The identity a module runs as is the assignment's, not the definition's #2

2026-09-30T22:35:53Z

mesh-admin commented

2026-09-30 22:35:53 +00:00

PUID/PGID (PLEX_UID/PLEX_GID for plex) were 1000:1000 in every definition — one machine's fact (ADR 0112). Each module now renders identity.env from ${setting:puid} / ${setting:pgid} and reads it as an env-file; the mesh-wide layer carries the image's default (1000:1000), a node whose data belongs to somebody else says so on its assignment. ace's library and download spool are 1001:2000 and must never be re-owned (hq 153), so ace's media assignments say puid: 1001, pgid: 2000. Twelve manifests pass module check against a controller with #176 and hq 174.

PUID/PGID (PLEX_UID/PLEX_GID for plex) were `1000:1000` in every definition — one machine's fact (ADR 0112). Each module now renders `identity.env` from `${setting:puid}` / `${setting:pgid}` and reads it as an env-file; the mesh-wide layer carries the image's default (1000:1000), a node whose data belongs to somebody else says so on its assignment. ace's library and download spool are 1001:2000 and must never be re-owned (hq 153), so ace's media assignments say `puid: 1001, pgid: 2000`. Twelve manifests pass `module check` against a controller with #176 and hq 174.

mesh-admin added 1 commit 2026-09-30 22:35:54 +00:00

The identity a module runs as is the assignment's, not the definition's 52abeb34bd

PUID/PGID (PLEX_UID/PLEX_GID for plex) were 1000:1000 in every definition —
one machine's fact written where it is true of no other (ADR 0112). Each
module now renders identity.env from ${setting:puid} and ${setting:pgid};
the mesh-wide layer carries the image's default, a node whose data belongs
to somebody else says so. An adopted machine's library must never be
re-owned (ace: 1001:2000, hq 153).

mesh-admin merged commit cb7f7f257c into main

2026-09-30 22:36:03 +00:00

mesh-admin deleted branch feat/run-identity-is-the-assignments

2026-09-30 22:36:03 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-media-catalog#2