jschoubben 65cd7b4787 Retire a daemon's running build instead of deleting it before the restart (issue 734) ...

A process no witness judges had its directory removed before the new bundle
was unpacked and the unit restarted, so the old process ran on in a deleted
working directory: mesh-build-go's `go version` probe failed with "getwd: no
such file or directory" and refused three checks on ace on 2026-10-26, each in
the second a new build of it arrived.

Every process is now replaced the way a judged one is: its build is renamed
under .witness/<name>/retired/ and deleted only once nothing runs from it.
"Runs from it" now counts a process's working directory as well as its image,
so the children a daemon starts keep the directory too. Forget keeps a retired
build that still drains, and the witness's sweep covers every process it keeps
a directory for, judged or not.

Two unit-file tests are folded into one, so the unit count goes down by one.

2026-10-26 15:01:55 +01:00

..

contract_test.go

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

contract.go

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

draining_test.go

Bound a key's history read to 10 s and test it on a real bus; the witness test waits for its process to run from its image (issue 1945)

2026-10-25 12:51:00 +01:00

draining.go

Retire a daemon's running build instead of deleting it before the restart (issue 734)

2026-10-26 15:01:55 +01:00

kept.go

Retire a daemon's running build instead of deleting it before the restart (issue 734)

2026-10-26 15:01:55 +01:00

watch_test.go

Roll a core build back by a witness that is not the new build (hq to-be 45 Phase 4)

2026-10-06 18:23:56 +02:00

watch.go

Keep a replaced build reachable, and delete it only once no process runs from it (hq issue 289)

2026-10-07 02:45:08 +02:00