Pin mesh-sdk dbcaa29, so a held module's hold no longer spreads to the modules that read from it (issue 1960) #175

2026-10-29T15:05:50Z

mesh-tools commented

2026-10-29 15:05:50 +00:00

Why

Recovery of novox (2026-10-29). de-spiegel is held on novox (an unresolved config value), and the hold spread: mailu ("it reads what de-spiegel contributes"), then route-proxy, nftables and postgres were held too, so every site behind route-proxy is down. The assigner kept wants back for de-spiegel and link2pay ("rule 5: no provider of route runs healthy") and photos ("no provider of s3-bucket runs healthy"). The operator: one module should never block another. mesh-sdk #128 stopped the spread to consumers and collectors but kept dependents() in compose/frombus/answer.go, which held the provider of what a held module contributes to, transitively.

What changes

mesh-sdk: dependents, heldBehind and the held-behind path in heldAsToday go. A held module offers the others what it last offered (its contributes and listens from the manifest of the build it runs), and only the provision that does not compose is left out.
mesh-delivery (assigner): rule 5 holds no want; an unhealthy provider is recorded and said once. Rule 3 (the canary) skips a first want only for a node that does not run the module; moves of a running module keep the canary order.
mesh-host: pins mesh-sdk dbcaa29 (the composer it runs) and expects the proxy composed beside a held de-spiegel. The pin was resolved from the exact commit with a local module proxy (git.novox.be:443 is down while route-proxy is); the reviewer recomputed both go.sum hashes from git archive dbcaa29 go and they match.
This departs from ADR 0429 §6 / design 47 (canary first and every provider healthy for every want); a decision record follows.

Quick fix or thorough fix

Quick: drop dependents() and skip the two rules for these three modules.
Thorough, chosen: no spread anywhere, the held module's offer read from what runs, per-provision leave-out, and no want held back by an unhealthy provider for any module.

How it is checked

Rows added in existing tests (no new test functions): de-spiegel held while mailu and the proxy compose; the assigner gives de-spiegel and link2pay wants with route-proxy down, photos a want with minio unhealthy, and an old-form running node still waits for the canary.
Live: on novox mailu, route-proxy, nftables and postgres compose; de-spiegel, link2pay and photos get wants; the sites behind route-proxy answer (de-spiegel's own names wait for its config value).

Group: delivery group fix/1960-no-hold-spread (mesh-sdk, mesh-delivery, mesh-host).

Reviewed-by: rev-hold@shanks at ece607e215

## Why Recovery of novox (2026-10-29). de-spiegel is held on novox (an unresolved config value), and the hold spread: mailu ("it reads what de-spiegel contributes"), then route-proxy, nftables and postgres were held too, so every site behind route-proxy is down. The assigner kept wants back for de-spiegel and link2pay ("rule 5: no provider of route runs healthy") and photos ("no provider of s3-bucket runs healthy"). The operator: one module should never block another. mesh-sdk #128 stopped the spread to consumers and collectors but kept `dependents()` in compose/frombus/answer.go, which held the provider of what a held module contributes to, transitively. ## What changes - mesh-sdk: `dependents`, `heldBehind` and the held-behind path in `heldAsToday` go. A held module offers the others what it last offered (its contributes and listens from the manifest of the build it runs), and only the provision that does not compose is left out. - mesh-delivery (assigner): rule 5 holds no want; an unhealthy provider is recorded and said once. Rule 3 (the canary) skips a first want only for a node that does not run the module; moves of a running module keep the canary order. - mesh-host: pins mesh-sdk dbcaa29 (the composer it runs) and expects the proxy composed beside a held de-spiegel. The pin was resolved from the exact commit with a local module proxy (git.novox.be:443 is down while route-proxy is); the reviewer recomputed both go.sum hashes from `git archive dbcaa29 go` and they match. - This departs from ADR 0429 §6 / design 47 (canary first and every provider healthy for every want); a decision record follows. ## Quick fix or thorough fix - Quick: drop `dependents()` and skip the two rules for these three modules. - Thorough, chosen: no spread anywhere, the held module's offer read from what runs, per-provision leave-out, and no want held back by an unhealthy provider for any module. ## How it is checked - Rows added in existing tests (no new test functions): de-spiegel held while mailu and the proxy compose; the assigner gives de-spiegel and link2pay wants with route-proxy down, photos a want with minio unhealthy, and an old-form running node still waits for the canary. - Live: on novox mailu, route-proxy, nftables and postgres compose; de-spiegel, link2pay and photos get wants; the sites behind route-proxy answer (de-spiegel's own names wait for its config value). Group: delivery group fix/1960-no-hold-spread (mesh-sdk, mesh-delivery, mesh-host). Reviewed-by: rev-hold@shanks at ece607e2152253269217072e51b31d656235bfcc

mesh-tools added 2 commits 2026-10-29 15:05:50 +00:00

Expect proxy handed beside held de-spiegel: a hold no longer spreads (issue 1960) 86a05babed

mesh-sdk's composer no longer holds a module behind a held one it reads from; the selfcompose test now expects
proxy handed, composed without de-spiegel's routes, and de-spiegel told alone. Needs mesh-sdk pinned at the fix.

Pin mesh-sdk dbcaa29, so a held module's hold no longer spreads to the modules that read from it (issue 1960)

mesh/delivery merged: source.main moved to novox/mesh-host@8c5af3e4a3a3

Details

mesh/delivery-group group fix/1960-no-hold-spread merged: every member is merged

Details

mesh/check pass ece607e21522 on 1ec73915b807 | unit 3318 run, 1951 kept, 38 skipped | integration 3994 run, 2125 kept, 38 skipped | over bound: unit, …

ece607e215

mesh-tools commented

2026-10-29 15:05:54 +00:00

Delivery novox/mesh-host@ece607e21522 — merged since 2026-10-29T15:35:35Z

Source — source.main moved to novox/mesh-host@8c5af3e4a3. Whether it reached the machines is mesh-delivery-view's, derived from source.main, the wants and the haves.

Group fix/1960-no-hold-spread: novox/mesh-controller@020c6a99b0, novox/mesh-delivery@d54eab4052, novox/mesh-host@ece607e215, novox/mesh-sdk@dbcaa29a1a

composed together: pass — the checker's verdict at the members' heads (f0569710e57f)

Transitions

2026-10-29 15:05 (new) → proposed (announced): novox/mesh-host#175's head announced
2026-10-29 15:05 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false)
2026-10-29 15:35 ready → merged (merged): on the trunk its modules follow: merged there

The commit's note under refs/notes/mesh-plan keeps every transition of this change up to its merge: git log --notes=mesh-plan.

**Delivery** `novox/mesh-host@ece607e21522` — **merged** since 2026-10-29T15:35:35Z **Source** — source.main moved to novox/mesh-host@8c5af3e4a3a3. Whether it reached the machines is `mesh-delivery-view`'s, derived from `source.main`, the wants and the haves. **Group** `fix/1960-no-hold-spread`: novox/mesh-controller@020c6a99b035, novox/mesh-delivery@d54eab4052d1, novox/mesh-host@ece607e21522, novox/mesh-sdk@dbcaa29a1a38 - composed together: pass — the checker's verdict at the members' heads (f0569710e57f) **Transitions** - 2026-10-29 15:05 (new) → proposed (announced): novox/mesh-host#175's head announced - 2026-10-29 15:05 proposed → ready (accepted): a verdict names this commit and the trunk's head as its trunk commit, the gate passed or warned, and the repository's own check did not fail; or the check gates no merge (check-gates-merge false) - 2026-10-29 15:35 ready → merged (merged): on the trunk its modules follow: merged there The commit's note under `refs/notes/mesh-plan` keeps every transition of this change up to its merge: `git log --notes=mesh-plan`.

mesh-tools commented

2026-10-29 15:19:03 +00:00

mesh-delivery: the operator's Approve of this pull request's merge into main is ended: a head it covers moved on: the heads it covers are no longer the group's heads. Nothing is merged on it. The operator is asked again once the checks pass at the new head.

mesh-tools merged commit 8c5af3e4a3 into main

2026-10-29 15:35:33 +00:00

mesh-tools deleted branch fix/1960-no-hold-spread

2026-10-29 15:35:34 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-host#175