jschoubben cdbff1777e Take a directory in the mesh's own tree that the engine's account owns as the mesh's, not as found (issue 1873) ...

postgres's data directory moved to /var/lib/mesh/postgres. On ace and novox that
directory was there, root:root 0700, before the directory resource was applied, so
the engine used it as found (issue 339's rule) and left it to root: the postgres
provider, running as the operator's account, cannot reach its own secrets,
consumers and grants there.

/var/lib/mesh is the engine's tree (root, 0755): only the engine's account makes a
directory in it. A directory below it owned by that account is now the mesh's and
is given its declared owner and mode. Anywhere else, or owned by another account,
issue 339's rule stands.

2026-10-22 22:23:04 +02:00

..

access_test.go

Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)

2026-10-12 18:43:04 +02:00

agent_home_guard_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

agent_home_guard.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

apply_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

apply.go

Take a directory in the mesh's own tree that the engine's account owns as the mesh's, not as found (issue 1873)

2026-10-22 22:23:04 +02:00

archive_removal_test.go

An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)

2026-10-04 12:20:41 +02:00

archive_replace_test.go

Make an unpacked archive exactly the archive (novox/hq issue 220)

2026-10-04 00:17:50 +02:00

archive_unpacked.go

An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)

2026-10-04 12:20:41 +02:00

archive.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

block_test.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

block.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

busy_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

busy.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

container_groups_test.go

Pass a container's groups to the runtime as supplementary groups and report container-groups (issues 1637, ADR 0480 clause 7)

2026-10-21 15:34:37 +02:00

declared_home_test.go

Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)

2026-10-20 23:32:27 +00:00

facts_test.go

A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)

2026-10-01 21:24:37 +02:00

file_handover_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

filled_apply_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled_library_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled_runtime_roots_test.go

Judge a filled write with the roots the last apply read, asking no runtime per file (issue 1138)

2026-10-19 00:11:58 +02:00

filled_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

former_archive_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

found_is_said_test.go

Give a handed-over directory through no link on every apply, not only the first (hq issue 356, review)

2026-10-09 19:58:27 +02:00

found_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

giveback_test.go

Say in the plan that a unit is restored only if it is still as the mesh held it

2026-10-09 02:03:51 +02:00

groups_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

groups.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

handover_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

health_check_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

hold_test.go

Have a replacement container's image before removing the running one, so an unobtainable image leaves the service up (issue 1742)

2026-10-21 19:16:32 +02:00

hold.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

home_links_test.go

Read the homes in one order, so their test does not depend on a map's

2026-10-09 12:36:56 +02:00

home_links.go

Read the homes in one order, so their test does not depend on a map's

2026-10-09 12:36:56 +02:00

home_parents_test.go

Parents the host makes inside an owner's home are the owner's (hq ADR 0182, to-be 41)

2026-10-04 04:07:40 +02:00

homes_linux.go

Keep a module directory's setgid bit, warn about a refused runner, and restart the runner when it leaves (hq ADR 0334 review)

2026-10-13 00:11:50 +02:00

homes_other.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

identities_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

identities.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

inspect_scope_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

into_handover_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

into_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

into.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

judge_directories_test.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

keep.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

left_out_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library_linux.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

logging_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

maintenance_window_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

maintenance_window.go

Let a planned maintenance window fail no apply (hq issue 291)

2026-10-07 13:11:03 +02:00

mesh_dirs_apply_linux.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_dirs_gate_test.go

Give a mesh directory its mode and owner only through a descriptor, and gate what the walk refuses (issue 358)

2026-10-12 14:00:53 +02:00

mesh_dirs_linux.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

mesh_dirs_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_dirs.go

Take a directory in the mesh's own tree that the engine's account owns as the mesh's, not as found (issue 1873)

2026-10-22 22:23:04 +02:00

mesh_names_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_tree_found_test.go

Take a directory in the mesh's own tree that the engine's account owns as the mesh's, not as found (issue 1873)

2026-10-22 22:23:04 +02:00

mode_test.go

Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first

2026-09-23 23:15:28 +02:00

mode.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_results_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_results.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

move_out_linux.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out_other.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out_test.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

opening_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

opening.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

ownership_test.go

Feature 57 (config and provisioning): release mesh-host, the reviewed release branch on top of main

2026-10-16 08:24:13 +00:00

placed.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

placement_guard_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

placement_guard.go

Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)

2026-10-20 23:32:27 +00:00

placement_homes_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

plan_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

plan.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

process_step_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

process_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

process_witness_test.go

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

process.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

reads_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

references_test.go

Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)

2026-10-21 15:41:09 +02:00

references.go

Read a file's object from the node's own bucket, declaration-files-<node>, never a shared one (issue 1695, ADR 0486 §2)

2026-10-21 15:41:09 +02:00

refused_directory_test.go

Say both a gated module and a machine stop, and count skipped apart (review of #83)

2026-10-11 18:51:04 +02:00

removal_order_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

remove_file_test.go

An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)

2026-10-05 01:30:42 +02:00

replace_image_test.go

Have a replacement container's image before removing the running one, so an unobtainable image leaves the service up (issue 1742)

2026-10-21 19:16:32 +02:00

replay358_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

restart_order_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

root_moved_test.go

Keep the walk's paths as bytes, forget a walk root superseded, and leave other mounts unread (hq issue 361 review)

2026-10-10 01:10:56 +02:00

root_moved.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

roots.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

runonce_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

runtime_roots_more_test.go

Ask the running runtimes where they keep their data, and read every form a unit says it in

2026-10-09 01:22:11 +02:00

runtime_roots_test.go

Read every runtime's data root, keep when a directory was found, and key a hand-over to its resource

2026-10-09 00:55:21 +02:00

schedule_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

schedule.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

sealed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

ssh_home_test.go

Say every directory used as found, let a person hand it over, and refuse the runtime's data and any .ssh

2026-10-09 00:28:01 +02:00

stateless_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

stayed_running_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

step_failed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

store_away_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

store_away.go

Let a planned maintenance window fail no apply (hq issue 291)

2026-10-07 13:11:03 +02:00

strays.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

takeover_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

takeover.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

test_hooks.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

testing_dirs.go

Raise a process-form controller at genesis as the container it replaces (hq issue 223)

2026-10-04 01:47:33 +02:00

user_numeric_test.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

user_test.go

Refuse to take over a system account as one that never becomes root

2026-10-09 10:07:52 +02:00

user_unix.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

user.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

userscope_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

vault_sealed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

vocabulary_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

walk_linux.go

Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)

2026-10-12 22:18:16 +02:00

walk_other.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

walk.go

Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)

2026-10-12 22:18:16 +02:00

whole_test.go

A file written over is given its kept original back when undeclared (hq ADR 0118, 0102)

2026-10-04 12:54:16 +02:00

whole.go

An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)

2026-10-05 01:30:42 +02:00