Module revocation 

Persistent host revocation (ban list).

Stores a JSON file at RuntimePaths::revoked_hosts() containing hosts that have been banned from joining the mesh. The ban list is loaded at kernel boot and checked during mesh peer handshake.

The list also revokes package ids, signer keys and artifact hashes (ADR-099 section 7); see RevocationKind and RevocationList::revoke_subject. Those persist in a sibling file.

Structs

RevocationList

Persistent host revocation manager.

RevokedHost

A single revocation entry.

RevokedSubject

One revoked subject.

Enums

RevocationError

Errors from subject revocation.

RevocationKind

What a subject revocation targets.

Constants

AUDIT_REVOKE_KIND

Chain event kind of a subject revocation (chain::EVENT_KIND_WORKLOAD_REVOKE).

AUDIT_UNREVOKE_KIND

Chain event kind of a lifted revocation (chain::EVENT_KIND_WORKLOAD_UNREVOKE).

MAX_PACKAGE_ID_LEN

Maximum package id length.

SUBJECTS_FILE_NAME

File name of the subject revocation list, next to the host ban file.

Type Aliases

AuditSink

Records an audit event: (kind, payload).