jschoubben b72b71a989 The host applies the newest declaration, a file may be created once, the foundation filters first ...

031: a window of unacknowledged declarations is drained to the newest; the
rest are set aside and reported as superseded. 035: a file resource may say
create-once — written when absent, kept untouched when present (ADR 0087).
054: the bundle installs nftables and loads a base ruleset before the store
and broker, in the table the filter module later replaces (ADR 0088).

2026-09-21 12:11:52 +02:00

..

access_test.go

declaration: an access is mounted, and the host owns nothing about it

2026-09-05 22:19:33 +02:00

apply_test.go

The host applies the newest declaration, a file may be created once, the foundation filters first

2026-09-21 12:11:52 +02:00

apply.go

The host applies the newest declaration, a file may be created once, the foundation filters first

2026-09-21 12:11:52 +02:00

archive.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

process_test.go

A unit file reinterprets an environment value; a container does not

2026-09-15 12:40:36 +02:00

process.go

A unit file reinterprets an environment value; a container does not

2026-09-15 12:40:36 +02:00

runonce_test.go

A one-shot service that finished is not stopped, and a container is what it reads

2026-09-14 16:51:57 +02:00

schedule_test.go

A one-shot service that finished is not stopped, and a container is what it reads

2026-09-14 16:51:57 +02:00

schedule.go

A one-shot service that finished is not stopped, and a container is what it reads

2026-09-14 16:51:57 +02:00

sealed_test.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

user_numeric_test.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

user_unix.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

user.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

vocabulary_test.go

A secret can reach a container's environment, and sit inside a config file

2026-08-31 22:25:57 +02:00