From cfb7baaf1b2e3c1447777e49cab82da0e3a05cbb Mon Sep 17 00:00:00 2001 From: jochen Date: Sun, 27 Sep 2026 00:53:13 +0200 Subject: [PATCH] 0119 review: rollback needs the private network unassigned first; a configuration written back is retired again with the first original kept; only the interface's own file, never a link --- .../0119-a-taken-tunnels-predecessor-is-retired.md | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/02-DECISIONS/0119-a-taken-tunnels-predecessor-is-retired.md b/02-DECISIONS/0119-a-taken-tunnels-predecessor-is-retired.md index 89db5b1..40f8f33 100644 --- a/02-DECISIONS/0119-a-taken-tunnels-predecessor-is-retired.md +++ b/02-DECISIONS/0119-a-taken-tunnels-predecessor-is-retired.md @@ -64,8 +64,17 @@ is removed from where its unit reads it.** carries the same key, port, address and peers. - A take that is never proven — no peer ever handshakes — keeps the found configuration, and the node says so, so a broken take is visible rather than silently retired. -- Rolling back to the predecessor's tunnel becomes a deliberate act: copy the kept original back - and start its unit. The mesh does neither. +- Rolling back to the predecessor's tunnel becomes a deliberate act, in this order: **unassign the + private network first**, then copy the kept original back and start its unit. The mesh does + neither. While the private network is still assigned, the tunnel is the mesh's: a restored + configuration is held and retired again at the next proven apply, and the found unit cannot + bind the port the mesh's interface holds. The node says so when it happens. +- A configuration something keeps writing back — the predecessor's own tooling, say — is retired + again each time it appears, but the first original stays the one kept; a different content is + kept once beside it, and the node reports that the configuration came back. +- The host retires only the found interface's own configuration file (`/etc/wireguard/.conf`), + never a path the mesh writes, and never a link: a configuration that is a link to somewhere else + is left, with its target, for a person to retire. - 0105's "its configuration stays on disk, kept like any held file" holds until the take is proven, and not after.