e3a595d8fe
Pin mesh-sdk to the merge of #64 (a bucket per node)
jschoubben2026-10-21 18:03:34 +02:00
7e83137aa8
Merge pull request 'Pass a container's groups to the runtime as supplementary groups and report container-groups (issue 1637, ADR 0480 clause 7)' (#127) from feat/r4d-groups into main
mesh-tools2026-10-21 14:45:04 +00:00
f9e1cd183a
Pin mesh-sdk to the tip of fix/1694-bucket-per-node (issue 1695)
jschoubben2026-10-21 15:49:44 +02:00
d9f8bbec0c
Pin mesh-sdk to the merge of #60 (container-groups capability)
jschoubben2026-10-21 15:48:44 +02:00
d5eeb860e3
Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)
jschoubben2026-10-21 15:41:09 +02:00
ef30c12291
Pass a container's groups to the runtime as supplementary groups and report container-groups (issues 1637, ADR 0480 clause 7)
jschoubben2026-10-21 14:27:10 +02:00
fd3259a3f5
Merge pull request 'Fetch a file the declaration names by digest from the bus's object bucket and verify it before writing, and run the integration tests in the merge check (issue 1695, ADR 0486 step 2)' (#126) from fix/1695-fetch-by-digest into main
mesh-tools2026-10-21 13:33:54 +00:00
fdb59bcf4e
Correct the grant list above FileObject to the subjects it calls, flow control and consumer delete included (issue 1695)
jschoubben2026-10-21 15:01:31 +02:00
d0298a99da
Pin mesh-sdk to the merge of #59 (file references)
jschoubben2026-10-21 14:59:57 +02:00
4cfa0469fd
Run the object-bucket test in the trunk's tagless suite too: the trunk's merge check judges this change (issue 1695)
jschoubben2026-10-21 14:56:41 +02:00
45f437eea6
Run the integration tests in the merge check, resolve file references in the hand apply, refuse an unresolved one, and read an object by name without listing the bucket (issue 1695)
jschoubben2026-10-21 14:50:34 +02:00
a457b38968
Fetch a declaration's files given by digest from the bus's object bucket, verify them and report file-references (issue 1695, ADR 0486)
jschoubben2026-10-21 14:34:29 +02:00
c5c4caa2a4
Merge pull request 'Count the home of an account a declaration makes for its own .ssh, never taking over another account's home (issue 1542)' (#125) from fix/1542-declared-account-is-a-home into main
mesh-tools2026-10-20 23:37:59 +00:00
5a2bc03910
Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)
mesh-tools2026-10-20 23:32:27 +00:00
60371aadad
Count the home of an account a declaration makes as a home for the directory placement guard, so its own .ssh is placed (issue 1542)
mesh-tools2026-10-20 23:25:37 +00:00
ce1b97ad97
Merge pull request 'Take the node-engine's parser and validator from mesh-sdk and delete mesh-host's copies (design 47 R4b, issue 1392)' (#124) from feat/r4b-sdk-users into main
mesh-tools2026-10-20 12:51:54 +00:00
52600ec7bd
Take the node-engine's parser from mesh-sdk: remaining imports (issue 1392)
mesh-tools2026-10-20 11:17:14 +00:00
278a94d59b
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
mesh-tools2026-10-20 11:16:26 +00:00
9d76759e04
Take the node-engine's parser and validator from mesh-sdk: pin, README and cmd imports (issue 1392)
mesh-tools2026-10-20 11:15:23 +00:00
a8eb24b49c
Delete mesh-host's copy of the node-engine's parser and validator, which mesh-sdk holds (issue 1392), rest
mesh-tools2026-10-20 11:14:38 +00:00
da26b7f130
Delete mesh-host's copy of the node-engine's parser and validator, which mesh-sdk holds (issue 1392)
mesh-tools2026-10-20 11:14:30 +00:00
cdcba9ca73
Merge pull request 'The node-engine reports whether an unprivileged user can make a user namespace (design 47 R4a, issue 1308)' (#123) from feat/r4a-sdk-first into main
mesh-tools2026-10-20 07:15:53 +00:00
454be9b269
Merge pull request 'Write a module that leaves a node as removed in its have key, so a reader can tell it stopped (issue 1369)' (#121) from fix/r3e-before-the-gate into main
mesh-tools2026-10-20 06:01:59 +00:00
619e14aa8e
Merge pull request 'Close the test bus only after the enrolment stand-in has removed its consumer, so the next test can subscribe (issue 604)' (#122) from fix/604-the-enrolment-stand-in-unbinds into main
mesh-tools2026-10-20 05:57:07 +00:00
d6f8b00bf8
Do not let the asking's Close shut the stand-in's connection before its cleanup (issue 604)
mesh-tools2026-10-20 01:34:27 +00:00
a9789b5125
Give each enrolment stand-in its own durable and wait for it to be gone (issue 604)
mesh-tools2026-10-20 01:30:20 +00:00
150fadfe8b
Write a removal after a restart from the declaration the apply replaced (issue 1369)
mesh-tools2026-10-20 01:26:33 +00:00
6a2fb63bfc
Write a module's have key as removed when the applied declaration no longer holds it (issue 1369)
mesh-tools2026-10-20 01:20:52 +00:00
64dfa90c3a
Report whether an unprivileged user namespace can be made (issue 1308)
mesh-tools2026-10-20 01:12:24 +00:00
2474bf2833
Merge pull request 'The node-engine sends no alive message: presence replaces it (design 47 R2d, issue 1158)' (#120) from feat/alive-gone into main
mesh-tools2026-10-19 07:07:56 +00:00
671f284004
Delete the node-engine's alive message, presence replaces it (issue 1158)
jschoubben2026-10-19 02:15:00 +02:00
89025ad004
Merge pull request 'Judge a filled write with the roots the last apply read, asking no runtime per file (issue 1138)' (#119) from fix/1138-filled-write-asks-no-runtime into main
mesh-tools2026-10-18 22:20:54 +00:00
3798673821
Judge a filled write with the roots the last apply read, asking no runtime per file (issue 1138)
jochen2026-10-18 18:05:08 +02:00
8119c470d3
Merge pull request 'Write each module's have and the node's own facts beside the report (issue 1132); the check reads build-agent from the controller (issue 1142)' (#118) from feat/delivery-have into main
mesh-tools2026-10-18 18:36:14 +00:00
aab65b81f6
Read the build agent's manifest from the controller's repository beside the check, where it moved (issue 1151)
jschoubben2026-10-18 19:28:07 +02:00
9d9e3a46c4
Bind the have bucket once per pass, bound by the queue's timeout, and stop the pass at the first error (issue 1132)
jschoubben2026-10-18 19:18:08 +02:00
0b391f49a2
Write each module's have and the node's own facts beside the report, grouped per module and keyed by the module the controller names (issue 1132)
jschoubben2026-10-18 19:10:05 +02:00
6469e82384
Merge pull request 'A directory says how it reacts to files it does not know; the node-engine moves out what a move-out directory does not know (issue 1024)' (#117) from feat/owned-paths into main
mesh-tools2026-10-17 16:20:06 +00:00
dae79c7643
Prove move-out on a machine that is not Arch (issue 1024)
mesh-tools2026-10-17 16:16:02 +00:00
d237dee4c9
Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)
mesh-tools2026-10-17 16:09:33 +00:00
cd13f7726e
Merge pull request 'Feature 57 (config and provisioning): release mesh-host' (#116) from release/57-config-and-provisioning into main
mesh-tools2026-10-16 09:32:15 +00:00
bff1ac14a1
Feature 57 (config and provisioning): release mesh-host, the reviewed release branch on top of main
mesh-tools2026-10-16 08:24:13 +00:00
49c9002c04
Merge pull request 'Grant the genesis controller user operator-channel.tell (issue 835)' (#113) from feat/mail-seats into main
mesh-tools2026-10-15 17:09:30 +00:00
c3b2fce0a2
Grant the controller's new operator-channel.tell publish to the genesis user (issue 835)
jochen2026-10-15 17:49:51 +02:00
198fd34ec4
Merge pull request 'Start no account's manager to look at its units (hq issue 764)' (#112) from fix/764-a-look-starts-no-user-manager into main
mesh-admin2026-10-14 22:38:02 +00:00
62af89f85d
Start no account's manager to look at its units (hq issue 764)
jschoubben2026-10-15 00:33:34 +02:00
1a26778823
Merge pull request 'A busy container is left running until it says idle, within 15 minutes (issue 594, hq ADR 0335)' (#98) from feat/335-a-busy-container-is-replaced-when-idle into main
mesh-admin2026-10-13 22:20:54 +00:00
b9a293f8c8
Merge remote-tracking branch 'origin/main' into feat/335-a-busy-container-is-replaced-when-idle
jschoubben2026-10-14 00:00:09 +02:00
695e022991
Keep a replacement owed after a busy wait, and clamp a wait from a later clock
jschoubben2026-10-13 23:59:58 +02:00
0e92ef3d1b
Merge pull request 'Report the networks the outward links are on, for the local network (issue 154, ADR 0340)' (#107) from fix/154-local-network into main
mesh-admin2026-10-13 13:07:08 +00:00
12bc6a56a3
Merge pull request 'Adopt genesis's bus through the bus's planned step, its streams snapshotted first (issue 590, hq ADR 0333 §3)' (#108) from fix/590-adopt-the-bus-as-its-planned-step into main
mesh-admin2026-10-13 11:11:41 +00:00
cdcfcd9380
Adopt genesis's bus through the bus's planned step, its streams snapshotted first (hq issue 590, ADR 0333 §3)
jochen2026-10-13 11:47:10 +02:00
130c5d98a6
Merge pull request 'Build the Go toolchain at genesis's base step, beside the base (issue 616)' (#106) from fix/616-the-base-builds-every-genesis-toolchain into main
mesh-admin2026-10-13 09:23:04 +00:00
cb7b71dcc5
Report the networks the outward links are on, for the local network (issue 154, ADR 0340)
jochen2026-10-13 11:20:21 +02:00
8108dd5c23
Build the Go toolchain at genesis's base step, beside the base (hq issue 616)
jochen2026-10-13 11:13:44 +02:00
f0d39b4a4a
Merge pull request 'Wait until the node applied the genesis document before the sdk step asks for a build (issue 615)' (#105) from fix/615-wait-for-the-genesis-document into main
mesh-admin2026-10-13 09:08:59 +00:00
89fd0c06e1
Wait until the node applied the genesis document before the sdk step asks for a build (hq issue 615)
jochen2026-10-13 10:59:45 +02:00
17038b2a07
Merge pull request 'Raise genesis's store as the postgres module's server, so the store step adopts it as it runs (issue 609, hq ADR 0338)' (#104) from fix/609-genesis-raises-the-store-as-postgres into main
mesh-admin2026-10-13 08:55:41 +00:00
4dde21f0ab
Raise genesis's store as the postgres module's server, so the store step adopts it as it runs (hq issue 609, ADR 0338)
jochen2026-10-13 10:47:53 +02:00
7d1d6bffe3
Merge pull request 'Place the bus's users after every push until the bus is adopted (issue 608)' (#103) from fix/608-place-the-bus-users-after-every-push into main
mesh-admin2026-10-13 05:00:42 +00:00
7283209d1a
Place the bus's users after every push until the bus is adopted (hq issue 608)
jochen2026-10-13 06:58:39 +02:00
64f0ab4051
Merge pull request 'genesis: seal the build agent the forge it raised, in place of the builder's npm-password (hq issue 121, ADR 0336)' (#102) from fix/121-genesis-package-registry into main
mesh-admin2026-10-13 03:37:15 +00:00
5f147fe6b9
Seal the build agent the forge genesis raised, in place of the builder's npm-password (hq issue 121, ADR 0336)
jochen2026-10-13 02:55:11 +02:00
9e233e1d87
Replay R92's commit before its fix: mesh-host main without genesis's registry trust (#91 reverted)
replay/r92-before
jochen2026-10-13 02:57:35 +02:00
0d11b4fc93
Merge pull request 'Install the build agent at genesis, the module that builds since ADR 0190 (issue 596)' (#101) from fix/596-genesis-installs-the-build-agent into main
mesh-admin2026-10-13 00:52:22 +00:00
d34b4f32e1
Merge pull request 'Leave a file the controller's manifest writes itself out of genesis's secrets (issue 597)' (#100) from fix/597-a-file-the-module-writes-is-not-a-secret into main
mesh-admin2026-10-13 00:40:33 +00:00
d941d798e9
Install the build agent at genesis, the module that builds since ADR 0190 (hq issue 596)
jochen2026-10-13 02:25:10 +02:00
b7f70bc4c0
Leave a file the controller's manifest writes itself out of genesis's secrets (hq issue 597)
jochen2026-10-13 02:23:21 +02:00
8431ac9656
Merge pull request 'Raise genesis's bus where the nats module keeps it, so adopting it keeps it (issue 590, hq ADR 0333)' (#99) from fix/590-genesis-bus-is-the-nats-module into main
mesh-admin2026-10-13 00:22:01 +00:00
bc2a448512
Raise genesis's bus where the nats module keeps it, so adopting it keeps it (hq issue 590, ADR 0333)
jochen2026-10-13 02:09:03 +02:00
bb60e7b584
Leave a busy container running until it says idle, within 15 minutes
jschoubben2026-10-13 00:41:32 +02:00
7a41e12063
Merge pull request 'The tool runner joins the own groups of the modules whose tools it runs, and own directories may keep their group (hq ADR 0334, issue 567)' (#97) from feat/334-the-runner-joins-own-groups into main
mesh-admin2026-10-12 22:22:14 +00:00
c7b534a08c
Keep a module directory's setgid bit, warn about a refused runner, and restart the runner when it leaves (hq ADR 0334 review)
jschoubben2026-10-13 00:11:50 +02:00
ccc86d3594
Put the tool runner in the own group of each module whose tools it runs (hq ADR 0334 §2)
jschoubben2026-10-13 00:06:29 +02:00
6fe82c61bd
Merge pull request 'Raise genesis on the bus the mesh runs on, from one bundle (issue 146, ADR 0331)' (#96) from fix/146-genesis-on-the-bus into main
mesh-admin2026-10-12 21:11:52 +00:00
8e95c1d9ed
Merge pull request 'A machine says what it is made of, and says it once a day unasked (issue 160)' (#92) from fix/160-a-machine-says-what-it-is into main
mesh-admin2026-10-12 21:07:05 +00:00
cb55a46400
Place the bus's users again on a re-run until the bus is adopted (hq issue 146, review 102)
jochen2026-10-12 23:06:33 +02:00
37947ca4ee
Raise genesis on the bus the mesh runs on, from one bundle (hq issue 146, ADR 0331)
jochen2026-10-12 22:49:49 +02:00
d8e785bb4b
Merge pull request 'Keep libraries under a group of their own, and give each joining module a user in it (hq ADR 0328, issue 567)' (#95) from feat/328-libraries-and-module-users into main
mesh-admin2026-10-12 20:28:16 +00:00
281837847e
Put busybox's account removal back, test the sample, and read a held lock as kept only for a running walk (hq ADR 0328 review)
jschoubben2026-10-12 22:21:42 +02:00
c7551162d6
Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)
jschoubben2026-10-12 22:18:16 +02:00
2cffa33bcc
Keep a root without asking only when its data beneath is the library's already (hq ADR 0328 §7)
jschoubben2026-10-12 22:14:10 +02:00
2a2be687f3
Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)
jschoubben2026-10-12 22:11:09 +02:00
303d4037e8
Merge pull request 'Give the controller the contract it can fill: tool runners by name, the take act's access id, wait reasons and ACL support (hq ADR 0325)' (#94) from feat/325-the-contract-the-controller-needs into main
mesh-admin2026-10-12 17:57:41 +00:00
5c8e768ef5
Read an account by its name, never as a number getent takes for a uid (hq ADR 0325)
jschoubben2026-10-12 19:47:31 +02:00
aad33dfe5c
Give the controller the contract it can fill (hq ADR 0325, issue 567)
jschoubben2026-10-12 19:45:13 +02:00
ef26dba275
Merge pull request 'Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)' (#93) from feat/325-identities-and-kept-folders into main
mesh-admin2026-10-12 17:50:59 +00:00
d12bba0109
Give the kept-folder tests' folders an unprivileged owner when they run as root (hq ADR 0325)
jschoubben2026-10-12 19:34:59 +02:00
c85c2804a0
Apply an older controller's accesses exactly as before (hq ADR 0325)
jschoubben2026-10-12 19:24:24 +02:00
2ff40109ac
Read a filesystem that could not be named as unknown, never as a move (hq ADR 0325 sixth review)
jschoubben2026-10-12 19:20:53 +02:00
46c16e18fe
Name a filesystem by its UUID, its kernel id or its source, and keep nothing that has no name (hq ADR 0325 fifth review)
jschoubben2026-10-12 19:14:42 +02:00
f00f9c2a2f
Name a filesystem by its kernel id, never its device name (hq ADR 0325 fourth review)
jschoubben2026-10-12 19:10:18 +02:00
21cd036232
Format the third review's tests (hq ADR 0325)
jschoubben2026-10-12 19:06:57 +02:00
f0adb177f0
Leave no leftover for a folder kept only while empty, and name filesystems by more than their mount point (hq ADR 0325 third review)
jschoubben2026-10-12 19:06:34 +02:00
d2d9fbbd7d
Hold what mounts a missing disk, and say entries the mesh could not take out (hq ADR 0325 re-review)
jschoubben2026-10-12 19:03:02 +02:00
2026ef36f3
Judge a kept folder before every walk, and keep nothing a disk mounted over (hq ADR 0325 review)
jschoubben2026-10-12 18:55:47 +02:00
51e97a8c14
Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)
jschoubben2026-10-12 18:43:04 +02:00
c7a4bf5c11
Judge the daily report by wall time, and keep one filesystem check at a time (issue 160)
jochen2026-10-12 17:42:18 +02:00
ec983bfc3d
Have a machine say what it is made of, and say it once a day unasked (issue 160)
jochen2026-10-12 17:21:36 +02:00
jschoubben
mesh-tools
jochen
mesh-admin