(8)
|
||||
Process: 2124687 ExecStart=/usr/libexec/ntpsec/ntp-systemd-wrapper (code=exited, status=0/SUCCESS)
|
||||
Main PID: 2124690 (ntpd)
|
||||
Tasks: 1 (limit: 2219)
|
||||
Memory: 10.7M
|
||||
CPU: 34.324s
|
||||
CGroup: /system.slice/ntpsec.service
|
||||
└─2124690 /usr/sbin/ntpd -p /run/ntpd.pid -c /etc/ntpsec/ntp.conf -g -N -u ntpsec:ntpsec
|
||||
● ntpsec.service - Network Time Service
|
||||
Loaded: loaded (/lib/systemd/system/ntpsec.service; enabled; preset: enabled)
|
||||
Active: active (running) since Mon 2026-07-20 17:56:32 CDT; 1 week 0 days ago
|
||||
Docs: man:ntpd(8)
|
||||
Process: 2124687 ExecStart=/usr/libexec/ntpsec/ntp-systemd-wrapper (code=exited, status=0/SUCCESS)
|
||||
Main PID: 2124690 (ntpd)
|
||||
Tasks: 1 (limit: 2219)
|
||||
Memory: 10.7M
|
||||
CPU: 34.324s
|
||||
CGroup: /system.slice/ntpsec.service
|
||||
└─2124690 /usr/sbin/ntpd -p /run/ntpd.pid -c /etc/ntpsec/ntp.conf -g -N -u ntpsec:ntpsec
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
main: line 37: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
driftfile /var/lib/ntp/ntp.drift
|
||||
leapfile /usr/share/zoneinfo/leap-seconds.list
|
||||
server pfvsvrpi.knel.net
|
||||
restrict 127.0.0.1
|
||||
restrict ::1
|
||||
|
||||
-- systemd-timesyncd --
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
-- openntpd --
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
========================================================================
|
||||
SECTION: 5. DOCKER
|
||||
========================================================================
|
||||
-- docker version --
|
||||
Client: Docker Engine - Community
|
||||
Version: 29.6.2
|
||||
API version: 1.55
|
||||
Go version: go1.26.5
|
||||
Git commit: dfc4efb
|
||||
Built: Thu Jul 16 16:12:20 2026
|
||||
OS/Arch: linux/amd64
|
||||
Context: default
|
||||
Client: Docker Engine - Community
|
||||
Version: 29.6.2
|
||||
API version: 1.55
|
||||
Go version: go1.26.5
|
||||
Git commit: dfc4efb
|
||||
Built: Thu Jul 16 16:12:20 2026
|
||||
OS/Arch: linux/amd64
|
||||
Context: default
|
||||
|
||||
Server: Docker Engine - Community
|
||||
Engine:
|
||||
Version: 29.6.2
|
||||
API version: 1.55 (minimum version 1.40)
|
||||
Go version: go1.26.5
|
||||
Git commit: 3d80467
|
||||
Built: Thu Jul 16 16:12:20 2026
|
||||
OS/Arch: linux/amd64
|
||||
Experimental: false
|
||||
containerd:
|
||||
Version: v2.2.6
|
||||
GitCommit: 11ce9d5f3c68c941867e82890e93e815c1304f1b
|
||||
runc:
|
||||
Version: 1.3.6
|
||||
GitCommit: v1.3.6-0-g491b69ba
|
||||
docker-init:
|
||||
Version: 0.19.0
|
||||
GitCommit: de40ad0
|
||||
-- containers (running) --
|
||||
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
|
||||
1d09249f01b0 pihole/pihole:latest "start.sh" 5 months ago Up 44 minutes (healthy) 67/udp, 0.0.0.0:53->53/tcp, 0.0.0.0:53->53/udp, [::]:53->53/tcp, [::]:53->53/udp, 123/udp, 0.0.0.0:10002->80/tcp, [::]:10002->80/tcp, 0.0.0.0:10003->443/tcp, [::]:10003->443/tcp pihole
|
||||
c33ced53142e dockurr/chrony "/bin/startup" 13 months ago Up 7 days (healthy) tsys-ntp
|
||||
-- containers (all) --
|
||||
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
|
||||
1d09249f01b0 pihole/pihole:latest "start.sh" 5 months ago Up 44 minutes (healthy) 67/udp, 0.0.0.0:53->53/tcp, 0.0.0.0:53->53/udp, [::]:53->53/tcp, [::]:53->53/udp, 123/udp, 0.0.0.0:10002->80/tcp, [::]:10002->80/tcp, 0.0.0.0:10003->443/tcp, [::]:10003->443/tcp pihole
|
||||
c33ced53142e dockurr/chrony "/bin/startup" 13 months ago Up 7 days (healthy) tsys-ntp
|
||||
-- images --
|
||||
IMAGE ID DISK USAGE CONTENT SIZE EXTRA
|
||||
busybox:latest 6d3e4188a38a 4.28MB 0B
|
||||
dockurr/chrony:latest 3b656f2feb55 15.4MB 0B U
|
||||
pihole/pihole:latest 81365952d1f8 92.7MB 0B U
|
||||
-- volumes --
|
||||
DRIVER VOLUME NAME
|
||||
local 0cb24520936997d233409ea07681920fdb03d92967856e849474cf90446dc426
|
||||
local 0ccc1140e4b86442167f65d7caf43d8a3bc04fff2bef461f112d8b7c8e4bd4c8
|
||||
local 1d7f70d65f5d739f737c3bc0d1b0b2b5cf4f192477dcbbdb95bca344310bff84
|
||||
local 2a1726279d1d382ab0a2bcb2079f60e65fc0fd0d40880074038e0c678b2a7f56
|
||||
local 3d207dff87da7dc7d11b70f1e595cc5cce001392cb663ac4d664f5710b9879b8
|
||||
local 4f8894b9f0206c743be26e6b644e3bf017c5b6e190ac7da31e7ffb7132a1ca2f
|
||||
local 7c210964fd48cd91c8e37543d562569ec523208b5ea421f8fb47dc73a6d724ee
|
||||
local 8ccc4c07bf45d05bc922d4f619780f60cac0149b4dd7de5be7720f72f47e6c10
|
||||
local 71c98aa3d5fb266ef291ac4fc95b11fc83475b9bb0f70999e77095249ad18bf5
|
||||
local 83f977471ac2f4ad6521ad50f0311ee36547701d00d9a869903f0ba667c2000d
|
||||
local 87eced0295c12870220fc746ef685530cb5b8e20c4afafbfd573ff773459cd9f
|
||||
local 95eb8a7b389b9a04bd90f4cee485bd015b7c3fd311c1750c7596a2b2fde1605d
|
||||
local 562da84ce678f8d8b9cc45665099f2562beb4a41c860b5951ef8b88a8f682e41
|
||||
local 8974fb973f2be9c05c1ec6548ffaad0b1caa302972f7567c3fb3a97d59b9076b
|
||||
local 201278554f24a7af6284b9564c45656e6d2dc7b9daea24fe52707d7825cb5385
|
||||
local b24c0bd3e25987537a92078d6f521f5f155e7379295d21e43c500cbabc8a02e0
|
||||
local bb353f885d620d98dbb147f0ff51f38a87725669b1a14390fb825509878a7e0b
|
||||
local bc96d56b965f1e238afd47e483b93f1ec9ed59e8458e8e851ffc9710582a5475
|
||||
local c329a5b999999c074bf767bc1f7b3647cf5d4d0624b7d45d63658cbb723e5d46
|
||||
local cf03c8ea64823ac8db5c6df1093b2d9f5146838dd8dc2986bdc485e8b59d0d24
|
||||
local d9500add842368a6d637090569e5c13cb9f068cbfeb14e02c597ae82f2807e47
|
||||
local da3164486ea59aaa9fd14113faa9104411c61ad36a9487e3ce780e86a96dac1f
|
||||
local dae4bbdcbb634b817b47558df3908906fe7635ad57377389616189bd0f2d7b64
|
||||
local dddeee12833ed02185e00732ddb8c12ef6a6b88c49e7df4e48f7a27b71182bf5
|
||||
local dns_tsys-dns-config
|
||||
local dns_tyss-dns-config
|
||||
local e054c42f042095e22be91432ca87e524fc0ebbc447a800c263c389577e190629
|
||||
local eda6668262ccd43f0e3c0b9e3c42711cc516f372b46ef174bca34d96d17740b8
|
||||
local f53cb9833442fd9499260fa8073a04a15f5c96a5576aa96d781bc24441906942
|
||||
local f142ec0c6150618365447908d5753ff5ff7defcbf27c210702a17ad205dc4aba
|
||||
local f350de2e220f4983bca2e7ca96374a597a075779224b036ccd76deb280ba8922
|
||||
-- networks --
|
||||
NETWORK ID NAME DRIVER SCOPE
|
||||
0f56376f4515 bridge bridge local
|
||||
f91c61cdba28 dns_default bridge local
|
||||
b24303598fa1 host host local
|
||||
25187260f675 msmtpd_default bridge local
|
||||
748fea589ab8 netdisco_default bridge local
|
||||
bd40993bc47f none null local
|
||||
b52d11330b20 ntp_default bridge local
|
||||
3d55385c5e7d pihole_default bridge local
|
||||
50e2988e78eb root_default bridge local
|
||||
-- compose files in common locations --
|
||||
### /opt ###
|
||||
total 16
|
||||
drwxr-xr-x 4 root root 4096 Dec 29 2025 .
|
||||
drwxr-xr-x 20 root root 4096 Jul 20 17:55 ..
|
||||
drwxr-xr-x 2 beszel beszel 4096 Apr 6 01:08 beszel-agent
|
||||
drwx--x--x 4 root root 4096 Jun 10 2025 containerd
|
||||
|
||||
========================================================================
|
||||
SECTION: 6. PI-HOLE
|
||||
========================================================================
|
||||
(pihole command not on PATH)
|
||||
-- /etc/pihole listing --
|
||||
main: line 54: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
(cannot list /etc/pihole)
|
||||
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
|
||||
-- /etc/pihole/*.conf (all) --
|
||||
-- /etc/dnsmasq.d listing --
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
main: line 54: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
(cannot list /etc/dnsmasq.d)
|
||||
|
||||
-- /etc/dnsmasq.conf (if present) --
|
||||
|
||||
-- gravity.db schema + row counts (Pi-hole v5+) --
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
(no gravity.db found)
|
||||
-- lighttpd / pihole web admin --
|
||||
|
||||
main: line 44: printf: --: invalid option
|
||||
printf: usage: printf [-v var] format [arguments]
|
||||
alias.url += ("/javascript" => "/usr/share/javascript")
|
||||
|
||||
-- pihole-FTL service --
|
||||
|
||||
========================================================================
|
||||
SECTION: 7. TECHNITIUM DNS
|
||||
========================================================================
|
||||
-- technitium systemd unit --
|
||||
-- any unit containing technitium --
|
||||
-- unit file path --
|
||||
### checking /etc/technitium ###
|
||||
### checking /etc/technitium/dns ###
|
||||
### checking /opt/technitium ###
|
||||
### checking /opt/technitium/dns ###
|
||||
### checking /var/lib/technitium ###
|
||||
### checking /usr/local/technitium ###
|
||||
-- technitium config.xml / dnsServer.conf (search) --
|
||||
|
||||
========================================================================
|
||||
SECTION: 8. FIREWALL & MISC
|
||||
========================================================================
|
||||
-- nftables --
|
||||
table ip raw {
|
||||
chain PREROUTING {
|
||||
type filter hook prerouting priority raw; policy accept;
|
||||
iifname != "br-b52d11330b20" ip daddr 172.23.0.2 counter packets 0 bytes 0 drop
|
||||
iifname != "br-3d55385c5e7d" ip daddr 172.24.0.2 counter packets 0 bytes 0 drop
|
||||
}
|
||||
|
||||
chain OUTPUT {
|
||||
type filter hook output priority raw; policy accept;
|
||||
}
|
||||
}
|
||||
table ip filter {
|
||||
chain INPUT {
|
||||
type filter hook input priority filter; policy accept;
|
||||
counter packets 8461563 bytes 1841523123 jump ts-input
|
||||
}
|
||||
|
||||
chain FORWARD {
|
||||
type filter hook forward priority filter; policy drop;
|
||||
counter packets 20387709 bytes 3821595842 jump DOCKER-USER
|
||||
counter packets 20387709 bytes 3821595842 jump DOCKER-FORWARD
|
||||
counter packets 1064 bytes 88643 jump ts-forward
|
||||
}
|
||||
|
||||
chain OUTPUT {
|
||||
type filter hook output priority filter; policy accept;
|
||||
}
|
||||
|
||||
chain DOCKER-FORWARD {
|
||||
counter packets 20387709 bytes 3821595842 jump DOCKER-CT
|
||||
counter packets 14776132 bytes 2075147539 jump DOCKER-INTERNAL
|
||||
counter packets 14776132 bytes 2075147539 jump DOCKER-BRIDGE
|
||||
iifname "br-748fea589ab8" counter packets 0 bytes 0 accept
|
||||
iifname "br-b52d11330b20" counter packets 0 bytes 0 accept
|
||||
iifname "br-f91c61cdba28" counter packets 0 bytes 0 accept
|
||||
iifname "br-25187260f675" counter packets 0 bytes 0 accept
|
||||
iifname "br-3d55385c5e7d" counter packets 10132822 bytes 1741327665 accept
|
||||
iifname "br-50e2988e78eb" counter packets 0 bytes 0 accept
|
||||
iifname "docker0" counter packets 0 bytes 0 accept
|
||||
}
|
||||
|
||||
chain DOCKER-USER {
|
||||
}
|
||||
|
||||
chain ts-input {
|
||||
iifname "lo" ip saddr 100.103.64.82 counter packets 0 bytes 0 accept
|
||||
iifname "tailscale0" counter packets 512217 bytes 46924098 accept
|
||||
udp dport 41641 counter packets 3360373 bytes 516737750 accept
|
||||
iifname != "tailscale0" ip saddr 100.115.92.0/23 counter packets 0 bytes 0 return
|
||||
iifname != "tailscale0" ip saddr 100.64.0.0/10 counter packets 0 bytes 0 drop
|
||||
}
|
||||
|
||||
chain ts-forward {
|
||||
iifname "tailscale0" counter packets 28 bytes 2578 meta mark set mark and 0xff00ffff xor 0x40000
|
||||
meta mark & 0x00ff0000 == 0x00040000 counter packets 28 bytes 2578 accept
|
||||
oifname "tailscale0" ip saddr 100.64.0.0/10 counter packets 0 bytes 0 drop
|
||||
oifname "tailscale0" counter packets 15 bytes 1554 accept
|
||||
}
|
||||
|
||||
chain DOCKER {
|
||||
iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 tcp dport 443 counter packets 0 bytes 0 accept
|
||||
iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 tcp dport 80 counter packets 0 bytes 0 accept
|
||||
iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 udp dport 53 counter packets 32283 bytes 2368019 accept
|
||||
iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" ip daddr 172.24.0.2 tcp dport 53 counter packets 638 bytes 34248 accept
|
||||
iifname != "br-748fea589ab8" oifname "br-748fea589ab8" counter packets 0 bytes 0 drop
|
||||
iifname != "br-b52d11330b20" oifname "br-b52d11330b20" counter packets 0 bytes 0 drop
|
||||
iifname != "br-f91c61cdba28" oifname "br-f91c61cdba28" counter packets 0 bytes 0 drop
|
||||
iifname != "br-25187260f675" oifname "br-25187260f675" counter packets 0 bytes 0 drop
|
||||
iifname != "br-3d55385c5e7d" oifname "br-3d55385c5e7d" counter packets 0 bytes 0 drop
|
||||
iifname != "br-50e2988e78eb" oifname "br-50e2988e78eb" counter packets 0 bytes 0 drop
|
||||
iifname != "docker0" oifname "docker0" counter packets 0 bytes 0 drop
|
||||
}
|
||||
|
||||
chain DOCKER-BRIDGE {
|
||||
oifname "br-748fea589ab8" counter packets 0 bytes 0 jump DOCKER
|
||||
oifname "br-b52d11330b20" counter packets 0 bytes 0 jump DOCKER
|
||||
oifname "br-f91c61cdba28" counter packets 0 bytes 0 jump DOCKER
|
||||
oifname "br-25187260f675" counter packets 0 bytes 0 jump DOCKER
|
||||
oifname "br-3d55385c5e7d" counter packets 4643310 bytes 333819874 jump DOCKER
|
||||
oifname "br-50e2988e78eb" counter packets 0 bytes 0 jump DOCKER
|
||||
-- iptables --
|
||||
-P INPUT ACCEPT
|
||||
-P FORWARD DROP
|
||||
-P OUTPUT ACCEPT
|
||||
-N DOCKER
|
||||
-N DOCKER-BRIDGE
|
||||
-N DOCKER-CT
|
||||
-N DOCKER-FORWARD
|
||||
-N DOCKER-INTERNAL
|
||||
-N DOCKER-USER
|
||||
-N ts-forward
|
||||
-N ts-input
|
||||
-A INPUT -j ts-input
|
||||
-A FORWARD -j DOCKER-USER
|
||||
-A FORWARD -j DOCKER-FORWARD
|
||||
-A FORWARD -j ts-forward
|
||||
-A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p tcp -m tcp --dport 443 -j ACCEPT
|
||||
-A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p tcp -m tcp --dport 80 -j ACCEPT
|
||||
-A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p udp -m udp --dport 53 -j ACCEPT
|
||||
-A DOCKER -d 172.24.0.2/32 ! -i br-3d55385c5e7d -o br-3d55385c5e7d -p tcp -m tcp --dport 53 -j ACCEPT
|
||||
-A DOCKER ! -i br-748fea589ab8 -o br-748fea589ab8 -j DROP
|
||||
-A DOCKER ! -i br-b52d11330b20 -o br-b52d11330b20 -j DROP
|
||||
-A DOCKER ! -i br-f91c61cdba28 -o br-f91c61cdba28 -j DROP
|
||||
-A DOCKER ! -i br-25187260f675 -o br-25187260f675 -j DROP
|
||||
-A DOCKER ! -i br-3d55385c5e7d -o br-3d55385c5e7d -j DROP
|
||||
-A DOCKER ! -i br-50e2988e78eb -o br-50e2988e78eb -j DROP
|
||||
-A DOCKER ! -i docker0 -o docker0 -j DROP
|
||||
-A DOCKER-BRIDGE -o br-748fea589ab8 -j DOCKER
|
||||
-A DOCKER-BRIDGE -o br-b52d11330b20 -j DOCKER
|
||||
-A DOCKER-BRIDGE -o br-f91c61cdba28 -j DOCKER
|
||||
-A DOCKER-BRIDGE -o br-25187260f675 -j DOCKER
|
||||
-A DOCKER-BRIDGE -o br-3d55385c5e7d -j DOCKER
|
||||
-A DOCKER-BRIDGE -o br-50e2988e78eb -j DOCKER
|
||||
-A DOCKER-BRIDGE -o docker0 -j DOCKER
|
||||
-A DOCKER-CT -o br-748fea589ab8 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A DOCKER-CT -o br-b52d11330b20 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A DOCKER-CT -o br-f91c61cdba28 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A DOCKER-CT -o br-25187260f675 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A DOCKER-CT -o br-3d55385c5e7d -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A DOCKER-CT -o br-50e2988e78eb -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-- ufw --
|
||||
-- firewalld --
|
||||
-- selinux/apparmor --
|
||||
(SELinux not present)
|
||||
|
||||
========================================================================
|
||||
SECTION: 9. CRON & TIMERS
|
||||
========================================================================
|
||||
-- root crontab --
|
||||
(n/a)
|
||||
-- localuser crontab --
|
||||
(none)
|
||||
-- /etc/cron.d --
|
||||
-- pihole timer --
|
||||
|
||||
##### AUDIT END 2026-07-28T02:41:34Z #####
|
||||
Reference in New Issue
Block a user