proxmox/scripts/verify

Verification Scripts

Scripts for ingress, NPMplus, DNS, and source-of-truth verification.

Dependencies

Required tools (install before running):

Tool	Purpose	Install
bash	Shell (4.0+)	Default on most systems
curl	API calls, HTTP	apt install curl
jq	JSON parsing	apt install jq
dig	DNS resolution	apt install dnsutils
openssl	SSL certificate inspection	apt install openssl
ssh	Remote execution	apt install openssh-client
ss	Port checking	apt install iproute2
systemctl	Service status	System (systemd)
sqlite3	Database backup	apt install sqlite3

Optional (recommended for automation): sshpass, rsync, screen, tmux, htop, shellcheck, parallel. See docs/11-references/APT_PACKAGES_CHECKLIST.md § Automation / jump host.
One-line install (Debian/Ubuntu): sudo apt install -y sshpass rsync dnsutils iproute2 screen tmux htop shellcheck parallel

Tool	Purpose
wscat or websocat	WebSocket testing (manual verification)

Scripts

• backup-npmplus.sh - Full NPMplus backup (database, API exports, certificates)
• check-contracts-on-chain-138.sh - Check that Chain 138 deployed contracts have bytecode on-chain (cast code for 31 addresses; requires cast and RPC access). Use [RPC_URL] or env RPC_URL_138; --dry-run lists addresses only (no RPC calls); SKIP_EXIT=1 to exit 0 when RPC unreachable.
• reconcile-env-canonical.sh - Emit recommended .env lines for Chain 138 (canonical source of truth); use to reconcile smom-dbis-138/.env with CONTRACT_ADDRESSES_REFERENCE. Usage: ./scripts/verify/reconcile-env-canonical.sh [--print]
• check-deployer-balance-blockscout-vs-rpc.sh - Compare deployer native balance from Blockscout API vs RPC (to verify index matches current chain); see EXPLORER_AND_BLOCKSCAN_REFERENCE
• check-dependencies.sh - Verify required tools (bash, curl, jq, openssl, ssh)
• export-cloudflare-dns-records.sh - Export Cloudflare DNS records
• export-npmplus-config.sh - Export NPMplus proxy hosts and certificates via API
• generate-source-of-truth.sh - Combine verification outputs into canonical JSON
• run-full-verification.sh - Run full verification suite
• verify-backend-vms.sh - Verify backend VMs (status, IPs, nginx configs)
• verify-end-to-end-routing.sh - E2E routing verification
• verify-udm-pro-port-forwarding.sh - UDM Pro port forwarding checks
• verify-websocket.sh - WebSocket connectivity test (requires websocat or wscat)

Task runners (no LAN vs from LAN)

• From anywhere (no LAN/creds): ../run-completable-tasks-from-anywhere.sh — runs config validation, on-chain contract check, run-all-validation --skip-genesis, and reconcile-env-canonical.
• From LAN (NPM_PASSWORD, optional PRIVATE_KEY): ../run-operator-tasks-from-lan.sh — runs W0-1 (NPMplus RPC fix), W0-3 (NPMplus backup), O-1 (Blockscout verification); use --dry-run to print commands only. See ALL_TASKS_DETAILED_STEPS.

Environment

Set variables in .env or export before running. See project root .env.example and docs/04-configuration/VERIFICATION_GAPS_AND_TODOS.md.