mirror of
https://github.com/jmcorgan/fips.git
synced 2026-08-09 00:04:54 +00:00
Johnathan Corgan
630a04c432
The static compose's mixed-profile services are next-only, so the floating subnet arrived without them: four services kept ipv4_address pins on a network that no longer declares a subnet, which docker rejects outright at `up`. They now float with the rest, take the per-run config directory, and carry the run name suffix their container_name was missing. Phase 3 of the admission-cap test conflicted for a real reason rather than a textual one. This line asserts size-agnostically — sustained inbound from each denied peer plus "was never promoted" — because the XX handshake message sizes differ from IK and may change again. That assertion is kept; what comes across from maint is the address handling underneath it, which matters here for the same reason: with the subnet floating, a restarted container can change address, and matching on a single one silently under-counts the very evidence the assertion rests on.