 jschoubben
|
fad8b30e43
|
Say that the guard names the runtime's bridges where the filter names their addresses (hq ADR 0103)
|
2026-09-22 19:51:10 +02:00 |
|
|
jschoubben
|
1096299e06
|
Hold a converged declaration to the bytes main sends, captured from it, rather than to re-marshalling itself (hq ADR 0100)
|
2026-09-22 19:51:10 +02:00 |
|
|
jschoubben
|
379f459498
|
Hold the filter module to reloading its rules and restarting only on its units (hq ADR 0102)
|
2026-09-22 19:47:43 +02:00 |
|
|
jschoubben
|
d05a5e87af
|
Hold the node while an assignment is recorded, so none lands between a preview and the flip (hq ADR 0100)
|
2026-09-22 19:47:23 +02:00 |
|
|
jschoubben
|
01814854b8
|
Refuse the flip on an account naming nothing reachable, and mark such an account partial in the preview (hq ADR 0100)
|
2026-09-22 19:47:23 +02:00 |
|
|
jschoubben
|
2cf8739a84
|
Clear the whole account an adopted node gave when it converges (hq ADR 0100)
|
2026-09-22 19:45:35 +02:00 |
|
|
jschoubben
|
87ecc9326e
|
Refuse a port given for the whole mesh where it is set, not at every node's composition (hq ADR 0100)
|
2026-09-22 19:45:35 +02:00 |
|
|
jschoubben
|
0f3eedd163
|
Do not guard a port this node is told to open to everyone (hq ADR 0103)
|
2026-09-22 19:44:35 +02:00 |
|
|
jschoubben
|
dd6aad4a2f
|
Give a machine port only to a port a module's container publishes, which is the only one the mesh can move (hq ADR 0038)
|
2026-09-22 19:44:35 +02:00 |
|
|
jschoubben
|
65187d4de0
|
Wait for a held node without pinning a pool connection, and give up after a bounded wait naming it (hq ADR 0100)
|
2026-09-22 18:31:10 +02:00 |
|
|
jschoubben
|
2e6b9d30bd
|
Give a cascade round's hold back on every return, a body that cannot be marshalled included (hq ADR 0100)
|
2026-09-22 18:31:00 +02:00 |
|
|
jschoubben
|
cc47330884
|
Reload the guard on its table rather than restart it, so a change leaves no port unguarded (hq ADR 0103)
|
2026-09-22 18:27:27 +02:00 |
|
|
jschoubben
|
bfe4991dd7
|
Name every held kind of each module the flip takes in the converge preview and its digest (hq ADR 0103)
|
2026-09-22 18:27:19 +02:00 |
|
|
jschoubben
|
689c2c6d33
|
Hold a node from composing to sending, so a push composed before converge or adopt is never sent after it (hq ADR 0100)
|
2026-09-22 18:10:04 +02:00 |
|
|
jschoubben
|
1eff586a40
|
Hold the filter module to replacing the stock unit's flushing stop (hq ADR 0100)
|
2026-09-22 18:06:15 +02:00 |
|
|
jschoubben
|
4bb19c9e40
|
Give a machine port one holder: refuse ssh's, another module's and a doubled one, and release the assignment a given port replaces (hq ADR 0100)
|
2026-09-22 18:05:31 +02:00 |
|
|
jschoubben
|
9280513afa
|
Refuse token issue --adopted for a converged node and point to adopt, rather than flip it quietly (hq ADR 0100)
|
2026-09-22 18:03:45 +02:00 |
|
|
jschoubben
|
41c300eae0
|
Name every kind of an untaken module's resources in the adoption envelope, not only files and containers (hq ADR 0103)
|
2026-09-22 18:03:03 +02:00 |
|
|
jschoubben
|
c91fe1a6eb
|
Converge only on the preview the operator saw, named by its digest, and never on an account older than 15 minutes (hq ADR 0100)
|
2026-09-22 18:02:30 +02:00 |
|
|
jschoubben
|
ba0f44a36d
|
Say in the converge preview that routed traffic is not previewed and is dropped unless declared (hq ADR 0100)
|
2026-09-22 18:01:04 +02:00 |
|
|
jschoubben
|
3dc7d0e386
|
Preview ssh as the derived filter admits it, and say a narrowing to the private network closes (hq ADR 0100)
|
2026-09-22 18:00:53 +02:00 |
|
|
jschoubben
|
ade6b2bfb6
|
Declare nftables before the guard's table, so a node joining adopted without nft can load it (hq ADR 0103)
|
2026-09-22 17:59:32 +02:00 |
|
|
jschoubben
|
a2dfaaf4d1
|
Guard only packets addressed to this machine, and order the guard's unit before the network and against shutdown (hq ADR 0103)
|
2026-09-22 17:59:09 +02:00 |
|
|
jschoubben
|
a82bfb41f2
|
Leave an IPv6 loopback mapping out of what a container publishes, reading ports from the end (hq ADR 0100)
|
2026-09-22 17:58:50 +02:00 |
|
|
jschoubben
|
8db66e9532
|
Derive the guard from taken modules only: their published private-network ports and their manifests' guards (hq ADR 0103)
|
2026-09-22 17:58:37 +02:00 |
|
|
jschoubben
|
28b7fb81ba
|
Write the registry's trust into the runtime's file and reload the runtime instead of restarting it; prefix reload-on like restart-on (hq ADR 0102)
|
2026-09-22 17:51:38 +02:00 |
|
|
jschoubben
|
c93128d82f
|
Hold the catalogue's store, broker and filter manifests to what adoption needs of them (hq ADR 0100)
|
2026-09-22 17:33:09 +02:00 |
|
|
jschoubben
|
dbf62b5212
|
Read the foundation's ports from each node's settings, wherever a port is used (hq ADR 0100)
|
2026-09-22 17:31:07 +02:00 |
|
|
jschoubben
|
1ea84f8b8f
|
Take a module, converge a node after a preview, and return it to adopted, from the command line and the API (hq ADR 0100)
|
2026-09-22 17:27:35 +02:00 |
|
|
jschoubben
|
28894fa5bd
|
Keep what an adopted node reports holding, the firewall it found and what is reachable on it (hq ADR 0100)
|
2026-09-22 17:23:09 +02:00 |
|
|
jschoubben
|
c3b1617693
|
Declare openings and a refusal-only guard on an adopted node in place of the filter (hq ADR 0100)
|
2026-09-22 17:21:44 +02:00 |
|
|
jschoubben
|
a86a6c2974
|
Carry an adopted node's mode and taken modules in every declaration, from one marshaller (hq ADR 0100)
|
2026-09-22 17:17:54 +02:00 |
|
|
jschoubben
|
1c32af6a22
|
Record whether a node is adopted and which modules were taken on it (hq ADR 0100)
|
2026-09-22 17:14:05 +02:00 |
|