pub fn check_lan_dial_targets(
workspace_root: &Path,
) -> Result<Vec<LanDialTarget>>Expand description
Flag every machine that has put a LAN literal in [connect].yubaba.
Same lint family and camp-local-only scoping as check_inert_taints. The
failure this one catches is the loudest of the four and still went unnoticed
for weeks, which is the argument for checking it: the declaration parses, the
node is elected by placement, and the only symptom is a connect timeout at
dial time attributed to the box rather than to its file.
Loopback is deliberately not flagged — http://127.0.0.1:7443 is the
pre-mesh “reach me through the SSH tunnel” declaration, a genuine statement
that hub::coordinator::is_loopback_url already judges downstream.
A finding here is now belt-and-braces rather than the only guard:
MachineConfig::reach refuses to dial a private literal regardless. The
lint exists so the operator hears about it from the file rather than from a
roll that silently picked a different address than the one written down.