Block a user
Adoption bed: a machine in use raised adopted, held, taken and converged (hq ADR 0100–0103)
Adoption mode: guards, and a filter unit that never flushes the ruleset (hq ADR 0100, 0103)
Adoption mode: a node in use is adopted before it is converged (hq ADR 0100–0103)
Adoption mode: a node in use is adopted before it is converged (hq ADR 0100–0103)
8d9e4bdb77
Adoption bed: the container probe asks the guard's promise, admitting the container interface through the found firewall for itself alone
3f224c2876
Adoption bed: an opening the operator's own rule answers is satisfied, and a failed container probe records its evidence
a53dc8c586
Adoption bed (in progress): a machine in use raised adopted, held, opened through its firewall, taken and converged (hq ADR 0100-0103)
84012fab2e
Make the stock nftables unit's stop delete only the mesh's table on nodes that still have it enabled (hq ADR 0100)
0c37d7389d
Guard the store and management ports on adopted nodes, and load the filter through a unit that never flushes the ruleset (hq ADR 0100)
65187d4de0
Wait for a held node without pinning a pool connection, and give up after a bounded wait naming it (hq ADR 0100)
2e6b9d30bd
Give a cascade round's hold back on every return, a body that cannot be marshalled included (hq ADR 0100)
cc47330884
Reload the guard on its table rather than restart it, so a change leaves no port unguarded (hq ADR 0103)
bfe4991dd7
Name every held kind of each module the flip takes in the converge preview and its digest (hq ADR 0103)
689c2c6d33
Hold a node from composing to sending, so a push composed before converge or adopt is never sent after it (hq ADR 0100)
60bb3d895c
Count a unit as found only when the machine runs it or starts it at boot, so a packaged unit nothing ran is not held (hq ADR 0103, found by the adoption bed)
bde5e3461c
Keep the original of any file the host writes over without a record of it, on every node, and name where (hq ADR 0100)
272e1a65ea
Reload the guard for a changed table and restart it only for a changed unit, as the controller declares it (hq ADR 0103)
bd3fd17ad8
Do not count the machine's own plumbing mounted into a container as found data (hq ADR 0103)
019184ec0f
Issue 085: the packages port given at genesis is not a setting, and a later module can undo it
213ab898d6
ADR 0103: what an adopted node holds and what its guard refuses; the node host and connectivity designs name 0102 and 0103
dfadfd23c0
Merge pull request 'ADR 0100 (proposed): a node in use is adopted before it is converged' (#74) from feat/adoption-mode into main
37252f9c3e
ADR 0100: the guard lets the machine itself through; in use is a non-loopback listener; openings say from where; 09 in step with the flip
f3152d827f
ADR 0100 after re-review: the bus and registry stay reachable for enrolment; the mesh guards the store in a table that only refuses; a machine in use defined; the flip refuses while a found container is held; held containers and returning to adopted spelled out
02c40bcab4
ADR 0100 after review: found means unrecorded; assigning prepares, taking cuts over; openings through the found firewall on both paths; the mesh guards its own ports; ports kept as node settings; a converged genesis refuses a machine in use; designs 05, 07, 08, 09 and 17 in step
ADR 0100 (proposed): a node in use is adopted before it is converged
37252f9c3e
ADR 0100: the guard lets the machine itself through; in use is a non-loopback listener; openings say from where; 09 in step with the flip
f3152d827f
ADR 0100 after re-review: the bus and registry stay reachable for enrolment; the mesh guards the store in a table that only refuses; a machine in use defined; the flip refuses while a found container is held; held containers and returning to adopted spelled out