atlas
bd79b58e78
log the agent bridge's forwarded flows in the hive_egress table ...
A forward chain in the hive-owned nft table logs each new flow from the agent bridge to the uplink (v4 and v6) and counts every packet. It never blocks. The mesh interface is skipped. Logging is rate limited per source address; a flow that limit cannot log gets one line from a shared limit with its own prefix. services.hyperhive.network.egress.forward selects accept, log (default) or drop; drop is refused at evaluation until the interception it needs exists.
2026-11-12 09:20:51 +01:00
refuse a namespaced agent whose /nix/store cannot be idmapped
2026-11-06 12:37:03 +01:00
vm-tests: factor the agent toplevels out of full-setup
2026-11-11 00:14:24 +01:00
vm-tests: full-setup script lives in full-setup.py, build-time values in env, ruff in ci
2026-11-11 22:35:54 +01:00
full-setup vm test: a failed create also dumps the swarm queue's nats and auth units
2026-11-12 07:42:11 +01:00
log the agent bridge's forwarded flows in the hive_egress table
2026-11-12 09:20:51 +01:00
nightly vm test: full single-host swarm setup up to the meta flake
2026-11-06 21:08:41 +01:00
share one hive-priv request helper across the vm tests
2026-10-29 08:51:31 +01:00
vm-tests: full-setup script lives in full-setup.py, build-time values in env, ruff in ci
2026-11-11 22:35:54 +01:00
semi-spread vm test: the merged swarm machine keeps attic private, like heavyduty
2026-11-12 07:41:50 +01:00
swarm-archive vm test: the fake store is readable by the prune whatever the writer's umask
2026-11-12 04:24:44 +01:00
nightly vm test: full single-host swarm setup up to the meta flake
2026-11-06 21:08:41 +01:00
vm tests: idmap-capable store for the userns subtest, restart nix-daemon via its socket
2026-11-02 18:20:47 +01:00
wg-hive: derive test keys from a fixed seed so every store agrees
2026-11-09 17:26:17 +01:00
bd79b58e78