atlas
ad439843f1
hive-c0re: hand the daemon the store identity it cannot open itself ...
`credential.rs` calls `SecretStore::from_env`, and nothing set `BAO_*` for
this unit — only `swarm-bao-matrix-token` had them. Fixing that alone would
not have been enough: hive-c0re runs as hive-core, and glue-bao-tls mints the
client key `0600` inside a `0700` directory, so the daemon cannot read the
file even when it is named.
Both halves go through LoadCredential, which this unit already uses for the
swarm-status client secret: root reads the identity at unit start, hive-core
sees it under `%d`, and no second on-disk copy exists.
The gate is the identity, never `deploy.bao.enable` — a hive that reads a
store on another machine holds a certificate and runs no store. Four
module-eval cases: the co-located and off-host presence arms, the absence arm
for a hive with no identity, and a presence/absence pair for the optional CA.
2026-09-03 00:29:52 +02:00
hive-c0re: hand the daemon the store identity it cannot open itself
2026-09-03 00:29:52 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
gateway: file nginx error lines at their own severity
2026-09-02 17:56:15 +02:00
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
swarm-grafana /dashboards
treefmt: apply prettier
2026-09-02 15:25:07 +02:00
glue-matrix-bao-token: the store's first reader
2026-08-30 19:01:10 +02:00
deploy: move the hive CA's knobs to deploy.hive-controller.tls
2026-08-30 20:52:00 +02:00
swarm-bao: ship the store's logs and metrics
2026-08-31 21:25:00 +02:00
swarm-bao: ship the store's logs and metrics
2026-08-31 21:25:00 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
deploy: rename enableAllLocalDefaults to deploy.singleHostSwarm
2026-08-30 20:12:16 +02:00
deploy: move the hive CA's knobs to deploy.hive-controller.tls
2026-08-30 20:52:00 +02:00
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
swarm-ca: state the store-is-world-readable rule once, not three times
2026-09-02 09:03:35 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
swarm: remove swarm.ui.domain, serve the UI on the swarm domain
2026-08-31 19:00:52 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
deploy: rename enableAllLocalDefaults to deploy.singleHostSwarm
2026-08-30 20:12:16 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
swarm: remove swarm.ui.domain, serve the UI on the swarm domain
2026-08-31 19:00:52 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
swarm: remove swarm.ui.domain, serve the UI on the swarm domain
2026-08-31 19:00:52 +02:00
ad439843f1