best-peer 0.0.28

best-peer 0.0.28

A boxed job runs as uid 65534 whatever its image names, and a pull is held to the room it takes on the engine's disk and to the floor it leaves.

Commits since v0.0.27

• Review: owner and opened jobs are said to run as their image's user, a floor whose room cannot be read is its own error with its own fix, and a job's inputs are readable by it whatever the peer's umask (5bc4bd8)
• Review: a boxed job's user is in the catalogue, a held reference a pull moved past its limits names the owner's image again, a pull is held to one last reading of the room, and the README names pulls held to limits (d51ccb0)
• A pull is held to what lands on the engine's disk while it runs, its room taken and the floor left, since a bound on compressed layer sizes let an image unpack to several times as much (51fe079)
• A job's container runs as uid 65534 whatever its image names, since root in a container is root on a host without userns-remap (73f672e)
• Review: say in section 2 that what the spec does not mention is best-peer's own, as section 1 does (5a1fc9f)
• Say that a behaviour the spec does not mention is best-peer's own, never an entry on spec#37 (283aa43)

Run it

One binary. Download the archive for the machine, check it against SHA256SUMS, unpack it and run best-peer with the environment the README's Run section names; best-peer --version says best-peer 0.0.28. Each archive is here twice, byte for byte the same: under the name with the version, for pinning, and under the name without it, which releases/latest/download/<name> resolves to the newest release, as the README's commands use.

Machine	Archive	Same file, unversioned
Linux x86_64 (glibc 2.35 or newer)	best-peer-0.0.28-x86_64-unknown-linux-gnu.tar.gz	best-peer-x86_64-unknown-linux-gnu.tar.gz
Windows x86_64	best-peer-0.0.28-x86_64-pc-windows-msvc.zip	best-peer-x86_64-pc-windows-msvc.zip
macOS Apple silicon	best-peer-0.0.28-aarch64-apple-darwin.tar.gz	best-peer-aarch64-apple-darwin.tar.gz

Every archive carries a build provenance attestation: gh attestation verify <archive> --repo behavioralstate/best-peer.