jschoubben
5dc3a8e17f
mesh/delivery merged: source.main moved to novox/mesh-host@998d8f737008
mesh/check being carried to 5dc3a8e17f97 on 998d8f737008 | from fabfdf04f78a
The journal of an unpack sat at <target>.unpacked.json, in a directory the module's account may write: a forged one would make the root engine remove or adopt any path it named. It now lives under <statedir>/unpacked/<sha256 of the target>.json, mode 0600, names its target, and is refused whole when an entry is not filepath.IsLocal or a parent is not above the target. It goes when the archive is taken off, whether its state record still said what it unpacked or not. The launcher's stop grace for a host on trial rises from 20 s to 75 s and the unit's TimeoutStopSec is 120 s (openrc the same), past the host's own 60 s wait for the apply in flight, so neither cuts a save off again. Tests folded as rows into existing ones (the repository is over its unit budget): the journal's rows, a forged entry and parent refused, the journal gone with a record that lost its Unpacked; the test that passed on main dropped; the stop test waits on its own line, not a sleep, and no longer consumes the save it waits for. Claude-Session: https://claude.ai/code/session_01JG73KG7AfSdh6FP8VrBqCn
11 lines
521 B
Plaintext
11 lines
521 B
Plaintext
#!/sbin/openrc-run
|
|
# The Alpine equivalent of the systemd unit beside this. Four lines of the same two facts:
|
|
# run the launcher, and bring it back if it dies. Everything else is in the launcher, which is
|
|
# what makes a second init transcription rather than a port (novox/hq ADR 0005).
|
|
name="nox-mesh-host"
|
|
command="/usr/lib/nox-mesh-host/launch"
|
|
supervisor="supervise-daemon"
|
|
# The same stop bound as the systemd unit's TimeoutStopSec (issue 1585): TERM, 120 s, then KILL.
|
|
retry="TERM/120/KILL/5"
|
|
depend() { need net; }
|