jschoubben
35ff67bda0
mesh/delivery-group group feat/774-l3-reland rejected: composed together: the checker's verdict at the members' heads (b48c90fea31f): integration: mesh-self-ch…
mesh/delivery closed: a newer head of the same pull request
mesh/check failed: integration: mesh-self-check/cmd/mesh-self-check.TestTheSelfCheckWholeRunsOnTheBus: the run answered {Run:doctor-1793351737-1 At:20…
One commit with exactly the tree of the reviewed head35b4509c0a, on main12c2574c9d, so two compiled programs added and removed on the branch leave no trace in history (issue 1577).
buildah
The rootless image builder as a module (novox/hq ADR 0487, issue 1702).
- The only module that declares the package
buildah(checks/toolchains), and the only one that providesrootless-image-build(checks/imagebuild; docker never does). - Provides
rootless-image-buildwith the machine's reach: mesh-build-image requires it, so it composes only on a machine where this module is assigned, and a node without it is refused at resolution namingbuildah. - No account and no subordinate-id word. The node-engine makes every
useraccount withuseradd, which allocates the account 65536 subordinate uids and gids; mesh-build-image's own account gets its ranges that way and its health proves them (it reads /etc/subuid and /etc/subgid). - The helpers (an OCI runtime, passt, containers-common) come as buildah's package dependencies.
- Holds no long-running resource, so it adds nothing to
health-undeclared.