From 966fed1829e6ad021ff409d8bf665ab1d6ea0023 Mon Sep 17 00:00:00 2001
From: jochen <jschoubben@gmail.com>
Date: Thu, 1 Oct 2026 15:58:05 +0200
Subject: [PATCH] The vault claims mesh-vault, and each uplink holder declares
 the manager it speaks for (hq ADR 0161)

The vault's claim makes a second provider of secret a second claimant, refused by name. The three
uplink definitions declare uplink-networkmanager, uplink-systemd-networkd and uplink-dhcpcd, which the
host reports for the manager it finds active, so the holder for a manager the machine does not run
is refused the way any missing capability is. Merges after the controller holds the seat and the host
reports the capability.
---
 modules/dhcpcd/module.json           | 3 ++-
 modules/mesh-vault/module.json       | 8 +++++++-
 modules/networkmanager/module.json   | 3 ++-
 modules/systemd-networkd/module.json | 3 ++-
 4 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/modules/dhcpcd/module.json b/modules/dhcpcd/module.json
index 89ffe07..23c658e 100644
--- a/modules/dhcpcd/module.json
+++ b/modules/dhcpcd/module.json
@@ -3,7 +3,8 @@
   "version": "1",
   "capabilities": [
     "package-manager",
-    "service-manager"
+    "service-manager",
+    "uplink-dhcpcd"
   ],
   "claims": [
     {
diff --git a/modules/mesh-vault/module.json b/modules/mesh-vault/module.json
index 991e237..8b51fca 100644
--- a/modules/mesh-vault/module.json
+++ b/modules/mesh-vault/module.json
@@ -98,5 +98,11 @@
         "from": "Dockerfile"
       }
     ]
-  }
+  },
+  "claims": [
+    {
+      "name": "mesh-vault",
+      "scope": "mesh"
+    }
+  ]
 }
diff --git a/modules/networkmanager/module.json b/modules/networkmanager/module.json
index 5aaa8f6..37c2ba7 100644
--- a/modules/networkmanager/module.json
+++ b/modules/networkmanager/module.json
@@ -3,7 +3,8 @@
   "version": "1",
   "capabilities": [
     "package-manager",
-    "service-manager"
+    "service-manager",
+    "uplink-networkmanager"
   ],
   "claims": [
     {
diff --git a/modules/systemd-networkd/module.json b/modules/systemd-networkd/module.json
index 040b67e..370cf1d 100644
--- a/modules/systemd-networkd/module.json
+++ b/modules/systemd-networkd/module.json
@@ -3,7 +3,8 @@
   "version": "1",
   "capabilities": [
     "package-manager",
-    "service-manager"
+    "service-manager",
+    "uplink-systemd-networkd"
   ],
   "claims": [
     {