mesh-controller

novox/mesh-controller

Fork 0

Files

T

History

jochen 1b502a37e0

mesh/delivery superseded: a newer head of the same pull request

Details

mesh/merge-gate pass: builds build-agent, mesh-controller, route-proxy → ace, g14, novox, shanks; no bus step; every machine composes with the change as it…

Details

mesh/repo-check fail: its merge-check.sh failed: --- FAIL: TestAnUnreadableStoreClearsNothing (0.01s)

Details

Let only the authority's root hold lines, refuse every line end, and keep places off the runtime's data and any .ssh

The review of hq issue 339 found the PEM exception too wide (any module, any
key, any label, anything base64), \v, \f, NEL and the Unicode separators
still let a value end a line in some readers, and the spool, /opt, the
container runtimes' data and an account's .ssh still placeable. Lines are now
taken only in step-ca's root setting, as certificates encoding/pem decodes and
x509 parses; every line end is refused; and those paths are the machine's own.
The test certificate is a real one, made for the tests with its key thrown away.

2026-10-09 00:28:08 +02:00

artifacts

Leave an eligible index for a confirmed collect instead of letting it go alone

2026-10-08 15:47:42 +02:00

broker

Serve the read verbs on the serving controller's own connection, and name every connection

2026-10-08 21:08:34 +02:00

builder

Let platform manifests go only on a confirmed collect, and copy again what a sweep took

2026-10-08 15:47:42 +02:00

catalogue

Let only the authority's root hold lines, refuse every line end, and keep places off the runtime's data and any .ssh