internal/

Package account resolves a person to the system account a worker runs as: a uid, a primary gid and supplementary gids (docs/identity.md).

Package launch starts the workers that serve a person's files as that person (docs/identity.md).

Package peercred is gRPC transport credentials for a unix socket that say WHO is at the other end: the uid, gid and pid the kernel recorded for the peer when it connected (SO_PEERCRED on Linux, LOCAL_PEERCRED on macOS).

Package provision is `fileshare provisioner`: the privileged half of fileshare, which creates the storage a volume share is served from -- a ZFS dataset, a btrfs subvolume, an XFS or ext4 directory under a project quota -- and nothing else.

Package provisionclient is how `fileshare serve` talks to `fileshare provisioner`: a unix socket, typed calls, and nothing that could carry a path.