mesh-adminandClaude Opus 5.5 eb2ec23679 Write a filled file on the provisioner client's request, and nothing else ...

The provisioner's client (ADR 0349 §4) fills a module's templates and needs the node-engine to write them: it must not hold the right to write the machine's files itself. A second local socket accepts a write only from the account the declaration names as the provisioner client's (SO_PEERCRED, same namespaces), only for a clean path the declaration names as filled, under the apply's own locks, and writes it through the apply as the declared file would be, firing restart-on, reload-on and container reads. Issue 668.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 00:34:54 +00:00

..

accounts

Read an account by its name, never as a number getent takes for a uid (hq ADR 0325)

2026-10-12 19:51:09 +02:00

apply

Name the provisioner client's account in the declaration, and share the apply's record

2026-10-14 00:33:48 +00:00

bootstrap

Adopt genesis's bus through the bus's planned step, its streams snapshotted first (hq issue 590, ADR 0333 §3)

2026-10-13 11:47:10 +02:00

bundle

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

declaration

Write a filled file on the provisioner client's request, and nothing else

2026-10-14 00:34:54 +00:00

firewall

The mesh's own ban chain is a ban wherever it hangs; the front end's record is cited as 0180 (hq ADR 0186)

2026-10-02 18:42:16 +02:00

identity

Say controller in the installer's and the token's words, as the glossary does

2026-10-08 01:46:21 +02:00

image

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

inventory

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:44 +02:00

link

Name the provisioner client's account in the declaration, and share the apply's record

2026-10-14 00:33:48 +00:00

liveness

Clear an old pass on a wait, and say a change of waits (review of #78)

2026-10-10 21:14:14 +02:00

meshcli

Write a filled file on the provisioner client's request, and nothing else

2026-10-14 00:34:54 +00:00

network

Take a tick a little early as the network look's tick

2026-10-07 18:52:16 +02:00

outward

Report the networks the outward links are on, for the local network (issue 154, ADR 0340)

2026-10-13 11:20:21 +02:00

profile

Report the networks the outward links are on, for the local network (issue 154, ADR 0340)

2026-10-13 11:20:21 +02:00

reachable

Report what an adopted node holds, its firewall and what is reachable, and speak unasked when that changes (hq ADR 0100)

2026-09-22 17:22:31 +02:00

store

Leave a busy container running until it says idle, within 15 minutes

2026-10-13 00:41:32 +02:00

system

Put busybox's account removal back, test the sample, and read a held lock as kept only for a running walk (hq ADR 0328 review)

2026-10-12 22:21:42 +02:00

tunnel

A taken tunnel's found configuration is retired once the take is proven (hq ADR 0119)

2026-09-27 00:47:57 +02:00

units

Say every failed unit, the module's and the machine's (hq issue 315)

2026-10-08 11:28:51 +02:00

upgrade

Believe a hand-over only signed by the mesh, and give it through no link (hq issue 356, review)

2026-10-09 19:45:00 +02:00

witness

Keep a replaced build reachable, and delete it only once no process runs from it (hq issue 289)

2026-10-07 02:45:08 +02:00