Debusine internals

This section contains reference documentation about some of the inner workings of Debusine.

• Work Requests
• Permissions reference
  • Resources
  • Roles inference
  • Permission predicates
    • Caching and invalidation
    • Permission checks
    • Permission filters
  • Enforcing permission predicates
  • Roles of users in groups
  • Provisions for testing
• Signing service details
  • Backend overview
  • Database models
  • HSM key availability
  • Security Model
• Scheduler tags
  • Tag lifetime
  • Tag provenance
    • Workers providing tags
    • Workers requiring tags
    • Tasks providing tags
    • Tasks requiring tags
  • Tag ontologies
    • Tags provided by workers
      • worker:build-arch
      • worker:cap
      • worker:class
      • worker:executor
      • worker:task
      • worker:type
    • Tags provided by tasks
      • task:scope
      • task:workspace
      • task:group
      • task:source-package
• Task upgrading checklist
  • 2026-02
    • Tag based scheduling
  • 2026-02
    • Split server-side and worker-side tasks
    • build_dynamic_data merged into compute_dynamic_data
    • Introduced task input fields
    • Removed build_architecture()
    • Unified data model for sending lookup results to external clients
    • Separate methods for computing subject and configuration context
    • Tag based scheduling