damocles
|
0b5376249d
|
priv: reject colons in bind paths to avoid nspawn delimiter confusion
|
2026-06-01 17:27:14 +02:00 |
|
damocles
|
c9eb520e7c
|
priv: WriteNspawnFlags takes Vec<BindMount> instead of raw flag strings
|
2026-06-01 17:27:14 +02:00 |
|
damocles
|
a922376778
|
priv: reject double-quotes in nspawn flag entries
|
2026-06-01 17:27:14 +02:00 |
|
damocles
|
aa7f8e5553
|
priv: move shared consts to hive-sh4re; WriteNspawnFlags uses Vec<String> + per-flag validation
|
2026-06-01 17:27:14 +02:00 |
|
damocles
|
89d0937473
|
priv: derive flake ref from agent name; WriteNspawnFlags takes flags only
|
2026-06-01 17:27:14 +02:00 |
|
damocles
|
ec12ba4b1a
|
fix(702): narrow all PrivRequest handlers to specific ops
|
2026-06-01 17:27:14 +02:00 |
|
damocles
|
efedfc3ea6
|
fix(702): narrow SystemdRunMachine to ReloadGatewayNginx in hive-priv
|
2026-06-01 17:27:14 +02:00 |
|
damocles
|
ab861dd8dc
|
feat(#702): hive-priv privileged helper binary
|
2026-06-01 17:27:14 +02:00 |
|