ouroboros, branch be

ipcpd: Store local names before DHT peering

2026-07-08T09:02:25+00:00

A name registered before the DHT had a peer stayed unpublished until it neared its expiry deadline. Make a never-stored local value (t_repl == 0) eligible for replication immediately, and flush replication once when the worker starts so such names are published as soon as the DHT is enrolled. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

ipcpd: Fix DHT bootstrap re-seeding

2026-07-08T09:02:24+00:00

The bootstrap seeder reported success as soon as the query was sent. Only skip seeding once the peer is in a bucket, and return -EAGAIN until it actually appears so the caller keeps retrying rather than assuming bootstrap completed. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

ipcpd: Report eth socket egress queue in RIB

2026-07-08T09:02:24+00:00

Add the raw socket's SIOCOUTQ egress backlog to the eth RIB and relabel the existing FIONREAD RIB entry as ingress. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

ipcpd: Minimize ipcpd-eth send buffer

2026-07-08T09:02:24+00:00

The eth send buffer needs to block quickly so we can mark congestion correctly in the upper layer buffers. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Fix locking on flow read

2026-07-08T09:02:24+00:00

Reading a deallocated flow could cause an assert on a negative id. The raw-flow path now holds proc.lock across flow_rx_spb rather than dropping it first, and the FRCT loop no longer releases and reacquires the lock on every iteration. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Prefer writers on the proc flow lock

2026-07-08T09:02:24+00:00

FRCT readers hold proc.lock in a rdlock loop and could starve a pending flow accept waiting for the wrlock. Initialise the lock with the writer-nonrecursive kind on Linux with glibc, so writers are not indefinitely delayed. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Clean up on cancelled blocking read

2026-07-08T09:02:24+00:00

Cancelling a thread that was blocked in ssm_rbuff_read_b/write_b didn't clean up the n_users reference. If it was in flow_rx_one it didn't unlock the process lock. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

lib: Separate rekey replay from epoch conflict

2026-07-08T09:02:24+00:00

keyrot_rekey() treated any re-key attempt against a live epoch (current or previous) the same way, whether the offered root key matched the live one (a replay) or was genuinely different (a conflict). Compare the offered key against the live batch's root and return -EREPLAY for a match, keeping -1/-ECRYPT for an actual conflict, so callers can handle replayed re-keys distinctly from real ones. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Move AUTH test macros to OAP common.h

2026-07-08T09:02:24+00:00

The ML-DSA OAP test defined CLI_AUTH/NO_CLI_AUTH and passed them for the srv_auth parameters of the re-key tests. Rename to the neutral AUTH/NO_AUTH already used by oap_test.c and move the pair to the shared common.h. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders

irmd: Test OAP KEM re-key floor

2026-07-08T09:02:23+00:00

Add tests for two client-encap KEM properties the server enforces: reject a client KDF below the server floor, and confirm a re-key forces ephemeral server-encap. Signed-off-by: Dimitri Staessens Signed-off-by: Sander Vrijders