A filter module's own filter file counts as declared for a mount (hq ADR 0169) #213

2026-10-02T12:04:55Z

mesh-admin commented

2026-10-02 12:04:55 +00:00

The nftables module's runtime mounts the file filtering.into names, to reload the mesh's table (ADR 0169). The undeclared-mount check knew every other declaration of a path — resources, secrets, binds, grants, accesses, capabilities — and not this one, so the module's first build was refused at the manifest. Mount tests pass, and module check accepts the manifest. The plan rebuilds the build machine first, which carries this parser.

The nftables module's runtime mounts the file `filtering.into` names, to reload the mesh's table (ADR 0169). The undeclared-mount check knew every other declaration of a path — resources, secrets, binds, grants, accesses, capabilities — and not this one, so the module's first build was refused at the manifest. Mount tests pass, and `module check` accepts the manifest. The plan rebuilds the build machine first, which carries this parser.

mesh-admin added 1 commit 2026-10-02 12:04:55 +00:00

A filter module's own filter file counts as declared for a mount (hq ADR 0169) 9d13b0593b

The nftables module's runtime mounts the file filtering.into names, to reload
the mesh's table; the mount check knew every other declaration of a path and
not this one, and the module's first build was refused for it.

mesh-admin merged commit 252eb786a7 into main

2026-10-02 12:05:09 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-controller#213