--- /srv/rebuilderd/tmp/rebuilderdRVbDiy/inputs/vmms-common_0.0.11_all.deb
+++ /srv/rebuilderd/tmp/rebuilderdRVbDiy/out/vmms-common_0.0.11_all.deb
├── file list
│ @@ -1,3 +1,3 @@
│  -rw-r--r--   0        0        0        4 2026-09-08 11:42:36.000000 debian-binary
│ --rw-r--r--   0        0        0    21068 2026-09-08 11:42:36.000000 control.tar.xz
│ --rw-r--r--   0        0        0    11116 2026-09-08 11:42:36.000000 data.tar.xz
│ +-rw-r--r--   0        0        0    21072 2026-09-08 11:42:36.000000 control.tar.xz
│ +-rw-r--r--   0        0        0    11120 2026-09-08 11:42:36.000000 data.tar.xz
├── control.tar.xz
│ ├── control.tar
│ │ ├── ./md5sums
│ │ │ ├── ./md5sums
│ │ │ │┄ Files differ
├── data.tar.xz
│ ├── data.tar
│ │ ├── file list
│ │ │ @@ -11,10 +11,10 @@
│ │ │  -rwxr-xr-x   0 root         (0) root         (0)      151 2026-09-08 11:42:36.000000 ./usr/bin/vmms-worker
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2026-09-08 11:42:36.000000 ./usr/share/
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2026-09-08 11:42:36.000000 ./usr/share/doc/
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2026-09-08 11:42:36.000000 ./usr/share/doc/vmms-common/
│ │ │  -rw-r--r--   0 root         (0) root         (0)      709 2026-09-08 11:42:36.000000 ./usr/share/doc/vmms-common/changelog.gz
│ │ │  -rw-r--r--   0 root         (0) root         (0)      932 2026-09-08 11:42:36.000000 ./usr/share/doc/vmms-common/copyright
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2026-09-08 11:42:36.000000 ./usr/share/vmms-common/
│ │ │ --rw-r--r--   0 root         (0) root         (0)    39011 2026-09-08 11:42:36.000000 ./usr/share/vmms-common/vmms.conf
│ │ │ +-rw-r--r--   0 root         (0) root         (0)    39145 2026-09-08 11:42:36.000000 ./usr/share/vmms-common/vmms.conf
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2026-09-08 11:42:36.000000 ./usr/share/vmms-common/workflows/
│ │ │  -rw-r--r--   0 root         (0) root         (0)      985 2026-09-08 11:42:36.000000 ./usr/share/vmms-common/workflows/migrate_vm_workflow.yaml.j2
│ │ ├── ./usr/share/vmms-common/vmms.conf
│ │ │ @@ -413,71 +413,53 @@
│ │ │  
│ │ │  # Config Section from which to load plugin specific options (string value)
│ │ │  #auth_section = <None>
│ │ │  
│ │ │  # Authentication URL (string value)
│ │ │  #auth_url = <None>
│ │ │  
│ │ │ -# Domain ID to scope to (string value)
│ │ │ -#domain_id = <None>
│ │ │ -
│ │ │ -# Domain name to scope to (string value)
│ │ │ -#domain_name = <None>
│ │ │ -
│ │ │ -# Project ID to scope to (string value)
│ │ │ -#project_id = <None>
│ │ │ -
│ │ │ -# Project name to scope to (string value)
│ │ │ -#project_name = <None>
│ │ │ -
│ │ │ -# Domain ID containing project (string value)
│ │ │ -#project_domain_id = <None>
│ │ │ +# Tenant ID (string value)
│ │ │ +#tenant_id = <None>
│ │ │  
│ │ │ -# Domain name containing project (string value)
│ │ │ -#project_domain_name = <None>
│ │ │ +# Tenant Name (string value)
│ │ │ +#tenant_name = <None>
│ │ │  
│ │ │ -# The endpoint that will always be used (string value)
│ │ │ -# Deprecated group/name - [mistral]/url
│ │ │ -#endpoint = <None>
│ │ │ +# ID of the trust to use as a trustee use (string value)
│ │ │ +#trust_id = <None>
│ │ │  
│ │ │  # User's username (string value)
│ │ │  # Deprecated group/name - [mistral]/user_name
│ │ │  #username = <None>
│ │ │  
│ │ │ -# Password (string value)
│ │ │ +# User's user ID (string value)
│ │ │ +#user_id = <None>
│ │ │ +
│ │ │ +# User's password (string value)
│ │ │  #password = <None>
│ │ │  
│ │ │  # Scope for system operations (string value)
│ │ │  #system_scope = <None>
│ │ │  
│ │ │ -# ID of the trust to use as a trustee use (string value)
│ │ │ -#trust_id = <None>
│ │ │ -
│ │ │ -# Endpoint for OAuth2.0 (string value)
│ │ │ -#oauth2_endpoint = <None>
│ │ │ -
│ │ │ -# Client id for OAuth2.0 (string value)
│ │ │ -#oauth2_client_id = <None>
│ │ │ +# Domain ID to scope to (string value)
│ │ │ +#domain_id = <None>
│ │ │  
│ │ │ -# The token that will always be used (string value)
│ │ │ -#token = <None>
│ │ │ +# Domain name to scope to (string value)
│ │ │ +#domain_name = <None>
│ │ │  
│ │ │ -# Optional domain ID to use with v3 and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │ -# authentication. (string value)
│ │ │ -#default_domain_id = <None>
│ │ │ +# Project ID to scope to (string value)
│ │ │ +#project_id = <None>
│ │ │  
│ │ │ -# Optional domain name to use with v3 API and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │ -# authentication. (string value)
│ │ │ -#default_domain_name = <None>
│ │ │ +# Project name to scope to (string value)
│ │ │ +#project_name = <None>
│ │ │  
│ │ │ -# Tenant ID (string value)
│ │ │ -#tenant_id = <None>
│ │ │ +# Domain ID containing project (string value)
│ │ │ +#project_domain_id = <None>
│ │ │  
│ │ │ -# Tenant Name (string value)
│ │ │ -#tenant_name = <None>
│ │ │ +# Domain name containing project (string value)
│ │ │ +#project_domain_name = <None>
│ │ │  
│ │ │  # Identity Provider's name (string value)
│ │ │  #identity_provider = <None>
│ │ │  
│ │ │  # Protocol for federated plugin (string value)
│ │ │  #protocol = <None>
│ │ │  
│ │ │ @@ -499,82 +481,100 @@
│ │ │  # authentication endpoint. This URL should look like https://idp.example.org/.well-known/openid-configuration (string value)
│ │ │  #discovery_endpoint = <None>
│ │ │  
│ │ │  # OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token
│ │ │  # introspection. Valid values are: "access_token" or "id_token" (string value)
│ │ │  #access_token_type = <None>
│ │ │  
│ │ │ -# OAuth 2.0 Device Authorization Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │ -# by the server in the discovery document. (string value)
│ │ │ -#device_authorization_endpoint = <None>
│ │ │ +# OAuth Consumer ID/Key (string value)
│ │ │ +#consumer_key = <None>
│ │ │  
│ │ │ -# PKCE Challenge Method (RFC 7636) (string value)
│ │ │ -#code_challenge_method = <None>
│ │ │ +# OAuth Consumer Secret (string value)
│ │ │ +#consumer_secret = <None>
│ │ │  
│ │ │ -# User's user ID (string value)
│ │ │ -#user_id = <None>
│ │ │ +# OAuth Access Key (string value)
│ │ │ +#access_key = <None>
│ │ │ +
│ │ │ +# OAuth Access Secret (string value)
│ │ │ +#access_secret = <None>
│ │ │ +
│ │ │ +# Endpoint for OAuth2.0 Mutual-TLS Authorization (string value)
│ │ │ +#oauth2_endpoint = <None>
│ │ │ +
│ │ │ +# Client credential ID for OAuth2.0 Mutual-TLS Authorization (string value)
│ │ │ +#oauth2_client_id = <None>
│ │ │ +
│ │ │ +# Client secret for OAuth2.0 (string value)
│ │ │ +#oauth2_client_secret = <None>
│ │ │  
│ │ │  # User's domain ID (string value)
│ │ │  #user_domain_id = <None>
│ │ │  
│ │ │  # User's domain name (string value)
│ │ │  #user_domain_name = <None>
│ │ │  
│ │ │ -# OAuth 2.0 Access Token (string value)
│ │ │ -#access_token = <None>
│ │ │ +# Application credential auth secret (string value)
│ │ │ +#application_credential_secret = <None>
│ │ │ +
│ │ │ +# Application credential ID (string value)
│ │ │ +#application_credential_id = <None>
│ │ │ +
│ │ │ +# Application credential name (string value)
│ │ │ +#application_credential_name = <None>
│ │ │ +
│ │ │ +# The endpoint that will always be used (string value)
│ │ │ +# Deprecated group/name - [mistral]/url
│ │ │ +#endpoint = <None>
│ │ │ +
│ │ │ +# The token that will always be used (string value)
│ │ │ +#token = <None>
│ │ │ +
│ │ │ +# Optional domain ID to use with v3 and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │ +# authentication. (string value)
│ │ │ +#default_domain_id = <None>
│ │ │ +
│ │ │ +# Optional domain name to use with v3 API and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │ +# authentication. (string value)
│ │ │ +#default_domain_name = <None>
│ │ │ +
│ │ │ +# A key to be used in the Identity Provider access token endpoint to pass the OTP value. E.g. totp (string value)
│ │ │ +#idp_otp_key = <None>
│ │ │  
│ │ │ -# An Identity Provider URL, where the SAML2 authentication request will be sent. (string value)
│ │ │ +# An Identity Provider URL, where the SAML authentication request will be sent. (string value)
│ │ │  #identity_provider_url = <None>
│ │ │  
│ │ │  # Service Provider's Endpoint (string value)
│ │ │  #service_provider_endpoint = <None>
│ │ │  
│ │ │  # Service Provider's SAML Entity ID (string value)
│ │ │  #service_provider_entity_id = <None>
│ │ │  
│ │ │ -# OAuth Consumer ID/Key (string value)
│ │ │ -#consumer_key = <None>
│ │ │ -
│ │ │ -# OAuth Consumer Secret (string value)
│ │ │ -#consumer_secret = <None>
│ │ │ -
│ │ │ -# OAuth Access Key (string value)
│ │ │ -#access_key = <None>
│ │ │ -
│ │ │ -# OAuth Access Secret (string value)
│ │ │ -#access_secret = <None>
│ │ │ +# OAuth 2.0 Access Token (string value)
│ │ │ +#access_token = <None>
│ │ │  
│ │ │  # Methods to authenticate with. (string value)
│ │ │  #auth_methods = <None>
│ │ │  
│ │ │  # User's TOTP passcode (string value)
│ │ │  #passcode = <None>
│ │ │  
│ │ │ +# OAuth 2.0 Device Authorization Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │ +# by the server in the discovery document. (string value)
│ │ │ +#device_authorization_endpoint = <None>
│ │ │ +
│ │ │ +# PKCE Challenge Method (RFC 7636) (string value)
│ │ │ +#code_challenge_method = <None>
│ │ │ +
│ │ │  # OpenID Connect Redirect URL (string value)
│ │ │  #redirect_uri = <None>
│ │ │  
│ │ │  # OAuth 2.0 Authorization Code (string value)
│ │ │  # Deprecated group/name - [mistral]/authorization_code
│ │ │  #code = <None>
│ │ │  
│ │ │ -# A key to be used in the Identity Provider access token endpoint to pass the OTP value. E.g. totp (string value)
│ │ │ -#idp_otp_key = <None>
│ │ │ -
│ │ │ -# Application credential auth secret (string value)
│ │ │ -#application_credential_secret = <None>
│ │ │ -
│ │ │ -# Application credential ID (string value)
│ │ │ -#application_credential_id = <None>
│ │ │ -
│ │ │ -# Application credential name (string value)
│ │ │ -#application_credential_name = <None>
│ │ │ -
│ │ │ -# Client secret for OAuth2.0 (string value)
│ │ │ -#oauth2_client_secret = <None>
│ │ │ -
│ │ │  # PEM encoded Certificate Authority to use when verifying HTTPs connections. (string value)
│ │ │  #cafile = <None>
│ │ │  
│ │ │  # PEM encoded client certificate cert file (string value)
│ │ │  #certfile = <None>
│ │ │  
│ │ │  # PEM encoded client certificate key file (string value)
│ │ │ @@ -713,71 +713,53 @@
│ │ │  
│ │ │  # Config Section from which to load plugin specific options (string value)
│ │ │  #auth_section = <None>
│ │ │  
│ │ │  # Authentication URL (string value)
│ │ │  #auth_url = <None>
│ │ │  
│ │ │ -# Domain ID to scope to (string value)
│ │ │ -#domain_id = <None>
│ │ │ -
│ │ │ -# Domain name to scope to (string value)
│ │ │ -#domain_name = <None>
│ │ │ -
│ │ │ -# Project ID to scope to (string value)
│ │ │ -#project_id = <None>
│ │ │ -
│ │ │ -# Project name to scope to (string value)
│ │ │ -#project_name = <None>
│ │ │ -
│ │ │ -# Domain ID containing project (string value)
│ │ │ -#project_domain_id = <None>
│ │ │ +# Tenant ID (string value)
│ │ │ +#tenant_id = <None>
│ │ │  
│ │ │ -# Domain name containing project (string value)
│ │ │ -#project_domain_name = <None>
│ │ │ +# Tenant Name (string value)
│ │ │ +#tenant_name = <None>
│ │ │  
│ │ │ -# The endpoint that will always be used (string value)
│ │ │ -# Deprecated group/name - [source_cloud]/url
│ │ │ -#endpoint = <None>
│ │ │ +# ID of the trust to use as a trustee use (string value)
│ │ │ +#trust_id = <None>
│ │ │  
│ │ │  # User's username (string value)
│ │ │  # Deprecated group/name - [source_cloud]/user_name
│ │ │  #username = <None>
│ │ │  
│ │ │ -# Password (string value)
│ │ │ +# User's user ID (string value)
│ │ │ +#user_id = <None>
│ │ │ +
│ │ │ +# User's password (string value)
│ │ │  #password = <None>
│ │ │  
│ │ │  # Scope for system operations (string value)
│ │ │  #system_scope = <None>
│ │ │  
│ │ │ -# ID of the trust to use as a trustee use (string value)
│ │ │ -#trust_id = <None>
│ │ │ -
│ │ │ -# Endpoint for OAuth2.0 (string value)
│ │ │ -#oauth2_endpoint = <None>
│ │ │ -
│ │ │ -# Client id for OAuth2.0 (string value)
│ │ │ -#oauth2_client_id = <None>
│ │ │ +# Domain ID to scope to (string value)
│ │ │ +#domain_id = <None>
│ │ │  
│ │ │ -# The token that will always be used (string value)
│ │ │ -#token = <None>
│ │ │ +# Domain name to scope to (string value)
│ │ │ +#domain_name = <None>
│ │ │  
│ │ │ -# Optional domain ID to use with v3 and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │ -# authentication. (string value)
│ │ │ -#default_domain_id = <None>
│ │ │ +# Project ID to scope to (string value)
│ │ │ +#project_id = <None>
│ │ │  
│ │ │ -# Optional domain name to use with v3 API and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │ -# authentication. (string value)
│ │ │ -#default_domain_name = <None>
│ │ │ +# Project name to scope to (string value)
│ │ │ +#project_name = <None>
│ │ │  
│ │ │ -# Tenant ID (string value)
│ │ │ -#tenant_id = <None>
│ │ │ +# Domain ID containing project (string value)
│ │ │ +#project_domain_id = <None>
│ │ │  
│ │ │ -# Tenant Name (string value)
│ │ │ -#tenant_name = <None>
│ │ │ +# Domain name containing project (string value)
│ │ │ +#project_domain_name = <None>
│ │ │  
│ │ │  # Identity Provider's name (string value)
│ │ │  #identity_provider = <None>
│ │ │  
│ │ │  # Protocol for federated plugin (string value)
│ │ │  #protocol = <None>
│ │ │  
│ │ │ @@ -799,82 +781,100 @@
│ │ │  # authentication endpoint. This URL should look like https://idp.example.org/.well-known/openid-configuration (string value)
│ │ │  #discovery_endpoint = <None>
│ │ │  
│ │ │  # OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token
│ │ │  # introspection. Valid values are: "access_token" or "id_token" (string value)
│ │ │  #access_token_type = <None>
│ │ │  
│ │ │ -# OAuth 2.0 Device Authorization Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │ -# by the server in the discovery document. (string value)
│ │ │ -#device_authorization_endpoint = <None>
│ │ │ +# OAuth Consumer ID/Key (string value)
│ │ │ +#consumer_key = <None>
│ │ │  
│ │ │ -# PKCE Challenge Method (RFC 7636) (string value)
│ │ │ -#code_challenge_method = <None>
│ │ │ +# OAuth Consumer Secret (string value)
│ │ │ +#consumer_secret = <None>
│ │ │  
│ │ │ -# User's user ID (string value)
│ │ │ -#user_id = <None>
│ │ │ +# OAuth Access Key (string value)
│ │ │ +#access_key = <None>
│ │ │ +
│ │ │ +# OAuth Access Secret (string value)
│ │ │ +#access_secret = <None>
│ │ │ +
│ │ │ +# Endpoint for OAuth2.0 Mutual-TLS Authorization (string value)
│ │ │ +#oauth2_endpoint = <None>
│ │ │ +
│ │ │ +# Client credential ID for OAuth2.0 Mutual-TLS Authorization (string value)
│ │ │ +#oauth2_client_id = <None>
│ │ │ +
│ │ │ +# Client secret for OAuth2.0 (string value)
│ │ │ +#oauth2_client_secret = <None>
│ │ │  
│ │ │  # User's domain ID (string value)
│ │ │  #user_domain_id = <None>
│ │ │  
│ │ │  # User's domain name (string value)
│ │ │  #user_domain_name = <None>
│ │ │  
│ │ │ -# OAuth 2.0 Access Token (string value)
│ │ │ -#access_token = <None>
│ │ │ +# Application credential auth secret (string value)
│ │ │ +#application_credential_secret = <None>
│ │ │ +
│ │ │ +# Application credential ID (string value)
│ │ │ +#application_credential_id = <None>
│ │ │ +
│ │ │ +# Application credential name (string value)
│ │ │ +#application_credential_name = <None>
│ │ │ +
│ │ │ +# The endpoint that will always be used (string value)
│ │ │ +# Deprecated group/name - [source_cloud]/url
│ │ │ +#endpoint = <None>
│ │ │ +
│ │ │ +# The token that will always be used (string value)
│ │ │ +#token = <None>
│ │ │ +
│ │ │ +# Optional domain ID to use with v3 and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │ +# authentication. (string value)
│ │ │ +#default_domain_id = <None>
│ │ │ +
│ │ │ +# Optional domain name to use with v3 API and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │ +# authentication. (string value)
│ │ │ +#default_domain_name = <None>
│ │ │ +
│ │ │ +# A key to be used in the Identity Provider access token endpoint to pass the OTP value. E.g. totp (string value)
│ │ │ +#idp_otp_key = <None>
│ │ │  
│ │ │ -# An Identity Provider URL, where the SAML2 authentication request will be sent. (string value)
│ │ │ +# An Identity Provider URL, where the SAML authentication request will be sent. (string value)
│ │ │  #identity_provider_url = <None>
│ │ │  
│ │ │  # Service Provider's Endpoint (string value)
│ │ │  #service_provider_endpoint = <None>
│ │ │  
│ │ │  # Service Provider's SAML Entity ID (string value)
│ │ │  #service_provider_entity_id = <None>
│ │ │  
│ │ │ -# OAuth Consumer ID/Key (string value)
│ │ │ -#consumer_key = <None>
│ │ │ -
│ │ │ -# OAuth Consumer Secret (string value)
│ │ │ -#consumer_secret = <None>
│ │ │ -
│ │ │ -# OAuth Access Key (string value)
│ │ │ -#access_key = <None>
│ │ │ -
│ │ │ -# OAuth Access Secret (string value)
│ │ │ -#access_secret = <None>
│ │ │ +# OAuth 2.0 Access Token (string value)
│ │ │ +#access_token = <None>
│ │ │  
│ │ │  # Methods to authenticate with. (string value)
│ │ │  #auth_methods = <None>
│ │ │  
│ │ │  # User's TOTP passcode (string value)
│ │ │  #passcode = <None>
│ │ │  
│ │ │ +# OAuth 2.0 Device Authorization Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │ +# by the server in the discovery document. (string value)
│ │ │ +#device_authorization_endpoint = <None>
│ │ │ +
│ │ │ +# PKCE Challenge Method (RFC 7636) (string value)
│ │ │ +#code_challenge_method = <None>
│ │ │ +
│ │ │  # OpenID Connect Redirect URL (string value)
│ │ │  #redirect_uri = <None>
│ │ │  
│ │ │  # OAuth 2.0 Authorization Code (string value)
│ │ │  # Deprecated group/name - [source_cloud]/authorization_code
│ │ │  #code = <None>
│ │ │  
│ │ │ -# A key to be used in the Identity Provider access token endpoint to pass the OTP value. E.g. totp (string value)
│ │ │ -#idp_otp_key = <None>
│ │ │ -
│ │ │ -# Application credential auth secret (string value)
│ │ │ -#application_credential_secret = <None>
│ │ │ -
│ │ │ -# Application credential ID (string value)
│ │ │ -#application_credential_id = <None>
│ │ │ -
│ │ │ -# Application credential name (string value)
│ │ │ -#application_credential_name = <None>
│ │ │ -
│ │ │ -# Client secret for OAuth2.0 (string value)
│ │ │ -#oauth2_client_secret = <None>
│ │ │ -
│ │ │  # PEM encoded Certificate Authority to use when verifying HTTPs connections. (string value)
│ │ │  #cafile = <None>
│ │ │  
│ │ │  # PEM encoded client certificate cert file (string value)
│ │ │  #certfile = <None>
│ │ │  
│ │ │  # PEM encoded client certificate key file (string value)