diff --git a/modules/mesh-build-go/README.md b/modules/mesh-build-go/README.md index 9bf8b620..88bd48a9 100644 --- a/modules/mesh-build-go/README.md +++ b/modules/mesh-build-go/README.md @@ -2,8 +2,8 @@ Design 47, release R4c-3 (novox/hq ADR 0405, ADR 0466 §1, ADR 0469, ADR 0470). The module that builds and checks Go code on a build machine, as an account of its own (`runs-as`, no login shell, home at mode 0700), with the -toolchain installed as the packages it declares (`go`, `git`, `openssh`, `postgresql`) and the capability -`user-namespaces`. It claims no seat: it is assigned to the build machines (ADR 0469 §6) and runs dark until the +toolchain installed as the packages it declares (`git`, `openssh`, `postgresql`; `go` comes from the `go` module, which this module requires as `go-toolchain`) and the capability +`user-namespaces`. It claims no seat: it is assigned to the build machines (ADR 0469 clause 6) and runs dark until the builder uses it. ## The recipe diff --git a/modules/mesh-build-node/README.md b/modules/mesh-build-node/README.md index 556cb1ee..9ade36fc 100644 --- a/modules/mesh-build-node/README.md +++ b/modules/mesh-build-node/README.md @@ -2,8 +2,8 @@ Design 47, release R4c-3 (novox/hq ADR 0405, ADR 0466 §1, ADR 0469 §1 and §4). The module that builds and checks TypeScript code on a build machine, as an account of its own (`runs-as`, no login shell, home at mode 0700), with the -packages it declares (`nodejs`, `npm`, `git`, `openssh`) and the capability `user-namespaces`. The bundle is Go -(`cmd/mesh-build-node`). It claims no seat: it is assigned to the build machines (ADR 0469 §6) and runs dark until the +packages it declares (`git`, `openssh`; `nodejs` and `npm` come from the `nodejs` module, which this module requires as `node-toolchain`) and the capability `user-namespaces`. The bundle is Go +(`cmd/mesh-build-node`). It claims no seat: it is assigned to the build machines (ADR 0469 clause 6) and runs dark until the builder uses it. Its forge key and ssh files are the same as mesh-build-go's (issue 1484), filled on the node by the provisioner's client (issue 1537).