jschoubben
816cf96459
The sdk now refuses an offer that says no credential form (6b8c694, ADR 0570). So: - the catalogue copy in testdata/beside is captured again at the release branch's catalogue 8ae8e88d, whose offers each say one, and the sdk's conformance events at 007b6fd, as CAPTURED asks; - the fixtures of identity_bound_test and issued_test say the form their rows meant: pair for a login of each consumer's own, none for a keyless provision. No behaviour of the controller changed.
16 lines
964 B
Plaintext
16 lines
964 B
Plaintext
# Written by the mesh (module dnsmasq, novox/hq issue 348). Replaced on every push.
|
|
#
|
|
# The resolver binds its addresses once, at start (bind-interfaces), so it starts only once this
|
|
# machine's private address is there: a start that finds it missing fails after at most two seconds and
|
|
# is tried again every ten seconds (Restart=on-failure, no start limit) until the tunnel has brought it.
|
|
# It does not order itself After= or Wants= network-online.target, and its wait is short: the packaged
|
|
# unit is Before= network-online.target and nss-lookup.target, and the tunnel is ordered after them, so
|
|
# a long wait would hold the tunnel back and a drop-in ordering would be a cycle (issue 1126).
|
|
[Unit]
|
|
StartLimitIntervalSec=0
|
|
|
|
[Service]
|
|
ExecStartPre=/usr/bin/sh -c 'for i in $(seq 1 2); do ip -4 -o addr show to ${machine:address} | grep -q . && exit 0; sleep 1; done; echo "${machine:address} is not on this machine" >&2; exit 1'
|
|
Restart=on-failure
|
|
RestartSec=10s
|