jschoubben feb74e2069 The installer lets the first node onto the bus it raised ...

At genesis the bus's users reach it in no declaration, because the
machine running it has not enrolled. The installer, which raised the
bus from its bundle, places the control plane's composed list beside it
and makes it re-read it: before the machine enrols, for the token's
account, and after, for the node's own (novox/hq issue 146).

2026-10-02 16:31:00 +02:00

..

testdata

Delete a forwarded opening the way ufw accepts it, and read a fresh machine's resolver as not in use — both measured on a lab machine (hq ADR 0100)

2026-09-22 17:37:01 +02:00

adopt_in_place_test.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

adopted_test.go

Reload the guard for a changed table and restart it only for a changed unit, as the controller declares it (hq ADR 0103)

2026-09-22 18:33:57 +02:00

adopted.go

Reload the guard for a changed table and restart it only for a changed unit, as the controller declares it (hq ADR 0103)

2026-09-22 18:33:57 +02:00

apply_test.go

Refuse every file once the mesh has spoken, plan the cutover as one, and let the kept declaration repair the mode

2026-09-23 23:35:49 +02:00

apply.go

Refuse every file once the mesh has spoken, plan the cutover as one, and let the kept declaration repair the mode

2026-09-23 23:35:49 +02:00

bootstrap.go

Merge pull request 'Take over the found tunnel: its key, its port, its peers; stop it, never flush (hq ADR 0105)' (#24) from feat/adopt-the-tunnel into main

2026-09-23 22:38:36 +00:00

build_test.go

Genesis registers the control plane with the manifest its build produced

2026-09-21 15:17:47 +02:00

build.go

Genesis registers the control plane with the manifest its build produced

2026-09-21 15:17:47 +02:00

builder_test.go

A re-run does not replace the registered forge with whatever checkout it was given

2026-09-22 21:56:42 +02:00

builder.go

The packages port given at genesis is a module's setting, like every other

2026-09-22 21:40:02 +02:00

choices_test.go

The installer goes as far as it can, and asks where a human must choose

2026-09-15 21:56:23 +02:00

choices.go

The installer goes as far as it can, and asks where a human must choose

2026-09-15 21:56:23 +02:00

control_test.go

Format control_test.go so the gate's fmt step passes on main

2026-09-26 23:51:36 +02:00

control.go

The pinning line shows the built image's id, not one digit of it

2026-09-21 15:27:13 +02:00

enrol_test.go

The installer lets the first node onto the bus it raised

2026-10-02 16:31:00 +02:00

enrol.go

The installer lets the first node onto the bus it raised

2026-10-02 16:31:00 +02:00

genesis_forge_test.go

A taken container keeps a found network, a left-out module is kept, and genesis raises the forge as its module declares (hq ADR 0163)

2026-10-01 23:45:05 +02:00

inuse_test.go

A taken container keeps a found network, a left-out module is kept, and genesis raises the forge as its module declares (hq ADR 0163)

2026-10-01 23:45:05 +02:00

inuse.go

Exempt only the daemons a fresh machine was measured to run from counting as in use (hq ADR 0101)

2026-09-22 19:57:52 +02:00

load_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

load.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

module.go

Raise a machine in use adopted: keep its firewall, load no dropping table, guard the mesh's own ports, and take only the mesh's own modules (hq ADR 0100)

2026-09-22 17:32:44 +02:00

operator.go

Installer review: secrets are staged privately, and a bundle is 0600 whether or not it existed

2026-09-21 01:26:35 +02:00

phase2_test.go

Refuse an endpoint whose port is not the one the private network's hub binds (hq ADR 0100)

2026-09-22 19:58:37 +02:00

phase2.go

Refuse an endpoint whose port is not the one the private network's hub binds (hq ADR 0100)

2026-09-22 19:58:37 +02:00

phase3.go

Take the foundation's ports as genesis inputs, check them free, and hand them to the controller as the node's settings (hq ADR 0100)

2026-09-22 17:28:36 +02:00

phase_packages_gitea.go

Genesis raises gitea correctly: host network, honest SQL, matched ROOT_URL

2026-09-16 14:11:36 +02:00

phase_packages.go

A taken container keeps a found network, a left-out module is kept, and genesis raises the forge as its module declares (hq ADR 0163)

2026-10-01 23:45:05 +02:00

ports_test.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

ports.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

preflight_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

preflight.go

Refuse a converged genesis on a machine in use, naming every container and listener counted (hq ADR 0100)

2026-09-22 17:29:32 +02:00

publish_test.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

publish.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

registry_test.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

registry.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

retire_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

retire.go

Refuse a declaration for the other mode, or older than the mesh's last, and say what an apply would change first

2026-09-23 23:15:28 +02:00

rewrite_test.go

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

rewrite.go

Installer review: secrets are staged privately, and a bundle is 0600 whether or not it existed

2026-09-21 01:26:35 +02:00

rootsecrets_test.go

The base filter opens the bus and the registry in the input chain too

2026-09-21 12:28:57 +02:00

rootsecrets.go

Look at what a container mounts directly, accept a pre-upgrade label, and write the genesis secret without a newline

2026-09-23 23:40:27 +02:00

talk.go

Installer review: secrets are staged privately, and a bundle is 0600 whether or not it existed

2026-09-21 01:26:35 +02:00

verify_test.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00

verify.go

inspect by kind, not the ambiguous bare form — a same-named network stops a container from ever being found

2026-09-24 19:50:16 +02:00