jschoubben c7b534a08c Keep a module directory's setgid bit, warn about a refused runner, and restart the runner when it leaves (hq ADR 0334 review) ...

A module's own directories need setgid so what is made beneath keeps its own group,
and a mode of 2750 refused the whole declaration while every apply dropped the bit:
a directory's mode now carries setgid (never setuid or sticky), set, kept and said.
A tool runner's account that is missing or root's failed the whole apply and dropped
the library's outcome: it is now a warning, said as runner:<module> or
runner:library:<name>. And a runner that leaves a group is taken out before the
resources apply, so its unit is restarted in that apply to lose it.

2026-10-13 00:11:50 +02:00

..

testdata

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

access_act_test.go

Give the controller the contract it can fill (hq ADR 0325, issue 567)

2026-10-12 19:51:09 +02:00

asked_test.go

Say again what was last applied when the mesh asks (hq to-be 45 Phase 3, the report verb)

2026-10-06 14:05:02 +02:00

asking_nats_test.go

Enrolment behind a seam, with both transports

2026-09-27 01:31:46 +02:00

asking_nats.go

A node can join the bus the mesh runs on

2026-09-29 17:36:59 +02:00

asking.go

One bus: the AMQP transport is gone from the host

2026-09-28 03:54:22 +02:00

asktool_nats_test.go

State a tool check that waits for the operator as waiting (issue 386, ADR 0283)

2026-10-10 21:11:02 +02:00

bus.go

Vouch for the account that runs mesh-cli, and ask the controller its line (hq ADR 0272)

2026-10-09 12:05:53 +02:00

enrol_again_test.go

An enrolling node asks again, with the same request, while the mesh says it cannot answer — for as long as the mesh holds the token for it (novox/hq issue 083)

2026-09-22 14:07:25 +02:00

enrol_proof_test.go

An enrolling node signs its request with the identity it just generated, so the mesh can tell it from anyone who knows its public key (novox/hq issue 083)

2026-09-22 14:33:31 +02:00

enrol_shape_test.go

A node generates the key it serves TLS with

2026-08-31 00:09:15 +02:00

enrol.go

Merge remote-tracking branch 'origin/main' into feat/nats-genesis

2026-09-27 18:38:45 +02:00

handover_test.go

Believe a hand-over only signed by the mesh, and give it through no link (hq issue 356, review)

2026-10-09 19:45:00 +02:00

handover.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

health_test.go

State a tool check that waits for the operator as waiting (issue 386, ADR 0283)

2026-10-10 21:11:02 +02:00

hearing_nats_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

hearing_nats.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

hearing.go

Say again what was last applied when the mesh asks (hq to-be 45 Phase 3, the report verb)

2026-10-06 14:05:02 +02:00

held_note_test.go

An apply says what it held, not only what it applied

2026-09-30 08:46:19 +02:00

judge_directories_test.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

messages_test.go

Judge whether an account declared never to become root can, so a machine's agents are known confined

2026-10-09 10:07:35 +02:00

messages.go

Keep a module directory's setgid bit, warn about a refused runner, and restart the runner when it leaves (hq ADR 0334 review)

2026-10-13 00:11:50 +02:00

newest_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

order_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

pinned_test.go

A first node gets as far as its own bus: three faults on the way

2026-09-29 15:42:43 +02:00

pinned.go

A first node gets as far as its own bus: three faults on the way

2026-09-29 15:42:43 +02:00

queue_test.go

Refuse a declaration composed from an older assignment generation than the machine applied (hq issue 234)

2026-10-11 11:22:30 +02:00

queue.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

replay331_test.go

State a tool check that waits for the operator as waiting (issue 386, ADR 0283)

2026-10-10 21:11:02 +02:00

roused_test.go

A machine that wakes or moves says so, instead of waiting to be told

2026-08-31 10:21:26 +02:00

run.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

setuid_search_test.go

Show how far the setuid search got, and start a fresh one when the terminal asks (hq issue 361)

2026-10-10 01:55:58 +02:00

unsaid_test.go

Apply through one queue, and order what is applied and reported (hq to-be 45 Phase 2)

2026-10-06 11:54:10 +02:00

witnessing_nats_test.go

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

witnessing.go

Say a tool check's errors once and as they stand, and test the link on a real bus

2026-10-08 17:01:15 +02:00