jschoubben b30d9c5b5a A container may log to the journal (hq ADR 0179) ...

A jail reads a log; a container's output went to a file of the runtime's own under a path that
changes on recreate, so no jail could read a container's service. logging: journald runs the
container with the journal as its driver, named in the spec so moving it recreates it; any other
place is refused.

2026-10-02 17:02:49 +02:00

..

access_test.go

declaration: an access is mounted, and the host owns nothing about it

2026-09-05 22:19:33 +02:00

apply_test.go

Undeclaring gives a unit back the state it was found in, and removes a process the mesh made (hq ADR 0118, issue 130)

2026-09-27 00:21:25 +02:00

apply.go

A container may log to the journal (hq ADR 0179)

2026-10-02 17:02:49 +02:00

archive.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

block_test.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

block.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

facts_test.go

A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)

2026-10-01 21:24:37 +02:00

former_archive_test.go

A former target of a kind the host cannot remove is left in place and said, never fatal (hq issue 194)

2026-10-02 02:43:47 +02:00

found_test.go

review: a unit whose file the mesh wrote is stopped when undeclared, and what was found survives a failed first apply (hq ADR 0118)

2026-09-27 00:41:02 +02:00

hold_test.go

A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)

2026-10-01 21:24:37 +02:00

hold.go

A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)

2026-10-01 21:24:37 +02:00

inspect_scope_test.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

into_test.go

Take a key or list member the host may have written itself as the mesh's, so undeclaring gives the file back (hq ADR 0102)

2026-09-22 19:57:15 +02:00

into.go

Take a key or list member the host may have written itself as the mesh's, so undeclaring gives the file back (hq ADR 0102)

2026-09-22 19:57:15 +02:00

left_out_test.go

A package may be declared absent, and an uninstalled front end is retired for good (hq ADR 0175)

2026-10-02 16:28:27 +02:00

logging_test.go

A container may log to the journal (hq ADR 0179)

2026-10-02 17:02:49 +02:00

mesh_names_test.go

A container's mesh names are part of what it is

2026-09-28 17:19:38 +02:00

mode_test.go

Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first

2026-09-23 23:15:28 +02:00

mode.go

Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first

2026-09-23 23:15:28 +02:00

opening_test.go

A package may be declared absent, and an uninstalled front end is retired for good (hq ADR 0175)

2026-10-02 16:28:27 +02:00

opening.go

A package may be declared absent, and an uninstalled front end is retired for good (hq ADR 0175)

2026-10-02 16:28:27 +02:00

plan_test.go

review: a unit whose file the mesh wrote is stopped when undeclared, and what was found survives a failed first apply (hq ADR 0118)

2026-09-27 00:41:02 +02:00

plan.go

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

process_test.go

review: refuse a process named ".", ".." or with a leading dash, so removing one cannot delete the mesh's own directory (hq ADR 0118)

2026-09-27 00:41:02 +02:00

process.go

review: refuse a process named ".", ".." or with a leading dash, so removing one cannot delete the mesh's own directory (hq ADR 0118)

2026-09-27 00:41:02 +02:00

reads_test.go

Look at what a container mounts directly, accept a pre-upgrade label, and write the genesis secret without a newline

2026-09-23 23:40:27 +02:00

runonce_test.go

A resource's owner is read to the last dot, because a module's name may contain one

2026-09-28 15:44:59 +02:00

schedule_test.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

schedule.go

Recreate a container when the content of a file it reads at creation changes

2026-09-23 23:40:27 +02:00

sealed_test.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

stateless_test.go

A service may omit its state, so unassigning an uplink module never stops the machine's network manager (hq ADR 0117)

2026-09-27 00:11:58 +02:00

strays.go

A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)

2026-10-01 21:24:37 +02:00

takeover_test.go

review: a retired configuration that comes back is retired again on its first original, and only wg-quick's own file is ever removed (hq ADR 0119)

2026-09-27 00:55:50 +02:00

takeover.go

review: a retired configuration that comes back is retired again on its first original, and only wg-quick's own file is ever removed (hq ADR 0119)

2026-09-27 00:55:50 +02:00

user_numeric_test.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

user_unix.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

user.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

vocabulary_test.go

the spec names the resolver and the address

2026-09-25 23:51:30 +02:00