atlas
bbc2a83771
print the vm test's priv response and journal only on failure
2026-10-28 22:04:09 +01:00
atlas
2b4fd52b0a
make the vm test's priv request wait for the salvage reply
2026-10-28 22:04:09 +01:00
atlas
b4ce4e0d90
put hello and tree in the agent-ephemeral-rootfs vm closure
2026-10-28 22:04:09 +01:00
atlas
6708ef804f
root the build the pre-start check names
2026-10-28 21:59:43 +01:00
atlas
a44a7256a7
check the container root before each start
2026-10-28 21:59:43 +01:00
atlas
81439fa710
run agent containers on an ephemeral root, salvaging the old one first
...
hive-priv copies a stopped container's root to the agent's work dir and
renames it aside before passing nspawn --ephemeral; the agent's nix state
moves to the persistent profiles bind. Adds the agent-ephemeral-rootfs vm
test and a module-eval case for the nix state redirect.
2026-10-28 20:00:12 +01:00
atlas
e78a529ec2
squid: base allow list for every authed user, and no start limit on the list reload
2026-10-28 19:44:26 +01:00
atlas
10fdf06334
squid self-check: use a public canary, drop the swarm service names from the allow list
2026-10-28 19:44:26 +01:00
atlas
4eb27543e5
move vm tests out of checks into a nightly vmTests workflow
2026-10-28 18:41:42 +01:00
atlas
b551eb02ff
send agent traffic through squid once its hive announces it
2026-10-28 17:24:34 +01:00
atlas
86e9f49fe6
resolve the self-check's deny canary in the squid VM test
2026-10-28 17:23:33 +01:00
atlas
e8868d52a8
deny the IPv6 unspecified address at squid
2026-10-28 17:23:33 +01:00
atlas
3d9561a9a6
deny private and reserved destinations for every squid user
2026-10-28 17:23:33 +01:00
atlas
501445ebc3
apply each agent's internet flag to its squid credential
2026-10-28 17:23:33 +01:00
atlas
b7adb90f53
require a proxy credential at squid and prove it in the self-check
2026-10-28 13:50:35 +01:00
atlas
5513a6e875
rename the access-log variable in the squid vm test so it stops shadowing the driver's logger
2026-10-27 20:59:06 +01:00
atlas
a2cf6fe8bb
deploy squid on every hive host, with exporter, journal forwarding and self-check
2026-10-27 20:59:06 +01:00
