Degrade gracefully when Iroh modules fail

This commit is contained in:
Eric Wendland 2026-07-18 16:00:13 +02:00
commit 7d67da9dfe
4 changed files with 193 additions and 55 deletions

View file

@ -145,6 +145,11 @@ the daemon lifetime. When endpoint startup succeeds, the Iroh EndpointID is
recorded as a transport binding for the stable geth node identity. If local UDP
binding is unavailable, the daemon keeps local control running and reports the
Iroh startup error through status output.
The same degraded-local behavior applies when the endpoint starts but a native
blob, document, gossip, or initial mirroring step fails. Partially initialized
native handles are released, the endpoint is closed, and `geth status` reports
the runtime backends as unavailable with the concrete startup blocker. Local
metadata, diagnosis, backup, and other non-network control remain available.
SSH keys are not transport keys. They are admin trust anchors and signing
identities for keychain and authorization operations. The bootstrap `geth ssh