Privatae
42 lines
2.0 KiB
Go
42 lines
2.0 KiB
Go
package main
|
|
|
|
import "os"
|
|
|
|
// Environment names carry the product's name. The bastion is the program a
|
|
// member installs on their own machine and reads the source of, so every name
|
|
// it shows them is PRIVATAE_*.
|
|
//
|
|
// The lane addresses are read under that name and no other. They are set by
|
|
// hand in the bastion's unit environment (the installers write none of them),
|
|
// and an unset address means "that lane is absent", so a lane set under any
|
|
// other spelling stays off until it is renamed. The changelog says which names
|
|
// to set.
|
|
|
|
// agentTokenEnvNames are the delegation-tag variable names, in preference
|
|
// order. This one is read out of ANOTHER process's environment rather than our
|
|
// own: each platform reader walks the list with whatever it can use to read
|
|
// that process (a /proc file, ps, a Windows handle). The second name is the one
|
|
// the host still mints tags under, so an agent launched with one of its tags
|
|
// carries it until the host mints the first. A tag under either name marks its
|
|
// agent as requested; only a process carrying neither reads as unsanctioned.
|
|
var agentTokenEnvNames = []string{"PRIVATAE_AGENT_TOKEN", "SKEMA_AGENT_TOKEN"}
|
|
|
|
// The lane addresses, resolved in ONE place each. The probe that ADVERTISES a
|
|
// lane and the forwarder that SERVES it used to resolve the address separately,
|
|
// which let them disagree about which name to read — and that disagreement is
|
|
// worse than either lane being absent: the heartbeat reports pii_port and the
|
|
// capability while nothing ever listens on the port, so the host dials into a
|
|
// closed door instead of skipping a machine it knows has no sterilizer.
|
|
// One function per lane, called by both halves, and the disagreement cannot be
|
|
// written.
|
|
func piiTarget() string { return os.Getenv("PRIVATAE_PII_ADDR") }
|
|
|
|
// llmTarget is PRIVATAE_LLM_ADDR, or, unset, the OpenAI-compatible server
|
|
// found on this machine's loopback (llmlocal.go), "" when there is none.
|
|
func llmTarget() string {
|
|
if v := os.Getenv("PRIVATAE_LLM_ADDR"); v != "" {
|
|
return v
|
|
}
|
|
return discoveredLLM().Addr
|
|
}
|