Machine settings shape this host

The settings this machine keeps for itself, whatever runs on it. They are in ~/.lnk/machine.toml, readable only by you (600).

Its name

id and name say which machine this is. A file holding only unsandboxed gets its id and name added.

Never unsandboxed

unsandboxed = false forbids running any agent without a sandbox here, whatever asks, a deployment included. No sandbox is refused too on a box, whose root's /etc/lnk/kind.toml says so, whatever this file says. It's refused as well when this file, or a folder on its way, is one others than you and root could write, or could have removed it from.

Agents' things

keep_moved is how long a moved agent's files stay here: "30d", the default, or "never". [storage] names where this machine's agents may keep their collections.

Machine kind

Root's /etc/lnk/kind.toml identifies a box's os and arch. The OS labels are ubuntu-24.04, ubuntu-22.04, debian-13 and macos. These labels describe the guest. Each provider separately refuses an OS it cannot supply, and the cloud contract accepts only its Ubuntu image set.

One harness for every agent

shared_harness = true has one Link Harness serve all of an owner's agents here, each behind its own proxy. It's Linux only, and off by default.

One bridge for every agent

shared_bridge = true has one bridge carry every agent's connections and messages here, with one scheduler runner a time zone. It's off by default.

Your secrets' own user

keeper = false is your no to keeping your secrets under a user of their own on Linux, so you aren't asked again.

Checked reference

The field names below come from link_machine::machine::{Machine, Kind}. Optional values remain unset until the feature resolves its environment or inherited settings. These are identity and root-owned kind records. Other switches belong to their feature consumers, and variant fields depend on kind.

root: id, name
/etc/lnk/kind.toml: arch, kind, os