vendo image build manifest ========================== This records what went INTO the card. It is not evidence that anything on the card works: nothing in this build booted the image or started a single service -- systemd ignores 'start' inside a chroot -- so the guards listed below were skipped precisely because they could only have lied. Both audits read a filesystem that was switched off. artefact avifi-orangepi-one-0.0.5.img.xz built 2026-08-20T00:59:32Z (UTC) vendo VERSION 0.0.5 git commit 3e107e45f02039ce35641cd4d9e1fb9093ffb89c working tree dirty (3 paths differ from HEAD) board core.board.H3Board (armbian BOARD=orangepione LINUXFAMILY=sunxi) web-app user nathanmdj base image Armbian_26.8.1_Orangepione_trixie_current_6.18.44_minimal.img.xz base sha256 7babe415b7e55e0554572af24d0177d1f69b41388d0f3ab11357abbcd790a1a6 u-boot md5 574ad4550481d0d35b0dcaa27013406b (sectors 16..8191, unchanged across the grow/shrink cycle) builder debian:trixie-slim, Linux 6.12.76-linuxkit aarch64 guards provision.sh skipped because this was an image build ---------------------------------------------------------- Each line is a check a real board would have run and this build could not. They are listed so nobody reads a green build as more than it is. SKIPPED (image build): USB-Ethernet (enx*) presence — the dongle is plugged into the box, never into the builder SKIPPED (image build): sysctl --system and the ip_forward assertion — a chroot's /proc is the builder's kernel, so this would configure and then interrogate the wrong machine; /etc/sysctl.d/99-vendo.conf above is what the card boots with SKIPPED (image build): starting and restarting services — systemd answers 'start' in a chroot with "Running in chroot, ignoring command" and exits 0, so none of this would run and none of it could fail SKIPPED (image build): the health check and the operator notes after it — no service was started, so there is nothing here to report on audit results ------------- after provision.sh result: 76 passed, 0 failed (stage: provisioned) first-boot simulation result: 5 passed, 0 failed after --prep-image result: 84 passed, 0 failed (stage: prepped) installed packages (dpkg-query -W) ---------------------------------- adduser 3.152 alsa-utils 1.2.14-1 apt 3.0.3 apt-utils 3.0.3 armbian-bsp-cli-orangepione-current 26.8.1 armbian-config 26.8.0-trunk.426.0815.070650 armbian-firmware 26.8.1 avahi-daemon 0.8-16 base-files 26.8.1-13.8+deb13u6-trixie base-passwd 3.6.7 bash 5.2.37-2+b9 bash-completion 1:2.16.0-7 bc 1.07.1-4 bsdextrautils 2.41-5 bsdutils 1:2.41-5 btrfs-progs 6.14-1 ca-certificates 20250419 console-setup 1.242~deb13u1 console-setup-linux 1.242~deb13u1 coreutils 9.7-3 cpio 2.15+dfsg-2 cron 3.0pl1-197 cron-daemon-common 3.0pl1-197 curl 8.14.1-2+deb13u4 dash 0.5.12-12 dbus 1.16.2-2 dbus-bin 1.16.2-2 dbus-daemon 1.16.2-2 dbus-session-bus-common 1.16.2-2 dbus-system-bus-common 1.16.2-2 dbus-user-session 1.16.2-2 debconf 1.5.91 debconf-utils 1.5.91 debian-archive-keyring 2025.1 debianutils 5.23.2 debsums 3.0.2.3 device-tree-compiler 1.7.2-2+b1 dialog 1.3-20250116-1 diffutils 1:3.10-4 dmsetup 2:1.02.205-2 dnsmasq 2.91-1+deb13u1 dnsmasq-base 2.91-1+deb13u1 dosfstools 4.2-1.2 dpkg 1.22.22 dracut-install 106-6 e2fsprogs 1.47.2-3+b11 ethtool 1:6.14.2-1 expect 5.45.4-4 f2fs-tools 1.16.0-1.1+b1 fake-hwclock 0.14 fdisk 2.41-5 figlet 2.2.5-3+b1 findutils 4.10.0-3 fping 5.1-1 fuse3 3.17.2-3 gcc-14-base 14.2.0-19 git 1:2.47.3-0+deb13u1 git-man 1:2.47.3-0+deb13u1 gpg 2.4.7-21+deb13u1+b4 gpgconf 2.4.7-21+deb13u1+b4 gpgv 2.4.7-21+deb13u1+b4 gpiod 2.2.1-2+deb13u1 grep 3.11-4 groff-base 1.23.0-9 gzip 1.13-1 hostname 3.25 htop 3.4.1-5 init 1.69~deb13u1 init-system-helpers 1.69~deb13u1 initramfs-tools 0.148.4 initramfs-tools-bin 0.148.4 initramfs-tools-core 0.148.4 iproute2 6.15.0-1 iputils-ping 3:20240905-3 iw 6.9-1 jq 1.7.1-6+deb13u3 kbd 2.7.1-2 keyboard-configuration 1.242~deb13u1 klibc-utils 2.0.14-1 kmod 34.2-2 less 668-1 libacl1 2.3.2-2+b1 libapparmor1 4.1.0-1 libapt-pkg7.0 3.0.3 libasound2-data 1.2.14-1 libasound2t64 1.2.14-1 libassuan9 3.0.2-2 libatomic1 14.2.0-19 libatopology2t64 1.2.14-1 libattr1 1:2.5.2-3 libaudit-common 1:4.0.2-2 libaudit1 1:4.0.2-2+b2 libavahi-common-data 0.8-16 libavahi-common3 0.8-16 libavahi-core7 0.8-16 libblkid1 2.41-5 libbpf1 1:1.5.0-3 libbrotli1 1.1.0-2+b7 libbsd0 0.12.2-2 libbz2-1.0 1.0.8-6 libc-bin 2.41-12+deb13u3 libc-l10n 2.41-12+deb13u3 libc6 2.41-12+deb13u3 libcaca0 0.99.beta20-5+deb13u1 libcap-ng0 0.8.5-4+b1 libcap2 1:2.75-10+deb13u1+b1 libcap2-bin 1:2.75-10+deb13u1+b1 libcbor0.10 0.10.2-2 libcom-err2 1.47.2-3+b11 libcrypt1 1:4.4.38-1 libcurl3t64-gnutls 8.14.1-2+deb13u4 libcurl4t64 8.14.1-2+deb13u4 libdaemon0 0.14-7.1+b3 libdb5.3t64 5.3.28+dfsg2-9 libdbus-1-3 1.16.2-2 libdebconfclient0 0.280 libdevmapper1.02.1 2:1.02.205-2 libdialog15 1.3-20250116-1 libdpkg-perl 1.22.22 libdw1t64 0.192-4 libedit2 3.1-20250104-1 libelf1t64 0.192-4 liberror-perl 0.17030-1 libestr0 0.1.11-2 libexpat1 2.8.3-1~deb13u1 libext2fs2t64 1.47.2-3+b11 libfastjson4 1.2304.0-2 libfdisk1 2.41-5 libfdt1 1.7.2-2+b1 libffi8 3.4.8-2 libfftw3-single3 3.3.10-2+b1 libfido2-1 1.15.0-1+b1 libfile-fnmatch-perl 0.02-3+b4 libfuse3-4 3.17.2-3 libgcc-s1 14.2.0-19 libgcrypt20 1.11.0-7+deb13u1 libgdbm-compat4t64 1.24-2 libgdbm6t64 1.24-2 libglib2.0-0t64 2.84.4-3~deb13u3 libgmp10 2:6.3.0+dfsg-3 libgnutls30t64 3.8.9-3+deb13u4 libgomp1 14.2.0-19 libgpg-error0 1.51-4 libgpiod3 2.2.1-2+deb13u1 libgssapi-krb5-2 1.21.3-5+deb13u1 libhogweed6t64 3.10.1-1 libidn2-0 2.3.8-2 libiniparser4 4.2.6-1 libjansson4 2.14-2+b3 libjq1 1.7.1-6+deb13u3 libk5crypto3 1.21.3-5+deb13u1 libkeyutils1 1.6.3-6 libklibc 2.0.14-1 libkmod2 34.2-2 libkrb5-3 1.21.3-5+deb13u1 libkrb5support0 1.21.3-5+deb13u1 libksba8 1.6.7-2+b1 liblastlog2-2 2.41-5 libldap2 2.6.10+dfsg-1 liblocale-gettext-perl 1.07-7+b1 liblognorm5 2.0.6-5 liblsof0 4.99.4+dfsg-2 liblz4-1 1.10.0-4 liblzma5 5.8.1-1+deb13u1 liblzo2-2 2.10-3+b1 libmd0 1.1.0-2+b1 libmnl0 1.0.5-3 libmount1 2.41-5 libncursesw6 6.5+20250216-2 libnetfilter-conntrack3 1.1.0-1 libnetplan1 1.1.2-7 libnettle8t64 3.10.1-1 libnewt0.52 0.52.25-1 libnfnetlink0 1.0.2-3 libnftables1 1.1.3-1 libnftnl11 1.2.9-1 libnghttp2-14 1.64.0-1.1+deb13u1 libnghttp3-9 1.8.0-1 libngtcp2-16 1.11.0-1+deb13u1 libngtcp2-crypto-gnutls8 1.11.0-1+deb13u1 libnl-3-200 3.7.0-2 libnl-genl-3-200 3.7.0-2 libnl-route-3-200 3.7.0-2 libnpth0t64 1.8-3 libntfs-3g89t64 1:2022.10.3-5+deb13u2 libonig5 6.9.9-1+b1 libp11-kit0 0.25.5-3 libpam-modules 1.7.0-5 libpam-modules-bin 1.7.0-5 libpam-runtime 1.7.0-5 libpam-systemd 257.13-1~deb13u1 libpam0g 1.7.0-5 libparted2t64 3.6-5 libpcre2-8-0 10.46-1~deb13u1 libpcsclite1 2.3.3-1 libperl5.40 5.40.1-6 libpipeline1 1.5.8-1 libpopt0 1.19+dfsg-2 libproc2-0 2:4.0.4-9 libpsl5t64 0.21.2-1.1+b1 libpython3-stdlib 3.13.5-1 libpython3.13-minimal 3.13.5-2+deb13u4 libpython3.13-stdlib 3.13.5-2+deb13u4 libreadline8t64 8.2-6 libreiserfscore0t64 1:3.6.27-9 librtmp1 2.4+20151223.gitfa8646d.1-2+b5 libsamplerate0 0.2.2-4+b2 libsasl2-2 2.1.28+dfsg1-9 libsasl2-modules-db 2.1.28+dfsg1-9 libseccomp2 2.6.0-2 libselinux1 3.8.1-1 libsemanage-common 3.8.1-1 libsemanage2 3.8.1-1 libsepol2 3.8.1-1 libslang2 2.3.3-5+b2 libsmartcols1 2.41-5 libsqlite3-0 3.46.1-7+deb13u1 libss2 1.47.2-3+b11 libssh2-1t64 1.11.1-1+deb13u1 libssl3t64 3.5.6-1~deb13u2 libstdc++6 14.2.0-19 libsystemd-shared 257.13-1~deb13u1 libsystemd0 257.13-1~deb13u1 libtasn1-6 4.20.0-2+deb13u1 libtcl8.6 8.6.16+dfsg-1 libtext-charwidth-perl 0.04-11+b4 libtext-iconv-perl 1.7-8+b4 libtext-wrapi18n-perl 0.06-10 libtinfo6 6.5+20250216-2 libtirpc-common 1.3.6+ds-1 libtirpc3t64 1.3.6+ds-1 libuchardet0 0.0.8-1+b2 libudev1 257.13-1~deb13u1 libunistring5 1.3-2 libusb-1.0-0 2:1.0.28-1 libuuid1 2.41-5 libwrap0 7.6.q-36 libwtmpdb0 0.73.0-3+deb13u1 libxtables12 1.8.11-2 libxxhash0 0.8.3-2 libyaml-0-2 0.2.5-2 libzstd1 1.5.7+dfsg-1 linux-base 4.12.1 linux-dtb-current-sunxi 26.8.1 linux-image-current-sunxi 26.8.1 linux-u-boot-orangepione-current 26.8.1 locales 2.41-12+deb13u3 login 1:4.16.0-2+really2.41-5 login.defs 1:4.17.4-2 logrotate 3.22.0-1 logsave 1.47.2-3+b11 lsb-release 12.1-1 lsof 4.99.4+dfsg-2 man-db 2.13.1-1 mawk 1.3.4.20250131-1 media-types 13.0.0 mmc-utils 0+git20240329.f757f413-1 mount 2.41-5 mtd-utils 1:2.3.0-1 nano 8.4-1+deb13u1 ncurses-base 6.5+20250216-2 ncurses-bin 6.5+20250216-2 ncurses-term 6.5+20250216-2 netbase 6.5 netplan-generator 1.1.2-7 netplan.io 1.1.2-7 nftables 1.1.3-1 ntfs-3g 1:2022.10.3-5+deb13u2 openssh-client 1:10.0p1-7+deb13u4 openssh-server 1:10.0p1-7+deb13u4 openssh-sftp-server 1:10.0p1-7+deb13u4 openssl 3.5.6-1~deb13u2 openssl-provider-legacy 3.5.6-1~deb13u2 pahole 1.30-1 parted 3.6-5 passwd 1:4.17.4-2 perl 5.40.1-6 perl-base 5.40.1-6 perl-modules-5.40 5.40.1-6 procps 2:4.0.4-9 psmisc 23.7-2 pv 1.9.31-1 python3 3.13.5-1 python3-cffi-backend 1.17.1-3 python3-libgpiod 2.2.1-2+deb13u1 python3-minimal 3.13.5-1 python3-netplan 1.1.2-7 python3-packaging 25.0-1 python3-pip 25.1.1+dfsg-1 python3-pip-whl 25.1.1+dfsg-1 python3-setuptools-whl 78.1.1-0.1 python3-venv 3.13.5-1 python3-wheel 0.46.1-2 python3-yaml 6.0.2-1+b2 python3.13 3.13.5-2+deb13u4 python3.13-minimal 3.13.5-2+deb13u4 python3.13-venv 3.13.5-2+deb13u4 readline-common 8.2-6 rsync 3.4.1+ds1-5+deb13u4 rsyslog 8.2504.0-1 runit-helper 2.16.4 sed 4.9-2+deb13u1 sensible-utils 0.0.25 sqv 1.3.0-3+b2 sudo 1.9.16p2-3+deb13u2 systemd 257.13-1~deb13u1 systemd-resolved 257.13-1~deb13u1 systemd-sysv 257.13-1~deb13u1 systemd-timesyncd 257.13-1~deb13u1 sysvinit-utils 3.14-4 tar 1.35+dfsg-3.1 tcl-expect 5.45.4-4 tcl8.6 8.6.16+dfsg-1 toilet 0.3-3 toilet-fonts 0.3-3 tzdata 2026b-0+deb13u1 u-boot-tools 2025.01-3 ucf 3.0052 udev 257.13-1~deb13u1 usbutils 1:018-2 util-linux 2.41-5 wget 1.25.0-2 whiptail 0.52.25-1 wireguard-tools 1.0.20210914-3 wireless-regdb 2026.05.30-1~deb13u1 wpasupplicant 2:2.10-24 xkb-data 2.42-1 xz-utils 5.8.1-1+deb13u1 zlib1g 1:1.3.dfsg+really1.3.1-1+b1 the app's virtualenv (pip freeze) --------------------------------- asgiref==3.12.1 cffi==2.1.1 cryptography==50.0.0 Django==5.2.17 gpiod==2.2.0 iniconfig==2.3.0 packaging==26.3 pluggy==1.6.0 pycparser==3.0 Pygments==2.21.0 pytest==9.1.1 pytest-django==4.14.0 PyYAML==6.0.2 sqlparse==0.6.0 waitress==3.0.2 wheel==0.46.1 whitenoise==6.12.0