Author	SHA1	Message	Date
atlas	a71e7cea75	allow erofs as the idmapped store filesystem ... nspawn idmaps the store on erofs, which the VM test's store uses; the allowlist from the store check refused it and failed the namespaced-agent subtest in vm-nightly #7084. vm-nightly #7030 ran the same agent on the same erofs store green. The magic is EROFS_SUPER_MAGIC_V1 from the kernel's linux/magic.h; libc has no constant. Refs #5888	2026-11-06 17:02:44 +01:00
atlas	419d087702	say the store check is an allowlist: only ext4, btrfs and xfs pass	2026-11-06 12:37:04 +01:00
atlas	af739dc8ea	refuse a namespaced agent whose /nix/store cannot be idmapped ... Refs #5888	2026-11-06 12:37:03 +01:00
atlas	cd1b77b078	pin state as the first data dir with a comment and a test	2026-11-06 11:36:17 +01:00
atlas	76f5ede645	make a userns data move resumable and refuse before the first chown	2026-11-06 11:36:17 +01:00
atlas	f5a609911c	read privateUsers from the closure record at start, and move the data owner option under hive-controller	2026-11-01 17:06:18 +01:00
atlas	7412a0f1bd	walk an agent's dirs by fd when moving them, and refuse a gid that differs from the uid	2026-11-01 17:06:18 +01:00
atlas	bfdf603d12	run opted-in agents in a user namespace with a dedicated data owner	2026-11-01 17:06:18 +01:00