jschoubben de312ccb1b Pass a container's groups to the runtime as supplementary groups and report container-groups (issues 1637, ADR 0480 clause 7) ...

mesh-sdk is pinned to feat/r4d-groups f0f66d5b8d42 (mesh-sdk #58) until it merges.

2026-10-21 14:27:10 +02:00

..

access_test.go

Give every module an identity and keep shared folders through ACL entries (hq ADR 0325, issue 567)

2026-10-12 18:43:04 +02:00

agent_home_guard_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

agent_home_guard.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

apply_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

apply.go

Pass a container's groups to the runtime as supplementary groups and report container-groups (issues 1637, ADR 0480 clause 7)

2026-10-21 14:27:10 +02:00

archive_removal_test.go

An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)

2026-10-04 12:20:41 +02:00

archive_replace_test.go

Make an unpacked archive exactly the archive (novox/hq issue 220)

2026-10-04 00:17:50 +02:00

archive_unpacked.go

An archive can be undeclared, and undeclaring one no longer stops the apply (hq issue 162)

2026-10-04 12:20:41 +02:00

archive.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

block_test.go

review: rebuild a file the mesh once wrote whole, keep links, give back a missing line end, and release a hold only after the write (hq issue 128)

2026-09-27 00:09:34 +02:00

block.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

busy_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

busy.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

container_groups_test.go

Pass a container's groups to the runtime as supplementary groups and report container-groups (issues 1637, ADR 0480 clause 7)

2026-10-21 14:27:10 +02:00

declared_home_test.go

Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)

2026-10-20 23:32:27 +00:00

facts_test.go

A take is a comparison: the host's facts, former targets, and strays (hq ADR 0163)

2026-10-01 21:24:37 +02:00

file_handover_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

filled_apply_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled_library_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled_runtime_roots_test.go

Judge a filled write with the roots the last apply read, asking no runtime per file (issue 1138)

2026-10-19 00:11:58 +02:00

filled_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

filled.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

former_archive_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

found_is_said_test.go

Give a handed-over directory through no link on every apply, not only the first (hq issue 356, review)

2026-10-09 19:58:27 +02:00

found_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

giveback_test.go

Say in the plan that a unit is restored only if it is still as the mesh held it

2026-10-09 02:03:51 +02:00

groups_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

groups.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

handover_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

health_check_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

hold_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

hold.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

home_links_test.go

Read the homes in one order, so their test does not depend on a map's

2026-10-09 12:36:56 +02:00

home_links.go

Read the homes in one order, so their test does not depend on a map's

2026-10-09 12:36:56 +02:00

home_parents_test.go

Parents the host makes inside an owner's home are the owner's (hq ADR 0182, to-be 41)

2026-10-04 04:07:40 +02:00

homes_linux.go

Keep a module directory's setgid bit, warn about a refused runner, and restart the runner when it leaves (hq ADR 0334 review)

2026-10-13 00:11:50 +02:00

homes_other.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

identities_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

identities.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

inspect_scope_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

into_handover_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

into_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

into.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

judge_directories_test.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

keep.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

left_out_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library_linux.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

library.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

logging_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

maintenance_window_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

maintenance_window.go

Let a planned maintenance window fail no apply (hq issue 291)

2026-10-07 13:11:03 +02:00

mesh_dirs_apply_linux.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_dirs_gate_test.go

Give a mesh directory its mode and owner only through a descriptor, and gate what the walk refuses (issue 358)

2026-10-12 14:00:53 +02:00

mesh_dirs_linux.go

Judge a node's directories read-only before the walk refuses any (issue 358)

2026-10-12 13:57:52 +02:00

mesh_dirs_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mesh_dirs.go

Count the home of an account a declaration makes as a home for the directory placement guard, so its own .ssh is placed (issue 1542)

2026-10-20 23:25:37 +00:00

mesh_names_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

mode_test.go

Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first

2026-09-23 23:15:28 +02:00

mode.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_results_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

module_results.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

move_out_linux.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out_other.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out_test.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

move_out.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

opening_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

opening.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

ownership_test.go

Feature 57 (config and provisioning): release mesh-host, the reviewed release branch on top of main

2026-10-16 08:24:13 +00:00

placed.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

placement_guard_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

placement_guard.go

Let a declared account only add a home, never take one over, and match it by name alone, so no declaration hands another account's .ssh away (issue 1542, review round 1)

2026-10-20 23:32:27 +00:00

placement_homes_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

plan_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

plan.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

process_step_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

process_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

process_witness_test.go

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

process.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

reads_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

refused_directory_test.go

Say both a gated module and a machine stop, and count skipped apart (review of #83)

2026-10-11 18:51:04 +02:00

removal_order_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

remove_file_test.go

An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)

2026-10-05 01:30:42 +02:00

replay358_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

restart_order_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

root_moved_test.go

Keep the walk's paths as bytes, forget a walk root superseded, and leave other mounts unread (hq issue 361 review)

2026-10-10 01:10:56 +02:00

root_moved.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

roots.go

Keep libraries under groups of their own, and give modules users in them (hq ADR 0328, issue 567)

2026-10-12 22:11:09 +02:00

runonce_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

runtime_roots_more_test.go

Ask the running runtimes where they keep their data, and read every form a unit says it in

2026-10-09 01:22:11 +02:00

runtime_roots_test.go

Read every runtime's data root, keep when a directory was found, and key a hand-over to its resource

2026-10-09 00:55:21 +02:00

schedule_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

schedule.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

sealed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

ssh_home_test.go

Say every directory used as found, let a person hand it over, and refuse the runtime's data and any .ssh

2026-10-09 00:28:01 +02:00

stateless_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

stayed_running_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

step_failed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

store_away_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

store_away.go

Let a planned maintenance window fail no apply (hq issue 291)

2026-10-07 13:11:03 +02:00

strays.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

takeover_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

takeover.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

test_hooks.go

Let a directory say how it reacts to files it does not know, and move out what a move-out directory does not know (issue 1024, ADR 0422)

2026-10-17 16:09:33 +00:00

testing_dirs.go

Raise a process-form controller at genesis as the container it replaces (hq issue 223)

2026-10-04 01:47:33 +02:00

user_numeric_test.go

An owner may be a number the machine has never heard of

2026-09-01 23:45:02 +02:00

user_test.go

Refuse to take over a system account as one that never becomes root

2026-10-09 10:07:52 +02:00

user_unix.go

A user, bytes, and an archive — because most of what people install is

2026-08-30 03:22:38 +02:00

user.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

userscope_test.go

Pass -- before every unit, and give a unit back only when it is exactly as the mesh held it

2026-10-09 01:54:26 +02:00

vault_sealed_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

vocabulary_test.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

walk_linux.go

Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)

2026-10-12 22:18:16 +02:00

walk_other.go

Take the node-engine's parser from mesh-sdk: internal/apply imports (issue 1392)

2026-10-20 11:16:26 +00:00

walk.go

Give no account a home, keep old data's sub-paths for the warrant, and never hand out setgid (hq ADR 0328 review)

2026-10-12 22:18:16 +02:00

whole_test.go

A file written over is given its kept original back when undeclared (hq ADR 0118, 0102)

2026-10-04 12:54:16 +02:00

whole.go

An undeclared file is deleted only when it holds what the host wrote; otherwise moved aside (hq issue 241)

2026-10-05 01:30:42 +02:00