diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/access.md | 11 | ||||
| -rw-r--r-- | docs/example.toml | 8 |
2 files changed, 8 insertions, 11 deletions
diff --git a/docs/access.md b/docs/access.md index 9bd99cc..458c2dd 100644 --- a/docs/access.md +++ b/docs/access.md @@ -411,11 +411,12 @@ before, plain or signed by a key its planter put there itself, is gone unless th operator kept it. Every node is given the keys whose signature it takes on such a remake, out of the -document (`--strict-keys`, `authorized_keys` lines): one an operator holds. A node -votes for a strict remake only with its manifest signed by one of them; without any, -it votes for none (logged, `Not voting for a strict remake`), unless -`--follow-strict-remakes`. Once a majority commits one, every node switches, as with -any remake. +document (`--strict-keys`, `authorized_keys` lines): one an operator holds, the same +on a majority of the members at least. A node votes for a strict remake only with its +manifest signed by one of them; without any, for none (logged, `Not voting for a +strict remake`). Once a majority commits one, every node switches, as with any +remake. One that gets no majority aborts, its reason naming the members that didn't +vote: those whose `--strict-keys` don't take the manifest's signer, or that were away. ```sh continuum-signed strict diff --git a/docs/example.toml b/docs/example.toml index 2c3a2ab..d5af848 100644 --- a/docs/example.toml +++ b/docs/example.toml @@ -107,14 +107,10 @@ htpasswd = "/etc/continuum/htpasswd" # SSH keys, as authorized_keys lines (ssh-ed25519 <base64> [comment]), whose signature # on a strict remake's manifest this node takes: the values kept when the swarm turns -# strict (docs/access.md). Without, it votes for no strict remake, unless -# follow-strict-remakes. +# strict (docs/access.md). Without, it votes for no strict remake; a majority of the +# members must take the manifest's signer for one to commit. # strict-keys = ["ssh-ed25519 AAAA… alice"] -# Without strict-keys: vote for strict remakes all the same, taking the manifests as -# the members proposing them sign them. -# follow-strict-remakes = false - # Where the reverse proxies whose user-header is believed connect from: IP addresses (or # ranges, as ADDRESS/BITS), and unix for the API's Unix sockets (bind-addr). On a host # with other users, leave out the addresses and have the proxy use a Unix socket: others |