5 Commits

Include renames

Author	SHA1	Message	Date
jochen	29ac6ee16a	Say that the modules' own checks are the only line before root, since sudo grants the account everything	2026-10-08 20:21:28 +02:00
jochen	53cc303440	Mount a share at the access the server gave this machine, and not at all when it does not export it here	2026-10-08 20:21:17 +02:00
jochen	d5adc1d525	Make mounts refuse what it could break: data the mesh keeps, a busy or non-empty mount point, its own share, and a mount that is not its source; say each node's wants so the server exports only to them (review of #136)	2026-10-08 20:16:27 +02:00
jochen	2b1b9b0235	Let mounts write each share's mount and automount, so no node depends on a hand-written fstab line (hq ADR 0263) ... A machine mounts what its assignment names: a node's share from the provision nfs-share, whose path it reads from nfs-server's state on the bus, and occasional sources (an SMB device, a disk) whose absence is a state, not a fault. apply writes and arms the unit pairs as root; watch tries each source and judges the health; the operator's fstab lines are taken over only through adopt, on their word, once the replacement is armed. SMB logins are an outside party's secret, given with secret accept.	2026-10-08 18:36:01 +02:00
jochen	3251758340	Add a read-only mounts module: no tool could read a machine's fstab, mount units or exports	2026-10-08 18:36:01 +02:00