Commit Graph

  • 2e1a9abbf7 Count the quiet after a restart from when the controller first saw the search pending jochen 2026-10-09 12:25:10 +02:00
  • d15eee61bb Do not raise agent-can-become-root while the first setuid search is still within its bound jochen 2026-10-09 11:42:05 +02:00
  • 95e7a7120a Register only from a protected trunk of the same repository, and mark the serving controller never the terminal jochen 2026-10-09 12:23:47 +02:00
  • 1b780eae3a Put back on a failed gate only a build of the module's own repository jochen 2026-10-09 11:41:05 +02:00
  • a5e8baf6da Register a module only from the repository the catalogue builds it from jochen 2026-10-09 11:39:52 +02:00
  • e168b60159 Pin the node-engine at #61's head, which reads the homes in one order jochen 2026-10-09 12:37:12 +02:00
  • d951f22c04 Pin the node-engine at the head whose setuid search runs to its own bound jochen 2026-10-09 12:12:32 +02:00
  • b1897a3498 Answer mesh-cli: the control-node's operator is the terminal, everyone else is not (hq ADR 0272) jochen 2026-10-09 12:10:24 +02:00
  • 926dbd7a97 Fill machine facts in a user's home, so an agent account named with a home is made there jochen 2026-10-09 11:02:44 +02:00
  • db702312af Pin the node-engine at its pull request rebased onto main jochen 2026-10-09 11:02:44 +02:00
  • d7fe5b609b Pin the node-engine at the head that refuses a placement at the machine's own jochen 2026-10-08 21:55:31 +02:00
  • b4dff64ae0 Refuse a plans line that acts wherever its subcommand stands jochen 2026-10-09 10:12:41 +02:00
  • 2b8a28adab Pin the node-engine at the head that judges an opened file's kind and links jochen 2026-10-08 21:32:03 +02:00
  • 20d4f1ae71 Let the generic command verb only read, and keep keys and tokens at the terminal jochen 2026-10-08 21:21:57 +02:00
  • 528951319c Pin the node-engine at the commit that refuses a system account as the agents' jochen 2026-10-08 20:53:19 +02:00
  • dcbbf4487a Refuse a node's accounts through any verb, and a stale or service-account agent verdict jochen 2026-10-08 20:39:28 +02:00
  • fcfbf7e69e Name the account agents run as on a node, and say whether it can become root jochen 2026-10-08 18:37:07 +02:00
  • 4d60628f37 Merge pull request 'A mergeable file's own keys are the terminal's (hq issue 340)' (#172) from fix/340-a-mergeable-files-own-keys-are-the-terminals into main mesh-admin 2026-10-09 07:46:40 +00:00
  • b13a0f71a4 Merge pull request 'Tell the operator at once when sends wait for the bus's planned step, and say it before the merge (hq issue 336)' (#173) from fix/336-bus-step-waiting into main mesh-admin 2026-10-09 07:23:51 +00:00
  • 822e52123c Say S17 clears once the new bus is sent, as it does jochen 2026-10-09 03:23:47 +02:00
  • 9a7ae131cb TestReplay336 reads the bus call in its mesh form jochen 2026-10-09 03:08:21 +02:00
  • 55d8b43f30 Refuse any change through a verb to a module with a trusted mergeable file jochen 2026-10-09 02:54:41 +02:00
  • 4354d9d7c7 Name the bus upgrade as the mesh call a person makes, and say a same-source rebuild needs no step (review of #173) jochen 2026-10-09 02:54:23 +02:00
  • 1fdc68a8aa Tell the operator at once when sends wait for the bus's planned step, and say it before the merge (hq issue 336) jochen 2026-10-09 02:33:57 +02:00
  • 36008e0642 Merge pull request 'Fill ${setting:} in a service's unit name, and refuse a value that makes no unit name' (#171) from feat/setting-in-a-unit-name into main mesh-admin 2026-10-09 00:32:51 +00:00
  • f476494173 Make a mergeable file's own keys the terminal's, so no verb can set what every agent session obeys jochen 2026-10-09 02:27:24 +02:00
  • 155819f307 Merge pull request 'Issue 339 follow-ups: only step-ca's root may hold lines, every line end refused, the runtime's data and any .ssh refused' (#170) from fix/339-review-follow-ups into main mesh-admin 2026-10-08 23:55:34 +00:00
  • eb5f9d2f53 Allow a setting in a unit's name only as a template's whole instance, never leading with a dash, at most 64 characters jochen 2026-10-09 01:51:37 +02:00
  • 0f58602c74 Count a file that says nothing as trusted, and drop the refusal date jochen 2026-10-09 01:44:50 +02:00
  • c3ae3f3e09 Refuse a file that asks for a setting without saying whether it is trusted from 2026-10-10 jochen 2026-10-09 01:37:43 +02:00
  • 2a9697cf70 Merge pull request 'Switch the memory store's failure under its lock, so a test cannot race the keeper' (#148) from fix/conditions-store-race into main mesh-admin 2026-10-08 23:35:59 +00:00
  • e4d2868679 Fill ${setting:} in a service's unit name, and refuse a value that makes no unit name jochen 2026-10-09 01:32:32 +02:00
  • fe857ba081 Switch the memory store's failure under its lock, so a test cannot race the keeper jochen 2026-10-08 15:18:21 +02:00
  • b9fc09c375 Derive the terminal's settings from what a module serves and which files it trusts; a found directory is its own condition jochen 2026-10-09 01:23:44 +02:00
  • ec7b8bcd58 Keep the mesh's trust anchors at the terminal, refuse containerd's tree, and read a found directory as a wait jochen 2026-10-09 00:57:10 +02:00
  • cec797e996 Merge pull request 'Make the login shell's execute optional, so a machine may withhold it (hq ADR 0268)' (#169) from withhold-login-shell-execute into main mesh-admin 2026-10-08 22:52:28 +00:00
  • 0e0ba93f6c Take back the test store's lock fix: open #148 carries the fuller one jochen 2026-10-09 00:51:18 +02:00
  • 0f1e1b09fd Change a test store's failure under its lock, which the keeper's goroutine reads jochen 2026-10-09 00:38:07 +02:00
  • 1b502a37e0 Let only the authority's root hold lines, refuse every line end, and keep places off the runtime's data and any .ssh jochen 2026-10-09 00:28:08 +02:00
  • 522f2253e7 Merge pull request 'Issue 339: places and accesses only at the terminal, never at the machine's own trees; a setting is one line' (#168) from fix/339-places-and-accesses-are-the-terminals into main mesh-admin 2026-10-08 22:21:02 +00:00
  • 2073bfe2e6 Make the login shell's execute optional, so a machine may withhold it jochen 2026-10-09 00:07:33 +02:00
  • f5824b31c6 Keep places and accesses at the terminal, and refuse a line break in any setting jochen 2026-10-08 23:58:08 +02:00
  • d059311c0f Merge pull request 'Describe node-nfs-server's exports and test as per-node addresses (hq ADR 0263, review follow-up)' (#166) from fix/shares-review-followups into main mesh-admin 2026-10-08 21:13:05 +00:00
  • 1a28cb3357 Merge pull request 'Hold the delivery planner to its recorded rules (table + property); a false cycle report found' (#167) from test/planner-rules into main mesh-admin 2026-10-08 20:41:15 +00:00
  • 758537dd4e Plan a controller merge in the worker-of order in the three-kinds test jochen 2026-10-08 22:22:24 +02:00
  • add807f034 Say no cycle for a packages edge in a plan's last tier jochen 2026-10-08 22:22:02 +02:00
  • 8ca4b04321 Hold the delivery planner to its recorded rules with a table and a property jochen 2026-10-08 22:15:20 +02:00
  • 8170fc58a3 Merge pull request 'Keep a passed gate's verdict when the first machine's later reports go quiet (hq issue 335)' (#165) from fix/335-a-passed-gate-is-not-judged-again into main mesh-admin 2026-10-08 19:48:03 +00:00
  • efcdd5dd7d Merge pull request 'Serve the read verbs on the serving controller's own connection, and name every connection (hq issue 327, ADR 0265)' (#161) from fix/327-a-verb-reads-on-the-serving-connection into main mesh-admin 2026-10-08 19:32:11 +00:00
  • 5d7d8ee2d6 Describe nfs-server's exports and test as per-node addresses, as the server exports them since the review (hq ADR 0263 rule 5) jochen 2026-10-08 21:14:09 +02:00
  • 5b7e6ff453 Answer dead-letters on the lent serving connection, and keep one clip helper jochen 2026-10-08 21:09:08 +02:00
  • cc7fb99f29 Answer a panicking verb with an error, say flag errors in the answer, and leave refused logins out of D15 jochen 2026-10-08 18:45:04 +02:00
  • 1e04670052 Serve the read verbs on the serving controller's own connection, and name every connection jochen 2026-10-08 17:52:36 +02:00
  • 81e5458cbf Test that a carried module takes its lead's pass before its step is read (hq issue 335 review) jochen 2026-10-08 20:48:25 +02:00
  • fb74e24c9e Keep a passed gate's verdict when the first machine's later reports go quiet (hq issue 335) jochen 2026-10-08 20:25:42 +02:00
  • ca09a07fdf Merge pull request 'Keep what a consumer gives up on until a person delivers it again or drops it (hq issue 330, ADR 0264)' (#159) from fix/330-a-message-given-up-on-is-kept into main mesh-admin 2026-10-08 19:07:33 +00:00
  • 9b028b4212 Merge pull request 'Add the node-nfs-server and node-mounts seats (hq ADR 0263)' (#163) from feat/mounts-module into main mesh-admin 2026-10-08 18:39:52 +00:00
  • d7fab82a89 Say the adopt switch is the string "true" and that reload only has the kernel reread its exports, as the holders do jochen 2026-10-08 20:11:33 +02:00
  • 7f65e62743 Merge pull request 'Keep a left-out module's provisions and backups, and refuse more identity keys (hq ADR 0262)' (#162) from feat/left-out-keeps-what-it-provides into main mesh-admin 2026-10-08 16:37:42 +00:00
  • 2b01f8786e Let node-nfs-server.test take a client's address: the server knows the range, not the mesh's node names jochen 2026-10-08 18:34:38 +02:00
  • 909062e729 Deliver a dead letter again only where it is received, and never stop serving for the notices jochen 2026-10-08 18:32:58 +02:00
  • 826dcb91b1 Keep what a consumer gives up on until a person delivers it again or drops it jochen 2026-10-08 17:36:03 +02:00
  • 193168e086 Place a left-out module's backup lines best effort, and refuse more identity keys (hq ADR 0262 review) jochen 2026-10-08 18:27:50 +02:00
  • 59fdffb979 Add the node-nfs-server and node-mounts seats, so a share and a mount have a role the mesh defines (hq ADR 0263) jochen 2026-10-08 18:24:38 +02:00
  • 5d47e0bfd6 Keep a left-out module's provisions and backups, and refuse more identity keys (hq ADR 0262) jochen 2026-10-08 18:03:46 +02:00
  • e3ec15f707 Merge pull request 'Fill a preference's ${setting:} from its manifest default (hq ADR 0262)' (#153) from feat/setting-defaults into main mesh-admin 2026-10-08 15:54:34 +00:00
  • ac91357a53 Merge pull request 'Promise unlink-dangling on the service manager, optional (hq issue 332)' (#160) from feat/service-manager-unlink-dangling into main mesh-admin 2026-10-08 15:52:53 +00:00
  • b5f2c3b961 Promise unlink-dangling on the service manager, optional (hq issue 332) jochen 2026-10-08 17:39:08 +02:00
  • af63b233db Leave out a module whose stored manifest has an unknown field, and raise it (hq ADR 0262 review) jochen 2026-10-08 17:34:53 +02:00
  • 0cf5a3a5ba Merge pull request 'Promise reset-failed and wanted-by on the service manager, optional (hq issue 332)' (#158) from feat/service-manager-reset-failed-why-started into main mesh-admin 2026-10-08 15:31:41 +00:00
  • f5680ba8da List every module's preferences in the settings verb (hq ADR 0262) jochen 2026-10-08 17:10:16 +02:00
  • 76babaea52 Read stored manifests leniently and mark the defaults layer (hq ADR 0262 review) jochen 2026-10-08 16:53:20 +02:00
  • e41b78cd77 Fill a preference's ${setting:} from its manifest default (hq ADR 0262) jochen 2026-10-08 16:23:03 +02:00
  • 1acce7132e Promise reset-failed and wanted-by on the service manager, optional (hq issue 332) jochen 2026-10-08 17:21:16 +02:00
  • 3f68a495f1 Merge pull request 'Name what a held release holds, and where it is released (ADR 0258)' (#155) from fix/release-held-says-what-waits into main mesh-admin 2026-10-08 15:09:29 +00:00
  • 298ec06ae0 Say held updates wait because a walk failed, in the glossary's words jochen 2026-10-08 17:02:30 +02:00
  • a5f53ef9eb Merge pull request 'Say why assign finds no module, and keep an assignment pending on its build (hq issue 325)' (#150) from fix/assign-says-why-a-module-is-not-there into main mesh-admin 2026-10-08 14:58:05 +00:00
  • 8adb7f1a05 Give each pending assignment its own condition, and keep a raised row until it clears jochen 2026-10-08 16:45:43 +02:00
  • e33da2dc1c Name what a held release holds, and where it is released jochen 2026-10-08 16:44:02 +02:00
  • 249d97d1c8 Make pending assignments safe to race, settle them on a tick, and say only what was checked jochen 2026-10-08 16:21:53 +02:00
  • 7d63d2e68c Say why assign finds no module, and keep an assignment pending on its build jochen 2026-10-08 15:48:36 +02:00
  • fe00fec52c Merge pull request 'Grant a bar one key of the state it shows, and per-machine state its own machine's key (hq ADR 0260)' (#151) from fix/state-grants-per-key into main mesh-admin 2026-10-08 14:09:25 +00:00
  • 056414bc06 Merge pull request 'Record the bases a build copies, keep them by the builds that stood on them, copy each image once (hq ADR 0257, issue 321)' (#144) from feat/a-mirror-is-recorded into main mesh-admin 2026-10-08 14:02:47 +00:00
  • 59620fdacb Merge pull request 'Excuse no wait for a move from a build not known, and test the tier path's at-once put-back (hq issue 318 review)' (#152) from fix/318-follow-up-2 into main mesh-admin 2026-10-08 14:02:22 +00:00
  • b74268fb08 Grant a bar one key of the state it shows, and per-machine state its own machine's key (hq ADR 0260) jochen 2026-10-08 15:51:20 +02:00
  • a44dc01c65 Excuse no wait for a move from a build not known, and count a module put back only once there is one (hq issue 318 review) jochen 2026-10-08 15:49:03 +02:00
  • c6e372896b Leave an eligible index for a confirmed collect instead of letting it go alone jochen 2026-10-08 15:47:41 +02:00
  • c5663aa18b Let platform manifests go only on a confirmed collect, and copy again what a sweep took jochen 2026-10-08 14:51:13 +02:00
  • 9907df6530 Record the bases a build copies, keep them by the builds that stood on them, and copy each image once jochen 2026-10-08 14:09:01 +02:00
  • 41d6019fa0 Merge pull request 'Let a block show a value its module keeps on the bus, and grant the bar the read (hq ADR 0260)' (#149) from feat/the-bar-takes-blocks into main mesh-admin 2026-10-08 13:46:14 +00:00
  • 58e143bbc0 Merge pull request 'Give every module of a failed send a verdict, and excuse only the wait a build's own send brought (hq issue 318 review)' (#146) from fix/318-follow-up into main mesh-admin 2026-10-08 13:45:01 +00:00
  • d9588b4f13 Let a block show a value its module keeps on the bus, and grant the bar the read (hq ADR 0260) jochen 2026-10-08 15:22:53 +02:00
  • 34611c8e38 Merge pull request 'Let a seat receive blocks as data its holder renders, placed where the machine has the hardware (hq ADR 0255)' (#143) from feat/the-bar-takes-blocks into main mesh-admin 2026-10-08 13:31:48 +00:00
  • a63939160e Put a broken module back at once, and excuse a wait only for a move that added an account group (hq issue 318 review) jochen 2026-10-08 15:25:58 +02:00
  • 7ad9dbcb5d Say a pending new login in the same words everywhere, without 'session' (issue 318 review) jochen 2026-10-08 15:05:53 +02:00
  • 363898ec8a Give every module of a failed send a verdict, and excuse only the wait a build's own send brought (hq issue 318 review) jochen 2026-10-08 14:51:53 +02:00
  • 8984c3437f Leave out a block its holder cannot render, and keep if-capability to known names on offered kinds (hq ADR 0255) jochen 2026-10-08 14:33:05 +02:00
  • 9766338368 Build every artifact the forge declares in the forge tests jochen 2026-10-08 13:56:09 +02:00
  • b1acb3d9de Let a seat receive blocks as data its holder renders, placed where the machine has the hardware (hq ADR 0255) jochen 2026-10-08 13:35:27 +02:00
  • a759ac65a5 Merge pull request 'Say where an answer no notification can give is given; never offer to silence data loss (hq ADR 0258)' (#147) from fix/needs-you-from-the-console into main mesh-admin 2026-10-08 13:20:42 +00:00