Write the store's superuser secret where the postgres module now keeps it, and read the bus's release from its upstream image (issues 1873, 1875) #130

Merged

mesh-tools merged 2 commits from fix/1873-system-state-dirs into main 2026-10-22 20:04:32 +00:00

Conversation 1 Commits 2 Files Changed 4

+74 -15

2 Commits

Author	SHA1	Message	Date
jschoubben	8c0bb9d453	Read the bus's release from the nats module's pinned server image, not a NATS_BASE build argument (issue 1875) ... The nats module takes its server as an upstream artifact, pinned by digest (issue 1641), and builds no image on a NATS_BASE argument any more. The test of the bundle's bus read that argument, found none, and failed every mesh-host check against the catalogue's main. Bootstrap's own code never read it: the bundle's bus image comes from the bundle, so genesis was not affected. The test now compares the bundle's image with the module's server by repository and digest.	2026-10-22 21:46:34 +02:00
jschoubben	de809d7e0a	Keep the store's superuser file in the postgres module's own directory, not in /var/lib/postgres (issue 1873) ... The postgres module's own secrets move from /var/lib/postgres, the postgresql package's directory, to its directory under /var/lib/mesh (mesh-catalog, fix/1873-system-state-dirs). Genesis writes the store's superuser file at the module's own-secret path, so the store it raises is the one the module adopts in place: StoreSuperuserFile follows, to /var/lib/mesh/postgres/superuser.secret. A directory genesis makes on the way is 0755, the mode of the mesh's directories, and only the credential's own is 0700: MkdirAll at 0700 would have closed /var/lib/mesh on a machine that had none yet.	2026-10-22 21:36:38 +02:00