A definition names no host path for its own data

Twenty-eight modules' data directories are placed: the root as place ".", a sub-directory named by
its id, and every host-side reference — binds, secrets, own secrets, grants, receives, file paths,
mounts, env-files — as ${dir:<id>}. Resolved on the default root every path is the one the manifest
named before, which the controller's TestPlacedDirectoriesKeepTheirPaths proves over both checkouts;
so no data moves and no machine sees a change. Five directories whose id is not their last segment
keep their path as a placement (novox/hq issue 119, ADR 0112, design 27).

modules/minio/module.json

@@ -53,13 +53,13 @@
     }
   },
   "receives": {
-    "s3-bucket": "/var/lib/minio/grants/mesh.json"
+    "s3-bucket": "${dir:grants}/mesh.json"
   },
   "grants": {
-    "s3-bucket": "/var/lib/minio/grants"
+    "s3-bucket": "${dir:grants}"
   },
   "own-secrets": {
-    "root": "/var/lib/minio/root.secret",
+    "root": "${dir:state}/root.secret",
     "broker": "/var/lib/mesh/minio/broker"
   },
   "resources": [
@@ -72,19 +72,18 @@
     {
       "id": "state",
       "type": "directory",
-      "path": "/var/lib/minio",
-      "mode": "0700"
+      "mode": "0700",
+      "place": "."
     },
     {
       "id": "grants",
       "type": "directory",
-      "path": "/var/lib/minio/grants",
       "mode": "0700"
     },
     {
       "id": "root-env",
       "type": "file",
-      "path": "/var/lib/minio/root.env",
+      "path": "${dir:state}/root.env",
       "mode": "0600",
       "content": "MINIO_ROOT_USER=meshroot\nMINIO_BROWSER_REDIRECT_URL=https://${bound:route:name-console}\n"
     },
@@ -112,7 +111,7 @@
         ":9001"
       ],
       "env-file": [
-        "/var/lib/minio/root.env"
+        "${dir:state}/root.env"
       ],
       "ports": [
         "9000",
@@ -120,7 +119,7 @@
       ],
       "volumes": [
         "/var/lib/minio-store:/data",
-        "/var/lib/minio/root.secret:/run/secrets/root:ro"
+        "${dir:state}/root.secret:/run/secrets/root:ro"
       ],
       "env": {
         "MINIO_ROOT_PASSWORD_FILE": "/run/secrets/root",
@@ -134,8 +133,8 @@
       "network": "minio-net",
       "volumes": [
         "/var/lib/mesh/minio/broker:/run/secrets/broker:ro",
-        "/var/lib/minio/grants:/var/lib/minio/grants:ro",
-        "/var/lib/minio/root.secret:/run/secrets/root:ro"
+        "${dir:grants}:${dir:grants}:ro",
+        "${dir:state}/root.secret:/run/secrets/root:ro"
       ],
       "env": {
         "MESH_MINIO_ENDPOINT": "http://minio:9000",
@@ -143,7 +142,7 @@
         "MESH_MINIO_ROOT_PASSWORD_FILE": "/run/secrets/root",
         "MESH_MINIO_REGION": "eu-west",
         "MESH_BROKER_FILE": "/run/secrets/broker",
-        "MESH_RECEIVES": "/var/lib/minio/grants/mesh.json"
+        "MESH_RECEIVES": "${dir:grants}/mesh.json"
       },
       "artifact": "runtime"
     }