G17 CAPTURE -- vr1-dc0 -- FROM A BOOTED NODE
============================================
host=moved-troll addr=10.12.8.5/22 utc=2026-07-30T13:05:51Z

NODE IDENTITY (stated, not glossed): this is the DC0 Juju controller VM
vr1-dc0-juju-01 / MAAS 7n87bt, booted on its real NICs on metal-admin during the
2026-07-30 bootstrap attempt. It sits on the ruled dc0 artifact path
(metal-admin -> 10.12.8.4). It is NOT one of the nine OpenStack role nodes; those
were still powered off. Judge the scope of this capture accordingly.

--- (1) ARTIFACT REACHABILITY -- asserted on CONTENT, with an exit-code predicate ---
    URL is a REAL package path, never the nginx autoindex root (which answers 200 empty).
    curl exit=0  bytes=269218
  OK   mirror served a REAL jammy Release; asserted on four body fields:
         Origin: Ubuntu
         Label: Ubuntu
         Suite: jammy
         Version: 22.04
         Codename: jammy
         Date: Thu, 21 Apr 2022 17:16:08 UTC
         Architectures: amd64 arm64 armhf i386 ppc64el riscv64 s390x
         Components: main restricted universe multiverse

--- (2) NODE TIME SOURCE -- MAAS-served, NOT the DC edge (D-129(iv)) ---
    G17's text names 'chronyc sources'. MEASURED: chrony is NOT INSTALLED on the
    MAAS jammy image; the node runs systemd-timesyncd. Reading the stack that EXISTS.
         SystemNTPServers = 10.12.8.2
         ServerAddress    = 10.12.8.2
         NTPSynchronized  = yes
         NTPMessage={ Leap=0, Version=4, Mode=4, Stratum=4, Precision=-24, RootDelay=110.733ms, RootDispersion=2.517ms, Reference=AC1F0001, OriginateTimestamp=Thu 2026-07-30 12:42:56 UTC, ReceiveTimestamp=Thu 2026-07-30 12:42:56 UTC, TransmitTimestamp=Thu 2026-07-30 12:42:56 UTC, DestinationTimestamp=Thu 2026-07-30 12:42:56 UTC, Ignored=no PacketCount=8, Jitter=1.651ms }
  OK   time source is 10.12.8.2 = the DC RACK's metal-admin leg (the MAAS rack
       controller), i.e. the MAAS-served hierarchy, and NOT the DC edge.

--- (3) SUPPORTING CONTEXT (recorded, not gated) ---
    resolver:      Current DNS Server: 10.12.8.3
    default route: 
    ^ EMPTY BY MEASUREMENT. The controller VM was carved on metal-admin ONLY, so it
      has no default route and no internet path -- which is why the bootstrap could
      not fetch the juju agent stream. Role nodes DO carry a provider-public leg with
      gw 10.12.4.1. This is the under-carve, not an artifact-path fault.

G17 (vr1-dc0): BOTH GATED ASSERTIONS PASS