Before you begin
Both liminals are enrolled as agents in Lys and hold their own passes. You have each one’s public key, printed by the identity command.
Complete the task
-
On the dialling end, name the peer, its address and the exported subjects.
[auth.lys.machine] identity_path = "/var/lib/liminal/liminal-agent.key" agent_id = "agent-<this liminal>" audience = "liminal" [auth.lys.machine.machines] "agent-<the peer>" = "<the peer's public key, hex>" [[auth.lys.machine.links]] link_id = "here-to-peer" peer_holder = "agent-<the peer>" peer_address = "10.0.0.2:7610" exports = ["demo"] -
On the accepting end, admit the dialling liminal by its public key.
[auth.lys.machine] identity_path = "/var/lib/liminal/liminal-agent.key" agent_id = "agent-<the peer>" audience = "liminal" [auth.lys.machine.machines] "agent-<this liminal>" = "<this liminal's public key, hex>" -
Check both files with the new configuration, then restart the accepting end, then the dialling end.
liminal check --config liminal.toml # liminal.toml: configuration valid -
Prove the open: the dialling end’s health page shows the link with one open and no refusal. A refused open is logged at both ends with its reason.
curl -s http://127.0.0.1:7601/health
If something goes wrong
A refusal named link_import means the accepting end would not admit a subject: the exports are not granted to the dialling liminal’s pass. A dial the operating system refused is retried on its own. A peer that was shutting down refuses once with connection links ended: shutdown and the retry opens.
Next step
Watch the subject cross on the console, or subscribe to it from a ticket: Ticket tools and lines.