dd9ab7927d
Merge pull request 'Genesis trusts its registry before it pushes to it (issue 92)' (#91) from fix/92-genesis-trusts-its-registry into main
mesh-admin2026-10-12 14:36:16 +00:00
0818e4c29a
Hold the trust-before-push order by a test, and refuse early what would stop it (issue 92)
jochen2026-10-12 16:29:14 +02:00
41e640d668
Have genesis trust its registry before pushing to it (issue 92)
jochen2026-10-12 16:13:11 +02:00
a1f9856b39
Merge pull request 'A package manager that does not answer fails only the packages; the rest of the declaration applies (issue 233)' (#90) from fix/233-a-failed-probe-fails-only-what-needs-the-tool-2 into main
mesh-admin2026-10-12 14:11:11 +00:00
74ed7cbe0a
Say a re-apply whose result changed, refuse whole when the package manager is not there, and install the packages in the apply that made it answer (issue 233 review)
jochen2026-10-12 15:39:07 +02:00
36704b5471
Merge pull request 'Give a mesh directory its mode and owner only through a descriptor (issue 358)' (#87) from fix/358-descriptor-only-directory-mode into main
mesh-admin2026-10-12 13:13:13 +00:00
6e44a27a63
Fail only the packages when the package manager does not answer, and apply the rest, so a later declaration can restore what an earlier one removed (issue 233)
jochen2026-10-12 14:28:55 +02:00
dce0eef1ca
Merge pull request 'Judge a node's directories read-only before the walk refuses any (issue 358)' (#88) from fix/358-judge-directories-read-only into main
mesh-admin2026-10-12 12:48:55 +00:00
e3c3bb37d0
Give a mesh directory its mode and owner only through a descriptor, and gate what the walk refuses (issue 358)
jschoubben2026-10-12 14:00:53 +02:00
b92fb68116
Judge a node's directories read-only before the walk refuses any (issue 358)
jschoubben2026-10-12 13:57:52 +02:00
3f7f797168
Merge pull request 'A read-write access grants the path's own group, and the path is never changed (hq ADR 0312, issue 537)' (#86) from feat/537-a-read-write-access-grants-the-paths-group into main
mesh-admin2026-10-12 11:22:56 +00:00
c433e76de2
Judge a granted group by number, grant nothing a group cannot write, and keep the look bounded (hq ADR 0312, issue 537 review)
jschoubben2026-10-12 12:53:42 +02:00
f4efc3cad0
Grant a read-write access's path group to what runs the module's code, so a module can write shared data without the mesh changing it (hq ADR 0312, issue 537)
jschoubben2026-10-12 12:23:38 +02:00
a76baa4b47
Merge pull request 'Carry the controller's grant to ask the delivery's owner for its groups in the installer's first user list (hq ADR 0306, issue 525)' (#85) from feat/525-grant-delivery-groups into main
mesh-admin2026-10-12 10:14:32 +00:00
90ce9e9d9f
Carry the controller's grant to ask the delivery's owner for its groups in the installer's first user list (hq ADR 0306, issue 525)
jschoubben2026-10-12 12:09:18 +02:00
df5de3bd9f
Merge pull request 'Say an unhealthy resource's restart count as what it counts (issue 458)' (#84) from fix/458-restarts-say-what-they-count into main
mesh-admin2026-10-12 09:03:47 +00:00
a18d09db75
Say an unhealthy resource's restart count as the engine's own since it began watching
jschoubben2026-10-12 10:47:07 +02:00
3333a05a74
Merge pull request 'A refused directory gates its module, and a file meets the placement guard (issue 495)' (#83) from fix/495-a-refused-directory-gates-its-module into main
mesh-admin2026-10-11 17:00:22 +00:00
4695dfc0a2
Say both a gated module and a machine stop, and count skipped apart (review of #83)
jschoubben2026-10-11 18:51:04 +02:00
7233ddbe35
Gate a module behind its refused directory and judge a file by the placement guard (issue 495)
jschoubben2026-10-11 18:19:25 +02:00
1acfed4add
Test that a refused directory gates its module and a file meets the same guard (issue 495)
jschoubben2026-10-11 18:17:59 +02:00
6defec8f68
Merge pull request 'Refuse a declaration composed from an older assignment generation than the machine applied (issue 234)' (#82) from fix/234-refuse-a-declaration-from-an-older-generation into main
mesh-admin2026-10-11 16:00:01 +00:00
2833caf3d6
Merge pull request 'A failed run-once process runs again on every apply until it passes (hq issue 467)' (#81) from fix/467-a-failed-step-runs-again into main
mesh-admin2026-10-11 09:30:49 +00:00
20d5af9b2d
Refuse a declaration composed from an older assignment generation than the machine applied (hq issue 234)
jschoubben2026-10-11 11:22:30 +02:00
0ec96a048e
Clear a step's success only when it was started and failed, and say updated when it passes again (novox/hq issue 467)
jschoubben2026-10-11 11:12:15 +02:00
c957f1ec5e
Run a failed run-once process again on every apply until it passes (novox/hq issue 467)
jschoubben2026-10-11 11:07:17 +02:00
85c51ebb59
Merge pull request 'A refused line's request is read before it is answered, so a busy line reads busy (issue 434)' (#80) from fix/434-a-busy-line-is-answered-busy-whatever-the-load into main
mesh-admin2026-10-11 00:55:47 +00:00
f9805b2113
Bound what a refusal costs the engine, and let the busy tests fail instead of hang
jschoubben2026-10-11 02:47:11 +02:00
70cb613614
Read a refused line's request before answering it, so a busy line is read as busy
jschoubben2026-10-11 02:35:20 +02:00
bd5cc69804
Merge pull request 'The setuid walk paces itself by the machine's I/O pressure (issue 433)' (#79) from fix/433-the-setuid-walk-yields-to-a-busy-disk into main
mesh-admin2026-10-11 00:03:46 +00:00
f311fa36dc
The setuid walk is paced before each file too, so a large directory is not read blind (review of issue 433)
jschoubben2026-10-11 01:55:39 +02:00
30242197fa
The paced walk keeps a tenth of the time, and reads the pressure since its last look (review of issue 433)
jschoubben2026-10-11 01:53:25 +02:00
8f7db549ae
The setuid walk paces itself by the machine's I/O pressure (issue 433)
jschoubben2026-10-11 01:47:43 +02:00
5226d7bcd0
Merge pull request 'Node-engine: state a tool check that waits for the operator as waiting (issue 386, ADR 0283)' (#78) from feat/386-a-wait-for-the-operator into main
mesh-admin2026-10-10 20:03:27 +00:00
9545121ec9
Clear an old pass on a wait, and say a change of waits (review of #78)
jochen2026-10-10 21:14:14 +02:00
3abb07f1e2
State a tool check that waits for the operator as waiting (issue 386, ADR 0283)
jochen2026-10-10 21:11:02 +02:00
9d8aa9d6f0
Merge pull request 'Carry the controller's grant to ask mesh-delivery for its delivery times in the installer's first user list (hq ADR 0282, issue 382)' (#77) from feat/382-carry-times-grant into main
mesh-admin2026-10-10 18:39:44 +00:00
212a3cc113
Carry the controller's grant to ask the delivery's owner for its delivery times in the installer's first user list (hq ADR 0282)
jochen2026-10-10 20:32:16 +02:00
cc0b8554b1
Merge pull request 'Show how far the setuid search got, and start a fresh one when the terminal asks (hq issue 361)' (#76) from fix/361-the-setuid-search-shows-its-progress into main
mesh-admin2026-10-10 00:21:51 +00:00
0b4c86e3be
Count a setuid find only where the account can execute it, read at every judgement (hq issue 361)
jochen2026-10-10 02:00:10 +02:00
8e79403c21
Show how far the setuid search got, and start a fresh one when the terminal asks (hq issue 361)
jochen2026-10-10 01:55:58 +02:00
b8c8546118
Merge pull request 'Let the setuid search run to completion, resumably, and judge from the last complete one (hq issue 361)' (#75) from fix/361-the-setuid-search-runs-to-completion into main
mesh-admin2026-10-09 23:18:44 +00:00
a7270f00cb
Keep the walk's paths as bytes, forget a walk root superseded, and leave other mounts unread (hq issue 361 review)
jochen2026-10-10 01:10:56 +02:00
2dbbda51c6
Walk for setuid programs in the engine and carry an interrupted walk on (hq issue 361)
jochen2026-10-10 01:00:47 +02:00
2410796869
Let the setuid search run to completion and judge from the last complete one (hq issue 361)
jochen2026-10-10 00:53:05 +02:00
090b9082eb
Merge pull request 'Renew the engine placed by hand to the proved build, and take a hand-over from the controller's terminal (hq issue 356)' (#74) from fix/356-hand-over-by-nox-and-the-engine-on-path-renewed into main
mesh-admin2026-10-09 18:07:21 +00:00
8fc1d72cd5
Keep the setuid search's time on the caller's clock
jochen2026-10-09 20:04:11 +02:00
9a807de659
Give a handed-over directory through no link on every apply, not only the first (hq issue 356, review)
jochen2026-10-09 19:58:27 +02:00
fc6c5a92e6
Believe a hand-over only signed by the mesh, and give it through no link (hq issue 356, review)
jochen2026-10-09 19:45:00 +02:00
e74ee82a76
Renew the engine placed by hand to the proved build, and take a hand-over from the controller's terminal (hq issue 356)
jochen2026-10-09 18:32:59 +02:00
b0d03be7a4
Merge pull request 'mesh-cli: forward the line's standard input to the controller, with the line alone (hq ADR 0259 §10, ADR 0272)' (#73) from feat/a-terminal-line-takes-standard-input into main
mesh-admin2026-10-09 15:58:48 +00:00
4ea6a2f04e
mesh-cli: forward the line's standard input to the controller, with the line alone
jschoubben2026-10-09 16:34:45 +02:00
d8ff1540df
Merge pull request 'Installer's first user list: the controller's grant to ask the desk for a secret (hq ADR 0259 §10)' (#68) from feat/a-secret-given-at-the-desk into main
mesh-admin2026-10-09 14:17:41 +00:00
cdc2af7b43
Merge pull request 'Installer's first user list: the controller's grants to ask the operator (hq ADR 0259)' (#59) from feat/the-controller-asks-the-operator into main
mesh-admin2026-10-09 14:17:38 +00:00
7a2ffc0a4c
Merge pull request 'Read the session record strictly, and make its tests hold (hq ADR 0272)' (#72) from fix/272-the-session-record-read-strictly into main
mesh-admin2026-10-09 12:12:11 +00:00
b1e7b6d26e
Read the session record strictly, and make its tests hold (hq ADR 0272)
jochen2026-10-09 14:05:53 +02:00
512b0edb02
Merge pull request 'A login session is the account's own, of class user, read at accept (hq ADR 0272)' (#71) from feat/272-the-session-is-a-users-read-at-accept into main
mesh-admin2026-10-09 12:04:18 +00:00
4ba6d0864e
Carry the controller's grant to ask the desk for a secret in the installer's first user list (hq ADR 0259 §10)
jschoubben2026-10-09 11:24:52 +02:00
73e0916968
Carry the controller's grants to ask the operator and act on a warrant in the installer's first user list, so a mesh raised from it is not refused them (hq ADR 0259)
jochen2026-10-08 17:23:31 +02:00
bf3f45e769
A login session is the account's own, of class user, read at accept (hq ADR 0272)
jochen2026-10-09 13:55:45 +02:00
fd13834c0d
Merge pull request 'Say the login session a mesh-cli line comes from, and pin the SDK at go/v0.1.9 (hq ADR 0272)' (#70) from feat/272-a-login-session-and-the-tagged-sdk into main
mesh-admin2026-10-09 11:54:31 +00:00
4a5dcb0209
Say the login session a mesh-cli line comes from, and pin the SDK at go/v0.1.9 (hq ADR 0272)
jochen2026-10-09 13:40:17 +02:00
1ac7741c63
Merge pull request 'Vouch for the account that runs mesh-cli, and ask the controller its line (hq ADR 0272)' (#69) from feat/272-the-engine-vouches-for-mesh-cli into main
mesh-admin2026-10-09 11:38:39 +00:00
f684967c3b
Merge main, and close what the confirmation review found (hq ADR 0272)
jochen2026-10-09 13:09:48 +02:00
655f515aa7
Merge remote-tracking branch 'origin/main' into feat/272-the-engine-vouches-for-mesh-cli
jochen2026-10-09 13:09:16 +02:00
8f763ee911
Merge pull request 'Judge whether an account declared never to become root can (hq ADR 0266)' (#61) from feat/an-agent-account-never-becomes-root into main
mesh-admin2026-10-09 10:56:00 +00:00
564948c2f2
mesh-cli: follow a line to its answer, bound each account, refuse other namespaces (review of hq ADR 0272)
jochen2026-10-09 12:48:20 +02:00
1c61b72f35
Read the homes in one order, so their test does not depend on a map's
jochen2026-10-09 12:36:56 +02:00
2673e7a2c9
Let the setuid search run to its 15-minute bound, ask pacman once, and call a walk with errors incomplete
jochen2026-10-09 12:11:57 +02:00
021d860ca4
Vouch for the account that runs mesh-cli, and ask the controller its line (hq ADR 0272)
jochen2026-10-09 12:05:53 +02:00
b28d7bbcbf
Search for setuid programs in the background, and judge each polkit rule alone
jochen2026-10-08 21:53:16 +02:00
e2e8be72fa
Keep main's placement guard, and refuse only an archive or a written-into file below an agent's home
jochen2026-10-09 10:10:05 +02:00
d4af8bba1b
Judge an opened file's kind and links below a home, and more ways to root
jochen2026-10-08 21:19:32 +02:00
02a1c5f753
Refuse to take over a system account as one that never becomes root
jochen2026-10-08 20:52:44 +02:00
b89b143fe7
Follow no link below a home as root, and judge more ways to root
jochen2026-10-08 20:36:46 +02:00
3a727011ad
Judge whether an account declared never to become root can, so a machine's agents are known confined
jochen2026-10-08 18:30:10 +02:00
d93cc86f95
Let a user say it never becomes root, so the agents' account can be judged
jochen2026-10-08 18:26:31 +02:00
a390bce5f2
Merge pull request 'Give a service's held state its own field and key, so main compiles again' (#67) from fix/store-declared-redeclared into main
mesh-admin2026-10-09 01:09:40 +00:00
c2bae14994
Give a service's held state its own field and key, so main compiles again
jochen2026-10-09 03:03:58 +02:00
690966d847
Merge pull request 'Start again on removal what the mesh's own declaration stopped (hq ADR 0269)' (#66) from feat/give-back-a-unit-the-mesh-stopped into main
mesh-admin2026-10-09 00:54:13 +00:00
d28ca959f0
Merge pull request 'Issue 339 follow-up to #64: ask the running runtimes where they keep their data, and read every form a unit says it in' (#65) from fix/339-runtime-roots-asked into main
mesh-admin2026-10-09 00:15:24 +00:00
b232db4e17
Merge pull request 'Issue 339 follow-ups: a directory used as found is said and can be handed over; the runtime's data and any .ssh refused' (#64) from fix/339-found-directories-are-said into main
mesh-admin2026-10-09 00:15:17 +00:00
dfb14151bd
Say in the plan that a unit is restored only if it is still as the mesh held it
jochen2026-10-09 02:03:51 +02:00
a018ebd1ca
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
jochen2026-10-09 01:54:26 +02:00
7c046a8a1d
Accept and ignore a file's trusted, and give each runtime its own time to answer
jochen2026-10-09 01:42:09 +02:00
9d48b8baf9
Start again on removal what the mesh's own declaration stopped (hq ADR 0269)
jochen2026-10-09 01:35:27 +02:00
ff2553f4db
Ask the running runtimes where they keep their data, and read every form a unit says it in
jochen2026-10-09 01:22:11 +02:00
ae1293e73e
Read every runtime's data root, keep when a directory was found, and key a hand-over to its resource
jochen2026-10-09 00:55:21 +02:00
a2c2c35e85
Merge pull request 'Issue 339: the node-engine places and mounts nothing at the machine's own trees, and uses a found directory as found' (#63) from fix/339-the-engine-places-nothing-in-the-machines-own-trees into main
mesh-admin2026-10-08 22:36:45 +00:00
07164e40f3
Say every directory used as found, let a person hand it over, and refuse the runtime's data and any .ssh
jochen2026-10-09 00:28:01 +02:00
f39dbdbaf0
Give the home test's account a uid of its own, so it holds when the suite runs as root
jochen2026-10-09 00:10:28 +02:00
3a002f6e7b
Refuse a placement or mount at the machine's own trees, and use a found directory as found
jochen2026-10-08 23:58:14 +02:00
ee20388239
Merge pull request 'Hold the removal order a module may rely on, and say what a killed stop leaves (hq ADR 0263)' (#62) from fix/shares-review-followups into main
mesh-admin2026-10-08 20:57:40 +00:00
fedd9dcf35
Hold the removal order a module may rely on, and say what a killed stop leaves (hq ADR 0263)
jochen2026-10-08 21:16:04 +02:00
29a7de7699
Merge pull request 'Let the first controller keep and deliver again what a consumer gives up on (hq issue 330, ADR 0264)' (#60) from fix/330-a-message-given-up-on-is-kept into main
mesh-admin2026-10-08 18:21:04 +00:00
a31659ed03
Carry no seat queue grant for the first controller
jochen2026-10-08 18:37:58 +02:00
ccbfa9b58a
Let the first controller keep and deliver again what a consumer gives up on (hq issue 330)
jochen2026-10-08 17:52:59 +02:00
e813391dcf
Merge pull request 'Add the replay of issue 331 (R331)' (#58) from replays/331-a-tool-check-on-the-live-link into main
mesh-admin2026-10-08 15:17:20 +00:00
5684a4579d
Add the replay of issue 331, so a tool check refused as no link fails before a merge
jochen2026-10-08 17:10:29 +02:00
jschoubben
mesh-admin
jochen