4 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	35ff67bda0	Design 47's last milestones: the keeper, self-check, healers, hand-acts, provisioner, vault, artifact sweep, disk readings, credential forms (issues 774, 1952, 1953, 1954, 1955) ... One commit with exactly the tree of the reviewed head 35b4509c0a, on main 12c2574c9d, so two compiled programs added and removed on the branch leave no trace in history (issue 1577).	2026-10-30 02:21:51 +01:00
jochen	bbb3161ade	mounts: take an SMB source's username as a setting and its password as its own secret, and wait for them ... The one INI secret smb-credentials could not be given through the desk prompt, which takes one hidden line, and a missing login was said as a fault: the first-node gate put the build back and the operator was told nothing was theirs to do. The username is now the setting smb-users and each password the one-line secret smb-password-<source>; a source missing either answers waits through mesh-sdk's health answer (hq ADR 0283, issue 386, issue 379).	2026-10-10 21:11:16 +02:00
jochen	2b1b9b0235	Let mounts write each share's mount and automount, so no node depends on a hand-written fstab line (hq ADR 0263) ... A machine mounts what its assignment names: a node's share from the provision nfs-share, whose path it reads from nfs-server's state on the bus, and occasional sources (an SMB device, a disk) whose absence is a state, not a fault. apply writes and arms the unit pairs as root; watch tries each source and judges the health; the operator's fstab lines are taken over only through adopt, on their word, once the replacement is armed. SMB logins are an outside party's secret, given with secret accept.	2026-10-08 18:36:01 +02:00
jochen	3251758340	Add a read-only mounts module: no tool could read a machine's fstab, mount units or exports	2026-10-08 18:36:01 +02:00