kneel
Loading activity
Down by the bay, where the watermelons grow
- I Violated the Geneva Conventions by Implementing Kerberos in TypeScriptthepotato.techapproved
- What Does Fedora Want From Me Today?thepotato.techapproved
- I Put My Son in a Swampthepotato.techapproved
- The WiFi Certificate That Didn't Exist an Hour Agothepotato.techapproved
- #1706swamp extracts embedded deno into $HOME → unexecutable under SELinux Enforcing; all user extensions fail to loadbug
- #1347Run-context variables (run.id, workflowRunId) undefined in step-input CEL after suspend+resumebug
- #1345--server wss:// client offers h2 ALPN then fails the WebSocket upgrade over HTTP/2 (should pin http/1.1)bug
- #1311Documentation gives conflicting behavior for pulling yanked extension versionsbug
- #1272swamp extension version crashes with 'Invalid CalVer version: "null"' when only a prerelease (beta/rc) version is publishedbug
Krb5
GSSAPI initial-token producer (no mutual authentication or continuation): native-JS Kerberos 5 / SPNEGO client (no shell-out) — password → AS pre-auth → TGT → TGS → service ticket → SPNEGO `Negotiate` token, with session keys, tickets, and headers stored as vault-backed datastore resources (requires installing a vault named `krb5`; any backend). Drives GSSAPI-protected HTTP endpoints and hands single-use SPNEGO headers to other models via data + CEL. Pure WebCrypto + fetch over MS-KKDCP (works in a fetch-only sandbox); raw TCP/UDP KDC transports available where socket permissions allow.
Plocate
Wrap [plocate](https://plocate.sesse.net/) to build, refresh, query, and
Nts Sar
Generate NTS Station Activity Report (SAR) radiograms from an RTC (Ready To Copy) DBF traffic log — Standard SAR to the STM plus an optional NTSD Digital SAR.
Eda Review Lenses
Five adversarial EDA design-review prompts ("lenses") for an independent
Koji
Swamp-native Koji client: speaks Koji's XML-RPC dialect and header-based session protocol, authenticating with Kerberos/GSSAPI (via @kneel/krb5) or an SSL client certificate. One model instance per Koji profile ("scope"); reads hosts, builds, tagged builds, and tasks, and writes host edits, enable/disable, tag/untag, promote, and build submission.