Milestone 5: metered awareness, DSCP, systemd, man pages, packaging

bl/varde

Metered detection polls NetworkManager's Metered property over D-Bus
(feature "metered", default on; builds without D-Bus via
no-default-features). While metered the daemon closes incoming blob
connections and defers every fetch; VARDE_FORCE_METERED=true forces the
state as a kill switch and test hook. Endpoint UDP sockets get DSCP CS1
best-effort by matching bound ports to /proc/net/udp inodes (iroh hides
its fds). systemd socket activation adopts LISTEN_FDS fd 3, readiness
is a hand-rolled sd_notify READY=1 (abstract + path sockets), and
standalone binding still works unchanged. dist/ ships hardened system
and user units (DynamicUser, ProtectSystem=strict, StateDirectory,
RestrictAddressFamilies), a commented config example, scdoc man pages
validated with scdoc, and an untested PKGBUILD skeleton.

Tests: activation-socket round trip via a real fd-3 handoff, READY=1
received on a NOTIFY_SOCKET, metered daemons neither serve nor fetch.

Dependencies: zbus (optional, feature-gated D-Bus client for the
NetworkManager metered flag).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

This commit is contained in:

Bendik Lynghaug

2026-07-15 08:07:24 +02:00

parent 20bdf56668

commit 871280553e

19 changed files with 1031 additions and 5 deletions

									
										dist/varde.socket
									
Vendored

		+10
		
												View File
												
				@@ -0,0 +1,10 @@

				# Socket activation for the varde system daemon.

				[Unit]

				Description=varde API socket

				[Socket]

				ListenStream=/run/varde/varde.sock

				SocketMode=0666

				[Install]

				WantedBy=sockets.target