procd/uxc-stack.uc, branch masterOpenWrt service / process managerhttps://git.openwrt.org/project/procd/atom?h=master2026-08-21T17:45:01Zuxc-stack: pass the addressing annotations through to members2026-08-21T17:45:01ZDaniel Golle2026-08-21T17:44:03Zurn:sha1:3f4ff94d0f644ea4ec26dff32cc6f13f758d097d
uxc-net now honours the org.openwrt.network.proto, proto6 and
ip6ifaceid annotations to pick the in-jail IPv4 and IPv6 protocols and
to pin the IPv6 interface identifier inside a delegated prefix. Let a
stack definition set them per member through the new spec keys proto,
proto6 and ip6ifaceid, named after the annotation leaves just like the
egress, ingress and host access options, and copy them into the
member's annotations sidecar alongside the existing network
annotations.
A key set by the stack definition overrides the same annotation in the
member's own bundle, since uxc-net merges the sidecar over the bundle's
config.json annotations; a key the stack leaves unset is omitted from
the sidecar, so the bundle's own value stays effective. This matches
the behaviour of the existing attach, egress, ingress and host
annotations, whose precedence is unchanged.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
uxc-stack: add the container stack engine2026-08-21T04:34:10ZDaniel Golle2026-06-17T15:26:51Zurn:sha1:42a8d3358c04a41fbe41e4c5008c503006e7613f
Add uxc-stack, a ucode engine that instantiates and tears down a multi-
container stack from a template. "up <app>" loads a stack template returning
compose(api), which declares named instances drawn from shared image layers,
then writes one autostart registration per instance and triggers bring-up by a
ubus event procd reconciles through the boot path, avoiding a synchronous
create that would serialise the stack on each member's start. "down <app>" is
driven from the persistent registrations (origin "stack:<app>"), not the
template, since apk removes the template before pre-remove runs.
Addressing is deterministic and state-free, derived by FNV-1a from names: a
per-instance host-uid offset strided by 64k so re-created instances keep their
data-volume ownership, and a backhaul /24 within RFC 2544 198.18.0.0/15. The
engine writes a shared /etc/hosts (retaining localhost) for resolver-free
discovery, plus per-instance annotation sidecars uxc-net merges over the
image's baked annotations. Secrets are referenced via generate@ directives uxc
materialises, and bound idmapped rather than copied. On teardown, data volumes
and their paired generated secrets are kept and reported for manual removal.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>