Files

T

jschoubben f509c61b50 VERSION (A-46, §368, §411): every manifest of the catalog says its version MAJOR.MINOR

mesh-delivery-builder.builder_versions answered no numbered version for any name asked (mesh-sdk go and ts, mesh-host, node-tools, mesh-delivery-builder, mesh-conditions), so every module takes 0.1, the floor §368 gives a module with none published: all 144 manifests (141 from "1", distribution, mesh-provisioner and mesh-provisioner-client from "2", which carries nothing over, §583).

Builds: design 47 G §368, §411, §583, A-46

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h

2026-11-11 22:38:45 +01:00

module.json

VERSION (A-46, §368, §411): every manifest of the catalog says its version MAJOR.MINOR

2026-11-11 22:38:45 +01:00

README.md

Add the buildah module and the check that only it provides rootless-image-build (issues 1702, 1704)

2026-10-22 10:27:01 +02:00

README.md

buildah

The rootless image builder as a module (novox/hq ADR 0487, issue 1702).

The only module that declares the package buildah (checks/toolchains), and the only one that provides rootless-image-build (checks/imagebuild; docker never does).
Provides rootless-image-build with the machine's reach: mesh-build-image requires it, so it composes only on a machine where this module is assigned, and a node without it is refused at resolution naming buildah.
No account and no subordinate-id word. The node-engine makes every user account with useradd, which allocates the account 65536 subordinate uids and gids; mesh-build-image's own account gets its ranges that way and its health proves them (it reads /etc/subuid and /etc/subgid).
The helpers (an OCI runtime, passt, containers-common) come as buildah's package dependencies.
Holds no long-running resource, so it adds nothing to health-undeclared.