Directories
¶
| Path | Synopsis |
|---|---|
|
Package adr036 implements ADR-036 off-chain message signing and verification.
|
Package adr036 implements ADR-036 off-chain message signing and verification. |
|
Package api provides the HTTP API server for fred.
|
Package api provides the HTTP API server for fred. |
|
Package auth provides the canonical signed-message formats used by Fred's tenant authentication.
|
Package auth provides the canonical signed-message formats used by Fred's tenant authentication. |
|
Package backend provides the interface and client for communicating with provisioning backends.
|
Package backend provides the interface and client for communicating with provisioning backends. |
|
docker
Package docker implements the Backend interface for Docker container provisioning.
|
Package docker implements the Backend interface for Docker container provisioning. |
|
docker/imageexec
Package imageexec admits immutable container images and binds their use to typed Docker and Compose execution sinks.
|
Package imageexec admits immutable container images and binds their use to typed Docker and Compose execution sinks. |
|
docker/imagefetch
Package imagefetch admits registry content before giving Docker any bytes.
|
Package imagefetch admits registry content before giving Docker any bytes. |
|
docker/tenantseccomp
Package tenantseccomp owns the seccomp profile fred applies to every container it creates for a tenant, and every Docker security option that names a seccomp profile.
|
Package tenantseccomp owns the seccomp profile fred applies to every container it creates for a tenant, and every Docker security option that names a seccomp profile. |
|
k3s
Package k3s is the scaffold for Fred's K3s backend.
|
Package k3s is the scaffold for Fred's K3s backend. |
|
shared
Package shared provides backend-agnostic components that can be reused across different backend implementations (Docker, Kubernetes, Nomad, etc.).
|
Package shared provides backend-agnostic components that can be reused across different backend implementations (Docker, Kubernetes, Nomad, etc.). |
|
shared/completion
Package completion owns the bounded completion window of an admitted effect.
|
Package completion owns the bounded completion window of an admitted effect. |
|
shared/imagebudget
Package imagebudget keeps immutable image verification work and physical daemon allocation in separate dimensions across preparation and durable pins.
|
Package imagebudget keeps immutable image verification work and physical daemon allocation in separate dimensions across preparation and durable pins. |
|
shared/leasesm
Package leasesm owns the per-lease state machine and actor, plus the substrate-agnostic seams they consume.
|
Package leasesm owns the per-lease state machine and actor, plus the substrate-agnostic seams they consume. |
|
shared/leasesm/failurecause
Package failurecause attributes one lease workload failure to its cause, for the consecutive-failure terminal budget the lease state machine keeps (ENG-799).
|
Package failurecause attributes one lease workload failure to its cause, for the consecutive-failure terminal budget the lease state machine keeps (ENG-799). |
|
shared/manifest
Package manifest defines the tenant-facing container manifest schema (StackManifest, holding a map of named per-service Manifest entries), JSON parsing, and validation.
|
Package manifest defines the tenant-facing container manifest schema (StackManifest, holding a map of named per-service Manifest entries), JSON parsing, and validation. |
|
shared/substratemutation
Package substratemutation defines the causal protocol between a durable mutation journal and an attested physical-substrate executor.
|
Package substratemutation defines the causal protocol between a durable mutation journal and an attested physical-substrate executor. |
|
shared/workbarrier
Package workbarrier provides a reference-counted barrier whose zero signal is exposed as a real channel, so callers can wait-with-timeout using a plain select without spawning helper goroutines that would leak when the count never drops to zero.
|
Package workbarrier provides a reference-counted barrier whose zero signal is exposed as a real channel, so callers can wait-with-timeout using a plain select without spawning helper goroutines that would leak when the count never drops to zero. |
|
Package backendidentity defines the immutable identity of a backend's durable storage substrate.
|
Package backendidentity defines the immutable identity of a backend's durable storage substrate. |
|
Package backendname defines the shared syntax for configured and durable backend identifiers.
|
Package backendname defines the shared syntax for configured and durable backend identifiers. |
|
Package callbackurl validates and constructs the static callback URL boundary shared by providerd configuration and callback builders.
|
Package callbackurl validates and constructs the static callback URL boundary shared by providerd configuration and callback builders. |
|
Package chain provides clients for interacting with the Manifest blockchain.
|
Package chain provides clients for interacting with the Manifest blockchain. |
|
chaintest
Package chaintest provides test doubles for the chain package.
|
Package chaintest provides test doubles for the chain package. |
|
Package config handles configuration loading and validation for fred.
|
Package config handles configuration loading and validation for fred. |
|
Package configyaml decodes one operator configuration document, rejecting unknown struct fields and additional YAML documents instead of ignoring them.
|
Package configyaml decodes one operator configuration document, rejecting unknown struct fields and additional YAML documents instead of ignoring them. |
|
Package fsidentity provides retained Linux directory capabilities for security-sensitive filesystem publication.
|
Package fsidentity provides retained Linux directory capabilities for security-sensitive filesystem publication. |
|
Package fstree removes and walks directory trees whose shape fred does not control, such as the contents of a tenant volume, with resources that stay bounded however deep or wide the tree is.
|
Package fstree removes and walks directory trees whose shape fred does not control, such as the contents of a tenant volume, with resources that stay bounded however deep or wide the tree is. |
|
internal/at
Package at is fstree's descriptor layer: the only code that turns an open directory and a name into a syscall.
|
Package at is fstree's descriptor layer: the only code that turns an open directory and a name into a syscall. |
|
Package healthprobe correlates health diagnostics without carrying admission authority or changing a probe's deadline or verdict.
|
Package healthprobe correlates health diagnostics without carrying admission authority or changing a probe's deadline or verdict. |
|
Package hmacauth provides HMAC-SHA256 signing and verification for request authentication between Fred components (Fred ↔ backends).
|
Package hmacauth provides HMAC-SHA256 signing and verification for request authentication between Fred components (Fred ↔ backends). |
|
Package httpurl contains validation shared by HTTP URL construction boundaries.
|
Package httpurl contains validation shared by HTTP URL construction boundaries. |
|
Package maintenanceid defines the caller-issued identity of one restart or update command.
|
Package maintenanceid defines the caller-issued identity of one restart or update command. |
|
Package metrics provides Prometheus metrics for fred observability.
|
Package metrics provides Prometheus metrics for fred observability. |
|
background
Package background holds the Prometheus collectors for background-goroutine health — the whole `fred_background_*` family.
|
Package background holds the Prometheus collectors for background-goroutine health — the whole `fred_background_*` family. |
|
Package operationid defines the identity of one provision or restore operation.
|
Package operationid defines the identity of one provision or restore operation. |
|
Package placementprobe collects complete backend inventory snapshots for offline placement safety tools.
|
Package placementprobe collects complete backend inventory snapshots for offline placement safety tools. |
|
Package placementsnapshot takes periodic online snapshots of providerd's placements.db and payloads.db into one operator-chosen directory, so losing the host costs at most one snapshot interval of placement history instead of everything since the last manual backup.
|
Package placementsnapshot takes periodic online snapshots of providerd's placements.db and payloads.db into one operator-chosen directory, so losing the host costs at most one snapshot interval of placement history instead of everything since the last manual backup. |
|
Package provisioner implements lease lifecycle application services and their Watermill runtime composition.
|
Package provisioner implements lease lifecycle application services and their Watermill runtime composition. |
|
callbackwire
Package callbackwire decodes the exact bytes and route covered by callback authentication.
|
Package callbackwire decodes the exact bytes and route covered by callback authentication. |
|
inventory
Package inventory owns the process-local capability that turns two independently collected backend inventory endpoints into negative evidence.
|
Package inventory owns the process-local capability that turns two independently collected backend inventory endpoints into negative evidence. |
|
leaseitems
Package leaseitems converts authoritative chain lease items into the backend protocol representation.
|
Package leaseitems converts authoritative chain lease items into the backend protocol representation. |
|
lifecycle
Package lifecycle defines the opaque identity carried by observational backend callback URLs.
|
Package lifecycle defines the opaque identity carried by observational backend callback URLs. |
|
maintenance
Package maintenance is the authenticated API adapter for the construction-bound placement maintenance application.
|
Package maintenance is the authenticated API adapter for the construction-bound placement maintenance application. |
|
operation
Package operation defines the identities and capabilities used to coordinate provisioner lifecycle operations.
|
Package operation defines the identities and capabilities used to coordinate provisioner lifecycle operations. |
|
payload
Package payload implements bbolt-backed lease-lifetime storage for tenant deployment payloads.
|
Package payload implements bbolt-backed lease-lifetime storage for tenant deployment payloads. |
|
placement
Package placement implements Fred's durable multi-backend placement authority.
|
Package placement implements Fred's durable multi-backend placement authority. |
|
restore
Package restore coordinates restoration of a fresh lease from retained data.
|
Package restore coordinates restoration of a fresh lease from retained data. |
|
storeauthority
Package storeauthority linearizes providerd-local durable-store commits with terminal withdrawal of the filesystem authority that names those stores.
|
Package storeauthority linearizes providerd-local durable-store commits with terminal withdrawal of the filesystem authority that names those stores. |
|
terminalverdict
Package terminalverdict reads a backend's consecutive-failure budget observation (ENG-799) into the only value providerd's failure-budget lease close accepts.
|
Package terminalverdict reads a backend's consecutive-failure budget observation (ENG-799) into the only value providerd's failure-budget lease close accepts. |
|
Package scheduler implements periodic withdrawal of accumulated lease fees and credit-depletion monitoring.
|
Package scheduler implements periodic withdrawal of accumulated lease fees and credit-depletion monitoring. |
|
Package strictjson provides an exact JSON decoding boundary for durable authority.
|
Package strictjson provides an exact JSON decoding boundary for durable authority. |
|
testsupport
|
|
|
backendclient
Package backendclient constructs identity-bound HTTP backend clients around legacy-shaped fixture servers.
|
Package backendclient constructs identity-bound HTTP backend clients around legacy-shaped fixture servers. |
|
placementstore
Package placementstore contains explicit test-fixture construction for the placement authority.
|
Package placementstore contains explicit test-fixture construction for the placement authority. |
|
Package testutil provides test fixtures and utilities for testing.
|
Package testutil provides test fixtures and utilities for testing. |
|
Package tlsconfig builds *tls.Config values for Fred's internal providerd <-> backend HTTP hop (ENG-103).
|
Package tlsconfig builds *tls.Config values for Fred's internal providerd <-> backend HTTP hop (ENG-103). |
|
Package util provides shared utility functions.
|
Package util provides shared utility functions. |
|
Package uuidv4 contains the shared canonical UUIDv4 wire mechanics used by distinct typed identities.
|
Package uuidv4 contains the shared canonical UUIDv4 wire mechanics used by distinct typed identities. |
|
Package watcher detects cross-provider credit depletion and triggers our own withdrawal in response.
|
Package watcher detects cross-provider credit depletion and triggers our own withdrawal in response. |
Click to show internal directories.
Click to hide internal directories.