Each uplink holder declares the manager it speaks for (hq ADR 0161) #206

2026-10-01T14:53:06Z

mesh-admin commented

2026-10-01 14:53:06 +00:00

Split out of #205 so the vault's claim can land first. networkmanager, systemd-networkd and dhcpcd declare uplink-networkmanager, uplink-systemd-networkd and uplink-dhcpcd; the host reports the one it finds active (mesh-host #61, rolled). Merge only once every machine running one of these has reported a profile carrying it — the laptop node's report after its last apply was lost ("could not tell the mesh: reporting: context canceled"), so it has not yet.

Split out of #205 so the vault's claim can land first. `networkmanager`, `systemd-networkd` and `dhcpcd` declare `uplink-networkmanager`, `uplink-systemd-networkd` and `uplink-dhcpcd`; the host reports the one it finds active (mesh-host #61, rolled). Merge only once every machine running one of these has reported a profile carrying it — the laptop node's report after its last apply was lost ("could not tell the mesh: reporting: context canceled"), so it has not yet.

mesh-admin added 4 commits 2026-10-01 14:53:06 +00:00

The vault claims mesh-vault, and each uplink holder declares the manager it speaks for (hq ADR 0161) 966fed1829

The vault's claim makes a second provider of secret a second claimant, refused by name. The three
uplink definitions declare uplink-networkmanager, uplink-systemd-networkd and uplink-dhcpcd, which the
host reports for the manager it finds active, so the holder for a manager the machine does not run
is refused the way any missing capability is. Merges after the controller holds the seat and the host
reports the capability.

The vault's events are its own: provisioned, rotated, deprovisioned 8368697744

A module publishes under its own name only; secret.provisioned read as another module's event and the
builder refused the vault's definition today, so the seat claim could not be built. The three events lose
the prefix; nothing outside the vault listens for the old names.

The provisioner announces the vault's events by their new names 6ba61a8b4b

This branch carries the uplink capabilities alone (hq ADR 0161 rule 3); merges once every machine running a holder has reported uplink-<manager> 2e96d2f67d

mesh-admin merged commit 5ebc89d89d into main

2026-10-01 15:11:31 +00:00

mesh-admin deleted branch feat/each-uplink-holder-declares-the-manager-it-speaks-for

2026-10-01 15:11:31 +00:00

mesh-admin referenced this pull request

2026-10-01 15:19:50 +00:00

The vault's claim, its own event names, and the uplink holders' capabilities return #207

Sign in to join this conversation.