============================================================ SHiRE SENTINEL CORRECTED PRECHECK REPORT ============================================================ Generated: 2026-08-01T17:56:10+08:00 Hostname: Work User: uid=1000(ray) gid=1000(ray) groups=1000(ray),4(adm),24(cdrom),27(sudo),30(dip),46(plugdev),100(users),105(lpadmin),125(sambashare) Vault: /mnt/shirevault-network //192.168.1.1/volume(sda2) cifs rw,relatime,vers=1.0,sec=none,cache=strict,upcall_target=app,uid=1000,forceuid,gid=1000,forcegid,addr=192.168.1.1,iocharset=utf8,soft,unix,posixpaths,mapposix,acl,reparse=nfs,nativesocket,symlink=native,rsize=1048576,wsize=65536,bsize=1048576,echo_interval=60,actimeo=1,closetimeo=1 === OPERATING SYSTEM === NAME="Linux Mint" VERSION="22.3 (Zena)" ID=linuxmint ID_LIKE="ubuntu debian" PRETTY_NAME="Linux Mint 22.3" VERSION_ID="22.3" HOME_URL="https://www.linuxmint.com/" SUPPORT_URL="https://forums.linuxmint.com/" BUG_REPORT_URL="http://linuxmint-troubleshooting-guide.readthedocs.io/en/latest/" PRIVACY_POLICY_URL="https://www.linuxmint.com/" VERSION_CODENAME=zena UBUNTU_CODENAME=noble Linux Work 7.0.0-28-generic #28~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 15:50:57 UTC 2 x86_64 x86_64 x86_64 GNU/Linux === ARMOR LOCATION CHECK === NOT FOUND: /home/ray/ARMOR FOUND: /home/shire3d/ARMOR /home/shire3d/ARMOR/agents/apps/store-doctor-foundation/server/security.mjs /home/shire3d/ARMOR/apps/shire-academy-full-ui-staging/node_modules/date-fns/SECURITY.md /home/shire3d/ARMOR/apps/shire-academy-full-ui-staging/node_modules/fastq/SECURITY.md /home/shire3d/ARMOR/apps/shire-academy-full-ui-staging/node_modules/resolve/SECURITY.md /home/shire3d/ARMOR/apps/shire-academy-full-ui-staging/node_modules/reusify/SECURITY.md /home/shire3d/ARMOR/apps/shire-academy-full-ui-staging/node_modules/tslib/SECURITY.md /home/shire3d/ARMOR/apps/shire-academy-full-ui-staging/node_modules/typescript/SECURITY.md /home/shire3d/ARMOR/apps/shire-academy-full-ui-staging/src/api/telegramSecurityTests.js /home/shire3d/ARMOR/assets/shire/expressions/shire_sentinel_active.png /home/shire3d/ARMOR/assets/shire/expressions/shire_sentinel_lockdown.png /home/shire3d/ARMOR/assets/shire/expressions/shire_sentinel_standby.png /home/shire3d/ARMOR/assets/shire/shire_face_sentinel.png /home/shire3d/ARMOR/backups/ENG-SEC-0002A_20260708_143637/security_service.py /home/shire3d/ARMOR/docs/SENTINEL_ACADEMY_BASE44_PROMPT.md /home/shire3d/ARMOR/modules/__pycache__/sentinel.cpython-312.pyc /home/shire3d/ARMOR/modules/sentinel.py /home/shire3d/ARMOR/sentinel /home/shire3d/ARMOR/services/__pycache__/security_service.cpython-312.pyc /home/shire3d/ARMOR/services/security_service.py === NETWORK INTERFACES === lo UNKNOWN 00:00:00:00:00:00 enp2s0 DOWN 00:e0:4c:29:dd:4a wlp1s0 UP 38:ca:73:0c:3f:2e tailscale0 UNKNOWN lo UNKNOWN 127.0.0.1/8 ::1/128 enp2s0 DOWN wlp1s0 UP 192.168.1.144/24 2405:6e00:2651:c23f:1fd:de0f:ce68:4448/64 fda5:e747:4a80:690f:55f7:1203:a451:62fa/64 2405:6e00:2651:c23f:cef7:58ae:ad6d:624c/64 2405:6e00:2651:c23f:194d:68a7:115b:5858/64 fda5:e747:4a80:690f:38b1:8220:4769:fceb/64 fda5:e747:4a80:690f:5940:ab6b:cbb6:41c1/64 fe80::5508:ae50:cc1e:8422/64 tailscale0 UNKNOWN 100.116.93.90/32 fd7a:115c:a1e0::283b:5d5b/128 fe80::d48d:885e:f8ed:6d06/64 === ROUTING === default via 192.168.1.1 dev wlp1s0 proto dhcp src 192.168.1.144 metric 600 192.168.1.0/24 dev wlp1s0 proto kernel scope link src 192.168.1.144 metric 600 === DNS === Global Protocols: -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported resolv.conf mode: stub Link 2 (enp2s0) Current Scopes: none Protocols: -DefaultRoute -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported Link 3 (wlp1s0) Current Scopes: DNS Protocols: +DefaultRoute -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported Current DNS Server: 192.168.1.1 DNS Servers: 192.168.1.1 fe80::8e90:2dff:fe4e:36d2 Link 4 (tailscale0) Current Scopes: DNS Protocols: -DefaultRoute -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported Current DNS Server: 100.100.100.100 DNS Servers: 100.100.100.100 fd7a:115c:a1e0::53 DNS Domain: tail83a922.ts.net ~0.e.1.a.c.5.1.1.a.7.d.f.ip6.arpa ~100.100.in-addr.arpa ~101.100.in-addr.arpa ~102.100.in-addr.arpa ~103.100.in-addr.arpa ~104.100.in-addr.arpa ~105.100.in-addr.arpa ~106.100.in-addr.arpa ~107.100.in-addr.arpa ~108.100.in-addr.arpa ~109.100.in-addr.arpa ~110.100.in-addr.arpa ~111.100.in-addr.arpa ~112.100.in-addr.arpa ~113.100.in-addr.arpa ~114.100.in-addr.arpa ~115.100.in-addr.arpa ~116.100.in-addr.arpa ~117.100.in-addr.arpa ~118.100.in-addr.arpa ~119.100.in-addr.arpa ~120.100.in-addr.arpa ~121.100.in-addr.arpa ~122.100.in-addr.arpa ~123.100.in-addr.arpa ~124.100.in-addr.arpa ~125.100.in-addr.arpa ~126.100.in-addr.arpa ~127.100.in-addr.arpa ~64.100.in-addr.arpa ~65.100.in-addr.arpa ~66.100.in-addr.arpa ~67.100.in-addr.arpa ~68.100.in-addr.arpa ~69.100.in-addr.arpa ~70.100.in-addr.arpa ~71.100.in-addr.arpa ~72.100.in-addr.arpa ~73.100.in-addr.arpa ~74.100.in-addr.arpa ~75.100.in-addr.arpa ~76.100.in-addr.arpa ~77.100.in-addr.arpa ~78.100.in-addr.arpa ~79.100.in-addr.arpa ~80.100.in-addr.arpa ~81.100.in-addr.arpa ~82.100.in-addr.arpa ~83.100.in-addr.arpa ~84.100.in-addr.arpa ~85.100.in-addr.arpa ~86.100.in-addr.arpa ~87.100.in-addr.arpa ~88.100.in-addr.arpa ~89.100.in-addr.arpa ~90.100.in-addr.arpa ~91.100.in-addr.arpa ~92.100.in-addr.arpa ~93.100.in-addr.arpa ~94.100.in-addr.arpa ~95.100.in-addr.arpa ~96.100.in-addr.arpa ~97.100.in-addr.arpa ~98.100.in-addr.arpa ~99.100.in-addr.arpa ~ts.net === LISTENING PORTS === Netid State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess udp UNCONN 0 0 0.0.0.0:5353 0.0.0.0:* users:(("avahi-daemon",pid=642,fd=12)) udp UNCONN 0 0 0.0.0.0:54909 0.0.0.0:* users:(("avahi-daemon",pid=642,fd=14)) udp UNCONN 0 0 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=560,fd=16)) udp UNCONN 0 0 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=560,fd=14)) udp UNCONN 0 0 0.0.0.0:41641 0.0.0.0:* users:(("tailscaled",pid=934,fd=19)) udp UNCONN 0 0 [::]:5353 [::]:* users:(("avahi-daemon",pid=642,fd=13)) udp UNCONN 0 0 [::]:54886 [::]:* users:(("avahi-daemon",pid=642,fd=15)) udp UNCONN 0 0 *:39183 *:* users:(("cloudflared",pid=1743,fd=4)) udp UNCONN 0 0 *:33267 *:* users:(("cloudflared",pid=1743,fd=8)) udp UNCONN 0 0 [fe80::5508:ae50:cc1e:8422]%wlp1s0:546 [::]:* users:(("NetworkManager",pid=741,fd=28)) udp UNCONN 0 0 [::]:41641 [::]:* users:(("tailscaled",pid=934,fd=18)) udp UNCONN 0 0 *:50485 *:* users:(("cloudflared",pid=1743,fd=7)) udp UNCONN 0 0 *:34524 *:* users:(("cloudflared",pid=1743,fd=9)) tcp LISTEN 0 128 127.0.0.1:6011 0.0.0.0:* users:(("sshd",pid=345261,fd=8)) tcp LISTEN 0 511 127.0.0.1:4174 0.0.0.0:* users:(("node",pid=1742,fd=24)) tcp LISTEN 0 511 127.0.0.1:4173 0.0.0.0:* users:(("node",pid=1741,fd=24)) tcp LISTEN 0 4096 100.116.93.90:4173 0.0.0.0:* users:(("systemd-socket-",pid=33609,fd=3),("systemd",pid=1,fd=303)) tcp LISTEN 0 511 100.116.93.90:4174 0.0.0.0:* users:(("node",pid=94292,fd=24)) tcp LISTEN 0 4096 127.0.0.1:631 0.0.0.0:* users:(("cupsd",pid=270442,fd=8)) tcp LISTEN 0 5 127.0.0.1:8781 0.0.0.0:* users:(("python3",pid=27381,fd=6)) tcp LISTEN 0 5 127.0.0.1:8770 0.0.0.0:* users:(("python3",pid=1739,fd=3)) tcp LISTEN 0 5 127.0.0.1:8790 0.0.0.0:* users:(("python3",pid=456065,fd=3)) tcp LISTEN 0 5 127.0.0.1:8791 0.0.0.0:* users:(("python3",pid=164504,fd=3)) tcp LISTEN 0 5 127.0.0.1:8765 0.0.0.0:* users:(("python",pid=422389,fd=3)) tcp LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=560,fd=17)) tcp LISTEN 0 4096 127.0.0.1:20241 0.0.0.0:* users:(("cloudflared",pid=1743,fd=10)) tcp LISTEN 0 4096 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=947,fd=3),("systemd",pid=1,fd=254)) tcp LISTEN 0 4096 127.0.0.1:11434 0.0.0.0:* users:(("ollama",pid=1737,fd=4)) tcp LISTEN 0 4096 100.116.93.90:33389 0.0.0.0:* users:(("tailscaled",pid=934,fd=23)) tcp LISTEN 0 4096 100.116.93.90:8781 0.0.0.0:* users:(("systemd-socket-",pid=59201,fd=3),("systemd",pid=1,fd=368)) tcp LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=560,fd=15)) tcp LISTEN 0 128 [::1]:6011 [::]:* users:(("sshd",pid=345261,fd=7)) tcp LISTEN 0 4096 [fd7a:115c:a1e0::283b:5d5b]:63494 [::]:* users:(("tailscaled",pid=934,fd=24)) tcp LISTEN 0 4096 [::]:22 [::]:* users:(("sshd",pid=947,fd=4),("systemd",pid=1,fd=255)) tcp LISTEN 0 4096 [::1]:631 [::]:* users:(("cupsd",pid=270442,fd=7)) === SECURITY PACKAGE INVENTORY === PACKAGE INSTALLED APT CANDIDATE ------- --------- ------------- ufw 0.36.2-6 0.36.2-6 fail2ban MISSING 1.0.2-3ubuntu0.1 suricata MISSING 1:7.0.3-1build3 clamav MISSING 1.5.3+dfsg-0ubuntu0.24.04.1 clamav-daemon MISSING 1.5.3+dfsg-0ubuntu0.24.04.1 clamav-freshclam MISSING 1.5.3+dfsg-0ubuntu0.24.04.1 auditd MISSING 1:3.1.2-2.1build1.1 audispd-plugins MISSING 1:3.1.2-2.1build1.1 aide MISSING 0.18.6-2ubuntu0.1 apparmor 4.0.1really4.0.1-0ubuntu0.24.04.7 4.0.1really4.0.1-0ubuntu0.24.04.7 apparmor-utils 4.0.1really4.0.1-0ubuntu0.24.04.7 unattended-upgrades MISSING 2.9.1+nmu4ubuntu1 needrestart MISSING 3.6-7ubuntu4.5 lynis MISSING 3.0.9-1 rkhunter MISSING 1.4.6-12 chkrootkit MISSING 0.58b-1 nmap MISSING 7.94+git20230807.3be01efb1+dfsg-3build2 arp-scan MISSING 1.10.0-2build2 tcpdump 4.99.4-3ubuntu4.24.04.1 4.99.4-3ubuntu4.24.04.1 tshark MISSING 4.2.2-1.1build3 yara MISSING 4.5.0-1build2 dnsutils 1:9.18.39-0ubuntu0.24.04.5 ethtool 1:6.7-1build1 1:6.7-1build1 jq 1.7.1-3ubuntu0.24.04.2 curl 8.5.0-2ubuntu10.11 8.5.0-2ubuntu10.11 ca-certificates 20260601~24.04.1 20260601~24.04.1 === FIREWALL === Status: inactive === SECURITY AND SHIRE SERVICES === mnt-shirevault\x2dnetwork.automount generated - mnt-shirevault\x2dnetwork.mount generated - shire-marketing-token-backup.path enabled enabled shire-marketing-token-lifecycle.path enabled enabled shire-marketing-token-reload.path enabled enabled apparmor.service enabled enabled shire-academy-autonomous-practice.service disabled enabled shire-academy-cadquery-fast.service enabled enabled shire-academy-safe-autonomous.service disabled enabled shire-academy-ui.service enabled enabled shire-agent-hub-tailnet.service static - shire-agent-hub.service enabled enabled shire-brain.service enabled enabled shire-marketing-boss-tailnet.service static - shire-marketing-boss-worker.service static - shire-marketing-boss.service enabled enabled shire-marketing-cloudflare-tunnel.service enabled enabled shire-marketing-oauth-callback.service enabled enabled shire-marketing-pipeline.service enabled enabled shire-marketing-token-backup.service static - shire-marketing-token-lifecycle.service disabled enabled shire-marketing-token-reload.service disabled enabled shire-trendscout-tailnet.service static - shire-trendscout-weekly-intelligence.service static - shire-trendscout.service enabled enabled ufw.service enabled enabled shire-agent-hub-tailnet.socket enabled enabled shire-marketing-boss-tailnet.socket enabled enabled shire-trendscout-tailnet.socket enabled enabled shire-academy-safe-autonomous.timer enabled enabled shire-marketing-boss.timer disabled enabled shire-marketing-token-backup.timer enabled enabled shire-marketing-token-lifecycle.timer enabled enabled shire-trendscout-weekly-intelligence.timer enabled enabled === LOADED SERVICE STATES === mnt-shirevault\x2dnetwork.automount loaded active running mnt-shirevault\x2dnetwork.automount mnt-shirevault\x2dnetwork.mount loaded active mounted /mnt/shirevault-network run-credentials-shire\x2dmarketing\x2dboss.service.mount loaded active mounted run-credentials-shire\x2dmarketing\x2dboss.service.mount run-credentials-shire\x2dmarketing\x2dpipeline.service.mount loaded active mounted run-credentials-shire\x2dmarketing\x2dpipeline.service.mount * run-credentials-shire\x2dmarketing\x2dtoken\x2dlifecycle.service.mount not-found inactive dead run-credentials-shire\x2dmarketing\x2dtoken\x2dlifecycle.service.mount shire-marketing-token-backup.path loaded active waiting Watch the local Marketing Boss OAuth token shire-marketing-token-lifecycle.path loaded active waiting Watch SHiRE Marketing Boss encrypted OAuth token shire-marketing-token-reload.path loaded active waiting Watch for protected Instagram token reload requests apparmor.service loaded active exited Load AppArmor profiles * auditd.service not-found inactive dead auditd.service shire-academy-autonomous-practice.service loaded inactive dead SHiRE Academy Autonomous Dynamic Dice Envelope Core v3 Practice Worker shire-academy-cadquery-fast.service loaded active running SHiRE Academy Persistent CadQuery Fast Engine shire-academy-safe-autonomous.service loaded inactive dead SHiRE Academy Safe Autonomous Supported-Curriculum Tick shire-academy-ui.service loaded active running SHiRE Academy Local UI shire-agent-hub-tailnet.service loaded inactive dead Private Tailnet proxy for SHiRE Agent Hub shire-agent-hub.service loaded active running SHiRE Specialist Agent Hub shire-brain.service loaded active running SHIRE Brain API Server shire-marketing-boss-tailnet.service loaded active running Private Tailnet proxy for SHiRE Marketing Boss shire-marketing-boss.service loaded active running SHiRE Marketing Boss Drafting Workspace shire-marketing-cloudflare-tunnel.service loaded active running SHiRE Marketing OAuth Cloudflare Tunnel shire-marketing-oauth-callback.service loaded active running SHiRE Marketing OAuth Callback-Only Gate shire-marketing-pipeline.service loaded active running SHiRE Marketing Boss Instagram Production Pipeline shire-marketing-token-backup.service loaded inactive dead Back up Marketing Boss encrypted OAuth token to SHiREVault shire-marketing-token-lifecycle.service loaded inactive dead SHiRE Marketing Boss Instagram Token Lifecycle shire-marketing-token-reload.service loaded inactive dead Reload SHiRE Marketing Boss after protected Instagram token rotation shire-trendscout-tailnet.service loaded active running Private Tailnet proxy for SHiRE TrendScout shire-trendscout-weekly-intelligence.service loaded inactive dead SHiRE TrendScout Weekly Intelligence shire-trendscout.service loaded active running SHiRE TrendScout Native Read-Only Workspace ufw.service loaded active exited Uncomplicated firewall shire-agent-hub-tailnet.socket loaded inactive dead Private Tailnet listener for SHiRE Agent Hub shire-marketing-boss-tailnet.socket loaded active running Private Tailnet listener for SHiRE Marketing Boss shire-trendscout-tailnet.socket loaded active running Private Tailnet socket for SHiRE TrendScout shire-academy-safe-autonomous.timer loaded active waiting Run SHiRE Academy Safe Autonomous Scheduler Every Five Minutes shire-marketing-token-backup.timer loaded active waiting Daily encrypted Marketing Boss OAuth recovery backup shire-marketing-token-lifecycle.timer loaded active waiting Daily SHiRE Instagram long-lived token health check shire-trendscout-weekly-intelligence.timer loaded active waiting Run SHiRE TrendScout Weekly Intelligence === FAILED SERVICES === UNIT LOAD ACTIVE SUB DESCRIPTION * casper-md5check.service loaded failed failed casper-md5check Verify Live ISO checksums Legend: LOAD -> Reflects whether the unit definition was properly loaded. ACTIVE -> The high-level unit activation state, i.e. generalization of SUB. SUB -> The low-level unit activation state, values depend on unit type. 1 loaded units listed. === DISK AND MEMORY === Filesystem Type Size Used Avail Use% Mounted on /dev/sda5 ext4 230G 43G 176G 20% / //192.168.1.1/volume(sda2) cifs 3.7T 740G 3.0T 20% /mnt/shirevault-network total used free shared buff/cache available Mem: 15Gi 2.8Gi 4.8Gi 279Mi 8.4Gi 12Gi Swap: 2.0Gi 4.0Ki 2.0Gi === PRECHECK RESULT === PASS: SHiREVault is backed by an accessible CIFS network mount. PASS: SHiREVault write verification succeeded. PASS: No packages or service settings were changed.