4 Commits

Include renames

Author	SHA1	Message	Date
jochen	bbb3161ade	mounts: take an SMB source's username as a setting and its password as its own secret, and wait for them ... The one INI secret smb-credentials could not be given through the desk prompt, which takes one hidden line, and a missing login was said as a fault: the first-node gate put the build back and the operator was told nothing was theirs to do. The username is now the setting smb-users and each password the one-line secret smb-password-<source>; a source missing either answers waits through mesh-sdk's health answer (hq ADR 0283, issue 386, issue 379).	2026-10-10 21:11:16 +02:00
jochen	d5adc1d525	Make mounts refuse what it could break: data the mesh keeps, a busy or non-empty mount point, its own share, and a mount that is not its source; say each node's wants so the server exports only to them (review of #136)	2026-10-08 20:16:27 +02:00
jochen	2b1b9b0235	Let mounts write each share's mount and automount, so no node depends on a hand-written fstab line (hq ADR 0263) ... A machine mounts what its assignment names: a node's share from the provision nfs-share, whose path it reads from nfs-server's state on the bus, and occasional sources (an SMB device, a disk) whose absence is a state, not a fault. apply writes and arms the unit pairs as root; watch tries each source and judges the health; the operator's fstab lines are taken over only through adopt, on their word, once the replacement is armed. SMB logins are an outside party's secret, given with secret accept.	2026-10-08 18:36:01 +02:00
jochen	3251758340	Add a read-only mounts module: no tool could read a machine's fstab, mount units or exports	2026-10-08 18:36:01 +02:00