novox/mesh-host
6
0
Fork 0
Code Issues Pull Requests 1 Releases Wiki Activity
Files
2dbbda51c6588fef1175ab2ebeef96ac0d0c7fb8
mesh-host/internal/apply
T
History
jochen 2410796869 Let the setuid search run to completion and judge from the last complete one (hq issue 361) 
A machine with millions of files never finished the walk within fifteen
minutes, so its agent account was never judged and the router refused to
link. Only root can make a setuid-root file, so a complete search stays
sound until root acts: it now runs at idle priority with no bound, is kept
beside the engine's state, judges for rootsearch.FreshFor from its start,
runs again daily and after an apply that moves accounts, packages, actions
or sudo rules, and an incomplete or stale search is never free.
2026-10-10 00:53:05 +02:00
..
access_test.go
declaration: an access is mounted, and the host owns nothing about it
2026-09-05 22:19:33 +02:00
agent_home_guard_test.go
Keep main's placement guard, and refuse only an archive or a written-into file below an agent's home
2026-10-09 10:10:05 +02:00
agent_home_guard.go
Keep main's placement guard, and refuse only an archive or a written-into file below an agent's home
2026-10-09 10:10:05 +02:00
apply_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
apply.go
Give a handed-over directory through no link on every apply, not only the first (hq issue 356, review)
2026-10-09 19:58:27 +02:00
archive_removal_test.go
An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)
2026-10-04 12:20:41 +02:00
archive_replace_test.go
Make an unpacked archive exactly the archive (novox/hq issue 220)
2026-10-04 00:17:50 +02:00
archive_unpacked.go
An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)
2026-10-04 12:20:41 +02:00
archive.go
Let a planned maintenance window fail no apply (hq issue 291)
2026-10-07 13:11:03 +02:00
block_test.go
review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)
2026-09-27 00:09:34 +02:00
block.go
Parents the host makes inside an owner's home are the owner's (hq ADR 0182, to-be 41)
2026-10-04 04:07:40 +02:00
facts_test.go
A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)
2026-10-01 21:24:37 +02:00
file_handover_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
former_archive_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
found_is_said_test.go
Give a handed-over directory through no link on every apply, not only the first (hq issue 356, review)
2026-10-09 19:58:27 +02:00
found_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
giveback_test.go
Say in the plan that a unit is restored only if it is still as the mesh held it
2026-10-09 02:03:51 +02:00
groups_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
groups.go
Give back only the groups the mesh added, and say when a new login is needed (hq ADR 0252, issue 247)
2026-10-08 12:04:08 +02:00
handover_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
health_check_test.go
Judge how a module says it is ready, beside whether it stays up (hq ADR 0240, to-be 48 Phase B)
2026-10-07 14:08:32 +02:00
hold_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
hold.go
A user unit waits for its account's manager, and lingering is the account's (hq ADR 0177)
2026-10-04 12:41:32 +02:00
home_links_test.go
Read the homes in one order, so their test does not depend on a map's
2026-10-09 12:36:56 +02:00
home_links.go
Read the homes in one order, so their test does not depend on a map's
2026-10-09 12:36:56 +02:00
home_parents_test.go
Parents the host makes inside an owner's home are the owner's (hq ADR 0182, to-be 41)
2026-10-04 04:07:40 +02:00
homes_linux.go
Believe a hand-over only signed by the mesh, and give it through no link (hq issue 356, review)
2026-10-09 19:45:00 +02:00
homes_other.go
Believe a hand-over only signed by the mesh, and give it through no link (hq issue 356, review)
2026-10-09 19:45:00 +02:00
inspect_scope_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
into_handover_test.go
Leave a unit alone when another declared service still holds it (hq issue 190)
2026-10-05 22:21:21 +02:00
into_test.go
Take a key or list member the host may have written itself as the mesh's, so undeclaring gives the file back (hq ADR 0102)
2026-09-22 19:57:15 +02:00
into.go
Parents the host makes inside an owner's home are the owner's (hq ADR 0182, to-be 41)
2026-10-04 04:07:40 +02:00
left_out_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
logging_test.go
A container may log to the journal (hq ADR 0179)
2026-10-02 17:02:49 +02:00
maintenance_window_test.go
An apply leaves a container a maintenance window holds still (hq issue 224)
2026-10-05 18:27:04 +02:00
maintenance_window.go
Let a planned maintenance window fail no apply (hq issue 291)
2026-10-07 13:11:03 +02:00
mesh_names_test.go
A container's mesh names are part of what it is
2026-09-28 17:19:38 +02:00
mode_test.go
Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first
2026-09-23 23:15:28 +02:00
mode.go
Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first
2026-09-23 23:15:28 +02:00
opening_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
opening.go
The mesh's own ban chain is a ban wherever it hangs; the front end's record is cited as 0180 (hq ADR 0186)
2026-10-02 18:42:16 +02:00
placement_guard_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
placement_guard.go
Accept and ignore a file's trusted, and give each runtime its own time to answer
2026-10-09 01:42:09 +02:00
placement_homes_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
plan_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
plan.go
Give a service's held state its own field and key, so main compiles again
2026-10-09 03:03:58 +02:00
process_step_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
process_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
process_witness_test.go
Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)
2026-10-06 18:23:56 +02:00
process.go
Hold the removal order a module may rely on, and say what a killed stop leaves (hq ADR 0263)
2026-10-08 21:16:04 +02:00
reads_test.go
Look at what a container mounts directly, accept a pre-upgrade label, and write the genesis secret without a newline
2026-09-23 23:40:27 +02:00
removal_order_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
remove_file_test.go
An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)
2026-10-05 01:30:42 +02:00
restart_order_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
root_moved_test.go
Let the setuid search run to completion and judge from the last complete one (hq issue 361)
2026-10-10 00:53:05 +02:00
root_moved.go
Let the setuid search run to completion and judge from the last complete one (hq issue 361)
2026-10-10 00:53:05 +02:00
runonce_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
runtime_roots_more_test.go
Ask the running runtimes where they keep their data, and read every form a unit says it in
2026-10-09 01:22:11 +02:00
runtime_roots_test.go
Read every runtime's data root, keep when a directory was found, and key a hand-over to its resource
2026-10-09 00:55:21 +02:00
schedule_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
schedule.go
Let a planned maintenance window fail no apply (hq issue 291)
2026-10-07 13:11:03 +02:00
sealed_test.go
A user, bytes, and an archive — because most of what people install is
2026-08-30 03:22:38 +02:00
ssh_home_test.go
Say every directory used as found, let a person hand it over, and refuse the runtime's data and any .ssh
2026-10-09 00:28:01 +02:00
stateless_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
stayed_running_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
store_away_test.go
Let a planned maintenance window fail no apply (hq issue 291)
2026-10-07 13:11:03 +02:00
store_away.go
Let a planned maintenance window fail no apply (hq issue 291)
2026-10-07 13:11:03 +02:00
strays.go
A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)
2026-10-01 21:24:37 +02:00
takeover_test.go
review: a retired configuration that comes back is retired again on its first original, and only wg-quick's own file is ever removed (hq ADR 0119)
2026-09-27 00:55:50 +02:00
takeover.go
review: a retired configuration that comes back is retired again on its first original, and only wg-quick's own file is ever removed (hq ADR 0119)
2026-09-27 00:55:50 +02:00
testing_dirs.go
Raise a process-form controller at genesis as the container it replaces (hq issue 223)
2026-10-04 01:47:33 +02:00
user_numeric_test.go
An owner may be a number the machine has never heard of
2026-09-01 23:45:02 +02:00
user_test.go
Refuse to take over a system account as one that never becomes root
2026-10-09 10:07:52 +02:00
user_unix.go
A user, bytes, and an archive — because most of what people install is
2026-08-30 03:22:38 +02:00
user.go
Refuse to take over a system account as one that never becomes root
2026-10-09 10:07:52 +02:00
userscope_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
vocabulary_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
whole_test.go
A file written over is given its kept original back when undeclared (hq ADR 0118, 0102)
2026-10-04 12:54:16 +02:00
whole.go
An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)
2026-10-05 01:30:42 +02:00