atlas
4c4ecb8ed9
agents: swap the agent's bao leaf in with one rename ...
The live pair was replaced with two renames, key then cert. A run
stopped between them (timeout, container stop, power loss) left a new
key beside the old cert, and every later run logged in with that pair,
so the agent could not re-pull until its container restarted.
Each pair now goes into a fresh directory under
/run/hive-agent-bao-identity, and `current`, a symlink to it, is
replaced by one rename. Wherever a run stops, `current` names one whole
pair; the next run removes whatever a stopped run left. Consumers read
`current/cert` and `current/key` through the same read-only options and
still re-read them on every login.
The script test covers a swap stopped at each of its link and rename
steps: the live pair is always one whole pair, and the next run puts
the new one live.
Refs #5017
2026-10-11 10:00:43 +02:00
agents: remove the hive-level /effort control too
2026-10-11 01:28:44 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: remove the hive-level /effort control too
2026-10-11 01:28:44 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
nix: comments state current behaviour, not history
2026-10-05 09:58:50 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
nix: comments state current behaviour, not history
2026-10-05 09:58:50 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
github: PATs live in swarm bao; the agent fetches them itself
2026-10-02 17:48:27 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
agent: order bao/github/forge-accounts logins after the isolated-DNS rewrite
2026-10-09 12:34:30 +02:00
nix: finish the "moved to" comment sweep
2026-10-05 09:59:02 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
agents: re-pull the agent's own bao mTLS leaf on a timer
2026-10-11 10:00:43 +02:00
hive-agent: the swarm queue connection is required; retry, then exit
2026-10-04 22:24:51 +02:00
nix: finish the current-behaviour comment sweep in touched files
2026-10-05 09:58:57 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
user.nix: log failed ownership heals of the agent's own dirs
2026-10-09 11:30:30 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
4c4ecb8ed9