mesh-controller

Files

T

jschoubben 412599de9a An upstream image is copied between registries, never through a machine's image store

A published image is an index over several architectures; pulled, the runtime's
store keeps the index and refuses to push one platform out of it. The builder now
reads the index and every manifest it names over the registry API, with the
anonymous bearer token the public hub hands out, moves each blob by digest into the
mesh's registry, puts the manifests and then the index under the module's repository,
and pins the index. Genesis, with no registry to copy into, keeps the pull
(novox/hq 04-ISSUES/046, ADR 0096).

2026-09-21 20:42:30 +02:00

broker

A secret reaches a process as a file (ADR 0086)

2026-09-21 10:10:33 +02:00

builder

An upstream image is copied between registries, never through a machine's image store

2026-09-21 20:42:30 +02:00

catalogue

A provider keeps one grant file per holder, with the local name in its id and path

2026-09-21 20:41:19 +02:00

envfile

A secret reaches a process as a file (ADR 0086)