Block a user
84012fab2e
Make the stock nftables unit's stop delete only the mesh's table on nodes that still have it enabled (hq ADR 0100)
0c37d7389d
Guard the store and management ports on adopted nodes, and load the filter through a unit that never flushes the ruleset (hq ADR 0100)
65187d4de0
Wait for a held node without pinning a pool connection, and give up after a bounded wait naming it (hq ADR 0100)
2e6b9d30bd
Give a cascade round's hold back on every return, a body that cannot be marshalled included (hq ADR 0100)
cc47330884
Reload the guard on its table rather than restart it, so a change leaves no port unguarded (hq ADR 0103)
bfe4991dd7
Name every held kind of each module the flip takes in the converge preview and its digest (hq ADR 0103)
689c2c6d33
Hold a node from composing to sending, so a push composed before converge or adopt is never sent after it (hq ADR 0100)
60bb3d895c
Count a unit as found only when the machine runs it or starts it at boot, so a packaged unit nothing ran is not held (hq ADR 0103, found by the adoption bed)
bde5e3461c
Keep the original of any file the host writes over without a record of it, on every node, and name where (hq ADR 0100)
272e1a65ea
Reload the guard for a changed table and restart it only for a changed unit, as the controller declares it (hq ADR 0103)
bd3fd17ad8
Do not count the machine's own plumbing mounted into a container as found data (hq ADR 0103)
019184ec0f
Issue 085: the packages port given at genesis is not a setting, and a later module can undo it
213ab898d6
ADR 0103: what an adopted node holds and what its guard refuses; the node host and connectivity designs name 0102 and 0103
dfadfd23c0
Merge pull request 'ADR 0100 (proposed): a node in use is adopted before it is converged' (#74) from feat/adoption-mode into main
37252f9c3e
ADR 0100: the guard lets the machine itself through; in use is a non-loopback listener; openings say from where; 09 in step with the flip
f3152d827f
ADR 0100 after re-review: the bus and registry stay reachable for enrolment; the mesh guards the store in a table that only refuses; a machine in use defined; the flip refuses while a found container is held; held containers and returning to adopted spelled out
02c40bcab4
ADR 0100 after review: found means unrecorded; assigning prepares, taking cuts over; openings through the found firewall on both paths; the mesh guards its own ports; ports kept as node settings; a converged genesis refuses a machine in use; designs 05, 07, 08, 09 and 17 in step
ADR 0100 (proposed): a node in use is adopted before it is converged
37252f9c3e
ADR 0100: the guard lets the machine itself through; in use is a non-loopback listener; openings say from where; 09 in step with the flip
f3152d827f
ADR 0100 after re-review: the bus and registry stay reachable for enrolment; the mesh guards the store in a table that only refuses; a machine in use defined; the flip refuses while a found container is held; held containers and returning to adopted spelled out
02c40bcab4
ADR 0100 after review: found means unrecorded; assigning prepares, taking cuts over; openings through the found firewall on both paths; the mesh guards its own ports; ports kept as node settings; a converged genesis refuses a machine in use; designs 05, 07, 08, 09 and 17 in step
111456abb5
ADR 0100 accepted; the node host, connectivity, the node lifecycle and raising a mesh amended for a node adopted before it is converged
ADR 0100 (proposed): a node in use is adopted before it is converged
5fc3cbde4c
Research 012: migrating a node that is in use, measured on the control-node; ADR 0100 proposed — a node in use is adopted before it is converged
21baf397a8
Merge pull request 'Issue 083 resolved: nothing the control queue carries is lost while the store restarts' (#73) from multiple-fixes into main
4de74880cb
Issue 083: the proof, the replay caveat, and what is not closed, as three reviews found them
266ee34b5c
Issue 083: the diagnosis describes held messages, the enrolment's order, and what is not closed
2d45aa5f42
Issue 083 resolved: nothing the control queue carries is lost while the store restarts; an enrolment claims its token and spends it last