atlas
4c4ecb8ed9
agents: swap the agent's bao leaf in with one rename ...
The live pair was replaced with two renames, key then cert. A run
stopped between them (timeout, container stop, power loss) left a new
key beside the old cert, and every later run logged in with that pair,
so the agent could not re-pull until its container restarted.
Each pair now goes into a fresh directory under
/run/hive-agent-bao-identity, and `current`, a symlink to it, is
replaced by one rename. Wherever a run stops, `current` names one whole
pair; the next run removes whatever a stopped run left. Consumers read
`current/cert` and `current/key` through the same read-only options and
still re-read them on every login.
The script test covers a swap stopped at each of its link and rename
steps: the live pair is always one whole pair, and the next run puts
the new one live.
Refs #5017
2026-10-11 10:00:43 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
hive-bash-daemon: keep sibling tasks alive when one is OOM-killed
2026-10-07 18:18:15 +02:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
module-eval: agent-user test asserts the heal_own_dir form
2026-10-09 11:30:30 +02:00
matrix: drop the per-hive appservice and its unused token
2026-10-05 07:48:17 +02:00
swarm-controller reads its forge token from the store, not a host file
2026-10-08 13:25:47 +02:00
forge: fetch the OIDC client secret from bao instead of a host-side copy
2026-10-10 14:07:31 +02:00
swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's
2026-10-06 12:04:48 +02:00
nix: finish the current-behaviour comment sweep in touched files
2026-10-05 09:58:57 +02:00
swarm-controller reads its forge token from the store, not a host file
2026-10-08 13:25:47 +02:00
forge: fetch the OIDC client secret from bao instead of a host-side copy
2026-10-10 14:07:31 +02:00
nix: comments state current behaviour, not history
2026-10-05 09:58:50 +02:00
module-eval/hive-otel: pin the fetch reviving a start-limited collector
2026-10-10 01:22:32 +02:00
hive-tls: the root fetch presents the hive identity, as on main
2026-10-06 14:54:07 +02:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
module-eval: set the hive-controller option only in tests that need a hive
2026-10-05 09:58:13 +02:00
module-eval: set the hive-controller option only in tests that need a hive
2026-10-05 09:58:13 +02:00
swarm-controller reads its forge token from the store, not a host file
2026-10-08 13:25:47 +02:00
hive telemetry collector: fetch its OIDC secret from the store under the hive's own leaf
2026-10-10 01:10:31 +02:00
module-eval/nats-tls: evaluate the no-URL leaf fixture with hive-c0re on
2026-10-10 01:05:33 +02:00
swarm-secret-publish: drop RemainAfterExit so the path unit re-runs it
2026-10-10 14:08:43 +02:00
nix: follow-ups from the service/deploy split
2026-10-05 19:12:46 +02:00
hive-tls: a gateway host without the services-issuer pair evaluates and goes red at runtime
2026-10-06 14:54:07 +02:00
hive-forge: mirror actions/upload-artifact alongside actions/checkout
2026-10-09 10:40:28 +02:00
4c4ecb8ed9