novox/mesh-host
18
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
Files
3ed9abf658e08ef6024713d6a655e8b44d677e7d
mesh-host/internal/apply
T
History
jschoubben 6b32e07164 Fill a provision's ${secret:} at the write from the vault's value sealed to this machine, so the provisioner's client never holds it (issue 1954 L6-E1, E2; ADR 0570 clause 6) 
The provisioner's client fills a handed module's file but for each `${secret:<provision>}` (or a whole `secrets` file
that is the placeholder alone).
- The node-engine reads the provision's key `<node>.<consumer>.<provision>[.<local>]` in mesh-provisioner's
  `provisions`. The key must be `provided` and carry the vault's reference.
- It asks the vault's `own` for that pair credential sealed to this machine, at least at the reference's generation,
  and opens it with the node's sealing key.
- It writes the file as declared (its owner), 0600 when the declaration gives no mode.
- Anything short of that refuses the write, naming the provision and why.

A module the node composes itself already has its `secrets` files written so: its composition carries the vault's
value from `own`, written 0600 with the declared owner.

Pins mesh-sdk 4a96793 (go/provisions). Tests: rows in TestAWriteAndAnApplyOfTheSameFileSerialise.
2026-10-29 22:36:53 +01:00
..
access_test.go
Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)
2026-10-12 18:43:04 +02:00
agent_home_guard_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
agent_home_guard.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
alone_test.go
The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945)
2026-10-25 21:50:49 +01:00
alone.go
The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945)
2026-10-25 21:50:49 +01:00
apply_test.go
apply: reload units only for a unit file actually written or removed (issue 1126)
2026-10-28 15:49:34 +01:00
apply.go
Keep the node's own as it runs from an engine's first start, and refuse the node's own apply removing a module no want removed (issue 774, review round 1)
2026-10-29 21:25:51 +01:00
archive_removal_test.go
An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)
2026-10-04 12:20:41 +02:00
archive_replace_test.go
Make an unpacked archive exactly the archive (novox/hq issue 220)
2026-10-04 00:17:50 +02:00
archive_unpacked.go
An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)
2026-10-04 12:20:41 +02:00
archive.go
Compose each module from its build and read what providers elsewhere serve, pinning mesh-sdk cebc651, so a self-composing node hands its moved modules and settles mailu's domain (issue 1126)
2026-10-27 21:01:16 +01:00
block_test.go
review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)
2026-09-27 00:09:34 +02:00
block.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
busy_test.go
Set a running container aside until its replacement runs, and put it back when the replacement does not come up (issue 1945)
2026-10-25 12:14:41 +01:00
busy.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
container_groups_test.go
Pass a container's groups to the runtime as supplementary groups and report container-groups (issues 1637, ADR 0480 clause 7)
2026-10-21 15:34:37 +02:00
containers_kept_test.go
Take a container left set aside as the next apply's, and bound an apply to 30 minutes (issue 1945)
2026-10-25 12:18:50 +01:00
declared_home_test.go
Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)
2026-10-20 23:32:27 +00:00
exec_killed_test.go
Run an apply in a context the bus's loss cannot end, and say why a killed command was killed (issue 1945)
2026-10-25 12:09:28 +01:00
facts_test.go
A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)
2026-10-01 21:24:37 +02:00
file_handover_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
filled_apply_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
filled_library_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
filled_runtime_roots_test.go
Judge a filled write with the roots the last apply read, asking no runtime per file (issue 1138)
2026-10-19 00:11:58 +02:00
filled_test.go
The bus node writes the bus's user list alone from the newest composition of the bus module, with no want, and says it in the bus module's have (ADR 0547 §8, issue 1945)
2026-10-25 21:50:49 +01:00
filled.go
Fill a provision's ${secret:} at the write from the vault's value sealed to this machine, so the provisioner's client never holds it (issue 1954 L6-E1, E2; ADR 0570 clause 6)
2026-10-29 22:36:53 +01:00
former_archive_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
found_is_said_test.go
Give a handed-over directory through no link on every apply, not only the first (hq issue 356, review)
2026-10-09 19:58:27 +02:00
found_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
giveback_test.go
Say in the plan that a unit is restored only if it is still as the mesh held it
2026-10-09 02:03:51 +02:00
groups_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
groups.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
handover_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
health_check_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
hold_test.go
Set a running container aside until its replacement runs, and put it back when the replacement does not come up (issue 1945)
2026-10-25 12:14:41 +01:00
hold.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
home_links_test.go
Read the homes in one order, so their test does not depend on a map's
2026-10-09 12:36:56 +02:00
home_links.go
Read the homes in one order, so their test does not depend on a map's
2026-10-09 12:36:56 +02:00
home_parents_test.go
Parents the host makes inside an owner's home are the owner's (hq ADR 0182, to-be 41)
2026-10-04 04:07:40 +02:00
homes_linux.go
Keep a module directory's setgid bit, warn about a refused runner, and restart the runner when it leaves (hq ADR 0334 review)
2026-10-13 00:11:50 +02:00
homes_other.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
identities_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
identities.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
inspect_scope_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
into_handover_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
into_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
into.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
judge_directories_test.go
Make the apply tests fit the checker's isolated step: accept any who in the refused line, skip aloud where no group can be set (issue 1919, R4g)
2026-10-23 18:54:53 +02:00
keep.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
library_linux.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
library_test.go
Make the apply tests fit the checker's isolated step: accept any who in the refused line, skip aloud where no group can be set (issue 1919, R4g)
2026-10-23 18:54:53 +02:00
library.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
logging_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
maintenance_window_test.go
Set a running container aside until its replacement runs, and put it back when the replacement does not come up (issue 1945)
2026-10-25 12:14:41 +01:00
maintenance_window.go
Let a planned maintenance window fail no apply (hq issue 291)
2026-10-07 13:11:03 +02:00
mesh_dirs_apply_linux.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
mesh_dirs_gate_test.go
Give a mesh directory its mode and owner only through a descriptor, and gate what the walk refuses (issue 358)
2026-10-12 14:00:53 +02:00
mesh_dirs_linux.go
Judge a node's directories read-only before the walk refuses any (issue 358)
2026-10-12 13:57:52 +02:00
mesh_dirs_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
mesh_dirs.go
Take a directory in the mesh's own tree that the engine's account owns as the mesh's, not as found (issue 1873)
2026-10-22 22:23:04 +02:00
mesh_names_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
mesh_tree_found_test.go
Judge the mesh's tree by where a path leads, not only by its text (issue 1873, review)
2026-10-22 22:27:45 +02:00
mode_test.go
Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first
2026-09-23 23:15:28 +02:00
mode.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
module_results_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
module_results.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
module_scope_test.go
Keep the node's own as it runs from an engine's first start, and refuse the node's own apply removing a module no want removed (issue 774, review round 1)
2026-10-29 21:25:51 +01:00
mount_waits_test.go
Make no container before a file it mounts is there, and clear the empty directory a runtime left at a file's path (issue 1873)
2026-10-22 22:29:39 +02:00
mount_waits.go
Make no container before a file it mounts is there, and clear the empty directory a runtime left at a file's path (issue 1873)
2026-10-22 22:29:39 +02:00
move_out_linux.go
Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)
2026-10-17 16:09:33 +00:00
move_out_other.go
Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)
2026-10-17 16:09:33 +00:00
move_out_test.go
Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)
2026-10-17 16:09:33 +00:00
move_out.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
objectkeep.go
Keep the content of every file given by digest on the node, so an object the controller's sweep removed never refuses a composition the node already had (issue 924)
2026-10-29 21:04:17 +01:00
opening_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
opening.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
ownership_test.go
Feature 57 (config and provisioning): release mesh-host, the reviewed release branch on top of main
2026-10-16 08:24:13 +00:00
placed.go
Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)
2026-10-12 22:11:09 +02:00
placement_guard_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
placement_guard.go
Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)
2026-10-20 23:32:27 +00:00
placement_homes_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
plan_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
plan.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
process_step_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
process_test.go
Merge pull request 'The node-engine runs yielding processes in one capped idle slice (issue 1806, ADR 0553/0554, change A)' (#148) from fix/build-cpu-yields into main
2026-10-26 14:22:54 +00:00
process_witness_test.go
Retire a daemon's running build instead of deleting it before the restart (issue 734)
2026-10-26 15:01:55 +01:00
process.go
Merge pull request 'The node-engine runs yielding processes in one capped idle slice (issue 1806, ADR 0553/0554, change A)' (#148) from fix/build-cpu-yields into main
2026-10-26 14:22:54 +00:00
reads_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
references_test.go
Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)
2026-10-21 15:41:09 +02:00
references.go
Keep the content of every file given by digest on the node, so an object the controller's sweep removed never refuses a composition the node already had (issue 924)
2026-10-29 21:04:17 +01:00
refused_directory_test.go
Say both a gated module and a machine stop, and count skipped apart (review of #83)
2026-10-11 18:51:04 +02:00
removal_order_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
remove_file_test.go
An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)
2026-10-05 01:30:42 +02:00
replace_image_test.go
Take a container left set aside as the next apply's, and bound an apply to 30 minutes (issue 1945)
2026-10-25 12:18:50 +01:00
replay358_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
restart_order_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
root_moved_test.go
Keep the walk's paths as bytes, forget a walk root superseded, and leave other mounts unread (hq issue 361 review)
2026-10-10 01:10:56 +02:00
root_moved.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
roots.go
Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)
2026-10-12 22:11:09 +02:00
runonce_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
runtime_roots_more_test.go
Ask the running runtimes where they keep their data, and read every form a unit says it in
2026-10-09 01:22:11 +02:00
runtime_roots_test.go
Read every runtime's data root, keep when a directory was found, and key a hand-over to its resource
2026-10-09 00:55:21 +02:00
schedule_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
schedule.go
The node agent runs in the node-engine: watches the wants and compositions on the link, applies one module's composition, asks the backup, writes the haves (R6-A A1, A5, A6)
2026-10-24 16:39:51 +02:00
sealed_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
ssh_home_test.go
Say every directory used as found, let a person hand it over, and refuse the runtime's data and any .ssh
2026-10-09 00:28:01 +02:00
stateless_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
stayed_running_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
step_failed_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
store_away_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
store_away.go
Let a planned maintenance window fail no apply (hq issue 291)
2026-10-07 13:11:03 +02:00
strays.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
takeover_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
takeover.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
test_hooks.go
Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)
2026-10-17 16:09:33 +00:00
testing_dirs.go
Raise a process-form controller at genesis as the container it replaces (hq issue 223)
2026-10-04 01:47:33 +02:00
user_numeric_test.go
An owner may be a number the machine has never heard of
2026-09-01 23:45:02 +02:00
user_test.go
Refuse to take over a system account as one that never becomes root
2026-10-09 10:07:52 +02:00
user_unix.go
A user, bytes, and an archive — because most of what people install is
2026-08-30 03:22:38 +02:00
user.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
userscope_test.go
Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it
2026-10-09 01:54:26 +02:00
vault_sealed_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
vocabulary_test.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
walk_linux.go
Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)
2026-10-12 22:18:16 +02:00
walk_other.go
Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)
2026-10-20 11:16:26 +00:00
walk.go
Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)
2026-10-12 22:18:16 +02:00
whole_test.go
A file written over is given its kept original back when undeclared (hq ADR 0118, 0102)
2026-10-04 12:54:16 +02:00
whole.go
An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)
2026-10-05 01:30:42 +02:00