Merge pull request 'adding the ability to change the default podManagementPolicy for StatefulSets' (#823 ) from bodaciousbiscuits/garage:main into main

Reviewed-on: Deuxfleurs/garage#823 Reviewed-by: maximilien <me@mricher.fr>
adding the ability to change the default podManagementPolicy for StatefulSets
2024-05-25 18:35:53 +00:00 · 2024-05-19 21:31:19 -05:00 · 2024-05-12 08:53:26 +00:00 · 2024-05-07 07:42:33 +00:00 · 2024-04-23 18:54:26 +00:00 · 2024-04-23 11:59:37 +03:00
96 changed files with 3283 additions and 1439 deletions
--- a/.woodpecker/debug.yaml
+++ b/.woodpecker/debug.yaml
@ -34,7 +34,9 @@ steps:
      - ./result/bin/garage_util-*
      - ./result/bin/garage_web-*
      - ./result/bin/garage-*
-      - ./result/bin/integration-* || (cat tmp-garage-integration/stderr.log; false)
+      - GARAGE_TEST_INTEGRATION_DB_ENGINE=lmdb ./result/bin/integration-* || (cat tmp-garage-integration/stderr.log; false)
      - nix-shell --attr ci --run "killall -9 garage" || true
      - GARAGE_TEST_INTEGRATION_DB_ENGINE=sqlite ./result/bin/integration-* || (cat tmp-garage-integration/stderr.log; false)
      - rm result
      - rm -rv tmp-garage-integration
--- a/Cargo.lock
+++ b/Cargo.lock
@ -74,12 +74,6 @@ dependencies = [
 "memchr",
 ]
 [[package]]
 name = "aliasable"
 version = "0.1.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "250f629c0161ad8107cf89319e990051fae62832fd343083bea452d93e2205fd"
 [[package]]
 name = "allocator-api2"
 version = "0.2.16"
@ -911,9 +905,9 @@ dependencies = [
 [[package]]
 name = "crc32fast"
-version = "1.3.2"
+version = "1.4.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b540bd8bc810d3885c6ea91e2018302f68baba2129ab3e88f32389ee9370880d"
+checksum = "b3855a8a784b474f333699ef2bbca9db2c4a1f6d9088a90a2d25b1eb53111eaa"
 dependencies = [
 "cfg-if",
 ]
@ -1310,7 +1304,7 @@ dependencies = [
 [[package]]
 name = "garage"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "assert-json-diff",
 "async-trait",
@ -1352,9 +1346,11 @@ dependencies = [
 "serde",
 "serde_bytes",
 "serde_json",
 "sha1",
 "sha2",
 "static_init",
 "structopt",
 "syslog-tracing",
 "timeago",
 "tokio",
 "toml",
@ -1364,7 +1360,7 @@ dependencies = [
 [[package]]
 name = "garage_api"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "aes-gcm",
 "argon2",
@ -1373,6 +1369,8 @@ dependencies = [
 "base64 0.21.7",
 "bytes",
 "chrono",
 "crc32c",
 "crc32fast",
 "crypto-common",
 "err-derive",
 "form_urlencoded",
@ -1406,6 +1404,7 @@ dependencies = [
 "serde",
 "serde_bytes",
 "serde_json",
 "sha1",
 "sha2",
 "tokio",
 "tokio-stream",
@ -1416,7 +1415,7 @@ dependencies = [
 [[package]]
 name = "garage_block"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "arc-swap",
 "async-compression",
@ -1443,20 +1442,21 @@ dependencies = [
 [[package]]
 name = "garage_db"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "err-derive",
 "heed",
 "hexdump",
 "mktemp",
- "ouroboros",
+ "r2d2",
 "r2d2_sqlite",
 "rusqlite",
 "tracing",
 ]
 [[package]]
 name = "garage_model"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "arc-swap",
 "async-trait",
@ -1475,6 +1475,7 @@ dependencies = [
 "hex",
 "http 1.0.0",
 "opentelemetry",
 "parse_duration",
 "rand",
 "serde",
 "serde_bytes",
@ -1485,7 +1486,7 @@ dependencies = [
 [[package]]
 name = "garage_net"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "arc-swap",
 "async-trait",
@ -1511,7 +1512,7 @@ dependencies = [
 [[package]]
 name = "garage_rpc"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "arc-swap",
 "async-trait",
@ -1546,7 +1547,7 @@ dependencies = [
 [[package]]
 name = "garage_table"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "arc-swap",
 "async-trait",
@ -1568,7 +1569,7 @@ dependencies = [
 [[package]]
 name = "garage_util"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "arc-swap",
 "async-trait",
@ -1602,7 +1603,7 @@ dependencies = [
 [[package]]
 name = "garage_web"
-version = "0.10.0"
+version = "1.0.0"
 dependencies = [
 "err-derive",
 "futures",
@ -1754,9 +1755,9 @@ dependencies = [
 [[package]]
 name = "hashlink"
-version = "0.8.4"
+version = "0.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e8094feaf31ff591f651a2664fb9cfd92bba7a60ce3197265e9482ebe753c8f7"
+checksum = "692eaaf7f7607518dd3cef090f1474b61edc5301d8012f09579920df68b725ee"
 dependencies = [
 "hashbrown 0.14.3",
 ]
@ -2422,9 +2423,9 @@ dependencies = [
 [[package]]
 name = "libsqlite3-sys"
-version = "0.27.0"
+version = "0.28.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf4e226dcd58b4be396f7bd3c20da8fdee2911400705297ba7d2d7cc2c30f716"
+checksum = "0c10584274047cb335c23d3e61bcef8e323adae7c5c8c760540f73610177fc3f"
 dependencies = [
 "cc",
 "pkg-config",
@ -2782,31 +2783,6 @@ dependencies = [
 "num-traits",
 ]
 [[package]]
 name = "ouroboros"
 version = "0.18.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "97b7be5a8a3462b752f4be3ff2b2bf2f7f1d00834902e46be2a4d68b87b0573c"
 dependencies = [
 "aliasable",
 "ouroboros_macro",
 "static_assertions",
 ]
 [[package]]
 name = "ouroboros_macro"
 version = "0.18.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b645dcde5f119c2c454a92d0dfa271a2a3b205da92e4292a68ead4bdbfde1f33"
 dependencies = [
 "heck 0.4.1",
 "itertools 0.12.1",
 "proc-macro2",
 "proc-macro2-diagnostics",
 "quote",
 "syn 2.0.48",
 ]
 [[package]]
 name = "outref"
 version = "0.5.1"
@ -3134,19 +3110,6 @@ dependencies = [
 "unicode-ident",
 ]
 [[package]]
 name = "proc-macro2-diagnostics"
 version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "af066a9c399a26e020ada66a034357a868728e72cd426f3adcd35f80d88d88c8"
 dependencies = [
 "proc-macro2",
 "quote",
 "syn 2.0.48",
 "version_check",
 "yansi",
 ]
 [[package]]
 name = "prometheus"
 version = "0.13.3"
@ -3240,6 +3203,28 @@ dependencies = [
 "proc-macro2",
 ]
 [[package]]
 name = "r2d2"
 version = "0.8.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "51de85fb3fb6524929c8a2eb85e6b6d363de4e8c48f9e2c2eac4944abc181c93"
 dependencies = [
 "log",
 "parking_lot 0.12.1",
 "scheduled-thread-pool",
 ]
 [[package]]
 name = "r2d2_sqlite"
 version = "0.24.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6a982edf65c129796dba72f8775b292ef482b40d035e827a9825b3bc07ccc5f2"
 dependencies = [
 "r2d2",
 "rusqlite",
 "uuid",
 ]
 [[package]]
 name = "rand"
 version = "0.8.5"
@ -3433,9 +3418,9 @@ checksum = "3cd14fd5e3b777a7422cca79358c57a8f6e3a703d9ac187448d0daf220c2407f"
 [[package]]
 name = "rusqlite"
-version = "0.30.0"
+version = "0.31.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a78046161564f5e7cd9008aff3b2990b3850dc8e0349119b98e8f251e099f24d"
+checksum = "b838eba278d213a8beaf485bd313fd580ca4505a00d5871caeb1457c55322cae"
 dependencies = [
 "bitflags 2.4.2",
 "fallible-iterator",
@ -3600,6 +3585,15 @@ dependencies = [
 "windows-sys 0.52.0",
 ]
 [[package]]
 name = "scheduled-thread-pool"
 version = "0.2.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3cbc66816425a074528352f5789333ecff06ca41b36b0b0efdfbb29edc391a19"
 dependencies = [
 "parking_lot 0.12.1",
 ]
 [[package]]
 name = "schemars"
 version = "0.8.16"
@ -3879,12 +3873,6 @@ dependencies = [
 "der",
 ]
 [[package]]
 name = "static_assertions"
 version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
 [[package]]
 name = "static_init"
 version = "1.0.3"
@ -3998,6 +3986,17 @@ dependencies = [
 "unicode-xid",
 ]
 [[package]]
 name = "syslog-tracing"
 version = "0.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "340b1540dcdb6b066bc2966e7974f977ab1a38f21b2be189014ffb0cc2405768"
 dependencies = [
 "libc",
 "tracing-core",
 "tracing-subscriber",
 ]
 [[package]]
 name = "system-configuration"
 version = "0.5.1"
@ -4553,6 +4552,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "79daa5ed5740825c40b389c5e50312b9c86df53fccd33f281df655642b43869d"
 dependencies = [
 "getrandom",
 "rand",
 ]
 [[package]]
@ -4895,12 +4895,6 @@ version = "0.8.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "53be06678ed9e83edb1745eb72efc0bbcd7b5c3c35711a860906aed827a13d61"
 [[package]]
 name = "yansi"
 version = "1.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6c2861d76f58ec8fc95708b9b1e417f7b12fd72ad33c01fa6886707092dea0d3"
 [[package]]
 name = "zerocopy"
 version = "0.7.32"
--- a/Cargo.nix
+++ b/Cargo.nix
@ -34,7 +34,7 @@ args@{
  ignoreLockHash,
 }:
 let
-  nixifiedLockHash = "17e620fad07e725e301488a3746ca3512d8785ce3077f634adde82e9e4eab2bb";
+  nixifiedLockHash = "1ccd5eb25a83962821e0e9da4ce6df31717b2b97a5b3a0c80c9e0e0759710143";
  workspaceSrc = if args.workspaceSrc == null then ./. else args.workspaceSrc;
  currentLockHash = builtins.hashFile "sha256" (workspaceSrc + /Cargo.lock);
  lockHashIgnored = if ignoreLockHash
@ -58,17 +58,17 @@ in
 {
  cargo2nixVersion = "0.11.0";
  workspace = {
-    garage_db = rustPackages.unknown.garage_db."0.10.0";
+    garage_db = rustPackages.unknown.garage_db."1.0.0";
-    garage_util = rustPackages.unknown.garage_util."0.10.0";
+    garage_util = rustPackages.unknown.garage_util."1.0.0";
-    garage_net = rustPackages.unknown.garage_net."0.10.0";
+    garage_net = rustPackages.unknown.garage_net."1.0.0";
-    garage_rpc = rustPackages.unknown.garage_rpc."0.10.0";
+    garage_rpc = rustPackages.unknown.garage_rpc."1.0.0";
    format_table = rustPackages.unknown.format_table."0.1.1";
-    garage_table = rustPackages.unknown.garage_table."0.10.0";
+    garage_table = rustPackages.unknown.garage_table."1.0.0";
-    garage_block = rustPackages.unknown.garage_block."0.10.0";
+    garage_block = rustPackages.unknown.garage_block."1.0.0";
-    garage_model = rustPackages.unknown.garage_model."0.10.0";
+    garage_model = rustPackages.unknown.garage_model."1.0.0";
-    garage_api = rustPackages.unknown.garage_api."0.10.0";
+    garage_api = rustPackages.unknown.garage_api."1.0.0";
-    garage_web = rustPackages.unknown.garage_web."0.10.0";
+    garage_web = rustPackages.unknown.garage_web."1.0.0";
-    garage = rustPackages.unknown.garage."0.10.0";
+    garage = rustPackages.unknown.garage."1.0.0";
    k2v-client = rustPackages.unknown.k2v-client."0.0.4";
  };
  "registry+https://github.com/rust-lang/crates.io-index".addr2line."0.21.0" = overridableMkRustCrate (profileName: rec {
@ -152,13 +152,13 @@ in
      (lib.optional (rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "std")
    ];
    dependencies = {
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "cfg_if" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".cfg-if."1.0.0" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "cfg_if" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".cfg-if."1.0.0" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "getrandom" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".getrandom."0.2.12" { inherit profileName; }).out;
-      ${ if (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") && !((hostPlatform.parsed.cpu.name == "armv6l" || hostPlatform.parsed.cpu.name == "armv7l") && hostPlatform.parsed.kernel.name == "none") then "once_cell" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".once_cell."1.19.0" { inherit profileName; }).out;
+      ${ if (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") && !((hostPlatform.parsed.cpu.name == "armv6l" || hostPlatform.parsed.cpu.name == "armv7l") && hostPlatform.parsed.kernel.name == "none") then "once_cell" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".once_cell."1.19.0" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "zerocopy" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".zerocopy."0.7.32" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "zerocopy" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".zerocopy."0.7.32" { inherit profileName; }).out;
    };
    buildDependencies = {
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "version_check" else null } = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".version_check."0.9.4" { profileName = "__noProfile"; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "version_check" else null } = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".version_check."0.9.4" { profileName = "__noProfile"; }).out;
    };
  });
@ -176,24 +176,13 @@ in
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".aliasable."0.1.3" = overridableMkRustCrate (profileName: rec {
    name = "aliasable";
    version = "0.1.3";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "250f629c0161ad8107cf89319e990051fae62832fd343083bea452d93e2205fd"; };
    features = builtins.concatLists [
      [ "alloc" ]
      [ "default" ]
    ];
  });
  "registry+https://github.com/rust-lang/crates.io-index".allocator-api2."0.2.16" = overridableMkRustCrate (profileName: rec {
    name = "allocator-api2";
    version = "0.2.16";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "0942ffc6dcaadf03badf6e6a2d0228460359d5e34b57ccdc720b7382dfbd5ec5"; };
    features = builtins.concatLists [
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "alloc")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "alloc")
    ];
  });
@ -685,7 +674,7 @@ in
      aws_smithy_types = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".aws-smithy-types."1.1.4" { inherit profileName; }).out;
      bytes = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".bytes."1.5.0" { inherit profileName; }).out;
      crc32c = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".crc32c."0.6.4" { inherit profileName; }).out;
-      crc32fast = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".crc32fast."1.3.2" { inherit profileName; }).out;
+      crc32fast = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".crc32fast."1.4.0" { inherit profileName; }).out;
      hex = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hex."0.4.3" { inherit profileName; }).out;
      http = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".http."0.2.11" { inherit profileName; }).out;
      http_body = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".http-body."0.4.6" { inherit profileName; }).out;
@ -705,7 +694,7 @@ in
    dependencies = {
      aws_smithy_types = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".aws-smithy-types."1.1.4" { inherit profileName; }).out;
      bytes = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".bytes."1.5.0" { inherit profileName; }).out;
-      crc32fast = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".crc32fast."1.3.2" { inherit profileName; }).out;
+      crc32fast = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".crc32fast."1.4.0" { inherit profileName; }).out;
    };
  });
@ -1298,11 +1287,11 @@ in
    };
  });
-  "registry+https://github.com/rust-lang/crates.io-index".crc32fast."1.3.2" = overridableMkRustCrate (profileName: rec {
+  "registry+https://github.com/rust-lang/crates.io-index".crc32fast."1.4.0" = overridableMkRustCrate (profileName: rec {
    name = "crc32fast";
-    version = "1.3.2";
+    version = "1.4.0";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
-    src = fetchCratesIo { inherit name version; sha256 = "b540bd8bc810d3885c6ea91e2018302f68baba2129ab3e88f32389ee9370880d"; };
+    src = fetchCratesIo { inherit name version; sha256 = "b3855a8a784b474f333699ef2bbca9db2c4a1f6d9088a90a2d25b1eb53111eaa"; };
    features = builtins.concatLists [
      [ "default" ]
      [ "std" ]
@ -1695,8 +1684,8 @@ in
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "2acce4a10f12dc2fb14a218589d4f1f62ef011b2d0cc4b3cb1bba8e94da14649"; };
    features = builtins.concatLists [
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "alloc")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "alloc")
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "default")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "default")
    ];
  });
@ -1921,9 +1910,9 @@ in
    };
  });
-  "unknown".garage."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/garage");
    features = builtins.concatLists [
@ -1938,6 +1927,8 @@ in
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-prometheus") "opentelemetry-prometheus")
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/prometheus") "prometheus")
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite") "sqlite")
      (lib.optional (rootFeatures' ? "garage/syslog") "syslog")
      (lib.optional (rootFeatures' ? "garage/syslog" || rootFeatures' ? "garage/syslog-tracing") "syslog-tracing")
      (lib.optional (rootFeatures' ? "garage/system-libs") "system-libs")
      (lib.optional (rootFeatures' ? "garage/telemetry-otlp") "telemetry-otlp")
    ];
@ -1949,15 +1940,15 @@ in
      format_table = (rustPackages."unknown".format_table."0.1.1" { inherit profileName; }).out;
      futures = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures."0.3.30" { inherit profileName; }).out;
      futures_util = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures-util."0.3.30" { inherit profileName; }).out;
-      garage_api = (rustPackages."unknown".garage_api."0.10.0" { inherit profileName; }).out;
+      garage_api = (rustPackages."unknown".garage_api."1.0.0" { inherit profileName; }).out;
-      garage_block = (rustPackages."unknown".garage_block."0.10.0" { inherit profileName; }).out;
+      garage_block = (rustPackages."unknown".garage_block."1.0.0" { inherit profileName; }).out;
-      garage_db = (rustPackages."unknown".garage_db."0.10.0" { inherit profileName; }).out;
+      garage_db = (rustPackages."unknown".garage_db."1.0.0" { inherit profileName; }).out;
-      garage_model = (rustPackages."unknown".garage_model."0.10.0" { inherit profileName; }).out;
+      garage_model = (rustPackages."unknown".garage_model."1.0.0" { inherit profileName; }).out;
-      garage_net = (rustPackages."unknown".garage_net."0.10.0" { inherit profileName; }).out;
+      garage_net = (rustPackages."unknown".garage_net."1.0.0" { inherit profileName; }).out;
-      garage_rpc = (rustPackages."unknown".garage_rpc."0.10.0" { inherit profileName; }).out;
+      garage_rpc = (rustPackages."unknown".garage_rpc."1.0.0" { inherit profileName; }).out;
-      garage_table = (rustPackages."unknown".garage_table."0.10.0" { inherit profileName; }).out;
+      garage_table = (rustPackages."unknown".garage_table."1.0.0" { inherit profileName; }).out;
-      garage_util = (rustPackages."unknown".garage_util."0.10.0" { inherit profileName; }).out;
+      garage_util = (rustPackages."unknown".garage_util."1.0.0" { inherit profileName; }).out;
-      garage_web = (rustPackages."unknown".garage_web."0.10.0" { inherit profileName; }).out;
+      garage_web = (rustPackages."unknown".garage_web."1.0.0" { inherit profileName; }).out;
      git_version = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".git-version."0.3.9" { inherit profileName; }).out;
      hex = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hex."0.4.3" { inherit profileName; }).out;
      sodiumoxide = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".kuska-sodiumoxide."0.2.5-0" { inherit profileName; }).out;
@ -1969,7 +1960,9 @@ in
      rand = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".rand."0.8.5" { inherit profileName; }).out;
      serde = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".serde."1.0.196" { inherit profileName; }).out;
      serde_bytes = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".serde_bytes."0.11.14" { inherit profileName; }).out;
      sha1 = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".sha1."0.10.6" { inherit profileName; }).out;
      structopt = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".structopt."0.3.26" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/syslog" || rootFeatures' ? "garage/syslog-tracing" then "syslog_tracing" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".syslog-tracing."0.3.0" { inherit profileName; }).out;
      timeago = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".timeago."0.4.2" { inherit profileName; }).out;
      tokio = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".tokio."1.36.0" { inherit profileName; }).out;
      toml = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".toml."0.8.10" { inherit profileName; }).out;
@ -1995,9 +1988,9 @@ in
    };
  });
-  "unknown".garage_api."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage_api."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage_api";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/api");
    features = builtins.concatLists [
@ -2014,17 +2007,19 @@ in
      base64 = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".base64."0.21.7" { inherit profileName; }).out;
      bytes = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".bytes."1.5.0" { inherit profileName; }).out;
      chrono = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".chrono."0.4.33" { inherit profileName; }).out;
      crc32c = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".crc32c."0.6.4" { inherit profileName; }).out;
      crc32fast = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".crc32fast."1.4.0" { inherit profileName; }).out;
      crypto_common = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".crypto-common."0.1.6" { inherit profileName; }).out;
      err_derive = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".err-derive."0.3.1" { profileName = "__noProfile"; }).out;
      form_urlencoded = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".form_urlencoded."1.2.1" { inherit profileName; }).out;
      futures = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures."0.3.30" { inherit profileName; }).out;
      futures_util = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures-util."0.3.30" { inherit profileName; }).out;
-      garage_block = (rustPackages."unknown".garage_block."0.10.0" { inherit profileName; }).out;
+      garage_block = (rustPackages."unknown".garage_block."1.0.0" { inherit profileName; }).out;
-      garage_model = (rustPackages."unknown".garage_model."0.10.0" { inherit profileName; }).out;
+      garage_model = (rustPackages."unknown".garage_model."1.0.0" { inherit profileName; }).out;
-      garage_net = (rustPackages."unknown".garage_net."0.10.0" { inherit profileName; }).out;
+      garage_net = (rustPackages."unknown".garage_net."1.0.0" { inherit profileName; }).out;
-      garage_rpc = (rustPackages."unknown".garage_rpc."0.10.0" { inherit profileName; }).out;
+      garage_rpc = (rustPackages."unknown".garage_rpc."1.0.0" { inherit profileName; }).out;
-      garage_table = (rustPackages."unknown".garage_table."0.10.0" { inherit profileName; }).out;
+      garage_table = (rustPackages."unknown".garage_table."1.0.0" { inherit profileName; }).out;
-      garage_util = (rustPackages."unknown".garage_util."0.10.0" { inherit profileName; }).out;
+      garage_util = (rustPackages."unknown".garage_util."1.0.0" { inherit profileName; }).out;
      hex = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hex."0.4.3" { inherit profileName; }).out;
      hmac = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hmac."0.12.1" { inherit profileName; }).out;
      http = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".http."1.0.0" { inherit profileName; }).out;
@ -2047,6 +2042,7 @@ in
      serde = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".serde."1.0.196" { inherit profileName; }).out;
      serde_bytes = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".serde_bytes."0.11.14" { inherit profileName; }).out;
      serde_json = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".serde_json."1.0.113" { inherit profileName; }).out;
      sha1 = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".sha1."0.10.6" { inherit profileName; }).out;
      sha2 = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".sha2."0.10.8" { inherit profileName; }).out;
      tokio = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".tokio."1.36.0" { inherit profileName; }).out;
      tokio_stream = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".tokio-stream."0.1.14" { inherit profileName; }).out;
@ -2056,9 +2052,9 @@ in
    };
  });
-  "unknown".garage_block."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage_block."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage_block";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/block");
    features = builtins.concatLists [
@ -2072,11 +2068,11 @@ in
      bytesize = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".bytesize."1.3.0" { inherit profileName; }).out;
      futures = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures."0.3.30" { inherit profileName; }).out;
      futures_util = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures-util."0.3.30" { inherit profileName; }).out;
-      garage_db = (rustPackages."unknown".garage_db."0.10.0" { inherit profileName; }).out;
+      garage_db = (rustPackages."unknown".garage_db."1.0.0" { inherit profileName; }).out;
-      garage_net = (rustPackages."unknown".garage_net."0.10.0" { inherit profileName; }).out;
+      garage_net = (rustPackages."unknown".garage_net."1.0.0" { inherit profileName; }).out;
-      garage_rpc = (rustPackages."unknown".garage_rpc."0.10.0" { inherit profileName; }).out;
+      garage_rpc = (rustPackages."unknown".garage_rpc."1.0.0" { inherit profileName; }).out;
-      garage_table = (rustPackages."unknown".garage_table."0.10.0" { inherit profileName; }).out;
+      garage_table = (rustPackages."unknown".garage_table."1.0.0" { inherit profileName; }).out;
-      garage_util = (rustPackages."unknown".garage_util."0.10.0" { inherit profileName; }).out;
+      garage_util = (rustPackages."unknown".garage_util."1.0.0" { inherit profileName; }).out;
      hex = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hex."0.4.3" { inherit profileName; }).out;
      opentelemetry = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".opentelemetry."0.17.0" { inherit profileName; }).out;
      rand = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".rand."0.8.5" { inherit profileName; }).out;
@ -2089,9 +2085,9 @@ in
    };
  });
-  "unknown".garage_db."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage_db."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage_db";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/db");
    features = builtins.concatLists [
@ -2099,6 +2095,8 @@ in
      (lib.optional (rootFeatures' ? "garage_db/default") "default")
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/lmdb" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/heed" || rootFeatures' ? "garage_db/lmdb" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/lmdb") "heed")
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/lmdb" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/lmdb" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/lmdb") "lmdb")
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "r2d2")
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "r2d2_sqlite")
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "rusqlite")
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "sqlite")
    ];
@ -2106,8 +2104,9 @@ in
      err_derive = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".err-derive."0.3.1" { profileName = "__noProfile"; }).out;
      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/lmdb" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/heed" || rootFeatures' ? "garage_db/lmdb" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/lmdb" then "heed" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".heed."0.11.0" { inherit profileName; }).out;
      hexdump = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hexdump."0.1.1" { inherit profileName; }).out;
-      ouroboros = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".ouroboros."0.18.3" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "r2d2" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".r2d2."0.8.10" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "rusqlite" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".rusqlite."0.30.0" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "r2d2_sqlite" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".r2d2_sqlite."0.24.0" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "rusqlite" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".rusqlite."0.31.0" { inherit profileName; }).out;
      tracing = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".tracing."0.1.40" { inherit profileName; }).out;
    };
    devDependencies = {
@ -2115,9 +2114,9 @@ in
    };
  });
-  "unknown".garage_model."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage_model."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage_model";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/model");
    features = builtins.concatLists [
@ -2135,15 +2134,16 @@ in
      err_derive = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".err-derive."0.3.1" { profileName = "__noProfile"; }).out;
      futures = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures."0.3.30" { inherit profileName; }).out;
      futures_util = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures-util."0.3.30" { inherit profileName; }).out;
-      garage_block = (rustPackages."unknown".garage_block."0.10.0" { inherit profileName; }).out;
+      garage_block = (rustPackages."unknown".garage_block."1.0.0" { inherit profileName; }).out;
-      garage_db = (rustPackages."unknown".garage_db."0.10.0" { inherit profileName; }).out;
+      garage_db = (rustPackages."unknown".garage_db."1.0.0" { inherit profileName; }).out;
-      garage_net = (rustPackages."unknown".garage_net."0.10.0" { inherit profileName; }).out;
+      garage_net = (rustPackages."unknown".garage_net."1.0.0" { inherit profileName; }).out;
-      garage_rpc = (rustPackages."unknown".garage_rpc."0.10.0" { inherit profileName; }).out;
+      garage_rpc = (rustPackages."unknown".garage_rpc."1.0.0" { inherit profileName; }).out;
-      garage_table = (rustPackages."unknown".garage_table."0.10.0" { inherit profileName; }).out;
+      garage_table = (rustPackages."unknown".garage_table."1.0.0" { inherit profileName; }).out;
-      garage_util = (rustPackages."unknown".garage_util."0.10.0" { inherit profileName; }).out;
+      garage_util = (rustPackages."unknown".garage_util."1.0.0" { inherit profileName; }).out;
      hex = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hex."0.4.3" { inherit profileName; }).out;
      http = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".http."1.0.0" { inherit profileName; }).out;
      opentelemetry = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".opentelemetry."0.17.0" { inherit profileName; }).out;
      parse_duration = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".parse_duration."2.1.1" { inherit profileName; }).out;
      rand = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".rand."0.8.5" { inherit profileName; }).out;
      serde = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".serde."1.0.196" { inherit profileName; }).out;
      serde_bytes = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".serde_bytes."0.11.14" { inherit profileName; }).out;
@ -2153,9 +2153,9 @@ in
    };
  });
-  "unknown".garage_net."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage_net."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage_net";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/net");
    features = builtins.concatLists [
@ -2190,9 +2190,9 @@ in
    };
  });
-  "unknown".garage_rpc."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage_rpc."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage_rpc";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/rpc");
    features = builtins.concatLists [
@ -2214,9 +2214,9 @@ in
      format_table = (rustPackages."unknown".format_table."0.1.1" { inherit profileName; }).out;
      futures = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures."0.3.30" { inherit profileName; }).out;
      futures_util = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures-util."0.3.30" { inherit profileName; }).out;
-      garage_db = (rustPackages."unknown".garage_db."0.10.0" { inherit profileName; }).out;
+      garage_db = (rustPackages."unknown".garage_db."1.0.0" { inherit profileName; }).out;
-      garage_net = (rustPackages."unknown".garage_net."0.10.0" { inherit profileName; }).out;
+      garage_net = (rustPackages."unknown".garage_net."1.0.0" { inherit profileName; }).out;
-      garage_util = (rustPackages."unknown".garage_util."0.10.0" { inherit profileName; }).out;
+      garage_util = (rustPackages."unknown".garage_util."1.0.0" { inherit profileName; }).out;
      gethostname = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".gethostname."0.4.3" { inherit profileName; }).out;
      hex = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hex."0.4.3" { inherit profileName; }).out;
      itertools = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".itertools."0.12.1" { inherit profileName; }).out;
@ -2238,9 +2238,9 @@ in
    };
  });
-  "unknown".garage_table."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage_table."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage_table";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/table");
    dependencies = {
@ -2249,9 +2249,9 @@ in
      bytes = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".bytes."1.5.0" { inherit profileName; }).out;
      futures = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures."0.3.30" { inherit profileName; }).out;
      futures_util = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures-util."0.3.30" { inherit profileName; }).out;
-      garage_db = (rustPackages."unknown".garage_db."0.10.0" { inherit profileName; }).out;
+      garage_db = (rustPackages."unknown".garage_db."1.0.0" { inherit profileName; }).out;
-      garage_rpc = (rustPackages."unknown".garage_rpc."0.10.0" { inherit profileName; }).out;
+      garage_rpc = (rustPackages."unknown".garage_rpc."1.0.0" { inherit profileName; }).out;
-      garage_util = (rustPackages."unknown".garage_util."0.10.0" { inherit profileName; }).out;
+      garage_util = (rustPackages."unknown".garage_util."1.0.0" { inherit profileName; }).out;
      hex = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hex."0.4.3" { inherit profileName; }).out;
      hexdump = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hexdump."0.1.1" { inherit profileName; }).out;
      opentelemetry = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".opentelemetry."0.17.0" { inherit profileName; }).out;
@ -2263,9 +2263,9 @@ in
    };
  });
-  "unknown".garage_util."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage_util."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage_util";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/util");
    features = builtins.concatLists [
@ -2281,8 +2281,8 @@ in
      digest = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".digest."0.10.7" { inherit profileName; }).out;
      err_derive = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".err-derive."0.3.1" { profileName = "__noProfile"; }).out;
      futures = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures."0.3.30" { inherit profileName; }).out;
-      garage_db = (rustPackages."unknown".garage_db."0.10.0" { inherit profileName; }).out;
+      garage_db = (rustPackages."unknown".garage_db."1.0.0" { inherit profileName; }).out;
-      garage_net = (rustPackages."unknown".garage_net."0.10.0" { inherit profileName; }).out;
+      garage_net = (rustPackages."unknown".garage_net."1.0.0" { inherit profileName; }).out;
      hex = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hex."0.4.3" { inherit profileName; }).out;
      hexdump = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hexdump."0.1.1" { inherit profileName; }).out;
      http = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".http."1.0.0" { inherit profileName; }).out;
@ -2307,18 +2307,18 @@ in
    };
  });
-  "unknown".garage_web."0.10.0" = overridableMkRustCrate (profileName: rec {
+  "unknown".garage_web."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "garage_web";
-    version = "0.10.0";
+    version = "1.0.0";
    registry = "unknown";
    src = fetchCrateLocal (workspaceSrc + "/src/web");
    dependencies = {
      err_derive = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".err-derive."0.3.1" { profileName = "__noProfile"; }).out;
      futures = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".futures."0.3.30" { inherit profileName; }).out;
-      garage_api = (rustPackages."unknown".garage_api."0.10.0" { inherit profileName; }).out;
+      garage_api = (rustPackages."unknown".garage_api."1.0.0" { inherit profileName; }).out;
-      garage_model = (rustPackages."unknown".garage_model."0.10.0" { inherit profileName; }).out;
+      garage_model = (rustPackages."unknown".garage_model."1.0.0" { inherit profileName; }).out;
-      garage_table = (rustPackages."unknown".garage_table."0.10.0" { inherit profileName; }).out;
+      garage_table = (rustPackages."unknown".garage_table."1.0.0" { inherit profileName; }).out;
-      garage_util = (rustPackages."unknown".garage_util."0.10.0" { inherit profileName; }).out;
+      garage_util = (rustPackages."unknown".garage_util."1.0.0" { inherit profileName; }).out;
      http = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".http."1.0.0" { inherit profileName; }).out;
      http_body_util = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".http-body-util."0.1.0" { inherit profileName; }).out;
      hyper = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hyper."1.1.0" { inherit profileName; }).out;
@ -2484,25 +2484,25 @@ in
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "290f1a1d9242c78d09ce40a5e87e7554ee637af1351968159f4952f028f75604"; };
    features = builtins.concatLists [
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "ahash")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "ahash")
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "allocator-api2")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "allocator-api2")
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "default")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "default")
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "inline-more")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "inline-more")
      [ "raw" ]
    ];
    dependencies = {
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "ahash" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".ahash."0.8.7" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "ahash" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".ahash."0.8.7" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "allocator_api2" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".allocator-api2."0.2.16" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "allocator_api2" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".allocator-api2."0.2.16" { inherit profileName; }).out;
    };
  });
-  "registry+https://github.com/rust-lang/crates.io-index".hashlink."0.8.4" = overridableMkRustCrate (profileName: rec {
+  "registry+https://github.com/rust-lang/crates.io-index".hashlink."0.9.0" = overridableMkRustCrate (profileName: rec {
    name = "hashlink";
-    version = "0.8.4";
+    version = "0.9.0";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
-    src = fetchCratesIo { inherit name version; sha256 = "e8094feaf31ff591f651a2664fb9cfd92bba7a60ce3197265e9482ebe753c8f7"; };
+    src = fetchCratesIo { inherit name version; sha256 = "692eaaf7f7607518dd3cef090f1474b61edc5301d8012f09579920df68b725ee"; };
    dependencies = {
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "hashbrown" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hashbrown."0.14.3" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "hashbrown" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hashbrown."0.14.3" { inherit profileName; }).out;
    };
  });
@ -2522,7 +2522,7 @@ in
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8"; };
    features = builtins.concatLists [
-      [ "default" ]
+      (lib.optional (rootFeatures' ? "k2v-client/clap" || rootFeatures' ? "k2v-client/cli") "default")
    ];
  });
@ -3426,24 +3426,24 @@ in
    };
  });
-  "registry+https://github.com/rust-lang/crates.io-index".libsqlite3-sys."0.27.0" = overridableMkRustCrate (profileName: rec {
+  "registry+https://github.com/rust-lang/crates.io-index".libsqlite3-sys."0.28.0" = overridableMkRustCrate (profileName: rec {
    name = "libsqlite3-sys";
-    version = "0.27.0";
+    version = "0.28.0";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
-    src = fetchCratesIo { inherit name version; sha256 = "cf4e226dcd58b4be396f7bd3c20da8fdee2911400705297ba7d2d7cc2c30f716"; };
+    src = fetchCratesIo { inherit name version; sha256 = "0c10584274047cb335c23d3e61bcef8e323adae7c5c8c760540f73610177fc3f"; };
    features = builtins.concatLists [
      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage_db/bundled-libs") "bundled")
      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage_db/bundled-libs") "bundled_bindings")
      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage_db/bundled-libs") "cc")
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "default")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "default")
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "min_sqlite_version_3_14_0")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "min_sqlite_version_3_14_0")
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "pkg-config")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "pkg-config")
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "vcpkg")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "vcpkg")
    ];
    buildDependencies = {
      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage_db/bundled-libs" then "cc" else null } = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".cc."1.0.83" { profileName = "__noProfile"; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "pkg_config" else null } = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".pkg-config."0.3.29" { profileName = "__noProfile"; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "pkg_config" else null } = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".pkg-config."0.3.29" { profileName = "__noProfile"; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "vcpkg" else null } = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".vcpkg."0.2.15" { profileName = "__noProfile"; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "vcpkg" else null } = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".vcpkg."0.2.15" { profileName = "__noProfile"; }).out;
    };
  });
@ -3970,40 +3970,6 @@ in
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".ouroboros."0.18.3" = overridableMkRustCrate (profileName: rec {
    name = "ouroboros";
    version = "0.18.3";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "97b7be5a8a3462b752f4be3ff2b2bf2f7f1d00834902e46be2a4d68b87b0573c"; };
    features = builtins.concatLists [
      [ "default" ]
      [ "std" ]
    ];
    dependencies = {
      aliasable = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".aliasable."0.1.3" { inherit profileName; }).out;
      ouroboros_macro = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".ouroboros_macro."0.18.3" { profileName = "__noProfile"; }).out;
      static_assertions = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".static_assertions."1.1.0" { inherit profileName; }).out;
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".ouroboros_macro."0.18.3" = overridableMkRustCrate (profileName: rec {
    name = "ouroboros_macro";
    version = "0.18.3";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "b645dcde5f119c2c454a92d0dfa271a2a3b205da92e4292a68ead4bdbfde1f33"; };
    features = builtins.concatLists [
      [ "std" ]
    ];
    dependencies = {
      heck = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".heck."0.4.1" { inherit profileName; }).out;
      itertools = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".itertools."0.12.1" { inherit profileName; }).out;
      proc_macro2 = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".proc-macro2."1.0.78" { inherit profileName; }).out;
      proc_macro2_diagnostics = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".proc-macro2-diagnostics."0.10.1" { inherit profileName; }).out;
      quote = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".quote."1.0.35" { inherit profileName; }).out;
      syn = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".syn."2.0.48" { inherit profileName; }).out;
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".outref."0.5.1" = overridableMkRustCrate (profileName: rec {
    name = "outref";
    version = "0.5.1";
@ -4073,11 +4039,11 @@ in
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "3742b2c103b9f06bc9fff0a37ff4912935851bee6d36f3c02bcc755bcfec228f"; };
    features = builtins.concatLists [
-      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "default")
+      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "default")
    ];
    dependencies = {
-      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "lock_api" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".lock_api."0.4.11" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "lock_api" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".lock_api."0.4.11" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "parking_lot_core" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".parking_lot_core."0.9.9" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "parking_lot_core" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".parking_lot_core."0.9.9" { inherit profileName; }).out;
    };
  });
@ -4102,11 +4068,11 @@ in
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "4c42a9226546d68acdd9c0a280d17ce19bfe27a46bf68784e4066115788d008e"; };
    dependencies = {
-      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "cfg_if" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".cfg-if."1.0.0" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "cfg_if" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".cfg-if."1.0.0" { inherit profileName; }).out;
-      ${ if (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") && hostPlatform.isUnix then "libc" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".libc."0.2.153" { inherit profileName; }).out;
+      ${ if (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") && hostPlatform.isUnix then "libc" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".libc."0.2.153" { inherit profileName; }).out;
-      ${ if (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") && hostPlatform.parsed.kernel.name == "redox" then "syscall" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".redox_syscall."0.4.1" { inherit profileName; }).out;
+      ${ if (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") && hostPlatform.parsed.kernel.name == "redox" then "syscall" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".redox_syscall."0.4.1" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "smallvec" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".smallvec."1.13.1" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "smallvec" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".smallvec."1.13.1" { inherit profileName; }).out;
-      ${ if (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") && hostPlatform.isWindows then "windows_targets" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".windows-targets."0.48.5" { inherit profileName; }).out;
+      ${ if (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") && hostPlatform.isWindows then "windows_targets" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".windows-targets."0.48.5" { inherit profileName; }).out;
    };
  });
@ -4440,27 +4406,6 @@ in
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".proc-macro2-diagnostics."0.10.1" = overridableMkRustCrate (profileName: rec {
    name = "proc-macro2-diagnostics";
    version = "0.10.1";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "af066a9c399a26e020ada66a034357a868728e72cd426f3adcd35f80d88d88c8"; };
    features = builtins.concatLists [
      [ "colors" ]
      [ "default" ]
      [ "yansi" ]
    ];
    dependencies = {
      proc_macro2 = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".proc-macro2."1.0.78" { inherit profileName; }).out;
      quote = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".quote."1.0.35" { inherit profileName; }).out;
      syn = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".syn."2.0.48" { inherit profileName; }).out;
      yansi = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".yansi."1.0.0" { inherit profileName; }).out;
    };
    buildDependencies = {
      version_check = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".version_check."0.9.4" { profileName = "__noProfile"; }).out;
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".prometheus."0.13.3" = overridableMkRustCrate (profileName: rec {
    name = "prometheus";
    version = "0.13.3";
@ -4582,6 +4527,30 @@ in
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".r2d2."0.8.10" = overridableMkRustCrate (profileName: rec {
    name = "r2d2";
    version = "0.8.10";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "51de85fb3fb6524929c8a2eb85e6b6d363de4e8c48f9e2c2eac4944abc181c93"; };
    dependencies = {
      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "log" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".log."0.4.20" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "parking_lot" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".parking_lot."0.12.1" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "scheduled_thread_pool" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".scheduled-thread-pool."0.2.7" { inherit profileName; }).out;
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".r2d2_sqlite."0.24.0" = overridableMkRustCrate (profileName: rec {
    name = "r2d2_sqlite";
    version = "0.24.0";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "6a982edf65c129796dba72f8775b292ef482b40d035e827a9825b3bc07ccc5f2"; };
    dependencies = {
      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "r2d2" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".r2d2."0.8.10" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "rusqlite" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".rusqlite."0.31.0" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "uuid" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".uuid."1.4.1" { inherit profileName; }).out;
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".rand."0.8.5" = overridableMkRustCrate (profileName: rec {
    name = "rand";
    version = "0.8.5";
@ -4649,7 +4618,7 @@ in
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "4722d768eff46b75989dd134e5c353f0d6296e5aaa3132e776cbdb56be7731aa"; };
    dependencies = {
-      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "bitflags" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".bitflags."1.3.2" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/metrics" || rootFeatures' ? "garage/opentelemetry-otlp" || rootFeatures' ? "garage/opentelemetry-prometheus" || rootFeatures' ? "garage/prometheus" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage/telemetry-otlp" || rootFeatures' ? "garage_api/metrics" || rootFeatures' ? "garage_api/opentelemetry-prometheus" || rootFeatures' ? "garage_api/prometheus" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "bitflags" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".bitflags."1.3.2" { inherit profileName; }).out;
    };
  });
@ -4910,22 +4879,23 @@ in
    ];
  });
-  "registry+https://github.com/rust-lang/crates.io-index".rusqlite."0.30.0" = overridableMkRustCrate (profileName: rec {
+  "registry+https://github.com/rust-lang/crates.io-index".rusqlite."0.31.0" = overridableMkRustCrate (profileName: rec {
    name = "rusqlite";
-    version = "0.30.0";
+    version = "0.31.0";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
-    src = fetchCratesIo { inherit name version; sha256 = "a78046161564f5e7cd9008aff3b2990b3850dc8e0349119b98e8f251e099f24d"; };
+    src = fetchCratesIo { inherit name version; sha256 = "b838eba278d213a8beaf485bd313fd580ca4505a00d5871caeb1457c55322cae"; };
    features = builtins.concatLists [
      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "backup")
      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage_db/bundled-libs") "bundled")
      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage_db/bundled-libs") "modern_sqlite")
    ];
    dependencies = {
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "bitflags" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".bitflags."2.4.2" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "bitflags" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".bitflags."2.4.2" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "fallible_iterator" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".fallible-iterator."0.3.0" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "fallible_iterator" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".fallible-iterator."0.3.0" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "fallible_streaming_iterator" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".fallible-streaming-iterator."0.1.9" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "fallible_streaming_iterator" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".fallible-streaming-iterator."0.1.9" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "hashlink" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hashlink."0.8.4" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "hashlink" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".hashlink."0.9.0" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "libsqlite3_sys" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".libsqlite3-sys."0.27.0" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "libsqlite3_sys" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".libsqlite3-sys."0.28.0" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "smallvec" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".smallvec."1.13.1" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "smallvec" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".smallvec."1.13.1" { inherit profileName; }).out;
    };
  });
@ -5139,6 +5109,16 @@ in
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".scheduled-thread-pool."0.2.7" = overridableMkRustCrate (profileName: rec {
    name = "scheduled-thread-pool";
    version = "0.2.7";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "3cbc66816425a074528352f5789333ecff06ca41b36b0b0efdfbb29edc391a19"; };
    dependencies = {
      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "parking_lot" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".parking_lot."0.12.1" { inherit profileName; }).out;
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".schemars."0.8.16" = overridableMkRustCrate (profileName: rec {
    name = "schemars";
    version = "0.8.16";
@ -5533,13 +5513,6 @@ in
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".static_assertions."1.1.0" = overridableMkRustCrate (profileName: rec {
    name = "static_assertions";
    version = "1.1.0";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"; };
  });
  "registry+https://github.com/rust-lang/crates.io-index".static_init."1.0.3" = overridableMkRustCrate (profileName: rec {
    name = "static_init";
    version = "1.0.3";
@ -5705,6 +5678,18 @@ in
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".syslog-tracing."0.3.0" = overridableMkRustCrate (profileName: rec {
    name = "syslog-tracing";
    version = "0.3.0";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "340b1540dcdb6b066bc2966e7974f977ab1a38f21b2be189014ffb0cc2405768"; };
    dependencies = {
      ${ if rootFeatures' ? "garage/syslog" || rootFeatures' ? "garage/syslog-tracing" then "libc" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".libc."0.2.153" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/syslog" || rootFeatures' ? "garage/syslog-tracing" then "tracing_core" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".tracing-core."0.1.32" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/syslog" || rootFeatures' ? "garage/syslog-tracing" then "tracing_subscriber" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".tracing-subscriber."0.3.18" { inherit profileName; }).out;
    };
  });
  "registry+https://github.com/rust-lang/crates.io-index".system-configuration."0.5.1" = overridableMkRustCrate (profileName: rec {
    name = "system-configuration";
    version = "0.5.1";
@ -6511,13 +6496,16 @@ in
    src = fetchCratesIo { inherit name version; sha256 = "79daa5ed5740825c40b389c5e50312b9c86df53fccd33f281df655642b43869d"; };
    features = builtins.concatLists [
      [ "default" ]
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "fast-rng")
      [ "getrandom" ]
      (lib.optional (rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite") "rand")
      [ "rng" ]
      [ "std" ]
      [ "v4" ]
    ];
    dependencies = {
      getrandom = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".getrandom."0.2.12" { inherit profileName; }).out;
      ${ if rootFeatures' ? "garage/default" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" then "rand" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".rand."0.8.5" { inherit profileName; }).out;
    };
  });
@ -7031,25 +7019,13 @@ in
    ];
  });
  "registry+https://github.com/rust-lang/crates.io-index".yansi."1.0.0" = overridableMkRustCrate (profileName: rec {
    name = "yansi";
    version = "1.0.0";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "6c2861d76f58ec8fc95708b9b1e417f7b12fd72ad33c01fa6886707092dea0d3"; };
    features = builtins.concatLists [
      [ "alloc" ]
      [ "default" ]
      [ "std" ]
    ];
  });
  "registry+https://github.com/rust-lang/crates.io-index".zerocopy."0.7.32" = overridableMkRustCrate (profileName: rec {
    name = "zerocopy";
    version = "0.7.32";
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "74d4d3961e53fa4c9a25a8637fc2bfaf2595b3d3ae34875568a5cf64787716be"; };
    features = builtins.concatLists [
-      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "simd")
+      (lib.optional (rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery") "simd")
    ];
    dependencies = {
      ${ if false then "zerocopy_derive" else null } = (buildRustPackages."registry+https://github.com/rust-lang/crates.io-index".zerocopy-derive."0.7.32" { profileName = "__noProfile"; }).out;
@ -7062,9 +7038,9 @@ in
    registry = "registry+https://github.com/rust-lang/crates.io-index";
    src = fetchCratesIo { inherit name version; sha256 = "9ce1b18ccd8e73a9321186f97e46f9f04b778851177567b1975109d26a08d2a6"; };
    dependencies = {
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "proc_macro2" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".proc-macro2."1.0.78" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "proc_macro2" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".proc-macro2."1.0.78" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "quote" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".quote."1.0.35" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "quote" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".quote."1.0.35" { inherit profileName; }).out;
-      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "syn" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".syn."2.0.48" { inherit profileName; }).out;
+      ${ if rootFeatures' ? "garage/bundled-libs" || rootFeatures' ? "garage/default" || rootFeatures' ? "garage/kubernetes-discovery" || rootFeatures' ? "garage/sqlite" || rootFeatures' ? "garage_db/bundled-libs" || rootFeatures' ? "garage_db/default" || rootFeatures' ? "garage_db/r2d2_sqlite" || rootFeatures' ? "garage_db/rusqlite" || rootFeatures' ? "garage_db/sqlite" || rootFeatures' ? "garage_model/default" || rootFeatures' ? "garage_model/sqlite" || rootFeatures' ? "garage_rpc/kube" || rootFeatures' ? "garage_rpc/kubernetes-discovery" then "syn" else null } = (rustPackages."registry+https://github.com/rust-lang/crates.io-index".syn."2.0.48" { inherit profileName; }).out;
    };
  });
--- a/Cargo.toml
+++ b/Cargo.toml
@ -21,15 +21,15 @@ default-members = ["src/garage"]
 # Internal Garage crates
 format_table = { version = "0.1.1", path = "src/format-table" }
-garage_api = { version = "0.10.0", path = "src/api" }
+garage_api = { version = "1.0.0", path = "src/api" }
-garage_block = { version = "0.10.0", path = "src/block" }
+garage_block = { version = "1.0.0", path = "src/block" }
-garage_db = { version = "0.10.0", path = "src/db", default-features = false }
+garage_db = { version = "1.0.0", path = "src/db", default-features = false }
-garage_model = { version = "0.10.0", path = "src/model", default-features = false }
+garage_model = { version = "1.0.0", path = "src/model", default-features = false }
-garage_net = { version = "0.10.0", path = "src/net" }
+garage_net = { version = "1.0.0", path = "src/net" }
-garage_rpc = { version = "0.10.0", path = "src/rpc" }
+garage_rpc = { version = "1.0.0", path = "src/rpc" }
-garage_table = { version = "0.10.0", path = "src/table" }
+garage_table = { version = "1.0.0", path = "src/table" }
-garage_util = { version = "0.10.0", path = "src/util" }
+garage_util = { version = "1.0.0", path = "src/util" }
-garage_web = { version = "0.10.0", path = "src/web" }
+garage_web = { version = "1.0.0", path = "src/web" }
 k2v-client = { version = "0.0.4", path = "src/k2v-client" }
 # External crates from crates.io
@ -43,6 +43,8 @@ bytes = "1.0"
 bytesize = "1.1"
 cfg-if = "1.0"
 chrono = "0.4"
 crc32fast = "1.4"
 crc32c = "0.6"
 crypto-common = "0.1"
 digest = "0.10"
 err-derive = "0.3"
@ -58,11 +60,11 @@ md-5 = "0.10"
 mktemp = "0.5"
 nix = { version = "0.27", default-features = false, features = ["fs"] }
 nom = "7.1"
 ouroboros = "0.18"
 parse_duration = "2.1"
 pin-project = "1.0.12"
 pnet_datalink = "0.34"
 rand = "0.8"
 sha1 = "0.10"
 sha2 = "0.10"
 timeago = { version = "0.4", default-features = false }
 xxhash-rust = { version = "0.8", default-features = false, features = ["xxh3"] }
@ -74,11 +76,14 @@ kuska-handshake = { version = "0.2.0", features = ["default", "async_std"] }
 clap = { version = "4.1", features = ["derive", "env"] }
 pretty_env_logger = "0.5"
 structopt = { version = "0.3", default-features = false }
 syslog-tracing = "0.3"
 tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }
 heed = { version = "0.11", default-features = false, features = ["lmdb"] }
-rusqlite = "0.30.0"
+rusqlite = "0.31.0"
 r2d2 = "0.8"
 r2d2_sqlite = "0.24"
 async-compression = { version = "0.4", features = ["tokio", "zstd"] }
 zstd = { version = "0.13", default-features = false }
--- a/doc/book/connect/cli.md
+++ b/doc/book/connect/cli.md
@ -259,7 +259,7 @@ duck --delete garage:/my-files/an-object.txt
 ## WinSCP (libs3) {#winscp}
-*You can find instructions on how to use the GUI in french [in our wiki](https://wiki.deuxfleurs.fr/fr/Guide/Garage/WinSCP).*
+*You can find instructions on how to use the GUI in french [in our wiki](https://guide.deuxfleurs.fr/prise_en_main/winscp/).*
 How to use `winscp.com`, the CLI interface of WinSCP:
--- a/doc/book/cookbook/encryption.md
+++ b/doc/book/cookbook/encryption.md
@ -53,20 +53,43 @@ and that's also why your nodes have super long identifiers.
 Adding TLS support built into Garage is not currently planned.
-## Garage stores data in plain text on the filesystem
+## Garage stores data in plain text on the filesystem or encrypted using customer keys (SSE-C)
-Garage does not handle data encryption at rest by itself, and instead delegates
+For standard S3 API requests, Garage does not encrypt data at rest by itself.
-to the user to add encryption, either at the storage layer (LUKS, etc) or on
+For the most generic at rest encryption of data, we recommend setting up your
-the client side (or both). There are no current plans to add data encryption
+storage partitions on encrypted LUKS devices.
 directly in Garage.
-Implementing data encryption directly in Garage might make things simpler for
+If you are developping your own client software that makes use of S3 storage,
-end users, but also raises many more questions, especially around key
+we recommend implementing data encryption directly on the client side and never
-management: for encryption of data, where could Garage get the encryption keys
+transmitting plaintext data to Garage. This makes it easy to use an external
-from ? If we encrypt data but keep the keys in a plaintext file next to them,
+untrusted storage provider if necessary.
-it's useless. We probably don't want to have to manage secrets in garage as it
+
-would be very hard to do in a secure way. Maybe integrate with an external
+Garage does support [SSE-C
-system such as Hashicorp Vault?
+encryption](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html),
 an encryption mode of Amazon S3 where data is encrypted at rest using
 encryption keys given by the client.  The encryption keys are passed to the
 server in a header in each request, to encrypt or decrypt data at the moment of
 reading or writing. The server discards the key as soon as it has finished
 using it for the request.  This mode allows the data to be encrypted at rest by
 Garage itself, but it requires support in the client software. It is also not
 adapted to a model where the server is not trusted or assumed to be
 compromised, as the server can easily know the encryption keys.  Note however
 that when using SSE-C encryption, the only Garage node that knows the
 encryption key passed in a given request is the node to which the request is
 directed (which can be a gateway node), so it is easy to have untrusted nodes
 in the cluster as long as S3 API requests containing SSE-C encryption keys are
 not directed to them.
 Implementing automatic data encryption directly in Garage without client-side
 management of keys (something like
 [SSE-S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingServerSideEncryption.html))
 could make things simpler for end users that don't want to setup LUKS, but also
 raises many more questions, especially around key management: for encryption of
 data, where could Garage get the encryption keys from? If we encrypt data but
 keep the keys in a plaintext file next to them, it's useless. We probably don't
 want to have to manage secrets in Garage as it would be very hard to do in a
 secure way. At the time of speaking, there are no plans to implement this in
 Garage.
 # Adding data encryption using external tools
--- a/doc/book/cookbook/from-source.md
+++ b/doc/book/cookbook/from-source.md
@ -90,5 +90,6 @@ The following feature flags are available in v0.8.0:
 | `kubernetes-discovery` | optional | Enable automatic registration and discovery<br>of cluster nodes through the Kubernetes API |
 | `metrics` | *by default* | Enable collection of metrics in Prometheus format on the admin API |
 | `telemetry-otlp` | optional | Enable collection of execution traces using OpenTelemetry |
 | `syslog` | optional | Enable logging to Syslog |
 | `lmdb` | *by default* | Enable using LMDB to store Garage's metadata |
-| `sqlite` | optional | Enable using Sqlite3 to store Garage's metadata |
+| `sqlite` | *by default* | Enable using Sqlite3 to store Garage's metadata |
--- a/doc/book/cookbook/real-world.md
+++ b/doc/book/cookbook/real-world.md
@ -27,7 +27,7 @@ To run a real-world deployment, make sure the following conditions are met:
  [Yggdrasil](https://yggdrasil-network.github.io/) are approaches to consider
  in addition to building out your own VPN tunneling.
- This guide will assume you are using Docker containers to deploy Garage on each node. 
+- This guide will assume you are using Docker containers to deploy Garage on each node.
  Garage can also be run independently, for instance as a [Systemd service](@/documentation/cookbook/systemd.md).
  You can also use an orchestrator such as Nomad or Kubernetes to automatically manage
  Docker containers on a fleet of nodes.
@ -53,9 +53,9 @@ to store 2 TB of data in total.
 ### Best practices
- If you have fast dedicated networking between all your nodes, and are planing to store
+- If you have reasonably fast networking between all your nodes, and are planing to store
-  very large files, bump the `block_size` configuration parameter to 10 MB
+  mostly large files, bump the `block_size` configuration parameter to 10 MB
-  (`block_size = 10485760`).
+  (`block_size = "10M"`).
 - Garage stores its files in two locations: it uses a metadata directory to store frequently-accessed
  small metadata items, and a data directory to store data blocks of uploaded objects.
@ -68,30 +68,42 @@ to store 2 TB of data in total.
  EXT4 is not recommended as it has more strict limitations on the number of inodes,
  which might cause issues with Garage when large numbers of objects are stored.
 - If you only have an HDD and no SSD, it's fine to put your metadata alongside the data
  on the same drive. Having lots of RAM for your kernel to cache the metadata will
  help a lot with performance.  The default LMDB database engine is the most tested
  and has good performance.
 - For the metadata storage, Garage does not do checksumming and integrity
  verification on its own. If you are afraid of bitrot/data corruption,
  put your metadata directory on a ZFS or BTRFS partition. Otherwise, just use regular
  EXT4 or XFS.
 - Servers with multiple HDDs are supported natively by Garage without resorting
  to RAID, see [our dedicated documentation page](@/documentation/operations/multi-hdd.md).
 - For the metadata storage, Garage does not do checksumming and integrity
  verification on its own, so it is better to use a robust filesystem such as
  BTRFS or ZFS. Users have reported that when using the LMDB database engine
  (the default), database files have a tendency of becoming corrupted after an
  unclean shutdown (e.g. a power outage), so you should take regular snapshots
  to be able to recover from such a situation.  This can be done using Garage's
  built-in automatic snapshotting (since v0.9.4), or by using filesystem level
  snapshots. If you cannot do so, you might want to switch to Sqlite which is
  more robust.
 - LMDB is the fastest and most tested database engine, but it has the following
  weaknesses: 1/ data files are not architecture-independent, you cannot simply
  move a Garage metadata directory between nodes running different architectures,
  and 2/ LMDB is not suited for 32-bit platforms. Sqlite is a viable alternative
  if any of these are of concern.
 - If you only have an HDD and no SSD, it's fine to put your metadata alongside
  the data on the same drive, but then consider your filesystem choice wisely
  (see above). Having lots of RAM for your kernel to cache the metadata will
  help a lot with performance.  The default LMDB database engine is the most
  tested and has good performance.
 ## Get a Docker image
 Our docker image is currently named `dxflrs/garage` and is stored on the [Docker Hub](https://hub.docker.com/r/dxflrs/garage/tags?page=1&ordering=last_updated).
-We encourage you to use a fixed tag (eg. `v0.9.3`) and not the `latest` tag.
+We encourage you to use a fixed tag (eg. `v1.0.0`) and not the `latest` tag.
-For this example, we will use the latest published version at the time of the writing which is `v0.9.3` but it's up to you
+For this example, we will use the latest published version at the time of the writing which is `v1.0.0` but it's up to you
 to check [the most recent versions on the Docker Hub](https://hub.docker.com/r/dxflrs/garage/tags?page=1&ordering=last_updated).
 For example:
 ```
-sudo docker pull dxflrs/garage:v0.9.3
+sudo docker pull dxflrs/garage:v1.0.0
 ```
 ## Deploying and configuring Garage
@ -114,6 +126,7 @@ A valid `/etc/garage.toml` for our cluster would look as follows:
 metadata_dir = "/var/lib/garage/meta"
 data_dir = "/var/lib/garage/data"
 db_engine = "lmdb"
 metadata_auto_snapshot_interval = "6h"
 replication_factor = 3
@ -156,7 +169,7 @@ docker run \
  -v /etc/garage.toml:/etc/garage.toml \
  -v /var/lib/garage/meta:/var/lib/garage/meta \
  -v /var/lib/garage/data:/var/lib/garage/data \
-  dxflrs/garage:v0.9.3
+  dxflrs/garage:v1.0.0
 ```
 With this command line, Garage should be started automatically at each boot.
@ -170,7 +183,7 @@ If you want to use `docker-compose`, you may use the following `docker-compose.y
 version: "3"
 services:
  garage:
-    image: dxflrs/garage:v0.9.3
+    image: dxflrs/garage:v1.0.0
    network_mode: "host"
    restart: unless-stopped
    volumes:
@ -186,7 +199,7 @@ upgrades.  With the containerized setup proposed here, the upgrade process
 will require stopping and removing the existing container, and re-creating it
 with the upgraded version.
-## Controling the daemon
+## Controlling the daemon
 The `garage` binary has two purposes:
  - it acts as a daemon when launched with `garage server`
@ -244,7 +257,7 @@ You can then instruct nodes to connect to one another as follows:
 Venus$ garage node connect 563e1ac825ee3323aa441e72c26d1030d6d4414aeb3dd25287c531e7fc2bc95d@[fc00:1::1]:3901
 ```
-You don't nead to instruct all node to connect to all other nodes:
+You don't need to instruct all node to connect to all other nodes:
 nodes will discover one another transitively.
 Now if your run `garage status` on any node, you should have an output that looks as follows:
@ -327,8 +340,8 @@ Given the information above, we will configure our cluster as follow:
 ```bash
 garage layout assign 563e -z par1 -c 1T -t mercury
 garage layout assign 86f0 -z par1 -c 2T -t venus
-garage layout assign 6814 -z lon1 -c 2T -t earth 
+garage layout assign 6814 -z lon1 -c 2T -t earth
-garage layout assign 212f -z bru1 -c 1.5T -t mars 
+garage layout assign 212f -z bru1 -c 1.5T -t mars
 ```
 At this point, the changes in the cluster layout have not yet been applied.
--- a/doc/book/operations/durability-repairs.md
+++ b/doc/book/operations/durability-repairs.md
@ -19,7 +19,7 @@ connecting to. To run on all nodes, add the `-a` flag as follows:
 # Data block operations
-## Data store scrub
+## Data store scrub {#scrub}
 Scrubbing the data store means examining each individual data block to check that
 their content is correct, by verifying their hash. Any block found to be corrupted
@ -104,6 +104,24 @@ operation will also move out all data from locations marked as read-only.
 # Metadata operations
 ## Metadata snapshotting
 It is good practice to setup automatic snapshotting of your metadata database
 file, to recover from situations where it becomes corrupted on disk. This can
 be done at the filesystem level if you are using ZFS or BTRFS.
 Since Garage v0.9.4, Garage is able to take snapshots of the metadata database
 itself. This basically amounts to copying the database file, except that it can
 be run live while Garage is running without the risk of corruption or
 inconsistencies.  This can be setup to run automatically on a schedule using
 [`metadata_auto_snapshot_interval`](@/documentation/reference-manual/configuration.md#metadata_auto_snapshot_interval).
 A snapshot can also be triggered manually using the `garage meta snapshot`
 command. Note that taking a snapshot using this method is very intensive as it
 requires making a full copy of the database file, so you might prefer using
 filesystem-level snapshots if possible. To recover a corrupted node from such a
 snapshot, read the instructions
 [here](@/documentation/operations/recovering.md#corrupted_meta).
 ## Metadata table resync
 Garage automatically resyncs all entries stored in the metadata tables every hour,
@ -123,4 +141,7 @@ blocks may still be held by Garage. If you suspect that such corruption has occu
 in your cluster, you can run one of the following repair procedures:
 - `garage repair versions`: checks that all versions belong to a non-deleted object, and purges any orphan version
- `garage repair block_refs`: checks that all block references belong to a non-deleted object version, and purges any orphan block reference (this will then allow the blocks to be garbage-collected)
+
 - `garage repair block-refs`: checks that all block references belong to a non-deleted object version, and purges any orphan block reference (this will then allow the blocks to be garbage-collected)
 - `garage repair block-rc`: checks that the reference counters for blocks are in sync with the actual number of non-deleted entries in the block reference table
--- a/doc/book/operations/recovering.md
+++ b/doc/book/operations/recovering.md
@ -108,3 +108,57 @@ garage layout apply   # once satisfied, apply the changes
 Garage will then start synchronizing all required data on the new node.
 This process can be monitored using the `garage stats -a` command.
 ## Replacement scenario 3: corrupted metadata {#corrupted_meta}
 In some cases, your metadata DB file might become corrupted, for instance if
 your node suffered a power outage and did not shut down properly. In this case,
 you can recover without having to change the node ID and rebuilding a cluster
 layout. This means that data blocks will not need to be shuffled around, you
 must simply find a way to repair the metadata file. The best way is generally
 to discard the corrupted file and recover it from another source.
 First of all, start by locating the database file in your metadata directory,
 which [depends on your `db_engine`
 choice](@/documentation/reference-manual/configuration.md#db_engine).  Then,
 your recovery options are as follows:
 - **Option 1: resyncing from other nodes.** In case your cluster is replicated
  with two or three copies, you can simply delete the database file, and Garage
  will resync from other nodes. To do so, stop Garage, delete the database file
  or directory, and restart Garage. Then, do a full table repair by calling
  `garage repair -a --yes tables`.  This will take a bit of time to complete as
  the new node will need to receive copies of the metadata tables from the
  network.
 - **Option 2: restoring a snapshot taken by Garage.** Since v0.9.4, Garage can
  [automatically take regular
  snapshots](@/documentation/reference-manual/configuration.md#metadata_auto_snapshot_interval)
  of your metadata DB file. This file or directory should be located under
  `<metadata_dir>/snapshots`, and is named according to the UTC time at which it
  was taken. Stop Garage, discard the database file/directory and replace it by the
  snapshot you want to use. For instance, in the case of LMDB:
  ```bash
  cd $METADATA_DIR
  mv db.lmdb db.lmdb.bak
  cp -r snapshots/2024-03-15T12:13:52Z db.lmdb
  ```
  And for Sqlite:
  ```bash
  cd $METADATA_DIR
  mv db.sqlite db.sqlite.bak
  cp snapshots/2024-03-15T12:13:52Z db.sqlite
  ```
  Then, restart Garage and run a full table repair by calling `garage repair -a
  --yes tables`.  This should run relatively fast as only the changes that
  occurred since the snapshot was taken will need to be resynchronized. Of
  course, if your cluster is not replicated, you will lose all changes that
  occurred since the snapshot was taken.
 - **Option 3: restoring a filesystem-level snapshot.** If you are using ZFS or
  BTRFS to snapshot your metadata partition, refer to their specific
  documentation on rolling back or copying files from an old snapshot.
--- a/doc/book/operations/upgrading.md
+++ b/doc/book/operations/upgrading.md
@ -73,6 +73,18 @@ The entire procedure would look something like this:
  You can do all of the nodes in a single zone at once as that won't impact global cluster availability.
  Do not try to make a backup of the metadata folder of a running node.
  **Since Garage v0.9.4,** you can use the `garage meta snapshot --all` command
  to take a simultaneous snapshot of the metadata database files of all your
  nodes.  This avoids the tedious process of having to take them down one by
  one before upgrading. Be careful that if automatic snapshotting is enabled,
  Garage only keeps the last two snapshots and deletes older ones, so you might
  want to disable automatic snapshotting in your upgraded configuration file
  until you have confirmed that the upgrade ran successfully.  In addition to
  snapshotting the metadata databases of your nodes, you should back-up at
  least the `cluster_layout` file of one of your Garage instances (this file
  should be the same on all nodes and you can copy it safely while Garage is
  running).
 3. Prepare your binaries and configuration files for the new Garage version
 4. Restart all nodes simultaneously in the new version
--- a/doc/book/quick-start/_index.md
+++ b/doc/book/quick-start/_index.md
@ -57,7 +57,7 @@ to generate unique and private secrets for security reasons:
 cat > garage.toml <<EOF
 metadata_dir = "/tmp/meta"
 data_dir = "/tmp/data"
-db_engine = "lmdb"
+db_engine = "sqlite"
 replication_factor = 1
--- a/doc/book/reference-manual/configuration.md
+++ b/doc/book/reference-manual/configuration.md
@ -15,10 +15,13 @@ metadata_dir = "/var/lib/garage/meta"
 data_dir = "/var/lib/garage/data"
 metadata_fsync = true
 data_fsync = false
 disable_scrub = false
 metadata_auto_snapshot_interval = "6h"
 db_engine = "lmdb"
 block_size = "1M"
 block_ram_buffer_max = "256MiB"
 lmdb_map_size = "1T"
@ -29,6 +32,8 @@ rpc_bind_addr = "[::]:3901"
 rpc_bind_outgoing = false
 rpc_public_addr = "[fc00:1::1]:3901"
 allow_world_readable_secrets = false
 bootstrap_peers = [
    "563e1ac825ee3323aa441e72c26d1030d6d4414aeb3dd25287c531e7fc2bc95d@[fc00:1::1]:3901",
    "86f0f26ae4afbd59aaf9cfb059eefac844951efd5b8caeec0d53f4ed6c85f332@[fc00:1::2]:3901",
@ -79,14 +84,20 @@ The following gives details about each available configuration option.
 ### Index
 [Environment variables](#env_variables).
 Top-level configuration options:
 [`allow_world_readable_secrets`](#allow_world_readable_secrets),
 [`block_ram_buffer_max`](#block_ram_buffer_max),
 [`block_size`](#block_size),
 [`bootstrap_peers`](#bootstrap_peers),
 [`compression_level`](#compression_level),
 [`data_dir`](#data_dir),
 [`data_fsync`](#data_fsync),
 [`db_engine`](#db_engine),
 [`disable_scrub`](#disable_scrub),
 [`lmdb_map_size`](#lmdb_map_size),
 [`metadata_auto_snapshot_interval`](#metadata_auto_snapshot_interval),
 [`metadata_dir`](#metadata_dir),
 [`metadata_fsync`](#metadata_fsync),
 [`replication_factor`](#replication_factor),
@ -128,6 +139,23 @@ The `[admin]` section:
 [`admin_token`/`admin_token_file`](#admin_token),
 [`trace_sink`](#admin_trace_sink),
 ### Environment variables {#env_variables}
 The following configuration parameter must be specified as an environment
 variable, it does not exist in the configuration file:
 - `GARAGE_LOG_TO_SYSLOG` (since v0.9.4): set this to `1` or `true` to make the
  Garage daemon send its logs to `syslog` (using the libc `syslog` function)
  instead of printing to stderr.
 The following environment variables can be used to override the corresponding
 values in the configuration file:
 - [`GARAGE_ALLOW_WORLD_READABLE_SECRETS`](#allow_world_readable_secrets)
 - [`GARAGE_RPC_SECRET` and `GARAGE_RPC_SECRET_FILE`](#rpc_secret)
 - [`GARAGE_ADMIN_TOKEN` and `GARAGE_ADMIN_TOKEN_FILE`](#admin_token)
 - [`GARAGE_METRICS_TOKEN` and `GARAGE_METRICS_TOKEN`](#admin_metrics_token)
 ### Top-level configuration options
@ -272,23 +300,38 @@ Since `v0.8.0`, Garage can use alternative storage backends as follows:
 | [Sled](https://sled.rs) (old default, removed since `v1.0`) | `"sled"` | `<metadata_dir>/db/` |
 Sled was supported until Garage v0.9.x, and was removed in Garage v1.0.
-You can still use an older binary of Garage (e.g. v0.9.3) to migrate
+You can still use an older binary of Garage (e.g. v0.9.4) to migrate
 old Sled metadata databases to another engine.
 Performance characteristics of the different DB engines are as follows:
- LMDB: the recommended database engine on 64-bit systems, much more
+- LMDB: the recommended database engine for high-performance distributed clusters.
-  space-efficient and slightly faster. Note that the data format of LMDB is not
+LMDB works very well, but is known to have the following limitations:
-  portable between architectures, so for instance the Garage database of an
+
-  x86-64 node cannot be moved to an ARM64 node. Also note that, while LMDB can
+  - The data format of LMDB is not portable between architectures, so for
-  technically be used on 32-bit systems, this will limit your node to very
+    instance the Garage database of an x86-64 node cannot be moved to an ARM64
-  small database sizes due to how LMDB works; it is therefore not recommended.
+    node.
  - While LMDB can technically be used on 32-bit systems, this will limit your
    node to very small database sizes due to how LMDB works; it is therefore
    not recommended.
  - Several users have reported corrupted LMDB database files after an unclean
    shutdown (e.g. a power outage). This situation can generally be recovered
    from if your cluster is geo-replicated (by rebuilding your metadata db from
    other nodes), or if you have saved regular snapshots at the filesystem
    level.
  - Keys in LMDB are limited to 511 bytes. This limit translates to limits on
    object keys in S3 and sort keys in K2V that are limted to 479 bytes.
 - Sqlite: Garage supports Sqlite as an alternative storage backend for
-  metadata, and although it has not been tested as much, it is expected to work
+  metadata, which does not have the issues listed above for LMDB.
-  satisfactorily.  Since Garage v0.9.0, performance issues have largely been
+  On versions 0.8.x and earlier, Sqlite should be avoided due to abysmal
-  fixed by allowing for a no-fsync mode (see `metadata_fsync`). Sqlite does not
+  performance, which was fixed with the addition of `metadata_fsync`.
-  have the database size limitation of LMDB on 32-bit systems.
+  Sqlite is still probably slower than LMDB due to the way we use it,
  so it is not the best choice for high-performance storage clusters,
  but it should work fine in many cases.
 It is possible to convert Garage's metadata directory from one format to another
 using the `garage convert-db` command, which should be used as follows:
@ -315,7 +358,7 @@ Using this option reduces the risk of simultaneous metadata corruption on severa
 cluster nodes, which could lead to data loss.
 If multi-site replication is used, this option is most likely not necessary, as
-it is extremely unlikely that two nodes in different locations will have a 
+it is extremely unlikely that two nodes in different locations will have a
 power failure at the exact same time.
 (Metadata corruption on a single node is not an issue, the corrupted data file
@ -343,6 +386,43 @@ at the cost of a moderate drop in write performance.
 Similarly to `metatada_fsync`, this is likely not necessary
 if geographical replication is used.
 #### `metadata_auto_snapshot_interval` (since Garage v0.9.4) {#metadata_auto_snapshot_interval}
 If this value is set, Garage will automatically take a snapshot of the metadata
 DB file at a regular interval and save it in the metadata directory.
 This parameter can take any duration string that can be parsed by
 the [`parse_duration`](https://docs.rs/parse_duration/latest/parse_duration/#syntax) crate.
 Snapshots can allow to recover from situations where the metadata DB file is
 corrupted, for instance after an unclean shutdown.  See [this
 page](@/documentation/operations/recovering.md#corrupted_meta) for details.
 Garage keeps only the two most recent snapshots of the metadata DB and deletes
 older ones automatically.
 Note that taking a metadata snapshot is a relatively intensive operation as the
 entire data file is copied. A snapshot being taken might have performance
 impacts on the Garage node while it is running. If the cluster is under heavy
 write load when a snapshot operation is running, this might also cause the
 database file to grow in size significantly as pages cannot be recycled easily.
 For this reason, it might be better to use filesystem-level snapshots instead
 if possible.
 #### `disable_scrub` {#disable_scrub}
 By default, Garage runs a scrub of the data directory approximately once per
 month, with a random delay to avoid all nodes running at the same time.  When
 it scrubs the data directory, Garage will read all of the data files stored on
 disk to check their integrity, and will rebuild any data files that it finds
 corrupted, using the remaining valid copies stored on other nodes.
 See [this page](@/documentation/operations/durability-repairs.md#scrub) for details.
 Set the `disable_scrub` configuration value to `true` if you don't need Garage
 to scrub the data directory, for instance if you are already scrubbing at the
 filesystem level. Note that in this case, if you find a corrupted data file,
 you should delete it from the data directory and then call `garage repair
 blocks` on the node to ensure that it re-obtains a copy from another node on
 the network.
 #### `block_size` {#block_size}
 Garage splits stored objects in consecutive chunks of size `block_size`
@ -358,6 +438,37 @@ files will remain available. This however means that chunks from existing files
 will not be deduplicated with chunks from newly uploaded files, meaning you
 might use more storage space that is optimally possible.
 #### `block_ram_buffer_max` (since v0.9.4) {#block_ram_buffer_max}
 A limit on the total size of data blocks kept in RAM by S3 API nodes awaiting
 to be sent to storage nodes asynchronously.
 Explanation: since Garage wants to tolerate node failures, it uses quorum
 writes to send data blocks to storage nodes: try to write the block to three
 nodes, and return ok as soon as two writes complete. So even if all three nodes
 are online, the third write always completes asynchronously.  In general, there
 are not many writes to a cluster, and the third asynchronous write can
 terminate early enough so as to not cause unbounded RAM growth.  However, if
 the S3 API node is continuously receiving large quantities of data and the
 third node is never able to catch up, many data blocks will be kept buffered in
 RAM as they are awaiting transfer to the third node.
 The `block_ram_buffer_max` sets a limit to the size of buffers that can be kept
 in RAM in this process.  When the limit is reached, backpressure is applied
 back to the S3 client.
 Note that this only counts buffers that have arrived to a certain stage of
 processing (received from the client + encrypted and/or compressed as
 necessary) and are ready to send to the storage nodes. Many other buffers will
 not be counted and this is not a hard limit on RAM consumption.  In particular,
 if many clients send requests simultaneously with large objects, the RAM
 consumption will always grow linearly with the number of concurrent requests,
 as each request will use a few buffers of size `block_size` for receiving and
 intermediate processing before even trying to send the data to the storage
 node.
 The default value is 256MiB.
 #### `lmdb_map_size` {#lmdb_map_size}
 This parameters can be used to set the map size used by LMDB,
@ -448,7 +559,7 @@ be obtained by running `garage node id` and then included directly in the
 key will be returned by `garage node id` and you will have to add the IP
 yourself.
-### `allow_world_readable_secrets`
+### `allow_world_readable_secrets` or `GARAGE_ALLOW_WORLD_READABLE_SECRETS` (env) {#allow_world_readable_secrets}
 Garage checks the permissions of your secret files to make sure they're not
 world-readable. In some cases, the check might fail and consider your files as
--- a/doc/book/reference-manual/monitoring.md
+++ b/doc/book/reference-manual/monitoring.md
@ -225,6 +225,17 @@ block_bytes_read 120586322022
 block_bytes_written 3386618077
 ```
 #### `block_ram_buffer_free_kb` (gauge)
 Kibibytes available for buffering blocks that have to be sent to remote nodes.
 When clients send too much data to this node and a storage node is not receiving
 data fast enough due to slower network conditions, this will decrease down to
 zero and backpressure will be applied.
 ```
 block_ram_buffer_free_kb 219829
 ```
 #### `block_compression_level` (counter)
 Exposes the block compression level configured for the Garage node.
--- a/doc/book/working-documents/migration-1.md
+++ b/doc/book/working-documents/migration-1.md
@ -0,0 +1,77 @@
 +++
 title = "Migrating from 0.9 to 1.0"
 weight = 11
 +++
 **This guide explains how to migrate to 1.0 if you have an existing 0.9 cluster.
 We don't recommend trying to migrate to 1.0 directly from 0.8 or older.**
 This migration procedure has been tested on several clusters without issues.
 However, it is still a *critical procedure* that might cause issues.
 **Make sure to back up all your data before attempting it!**
 You might also want to read our [general documentation on upgrading Garage](@/documentation/operations/upgrading.md).
 ## Changes introduced in v1.0
 The following are **breaking changes** in Garage v1.0 that require your attention when migrating:
 - The Sled metadata db engine has been **removed**. If your cluster was still
  using Sled, you will need to **use a Garage v0.9.x binary** to convert the
  database using the `garage convert-db` subcommand. See
  [here](@/documentation/reference-manual/configuration.md#db_engine) for the
  details of the procedure.
 The following syntax changes have been made to the configuration file:
 - The `replication_mode` parameter has been split into two parameters:
  [`replication_factor`](@/documentation/reference-manual/configuration.md#replication_factor)
  and
  [`consistency_mode`](@/documentation/reference-manual/configuration.md#consistency_mode).
  The old syntax using `replication_mode` is still supported for legacy
  reasons and can still be used.
 - The parameters `sled_cache_capacity` and `sled_flush_every_ms` have been removed.
 ## Migration procedure
 The migration to Garage v1.0 can be done with almost no downtime,
 by restarting all nodes at once in the new version.
 The migration steps are as follows:
 1. Do a `garage repair --all-nodes --yes tables`, check the logs and check that
   all data seems to be synced correctly between nodes. If you have time, do
   additional `garage repair` procedures (`blocks`, `versions`, `block_refs`,
   etc.)
 2. Ensure you have a snapshot of your Garage installation that you can restore
   to in case the upgrade goes wrong:
   - If you are running Garage v0.9.4 or later, use the `garage meta snapshot
     --all` to make a backup snapshot of the metadata directories of your nodes
     for backup purposes, and save a copy of the following files in the
     metadata directories of your nodes: `cluster_layout`, `data_layout`,
     `node_key`, `node_key.pub`.
   - If you are running a filesystem such as ZFS or BTRFS that support
     snapshotting, you can create a filesystem-level snapshot to be used as a
     restoration point if needed.
   - In other cases, make a backup using the old procedure: turn off each node
     individually; back up its metadata folder (for instance, use the following
     command if your metadata directory is `/var/lib/garage/meta`: `cd
     /var/lib/garage ; tar -acf meta-v0.9.tar.zst meta/`); turn it back on
     again.  This will allow you to take a backup of all nodes without
     impacting global cluster availability.  You can do all nodes of a single
     zone at once as this does not impact the availability of Garage.
 3. Prepare your updated binaries and configuration files for Garage v1.0
 4. Shut down all v0.9 nodes simultaneously, and restart them all simultaneously
   in v1.0.  Use your favorite deployment tool (Ansible, Kubernetes, Nomad) to
   achieve this as fast as possible.  Garage v1.0 should be in a working state
   as soon as enough nodes have started.
 5. Monitor your cluster in the following hours to see if it works well under
   your production load.
--- a/doc/drafts/admin-api.md
+++ b/doc/drafts/admin-api.md
@ -70,7 +70,7 @@ Example response body:
 ```json
 {
  "node": "b10c110e4e854e5aa3f4637681befac755154b20059ec163254ddbfae86b09df",
-  "garageVersion": "v0.10.0",
+  "garageVersion": "v1.0.0",
  "garageFeatures": [
    "k2v",
    "lmdb",
--- a/flake.nix
+++ b/flake.nix
@ -76,6 +76,7 @@
            # import the full shell using `nix develop .#full`
            full = shellWithPackages (with pkgs; [
              rustfmt
              rust-analyzer
              clang
              mold
              # ---- extra packages for dev tasks ----
--- a/k2v_test.py
+++ b/k2v_test.py
@ -1,158 +0,0 @@
 #!/usr/bin/env python
 import os
 import requests
 from datetime import datetime
 # let's talk to our AWS Elasticsearch cluster
 #from requests_aws4auth import AWS4Auth
 #auth = AWS4Auth('GK31c2f218a2e44f485b94239e',
 #                       'b892c0665f0ada8a4755dae98baa3b133590e11dae3bcc1f9d769d67f16c3835',
 #                       'us-east-1',
 #                       's3')
 from aws_requests_auth.aws_auth import AWSRequestsAuth
 auth = AWSRequestsAuth(aws_access_key='GK31c2f218a2e44f485b94239e',
        aws_secret_access_key='b892c0665f0ada8a4755dae98baa3b133590e11dae3bcc1f9d769d67f16c3835',
        aws_host='localhost:3812',
        aws_region='us-east-1',
        aws_service='k2v')
 print("-- ReadIndex")
 response = requests.get('http://localhost:3812/alex',
                        auth=auth)
 print(response.headers)
 print(response.text)
 sort_keys = ["a", "b", "c", "d"]
 for sk in sort_keys:
    print("-- (%s) Put initial (no CT)"%sk)
    response = requests.put('http://localhost:3812/alex/root?sort_key=%s'%sk,
                            auth=auth,
                            data='{}: Hello, world!'.format(datetime.timestamp(datetime.now())))
    print(response.headers)
    print(response.text)
    print("-- Get")
    response = requests.get('http://localhost:3812/alex/root?sort_key=%s'%sk,
                            auth=auth)
    print(response.headers)
    print(response.text)
    ct = response.headers["x-garage-causality-token"]
    print("-- ReadIndex")
    response = requests.get('http://localhost:3812/alex',
                            auth=auth)
    print(response.headers)
    print(response.text)
    print("-- Put with CT")
    response = requests.put('http://localhost:3812/alex/root?sort_key=%s'%sk,
                            auth=auth,
                            headers={'x-garage-causality-token': ct},
                            data='{}: Good bye, world!'.format(datetime.timestamp(datetime.now())))
    print(response.headers)
    print(response.text)
    print("-- Get")
    response = requests.get('http://localhost:3812/alex/root?sort_key=%s'%sk,
                            auth=auth)
    print(response.headers)
    print(response.text)
    print("-- Put again with same CT (concurrent)")
    response = requests.put('http://localhost:3812/alex/root?sort_key=%s'%sk,
                            auth=auth,
                            headers={'x-garage-causality-token': ct},
                            data='{}: Concurrent value, oops'.format(datetime.timestamp(datetime.now())))
    print(response.headers)
    print(response.text)
 for sk in sort_keys:
    print("-- (%s) Get"%sk)
    response = requests.get('http://localhost:3812/alex/root?sort_key=%s'%sk,
                            auth=auth)
    print(response.headers)
    print(response.text)
    ct = response.headers["x-garage-causality-token"]
    print("-- Delete")
    response = requests.delete('http://localhost:3812/alex/root?sort_key=%s'%sk,
                            headers={'x-garage-causality-token': ct},
                            auth=auth)
    print(response.headers)
    print(response.text)
 print("-- ReadIndex")
 response = requests.get('http://localhost:3812/alex',
                        auth=auth)
 print(response.headers)
 print(response.text)
 print("-- InsertBatch")
 response = requests.post('http://localhost:3812/alex',
                        auth=auth,
                        data='''
 [
    {"pk": "root", "sk": "a", "ct": null, "v": "aW5pdGlhbCB0ZXN0Cg=="},
    {"pk": "root", "sk": "b", "ct": null, "v": "aW5pdGlhbCB0ZXN1Cg=="},
    {"pk": "root", "sk": "c", "ct": null, "v": "aW5pdGlhbCB0ZXN2Cg=="}
 ]
 ''')
 print(response.headers)
 print(response.text)
 print("-- ReadIndex")
 response = requests.get('http://localhost:3812/alex',
                        auth=auth)
 print(response.headers)
 print(response.text)
 for sk in sort_keys:
    print("-- (%s) Get"%sk)
    response = requests.get('http://localhost:3812/alex/root?sort_key=%s'%sk,
                            auth=auth)
    print(response.headers)
    print(response.text)
    ct = response.headers["x-garage-causality-token"]
 print("-- ReadBatch")
 response = requests.post('http://localhost:3812/alex?search',
                        auth=auth,
                        data='''
 [
    {"partitionKey": "root"},
    {"partitionKey": "root", "tombstones": true},
    {"partitionKey": "root", "tombstones": true, "limit": 2},
    {"partitionKey": "root", "start": "c", "singleItem": true},
    {"partitionKey": "root", "start": "b", "end": "d", "tombstones": true}
 ]
 ''')
 print(response.headers)
 print(response.text)
 print("-- DeleteBatch")
 response = requests.post('http://localhost:3812/alex?delete',
                        auth=auth,
                        data='''
 [
    {"partitionKey": "root", "start": "b", "end": "c"}
 ]
 ''')
 print(response.headers)
 print(response.text)
 print("-- ReadBatch")
 response = requests.post('http://localhost:3812/alex?search',
                        auth=auth,
                        data='''
 [
    {"partitionKey": "root"}
 ]
 ''')
 print(response.headers)
 print(response.text)
--- a/nix/compile.nix
+++ b/nix/compile.nix
@ -168,13 +168,12 @@ let
  rootFeatures = if features != null then
    features
  else
-    ([ "garage/bundled-libs" "garage/lmdb" "garage/k2v" ] ++ (if release then [
+    ([ "garage/bundled-libs" "garage/lmdb" "garage/sqlite" "garage/k2v" ] ++ (if release then [
      "garage/consul-discovery"
      "garage/kubernetes-discovery"
      "garage/metrics"
      "garage/telemetry-otlp"
-      "garage/lmdb"
+      "garage/syslog"
      "garage/sqlite"
    ] else
      [ ]));
--- a/script/helm/garage/Chart.yaml
+++ b/script/helm/garage/Chart.yaml
@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.4.1
+version: 0.5.0
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "v0.9.3"
+appVersion: "v1.0.0"
--- a/script/helm/garage/templates/workload.yaml
+++ b/script/helm/garage/templates/workload.yaml
@ -11,6 +11,7 @@ spec:
  {{- if eq .Values.deployment.kind "StatefulSet" }}
  replicas: {{ .Values.deployment.replicaCount }}
  serviceName: {{ include "garage.fullname" . }}
  podManagementPolicy: {{ .Values.deployment.podManagementPolicy }}
  {{- end }}
  template:
    metadata:
--- a/script/helm/garage/values.yaml
+++ b/script/helm/garage/values.yaml
@ -96,6 +96,8 @@ deployment:
  kind: StatefulSet
  # Number of StatefulSet replicas/garage nodes to start
  replicaCount: 3
  # If using statefulset, allow Parallel or OrderedReady (default)
  podManagementPolicy: OrderedReady
 image:
  repository: dxflrs/amd64_garage
--- a/script/jepsen.garage/Vagrantfile
+++ b/script/jepsen.garage/Vagrantfile
@ -30,11 +30,11 @@ Vagrant.configure("2") do |config|
  config.vm.define "n6" do |config| vm(config, "n6", "192.168.56.26") end
  config.vm.define "n7" do |config| vm(config, "n7", "192.168.56.27") end
-  config.vm.define "n8" do |config| vm(config, "n8", "192.168.56.28") end
+  #config.vm.define "n8" do |config| vm(config, "n8", "192.168.56.28") end
-  config.vm.define "n9" do |config| vm(config, "n9", "192.168.56.29") end
+  #config.vm.define "n9" do |config| vm(config, "n9", "192.168.56.29") end
-  config.vm.define "n10" do |config| vm(config, "n10", "192.168.56.30") end
+  #config.vm.define "n10" do |config| vm(config, "n10", "192.168.56.30") end
-  config.vm.define "n11" do |config| vm(config, "n11", "192.168.56.31") end
+  #config.vm.define "n11" do |config| vm(config, "n11", "192.168.56.31") end
-  config.vm.define "n12" do |config| vm(config, "n12", "192.168.56.32") end
+  #config.vm.define "n12" do |config| vm(config, "n12", "192.168.56.32") end
-  config.vm.define "n13" do |config| vm(config, "n13", "192.168.56.33") end
+  #config.vm.define "n13" do |config| vm(config, "n13", "192.168.56.33") end
-  config.vm.define "n14" do |config| vm(config, "n14", "192.168.56.34") end
+  #config.vm.define "n14" do |config| vm(config, "n14", "192.168.56.34") end
 end
--- a/script/jepsen.garage/all_tests_1.sh
+++ b/script/jepsen.garage/all_tests_1.sh
@ -3,11 +3,10 @@
 set -x
 #for ppatch in task3c task3a tsfix2; do
-for ppatch in tsfix2; do
+for ppatch in v093 v1rc1; do
 	#for psc in c cp cdp r pr cpr dpr; do
-	for psc in cdp r pr cpr dpr; do
+	for ptsk in reg2 set2; do
-		#for ptsk in reg2 set1 set2; do
+		for psc in c cp cdp r pr cpr dpr; do
 		for ptsk in set1; do
 			for irun in $(seq 10); do
 				lein run test --nodes-file nodes.vagrant \
 					--time-limit 60 --rate 100  --concurrency 100 --ops-per-key 100 \
--- a/script/jepsen.garage/src/jepsen/garage.clj
+++ b/script/jepsen.garage/src/jepsen/garage.clj
@ -38,7 +38,9 @@
   "tsfix2" "c82d91c6bccf307186332b6c5c6fc0b128b1b2b1"
   "task3a" "707442f5de416fdbed4681a33b739f0a787b7834"
   "task3b" "431b28e0cfdc9cac6c649193cf602108a8b02997"
-   "task3c" "0041b013a473e3ae72f50209d8f79db75a72848b"})
+   "task3c" "0041b013a473e3ae72f50209d8f79db75a72848b"
   "v093" "v0.9.3"
   "v1rc1" "v1.0.0-rc1"})
 (def cli-opts
  "Additional command line options."
--- a/script/jepsen.garage/src/jepsen/garage/daemon.clj
+++ b/script/jepsen.garage/src/jepsen/garage/daemon.clj
@ -43,7 +43,7 @@
             "rpc_bind_addr = \"0.0.0.0:3901\"\n"
             "rpc_public_addr = \"" node ":3901\"\n"
             "db_engine = \"lmdb\"\n"
-             "replication_mode = \"2\"\n"
+             "replication_mode = \"3\"\n"
             "data_dir = \"" data-dir "\"\n"
             "metadata_dir = \"" meta-dir "\"\n"
             "[s3_api]\n"
--- a/shell.nix
+++ b/shell.nix
@ -11,6 +11,7 @@ in
 {
  # --- Dev shell inherited from flake.nix ---
  devShell = devShells.default;
  devShellFull = devShells.full;
  # --- Continuous integration shell ---
  # The shell used for all CI jobs (along with devShell)
--- a/src/api/Cargo.toml
+++ b/src/api/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage_api"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>"]
 edition = "2018"
 license = "AGPL-3.0"
@ -28,6 +28,8 @@ async-trait.workspace = true
 base64.workspace = true
 bytes.workspace = true
 chrono.workspace = true
 crc32fast.workspace = true
 crc32c.workspace = true
 crypto-common.workspace = true
 err-derive.workspace = true
 hex.workspace = true
@ -37,6 +39,7 @@ tracing.workspace = true
 md-5.workspace = true
 nom.workspace = true
 pin-project.workspace = true
 sha1.workspace = true
 sha2.workspace = true
 futures.workspace = true
--- a/src/api/admin/cluster.rs
+++ b/src/api/admin/cluster.rs
@ -27,7 +27,7 @@ pub async fn handle_get_cluster_status(garage: &Arc<Garage>) -> Result<Response<
 				i.id,
 				NodeResp {
 					id: hex::encode(i.id),
-					addr: Some(i.addr),
+					addr: i.addr,
 					hostname: i.status.hostname,
 					is_up: i.is_up,
 					last_seen_secs_ago: i.last_seen_secs_ago,
@ -70,26 +70,30 @@ pub async fn handle_get_cluster_status(garage: &Arc<Garage>) -> Result<Response<
 					);
 				}
 				Some(n) => {
-					if n.role.is_none() {
+					n.role = Some(role);
 						n.role = Some(role);
 					}
 				}
 			}
 		}
 	}
-	for ver in layout.versions.iter().rev().skip(1) {
+	for ver in layout.versions().iter().rev().skip(1) {
 		for (id, _, role) in ver.roles.items().iter() {
 			if let layout::NodeRoleV(Some(r)) = role {
-				if !nodes.contains_key(id) && r.capacity.is_some() {
+				if r.capacity.is_some() {
-					nodes.insert(
+					if let Some(n) = nodes.get_mut(id) {
-						*id,
+						if n.role.is_none() {
-						NodeResp {
+							n.draining = true;
-							id: hex::encode(id),
+						}
-							draining: true,
+					} else {
-							..Default::default()
+						nodes.insert(
-						},
+							*id,
-					);
+							NodeResp {
 								id: hex::encode(id),
 								draining: true,
 								..Default::default()
 							},
 						);
 					}
 				}
 			}
 		}
@ -156,7 +160,7 @@ pub async fn handle_connect_cluster_nodes(
 }
 pub async fn handle_get_cluster_layout(garage: &Arc<Garage>) -> Result<Response<ResBody>, Error> {
-	let res = format_cluster_layout(&garage.system.cluster_layout());
+	let res = format_cluster_layout(garage.system.cluster_layout().inner());
 	Ok(json_ok_response(&res)?)
 }
@ -295,7 +299,7 @@ pub async fn handle_update_cluster_layout(
 ) -> Result<Response<ResBody>, Error> {
 	let updates = parse_json_body::<UpdateClusterLayoutRequest, _, Error>(req).await?;
-	let mut layout = garage.system.cluster_layout().clone();
+	let mut layout = garage.system.cluster_layout().inner().clone();
 	let mut roles = layout.current().roles.clone();
 	roles.merge(&layout.staging.get().roles);
@ -341,7 +345,7 @@ pub async fn handle_apply_cluster_layout(
 ) -> Result<Response<ResBody>, Error> {
 	let param = parse_json_body::<ApplyLayoutRequest, _, Error>(req).await?;
-	let layout = garage.system.cluster_layout().clone();
+	let layout = garage.system.cluster_layout().inner().clone();
 	let (layout, msg) = layout.apply_staged_changes(Some(param.version))?;
 	garage
@ -360,7 +364,7 @@ pub async fn handle_apply_cluster_layout(
 pub async fn handle_revert_cluster_layout(
 	garage: &Arc<Garage>,
 ) -> Result<Response<ResBody>, Error> {
-	let layout = garage.system.cluster_layout().clone();
+	let layout = garage.system.cluster_layout().inner().clone();
 	let layout = layout.revert_staged_changes()?;
 	garage
 		.system
--- a/src/api/s3/api_server.rs
+++ b/src/api/s3/api_server.rs
@ -325,7 +325,7 @@ impl ApiHandler for S3ApiServer {
 					part_number_marker: part_number_marker.map(|p| p.min(10000)),
 					max_parts: max_parts.unwrap_or(1000).clamp(1, 1000),
 				};
-				handle_list_parts(ctx, &query).await
+				handle_list_parts(ctx, req, &query).await
 			}
 			Endpoint::DeleteObjects {} => handle_delete_objects(ctx, req, content_sha256).await,
 			Endpoint::GetBucketWebsite {} => handle_get_website(ctx).await,
--- a/src/api/s3/checksum.rs
+++ b/src/api/s3/checksum.rs
@ -0,0 +1,406 @@
 use std::convert::{TryFrom, TryInto};
 use std::hash::Hasher;
 use base64::prelude::*;
 use crc32c::Crc32cHasher as Crc32c;
 use crc32fast::Hasher as Crc32;
 use md5::{Digest, Md5};
 use sha1::Sha1;
 use sha2::Sha256;
 use http::{HeaderMap, HeaderName, HeaderValue};
 use garage_util::data::*;
 use garage_util::error::OkOrMessage;
 use garage_model::s3::object_table::*;
 use crate::s3::error::*;
 pub const X_AMZ_CHECKSUM_ALGORITHM: HeaderName =
 	HeaderName::from_static("x-amz-checksum-algorithm");
 pub const X_AMZ_CHECKSUM_MODE: HeaderName = HeaderName::from_static("x-amz-checksum-mode");
 pub const X_AMZ_CHECKSUM_CRC32: HeaderName = HeaderName::from_static("x-amz-checksum-crc32");
 pub const X_AMZ_CHECKSUM_CRC32C: HeaderName = HeaderName::from_static("x-amz-checksum-crc32c");
 pub const X_AMZ_CHECKSUM_SHA1: HeaderName = HeaderName::from_static("x-amz-checksum-sha1");
 pub const X_AMZ_CHECKSUM_SHA256: HeaderName = HeaderName::from_static("x-amz-checksum-sha256");
 pub type Crc32Checksum = [u8; 4];
 pub type Crc32cChecksum = [u8; 4];
 pub type Md5Checksum = [u8; 16];
 pub type Sha1Checksum = [u8; 20];
 pub type Sha256Checksum = [u8; 32];
 #[derive(Debug, Default)]
 pub(crate) struct ExpectedChecksums {
 	// base64-encoded md5 (content-md5 header)
 	pub md5: Option<String>,
 	// content_sha256 (as a Hash / FixedBytes32)
 	pub sha256: Option<Hash>,
 	// extra x-amz-checksum-* header
 	pub extra: Option<ChecksumValue>,
 }
 pub(crate) struct Checksummer {
 	pub crc32: Option<Crc32>,
 	pub crc32c: Option<Crc32c>,
 	pub md5: Option<Md5>,
 	pub sha1: Option<Sha1>,
 	pub sha256: Option<Sha256>,
 }
 #[derive(Default)]
 pub(crate) struct Checksums {
 	pub crc32: Option<Crc32Checksum>,
 	pub crc32c: Option<Crc32cChecksum>,
 	pub md5: Option<Md5Checksum>,
 	pub sha1: Option<Sha1Checksum>,
 	pub sha256: Option<Sha256Checksum>,
 }
 impl Checksummer {
 	pub(crate) fn init(expected: &ExpectedChecksums, require_md5: bool) -> Self {
 		let mut ret = Self {
 			crc32: None,
 			crc32c: None,
 			md5: None,
 			sha1: None,
 			sha256: None,
 		};
 		if expected.md5.is_some() || require_md5 {
 			ret.md5 = Some(Md5::new());
 		}
 		if expected.sha256.is_some() || matches!(&expected.extra, Some(ChecksumValue::Sha256(_))) {
 			ret.sha256 = Some(Sha256::new());
 		}
 		if matches!(&expected.extra, Some(ChecksumValue::Crc32(_))) {
 			ret.crc32 = Some(Crc32::new());
 		}
 		if matches!(&expected.extra, Some(ChecksumValue::Crc32c(_))) {
 			ret.crc32c = Some(Crc32c::default());
 		}
 		if matches!(&expected.extra, Some(ChecksumValue::Sha1(_))) {
 			ret.sha1 = Some(Sha1::new());
 		}
 		ret
 	}
 	pub(crate) fn add(mut self, algo: Option<ChecksumAlgorithm>) -> Self {
 		match algo {
 			Some(ChecksumAlgorithm::Crc32) => {
 				self.crc32 = Some(Crc32::new());
 			}
 			Some(ChecksumAlgorithm::Crc32c) => {
 				self.crc32c = Some(Crc32c::default());
 			}
 			Some(ChecksumAlgorithm::Sha1) => {
 				self.sha1 = Some(Sha1::new());
 			}
 			Some(ChecksumAlgorithm::Sha256) => {
 				self.sha256 = Some(Sha256::new());
 			}
 			None => (),
 		}
 		self
 	}
 	pub(crate) fn update(&mut self, bytes: &[u8]) {
 		if let Some(crc32) = &mut self.crc32 {
 			crc32.update(bytes);
 		}
 		if let Some(crc32c) = &mut self.crc32c {
 			crc32c.write(bytes);
 		}
 		if let Some(md5) = &mut self.md5 {
 			md5.update(bytes);
 		}
 		if let Some(sha1) = &mut self.sha1 {
 			sha1.update(bytes);
 		}
 		if let Some(sha256) = &mut self.sha256 {
 			sha256.update(bytes);
 		}
 	}
 	pub(crate) fn finalize(self) -> Checksums {
 		Checksums {
 			crc32: self.crc32.map(|x| u32::to_be_bytes(x.finalize())),
 			crc32c: self
 				.crc32c
 				.map(|x| u32::to_be_bytes(u32::try_from(x.finish()).unwrap())),
 			md5: self.md5.map(|x| x.finalize()[..].try_into().unwrap()),
 			sha1: self.sha1.map(|x| x.finalize()[..].try_into().unwrap()),
 			sha256: self.sha256.map(|x| x.finalize()[..].try_into().unwrap()),
 		}
 	}
 }
 impl Checksums {
 	pub fn verify(&self, expected: &ExpectedChecksums) -> Result<(), Error> {
 		if let Some(expected_md5) = &expected.md5 {
 			match self.md5 {
 				Some(md5) if BASE64_STANDARD.encode(&md5) == expected_md5.trim_matches('"') => (),
 				_ => {
 					return Err(Error::InvalidDigest(
 						"MD5 checksum verification failed (from content-md5)".into(),
 					))
 				}
 			}
 		}
 		if let Some(expected_sha256) = &expected.sha256 {
 			match self.sha256 {
 				Some(sha256) if &sha256[..] == expected_sha256.as_slice() => (),
 				_ => {
 					return Err(Error::InvalidDigest(
 						"SHA256 checksum verification failed (from x-amz-content-sha256)".into(),
 					))
 				}
 			}
 		}
 		if let Some(extra) = expected.extra {
 			let algo = extra.algorithm();
 			if self.extract(Some(algo)) != Some(extra) {
 				return Err(Error::InvalidDigest(format!(
 					"Failed to validate checksum for algorithm {:?}",
 					algo
 				)));
 			}
 		}
 		Ok(())
 	}
 	pub fn extract(&self, algo: Option<ChecksumAlgorithm>) -> Option<ChecksumValue> {
 		match algo {
 			None => None,
 			Some(ChecksumAlgorithm::Crc32) => Some(ChecksumValue::Crc32(self.crc32.unwrap())),
 			Some(ChecksumAlgorithm::Crc32c) => Some(ChecksumValue::Crc32c(self.crc32c.unwrap())),
 			Some(ChecksumAlgorithm::Sha1) => Some(ChecksumValue::Sha1(self.sha1.unwrap())),
 			Some(ChecksumAlgorithm::Sha256) => Some(ChecksumValue::Sha256(self.sha256.unwrap())),
 		}
 	}
 }
 // ----
 #[derive(Default)]
 pub(crate) struct MultipartChecksummer {
 	pub md5: Md5,
 	pub extra: Option<MultipartExtraChecksummer>,
 }
 pub(crate) enum MultipartExtraChecksummer {
 	Crc32(Crc32),
 	Crc32c(Crc32c),
 	Sha1(Sha1),
 	Sha256(Sha256),
 }
 impl MultipartChecksummer {
 	pub(crate) fn init(algo: Option<ChecksumAlgorithm>) -> Self {
 		Self {
 			md5: Md5::new(),
 			extra: match algo {
 				None => None,
 				Some(ChecksumAlgorithm::Crc32) => {
 					Some(MultipartExtraChecksummer::Crc32(Crc32::new()))
 				}
 				Some(ChecksumAlgorithm::Crc32c) => {
 					Some(MultipartExtraChecksummer::Crc32c(Crc32c::default()))
 				}
 				Some(ChecksumAlgorithm::Sha1) => Some(MultipartExtraChecksummer::Sha1(Sha1::new())),
 				Some(ChecksumAlgorithm::Sha256) => {
 					Some(MultipartExtraChecksummer::Sha256(Sha256::new()))
 				}
 			},
 		}
 	}
 	pub(crate) fn update(
 		&mut self,
 		etag: &str,
 		checksum: Option<ChecksumValue>,
 	) -> Result<(), Error> {
 		self.md5
 			.update(&hex::decode(&etag).ok_or_message("invalid etag hex")?);
 		match (&mut self.extra, checksum) {
 			(None, _) => (),
 			(
 				Some(MultipartExtraChecksummer::Crc32(ref mut crc32)),
 				Some(ChecksumValue::Crc32(x)),
 			) => {
 				crc32.update(&x);
 			}
 			(
 				Some(MultipartExtraChecksummer::Crc32c(ref mut crc32c)),
 				Some(ChecksumValue::Crc32c(x)),
 			) => {
 				crc32c.write(&x);
 			}
 			(Some(MultipartExtraChecksummer::Sha1(ref mut sha1)), Some(ChecksumValue::Sha1(x))) => {
 				sha1.update(&x);
 			}
 			(
 				Some(MultipartExtraChecksummer::Sha256(ref mut sha256)),
 				Some(ChecksumValue::Sha256(x)),
 			) => {
 				sha256.update(&x);
 			}
 			(Some(_), b) => {
 				return Err(Error::internal_error(format!(
 					"part checksum was not computed correctly, got: {:?}",
 					b
 				)))
 			}
 		}
 		Ok(())
 	}
 	pub(crate) fn finalize(self) -> (Md5Checksum, Option<ChecksumValue>) {
 		let md5 = self.md5.finalize()[..].try_into().unwrap();
 		let extra = match self.extra {
 			None => None,
 			Some(MultipartExtraChecksummer::Crc32(crc32)) => {
 				Some(ChecksumValue::Crc32(u32::to_be_bytes(crc32.finalize())))
 			}
 			Some(MultipartExtraChecksummer::Crc32c(crc32c)) => Some(ChecksumValue::Crc32c(
 				u32::to_be_bytes(u32::try_from(crc32c.finish()).unwrap()),
 			)),
 			Some(MultipartExtraChecksummer::Sha1(sha1)) => {
 				Some(ChecksumValue::Sha1(sha1.finalize()[..].try_into().unwrap()))
 			}
 			Some(MultipartExtraChecksummer::Sha256(sha256)) => Some(ChecksumValue::Sha256(
 				sha256.finalize()[..].try_into().unwrap(),
 			)),
 		};
 		(md5, extra)
 	}
 }
 // ----
 /// Extract the value of the x-amz-checksum-algorithm header
 pub(crate) fn request_checksum_algorithm(
 	headers: &HeaderMap<HeaderValue>,
 ) -> Result<Option<ChecksumAlgorithm>, Error> {
 	match headers.get(X_AMZ_CHECKSUM_ALGORITHM) {
 		None => Ok(None),
 		Some(x) if x == "CRC32" => Ok(Some(ChecksumAlgorithm::Crc32)),
 		Some(x) if x == "CRC32C" => Ok(Some(ChecksumAlgorithm::Crc32c)),
 		Some(x) if x == "SHA1" => Ok(Some(ChecksumAlgorithm::Sha1)),
 		Some(x) if x == "SHA256" => Ok(Some(ChecksumAlgorithm::Sha256)),
 		_ => Err(Error::bad_request("invalid checksum algorithm")),
 	}
 }
 /// Extract the value of any of the x-amz-checksum-* headers
 pub(crate) fn request_checksum_value(
 	headers: &HeaderMap<HeaderValue>,
 ) -> Result<Option<ChecksumValue>, Error> {
 	let mut ret = vec![];
 	if let Some(crc32_str) = headers.get(X_AMZ_CHECKSUM_CRC32) {
 		let crc32 = BASE64_STANDARD
 			.decode(&crc32_str)
 			.ok()
 			.and_then(|x| x.try_into().ok())
 			.ok_or_bad_request("invalid x-amz-checksum-crc32 header")?;
 		ret.push(ChecksumValue::Crc32(crc32))
 	}
 	if let Some(crc32c_str) = headers.get(X_AMZ_CHECKSUM_CRC32C) {
 		let crc32c = BASE64_STANDARD
 			.decode(&crc32c_str)
 			.ok()
 			.and_then(|x| x.try_into().ok())
 			.ok_or_bad_request("invalid x-amz-checksum-crc32c header")?;
 		ret.push(ChecksumValue::Crc32c(crc32c))
 	}
 	if let Some(sha1_str) = headers.get(X_AMZ_CHECKSUM_SHA1) {
 		let sha1 = BASE64_STANDARD
 			.decode(&sha1_str)
 			.ok()
 			.and_then(|x| x.try_into().ok())
 			.ok_or_bad_request("invalid x-amz-checksum-sha1 header")?;
 		ret.push(ChecksumValue::Sha1(sha1))
 	}
 	if let Some(sha256_str) = headers.get(X_AMZ_CHECKSUM_SHA256) {
 		let sha256 = BASE64_STANDARD
 			.decode(&sha256_str)
 			.ok()
 			.and_then(|x| x.try_into().ok())
 			.ok_or_bad_request("invalid x-amz-checksum-sha256 header")?;
 		ret.push(ChecksumValue::Sha256(sha256))
 	}
 	if ret.len() > 1 {
 		return Err(Error::bad_request(
 			"multiple x-amz-checksum-* headers given",
 		));
 	}
 	Ok(ret.pop())
 }
 /// Checks for the presense of x-amz-checksum-algorithm
 /// if so extract the corrseponding x-amz-checksum-* value
 pub(crate) fn request_checksum_algorithm_value(
 	headers: &HeaderMap<HeaderValue>,
 ) -> Result<Option<ChecksumValue>, Error> {
 	match headers.get(X_AMZ_CHECKSUM_ALGORITHM) {
 		Some(x) if x == "CRC32" => {
 			let crc32 = headers
 				.get(X_AMZ_CHECKSUM_CRC32)
 				.and_then(|x| BASE64_STANDARD.decode(&x).ok())
 				.and_then(|x| x.try_into().ok())
 				.ok_or_bad_request("invalid x-amz-checksum-crc32 header")?;
 			Ok(Some(ChecksumValue::Crc32(crc32)))
 		}
 		Some(x) if x == "CRC32C" => {
 			let crc32c = headers
 				.get(X_AMZ_CHECKSUM_CRC32C)
 				.and_then(|x| BASE64_STANDARD.decode(&x).ok())
 				.and_then(|x| x.try_into().ok())
 				.ok_or_bad_request("invalid x-amz-checksum-crc32c header")?;
 			Ok(Some(ChecksumValue::Crc32c(crc32c)))
 		}
 		Some(x) if x == "SHA1" => {
 			let sha1 = headers
 				.get(X_AMZ_CHECKSUM_SHA1)
 				.and_then(|x| BASE64_STANDARD.decode(&x).ok())
 				.and_then(|x| x.try_into().ok())
 				.ok_or_bad_request("invalid x-amz-checksum-sha1 header")?;
 			Ok(Some(ChecksumValue::Sha1(sha1)))
 		}
 		Some(x) if x == "SHA256" => {
 			let sha256 = headers
 				.get(X_AMZ_CHECKSUM_SHA256)
 				.and_then(|x| BASE64_STANDARD.decode(&x).ok())
 				.and_then(|x| x.try_into().ok())
 				.ok_or_bad_request("invalid x-amz-checksum-sha256 header")?;
 			Ok(Some(ChecksumValue::Sha256(sha256)))
 		}
 		Some(_) => Err(Error::bad_request("invalid x-amz-checksum-algorithm")),
 		None => Ok(None),
 	}
 }
 pub(crate) fn add_checksum_response_headers(
 	checksum: &Option<ChecksumValue>,
 	mut resp: http::response::Builder,
 ) -> http::response::Builder {
 	match checksum {
 		Some(ChecksumValue::Crc32(crc32)) => {
 			resp = resp.header(X_AMZ_CHECKSUM_CRC32, BASE64_STANDARD.encode(&crc32));
 		}
 		Some(ChecksumValue::Crc32c(crc32c)) => {
 			resp = resp.header(X_AMZ_CHECKSUM_CRC32C, BASE64_STANDARD.encode(&crc32c));
 		}
 		Some(ChecksumValue::Sha1(sha1)) => {
 			resp = resp.header(X_AMZ_CHECKSUM_SHA1, BASE64_STANDARD.encode(&sha1));
 		}
 		Some(ChecksumValue::Sha256(sha256)) => {
 			resp = resp.header(X_AMZ_CHECKSUM_SHA256, BASE64_STANDARD.encode(&sha256));
 		}
 		None => (),
 	}
 	resp
 }
--- a/src/api/s3/copy.rs
+++ b/src/api/s3/copy.rs
@ -2,7 +2,6 @@ use std::pin::Pin;
 use std::time::{Duration, SystemTime, UNIX_EPOCH};
 use futures::{stream, stream::Stream, StreamExt, TryStreamExt};
 use md5::{Digest as Md5Digest, Md5};
 use bytes::Bytes;
 use hyper::{Request, Response};
@ -23,11 +22,12 @@ use garage_model::s3::version_table::*;
 use crate::helpers::*;
 use crate::s3::api_server::{ReqBody, ResBody};
 use crate::s3::checksum::*;
 use crate::s3::encryption::EncryptionParams;
 use crate::s3::error::*;
 use crate::s3::get::full_object_byte_stream;
 use crate::s3::multipart;
-use crate::s3::put::{get_headers, save_stream, SaveStreamResult};
+use crate::s3::put::{get_headers, save_stream, ChecksumMode, SaveStreamResult};
 use crate::s3::xml::{self as s3_xml, xmlns_tag};
 // -------- CopyObject ---------
@ -39,6 +39,8 @@ pub async fn handle_copy(
 ) -> Result<Response<ResBody>, Error> {
 	let copy_precondition = CopyPreconditionHeaders::parse(req)?;
 	let checksum_algorithm = request_checksum_algorithm(req.headers())?;
 	let source_object = get_copy_source(&ctx, req).await?;
 	let (source_version, source_version_data, source_version_meta) =
@ -48,7 +50,7 @@ pub async fn handle_copy(
 	copy_precondition.check(source_version, &source_version_meta.etag)?;
 	// Determine encryption parameters
-	let (source_encryption, source_object_headers) =
+	let (source_encryption, source_object_meta_inner) =
 		EncryptionParams::check_decrypt_for_copy_source(
 			&ctx.garage,
 			req.headers(),
@ -56,23 +58,54 @@ pub async fn handle_copy(
 		)?;
 	let dest_encryption = EncryptionParams::new_from_headers(&ctx.garage, req.headers())?;
-	// Determine headers of destination object
+	// Extract source checksum info before source_object_meta_inner is consumed
-	let dest_object_headers = match req.headers().get("x-amz-metadata-directive") {
+	let source_checksum = source_object_meta_inner.checksum;
-		Some(v) if v == hyper::header::HeaderValue::from_static("REPLACE") => {
+	let source_checksum_algorithm = source_checksum.map(|x| x.algorithm());
-			get_headers(req.headers())?
+
-		}
+	// If source object has a checksum, the destination object must as well.
-		_ => source_object_headers.into_owned(),
+	// The x-amz-checksum-algorihtm header allows to change that algorithm,
 	// but if it is absent, we must use the same as before
 	let checksum_algorithm = checksum_algorithm.or(source_checksum_algorithm);
 	// Determine metadata of destination object
 	let was_multipart = source_version_meta.etag.contains('-');
 	let dest_object_meta = ObjectVersionMetaInner {
 		headers: match req.headers().get("x-amz-metadata-directive") {
 			Some(v) if v == hyper::header::HeaderValue::from_static("REPLACE") => {
 				get_headers(req.headers())?
 			}
 			_ => source_object_meta_inner.into_owned().headers,
 		},
 		checksum: source_checksum,
 	};
 	// Do actual object copying
-	let res = if EncryptionParams::is_same(&source_encryption, &dest_encryption) {
+	//
-		// If source and dest are both unencrypted, or if the encryption keys
+	// In any of the following scenarios, we need to read the whole object
-		// are the same, we can just copy the metadata and link blocks of the
+	// data and re-write it again:
 	//
 	// - the data needs to be decrypted or encrypted
 	// - the requested checksum algorithm requires us to recompute a checksum
 	// - the original object was a multipart upload and a checksum algorithm
 	//   is defined (AWS specifies that in this case, we must recompute the
 	//   checksum from scratch as if this was a single big object and not
 	//   a multipart object, as the checksums are not computed in the same way)
 	//
 	// In other cases, we can just copy the metadata and reference the same blocks.
 	//
 	// See: https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html
 	let must_recopy = !EncryptionParams::is_same(&source_encryption, &dest_encryption)
 		|| source_checksum_algorithm != checksum_algorithm
 		|| (was_multipart && checksum_algorithm.is_some());
 	let res = if !must_recopy {
 		// In most cases, we can just copy the metadata and link blocks of the
 		// old object from the new object.
 		handle_copy_metaonly(
 			ctx,
 			dest_key,
-			dest_object_headers,
+			dest_object_meta,
 			dest_encryption,
 			source_version,
 			source_version_data,
@ -80,16 +113,27 @@ pub async fn handle_copy(
 		)
 		.await?
 	} else {
 		let expected_checksum = ExpectedChecksums {
 			md5: None,
 			sha256: None,
 			extra: source_checksum,
 		};
 		let checksum_mode = if was_multipart || source_checksum_algorithm != checksum_algorithm {
 			ChecksumMode::Calculate(checksum_algorithm)
 		} else {
 			ChecksumMode::Verify(&expected_checksum)
 		};
 		// If source and dest encryption use different keys,
 		// we must decrypt content and re-encrypt, so rewrite all data blocks.
 		handle_copy_reencrypt(
 			ctx,
 			dest_key,
-			dest_object_headers,
+			dest_object_meta,
 			dest_encryption,
 			source_version,
 			source_version_data,
 			source_encryption,
 			checksum_mode,
 		)
 		.await?
 	};
@ -115,7 +159,7 @@ pub async fn handle_copy(
 async fn handle_copy_metaonly(
 	ctx: ReqCtx,
 	dest_key: &str,
-	dest_object_headers: ObjectVersionHeaders,
+	dest_object_meta: ObjectVersionMetaInner,
 	dest_encryption: EncryptionParams,
 	source_version: &ObjectVersion,
 	source_version_data: &ObjectVersionData,
@ -132,7 +176,7 @@ async fn handle_copy_metaonly(
 	let new_timestamp = now_msec();
 	let new_meta = ObjectVersionMeta {
-		encryption: dest_encryption.encrypt_headers(dest_object_headers)?,
+		encryption: dest_encryption.encrypt_meta(dest_object_meta)?,
 		size: source_version_meta.size,
 		etag: source_version_meta.etag.clone(),
 	};
@ -180,6 +224,7 @@ async fn handle_copy_metaonly(
 				timestamp: new_timestamp,
 				state: ObjectVersionState::Uploading {
 					encryption: new_meta.encryption.clone(),
 					checksum_algorithm: None,
 					multipart: false,
 				},
 			};
@ -252,11 +297,12 @@ async fn handle_copy_metaonly(
 async fn handle_copy_reencrypt(
 	ctx: ReqCtx,
 	dest_key: &str,
-	dest_object_headers: ObjectVersionHeaders,
+	dest_object_meta: ObjectVersionMetaInner,
 	dest_encryption: EncryptionParams,
 	source_version: &ObjectVersion,
 	source_version_data: &ObjectVersionData,
 	source_encryption: EncryptionParams,
 	checksum_mode: ChecksumMode<'_>,
 ) -> Result<SaveStreamResult, Error> {
 	// basically we will read the source data (decrypt if necessary)
 	// and save that in a new object (encrypt if necessary),
@ -270,12 +316,11 @@ async fn handle_copy_reencrypt(
 	save_stream(
 		&ctx,
-		dest_object_headers,
+		dest_object_meta,
 		dest_encryption,
 		source_stream.map_err(|e| Error::from(GarageError::from(e))),
 		&dest_key.to_string(),
-		None,
+		checksum_mode,
 		None,
 	)
 	.await
 }
@ -313,8 +358,12 @@ pub async fn handle_upload_part_copy(
 		req.headers(),
 		&source_version_meta.encryption,
 	)?;
-	let dest_object_encryption = match dest_version.state {
+	let (dest_object_encryption, dest_object_checksum_algorithm) = match dest_version.state {
-		ObjectVersionState::Uploading { encryption, .. } => encryption,
+		ObjectVersionState::Uploading {
 			encryption,
 			checksum_algorithm,
 			..
 		} => (encryption, checksum_algorithm),
 		_ => unreachable!(),
 	};
 	let (dest_encryption, _) =
@ -412,7 +461,9 @@ pub async fn handle_upload_part_copy(
 		dest_mpu_part_key,
 		MpuPart {
 			version: dest_version_id,
 			// These are all filled in later (bottom of this function)
 			etag: None,
 			checksum: None,
 			size: None,
 		},
 	);
@ -429,7 +480,8 @@ pub async fn handle_upload_part_copy(
 	garage.version_table.insert(&dest_version).await?;
 	// Now, actually copy the blocks
-	let mut md5hasher = Md5::new();
+	let mut checksummer = Checksummer::init(&Default::default(), !dest_encryption.is_encrypted())
 		.add(dest_object_checksum_algorithm);
 	// First, create a stream that is able to read the source blocks
 	// and extract the subrange if necessary.
@ -495,18 +547,24 @@ pub async fn handle_upload_part_copy(
 		}
 		let data_len = data.len() as u64;
 		md5hasher.update(&data[..]);
-		let (final_data, must_upload, final_hash) = match existing_block_hash {
+		let (checksummer_updated, (data_to_upload, final_hash)) =
-			Some(hash) if same_encryption => (data, false, hash),
+			tokio::task::spawn_blocking(move || {
-			_ => tokio::task::spawn_blocking(move || {
+				checksummer.update(&data[..]);
-				let data_enc = dest_encryption.encrypt_block(data)?;
+
-				let hash = blake2sum(&data_enc);
+				let tup = match existing_block_hash {
-				Ok::<_, Error>((data_enc, true, hash))
+					Some(hash) if same_encryption => (None, hash),
 					_ => {
 						let data_enc = dest_encryption.encrypt_block(data)?;
 						let hash = blake2sum(&data_enc);
 						(Some(data_enc), hash)
 					}
 				};
 				Ok::<_, Error>((checksummer, tup))
 			})
 			.await
-			.unwrap()?,
+			.unwrap()?;
-		};
+		checksummer = checksummer_updated;
 		dest_version.blocks.clear();
 		dest_version.blocks.put(
@ -531,7 +589,7 @@ pub async fn handle_upload_part_copy(
 			// Thing 1: if the block is not exactly a block that existed before,
 			// we need to insert that data as a new block.
 			async {
-				if must_upload {
+				if let Some(final_data) = data_to_upload {
 					garage
 						.block_manager
 						.rpc_put_block(final_hash, final_data, dest_encryption.is_encrypted(), None)
@ -552,8 +610,9 @@ pub async fn handle_upload_part_copy(
 	assert_eq!(current_offset, source_range.length);
-	let data_md5sum = md5hasher.finalize();
+	let checksums = checksummer.finalize();
-	let etag = dest_encryption.etag_from_md5(&data_md5sum);
+	let etag = dest_encryption.etag_from_md5(&checksums.md5);
 	let checksum = checksums.extract(dest_object_checksum_algorithm);
 	// Put the part's ETag in the Versiontable
 	dest_mpu.parts.put(
@ -561,6 +620,7 @@ pub async fn handle_upload_part_copy(
 		MpuPart {
 			version: dest_version_id,
 			etag: Some(etag.clone()),
 			checksum,
 			size: Some(current_offset),
 		},
 	);
--- a/src/api/s3/encryption.rs
+++ b/src/api/s3/encryption.rs
@ -26,9 +26,10 @@ use garage_util::error::Error as GarageError;
 use garage_util::migrate::Migrate;
 use garage_model::garage::Garage;
-use garage_model::s3::object_table::{ObjectVersionEncryption, ObjectVersionHeaders};
+use garage_model::s3::object_table::{ObjectVersionEncryption, ObjectVersionMetaInner};
 use crate::common_error::*;
 use crate::s3::checksum::Md5Checksum;
 use crate::s3::error::Error;
 const X_AMZ_SERVER_SIDE_ENCRYPTION_CUSTOMER_ALGORITHM: HeaderName =
@ -124,7 +125,7 @@ impl EncryptionParams {
 		garage: &Garage,
 		headers: &HeaderMap,
 		obj_enc: &'a ObjectVersionEncryption,
-	) -> Result<(Self, Cow<'a, ObjectVersionHeaders>), Error> {
+	) -> Result<(Self, Cow<'a, ObjectVersionMetaInner>), Error> {
 		let key = parse_request_headers(
 			headers,
 			&X_AMZ_SERVER_SIDE_ENCRYPTION_CUSTOMER_ALGORITHM,
@ -138,7 +139,7 @@ impl EncryptionParams {
 		garage: &Garage,
 		headers: &HeaderMap,
 		obj_enc: &'a ObjectVersionEncryption,
-	) -> Result<(Self, Cow<'a, ObjectVersionHeaders>), Error> {
+	) -> Result<(Self, Cow<'a, ObjectVersionMetaInner>), Error> {
 		let key = parse_request_headers(
 			headers,
 			&X_AMZ_COPY_SOURCE_SERVER_SIDE_ENCRYPTION_CUSTOMER_ALGORITHM,
@ -152,14 +153,11 @@ impl EncryptionParams {
 		garage: &Garage,
 		key: Option<(Key<Aes256Gcm>, Md5Output)>,
 		obj_enc: &'a ObjectVersionEncryption,
-	) -> Result<(Self, Cow<'a, ObjectVersionHeaders>), Error> {
+	) -> Result<(Self, Cow<'a, ObjectVersionMetaInner>), Error> {
 		match (key, &obj_enc) {
 			(
 				Some((client_key, client_key_md5)),
-				ObjectVersionEncryption::SseC {
+				ObjectVersionEncryption::SseC { inner, compressed },
 					headers,
 					compressed,
 				},
 			) => {
 				let enc = Self::SseC {
 					client_key,
@ -170,13 +168,13 @@ impl EncryptionParams {
 						None
 					},
 				};
-				let plaintext = enc.decrypt_blob(&headers)?;
+				let plaintext = enc.decrypt_blob(&inner)?;
-				let headers = ObjectVersionHeaders::decode(&plaintext)
+				let inner = ObjectVersionMetaInner::decode(&plaintext)
-					.ok_or_internal_error("Could not decode encrypted headers")?;
+					.ok_or_internal_error("Could not decode encrypted metadata")?;
-				Ok((enc, Cow::Owned(headers)))
+				Ok((enc, Cow::Owned(inner)))
 			}
-			(None, ObjectVersionEncryption::Plaintext { headers }) => {
+			(None, ObjectVersionEncryption::Plaintext { inner }) => {
-				Ok((Self::Plaintext, Cow::Borrowed(headers)))
+				Ok((Self::Plaintext, Cow::Borrowed(inner)))
 			}
 			(_, ObjectVersionEncryption::SseC { .. }) => {
 				Err(Error::bad_request("Object is encrypted"))
@ -188,29 +186,31 @@ impl EncryptionParams {
 		}
 	}
-	pub fn encrypt_headers(
+	pub fn encrypt_meta(
 		&self,
-		h: ObjectVersionHeaders,
+		meta: ObjectVersionMetaInner,
 	) -> Result<ObjectVersionEncryption, Error> {
 		match self {
 			Self::SseC {
 				compression_level, ..
 			} => {
-				let plaintext = h.encode().map_err(GarageError::from)?;
+				let plaintext = meta.encode().map_err(GarageError::from)?;
 				let ciphertext = self.encrypt_blob(&plaintext)?;
 				Ok(ObjectVersionEncryption::SseC {
-					headers: ciphertext.into_owned(),
+					inner: ciphertext.into_owned(),
 					compressed: compression_level.is_some(),
 				})
 			}
-			Self::Plaintext => Ok(ObjectVersionEncryption::Plaintext { headers: h }),
+			Self::Plaintext => Ok(ObjectVersionEncryption::Plaintext { inner: meta }),
 		}
 	}
 	// ---- generating object Etag values ----
-	pub fn etag_from_md5(&self, md5sum: &[u8]) -> String {
+	pub fn etag_from_md5(&self, md5sum: &Option<Md5Checksum>) -> String {
 		match self {
-			Self::Plaintext => hex::encode(md5sum),
+			Self::Plaintext => md5sum
 				.map(|x| hex::encode(&x[..]))
 				.expect("md5 digest should have been computed"),
 			Self::SseC { .. } => {
 				// AWS specifies that for encrypted objects, the Etag is not
 				// the md5sum of the data, but doesn't say what it is.
@ -224,7 +224,7 @@ impl EncryptionParams {
 	// ---- generic function for encrypting / decrypting blobs ----
 	// Prepends a randomly-generated nonce to the encrypted value.
-	// This is used for encrypting object headers and inlined data for small objects.
+	// This is used for encrypting object metadata and inlined data for small objects.
 	// This does not compress anything.
 	pub fn encrypt_blob<'a>(&self, blob: &'a [u8]) -> Result<Cow<'a, [u8]>, Error> {
--- a/src/api/s3/error.rs
+++ b/src/api/s3/error.rs
@ -69,6 +69,10 @@ pub enum Error {
 	#[error(display = "Invalid encryption algorithm: {:?}, should be AES256", _0)]
 	InvalidEncryptionAlgorithm(String),
 	/// The client sent invalid XML data
 	#[error(display = "Invalid digest: {}", _0)]
 	InvalidDigest(String),
 	/// The client sent a request for an action not supported by garage
 	#[error(display = "Unimplemented action: {}", _0)]
 	NotImplemented(String),
@ -129,6 +133,7 @@ impl Error {
 			Error::NotImplemented(_) => "NotImplemented",
 			Error::InvalidXml(_) => "MalformedXML",
 			Error::InvalidRange(_) => "InvalidRange",
 			Error::InvalidDigest(_) => "InvalidDigest",
 			Error::InvalidUtf8Str(_) | Error::InvalidUtf8String(_) => "InvalidRequest",
 			Error::InvalidEncryptionAlgorithm(_) => "InvalidEncryptionAlgorithmError",
 		}
@ -148,6 +153,7 @@ impl ApiError for Error {
 			| Error::InvalidPart
 			| Error::InvalidPartOrder
 			| Error::EntityTooSmall
 			| Error::InvalidDigest(_)
 			| Error::InvalidEncryptionAlgorithm(_)
 			| Error::InvalidXml(_)
 			| Error::InvalidUtf8Str(_)
--- a/src/api/s3/get.rs
+++ b/src/api/s3/get.rs
@ -27,6 +27,7 @@ use garage_model::s3::version_table::*;
 use crate::helpers::*;
 use crate::s3::api_server::ResBody;
 use crate::s3::checksum::{add_checksum_response_headers, X_AMZ_CHECKSUM_MODE};
 use crate::s3::encryption::EncryptionParams;
 use crate::s3::error::*;
@ -45,8 +46,9 @@ pub struct GetObjectOverrides {
 fn object_headers(
 	version: &ObjectVersion,
 	version_meta: &ObjectVersionMeta,
-	headers: &ObjectVersionHeaders,
+	meta_inner: &ObjectVersionMetaInner,
 	encryption: EncryptionParams,
 	checksum_mode: ChecksumMode,
 ) -> http::response::Builder {
 	debug!("Version meta: {:?}", version_meta);
@ -65,7 +67,7 @@ fn object_headers(
 	// have the same name (ignoring case) into a comma-delimited list.
 	// See: https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingMetadata.html
 	let mut headers_by_name = BTreeMap::new();
-	for (name, value) in headers.0.iter() {
+	for (name, value) in meta_inner.headers.iter() {
 		match headers_by_name.get_mut(name) {
 			None => {
 				headers_by_name.insert(name, vec![value.as_str()]);
@ -80,6 +82,10 @@ fn object_headers(
 		resp = resp.header(name, values.join(","));
 	}
 	if checksum_mode.enabled {
 		resp = add_checksum_response_headers(&meta_inner.checksum, resp);
 	}
 	encryption.add_response_headers(&mut resp);
 	resp
@ -199,6 +205,8 @@ pub async fn handle_head_without_ctx(
 	let (encryption, headers) =
 		EncryptionParams::check_decrypt(&garage, req.headers(), &version_meta.encryption)?;
 	let checksum_mode = checksum_mode(&req);
 	if let Some(pn) = part_number {
 		match version_data {
 			ObjectVersionData::Inline(_, _) => {
@ -206,17 +214,21 @@ pub async fn handle_head_without_ctx(
 					return Err(Error::InvalidPart);
 				}
 				let bytes_len = version_meta.size;
-				Ok(
+				Ok(object_headers(
-					object_headers(object_version, version_meta, &headers, encryption)
+					object_version,
-						.header(CONTENT_LENGTH, format!("{}", bytes_len))
+					version_meta,
-						.header(
+					&headers,
-							CONTENT_RANGE,
+					encryption,
-							format!("bytes 0-{}/{}", bytes_len - 1, bytes_len),
+					checksum_mode,
 						)
 						.header(X_AMZ_MP_PARTS_COUNT, "1")
 						.status(StatusCode::PARTIAL_CONTENT)
 						.body(empty_body())?,
 				)
 				.header(CONTENT_LENGTH, format!("{}", bytes_len))
 				.header(
 					CONTENT_RANGE,
 					format!("bytes 0-{}/{}", bytes_len - 1, bytes_len),
 				)
 				.header(X_AMZ_MP_PARTS_COUNT, "1")
 				.status(StatusCode::PARTIAL_CONTENT)
 				.body(empty_body())?)
 			}
 			ObjectVersionData::FirstBlock(_, _) => {
 				let version = garage
@ -228,32 +240,40 @@ pub async fn handle_head_without_ctx(
 				let (part_offset, part_end) =
 					calculate_part_bounds(&version, pn).ok_or(Error::InvalidPart)?;
-				Ok(
+				Ok(object_headers(
-					object_headers(object_version, version_meta, &headers, encryption)
+					object_version,
-						.header(CONTENT_LENGTH, format!("{}", part_end - part_offset))
+					version_meta,
-						.header(
+					&headers,
-							CONTENT_RANGE,
+					encryption,
-							format!(
+					checksum_mode,
 								"bytes {}-{}/{}",
 								part_offset,
 								part_end - 1,
 								version_meta.size
 							),
 						)
 						.header(X_AMZ_MP_PARTS_COUNT, format!("{}", version.n_parts()?))
 						.status(StatusCode::PARTIAL_CONTENT)
 						.body(empty_body())?,
 				)
 				.header(CONTENT_LENGTH, format!("{}", part_end - part_offset))
 				.header(
 					CONTENT_RANGE,
 					format!(
 						"bytes {}-{}/{}",
 						part_offset,
 						part_end - 1,
 						version_meta.size
 					),
 				)
 				.header(X_AMZ_MP_PARTS_COUNT, format!("{}", version.n_parts()?))
 				.status(StatusCode::PARTIAL_CONTENT)
 				.body(empty_body())?)
 			}
 			_ => unreachable!(),
 		}
 	} else {
-		Ok(
+		Ok(object_headers(
-			object_headers(object_version, version_meta, &headers, encryption)
+			object_version,
-				.header(CONTENT_LENGTH, format!("{}", version_meta.size))
+			version_meta,
-				.status(StatusCode::OK)
+			&headers,
-				.body(empty_body())?,
+			encryption,
 			checksum_mode,
 		)
 		.header(CONTENT_LENGTH, format!("{}", version_meta.size))
 		.status(StatusCode::OK)
 		.body(empty_body())?)
 	}
 }
@ -307,12 +327,24 @@ pub async fn handle_get_without_ctx(
 	let (enc, headers) =
 		EncryptionParams::check_decrypt(&garage, req.headers(), &last_v_meta.encryption)?;
 	let checksum_mode = checksum_mode(&req);
 	match (part_number, parse_range_header(req, last_v_meta.size)?) {
 		(Some(_), Some(_)) => Err(Error::bad_request(
 			"Cannot specify both partNumber and Range header",
 		)),
 		(Some(pn), None) => {
-			handle_get_part(garage, last_v, last_v_data, last_v_meta, enc, &headers, pn).await
+			handle_get_part(
 				garage,
 				last_v,
 				last_v_data,
 				last_v_meta,
 				enc,
 				&headers,
 				pn,
 				checksum_mode,
 			)
 			.await
 		}
 		(None, Some(range)) => {
 			handle_get_range(
@ -324,6 +356,7 @@ pub async fn handle_get_without_ctx(
 				&headers,
 				range.start,
 				range.start + range.length,
 				checksum_mode,
 			)
 			.await
 		}
@ -336,6 +369,7 @@ pub async fn handle_get_without_ctx(
 				enc,
 				&headers,
 				overrides,
 				checksum_mode,
 			)
 			.await
 		}
@ -348,12 +382,19 @@ async fn handle_get_full(
 	version_data: &ObjectVersionData,
 	version_meta: &ObjectVersionMeta,
 	encryption: EncryptionParams,
-	headers: &ObjectVersionHeaders,
+	meta_inner: &ObjectVersionMetaInner,
 	overrides: GetObjectOverrides,
 	checksum_mode: ChecksumMode,
 ) -> Result<Response<ResBody>, Error> {
-	let mut resp_builder = object_headers(version, version_meta, &headers, encryption)
+	let mut resp_builder = object_headers(
-		.header(CONTENT_LENGTH, format!("{}", version_meta.size))
+		version,
-		.status(StatusCode::OK);
+		version_meta,
 		&meta_inner,
 		encryption,
 		checksum_mode,
 	)
 	.header(CONTENT_LENGTH, format!("{}", version_meta.size))
 	.status(StatusCode::OK);
 	getobject_override_headers(overrides, &mut resp_builder)?;
 	let stream = full_object_byte_stream(garage, version, version_data, encryption);
@ -432,14 +473,15 @@ async fn handle_get_range(
 	version_data: &ObjectVersionData,
 	version_meta: &ObjectVersionMeta,
 	encryption: EncryptionParams,
-	headers: &ObjectVersionHeaders,
+	meta_inner: &ObjectVersionMetaInner,
 	begin: u64,
 	end: u64,
 	checksum_mode: ChecksumMode,
 ) -> Result<Response<ResBody>, Error> {
 	// Here we do not use getobject_override_headers because we don't
 	// want to add any overridden headers (those should not be added
 	// when returning PARTIAL_CONTENT)
-	let resp_builder = object_headers(version, version_meta, headers, encryption)
+	let resp_builder = object_headers(version, version_meta, meta_inner, encryption, checksum_mode)
 		.header(CONTENT_LENGTH, format!("{}", end - begin))
 		.header(
 			CONTENT_RANGE,
@ -480,12 +522,19 @@ async fn handle_get_part(
 	version_data: &ObjectVersionData,
 	version_meta: &ObjectVersionMeta,
 	encryption: EncryptionParams,
-	headers: &ObjectVersionHeaders,
+	meta_inner: &ObjectVersionMetaInner,
 	part_number: u64,
 	checksum_mode: ChecksumMode,
 ) -> Result<Response<ResBody>, Error> {
 	// Same as for get_range, no getobject_override_headers
-	let resp_builder = object_headers(object_version, version_meta, headers, encryption)
+	let resp_builder = object_headers(
-		.status(StatusCode::PARTIAL_CONTENT);
+		object_version,
 		version_meta,
 		meta_inner,
 		encryption,
 		checksum_mode,
 	)
 	.status(StatusCode::PARTIAL_CONTENT);
 	match version_data {
 		ObjectVersionData::Inline(_, bytes) => {
@ -567,6 +616,20 @@ fn calculate_part_bounds(v: &Version, part_number: u64) -> Option<(u64, u64)> {
 	None
 }
 struct ChecksumMode {
 	enabled: bool,
 }
 fn checksum_mode(req: &Request<impl Body>) -> ChecksumMode {
 	ChecksumMode {
 		enabled: req
 			.headers()
 			.get(X_AMZ_CHECKSUM_MODE)
 			.map(|x| x == "ENABLED")
 			.unwrap_or(false),
 	}
 }
 fn body_from_blocks_range(
 	garage: Arc<Garage>,
 	encryption: EncryptionParams,
--- a/src/api/s3/list.rs
+++ b/src/api/s3/list.rs
@ -2,7 +2,7 @@ use std::collections::{BTreeMap, BTreeSet};
 use std::iter::{Iterator, Peekable};
 use base64::prelude::*;
-use hyper::Response;
+use hyper::{Request, Response};
 use garage_util::data::*;
 use garage_util::error::Error as GarageError;
@ -15,7 +15,8 @@ use garage_table::EnumerationOrder;
 use crate::encoding::*;
 use crate::helpers::*;
-use crate::s3::api_server::ResBody;
+use crate::s3::api_server::{ReqBody, ResBody};
 use crate::s3::encryption::EncryptionParams;
 use crate::s3::error::*;
 use crate::s3::multipart as s3_multipart;
 use crate::s3::xml as s3_xml;
@ -271,13 +272,21 @@ pub async fn handle_list_multipart_upload(
 pub async fn handle_list_parts(
 	ctx: ReqCtx,
 	req: Request<ReqBody>,
 	query: &ListPartsQuery,
 ) -> Result<Response<ResBody>, Error> {
 	debug!("ListParts {:?}", query);
 	let upload_id = s3_multipart::decode_upload_id(&query.upload_id)?;
-	let (_, _, mpu) = s3_multipart::get_upload(&ctx, &query.key, &upload_id).await?;
+	let (_, object_version, mpu) = s3_multipart::get_upload(&ctx, &query.key, &upload_id).await?;
 	let object_encryption = match object_version.state {
 		ObjectVersionState::Uploading { encryption, .. } => encryption,
 		_ => unreachable!(),
 	};
 	let encryption_res =
 		EncryptionParams::check_decrypt(&ctx.garage, req.headers(), &object_encryption);
 	let (info, next) = fetch_part_info(query, &mpu)?;
@ -296,11 +305,40 @@ pub async fn handle_list_parts(
 		is_truncated: s3_xml::Value(format!("{}", next.is_some())),
 		parts: info
 			.iter()
-			.map(|part| s3_xml::PartItem {
+			.map(|part| {
-				etag: s3_xml::Value(format!("\"{}\"", part.etag)),
+				// hide checksum if object is encrypted and the decryption
-				last_modified: s3_xml::Value(msec_to_rfc3339(part.timestamp)),
+				// keys are not provided
-				part_number: s3_xml::IntValue(part.part_number as i64),
+				let checksum = part.checksum.filter(|_| encryption_res.is_ok());
-				size: s3_xml::IntValue(part.size as i64),
+				s3_xml::PartItem {
 					etag: s3_xml::Value(format!("\"{}\"", part.etag)),
 					last_modified: s3_xml::Value(msec_to_rfc3339(part.timestamp)),
 					part_number: s3_xml::IntValue(part.part_number as i64),
 					size: s3_xml::IntValue(part.size as i64),
 					checksum_crc32: match &checksum {
 						Some(ChecksumValue::Crc32(x)) => {
 							Some(s3_xml::Value(BASE64_STANDARD.encode(&x)))
 						}
 						_ => None,
 					},
 					checksum_crc32c: match &checksum {
 						Some(ChecksumValue::Crc32c(x)) => {
 							Some(s3_xml::Value(BASE64_STANDARD.encode(&x)))
 						}
 						_ => None,
 					},
 					checksum_sha1: match &checksum {
 						Some(ChecksumValue::Sha1(x)) => {
 							Some(s3_xml::Value(BASE64_STANDARD.encode(&x)))
 						}
 						_ => None,
 					},
 					checksum_sha256: match &checksum {
 						Some(ChecksumValue::Sha256(x)) => {
 							Some(s3_xml::Value(BASE64_STANDARD.encode(&x)))
 						}
 						_ => None,
 					},
 				}
 			})
 			.collect(),
@ -346,6 +384,7 @@ struct PartInfo<'a> {
 	timestamp: u64,
 	part_number: u64,
 	size: u64,
 	checksum: Option<ChecksumValue>,
 }
 enum ExtractionResult {
@ -486,6 +525,7 @@ fn fetch_part_info<'a>(
 				timestamp: pk.timestamp,
 				etag,
 				size,
 				checksum: p.checksum,
 			};
 			match parts.last_mut() {
 				Some(lastpart) if lastpart.part_number == pk.part_number => {
@ -945,8 +985,12 @@ mod tests {
 			state: ObjectVersionState::Uploading {
 				multipart: true,
 				encryption: ObjectVersionEncryption::Plaintext {
-					headers: ObjectVersionHeaders(vec![]),
+					inner: ObjectVersionMetaInner {
 						headers: vec![],
 						checksum: None,
 					},
 				},
 				checksum_algorithm: None,
 			},
 		}
 	}
@ -1135,6 +1179,7 @@ mod tests {
 					version: uuid,
 					size: Some(3),
 					etag: Some("etag1".into()),
 					checksum: None,
 				},
 			),
 			(
@ -1146,6 +1191,7 @@ mod tests {
 					version: uuid,
 					size: None,
 					etag: None,
 					checksum: None,
 				},
 			),
 			(
@ -1157,6 +1203,7 @@ mod tests {
 					version: uuid,
 					size: Some(10),
 					etag: Some("etag2".into()),
 					checksum: None,
 				},
 			),
 			(
@ -1168,6 +1215,7 @@ mod tests {
 					version: uuid,
 					size: Some(7),
 					etag: Some("etag3".into()),
 					checksum: None,
 				},
 			),
 			(
@ -1179,6 +1227,7 @@ mod tests {
 					version: uuid,
 					size: Some(5),
 					etag: Some("etag4".into()),
 					checksum: None,
 				},
 			),
 		];
@ -1217,12 +1266,14 @@ mod tests {
 					etag: "etag1",
 					timestamp: TS,
 					part_number: 1,
-					size: 3
+					size: 3,
 					checksum: None,
 				},
 				PartInfo {
 					etag: "etag2",
 					timestamp: TS,
 					part_number: 3,
 					checksum: None,
 					size: 10
 				},
 			]
@ -1238,12 +1289,14 @@ mod tests {
 				PartInfo {
 					etag: "etag3",
 					timestamp: TS,
 					checksum: None,
 					part_number: 5,
 					size: 7
 				},
 				PartInfo {
 					etag: "etag4",
 					timestamp: TS,
 					checksum: None,
 					part_number: 8,
 					size: 5
 				},
@ -1267,24 +1320,28 @@ mod tests {
 				PartInfo {
 					etag: "etag1",
 					timestamp: TS,
 					checksum: None,
 					part_number: 1,
 					size: 3
 				},
 				PartInfo {
 					etag: "etag2",
 					timestamp: TS,
 					checksum: None,
 					part_number: 3,
 					size: 10
 				},
 				PartInfo {
 					etag: "etag3",
 					timestamp: TS,
 					checksum: None,
 					part_number: 5,
 					size: 7
 				},
 				PartInfo {
 					etag: "etag4",
 					timestamp: TS,
 					checksum: None,
 					part_number: 8,
 					size: 5
 				},
--- a/src/api/s3/mod.rs
+++ b/src/api/s3/mod.rs
@ -13,6 +13,7 @@ mod post_object;
 mod put;
 mod website;
 mod checksum;
 mod encryption;
 mod router;
 pub mod xml;
--- a/src/api/s3/multipart.rs
+++ b/src/api/s3/multipart.rs
@ -1,9 +1,10 @@
 use std::collections::HashMap;
 use std::convert::TryInto;
 use std::sync::Arc;
 use base64::prelude::*;
 use futures::prelude::*;
 use hyper::{Request, Response};
 use md5::{Digest as Md5Digest, Md5};
 use garage_table::*;
 use garage_util::data::*;
@ -16,6 +17,7 @@ use garage_model::s3::version_table::*;
 use crate::helpers::*;
 use crate::s3::api_server::{ReqBody, ResBody};
 use crate::s3::checksum::*;
 use crate::s3::encryption::EncryptionParams;
 use crate::s3::error::*;
 use crate::s3::put::*;
@ -41,10 +43,16 @@ pub async fn handle_create_multipart_upload(
 	let timestamp = next_timestamp(existing_object.as_ref());
 	let headers = get_headers(req.headers())?;
 	let meta = ObjectVersionMetaInner {
 		headers,
 		checksum: None,
 	};
 	// Determine whether object should be encrypted, and if so the key
 	let encryption = EncryptionParams::new_from_headers(&garage, req.headers())?;
-	let object_encryption = encryption.encrypt_headers(headers)?;
+	let object_encryption = encryption.encrypt_meta(meta)?;
 	let checksum_algorithm = request_checksum_algorithm(req.headers())?;
 	// Create object in object table
 	let object_version = ObjectVersion {
@ -53,6 +61,7 @@ pub async fn handle_create_multipart_upload(
 		state: ObjectVersionState::Uploading {
 			multipart: true,
 			encryption: object_encryption,
 			checksum_algorithm,
 		},
 	};
 	let object = Object::new(*bucket_id, key.to_string(), vec![object_version]);
@ -90,9 +99,13 @@ pub async fn handle_put_part(
 	let upload_id = decode_upload_id(upload_id)?;
-	let content_md5 = match req.headers().get("content-md5") {
+	let expected_checksums = ExpectedChecksums {
-		Some(x) => Some(x.to_str()?.to_string()),
+		md5: match req.headers().get("content-md5") {
-		None => None,
+			Some(x) => Some(x.to_str()?.to_string()),
 			None => None,
 		},
 		sha256: content_sha256,
 		extra: request_checksum_value(req.headers())?,
 	};
 	// Read first chuck, and at the same time try to get object to see if it exists
@ -106,8 +119,12 @@ pub async fn handle_put_part(
 		futures::try_join!(get_upload(&ctx, &key, &upload_id), chunker.next(),)?;
 	// Check encryption params
-	let object_encryption = match object_version.state {
+	let (object_encryption, checksum_algorithm) = match object_version.state {
-		ObjectVersionState::Uploading { encryption, .. } => encryption,
+		ObjectVersionState::Uploading {
 			encryption,
 			checksum_algorithm,
 			..
 		} => (encryption, checksum_algorithm),
 		_ => unreachable!(),
 	};
 	let (encryption, _) =
@ -138,7 +155,9 @@ pub async fn handle_put_part(
 		mpu_part_key,
 		MpuPart {
 			version: version_uuid,
 			// all these are filled in later, at the end of this function
 			etag: None,
 			checksum: None,
 			size: None,
 		},
 	);
@ -152,32 +171,31 @@ pub async fn handle_put_part(
 	garage.version_table.insert(&version).await?;
 	// Copy data to version
-	let (total_size, data_md5sum, data_sha256sum, _) = read_and_put_blocks(
+	let checksummer =
 		Checksummer::init(&expected_checksums, !encryption.is_encrypted()).add(checksum_algorithm);
 	let (total_size, checksums, _) = read_and_put_blocks(
 		&ctx,
 		&version,
 		encryption,
 		part_number,
 		first_block,
 		&mut chunker,
 		checksummer,
 	)
 	.await?;
 	// Verify that checksums map
-	ensure_checksum_matches(
+	checksums.verify(&expected_checksums)?;
 		&data_md5sum,
 		data_sha256sum,
 		content_md5.as_deref(),
 		content_sha256,
 	)?;
 	// Store part etag in version
-	let etag = encryption.etag_from_md5(&data_md5sum);
+	let etag = encryption.etag_from_md5(&checksums.md5);
 	mpu.parts.put(
 		mpu_part_key,
 		MpuPart {
 			version: version_uuid,
 			etag: Some(etag.clone()),
 			checksum: checksums.extract(checksum_algorithm),
 			size: Some(total_size),
 		},
 	);
@ -189,6 +207,7 @@ pub async fn handle_put_part(
 	let mut resp = Response::builder().header("ETag", format!("\"{}\"", etag));
 	encryption.add_response_headers(&mut resp);
 	let resp = add_checksum_response_headers(&expected_checksums.extra, resp);
 	Ok(resp.body(empty_body())?)
 }
@ -236,10 +255,11 @@ pub async fn handle_complete_multipart_upload(
 		bucket_name,
 		..
 	} = &ctx;
 	let (req_head, req_body) = req.into_parts();
-	let body = http_body_util::BodyExt::collect(req.into_body())
+	let expected_checksum = request_checksum_value(&req_head.headers)?;
-		.await?
+
-		.to_bytes();
+	let body = http_body_util::BodyExt::collect(req_body).await?.to_bytes();
 	if let Some(content_sha256) = content_sha256 {
 		verify_signed_content(content_sha256, &body[..])?;
@ -263,8 +283,12 @@ pub async fn handle_complete_multipart_upload(
 		return Err(Error::bad_request("No data was uploaded"));
 	}
-	let object_encryption = match object_version.state {
+	let (object_encryption, checksum_algorithm) = match object_version.state {
-		ObjectVersionState::Uploading { encryption, .. } => encryption,
+		ObjectVersionState::Uploading {
 			encryption,
 			checksum_algorithm,
 			..
 		} => (encryption, checksum_algorithm),
 		_ => unreachable!(),
 	};
@ -292,6 +316,13 @@ pub async fn handle_complete_multipart_upload(
 	for req_part in body_list_of_parts.iter() {
 		match have_parts.get(&req_part.part_number) {
 			Some(part) if part.etag.as_ref() == Some(&req_part.etag) && part.size.is_some() => {
 				// alternative version: if req_part.checksum.is_some() && part.checksum != req_part.checksum {
 				if part.checksum != req_part.checksum {
 					return Err(Error::InvalidDigest(format!(
 						"Invalid checksum for part {}: in request = {:?}, uploaded part = {:?}",
 						req_part.part_number, req_part.checksum, part.checksum
 					)));
 				}
 				parts.push(*part)
 			}
 			_ => return Err(Error::InvalidPart),
@ -339,18 +370,23 @@ pub async fn handle_complete_multipart_upload(
 	});
 	garage.block_ref_table.insert_many(block_refs).await?;
-	// Calculate etag of final object
+	// Calculate checksum and etag of final object
 	// To understand how etags are calculated, read more here:
 	// https://docs.aws.amazon.com/AmazonS3/latest/userguide/checking-object-integrity.html
 	// https://teppen.io/2018/06/23/aws_s3_etags/
-	let mut etag_md5_hasher = Md5::new();
+	let mut checksummer = MultipartChecksummer::init(checksum_algorithm);
 	for part in parts.iter() {
-		etag_md5_hasher.update(part.etag.as_ref().unwrap().as_bytes());
+		checksummer.update(part.etag.as_ref().unwrap(), part.checksum)?;
 	}
-	let etag = format!(
+	let (checksum_md5, checksum_extra) = checksummer.finalize();
-		"{}-{}",
+
-		hex::encode(etag_md5_hasher.finalize()),
+	if expected_checksum.is_some() && checksum_extra != expected_checksum {
-		parts.len()
+		return Err(Error::InvalidDigest(
-	);
+			"Failed to validate x-amz-checksum-*".into(),
 		));
 	}
 	let etag = format!("{}-{}", hex::encode(&checksum_md5[..]), parts.len());
 	// Calculate total size of final object
 	let total_size = parts.iter().map(|x| x.size.unwrap()).sum();
@ -363,6 +399,20 @@ pub async fn handle_complete_multipart_upload(
 		return Err(e);
 	}
 	// If there is a checksum algorithm, update metadata with checksum
 	let object_encryption = match checksum_algorithm {
 		None => object_encryption,
 		Some(_) => {
 			let (encryption, meta) =
 				EncryptionParams::check_decrypt(&garage, &req_head.headers, &object_encryption)?;
 			let new_meta = ObjectVersionMetaInner {
 				headers: meta.into_owned().headers,
 				checksum: checksum_extra,
 			};
 			encryption.encrypt_meta(new_meta)?
 		}
 	};
 	// Write final object version
 	object_version.state = ObjectVersionState::Complete(ObjectVersionData::FirstBlock(
 		ObjectVersionMeta {
@ -383,10 +433,28 @@ pub async fn handle_complete_multipart_upload(
 		bucket: s3_xml::Value(bucket_name.to_string()),
 		key: s3_xml::Value(key),
 		etag: s3_xml::Value(format!("\"{}\"", etag)),
 		checksum_crc32: match &checksum_extra {
 			Some(ChecksumValue::Crc32(x)) => Some(s3_xml::Value(BASE64_STANDARD.encode(&x))),
 			_ => None,
 		},
 		checksum_crc32c: match &checksum_extra {
 			Some(ChecksumValue::Crc32c(x)) => Some(s3_xml::Value(BASE64_STANDARD.encode(&x))),
 			_ => None,
 		},
 		checksum_sha1: match &checksum_extra {
 			Some(ChecksumValue::Sha1(x)) => Some(s3_xml::Value(BASE64_STANDARD.encode(&x))),
 			_ => None,
 		},
 		checksum_sha256: match &checksum_extra {
 			Some(ChecksumValue::Sha256(x)) => Some(s3_xml::Value(BASE64_STANDARD.encode(&x))),
 			_ => None,
 		},
 	};
 	let xml = s3_xml::to_xml_with_header(&result)?;
-	Ok(Response::new(string_body(xml)))
+	let resp = Response::builder();
 	let resp = add_checksum_response_headers(&expected_checksum, resp);
 	Ok(resp.body(string_body(xml))?)
 }
 pub async fn handle_abort_multipart_upload(
@ -455,6 +523,7 @@ pub fn decode_upload_id(id: &str) -> Result<Uuid, Error> {
 struct CompleteMultipartUploadPart {
 	etag: String,
 	part_number: u64,
 	checksum: Option<ChecksumValue>,
 }
 fn parse_complete_multipart_upload_body(
@ -480,9 +549,41 @@ fn parse_complete_multipart_upload_body(
 				.children()
 				.find(|e| e.has_tag_name("PartNumber"))?
 				.text()?;
 			let checksum = if let Some(crc32) =
 				item.children().find(|e| e.has_tag_name("ChecksumCRC32"))
 			{
 				Some(ChecksumValue::Crc32(
 					BASE64_STANDARD.decode(crc32.text()?).ok()?[..]
 						.try_into()
 						.ok()?,
 				))
 			} else if let Some(crc32c) = item.children().find(|e| e.has_tag_name("ChecksumCRC32C"))
 			{
 				Some(ChecksumValue::Crc32c(
 					BASE64_STANDARD.decode(crc32c.text()?).ok()?[..]
 						.try_into()
 						.ok()?,
 				))
 			} else if let Some(sha1) = item.children().find(|e| e.has_tag_name("ChecksumSHA1")) {
 				Some(ChecksumValue::Sha1(
 					BASE64_STANDARD.decode(sha1.text()?).ok()?[..]
 						.try_into()
 						.ok()?,
 				))
 			} else if let Some(sha256) = item.children().find(|e| e.has_tag_name("ChecksumSHA256"))
 			{
 				Some(ChecksumValue::Sha256(
 					BASE64_STANDARD.decode(sha256.text()?).ok()?[..]
 						.try_into()
 						.ok()?,
 				))
 			} else {
 				None
 			};
 			parts.push(CompleteMultipartUploadPart {
 				etag: etag.trim_matches('"').to_string(),
 				part_number: part_number.parse().ok()?,
 				checksum,
 			});
 		} else {
 			return None;
--- a/src/api/s3/post_object.rs
+++ b/src/api/s3/post_object.rs
@ -14,13 +14,15 @@ use multer::{Constraints, Multipart, SizeLimit};
 use serde::Deserialize;
 use garage_model::garage::Garage;
 use garage_model::s3::object_table::*;
 use crate::helpers::*;
 use crate::s3::api_server::ResBody;
 use crate::s3::checksum::*;
 use crate::s3::cors::*;
 use crate::s3::encryption::EncryptionParams;
 use crate::s3::error::*;
-use crate::s3::put::{get_headers, save_stream};
+use crate::s3::put::{get_headers, save_stream, ChecksumMode};
 use crate::s3::xml as s3_xml;
 use crate::signature::payload::{verify_v4, Authorization};
@ -98,10 +100,6 @@ pub async fn handle_post_object(
 		.ok_or_bad_request("No policy was provided")?
 		.to_str()?;
 	let authorization = Authorization::parse_form(&params)?;
 	let content_md5 = params
 		.get("content-md5")
 		.map(HeaderValue::to_str)
 		.transpose()?;
 	let key = if key.contains("${filename}") {
 		// if no filename is provided, don't replace. This matches the behavior of AWS.
@ -226,6 +224,21 @@ pub async fn handle_post_object(
 	let headers = get_headers(&params)?;
 	let expected_checksums = ExpectedChecksums {
 		md5: params
 			.get("content-md5")
 			.map(HeaderValue::to_str)
 			.transpose()?
 			.map(str::to_string),
 		sha256: None,
 		extra: request_checksum_algorithm_value(&params)?,
 	};
 	let meta = ObjectVersionMetaInner {
 		headers,
 		checksum: expected_checksums.extra,
 	};
 	let encryption = EncryptionParams::new_from_headers(&garage, &params)?;
 	let stream = file_field.map(|r| r.map_err(Into::into));
@ -239,12 +252,11 @@ pub async fn handle_post_object(
 	let res = save_stream(
 		&ctx,
-		headers,
+		meta,
 		encryption,
 		StreamLimiter::new(stream, conditions.content_length),
 		&key,
-		content_md5.map(str::to_string),
+		ChecksumMode::Verify(&expected_checksums),
 		None,
 	)
 	.await?;
--- a/src/api/s3/put.rs
+++ b/src/api/s3/put.rs
@ -1,12 +1,9 @@
 use std::collections::HashMap;
 use std::sync::Arc;
 use base64::prelude::*;
 use futures::prelude::*;
 use futures::stream::FuturesOrdered;
 use futures::try_join;
 use md5::{digest::generic_array::*, Digest as Md5Digest, Md5};
 use sha2::Sha256;
 use tokio::sync::mpsc;
@ -22,7 +19,6 @@ use opentelemetry::{
 use garage_net::bytes_buf::BytesBuf;
 use garage_rpc::rpc_helper::OrderTag;
 use garage_table::*;
 use garage_util::async_hash::*;
 use garage_util::data::*;
 use garage_util::error::Error as GarageError;
 use garage_util::time::*;
@ -36,16 +32,22 @@ use garage_model::s3::version_table::*;
 use crate::helpers::*;
 use crate::s3::api_server::{ReqBody, ResBody};
 use crate::s3::checksum::*;
 use crate::s3::encryption::EncryptionParams;
 use crate::s3::error::*;
 const PUT_BLOCKS_MAX_PARALLEL: usize = 3;
-pub struct SaveStreamResult {
+pub(crate) struct SaveStreamResult {
-	pub version_uuid: Uuid,
+	pub(crate) version_uuid: Uuid,
-	pub version_timestamp: u64,
+	pub(crate) version_timestamp: u64,
 	/// Etag WITHOUT THE QUOTES (just the hex value)
-	pub etag: String,
+	pub(crate) etag: String,
 }
 pub(crate) enum ChecksumMode<'a> {
 	Verify(&'a ExpectedChecksums),
 	Calculate(Option<ChecksumAlgorithm>),
 }
 pub async fn handle_put(
@ -58,24 +60,32 @@ pub async fn handle_put(
 	let headers = get_headers(req.headers())?;
 	debug!("Object headers: {:?}", headers);
 	let expected_checksums = ExpectedChecksums {
 		md5: match req.headers().get("content-md5") {
 			Some(x) => Some(x.to_str()?.to_string()),
 			None => None,
 		},
 		sha256: content_sha256,
 		extra: request_checksum_value(req.headers())?,
 	};
 	let meta = ObjectVersionMetaInner {
 		headers,
 		checksum: expected_checksums.extra,
 	};
 	// Determine whether object should be encrypted, and if so the key
 	let encryption = EncryptionParams::new_from_headers(&ctx.garage, req.headers())?;
 	let content_md5 = match req.headers().get("content-md5") {
 		Some(x) => Some(x.to_str()?.to_string()),
 		None => None,
 	};
 	let stream = body_stream(req.into_body());
 	let res = save_stream(
 		&ctx,
-		headers,
+		meta,
 		encryption,
 		stream,
 		key,
-		content_md5,
+		ChecksumMode::Verify(&expected_checksums),
 		content_sha256,
 	)
 	.await?;
@ -83,17 +93,17 @@ pub async fn handle_put(
 		.header("x-amz-version-id", hex::encode(res.version_uuid))
 		.header("ETag", format!("\"{}\"", res.etag));
 	encryption.add_response_headers(&mut resp);
 	let resp = add_checksum_response_headers(&expected_checksums.extra, resp);
 	Ok(resp.body(empty_body())?)
 }
 pub(crate) async fn save_stream<S: Stream<Item = Result<Bytes, Error>> + Unpin>(
 	ctx: &ReqCtx,
-	headers: ObjectVersionHeaders,
+	mut meta: ObjectVersionMetaInner,
 	encryption: EncryptionParams,
 	body: S,
 	key: &String,
-	content_md5: Option<String>,
+	checksum_mode: ChecksumMode<'_>,
 	content_sha256: Option<FixedBytes32>,
 ) -> Result<SaveStreamResult, Error> {
 	let ReqCtx {
 		garage, bucket_id, ..
@ -107,32 +117,36 @@ pub(crate) async fn save_stream<S: Stream<Item = Result<Bytes, Error>> + Unpin>(
 	let first_block = first_block_opt.unwrap_or_default();
 	let object_encryption = encryption.encrypt_headers(headers)?;
 	// Generate identity of new version
 	let version_uuid = gen_uuid();
 	let version_timestamp = next_timestamp(existing_object.as_ref());
 	let mut checksummer = match checksum_mode {
 		ChecksumMode::Verify(expected) => Checksummer::init(expected, !encryption.is_encrypted()),
 		ChecksumMode::Calculate(algo) => {
 			Checksummer::init(&Default::default(), !encryption.is_encrypted()).add(algo)
 		}
 	};
 	// If body is small enough, store it directly in the object table
 	// as "inline data". We can then return immediately.
 	if first_block.len() < INLINE_THRESHOLD {
-		let mut md5sum = Md5::new();
+		checksummer.update(&first_block);
-		md5sum.update(&first_block[..]);
+		let checksums = checksummer.finalize();
 		let data_md5sum = md5sum.finalize();
-		let data_sha256sum = sha256sum(&first_block[..]);
+		match checksum_mode {
-
+			ChecksumMode::Verify(expected) => {
-		ensure_checksum_matches(
+				checksums.verify(&expected)?;
-			&data_md5sum,
+			}
-			data_sha256sum,
+			ChecksumMode::Calculate(algo) => {
-			content_md5.as_deref(),
+				meta.checksum = checksums.extract(algo);
-			content_sha256,
+			}
-		)?;
+		};
 		let size = first_block.len() as u64;
 		check_quotas(ctx, size, existing_object.as_ref()).await?;
-		let etag = encryption.etag_from_md5(&data_md5sum);
+		let etag = encryption.etag_from_md5(&checksums.md5);
 		let inline_data = encryption.encrypt_blob(&first_block)?.to_vec();
 		let object_version = ObjectVersion {
@ -140,7 +154,7 @@ pub(crate) async fn save_stream<S: Stream<Item = Result<Bytes, Error>> + Unpin>(
 			timestamp: version_timestamp,
 			state: ObjectVersionState::Complete(ObjectVersionData::Inline(
 				ObjectVersionMeta {
-					encryption: object_encryption,
+					encryption: encryption.encrypt_meta(meta)?,
 					size,
 					etag: etag.clone(),
 				},
@ -175,7 +189,8 @@ pub(crate) async fn save_stream<S: Stream<Item = Result<Bytes, Error>> + Unpin>(
 		uuid: version_uuid,
 		timestamp: version_timestamp,
 		state: ObjectVersionState::Uploading {
-			encryption: object_encryption.clone(),
+			encryption: encryption.encrypt_meta(meta.clone())?,
 			checksum_algorithm: None, // don't care; overwritten later
 			multipart: false,
 		},
 	};
@ -196,25 +211,37 @@ pub(crate) async fn save_stream<S: Stream<Item = Result<Bytes, Error>> + Unpin>(
 	);
 	garage.version_table.insert(&version).await?;
-	// Transfer data and verify checksum
+	// Transfer data
-	let (total_size, data_md5sum, data_sha256sum, first_block_hash) =
+	let (total_size, checksums, first_block_hash) = read_and_put_blocks(
-		read_and_put_blocks(ctx, &version, encryption, 1, first_block, &mut chunker).await?;
+		ctx,
 		&version,
 		encryption,
 		1,
 		first_block,
 		&mut chunker,
 		checksummer,
 	)
 	.await?;
-	ensure_checksum_matches(
+	// Verify checksums are ok / add calculated checksum to metadata
-		&data_md5sum,
+	match checksum_mode {
-		data_sha256sum,
+		ChecksumMode::Verify(expected) => {
-		content_md5.as_deref(),
+			checksums.verify(&expected)?;
-		content_sha256,
+		}
-	)?;
+		ChecksumMode::Calculate(algo) => {
 			meta.checksum = checksums.extract(algo);
 		}
 	};
 	// Verify quotas are respsected
 	check_quotas(ctx, total_size, existing_object.as_ref()).await?;
 	// Save final object state, marked as Complete
-	let etag = encryption.etag_from_md5(&data_md5sum);
+	let etag = encryption.etag_from_md5(&checksums.md5);
 	object_version.state = ObjectVersionState::Complete(ObjectVersionData::FirstBlock(
 		ObjectVersionMeta {
-			encryption: object_encryption,
+			encryption: encryption.encrypt_meta(meta)?,
 			size: total_size,
 			etag: etag.clone(),
 		},
@ -234,33 +261,6 @@ pub(crate) async fn save_stream<S: Stream<Item = Result<Bytes, Error>> + Unpin>(
 	})
 }
 /// Validate MD5 sum against content-md5 header
 /// and sha256sum against signed content-sha256
 pub(crate) fn ensure_checksum_matches(
 	data_md5sum: &[u8],
 	data_sha256sum: garage_util::data::FixedBytes32,
 	content_md5: Option<&str>,
 	content_sha256: Option<garage_util::data::FixedBytes32>,
 ) -> Result<(), Error> {
 	if let Some(expected_sha256) = content_sha256 {
 		if expected_sha256 != data_sha256sum {
 			return Err(Error::bad_request(
 				"Unable to validate x-amz-content-sha256",
 			));
 		} else {
 			trace!("Successfully validated x-amz-content-sha256");
 		}
 	}
 	if let Some(expected_md5) = content_md5 {
 		if expected_md5.trim_matches('"') != BASE64_STANDARD.encode(data_md5sum) {
 			return Err(Error::bad_request("Unable to validate content-md5"));
 		} else {
 			trace!("Successfully validated content-md5");
 		}
 	}
 	Ok(())
 }
 /// Check that inserting this object with this size doesn't exceed bucket quotas
 pub(crate) async fn check_quotas(
 	ctx: &ReqCtx,
@ -332,7 +332,8 @@ pub(crate) async fn read_and_put_blocks<S: Stream<Item = Result<Bytes, Error>> +
 	part_number: u64,
 	first_block: Bytes,
 	chunker: &mut StreamChunker<S>,
-) -> Result<(u64, GenericArray<u8, typenum::U16>, Hash, Hash), Error> {
+	checksummer: Checksummer,
 ) -> Result<(u64, Checksums, Hash), Error> {
 	let tracer = opentelemetry::global::tracer("garage");
 	let (block_tx, mut block_rx) = mpsc::channel::<Result<Bytes, Error>>(2);
@ -360,20 +361,20 @@ pub(crate) async fn read_and_put_blocks<S: Stream<Item = Result<Bytes, Error>> +
 	let (block_tx2, mut block_rx2) = mpsc::channel::<Result<Bytes, Error>>(1);
 	let hash_stream = async {
-		let md5hasher = AsyncHasher::<Md5>::new();
+		let mut checksummer = checksummer;
 		let sha256hasher = AsyncHasher::<Sha256>::new();
 		while let Some(next) = block_rx.recv().await {
 			match next {
 				Ok(block) => {
 					block_tx2.send(Ok(block.clone())).await?;
-					futures::future::join(
+					checksummer = tokio::task::spawn_blocking(move || {
-						md5hasher.update(block.clone()),
+						checksummer.update(&block);
-						sha256hasher.update(block.clone()),
+						checksummer
-					)
+					})
 					.with_context(Context::current_with_span(
 						tracer.start("Hash block (md5, sha256)"),
 					))
-					.await;
+					.await
 					.unwrap()
 				}
 				Err(e) => {
 					block_tx2.send(Err(e)).await?;
@ -382,10 +383,7 @@ pub(crate) async fn read_and_put_blocks<S: Stream<Item = Result<Bytes, Error>> +
 			}
 		}
 		drop(block_tx2);
-		Ok::<_, mpsc::error::SendError<_>>(futures::join!(
+		Ok::<_, mpsc::error::SendError<_>>(checksummer)
 			md5hasher.finalize(),
 			sha256hasher.finalize()
 		))
 	};
 	let (block_tx3, mut block_rx3) = mpsc::channel::<Result<(Bytes, u64, Hash), Error>>(1);
@ -395,33 +393,28 @@ pub(crate) async fn read_and_put_blocks<S: Stream<Item = Result<Bytes, Error>> +
 			match next {
 				Ok(block) => {
 					let unencrypted_len = block.len() as u64;
-					let block = if encryption.is_encrypted() {
+					let res = tokio::task::spawn_blocking(move || {
-						let res =
+						let block = encryption.encrypt_block(block)?;
-							tokio::task::spawn_blocking(move || encryption.encrypt_block(block))
+						let hash = blake2sum(&block);
-								.with_context(Context::current_with_span(
+						Ok((block, hash))
-									tracer.start("Encrypt block"),
+					})
-								))
+					.with_context(Context::current_with_span(
-								.await
+						tracer.start("Encrypt and hash (blake2) block"),
-								.unwrap();
+					))
-						match res {
+					.await
-							Ok(b) => b,
+					.unwrap();
-							Err(e) => {
+					match res {
-								block_tx3.send(Err(e)).await?;
+						Ok((block, hash)) => {
-								break;
+							if first_block_hash.is_none() {
 								first_block_hash = Some(hash);
 							}
 							block_tx3.send(Ok((block, unencrypted_len, hash))).await?;
 						}
 						Err(e) => {
 							block_tx3.send(Err(e)).await?;
 							break;
 						}
 					} else {
 						block
 					};
 					let hash = async_blake2sum(block.clone())
 						.with_context(Context::current_with_span(
 							tracer.start("Hash block (blake2)"),
 						))
 						.await;
 					if first_block_hash.is_none() {
 						first_block_hash = Some(hash);
 					}
 					block_tx3.send(Ok((block, unencrypted_len, hash))).await?;
 				}
 				Err(e) => {
 					block_tx3.send(Err(e)).await?;
@ -493,12 +486,10 @@ pub(crate) async fn read_and_put_blocks<S: Stream<Item = Result<Bytes, Error>> +
 	let total_size = final_result?;
 	// unwrap here is ok, because if hasher failed, it is because something failed
 	// later in the pipeline which already caused a return at the ? on previous line
 	let (data_md5sum, data_sha256sum) = stream_hash_result.unwrap();
 	let first_block_hash = block_hash_result.unwrap();
 	let checksums = stream_hash_result.unwrap().finalize();
-	let data_sha256sum = Hash::try_from(&data_sha256sum[..]).unwrap();
+	Ok((total_size, checksums, first_block_hash))
 	Ok((total_size, data_md5sum, data_sha256sum, first_block_hash))
 }
 async fn put_block_and_meta(
@ -609,7 +600,7 @@ impl Drop for InterruptedCleanup {
 // ============ helpers ============
-pub(crate) fn get_headers(headers: &HeaderMap<HeaderValue>) -> Result<ObjectVersionHeaders, Error> {
+pub(crate) fn get_headers(headers: &HeaderMap<HeaderValue>) -> Result<HeaderList, Error> {
 	let mut ret = Vec::new();
 	// Preserve standard headers
@ -637,7 +628,7 @@ pub(crate) fn get_headers(headers: &HeaderMap<HeaderValue>) -> Result<ObjectVers
 		}
 	}
-	Ok(ObjectVersionHeaders(ret))
+	Ok(ret)
 }
 pub(crate) fn next_timestamp(existing_object: Option<&Object>) -> u64 {
--- a/src/api/s3/xml.rs
+++ b/src/api/s3/xml.rs
@ -131,6 +131,14 @@ pub struct CompleteMultipartUploadResult {
 	pub key: Value,
 	#[serde(rename = "ETag")]
 	pub etag: Value,
 	#[serde(rename = "ChecksumCRC32")]
 	pub checksum_crc32: Option<Value>,
 	#[serde(rename = "ChecksumCRC32C")]
 	pub checksum_crc32c: Option<Value>,
 	#[serde(rename = "ChecksumSHA1")]
 	pub checksum_sha1: Option<Value>,
 	#[serde(rename = "ChecksumSHA256")]
 	pub checksum_sha256: Option<Value>,
 }
 #[derive(Debug, Serialize, PartialEq, Eq)]
@ -197,6 +205,14 @@ pub struct PartItem {
 	pub part_number: IntValue,
 	#[serde(rename = "Size")]
 	pub size: IntValue,
 	#[serde(rename = "ChecksumCRC32")]
 	pub checksum_crc32: Option<Value>,
 	#[serde(rename = "ChecksumCRC32C")]
 	pub checksum_crc32c: Option<Value>,
 	#[serde(rename = "ChecksumSHA1")]
 	pub checksum_sha1: Option<Value>,
 	#[serde(rename = "ChecksumSHA256")]
 	pub checksum_sha256: Option<Value>,
 }
 #[derive(Debug, Serialize, PartialEq, Eq)]
@ -500,6 +516,10 @@ mod tests {
 			bucket: Value("mybucket".to_string()),
 			key: Value("a/plop".to_string()),
 			etag: Value("\"3858f62230ac3c915f300c664312c11f-9\"".to_string()),
 			checksum_crc32: None,
 			checksum_crc32c: None,
 			checksum_sha1: Some(Value("ZJAnHyG8PeKz9tI8UTcHrJos39A=".into())),
 			checksum_sha256: None,
 		};
 		assert_eq!(
 			to_xml_with_header(&result)?,
@ -509,6 +529,7 @@ mod tests {
 	<Bucket>mybucket</Bucket>\
 	<Key>a/plop</Key>\
 	<ETag>&quot;3858f62230ac3c915f300c664312c11f-9&quot;</ETag>\
    <ChecksumSHA1>ZJAnHyG8PeKz9tI8UTcHrJos39A=</ChecksumSHA1>\
 </CompleteMultipartUploadResult>"
 		);
 		Ok(())
@ -780,12 +801,22 @@ mod tests {
 					last_modified: Value("2010-11-10T20:48:34.000Z".to_string()),
 					part_number: IntValue(2),
 					size: IntValue(10485760),
 					checksum_crc32: None,
 					checksum_crc32c: None,
 					checksum_sha256: Some(Value(
 						"5RQ3A5uk0w7ojNjvegohch4JRBBGN/cLhsNrPzfv/hA=".into(),
 					)),
 					checksum_sha1: None,
 				},
 				PartItem {
 					etag: Value("\"aaaa18db4cc2f85cedef654fccc4a4x8\"".to_string()),
 					last_modified: Value("2010-11-10T20:48:33.000Z".to_string()),
 					part_number: IntValue(3),
 					size: IntValue(10485760),
 					checksum_sha256: None,
 					checksum_crc32c: None,
 					checksum_crc32: Some(Value("ZJAnHyG8=".into())),
 					checksum_sha1: None,
 				},
 			],
 			initiator: Initiator {
@ -820,12 +851,14 @@ mod tests {
    <LastModified>2010-11-10T20:48:34.000Z</LastModified>\
    <PartNumber>2</PartNumber>\
    <Size>10485760</Size>\
    <ChecksumSHA256>5RQ3A5uk0w7ojNjvegohch4JRBBGN/cLhsNrPzfv/hA=</ChecksumSHA256>\
  </Part>\
  <Part>\
    <ETag>&quot;aaaa18db4cc2f85cedef654fccc4a4x8&quot;</ETag>\
    <LastModified>2010-11-10T20:48:33.000Z</LastModified>\
    <PartNumber>3</PartNumber>\
    <Size>10485760</Size>\
    <ChecksumCRC32>ZJAnHyG8=</ChecksumCRC32>\
  </Part>\
  <Initiator>\
      <DisplayName>umat-user-11116a31-17b5-4fb7-9df5-b288870f11xx</DisplayName>\
--- a/src/block/Cargo.toml
+++ b/src/block/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage_block"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>"]
 edition = "2018"
 license = "AGPL-3.0"
--- a/src/block/layout.rs
+++ b/src/block/layout.rs
@ -1,3 +1,4 @@
 use std::collections::HashMap;
 use std::path::PathBuf;
 use serde::{Deserialize, Serialize};
@ -13,9 +14,12 @@ const DRIVE_NPART: usize = 1024;
 const HASH_DRIVE_BYTES: (usize, usize) = (2, 3);
 const MARKER_FILE_NAME: &str = "garage-marker";
 #[derive(Serialize, Deserialize, Debug, Clone)]
 pub(crate) struct DataLayout {
 	pub(crate) data_dirs: Vec<DataDir>,
 	markers: HashMap<PathBuf, String>,
 	/// Primary storage location (index in data_dirs) for each partition
 	/// = the location where the data is supposed to be, blocks are always
@ -75,16 +79,17 @@ impl DataLayout {
 		Ok(Self {
 			data_dirs,
 			markers: HashMap::new(),
 			part_prim,
 			part_sec,
 		})
 	}
-	pub(crate) fn update(&mut self, dirs: &DataDirEnum) -> Result<(), Error> {
+	pub(crate) fn update(self, dirs: &DataDirEnum) -> Result<Self, Error> {
 		// Make list of new data directories, exit if nothing changed
 		let data_dirs = make_data_dirs(dirs)?;
 		if data_dirs == self.data_dirs {
-			return Ok(());
+			return Ok(self);
 		}
 		let total_cap = data_dirs.iter().filter_map(|x| x.capacity()).sum::<u64>();
@ -214,11 +219,43 @@ impl DataLayout {
 		}
 		// Apply newly generated config
-		*self = Self {
+		Ok(Self {
 			data_dirs,
 			markers: self.markers,
 			part_prim,
 			part_sec,
-		};
+		})
 	}
 	pub(crate) fn check_markers(&mut self) -> Result<(), Error> {
 		let data_dirs = &self.data_dirs;
 		self.markers
 			.retain(|k, _| data_dirs.iter().any(|x| x.path == *k));
 		for dir in self.data_dirs.iter() {
 			let mut marker_path = dir.path.clone();
 			marker_path.push(MARKER_FILE_NAME);
 			let existing_marker = std::fs::read_to_string(&marker_path).ok();
 			match (existing_marker, self.markers.get(&dir.path)) {
 				(Some(m1), Some(m2)) => {
 					if m1 != *m2 {
 						return Err(Error::Message(format!("Mismatched content for marker file `{}` in data directory `{}`. If you moved data directories or changed their mountpoints, you should remove the `data_layout` file in Garage's metadata directory and restart Garage.", MARKER_FILE_NAME, dir.path.display())));
 					}
 				}
 				(None, Some(_)) => {
 					return Err(Error::Message(format!("Could not find expected marker file `{}` in data directory `{}`, make sure this data directory is mounted correctly.", MARKER_FILE_NAME, dir.path.display())));
 				}
 				(Some(mkr), None) => {
 					self.markers.insert(dir.path.clone(), mkr);
 				}
 				(None, None) => {
 					let mkr = hex::encode(garage_util::data::gen_uuid().as_slice());
 					std::fs::write(&marker_path, &mkr)?;
 					self.markers.insert(dir.path.clone(), mkr);
 				}
 			}
 		}
 		Ok(())
 	}
@ -255,6 +292,7 @@ impl DataLayout {
 	pub(crate) fn without_secondary_locations(&self) -> Self {
 		Self {
 			data_dirs: self.data_dirs.clone(),
 			markers: self.markers.clone(),
 			part_prim: self.part_prim.clone(),
 			part_sec: self.part_sec.iter().map(|_| vec![]).collect::<Vec<_>>(),
 		}
@ -322,14 +360,12 @@ fn make_data_dirs(dirs: &DataDirEnum) -> Result<Vec<DataDir>, Error> {
 fn dir_not_empty(path: &PathBuf) -> Result<bool, Error> {
 	for entry in std::fs::read_dir(&path)? {
 		let dir = entry?;
-		if dir.file_type()?.is_dir()
+		let ft = dir.file_type()?;
-			&& dir
+		let name = dir.file_name().into_string().ok();
-				.file_name()
+		if ft.is_file() && name.as_deref() == Some(MARKER_FILE_NAME) {
-				.into_string()
+			return Ok(true);
-				.ok()
+		}
-				.and_then(|hex| hex::decode(&hex).ok())
+		if ft.is_dir() && name.and_then(|hex| hex::decode(&hex).ok()).is_some() {
 				.is_some()
 		{
 			return Ok(true);
 		}
 	}
--- a/src/block/lib.rs
+++ b/src/block/lib.rs
@ -11,3 +11,4 @@ mod metrics;
 mod rc;
 pub use block::zstd_encode;
 pub use rc::CalculateRefcount;
--- a/src/block/manager.rs
+++ b/src/block/manager.rs
@ -1,3 +1,4 @@
 use std::convert::TryInto;
 use std::path::PathBuf;
 use std::sync::Arc;
 use std::time::Duration;
@ -10,7 +11,7 @@ use serde::{Deserialize, Serialize};
 use tokio::fs;
 use tokio::io::{AsyncReadExt, AsyncWriteExt, BufReader};
-use tokio::sync::{mpsc, Mutex, MutexGuard};
+use tokio::sync::{mpsc, Mutex, MutexGuard, Semaphore};
 use opentelemetry::{
 	trace::{FutureExt as OtelFutureExt, TraceContextExt, Tracer},
@ -22,7 +23,7 @@ use garage_net::stream::{read_stream_to_end, stream_asyncread, ByteStream};
 use garage_db as db;
 use garage_util::background::{vars, BackgroundRunner};
-use garage_util::config::DataDirEnum;
+use garage_util::config::Config;
 use garage_util::data::*;
 use garage_util::error::*;
 use garage_util::metrics::RecordDuration;
@ -84,14 +85,16 @@ pub struct BlockManager {
 	data_fsync: bool,
 	compression_level: Option<i32>,
 	disable_scrub: bool,
 	mutation_lock: Vec<Mutex<BlockManagerLocked>>,
-	pub(crate) rc: BlockRc,
+	pub rc: BlockRc,
 	pub resync: BlockResyncManager,
 	pub(crate) system: Arc<System>,
 	pub(crate) endpoint: Arc<Endpoint<BlockRpc, Self>>,
 	buffer_kb_semaphore: Arc<Semaphore>,
 	pub(crate) metrics: BlockManagerMetrics,
@ -119,24 +122,22 @@ struct BlockManagerLocked();
 impl BlockManager {
 	pub fn new(
 		db: &db::Db,
-		data_dir: DataDirEnum,
+		config: &Config,
 		data_fsync: bool,
 		compression_level: Option<i32>,
 		replication: TableShardedReplication,
 		system: Arc<System>,
 	) -> Result<Arc<Self>, Error> {
 		// Load or compute layout, i.e. assignment of data blocks to the different data directories
 		let data_layout_persister: Persister<DataLayout> =
 			Persister::new(&system.metadata_dir, "data_layout");
-		let data_layout = match data_layout_persister.load() {
+		let mut data_layout = match data_layout_persister.load() {
-			Ok(mut layout) => {
+			Ok(layout) => layout
-				layout
+				.update(&config.data_dir)
-					.update(&data_dir)
+				.ok_or_message("invalid data_dir config")?,
-					.ok_or_message("invalid data_dir config")?;
+			Err(_) => {
-				layout
+				DataLayout::initialize(&config.data_dir).ok_or_message("invalid data_dir config")?
 			}
 			Err(_) => DataLayout::initialize(&data_dir).ok_or_message("invalid data_dir config")?,
 		};
 		data_layout.check_markers()?;
 		data_layout_persister
 			.save(&data_layout)
 			.expect("cannot save data_layout");
@ -153,11 +154,14 @@ impl BlockManager {
 			.netapp
 			.endpoint("garage_block/manager.rs/Rpc".to_string());
 		let buffer_kb_semaphore = Arc::new(Semaphore::new(config.block_ram_buffer_max / 1024));
 		let metrics = BlockManagerMetrics::new(
-			compression_level,
+			config.compression_level,
-			rc.rc.clone(),
+			rc.rc_table.clone(),
 			resync.queue.clone(),
 			resync.errors.clone(),
 			buffer_kb_semaphore.clone(),
 		);
 		let scrub_persister = PersisterShared::new(&system.metadata_dir, "scrub_info");
@ -166,8 +170,9 @@ impl BlockManager {
 			replication,
 			data_layout: ArcSwap::new(Arc::new(data_layout)),
 			data_layout_persister,
-			data_fsync,
+			data_fsync: config.data_fsync,
-			compression_level,
+			disable_scrub: config.disable_scrub,
 			compression_level: config.compression_level,
 			mutation_lock: vec![(); MUTEX_COUNT]
 				.iter()
 				.map(|_| Mutex::new(BlockManagerLocked()))
@ -176,6 +181,7 @@ impl BlockManager {
 			resync,
 			system,
 			endpoint,
 			buffer_kb_semaphore,
 			metrics,
 			scrub_persister,
 			tx_scrub_command: ArcSwapOption::new(None),
@ -194,33 +200,43 @@ impl BlockManager {
 		}
 		// Spawn scrub worker
-		let (scrub_tx, scrub_rx) = mpsc::channel(1);
+		if !self.disable_scrub {
-		self.tx_scrub_command.store(Some(Arc::new(scrub_tx)));
+			let (scrub_tx, scrub_rx) = mpsc::channel(1);
-		bg.spawn_worker(ScrubWorker::new(
+			self.tx_scrub_command.store(Some(Arc::new(scrub_tx)));
-			self.clone(),
+			bg.spawn_worker(ScrubWorker::new(
-			scrub_rx,
+				self.clone(),
-			self.scrub_persister.clone(),
+				scrub_rx,
-		));
+				self.scrub_persister.clone(),
 			));
 		}
 	}
 	pub fn register_bg_vars(&self, vars: &mut vars::BgVars) {
 		self.resync.register_bg_vars(vars);
-		vars.register_rw(
+		if !self.disable_scrub {
-			&self.scrub_persister,
+			vars.register_rw(
-			"scrub-tranquility",
+				&self.scrub_persister,
-			|p| p.get_with(|x| x.tranquility),
+				"scrub-tranquility",
-			|p, tranquility| p.set_with(|x| x.tranquility = tranquility),
+				|p| p.get_with(|x| x.tranquility),
-		);
+				|p, tranquility| p.set_with(|x| x.tranquility = tranquility),
-		vars.register_ro(&self.scrub_persister, "scrub-last-completed", |p| {
+			);
-			p.get_with(|x| msec_to_rfc3339(x.time_last_complete_scrub))
+			vars.register_ro(&self.scrub_persister, "scrub-last-completed", |p| {
-		});
+				p.get_with(|x| msec_to_rfc3339(x.time_last_complete_scrub))
-		vars.register_ro(&self.scrub_persister, "scrub-next-run", |p| {
+			});
-			p.get_with(|x| msec_to_rfc3339(x.time_next_run_scrub))
+			vars.register_ro(&self.scrub_persister, "scrub-next-run", |p| {
-		});
+				p.get_with(|x| msec_to_rfc3339(x.time_next_run_scrub))
-		vars.register_ro(&self.scrub_persister, "scrub-corruptions_detected", |p| {
+			});
-			p.get_with(|x| x.corruptions_detected)
+			vars.register_ro(&self.scrub_persister, "scrub-corruptions_detected", |p| {
-		});
+				p.get_with(|x| x.corruptions_detected)
 			});
 		}
 	}
 	/// Initialization: set how block references are recalculated
 	/// for repair operations
 	pub fn set_recalc_rc(&self, recalc: Vec<CalculateRefcount>) {
 		self.rc.recalc_rc.store(Some(Arc::new(recalc)));
 	}
 	/// Ask nodes that might have a (possibly compressed) block for it
@ -228,10 +244,16 @@ impl BlockManager {
 	async fn rpc_get_raw_block_streaming(
 		&self,
 		hash: &Hash,
 		priority: RequestPriority,
 		order_tag: Option<OrderTag>,
 	) -> Result<DataBlockStream, Error> {
-		self.rpc_get_raw_block_internal(hash, order_tag, |stream| async move { Ok(stream) })
+		self.rpc_get_raw_block_internal(
-			.await
+			hash,
 			priority,
 			order_tag,
 			|stream| async move { Ok(stream) },
 		)
 		.await
 	}
 	/// Ask nodes that might have a (possibly compressed) block for it
@ -239,9 +261,10 @@ impl BlockManager {
 	pub(crate) async fn rpc_get_raw_block(
 		&self,
 		hash: &Hash,
 		priority: RequestPriority,
 		order_tag: Option<OrderTag>,
 	) -> Result<DataBlock, Error> {
-		self.rpc_get_raw_block_internal(hash, order_tag, |block_stream| async move {
+		self.rpc_get_raw_block_internal(hash, priority, order_tag, |block_stream| async move {
 			let (header, stream) = block_stream.into_parts();
 			read_stream_to_end(stream)
 				.await
@ -254,6 +277,7 @@ impl BlockManager {
 	async fn rpc_get_raw_block_internal<F, Fut, T>(
 		&self,
 		hash: &Hash,
 		priority: RequestPriority,
 		order_tag: Option<OrderTag>,
 		f: F,
 	) -> Result<T, Error>
@ -271,7 +295,7 @@ impl BlockManager {
 			let rpc = self.endpoint.call_streaming(
 				&node_id,
 				BlockRpc::GetBlock(*hash, order_tag),
-				PRIO_NORMAL | PRIO_SECONDARY,
+				priority,
 			);
 			tokio::select! {
 				res = rpc => {
@ -310,9 +334,9 @@ impl BlockManager {
 			};
 		}
-		let msg = format!("Get block {:?}: no node returned a valid block", hash);
+		let err = Error::MissingBlock(*hash);
-		debug!("{}", msg);
+		debug!("{}", err);
-		Err(Error::Message(msg))
+		Err(err)
 	}
 	// ---- Public interface ----
@ -323,7 +347,9 @@ impl BlockManager {
 		hash: &Hash,
 		order_tag: Option<OrderTag>,
 	) -> Result<ByteStream, Error> {
-		let block_stream = self.rpc_get_raw_block_streaming(hash, order_tag).await?;
+		let block_stream = self
 			.rpc_get_raw_block_streaming(hash, PRIO_NORMAL | PRIO_SECONDARY, order_tag)
 			.await?;
 		let (header, stream) = block_stream.into_parts();
 		match header {
 			DataBlockHeader::Plain => Ok(stream),
@ -351,6 +377,14 @@ impl BlockManager {
 		let (header, bytes) = DataBlock::from_buffer(data, compression_level)
 			.await
 			.into_parts();
 		let permit = self
 			.buffer_kb_semaphore
 			.clone()
 			.acquire_many_owned((bytes.len() / 1024).try_into().unwrap())
 			.await
 			.ok_or_message("could not reserve space for buffer of data to send to remote nodes")?;
 		let put_block_rpc =
 			Req::new(BlockRpc::PutBlock { hash, header })?.with_stream_from_buffer(bytes);
 		let put_block_rpc = if let Some(tag) = order_tag {
@ -366,6 +400,7 @@ impl BlockManager {
 				who.as_ref(),
 				put_block_rpc,
 				RequestStrategy::with_priority(PRIO_NORMAL | PRIO_SECONDARY)
 					.with_drop_on_completion(permit)
 					.with_quorum(self.replication.write_quorum()),
 			)
 			.await?;
@ -375,7 +410,7 @@ impl BlockManager {
 	/// Get number of items in the refcount table
 	pub fn rc_len(&self) -> Result<usize, Error> {
-		Ok(self.rc.rc.len()?)
+		Ok(self.rc.rc_table.len()?)
 	}
 	/// Send command to start/stop/manager scrub worker
--- a/src/block/metrics.rs
+++ b/src/block/metrics.rs
@ -1,3 +1,7 @@
 use std::sync::Arc;
 use tokio::sync::Semaphore;
 use opentelemetry::{global, metrics::*};
 use garage_db as db;
@ -8,6 +12,7 @@ pub struct BlockManagerMetrics {
 	pub(crate) _rc_size: ValueObserver<u64>,
 	pub(crate) _resync_queue_len: ValueObserver<u64>,
 	pub(crate) _resync_errored_blocks: ValueObserver<u64>,
 	pub(crate) _buffer_free_kb: ValueObserver<u64>,
 	pub(crate) resync_counter: BoundCounter<u64>,
 	pub(crate) resync_error_counter: BoundCounter<u64>,
@ -30,6 +35,7 @@ impl BlockManagerMetrics {
 		rc_tree: db::Tree,
 		resync_queue: db::Tree,
 		resync_errors: db::Tree,
 		buffer_semaphore: Arc<Semaphore>,
 	) -> Self {
 		let meter = global::meter("garage_model/block");
 		Self {
@ -69,6 +75,15 @@ impl BlockManagerMetrics {
 				.with_description("Number of block hashes whose last resync resulted in an error")
 				.init(),
 			_buffer_free_kb: meter
 				.u64_value_observer("block.ram_buffer_free_kb", move |observer| {
 					observer.observe(buffer_semaphore.available_permits() as u64, &[])
 				})
 				.with_description(
 					"Available RAM in KiB to use for buffering data blocks to be written to remote nodes",
 				)
 				.init(),
 			resync_counter: meter
 				.u64_counter("block.resync_counter")
 				.with_description("Number of calls to resync_block")
--- a/src/block/rc.rs
+++ b/src/block/rc.rs
@ -1,5 +1,7 @@
 use std::convert::TryInto;
 use arc_swap::ArcSwapOption;
 use garage_db as db;
 use garage_util::data::*;
@ -8,13 +10,20 @@ use garage_util::time::*;
 use crate::manager::BLOCK_GC_DELAY;
 pub type CalculateRefcount =
 	Box<dyn Fn(&db::Transaction, &Hash) -> db::TxResult<usize, Error> + Send + Sync>;
 pub struct BlockRc {
-	pub(crate) rc: db::Tree,
+	pub rc_table: db::Tree,
 	pub(crate) recalc_rc: ArcSwapOption<Vec<CalculateRefcount>>,
 }
 impl BlockRc {
 	pub(crate) fn new(rc: db::Tree) -> Self {
-		Self { rc }
+		Self {
 			rc_table: rc,
 			recalc_rc: ArcSwapOption::new(None),
 		}
 	}
 	/// Increment the reference counter associated to a hash.
@ -24,9 +33,9 @@ impl BlockRc {
 		tx: &mut db::Transaction,
 		hash: &Hash,
 	) -> db::TxOpResult<bool> {
-		let old_rc = RcEntry::parse_opt(tx.get(&self.rc, hash)?);
+		let old_rc = RcEntry::parse_opt(tx.get(&self.rc_table, hash)?);
 		match old_rc.increment().serialize() {
-			Some(x) => tx.insert(&self.rc, hash, x)?,
+			Some(x) => tx.insert(&self.rc_table, hash, x)?,
 			None => unreachable!(),
 		};
 		Ok(old_rc.is_zero())
@ -39,28 +48,28 @@ impl BlockRc {
 		tx: &mut db::Transaction,
 		hash: &Hash,
 	) -> db::TxOpResult<bool> {
-		let new_rc = RcEntry::parse_opt(tx.get(&self.rc, hash)?).decrement();
+		let new_rc = RcEntry::parse_opt(tx.get(&self.rc_table, hash)?).decrement();
 		match new_rc.serialize() {
-			Some(x) => tx.insert(&self.rc, hash, x)?,
+			Some(x) => tx.insert(&self.rc_table, hash, x)?,
-			None => tx.remove(&self.rc, hash)?,
+			None => tx.remove(&self.rc_table, hash)?,
 		};
 		Ok(matches!(new_rc, RcEntry::Deletable { .. }))
 	}
 	/// Read a block's reference count
 	pub(crate) fn get_block_rc(&self, hash: &Hash) -> Result<RcEntry, Error> {
-		Ok(RcEntry::parse_opt(self.rc.get(hash.as_ref())?))
+		Ok(RcEntry::parse_opt(self.rc_table.get(hash.as_ref())?))
 	}
 	/// Delete an entry in the RC table if it is deletable and the
 	/// deletion time has passed
 	pub(crate) fn clear_deleted_block_rc(&self, hash: &Hash) -> Result<(), Error> {
 		let now = now_msec();
-		self.rc.db().transaction(|tx| {
+		self.rc_table.db().transaction(|tx| {
-			let rcval = RcEntry::parse_opt(tx.get(&self.rc, hash)?);
+			let rcval = RcEntry::parse_opt(tx.get(&self.rc_table, hash)?);
 			match rcval {
 				RcEntry::Deletable { at_time } if now > at_time => {
-					tx.remove(&self.rc, hash)?;
+					tx.remove(&self.rc_table, hash)?;
 				}
 				_ => (),
 			};
@ -68,6 +77,58 @@ impl BlockRc {
 		})?;
 		Ok(())
 	}
 	/// Recalculate the reference counter of a block
 	/// to fix potential inconsistencies
 	pub fn recalculate_rc(&self, hash: &Hash) -> Result<(usize, bool), Error> {
 		if let Some(recalc_fns) = self.recalc_rc.load().as_ref() {
 			trace!("Repair block RC for {:?}", hash);
 			let res = self
 				.rc_table
 				.db()
 				.transaction(|tx| {
 					let mut cnt = 0;
 					for f in recalc_fns.iter() {
 						cnt += f(&tx, hash)?;
 					}
 					let old_rc = RcEntry::parse_opt(tx.get(&self.rc_table, hash)?);
 					trace!(
 						"Block RC for {:?}: stored={}, calculated={}",
 						hash,
 						old_rc.as_u64(),
 						cnt
 					);
 					if cnt as u64 != old_rc.as_u64() {
 						warn!(
 							"Fixing inconsistent block RC for {:?}: was {}, should be {}",
 							hash,
 							old_rc.as_u64(),
 							cnt
 						);
 						let new_rc = if cnt > 0 {
 							RcEntry::Present { count: cnt as u64 }
 						} else {
 							RcEntry::Deletable {
 								at_time: now_msec() + BLOCK_GC_DELAY.as_millis() as u64,
 							}
 						};
 						tx.insert(&self.rc_table, hash, new_rc.serialize().unwrap())?;
 						Ok((cnt, true))
 					} else {
 						Ok((cnt, false))
 					}
 				})
 				.map_err(Error::from);
 			if let Err(e) = &res {
 				error!("Failed to fix RC for block {:?}: {}", hash, e);
 			}
 			res
 		} else {
 			Err(Error::Message(
 				"Block RC recalculation is not available at this point".into(),
 			))
 		}
 	}
 }
 /// Describes the state of the reference counter for a block
--- a/src/block/repair.rs
+++ b/src/block/repair.rs
@ -107,7 +107,7 @@ impl Worker for RepairWorker {
 				for entry in self
 					.manager
 					.rc
-					.rc
+					.rc_table
 					.range::<&[u8], _>((start_bound, Bound::Unbounded))?
 				{
 					let (hash, _) = entry?;
--- a/src/block/resync.rs
+++ b/src/block/resync.rs
@ -367,6 +367,13 @@ impl BlockResyncManager {
 		}
 		if exists && rc.is_deletable() {
 			if manager.rc.recalculate_rc(hash)?.0 > 0 {
 				return Err(Error::Message(format!(
 					"Refcount for block {:?} was inconsistent, retrying later",
 					hash
 				)));
 			}
 			info!("Resync block {:?}: offloading and deleting", hash);
 			let existing_path = existing_path.unwrap();
@ -429,7 +436,7 @@ impl BlockResyncManager {
 						&manager.endpoint,
 						&need_nodes,
 						put_block_message,
-						RequestStrategy::with_priority(PRIO_BACKGROUND)
+						RequestStrategy::with_priority(PRIO_BACKGROUND | PRIO_SECONDARY)
 							.with_quorum(need_nodes.len()),
 					)
 					.await
@ -453,7 +460,17 @@ impl BlockResyncManager {
 				hash
 			);
-			let block_data = manager.rpc_get_raw_block(hash, None).await?;
+			let block_data = manager
 				.rpc_get_raw_block(hash, PRIO_BACKGROUND | PRIO_SECONDARY, None)
 				.await;
 			if matches!(block_data, Err(Error::MissingBlock(_))) {
 				warn!(
 					"Could not fetch needed block {:?}, no node returned valid data. Checking that refcount is correct.",
 					hash
 				);
 				manager.rc.recalculate_rc(hash)?;
 			}
 			let block_data = block_data?;
 			manager.metrics.resync_recv_counter.add(1);
--- a/src/db/Cargo.toml
+++ b/src/db/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage_db"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>"]
 edition = "2018"
 license = "AGPL-3.0"
@ -14,11 +14,12 @@ path = "lib.rs"
 [dependencies]
 err-derive.workspace = true
 hexdump.workspace = true
 ouroboros.workspace = true
 tracing.workspace = true
 heed = { workspace = true, optional = true }
-rusqlite = { workspace = true, optional = true }
+rusqlite = { workspace = true, optional = true, features = ["backup"] }
 r2d2 = { workspace = true, optional = true }
 r2d2_sqlite = { workspace = true, optional = true }
 [dev-dependencies]
 mktemp.workspace = true
@ -27,4 +28,4 @@ mktemp.workspace = true
 default = [ "lmdb", "sqlite" ]
 bundled-libs = [ "rusqlite?/bundled" ]
 lmdb = [ "heed" ]
-sqlite = [ "rusqlite" ]
+sqlite = [ "rusqlite", "r2d2", "r2d2_sqlite" ]
--- a/src/db/lib.rs
+++ b/src/db/lib.rs
@ -15,6 +15,7 @@ use core::ops::{Bound, RangeBounds};
 use std::borrow::Cow;
 use std::cell::Cell;
 use std::path::PathBuf;
 use std::sync::Arc;
 use err_derive::Error;
@ -44,6 +45,12 @@ pub type TxValueIter<'a> = Box<dyn std::iter::Iterator<Item = TxOpResult<(Value,
 #[error(display = "{}", _0)]
 pub struct Error(pub Cow<'static, str>);
 impl From<std::io::Error> for Error {
 	fn from(e: std::io::Error) -> Error {
 		Error(format!("IO: {}", e).into())
 	}
 }
 pub type Result<T> = std::result::Result<T, Error>;
 #[derive(Debug, Error)]
@ -126,6 +133,10 @@ impl Db {
 		}
 	}
 	pub fn snapshot(&self, path: &PathBuf) -> Result<()> {
 		self.0.snapshot(path)
 	}
 	pub fn import(&self, other: &Db) -> Result<()> {
 		let existing_trees = self.list_trees()?;
 		if !existing_trees.is_empty() {
@ -323,6 +334,7 @@ pub(crate) trait IDb: Send + Sync {
 	fn engine(&self) -> String;
 	fn open_tree(&self, name: &str) -> Result<usize>;
 	fn list_trees(&self) -> Result<Vec<String>>;
 	fn snapshot(&self, path: &PathBuf) -> Result<()>;
 	fn get(&self, tree: usize, key: &[u8]) -> Result<Option<Value>>;
 	fn len(&self, tree: usize) -> Result<usize>;
--- a/src/db/lmdb_adapter.rs
+++ b/src/db/lmdb_adapter.rs
@ -3,6 +3,7 @@ use core::ptr::NonNull;
 use std::collections::HashMap;
 use std::convert::TryInto;
 use std::path::PathBuf;
 use std::pin::Pin;
 use std::sync::{Arc, RwLock};
@ -103,6 +104,15 @@ impl IDb for LmdbDb {
 		Ok(ret2)
 	}
 	fn snapshot(&self, to: &PathBuf) -> Result<()> {
 		std::fs::create_dir_all(to)?;
 		let mut path = to.clone();
 		path.push("data.mdb");
 		self.db
 			.copy_to_path(path, heed::CompactionOption::Disabled)?;
 		Ok(())
 	}
 	// ----
 	fn get(&self, tree: usize, key: &[u8]) -> Result<Option<Value>> {
--- a/src/db/open.rs
+++ b/src/db/open.rs
@ -36,7 +36,7 @@ impl std::str::FromStr for Engine {
 		match text {
 			"lmdb" | "heed" => Ok(Self::Lmdb),
 			"sqlite" | "sqlite3" | "rusqlite" => Ok(Self::Sqlite),
-			"sled" => Err(Error("Sled is no longer supported as a database engine. Converting your old metadata db can be done using an older Garage binary (e.g. v0.9.3).".into())),
+			"sled" => Err(Error("Sled is no longer supported as a database engine. Converting your old metadata db can be done using an older Garage binary (e.g. v0.9.4).".into())),
 			kind => Err(Error(
 				format!(
 					"Invalid DB engine: {} (options are: lmdb, sqlite)",
@ -68,14 +68,8 @@ pub fn open_db(path: &PathBuf, engine: Engine, opt: &OpenOpt) -> Result<Db> {
 		#[cfg(feature = "sqlite")]
 		Engine::Sqlite => {
 			info!("Opening Sqlite database at: {}", path.display());
-			let db = crate::sqlite_adapter::rusqlite::Connection::open(&path)?;
+			let manager = r2d2_sqlite::SqliteConnectionManager::file(path);
-			db.pragma_update(None, "journal_mode", "WAL")?;
+			Ok(crate::sqlite_adapter::SqliteDb::new(manager, opt.fsync)?)
 			if opt.fsync {
 				db.pragma_update(None, "synchronous", "NORMAL")?;
 			} else {
 				db.pragma_update(None, "synchronous", "OFF")?;
 			}
 			Ok(crate::sqlite_adapter::SqliteDb::init(db))
 		}
 		// ---- LMDB DB ----
--- a/src/db/sqlite_adapter.rs
+++ b/src/db/sqlite_adapter.rs
@ -1,10 +1,14 @@
 use core::ops::Bound;
-use std::borrow::BorrowMut;
+use std::marker::PhantomPinned;
-use std::sync::{Arc, Mutex, MutexGuard};
+use std::path::PathBuf;
 use std::pin::Pin;
 use std::ptr::NonNull;
 use std::sync::{Arc, Mutex, RwLock};
-use ouroboros::self_referencing;
+use r2d2::Pool;
-use rusqlite::{params, Connection, Rows, Statement, Transaction};
+use r2d2_sqlite::SqliteConnectionManager;
 use rusqlite::{params, Rows, Statement, Transaction};
 use crate::{
 	Db, Error, IDb, ITx, ITxFn, OnCommit, Result, TxError, TxFnResult, TxOpError, TxOpResult,
@ -13,6 +17,8 @@ use crate::{
 pub use rusqlite;
 type Connection = r2d2::PooledConnection<SqliteConnectionManager>;
 // --- err
 impl From<rusqlite::Error> for Error {
@ -21,6 +27,12 @@ impl From<rusqlite::Error> for Error {
 	}
 }
 impl From<r2d2::Error> for Error {
 	fn from(e: r2d2::Error) -> Error {
 		Error(format!("Sqlite: {}", e).into())
 	}
 }
 impl From<rusqlite::Error> for TxOpError {
 	fn from(e: rusqlite::Error) -> TxOpError {
 		TxOpError(e.into())
@ -29,35 +41,47 @@ impl From<rusqlite::Error> for TxOpError {
 // -- db
-pub struct SqliteDb(Mutex<SqliteDbInner>);
+pub struct SqliteDb {
-
+	db: Pool<SqliteConnectionManager>,
-struct SqliteDbInner {
+	trees: RwLock<Vec<Arc<str>>>,
-	db: Connection,
+	// All operations that might write on the DB must take this lock first.
-	trees: Vec<String>,
+	// This emulates LMDB's approach where a single writer can be
 	// active at once.
 	write_lock: Mutex<()>,
 }
 impl SqliteDb {
-	pub fn init(db: rusqlite::Connection) -> Db {
+	pub fn new(manager: SqliteConnectionManager, sync_mode: bool) -> Result<Db> {
-		let s = Self(Mutex::new(SqliteDbInner {
+		let manager = manager.with_init(move |db| {
-			db,
+			db.pragma_update(None, "journal_mode", "WAL")?;
-			trees: Vec::new(),
+			if sync_mode {
-		}));
+				db.pragma_update(None, "synchronous", "NORMAL")?;
-		Db(Arc::new(s))
+			} else {
 				db.pragma_update(None, "synchronous", "OFF")?;
 			}
 			Ok(())
 		});
 		let s = Self {
 			db: Pool::builder().build(manager)?,
 			trees: RwLock::new(vec![]),
 			write_lock: Mutex::new(()),
 		};
 		Ok(Db(Arc::new(s)))
 	}
 }
-impl SqliteDbInner {
+impl SqliteDb {
-	fn get_tree(&self, i: usize) -> Result<&'_ str> {
+	fn get_tree(&self, i: usize) -> Result<Arc<str>> {
 		self.trees
 			.read()
 			.unwrap()
 			.get(i)
-			.map(String::as_str)
+			.cloned()
 			.ok_or_else(|| Error("invalid tree id".into()))
 	}
-	fn internal_get(&self, tree: &str, key: &[u8]) -> Result<Option<Value>> {
+	fn internal_get(&self, db: &Connection, tree: &str, key: &[u8]) -> Result<Option<Value>> {
-		let mut stmt = self
+		let mut stmt = db.prepare(&format!("SELECT v FROM {} WHERE k = ?1", tree))?;
 			.db
 			.prepare(&format!("SELECT v FROM {} WHERE k = ?1", tree))?;
 		let mut res_iter = stmt.query([key])?;
 		match res_iter.next()? {
 			None => Ok(None),
@ -73,13 +97,14 @@ impl IDb for SqliteDb {
 	fn open_tree(&self, name: &str) -> Result<usize> {
 		let name = format!("tree_{}", name.replace(':', "_COLON_"));
-		let mut this = self.0.lock().unwrap();
+		let mut trees = self.trees.write().unwrap();
-		if let Some(i) = this.trees.iter().position(|x| x == &name) {
+		if let Some(i) = trees.iter().position(|x| x.as_ref() == &name) {
 			Ok(i)
 		} else {
 			let db = self.db.get()?;
 			trace!("create table {}", name);
-			this.db.execute(
+			db.execute(
 				&format!(
 					"CREATE TABLE IF NOT EXISTS {} (
 						k BLOB PRIMARY KEY,
@ -91,8 +116,8 @@ impl IDb for SqliteDb {
 			)?;
 			trace!("table created: {}, unlocking", name);
-			let i = this.trees.len();
+			let i = trees.len();
-			this.trees.push(name.to_string());
+			trees.push(name.to_string().into_boxed_str().into());
 			Ok(i)
 		}
 	}
@ -100,11 +125,8 @@ impl IDb for SqliteDb {
 	fn list_trees(&self) -> Result<Vec<String>> {
 		let mut trees = vec![];
-		trace!("list_trees: lock db");
+		let db = self.db.get()?;
-		let this = self.0.lock().unwrap();
+		let mut stmt = db.prepare(
 		trace!("list_trees: lock acquired");
 		let mut stmt = this.db.prepare(
 			"SELECT name FROM sqlite_schema WHERE type = 'table' AND name LIKE 'tree_%'",
 		)?;
 		let mut rows = stmt.query([])?;
@ -117,24 +139,29 @@ impl IDb for SqliteDb {
 		Ok(trees)
 	}
 	fn snapshot(&self, to: &PathBuf) -> Result<()> {
 		fn progress(p: rusqlite::backup::Progress) {
 			let percent = (p.pagecount - p.remaining) * 100 / p.pagecount;
 			info!("Sqlite snapshot progres: {}%", percent);
 		}
 		self.db
 			.get()?
 			.backup(rusqlite::DatabaseName::Main, to, Some(progress))?;
 		Ok(())
 	}
 	// ----
 	fn get(&self, tree: usize, key: &[u8]) -> Result<Option<Value>> {
-		trace!("get {}: lock db", tree);
+		let tree = self.get_tree(tree)?;
-		let this = self.0.lock().unwrap();
+		self.internal_get(&self.db.get()?, &tree, key)
 		trace!("get {}: lock acquired", tree);
 		let tree = this.get_tree(tree)?;
 		this.internal_get(tree, key)
 	}
 	fn len(&self, tree: usize) -> Result<usize> {
-		trace!("len {}: lock db", tree);
+		let tree = self.get_tree(tree)?;
-		let this = self.0.lock().unwrap();
+		let db = self.db.get()?;
 		trace!("len {}: lock acquired", tree);
-		let tree = this.get_tree(tree)?;
+		let mut stmt = db.prepare(&format!("SELECT COUNT(*) FROM {}", tree))?;
 		let mut stmt = this.db.prepare(&format!("SELECT COUNT(*) FROM {}", tree))?;
 		let mut res_iter = stmt.query([])?;
 		match res_iter.next()? {
 			None => Ok(0),
@ -143,69 +170,60 @@ impl IDb for SqliteDb {
 	}
 	fn insert(&self, tree: usize, key: &[u8], value: &[u8]) -> Result<Option<Value>> {
-		trace!("insert {}: lock db", tree);
+		let tree = self.get_tree(tree)?;
-		let this = self.0.lock().unwrap();
+		let db = self.db.get()?;
-		trace!("insert {}: lock acquired", tree);
+		let lock = self.write_lock.lock();
-		let tree = this.get_tree(tree)?;
+		let old_val = self.internal_get(&db, &tree, key)?;
 		let old_val = this.internal_get(tree, key)?;
 		let sql = match &old_val {
 			Some(_) => format!("UPDATE {} SET v = ?2 WHERE k = ?1", tree),
 			None => format!("INSERT INTO {} (k, v) VALUES (?1, ?2)", tree),
 		};
-		let n = this.db.execute(&sql, params![key, value])?;
+		let n = db.execute(&sql, params![key, value])?;
 		assert_eq!(n, 1);
 		drop(lock);
 		Ok(old_val)
 	}
 	fn remove(&self, tree: usize, key: &[u8]) -> Result<Option<Value>> {
-		trace!("remove {}: lock db", tree);
+		let tree = self.get_tree(tree)?;
-		let this = self.0.lock().unwrap();
+		let db = self.db.get()?;
-		trace!("remove {}: lock acquired", tree);
+		let lock = self.write_lock.lock();
-		let tree = this.get_tree(tree)?;
+		let old_val = self.internal_get(&db, &tree, key)?;
 		let old_val = this.internal_get(tree, key)?;
 		if old_val.is_some() {
-			let n = this
+			let n = db.execute(&format!("DELETE FROM {} WHERE k = ?1", tree), params![key])?;
 				.db
 				.execute(&format!("DELETE FROM {} WHERE k = ?1", tree), params![key])?;
 			assert_eq!(n, 1);
 		}
 		drop(lock);
 		Ok(old_val)
 	}
 	fn clear(&self, tree: usize) -> Result<()> {
-		trace!("clear {}: lock db", tree);
+		let tree = self.get_tree(tree)?;
-		let this = self.0.lock().unwrap();
+		let db = self.db.get()?;
-		trace!("clear {}: lock acquired", tree);
+		let lock = self.write_lock.lock();
-		let tree = this.get_tree(tree)?;
+		db.execute(&format!("DELETE FROM {}", tree), [])?;
-		this.db.execute(&format!("DELETE FROM {}", tree), [])?;
+
 		drop(lock);
 		Ok(())
 	}
 	fn iter(&self, tree: usize) -> Result<ValueIter<'_>> {
-		trace!("iter {}: lock db", tree);
+		let tree = self.get_tree(tree)?;
 		let this = self.0.lock().unwrap();
 		trace!("iter {}: lock acquired", tree);
 		let tree = this.get_tree(tree)?;
 		let sql = format!("SELECT k, v FROM {} ORDER BY k ASC", tree);
-		make_iterator(this, &sql, [])
+		DbValueIterator::make(self.db.get()?, &sql, [])
 	}
 	fn iter_rev(&self, tree: usize) -> Result<ValueIter<'_>> {
-		trace!("iter_rev {}: lock db", tree);
+		let tree = self.get_tree(tree)?;
 		let this = self.0.lock().unwrap();
 		trace!("iter_rev {}: lock acquired", tree);
 		let tree = this.get_tree(tree)?;
 		let sql = format!("SELECT k, v FROM {} ORDER BY k DESC", tree);
-		make_iterator(this, &sql, [])
+		DbValueIterator::make(self.db.get()?, &sql, [])
 	}
 	fn range<'r>(
@ -214,11 +232,7 @@ impl IDb for SqliteDb {
 		low: Bound<&'r [u8]>,
 		high: Bound<&'r [u8]>,
 	) -> Result<ValueIter<'_>> {
-		trace!("range {}: lock db", tree);
+		let tree = self.get_tree(tree)?;
 		let this = self.0.lock().unwrap();
 		trace!("range {}: lock acquired", tree);
 		let tree = this.get_tree(tree)?;
 		let (bounds_sql, params) = bounds_sql(low, high);
 		let sql = format!("SELECT k, v FROM {} {} ORDER BY k ASC", tree, bounds_sql);
@ -228,7 +242,7 @@ impl IDb for SqliteDb {
 			.map(|x| x as &dyn rusqlite::ToSql)
 			.collect::<Vec<_>>();
-		make_iterator::<&[&dyn rusqlite::ToSql]>(this, &sql, params.as_ref())
+		DbValueIterator::make::<&[&dyn rusqlite::ToSql]>(self.db.get()?, &sql, params.as_ref())
 	}
 	fn range_rev<'r>(
 		&self,
@ -236,11 +250,7 @@ impl IDb for SqliteDb {
 		low: Bound<&'r [u8]>,
 		high: Bound<&'r [u8]>,
 	) -> Result<ValueIter<'_>> {
-		trace!("range_rev {}: lock db", tree);
+		let tree = self.get_tree(tree)?;
 		let this = self.0.lock().unwrap();
 		trace!("range_rev {}: lock acquired", tree);
 		let tree = this.get_tree(tree)?;
 		let (bounds_sql, params) = bounds_sql(low, high);
 		let sql = format!("SELECT k, v FROM {} {} ORDER BY k DESC", tree, bounds_sql);
@ -250,25 +260,20 @@ impl IDb for SqliteDb {
 			.map(|x| x as &dyn rusqlite::ToSql)
 			.collect::<Vec<_>>();
-		make_iterator::<&[&dyn rusqlite::ToSql]>(this, &sql, params.as_ref())
+		DbValueIterator::make::<&[&dyn rusqlite::ToSql]>(self.db.get()?, &sql, params.as_ref())
 	}
 	// ----
 	fn transaction(&self, f: &dyn ITxFn) -> TxResult<OnCommit, ()> {
-		trace!("transaction: lock db");
+		let mut db = self.db.get().map_err(Error::from).map_err(TxError::Db)?;
-		let mut this = self.0.lock().unwrap();
+		let trees = self.trees.read().unwrap();
-		trace!("transaction: lock acquired");
+		let lock = self.write_lock.lock();
 		let this_mut_ref: &mut SqliteDbInner = this.borrow_mut();
 		trace!("trying transaction");
 		let mut tx = SqliteTx {
-			tx: this_mut_ref
+			tx: db.transaction().map_err(Error::from).map_err(TxError::Db)?,
-				.db
+			trees: &trees,
 				.transaction()
 				.map_err(Error::from)
 				.map_err(TxError::Db)?,
 			trees: &this_mut_ref.trees,
 		};
 		let res = match f.try_on(&mut tx) {
 			TxFnResult::Ok(on_commit) => {
@ -288,7 +293,8 @@ impl IDb for SqliteDb {
 		};
 		trace!("transaction done");
-		res
+		drop(lock);
 		return res;
 	}
 }
@ -296,12 +302,12 @@ impl IDb for SqliteDb {
 struct SqliteTx<'a> {
 	tx: Transaction<'a>,
-	trees: &'a [String],
+	trees: &'a [Arc<str>],
 }
 impl<'a> SqliteTx<'a> {
 	fn get_tree(&self, i: usize) -> TxOpResult<&'_ str> {
-		self.trees.get(i).map(String::as_ref).ok_or_else(|| {
+		self.trees.get(i).map(Arc::as_ref).ok_or_else(|| {
 			TxOpError(Error(
 				"invalid tree id (it might have been openned after the transaction started)".into(),
 			))
@ -370,12 +376,12 @@ impl<'a> ITx for SqliteTx<'a> {
 	fn iter(&self, tree: usize) -> TxOpResult<TxValueIter<'_>> {
 		let tree = self.get_tree(tree)?;
 		let sql = format!("SELECT k, v FROM {} ORDER BY k ASC", tree);
-		make_tx_iterator(self, &sql, [])
+		TxValueIterator::make(self, &sql, [])
 	}
 	fn iter_rev(&self, tree: usize) -> TxOpResult<TxValueIter<'_>> {
 		let tree = self.get_tree(tree)?;
 		let sql = format!("SELECT k, v FROM {} ORDER BY k DESC", tree);
-		make_tx_iterator(self, &sql, [])
+		TxValueIterator::make(self, &sql, [])
 	}
 	fn range<'r>(
@ -394,7 +400,7 @@ impl<'a> ITx for SqliteTx<'a> {
 			.map(|x| x as &dyn rusqlite::ToSql)
 			.collect::<Vec<_>>();
-		make_tx_iterator::<&[&dyn rusqlite::ToSql]>(self, &sql, params.as_ref())
+		TxValueIterator::make::<&[&dyn rusqlite::ToSql]>(self, &sql, params.as_ref())
 	}
 	fn range_rev<'r>(
 		&self,
@ -412,47 +418,73 @@ impl<'a> ITx for SqliteTx<'a> {
 			.map(|x| x as &dyn rusqlite::ToSql)
 			.collect::<Vec<_>>();
-		make_tx_iterator::<&[&dyn rusqlite::ToSql]>(self, &sql, params.as_ref())
+		TxValueIterator::make::<&[&dyn rusqlite::ToSql]>(self, &sql, params.as_ref())
 	}
 }
 // ---- iterators outside transactions ----
 // complicated, they must hold the Statement and Row objects
-// so we need a self_referencing struct
+// therefore quite some unsafe code (it is a self-referential struct)
 // need to split in two because sequential mutable borrows are broken,
 // see https://github.com/someguynamedjosh/ouroboros/issues/100
 #[self_referencing]
 struct DbValueIterator1<'a> {
 	db: MutexGuard<'a, SqliteDbInner>,
 	#[borrows(mut db)]
 	#[covariant]
 	stmt: Statement<'this>,
 }
 #[self_referencing]
 struct DbValueIterator<'a> {
-	aux: DbValueIterator1<'a>,
+	db: Connection,
-	#[borrows(mut aux)]
+	stmt: Option<Statement<'a>>,
-	#[covariant]
+	iter: Option<Rows<'a>>,
-	iter: Rows<'this>,
+	_pin: PhantomPinned,
 }
-fn make_iterator<'a, P: rusqlite::Params>(
+impl<'a> DbValueIterator<'a> {
-	db: MutexGuard<'a, SqliteDbInner>,
+	fn make<P: rusqlite::Params>(db: Connection, sql: &str, args: P) -> Result<ValueIter<'a>> {
-	sql: &str,
+		let res = DbValueIterator {
-	args: P,
+			db,
-) -> Result<ValueIter<'a>> {
+			stmt: None,
-	let aux = DbValueIterator1::try_new(db, |db| db.db.prepare(sql))?;
+			iter: None,
-	let res = DbValueIterator::try_new(aux, |aux| aux.with_stmt_mut(|stmt| stmt.query(args)))?;
+			_pin: PhantomPinned,
-	Ok(Box::new(res))
+		};
 		let mut boxed = Box::pin(res);
 		trace!("make iterator with sql: {}", sql);
 		// This unsafe allows us to bypass lifetime checks
 		let db = unsafe { NonNull::from(&boxed.db).as_ref() };
 		let stmt = db.prepare(sql)?;
 		let mut_ref = Pin::as_mut(&mut boxed);
 		// This unsafe allows us to write in a field of the pinned struct
 		unsafe {
 			Pin::get_unchecked_mut(mut_ref).stmt = Some(stmt);
 		}
 		// This unsafe allows us to bypass lifetime checks
 		let stmt = unsafe { NonNull::from(&boxed.stmt).as_mut() };
 		let iter = stmt.as_mut().unwrap().query(args)?;
 		let mut_ref = Pin::as_mut(&mut boxed);
 		// This unsafe allows us to write in a field of the pinned struct
 		unsafe {
 			Pin::get_unchecked_mut(mut_ref).iter = Some(iter);
 		}
 		Ok(Box::new(DbValueIteratorPin(boxed)))
 	}
 }
-impl<'a> Iterator for DbValueIterator<'a> {
+impl<'a> Drop for DbValueIterator<'a> {
 	fn drop(&mut self) {
 		trace!("drop iter");
 		drop(self.iter.take());
 		drop(self.stmt.take());
 	}
 }
 struct DbValueIteratorPin<'a>(Pin<Box<DbValueIterator<'a>>>);
 impl<'a> Iterator for DbValueIteratorPin<'a> {
 	type Item = Result<(Value, Value)>;
 	fn next(&mut self) -> Option<Self::Item> {
-		let next = self.with_iter_mut(|iter| iter.next());
+		let mut_ref = Pin::as_mut(&mut self.0);
 		// This unsafe allows us to mutably access the iterator field
 		let next = unsafe { Pin::get_unchecked_mut(mut_ref).iter.as_mut()?.next() };
 		iter_next_row(next)
 	}
 }
@ -461,29 +493,57 @@ impl<'a> Iterator for DbValueIterator<'a> {
 // it's the same except we don't hold a mutex guard,
 // only a Statement and a Rows object
 #[self_referencing]
 struct TxValueIterator<'a> {
 	stmt: Statement<'a>,
-	#[borrows(mut stmt)]
+	iter: Option<Rows<'a>>,
-	#[covariant]
+	_pin: PhantomPinned,
 	iter: Rows<'this>,
 }
-fn make_tx_iterator<'a, P: rusqlite::Params>(
+impl<'a> TxValueIterator<'a> {
-	tx: &'a SqliteTx<'a>,
+	fn make<P: rusqlite::Params>(
-	sql: &str,
+		tx: &'a SqliteTx<'a>,
-	args: P,
+		sql: &str,
-) -> TxOpResult<TxValueIter<'a>> {
+		args: P,
-	let stmt = tx.tx.prepare(sql)?;
+	) -> TxOpResult<TxValueIter<'a>> {
-	let res = TxValueIterator::try_new(stmt, |stmt| stmt.query(args))?;
+		let stmt = tx.tx.prepare(sql)?;
-	Ok(Box::new(res))
+		let res = TxValueIterator {
 			stmt,
 			iter: None,
 			_pin: PhantomPinned,
 		};
 		let mut boxed = Box::pin(res);
 		trace!("make iterator with sql: {}", sql);
 		// This unsafe allows us to bypass lifetime checks
 		let stmt = unsafe { NonNull::from(&boxed.stmt).as_mut() };
 		let iter = stmt.query(args)?;
 		let mut_ref = Pin::as_mut(&mut boxed);
 		// This unsafe allows us to write in a field of the pinned struct
 		unsafe {
 			Pin::get_unchecked_mut(mut_ref).iter = Some(iter);
 		}
 		Ok(Box::new(TxValueIteratorPin(boxed)))
 	}
 }
-impl<'a> Iterator for TxValueIterator<'a> {
+impl<'a> Drop for TxValueIterator<'a> {
 	fn drop(&mut self) {
 		trace!("drop iter");
 		drop(self.iter.take());
 	}
 }
 struct TxValueIteratorPin<'a>(Pin<Box<TxValueIterator<'a>>>);
 impl<'a> Iterator for TxValueIteratorPin<'a> {
 	type Item = TxOpResult<(Value, Value)>;
 	fn next(&mut self) -> Option<Self::Item> {
-		let next = self.with_iter_mut(|iter| iter.next());
+		let mut_ref = Pin::as_mut(&mut self.0);
 		// This unsafe allows us to mutably access the iterator field
 		let next = unsafe { Pin::get_unchecked_mut(mut_ref).iter.as_mut()?.next() };
 		iter_next_row(next)
 	}
 }
--- a/src/db/test.rs
+++ b/src/db/test.rs
@ -144,6 +144,7 @@ fn test_lmdb_db() {
 fn test_sqlite_db() {
 	use crate::sqlite_adapter::SqliteDb;
-	let db = SqliteDb::init(rusqlite::Connection::open_in_memory().unwrap());
+	let manager = r2d2_sqlite::SqliteConnectionManager::memory();
 	let db = SqliteDb::new(manager, false).unwrap();
 	test_suite(db);
 }
--- a/src/garage/Cargo.toml
+++ b/src/garage/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>"]
 edition = "2018"
 license = "AGPL-3.0"
@ -42,6 +42,7 @@ tracing.workspace = true
 tracing-subscriber.workspace = true
 rand.workspace = true
 async-trait.workspace = true
 sha1.workspace = true
 sodiumoxide.workspace = true
 structopt.workspace = true
 git-version.workspace = true
@ -58,6 +59,7 @@ opentelemetry.workspace = true
 opentelemetry-prometheus = { workspace = true, optional = true }
 opentelemetry-otlp = { workspace = true, optional = true }
 prometheus = { workspace = true, optional = true }
 syslog-tracing = { workspace = true, optional = true }
 [dev-dependencies]
 aws-config.workspace = true
@ -96,6 +98,8 @@ kubernetes-discovery = [ "garage_rpc/kubernetes-discovery" ]
 metrics = [ "garage_api/metrics", "opentelemetry-prometheus", "prometheus" ]
 # Exporter for the OpenTelemetry Collector.
 telemetry-otlp = [ "opentelemetry-otlp" ]
 # Logging to syslog
 syslog = [ "syslog-tracing" ]
 # NOTE: bundled-libs and system-libs should be treat as mutually exclusive;
 # exactly one of them should be enabled.
--- a/src/garage/admin/bucket.rs
+++ b/src/garage/admin/bucket.rs
@ -54,9 +54,8 @@ impl AdminRpcHandler {
 		let bucket_id = self
 			.garage
 			.bucket_helper()
-			.resolve_global_bucket_name(&query.name)
+			.admin_get_existing_matching_bucket(&query.name)
-			.await?
+			.await?;
 			.ok_or_bad_request("Bucket not found")?;
 		let bucket = self
 			.garage
@ -157,9 +156,8 @@ impl AdminRpcHandler {
 		let bucket_id = helper
 			.bucket()
-			.resolve_global_bucket_name(&query.name)
+			.admin_get_existing_matching_bucket(&query.name)
-			.await?
+			.await?;
 			.ok_or_bad_request("Bucket not found")?;
 		// Get the alias, but keep in minde here the bucket name
 		// given in parameter can also be directly the bucket's ID.
@ -235,9 +233,8 @@ impl AdminRpcHandler {
 		let bucket_id = helper
 			.bucket()
-			.resolve_global_bucket_name(&query.existing_bucket)
+			.admin_get_existing_matching_bucket(&query.existing_bucket)
-			.await?
+			.await?;
 			.ok_or_bad_request("Bucket not found")?;
 		if let Some(key_pattern) = &query.local {
 			let key = helper.key().get_existing_matching_key(key_pattern).await?;
@ -307,9 +304,8 @@ impl AdminRpcHandler {
 		let bucket_id = helper
 			.bucket()
-			.resolve_global_bucket_name(&query.bucket)
+			.admin_get_existing_matching_bucket(&query.bucket)
-			.await?
+			.await?;
 			.ok_or_bad_request("Bucket not found")?;
 		let key = helper
 			.key()
 			.get_existing_matching_key(&query.key_pattern)
@ -343,9 +339,8 @@ impl AdminRpcHandler {
 		let bucket_id = helper
 			.bucket()
-			.resolve_global_bucket_name(&query.bucket)
+			.admin_get_existing_matching_bucket(&query.bucket)
-			.await?
+			.await?;
 			.ok_or_bad_request("Bucket not found")?;
 		let key = helper
 			.key()
 			.get_existing_matching_key(&query.key_pattern)
@ -378,9 +373,8 @@ impl AdminRpcHandler {
 		let bucket_id = self
 			.garage
 			.bucket_helper()
-			.resolve_global_bucket_name(&query.bucket)
+			.admin_get_existing_matching_bucket(&query.bucket)
-			.await?
+			.await?;
 			.ok_or_bad_request("Bucket not found")?;
 		let mut bucket = self
 			.garage
@ -420,9 +414,8 @@ impl AdminRpcHandler {
 		let bucket_id = self
 			.garage
 			.bucket_helper()
-			.resolve_global_bucket_name(&query.bucket)
+			.admin_get_existing_matching_bucket(&query.bucket)
-			.await?
+			.await?;
 			.ok_or_bad_request("Bucket not found")?;
 		let mut bucket = self
 			.garage
@ -479,9 +472,8 @@ impl AdminRpcHandler {
 			bucket_ids.push(
 				self.garage
 					.bucket_helper()
-					.resolve_global_bucket_name(b)
+					.admin_get_existing_matching_bucket(b)
-					.await?
+					.await?,
 					.ok_or_bad_request(format!("Bucket not found: {}", b))?,
 			);
 		}
--- a/src/garage/admin/mod.rs
+++ b/src/garage/admin/mod.rs
@ -44,6 +44,7 @@ pub enum AdminRpc {
 	Stats(StatsOpt),
 	Worker(WorkerOperation),
 	BlockOperation(BlockOperation),
 	MetaOperation(MetaOperation),
 	// Replies
 	Ok(String),
@ -465,6 +466,43 @@ impl AdminRpcHandler {
 			)]))
 		}
 	}
 	// ================ META DB COMMANDS ====================
 	async fn handle_meta_cmd(self: &Arc<Self>, mo: &MetaOperation) -> Result<AdminRpc, Error> {
 		match mo {
 			MetaOperation::Snapshot { all: true } => {
 				let to = self.garage.system.cluster_layout().all_nodes().to_vec();
 				let resps = futures::future::join_all(to.iter().map(|to| async move {
 					let to = (*to).into();
 					self.endpoint
 						.call(
 							&to,
 							AdminRpc::MetaOperation(MetaOperation::Snapshot { all: false }),
 							PRIO_NORMAL,
 						)
 						.await
 				}))
 				.await;
 				let mut ret = vec![];
 				for (to, resp) in to.iter().zip(resps.iter()) {
 					let res_str = match resp {
 						Ok(_) => "ok".to_string(),
 						Err(e) => format!("error: {}", e),
 					};
 					ret.push(format!("{:?}\t{}", to, res_str));
 				}
 				Ok(AdminRpc::Ok(format_table_to_string(ret)))
 			}
 			MetaOperation::Snapshot { all: false } => {
 				garage_model::snapshot::async_snapshot_metadata(&self.garage).await?;
 				Ok(AdminRpc::Ok("Snapshot has been saved.".into()))
 			}
 		}
 	}
 }
 #[async_trait]
@ -481,6 +519,7 @@ impl EndpointHandler<AdminRpc> for AdminRpcHandler {
 			AdminRpc::Stats(opt) => self.handle_stats(opt.clone()).await,
 			AdminRpc::Worker(wo) => self.handle_worker_cmd(wo).await,
 			AdminRpc::BlockOperation(bo) => self.handle_block_cmd(bo).await,
 			AdminRpc::MetaOperation(mo) => self.handle_meta_cmd(mo).await,
 			m => Err(GarageError::unexpected_rpc_message(m).into()),
 		}
 	}
--- a/src/garage/cli/cmd.rs
+++ b/src/garage/cli/cmd.rs
@ -41,6 +41,9 @@ pub async fn cli_command_dispatch(
 		Command::Block(bo) => {
 			cmd_admin(admin_rpc_endpoint, rpc_host, AdminRpc::BlockOperation(bo)).await
 		}
 		Command::Meta(mo) => {
 			cmd_admin(admin_rpc_endpoint, rpc_host, AdminRpc::MetaOperation(mo)).await
 		}
 		_ => unreachable!(),
 	}
 }
@ -54,6 +57,10 @@ pub async fn cmd_status(rpc_cli: &Endpoint<SystemRpc, ()>, rpc_host: NodeID) ->
 		vec!["ID\tHostname\tAddress\tTags\tZone\tCapacity\tDataAvail".to_string()];
 	for adv in status.iter().filter(|adv| adv.is_up) {
 		let host = adv.status.hostname.as_deref().unwrap_or("?");
 		let addr = match adv.addr {
 			Some(addr) => addr.to_string(),
 			None => "N/A".to_string(),
 		};
 		if let Some(NodeRoleV(Some(cfg))) = layout.current().roles.get(&adv.id) {
 			let data_avail = match &adv.status.data_disk_avail {
 				_ if cfg.capacity.is_none() => "N/A".into(),
@ -68,7 +75,7 @@ pub async fn cmd_status(rpc_cli: &Endpoint<SystemRpc, ()>, rpc_host: NodeID) ->
 				"{id:?}\t{host}\t{addr}\t[{tags}]\t{zone}\t{capacity}\t{data_avail}",
 				id = adv.id,
 				host = host,
-				addr = adv.addr,
+				addr = addr,
 				tags = cfg.tags.join(","),
 				zone = cfg.zone,
 				capacity = cfg.capacity_string(),
@ -88,7 +95,7 @@ pub async fn cmd_status(rpc_cli: &Endpoint<SystemRpc, ()>, rpc_host: NodeID) ->
 					"{id:?}\t{host}\t{addr}\t[{tags}]\t{zone}\tdraining metadata...",
 					id = adv.id,
 					host = host,
-					addr = adv.addr,
+					addr = addr,
 					tags = cfg.tags.join(","),
 					zone = cfg.zone,
 				));
@ -101,7 +108,7 @@ pub async fn cmd_status(rpc_cli: &Endpoint<SystemRpc, ()>, rpc_host: NodeID) ->
 					"{id:?}\t{h}\t{addr}\t\t\t{new_role}",
 					id = adv.id,
 					h = host,
-					addr = adv.addr,
+					addr = addr,
 					new_role = new_role,
 				));
 			}
@ -117,8 +124,7 @@ pub async fn cmd_status(rpc_cli: &Endpoint<SystemRpc, ()>, rpc_host: NodeID) ->
 	let tf = timeago::Formatter::new();
 	let mut drain_msg = false;
-	let mut failed_nodes =
+	let mut failed_nodes = vec!["ID\tHostname\tTags\tZone\tCapacity\tLast seen".to_string()];
 		vec!["ID\tHostname\tAddress\tTags\tZone\tCapacity\tLast seen".to_string()];
 	let mut listed = HashSet::new();
 	for ver in layout.versions.iter().rev() {
 		for (node, _, role) in ver.roles.items().iter() {
@ -139,15 +145,14 @@ pub async fn cmd_status(rpc_cli: &Endpoint<SystemRpc, ()>, rpc_host: NodeID) ->
 			// Node is in a layout version, is not a gateway node, and is not up:
 			// it is in a failed state, add proper line to the output
-			let (host, addr, last_seen) = match adv {
+			let (host, last_seen) = match adv {
 				Some(adv) => (
 					adv.status.hostname.as_deref().unwrap_or("?"),
 					adv.addr.to_string(),
 					adv.last_seen_secs_ago
 						.map(|s| tf.convert(Duration::from_secs(s)))
 						.unwrap_or_else(|| "never seen".into()),
 				),
-				None => ("??", "??".into(), "never seen".into()),
+				None => ("??", "never seen".into()),
 			};
 			let capacity = if ver.version == layout.current().version {
 				cfg.capacity_string()
@ -156,10 +161,9 @@ pub async fn cmd_status(rpc_cli: &Endpoint<SystemRpc, ()>, rpc_host: NodeID) ->
 				"draining metadata...".to_string()
 			};
 			failed_nodes.push(format!(
-				"{id:?}\t{host}\t{addr}\t[{tags}]\t{zone}\t{capacity}\t{last_seen}",
+				"{id:?}\t{host}\t[{tags}]\t{zone}\t{capacity}\t{last_seen}",
 				id = node,
 				host = host,
 				addr = addr,
 				tags = cfg.tags.join(","),
 				zone = cfg.zone,
 				capacity = capacity,
--- a/src/garage/cli/structs.rs
+++ b/src/garage/cli/structs.rs
@ -48,10 +48,14 @@ pub enum Command {
 	#[structopt(name = "worker", version = garage_version())]
 	Worker(WorkerOperation),
-	/// Low-level debug operations on data blocks
+	/// Low-level node-local debug operations on data blocks
 	#[structopt(name = "block", version = garage_version())]
 	Block(BlockOperation),
 	/// Operations on the metadata db
 	#[structopt(name = "meta", version = garage_version())]
 	Meta(MetaOperation),
 	/// Convert metadata db between database engine formats
 	#[structopt(name = "convert-db", version = garage_version())]
 	ConvertDb(convert_db::ConvertDbOpt),
@ -469,8 +473,11 @@ pub enum RepairWhat {
 	#[structopt(name = "mpu", version = garage_version())]
 	MultipartUploads,
 	/// Repropagate version deletions to the block ref table
-	#[structopt(name = "block_refs", version = garage_version())]
+	#[structopt(name = "block-refs", version = garage_version())]
 	BlockRefs,
 	/// Recalculate block reference counters
 	#[structopt(name = "block-rc", version = garage_version())]
 	BlockRc,
 	/// Verify integrity of all blocks on disc
 	#[structopt(name = "scrub", version = garage_version())]
 	Scrub {
@ -611,3 +618,14 @@ pub enum BlockOperation {
 		blocks: Vec<String>,
 	},
 }
 #[derive(Serialize, Deserialize, StructOpt, Debug, Eq, PartialEq, Clone, Copy)]
 pub enum MetaOperation {
 	/// Save a snapshot of the metadata db file
 	#[structopt(name = "snapshot", version = garage_version())]
 	Snapshot {
 		/// Run on all nodes instead of only local node
 		#[structopt(long = "all")]
 		all: bool,
 	},
 }
--- a/src/garage/cli/util.rs
+++ b/src/garage/cli/util.rs
@ -451,7 +451,7 @@ pub fn print_block_info(
 	if refcount != nondeleted_count {
 		println!();
 		println!(
-			"Warning: refcount does not match number of non-deleted versions (see issue #644)."
+			"Warning: refcount does not match number of non-deleted versions, you should try `garage repair block-rc`."
 		);
 	}
 }
--- a/src/garage/main.rs
+++ b/src/garage/main.rs
@ -138,17 +138,8 @@ async fn main() {
 	let opt = Opt::from_clap(&Opt::clap().version(version.as_str()).get_matches());
 	// Initialize logging as well as other libraries used in Garage
-	if std::env::var("RUST_LOG").is_err() {
+	init_logging(&opt);
-		let default_log = match &opt.cmd {
+
 			Command::Server => "netapp=info,garage=info",
 			_ => "netapp=warn,garage=warn",
 		};
 		std::env::set_var("RUST_LOG", default_log)
 	}
 	tracing_subscriber::fmt()
 		.with_writer(std::io::stderr)
 		.with_env_filter(tracing_subscriber::filter::EnvFilter::from_default_env())
 		.init();
 	sodiumoxide::init().expect("Unable to init sodiumoxide");
 	let res = match opt.cmd {
@ -171,6 +162,58 @@ async fn main() {
 	}
 }
 fn init_logging(opt: &Opt) {
 	if std::env::var("RUST_LOG").is_err() {
 		let default_log = match &opt.cmd {
 			Command::Server => "netapp=info,garage=info",
 			_ => "netapp=warn,garage=warn",
 		};
 		std::env::set_var("RUST_LOG", default_log)
 	}
 	let env_filter = tracing_subscriber::filter::EnvFilter::from_default_env();
 	if std::env::var("GARAGE_LOG_TO_SYSLOG")
 		.map(|x| x == "1" || x == "true")
 		.unwrap_or(false)
 	{
 		#[cfg(feature = "syslog")]
 		{
 			use std::ffi::CStr;
 			use syslog_tracing::{Facility, Options, Syslog};
 			let syslog = Syslog::new(
 				CStr::from_bytes_with_nul(b"garage\0").unwrap(),
 				Options::LOG_PID | Options::LOG_PERROR,
 				Facility::Daemon,
 			)
 			.expect("Unable to init syslog");
 			tracing_subscriber::fmt()
 				.with_writer(syslog)
 				.with_env_filter(env_filter)
 				.with_ansi(false) // disable ANSI escape sequences (colours)
 				.with_file(false)
 				.with_level(false)
 				.without_time()
 				.compact()
 				.init();
 			return;
 		}
 		#[cfg(not(feature = "syslog"))]
 		{
 			eprintln!("Syslog support is not enabled in this build.");
 			std::process::exit(1);
 		}
 	}
 	tracing_subscriber::fmt()
 		.with_writer(std::io::stderr)
 		.with_env_filter(env_filter)
 		.init();
 }
 async fn cli_command(opt: Opt) -> Result<(), Error> {
 	let config = if (opt.secrets.rpc_secret.is_none() && opt.secrets.rpc_secret_file.is_none())
 		|| opt.rpc_host.is_none()
--- a/src/garage/repair/online.rs
+++ b/src/garage/repair/online.rs
@ -4,6 +4,7 @@ use std::time::Duration;
 use async_trait::async_trait;
 use tokio::sync::watch;
 use garage_block::manager::BlockManager;
 use garage_block::repair::ScrubWorkerCommand;
 use garage_model::garage::Garage;
@ -16,11 +17,14 @@ use garage_table::replication::*;
 use garage_table::*;
 use garage_util::background::*;
 use garage_util::data::*;
 use garage_util::error::Error;
 use garage_util::migrate::Migrate;
 use crate::*;
 const RC_REPAIR_ITER_COUNT: usize = 64;
 pub async fn launch_online_repair(
 	garage: &Arc<Garage>,
 	bg: &BackgroundRunner,
@ -47,6 +51,13 @@ pub async fn launch_online_repair(
 			info!("Repairing the block refs table");
 			bg.spawn_worker(TableRepairWorker::new(garage.clone(), RepairBlockRefs));
 		}
 		RepairWhat::BlockRc => {
 			info!("Repairing the block reference counters");
 			bg.spawn_worker(BlockRcRepair::new(
 				garage.block_manager.clone(),
 				garage.block_ref_table.clone(),
 			));
 		}
 		RepairWhat::Blocks => {
 			info!("Repairing the stored blocks");
 			bg.spawn_worker(garage_block::repair::RepairWorker::new(
@ -282,3 +293,98 @@ impl TableRepair for RepairMpu {
 		Ok(false)
 	}
 }
 // ===== block reference counter repair =====
 pub struct BlockRcRepair {
 	block_manager: Arc<BlockManager>,
 	block_ref_table: Arc<Table<BlockRefTable, TableShardedReplication>>,
 	cursor: Hash,
 	counter: u64,
 	repairs: u64,
 }
 impl BlockRcRepair {
 	fn new(
 		block_manager: Arc<BlockManager>,
 		block_ref_table: Arc<Table<BlockRefTable, TableShardedReplication>>,
 	) -> Self {
 		Self {
 			block_manager,
 			block_ref_table,
 			cursor: [0u8; 32].into(),
 			counter: 0,
 			repairs: 0,
 		}
 	}
 }
 #[async_trait]
 impl Worker for BlockRcRepair {
 	fn name(&self) -> String {
 		format!("Block refcount repair worker")
 	}
 	fn status(&self) -> WorkerStatus {
 		WorkerStatus {
 			progress: Some(format!("{} ({})", self.counter, self.repairs)),
 			..Default::default()
 		}
 	}
 	async fn work(&mut self, _must_exit: &mut watch::Receiver<bool>) -> Result<WorkerState, Error> {
 		for _i in 0..RC_REPAIR_ITER_COUNT {
 			let next1 = self
 				.block_manager
 				.rc
 				.rc_table
 				.range(self.cursor.as_slice()..)?
 				.next()
 				.transpose()?
 				.map(|(k, _)| Hash::try_from(k.as_slice()).unwrap());
 			let next2 = self
 				.block_ref_table
 				.data
 				.store
 				.range(self.cursor.as_slice()..)?
 				.next()
 				.transpose()?
 				.map(|(k, _)| Hash::try_from(&k[..32]).unwrap());
 			let next = match (next1, next2) {
 				(Some(k1), Some(k2)) => std::cmp::min(k1, k2),
 				(Some(k), None) | (None, Some(k)) => k,
 				(None, None) => {
 					info!(
 						"{}: finished, done {}, fixed {}",
 						self.name(),
 						self.counter,
 						self.repairs
 					);
 					return Ok(WorkerState::Done);
 				}
 			};
 			if self.block_manager.rc.recalculate_rc(&next)?.1 {
 				self.repairs += 1;
 			}
 			self.counter += 1;
 			if let Some(next_incr) = next.increment() {
 				self.cursor = next_incr;
 			} else {
 				info!(
 					"{}: finished, done {}, fixed {}",
 					self.name(),
 					self.counter,
 					self.repairs
 				);
 				return Ok(WorkerState::Done);
 			}
 		}
 		Ok(WorkerState::Busy)
 	}
 	async fn wait_for_work(&mut self) -> WorkerState {
 		unreachable!()
 	}
 }
--- a/src/garage/server.rs
+++ b/src/garage/server.rs
@ -51,7 +51,7 @@ pub async fn run_server(config_file: PathBuf, secrets: Secrets) -> Result<(), Er
 	let (background, await_background_done) = BackgroundRunner::new(watch_cancel.clone());
 	info!("Spawning Garage workers...");
-	garage.spawn_workers(&background);
+	garage.spawn_workers(&background)?;
 	if config.admin.trace_sink.is_some() {
 		info!("Initialize tracing...");
--- a/src/garage/tests/common/garage.rs
+++ b/src/garage/tests/common/garage.rs
@ -42,6 +42,10 @@ impl Instance {
 			.ok()
 			.unwrap_or_else(|| env::temp_dir().join(format!("garage-integ-test-{}", port)));
 		let db_engine = env::var("GARAGE_TEST_INTEGRATION_DB_ENGINE")
 			.ok()
 			.unwrap_or_else(|| "lmdb".into());
 		// Clean test runtime directory
 		if path.exists() {
 			fs::remove_dir_all(&path).expect("Could not clean test runtime directory");
@ -52,7 +56,7 @@ impl Instance {
 			r#"
 metadata_dir = "{path}/meta"
 data_dir = "{path}/data"
-db_engine = "lmdb"
+db_engine = "{db_engine}"
 replication_factor = 1
--- a/src/garage/tests/k2v/poll.rs
+++ b/src/garage/tests/k2v/poll.rs
@ -10,6 +10,7 @@ use crate::common;
 use crate::json_body;
 #[tokio::test]
 #[ignore = "currently broken"]
 async fn test_poll_item() {
 	let ctx = common::context();
 	let bucket = ctx.create_bucket("test-k2v-poll-item");
@ -98,6 +99,7 @@ async fn test_poll_item() {
 }
 #[tokio::test]
 #[ignore = "currently broken"]
 async fn test_poll_range() {
 	let ctx = common::context();
 	let bucket = ctx.create_bucket("test-k2v-poll-range");
--- a/src/garage/tests/s3/multipart.rs
+++ b/src/garage/tests/s3/multipart.rs
@ -1,6 +1,7 @@
 use crate::common;
 use aws_sdk_s3::primitives::ByteStream;
-use aws_sdk_s3::types::{CompletedMultipartUpload, CompletedPart};
+use aws_sdk_s3::types::{ChecksumAlgorithm, CompletedMultipartUpload, CompletedPart};
 use base64::prelude::*;
 const SZ_5MB: usize = 5 * 1024 * 1024;
 const SZ_10MB: usize = 10 * 1024 * 1024;
@ -189,6 +190,153 @@ async fn test_multipart_upload() {
 	}
 }
 #[tokio::test]
 async fn test_multipart_with_checksum() {
 	let ctx = common::context();
 	let bucket = ctx.create_bucket("testmpu-cksum");
 	let u1 = vec![0x11; SZ_5MB];
 	let u2 = vec![0x22; SZ_5MB];
 	let u3 = vec![0x33; SZ_5MB];
 	let ck1 = calculate_sha1(&u1);
 	let ck2 = calculate_sha1(&u2);
 	let ck3 = calculate_sha1(&u3);
 	let up = ctx
 		.client
 		.create_multipart_upload()
 		.bucket(&bucket)
 		.checksum_algorithm(ChecksumAlgorithm::Sha1)
 		.key("a")
 		.send()
 		.await
 		.unwrap();
 	assert!(up.upload_id.is_some());
 	let uid = up.upload_id.as_ref().unwrap();
 	let p1 = ctx
 		.client
 		.upload_part()
 		.bucket(&bucket)
 		.key("a")
 		.upload_id(uid)
 		.part_number(1)
 		.checksum_sha1(&ck1)
 		.body(ByteStream::from(u1.clone()))
 		.send()
 		.await
 		.unwrap();
 	// wrong checksum value should return an error
 	let err1 = ctx
 		.client
 		.upload_part()
 		.bucket(&bucket)
 		.key("a")
 		.upload_id(uid)
 		.part_number(2)
 		.checksum_sha1(&ck1)
 		.body(ByteStream::from(u2.clone()))
 		.send()
 		.await;
 	assert!(err1.is_err());
 	let p2 = ctx
 		.client
 		.upload_part()
 		.bucket(&bucket)
 		.key("a")
 		.upload_id(uid)
 		.part_number(2)
 		.checksum_sha1(&ck2)
 		.body(ByteStream::from(u2))
 		.send()
 		.await
 		.unwrap();
 	let p3 = ctx
 		.client
 		.upload_part()
 		.bucket(&bucket)
 		.key("a")
 		.upload_id(uid)
 		.part_number(3)
 		.checksum_sha1(&ck3)
 		.body(ByteStream::from(u3.clone()))
 		.send()
 		.await
 		.unwrap();
 	{
 		let r = ctx
 			.client
 			.list_parts()
 			.bucket(&bucket)
 			.key("a")
 			.upload_id(uid)
 			.send()
 			.await
 			.unwrap();
 		let parts = r.parts.unwrap();
 		assert_eq!(parts.len(), 3);
 		assert!(parts[0].checksum_crc32.is_none());
 		assert!(parts[0].checksum_crc32_c.is_none());
 		assert!(parts[0].checksum_sha256.is_none());
 		assert_eq!(parts[0].checksum_sha1.as_deref().unwrap(), ck1);
 		assert_eq!(parts[1].checksum_sha1.as_deref().unwrap(), ck2);
 		assert_eq!(parts[2].checksum_sha1.as_deref().unwrap(), ck3);
 	}
 	let cmp = CompletedMultipartUpload::builder()
 		.parts(
 			CompletedPart::builder()
 				.part_number(1)
 				.checksum_sha1(&ck1)
 				.e_tag(p1.e_tag.unwrap())
 				.build(),
 		)
 		.parts(
 			CompletedPart::builder()
 				.part_number(2)
 				.checksum_sha1(&ck2)
 				.e_tag(p2.e_tag.unwrap())
 				.build(),
 		)
 		.parts(
 			CompletedPart::builder()
 				.part_number(3)
 				.checksum_sha1(&ck3)
 				.e_tag(p3.e_tag.unwrap())
 				.build(),
 		)
 		.build();
 	let expected_checksum = calculate_sha1(
 		&vec![
 			BASE64_STANDARD.decode(&ck1).unwrap(),
 			BASE64_STANDARD.decode(&ck2).unwrap(),
 			BASE64_STANDARD.decode(&ck3).unwrap(),
 		]
 		.concat(),
 	);
 	let res = ctx
 		.client
 		.complete_multipart_upload()
 		.bucket(&bucket)
 		.key("a")
 		.upload_id(uid)
 		.checksum_sha1(expected_checksum.clone())
 		.multipart_upload(cmp)
 		.send()
 		.await
 		.unwrap();
 	assert_eq!(res.checksum_sha1, Some(expected_checksum));
 }
 #[tokio::test]
 async fn test_uploadlistpart() {
 	let ctx = common::context();
@ -624,3 +772,11 @@ async fn test_uploadpartcopy() {
 	assert_eq!(real_obj.len(), exp_obj.len());
 	assert_eq!(real_obj, exp_obj);
 }
 fn calculate_sha1(bytes: &[u8]) -> String {
 	use sha1::{Digest, Sha1};
 	let mut hasher = Sha1::new();
 	hasher.update(bytes);
 	BASE64_STANDARD.encode(&hasher.finalize()[..])
 }
--- a/src/model/Cargo.toml
+++ b/src/model/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage_model"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>"]
 edition = "2018"
 license = "AGPL-3.0"
@ -29,6 +29,7 @@ err-derive.workspace = true
 hex.workspace = true
 http.workspace = true
 base64.workspace = true
 parse_duration.workspace = true
 tracing.workspace = true
 rand.workspace = true
 zstd.workspace = true
--- a/src/model/garage.rs
+++ b/src/model/garage.rs
@ -170,14 +170,7 @@ impl Garage {
 		};
 		info!("Initialize block manager...");
-		let block_manager = BlockManager::new(
+		let block_manager = BlockManager::new(&db, &config, data_rep_param, system.clone())?;
 			&db,
 			config.data_dir.clone(),
 			config.data_fsync,
 			config.compression_level,
 			data_rep_param,
 			system.clone(),
 		)?;
 		block_manager.register_bg_vars(&mut bg_vars);
 		// ---- admin tables ----
@ -254,6 +247,14 @@ impl Garage {
 		#[cfg(feature = "k2v")]
 		let k2v = GarageK2V::new(system.clone(), &db, meta_rep_param);
 		// ---- setup block refcount recalculation ----
 		// this function can be used to fix inconsistencies in the RC table
 		block_manager.set_recalc_rc(vec![
 			block_ref_recount_fn(&block_ref_table),
 			// other functions could be added here if we had other tables
 			// that hold references to data blocks
 		]);
 		// -- done --
 		Ok(Arc::new(Self {
 			config,
@ -278,7 +279,7 @@ impl Garage {
 		}))
 	}
-	pub fn spawn_workers(self: &Arc<Self>, bg: &BackgroundRunner) {
+	pub fn spawn_workers(self: &Arc<Self>, bg: &BackgroundRunner) -> Result<(), Error> {
 		self.block_manager.spawn_workers(bg);
 		self.bucket_table.spawn_workers(bg);
@ -299,6 +300,23 @@ impl Garage {
 		#[cfg(feature = "k2v")]
 		self.k2v.spawn_workers(bg);
 		if let Some(itv) = self.config.metadata_auto_snapshot_interval.as_deref() {
 			let interval = parse_duration::parse(itv)
 				.ok_or_message("Invalid `metadata_auto_snapshot_interval`")?;
 			if interval < std::time::Duration::from_secs(600) {
 				return Err(Error::Message(
 					"metadata_auto_snapshot_interval too small or negative".into(),
 				));
 			}
 			bg.spawn_worker(crate::snapshot::AutoSnapshotWorker::new(
 				self.clone(),
 				interval,
 			));
 		}
 		Ok(())
 	}
 	pub fn bucket_helper(&self) -> helper::bucket::BucketHelper {
--- a/src/model/helper/bucket.rs
+++ b/src/model/helper/bucket.rs
@ -67,6 +67,49 @@ impl<'a> BucketHelper<'a> {
 		}
 	}
 	/// Find a bucket by its global alias or a prefix of its uuid
 	pub async fn admin_get_existing_matching_bucket(
 		&self,
 		pattern: &String,
 	) -> Result<Uuid, Error> {
 		if let Some(uuid) = self.resolve_global_bucket_name(pattern).await? {
 			return Ok(uuid);
 		} else if pattern.len() >= 2 {
 			let hexdec = pattern
 				.get(..pattern.len() & !1)
 				.and_then(|x| hex::decode(x).ok());
 			if let Some(hex) = hexdec {
 				let mut start = [0u8; 32];
 				start
 					.as_mut_slice()
 					.get_mut(..hex.len())
 					.ok_or_bad_request("invalid length")?
 					.copy_from_slice(&hex);
 				let mut candidates = self
 					.0
 					.bucket_table
 					.get_range(
 						&EmptyKey,
 						Some(start.into()),
 						Some(DeletedFilter::NotDeleted),
 						10,
 						EnumerationOrder::Forward,
 					)
 					.await?
 					.into_iter()
 					.collect::<Vec<_>>();
 				candidates.retain(|x| hex::encode(x.id).starts_with(pattern));
 				if candidates.len() == 1 {
 					return Ok(candidates.into_iter().next().unwrap().id);
 				}
 			}
 		}
 		Err(Error::BadRequest(format!(
 			"Bucket not found / several matching buckets: {}",
 			pattern
 		)))
 	}
 	/// Returns a Bucket if it is present in bucket table,
 	/// even if it is in deleted state. Querying a non-existing
 	/// bucket ID returns an internal error.
--- a/src/model/k2v/rpc.rs
+++ b/src/model/k2v/rpc.rs
@ -219,12 +219,11 @@ impl K2VRpcHandler {
 			},
 			sort_key,
 		};
 		// TODO figure this out with write sets, is it still appropriate???
 		let nodes = self
 			.item_table
 			.data
 			.replication
-			.read_nodes(&poll_key.partition.hash());
+			.storage_nodes(&poll_key.partition.hash());
 		let rpc = self.system.rpc_helper().try_call_many(
 			&self.endpoint,
@ -239,8 +238,7 @@ impl K2VRpcHandler {
 				.send_all_at_once(true)
 				.without_timeout(),
 		);
-		let timeout_duration =
+		let timeout_duration = Duration::from_millis(timeout_msec);
 			Duration::from_millis(timeout_msec) + self.system.rpc_helper().rpc_timeout();
 		let resps = select! {
 			r = rpc => r?,
 			_ = tokio::time::sleep(timeout_duration) => return Ok(None),
@ -282,12 +280,11 @@ impl K2VRpcHandler {
 		seen.restrict(&range);
 		// Prepare PollRange RPC to send to the storage nodes responsible for the parititon
 		// TODO figure this out with write sets, does it still work????
 		let nodes = self
 			.item_table
 			.data
 			.replication
-			.read_nodes(&range.partition.hash());
+			.storage_nodes(&range.partition.hash());
 		let quorum = self.item_table.data.replication.read_quorum();
 		let msg = K2VRpc::PollRange {
 			range,
@ -303,7 +300,7 @@ impl K2VRpcHandler {
 			.map(|node| {
 				self.system
 					.rpc_helper()
-					.call(&self.endpoint, *node, msg.clone(), rs)
+					.call(&self.endpoint, *node, msg.clone(), rs.clone())
 			})
 			.collect::<FuturesUnordered<_>>();
@ -320,9 +317,7 @@ impl K2VRpcHandler {
 		// kind: all items produced by that node until time ts have been returned, so we can
 		// bump the entry in the global vector clock and possibly remove some item-specific
 		// vector clocks)
-		let mut deadline = Instant::now()
+		let mut deadline = Instant::now() + Duration::from_millis(timeout_msec);
 			+ Duration::from_millis(timeout_msec)
 			+ self.system.rpc_helper().rpc_timeout();
 		let mut resps = vec![];
 		let mut errors = vec![];
 		loop {
--- a/src/model/lib.rs
+++ b/src/model/lib.rs
@ -15,3 +15,4 @@ pub mod s3;
 pub mod garage;
 pub mod helper;
 pub mod snapshot;
--- a/src/model/s3/block_ref_table.rs
+++ b/src/model/s3/block_ref_table.rs
@ -3,8 +3,12 @@ use std::sync::Arc;
 use garage_db as db;
 use garage_util::data::*;
 use garage_util::error::*;
 use garage_util::migrate::Migrate;
 use garage_block::CalculateRefcount;
 use garage_table::crdt::Crdt;
 use garage_table::replication::TableShardedReplication;
 use garage_table::*;
 use garage_block::manager::*;
@ -84,3 +88,38 @@ impl TableSchema for BlockRefTable {
 		filter.apply(entry.deleted.get())
 	}
 }
 pub fn block_ref_recount_fn(
 	block_ref_table: &Arc<Table<BlockRefTable, TableShardedReplication>>,
 ) -> CalculateRefcount {
 	let table = Arc::downgrade(block_ref_table);
 	Box::new(move |tx: &db::Transaction, block: &Hash| {
 		let table = table
 			.upgrade()
 			.ok_or_message("cannot upgrade weak ptr to block_ref_table")
 			.map_err(db::TxError::Abort)?;
 		Ok(calculate_refcount(&table, tx, block)?)
 	})
 }
 fn calculate_refcount(
 	block_ref_table: &Table<BlockRefTable, TableShardedReplication>,
 	tx: &db::Transaction,
 	block: &Hash,
 ) -> db::TxResult<usize, Error> {
 	let mut result = 0;
 	for entry in tx.range(&block_ref_table.data.store, block.as_slice()..)? {
 		let (key, value) = entry?;
 		if &key[..32] != block.as_slice() {
 			break;
 		}
 		let value = BlockRef::decode(&value)
 			.ok_or_message("could not decode block_ref")
 			.map_err(db::TxError::Abort)?;
 		assert_eq!(value.block, *block);
 		if !value.deleted.get() {
 			result += 1;
 		}
 	}
 	Ok(result)
 }
--- a/src/model/s3/mpu_table.rs
+++ b/src/model/s3/mpu_table.rs
@ -17,6 +17,7 @@ pub const PARTS: &str = "parts";
 pub const BYTES: &str = "bytes";
 mod v09 {
 	use crate::s3::object_table::ChecksumValue;
 	use garage_util::crdt;
 	use garage_util::data::Uuid;
 	use serde::{Deserialize, Serialize};
@ -61,6 +62,9 @@ mod v09 {
 		pub version: Uuid,
 		/// ETag of the content of this part (known only once done uploading)
 		pub etag: Option<String>,
 		/// Checksum requested by x-amz-checksum-algorithm
 		#[serde(default)]
 		pub checksum: Option<ChecksumValue>,
 		/// Size of this part (known only once done uploading)
 		pub size: Option<u64>,
 	}
@ -155,6 +159,11 @@ impl Crdt for MpuPart {
 			(Some(x), Some(y)) if x < y => other.size,
 			(x, _) => x,
 		};
 		self.checksum = match (self.checksum.take(), &other.checksum) {
 			(None, Some(_)) => other.checksum.clone(),
 			(Some(x), Some(y)) if x < *y => other.checksum.clone(),
 			(x, _) => x,
 		};
 	}
 }
--- a/src/model/s3/object_table.rs
+++ b/src/model/s3/object_table.rs
@ -208,6 +208,8 @@ mod v010 {
 		Uploading {
 			/// Indicates whether this is a multipart upload
 			multipart: bool,
 			/// Checksum algorithm to use
 			checksum_algorithm: Option<ChecksumAlgorithm>,
 			/// Encryption params + headers to be included in the final object
 			encryption: ObjectVersionEncryption,
 		},
@ -247,10 +249,10 @@ mod v010 {
 	#[derive(PartialEq, Eq, PartialOrd, Ord, Clone, Debug, Serialize, Deserialize)]
 	pub enum ObjectVersionEncryption {
 		SseC {
-			/// Encrypted serialized ObjectVersionHeaders struct.
+			/// Encrypted serialized ObjectVersionInner struct.
 			/// This is never compressed, just encrypted using AES256-GCM.
 			#[serde(with = "serde_bytes")]
-			headers: Vec<u8>,
+			inner: Vec<u8>,
 			/// Whether data blocks are compressed in addition to being encrypted
 			/// (compression happens before encryption, whereas for non-encrypted
 			/// objects, compression is handled at the level of the block manager)
@ -258,13 +260,35 @@ mod v010 {
 		},
 		Plaintext {
 			/// Plain-text headers
-			headers: ObjectVersionHeaders,
+			inner: ObjectVersionMetaInner,
 		},
 	}
 	/// Vector of headers, as tuples of the format (header name, header value)
 	#[derive(PartialEq, Eq, PartialOrd, Ord, Clone, Debug, Serialize, Deserialize)]
-	pub struct ObjectVersionHeaders(pub Vec<(String, String)>);
+	pub struct ObjectVersionMetaInner {
 		pub headers: HeaderList,
 		pub checksum: Option<ChecksumValue>,
 	}
 	pub type HeaderList = Vec<(String, String)>;
 	#[derive(PartialEq, Eq, PartialOrd, Ord, Clone, Copy, Debug, Serialize, Deserialize)]
 	pub enum ChecksumAlgorithm {
 		Crc32,
 		Crc32c,
 		Sha1,
 		Sha256,
 	}
 	/// Checksum value for x-amz-checksum-algorithm
 	#[derive(PartialEq, Eq, PartialOrd, Ord, Clone, Copy, Debug, Serialize, Deserialize)]
 	pub enum ChecksumValue {
 		Crc32(#[serde(with = "serde_bytes")] [u8; 4]),
 		Crc32c(#[serde(with = "serde_bytes")] [u8; 4]),
 		Sha1(#[serde(with = "serde_bytes")] [u8; 20]),
 		Sha256(#[serde(with = "serde_bytes")] [u8; 32]),
 	}
 	impl garage_util::migrate::Migrate for Object {
 		const VERSION_MARKER: &'static [u8] = b"G010s3ob";
@ -288,6 +312,7 @@ mod v010 {
 				v09::ObjectVersionState::Uploading { multipart, headers } => {
 					ObjectVersionState::Uploading {
 						multipart,
 						checksum_algorithm: None,
 						encryption: migrate_headers(headers),
 					}
 				}
@ -331,15 +356,18 @@ mod v010 {
 		}
 		ObjectVersionEncryption::Plaintext {
-			headers: ObjectVersionHeaders(new_headers),
+			inner: ObjectVersionMetaInner {
 				headers: new_headers,
 				checksum: None,
 			},
 		}
 	}
-	// Since ObjectVersionHeaders can now be serialized independently, for the
+	// Since ObjectVersionMetaInner can now be serialized independently, for the
 	// purpose of being encrypted, we need it to support migrations on its own
 	// as well.
-	impl garage_util::migrate::InitialFormat for ObjectVersionHeaders {
+	impl garage_util::migrate::InitialFormat for ObjectVersionMetaInner {
-		const VERSION_MARKER: &'static [u8] = b"G010s3oh";
+		const VERSION_MARKER: &'static [u8] = b"G010s3om";
 	}
 }
@ -454,6 +482,17 @@ impl Entry<Uuid, String> for Object {
 	}
 }
 impl ChecksumValue {
 	pub fn algorithm(&self) -> ChecksumAlgorithm {
 		match self {
 			ChecksumValue::Crc32(_) => ChecksumAlgorithm::Crc32,
 			ChecksumValue::Crc32c(_) => ChecksumAlgorithm::Crc32c,
 			ChecksumValue::Sha1(_) => ChecksumAlgorithm::Sha1,
 			ChecksumValue::Sha256(_) => ChecksumAlgorithm::Sha256,
 		}
 	}
 }
 impl Crdt for Object {
 	fn merge(&mut self, other: &Self) {
 		// Merge versions from other into here
--- a/src/model/snapshot.rs
+++ b/src/model/snapshot.rs
@ -0,0 +1,136 @@
 use std::fs;
 use std::path::PathBuf;
 use std::sync::Arc;
 use std::sync::Mutex;
 use std::time::{Duration, Instant};
 use async_trait::async_trait;
 use rand::prelude::*;
 use tokio::sync::watch;
 use garage_util::background::*;
 use garage_util::error::*;
 use crate::garage::Garage;
 // The two most recent snapshots are kept
 const KEEP_SNAPSHOTS: usize = 2;
 static SNAPSHOT_MUTEX: Mutex<()> = Mutex::new(());
 // ================ snapshotting logic =====================
 /// Run snashot_metadata in a blocking thread and async await on it
 pub async fn async_snapshot_metadata(garage: &Arc<Garage>) -> Result<(), Error> {
 	let garage = garage.clone();
 	let worker = tokio::task::spawn_blocking(move || snapshot_metadata(&garage));
 	worker.await.unwrap()?;
 	Ok(())
 }
 /// Take a snapshot of the metadata database, and erase older
 /// snapshots if necessary.
 /// This is not an async function, it should be spawned on a thread pool
 pub fn snapshot_metadata(garage: &Garage) -> Result<(), Error> {
 	let lock = match SNAPSHOT_MUTEX.try_lock() {
 		Ok(lock) => lock,
 		Err(_) => {
 			return Err(Error::Message(
 				"Cannot acquire lock, another snapshot might be in progress".into(),
 			))
 		}
 	};
 	let mut snapshots_dir = garage.config.metadata_dir.clone();
 	snapshots_dir.push("snapshots");
 	fs::create_dir_all(&snapshots_dir)?;
 	let mut new_path = snapshots_dir.clone();
 	new_path.push(chrono::Utc::now().to_rfc3339_opts(chrono::SecondsFormat::Secs, true));
 	info!("Snapshotting metadata db to {}", new_path.display());
 	garage.db.snapshot(&new_path)?;
 	info!("Metadata db snapshot finished");
 	if let Err(e) = cleanup_snapshots(&snapshots_dir) {
 		error!("Failed to do cleanup in snapshots directory: {}", e);
 	}
 	drop(lock);
 	Ok(())
 }
 fn cleanup_snapshots(snapshots_dir: &PathBuf) -> Result<(), Error> {
 	let mut snapshots =
 		fs::read_dir(&snapshots_dir)?.collect::<Result<Vec<fs::DirEntry>, std::io::Error>>()?;
 	snapshots.retain(|x| x.file_name().len() > 8);
 	snapshots.sort_by_key(|x| x.file_name());
 	for to_delete in snapshots.iter().rev().skip(KEEP_SNAPSHOTS) {
 		let path = snapshots_dir.join(to_delete.path());
 		if to_delete.metadata()?.file_type().is_dir() {
 			for file in fs::read_dir(&path)? {
 				let file = file?;
 				if file.metadata()?.is_file() {
 					fs::remove_file(path.join(file.path()))?;
 				}
 			}
 			std::fs::remove_dir(&path)?;
 		} else {
 			std::fs::remove_file(&path)?;
 		}
 	}
 	Ok(())
 }
 // ================ auto snapshot worker =====================
 pub struct AutoSnapshotWorker {
 	garage: Arc<Garage>,
 	next_snapshot: Instant,
 	snapshot_interval: Duration,
 }
 impl AutoSnapshotWorker {
 	pub(crate) fn new(garage: Arc<Garage>, snapshot_interval: Duration) -> Self {
 		Self {
 			garage,
 			snapshot_interval,
 			next_snapshot: Instant::now() + (snapshot_interval / 2),
 		}
 	}
 }
 #[async_trait]
 impl Worker for AutoSnapshotWorker {
 	fn name(&self) -> String {
 		"Metadata snapshot worker".into()
 	}
 	fn status(&self) -> WorkerStatus {
 		WorkerStatus {
 			freeform: vec![format!(
 				"Next snapshot: {}",
 				(chrono::Utc::now() + (self.next_snapshot - Instant::now())).to_rfc3339()
 			)],
 			..Default::default()
 		}
 	}
 	async fn work(&mut self, _must_exit: &mut watch::Receiver<bool>) -> Result<WorkerState, Error> {
 		if Instant::now() < self.next_snapshot {
 			return Ok(WorkerState::Idle);
 		}
 		async_snapshot_metadata(&self.garage).await?;
 		let rand_factor = 1f32 + thread_rng().gen::<f32>() / 5f32;
 		self.next_snapshot = Instant::now() + self.snapshot_interval.mul_f32(rand_factor);
 		Ok(WorkerState::Idle)
 	}
 	async fn wait_for_work(&mut self) -> WorkerState {
 		tokio::time::sleep_until(self.next_snapshot.into()).await;
 		WorkerState::Busy
 	}
 }
--- a/src/net/Cargo.toml
+++ b/src/net/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage_net"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>"]
 edition = "2018"
 license = "AGPL-3.0"
--- a/src/net/message.rs
+++ b/src/net/message.rs
@ -28,12 +28,30 @@ use crate::util::*;
 /// The same priority value is given to a request and to its associated response.
 pub type RequestPriority = u8;
 // Usage of priority levels in Garage:
 //
 // PRIO_HIGH
 //      for liveness check events such as pings and important
 //      reconfiguration events such as layout changes
 //
 // PRIO_NORMAL
 //      for standard interactive requests to exchange metadata
 //
 // PRIO_NORMAL | PRIO_SECONDARY
 //      for standard interactive requests to exchange block data
 //
 // PRIO_BACKGROUND
 //      for background resync requests to exchange metadata
 // PRIO_BACKGROUND | PRIO_SECONDARY
 //      for background resync requests to exchange block data
 /// Priority class: high
 pub const PRIO_HIGH: RequestPriority = 0x20;
 /// Priority class: normal
 pub const PRIO_NORMAL: RequestPriority = 0x40;
 /// Priority class: background
 pub const PRIO_BACKGROUND: RequestPriority = 0x80;
 /// Priority: primary among given class
 pub const PRIO_PRIMARY: RequestPriority = 0x00;
 /// Priority: secondary among given class (ex: `PRIO_HIGH | PRIO_SECONDARY`)
--- a/src/net/netapp.rs
+++ b/src/net/netapp.rs
@ -35,8 +35,10 @@ pub type NetworkKey = sodiumoxide::crypto::auth::Key;
 /// composed of 8 bytes for Netapp version and 8 bytes for client version
 pub(crate) type VersionTag = [u8; 16];
-/// Value of the Netapp version used in the version tag
+/// Value of garage_net version used in the version tag
-pub(crate) const NETAPP_VERSION_TAG: u64 = 0x6e65746170700005; // netapp 0x0005
+/// We are no longer using prefix `netapp` as garage_net is forked from the netapp crate.
 /// Since Garage v1.0, we have replaced the prefix by `grgnet` (shorthand for garage_net).
 pub(crate) const NETAPP_VERSION_TAG: u64 = 0x6772676e65740010; // grgnet 0x0010 (1.0)
 /// HelloMessage is sent by the client on a Netapp connection to indicate
 /// that they are also a server and ready to recieve incoming connections
@ -123,7 +125,7 @@ impl NetApp {
 		netapp
 			.hello_endpoint
-			.swap(Some(netapp.endpoint("__netapp/netapp.rs/Hello".into())));
+			.swap(Some(netapp.endpoint("garage_net/netapp.rs/Hello".into())));
 		netapp
 			.hello_endpoint
 			.load_full()
@ -292,13 +294,7 @@ impl NetApp {
 	/// the other node with `Netapp::request`
 	pub async fn try_connect(self: Arc<Self>, ip: SocketAddr, id: NodeID) -> Result<(), Error> {
 		// Don't connect to ourself, we don't care
 		// but pretend we did
 		if id == self.id {
 			tokio::spawn(async move {
 				if let Some(h) = self.on_connected_handler.load().as_ref() {
 					h(id, ip, false);
 				}
 			});
 			return Ok(());
 		}
@ -327,31 +323,32 @@ impl NetApp {
 	/// Close the outgoing connection we have to a node specified by its public key,
 	/// if such a connection is currently open.
 	pub fn disconnect(self: &Arc<Self>, id: &NodeID) {
 		let conn = self.client_conns.write().unwrap().remove(id);
 		// If id is ourself, we're not supposed to have a connection open
-		if *id != self.id {
+		if *id == self.id {
-			let conn = self.client_conns.write().unwrap().remove(id);
+			// sanity check
-			if let Some(c) = conn {
+			assert!(conn.is_none(), "had a connection to local node");
-				debug!(
+			return;
 					"Closing connection to {} ({})",
 					hex::encode(&c.peer_id[..8]),
 					c.remote_addr
 				);
 				c.close();
 			} else {
 				return;
 			}
 		}
-		// call on_disconnected_handler immediately, since the connection
+		if let Some(c) = conn {
-		// was removed
+			debug!(
-		// (if id == self.id, we pretend we disconnected)
+				"Closing connection to {} ({})",
-		let id = *id;
+				hex::encode(&c.peer_id[..8]),
-		let self2 = self.clone();
+				c.remote_addr
-		tokio::spawn(async move {
+			);
-			if let Some(h) = self2.on_disconnected_handler.load().as_ref() {
+			c.close();
-				h(id, false);
+
-			}
+			// call on_disconnected_handler immediately, since the connection was removed
-		});
+			let id = *id;
 			let self2 = self.clone();
 			tokio::spawn(async move {
 				if let Some(h) = self2.on_disconnected_handler.load().as_ref() {
 					h(id, false);
 				}
 			});
 		}
 	}
 	// Called from conn.rs when an incoming connection is successfully established
--- a/src/net/peering.rs
+++ b/src/net/peering.rs
@ -54,12 +54,8 @@ impl Message for PeerListMessage {
 #[derive(Debug)]
 struct PeerInfoInternal {
-	// addr is the currently connected address,
+	// known_addrs contains all of the addresses everyone gave us
-	// or the last address we were connected to,
+	known_addrs: Vec<SocketAddr>,
 	// or an arbitrary address some other peer gave us
 	addr: SocketAddr,
 	// all_addrs contains all of the addresses everyone gave us
 	all_addrs: Vec<SocketAddr>,
 	state: PeerConnState,
 	last_send_ping: Option<Instant>,
@ -69,10 +65,9 @@ struct PeerInfoInternal {
 }
 impl PeerInfoInternal {
-	fn new(addr: SocketAddr, state: PeerConnState) -> Self {
+	fn new(state: PeerConnState, known_addr: Option<SocketAddr>) -> Self {
 		Self {
-			addr,
+			known_addrs: known_addr.map(|x| vec![x]).unwrap_or_default(),
 			all_addrs: vec![addr],
 			state,
 			last_send_ping: None,
 			last_seen: None,
@ -81,8 +76,8 @@ impl PeerInfoInternal {
 		}
 	}
 	fn add_addr(&mut self, addr: SocketAddr) -> bool {
-		if !self.all_addrs.contains(&addr) {
+		if !self.known_addrs.contains(&addr) {
-			self.all_addrs.push(addr);
+			self.known_addrs.push(addr);
 			// If we are learning a new address for this node,
 			// we want to retry connecting
 			self.state = match self.state {
@ -90,7 +85,7 @@ impl PeerInfoInternal {
 				PeerConnState::Waiting(_, _) | PeerConnState::Abandonned => {
 					PeerConnState::Waiting(0, Instant::now())
 				}
-				x @ (PeerConnState::Ourself | PeerConnState::Connected) => x,
+				x @ (PeerConnState::Ourself | PeerConnState::Connected { .. }) => x,
 			};
 			true
 		} else {
@ -104,8 +99,6 @@ impl PeerInfoInternal {
 pub struct PeerInfo {
 	/// The node's identifier (its public key)
 	pub id: NodeID,
 	/// The node's network address
 	pub addr: SocketAddr,
 	/// The current status of our connection to this node
 	pub state: PeerConnState,
 	/// The last time at which the node was seen
@ -136,7 +129,7 @@ pub enum PeerConnState {
 	Ourself,
 	/// We currently have a connection to this peer
-	Connected,
+	Connected { addr: SocketAddr },
 	/// Our next connection tentative (the nth, where n is the first value of the tuple)
 	/// will be at given Instant
@ -152,7 +145,7 @@ pub enum PeerConnState {
 impl PeerConnState {
 	/// Returns true if we can currently send requests to this peer
 	pub fn is_up(&self) -> bool {
-		matches!(self, Self::Ourself | Self::Connected)
+		matches!(self, Self::Ourself | Self::Connected { .. })
 	}
 }
@ -164,29 +157,42 @@ struct KnownHosts {
 impl KnownHosts {
 	fn new() -> Self {
 		let list = HashMap::new();
-		let hash = Self::calculate_hash(vec![]);
+		let mut ret = Self {
-		Self { list, hash }
+			list,
 			hash: hash::Digest::from_slice(&[0u8; 64][..]).unwrap(),
 		};
 		ret.update_hash();
 		ret
 	}
 	fn update_hash(&mut self) {
-		self.hash = Self::calculate_hash(self.connected_peers_vec());
+		// The hash is a value that is exchanged between nodes when they ping one
-	}
+		// another.  Nodes compare their known hosts hash to know if they are connected
-	fn connected_peers_vec(&self) -> Vec<(NodeID, SocketAddr)> {
+		// to the same set of nodes. If the hashes differ, they are connected to
-		let mut list = Vec::with_capacity(self.list.len());
+		// different nodes and they trigger an exchange of the full list of active
-		for (id, peer) in self.list.iter() {
+		// connections.  The hash value only represents the set of node IDs and not
-			if peer.state.is_up() {
+		// their actual socket addresses, because nodes can be connected via different
-				list.push((*id, peer.addr));
+		// addresses and that shouldn't necessarily trigger a full peer exchange.
-			}
+		let mut list = self
-		}
+			.list
-		list
+			.iter()
-	}
+			.filter(|(_, peer)| peer.state.is_up())
-	fn calculate_hash(mut list: Vec<(NodeID, SocketAddr)>) -> hash::Digest {
+			.map(|(id, _)| *id)
 			.collect::<Vec<_>>();
 		list.sort();
 		let mut hash_state = hash::State::new();
-		for (id, addr) in list {
+		for id in list {
 			hash_state.update(&id[..]);
 			hash_state.update(&format!("{}\n", addr).into_bytes()[..]);
 		}
-		hash_state.finalize()
+		self.hash = hash_state.finalize();
 	}
 	fn connected_peers_vec(&self) -> Vec<(NodeID, SocketAddr)> {
 		self.list
 			.iter()
 			.filter_map(|(id, peer)| match peer.state {
 				PeerConnState::Connected { addr } => Some((*id, addr)),
 				_ => None,
 			})
 			.collect::<Vec<_>>()
 	}
 }
@ -220,27 +226,24 @@ impl PeeringManager {
 			if id != netapp.id {
 				known_hosts.list.insert(
 					id,
-					PeerInfoInternal::new(addr, PeerConnState::Waiting(0, Instant::now())),
+					PeerInfoInternal::new(PeerConnState::Waiting(0, Instant::now()), Some(addr)),
 				);
 			}
 		}
-		if let Some(addr) = our_addr {
+		known_hosts.list.insert(
-			known_hosts.list.insert(
+			netapp.id,
-				netapp.id,
+			PeerInfoInternal::new(PeerConnState::Ourself, our_addr),
-				PeerInfoInternal::new(addr, PeerConnState::Ourself),
+		);
-			);
+		known_hosts.update_hash();
 			known_hosts.update_hash();
 		}
 		// TODO for v0.10 / v1.0 : rename the endpoint (it will break compatibility)
 		let strat = Arc::new(Self {
 			netapp: netapp.clone(),
 			known_hosts: RwLock::new(known_hosts),
 			public_peer_list: ArcSwap::new(Arc::new(Vec::new())),
 			next_ping_id: AtomicU64::new(42),
-			ping_endpoint: netapp.endpoint("__netapp/peering/fullmesh.rs/Ping".into()),
+			ping_endpoint: netapp.endpoint("garage_net/peering.rs/Ping".into()),
-			peer_list_endpoint: netapp.endpoint("__netapp/peering/fullmesh.rs/PeerList".into()),
+			peer_list_endpoint: netapp.endpoint("garage_net/peering.rs/PeerList".into()),
 			ping_timeout_millis: DEFAULT_PING_TIMEOUT_MILLIS.into(),
 		});
@ -276,7 +279,7 @@ impl PeeringManager {
 				for (id, info) in known_hosts.list.iter() {
 					trace!("{}, {:?}", hex::encode(&id[..8]), info);
 					match info.state {
-						PeerConnState::Connected => {
+						PeerConnState::Connected { .. } => {
 							let must_ping = match info.last_send_ping {
 								None => true,
 								Some(t) => Instant::now() - t > PING_INTERVAL,
@ -319,7 +322,7 @@ impl PeeringManager {
 							info!(
 								"Retrying connection to {} at {} ({})",
 								hex::encode(&id[..8]),
-								h.all_addrs
+								h.known_addrs
 									.iter()
 									.map(|x| format!("{}", x))
 									.collect::<Vec<_>>()
@ -328,13 +331,8 @@ impl PeeringManager {
 							);
 							h.state = PeerConnState::Trying(i);
-							let alternate_addrs = h
+							let addresses = h.known_addrs.clone();
-								.all_addrs
+							tokio::spawn(self.clone().try_connect(id, addresses));
 								.iter()
 								.filter(|x| **x != h.addr)
 								.cloned()
 								.collect::<Vec<_>>();
 							tokio::spawn(self.clone().try_connect(id, h.addr, alternate_addrs));
 						}
 					}
 				}
@ -362,27 +360,24 @@ impl PeeringManager {
 	fn update_public_peer_list(&self, known_hosts: &KnownHosts) {
 		let mut pub_peer_list = Vec::with_capacity(known_hosts.list.len());
 		for (id, info) in known_hosts.list.iter() {
 			if *id == self.netapp.id {
 				// sanity check
 				assert!(matches!(info.state, PeerConnState::Ourself));
 			}
 			let mut pings = info.ping.iter().cloned().collect::<Vec<_>>();
 			pings.sort();
 			if !pings.is_empty() {
 				pub_peer_list.push(PeerInfo {
 					id: *id,
 					addr: info.addr,
 					state: info.state,
 					last_seen: info.last_seen,
-					avg_ping: Some(
+					avg_ping: Some(pings.iter().sum::<Duration>().div_f64(pings.len() as f64)),
 						pings
 							.iter()
 							.fold(Duration::from_secs(0), |x, y| x + *y)
 							.div_f64(pings.len() as f64),
 					),
 					max_ping: pings.last().cloned(),
 					med_ping: Some(pings[pings.len() / 2]),
 				});
 			} else {
 				pub_peer_list.push(PeerInfo {
 					id: *id,
 					addr: info.addr,
 					state: info.state,
 					last_seen: info.last_seen,
 					avg_ping: None,
@ -495,15 +490,10 @@ impl PeeringManager {
 		}
 	}
-	async fn try_connect(
+	async fn try_connect(self: Arc<Self>, id: NodeID, addresses: Vec<SocketAddr>) {
 		self: Arc<Self>,
 		id: NodeID,
 		default_addr: SocketAddr,
 		alternate_addrs: Vec<SocketAddr>,
 	) {
 		let conn_addr = {
 			let mut ret = None;
-			for addr in [default_addr].iter().chain(alternate_addrs.iter()) {
+			for addr in addresses.iter() {
 				debug!("Trying address {} for peer {}", addr, hex::encode(&id[..8]));
 				match self.netapp.clone().try_connect(*addr, id).await {
 					Ok(()) => {
@ -529,7 +519,7 @@ impl PeeringManager {
 			warn!(
 				"Could not connect to peer {} ({} addresses tried)",
 				hex::encode(&id[..8]),
-				1 + alternate_addrs.len()
+				addresses.len()
 			);
 			let mut known_hosts = self.known_hosts.write().unwrap();
 			if let Some(host) = known_hosts.list.get_mut(&id) {
@ -549,6 +539,14 @@ impl PeeringManager {
 	}
 	fn on_connected(self: &Arc<Self>, id: NodeID, addr: SocketAddr, is_incoming: bool) {
 		if id == self.netapp.id {
 			// sanity check
 			panic!(
 				"on_connected from local node, id={:?}, addr={}, incoming={}",
 				id, addr, is_incoming
 			);
 		}
 		let mut known_hosts = self.known_hosts.write().unwrap();
 		if is_incoming {
 			if let Some(host) = known_hosts.list.get_mut(&id) {
@ -563,13 +561,13 @@ impl PeeringManager {
 				addr
 			);
 			if let Some(host) = known_hosts.list.get_mut(&id) {
-				host.state = PeerConnState::Connected;
+				host.state = PeerConnState::Connected { addr };
 				host.addr = addr;
 				host.add_addr(addr);
 			} else {
-				known_hosts
+				known_hosts.list.insert(
-					.list
+					id,
-					.insert(id, PeerInfoInternal::new(addr, PeerConnState::Connected));
+					PeerInfoInternal::new(PeerConnState::Connected { addr }, Some(addr)),
 				);
 			}
 		}
 		known_hosts.update_hash();
@ -589,12 +587,8 @@ impl PeeringManager {
 	}
 	fn new_peer(&self, id: &NodeID, addr: SocketAddr) -> PeerInfoInternal {
-		let state = if *id == self.netapp.id {
+		assert!(*id != self.netapp.id);
-			PeerConnState::Ourself
+		PeerInfoInternal::new(PeerConnState::Waiting(0, Instant::now()), Some(addr))
 		} else {
 			PeerConnState::Waiting(0, Instant::now())
 		};
 		PeerInfoInternal::new(addr, state)
 	}
 }
--- a/src/net/send.rs
+++ b/src/net/send.rs
@ -109,7 +109,7 @@ impl SendQueuePriority {
 			let i = order_vec.iter().take_while(|o2| **o2 < order).count();
 			order_vec.insert(i, order);
 		}
-		self.items.push_front(item);
+		self.items.push_back(item);
 	}
 	fn remove(&mut self, id: RequestID) {
 		if let Some(i) = self.items.iter().position(|x| x.id == id) {
@ -128,51 +128,56 @@ impl SendQueuePriority {
 		self.items.is_empty()
 	}
 	fn poll_next_ready(&mut self, ctx: &mut Context<'_>) -> Poll<(RequestID, DataFrame)> {
-		for (j, item) in self.items.iter_mut().enumerate() {
+		// in step 1: poll only streams that have sent 0 bytes, we want to send them in priority
-			if let Some(OrderTag(stream, order)) = item.order_tag {
+		//            as they most likely represent small requests to be sent first
-				if order > *self.order.get(&stream).unwrap().front().unwrap() {
+		// in step 2: poll all streams
 		for step in 0..2 {
 			for (j, item) in self.items.iter_mut().enumerate() {
 				if let Some(OrderTag(stream, order)) = item.order_tag {
 					if order > *self.order.get(&stream).unwrap().front().unwrap() {
 						continue;
 					}
 				}
 				if step == 0 && item.sent > 0 {
 					continue;
 				}
 			}
-			let mut item_reader = item.data.read_exact_or_eos(MAX_CHUNK_LENGTH as usize);
+				let mut item_reader = item.data.read_exact_or_eos(MAX_CHUNK_LENGTH as usize);
-			if let Poll::Ready(bytes_or_err) = Pin::new(&mut item_reader).poll(ctx) {
+				if let Poll::Ready(bytes_or_err) = Pin::new(&mut item_reader).poll(ctx) {
-				let id = item.id;
+					let id = item.id;
-				let eos = item.data.eos();
+					let eos = item.data.eos();
-				let packet = bytes_or_err.map_err(|e| match e {
+					let packet = bytes_or_err.map_err(|e| match e {
-					ReadExactError::Stream(err) => err,
+						ReadExactError::Stream(err) => err,
-					_ => unreachable!(),
+						_ => unreachable!(),
-				});
+					});
-				let is_err = packet.is_err();
+					let is_err = packet.is_err();
-				let data_frame = DataFrame::from_packet(packet, !eos);
+					let data_frame = DataFrame::from_packet(packet, !eos);
-				item.sent += data_frame.data().len();
+					item.sent += data_frame.data().len();
-				if eos || is_err {
+					if eos || is_err {
-					// If item had an order tag, remove it from the corresponding ordering list
+						// If item had an order tag, remove it from the corresponding ordering list
-					if let Some(OrderTag(stream, order)) = item.order_tag {
+						if let Some(OrderTag(stream, order)) = item.order_tag {
-						let order_stream = self.order.get_mut(&stream).unwrap();
+							let order_stream = self.order.get_mut(&stream).unwrap();
-						assert_eq!(order_stream.pop_front(), Some(order));
+							assert_eq!(order_stream.pop_front(), Some(order));
-						if order_stream.is_empty() {
+							if order_stream.is_empty() {
-							self.order.remove(&stream);
+								self.order.remove(&stream);
-						}
+							}
 					}
 					// Remove item from sending queue
 					self.items.remove(j);
 				} else {
 					// Move item later in send queue to implement LAS scheduling
 					// (LAS = Least Attained Service)
 					for k in j..self.items.len() - 1 {
 						if self.items[k].sent >= self.items[k + 1].sent {
 							self.items.swap(k, k + 1);
 						} else {
 							break;
 						}
 						// Remove item from sending queue
 						self.items.remove(j);
 					} else if step == 0 {
 						// Step 0 means that this stream had not sent any bytes yet.
 						// Now that it has, and it was not an EOS, we know that it is bigger
 						// than one chunk so move it at the end of the queue.
 						let item = self.items.remove(j).unwrap();
 						self.items.push_back(item);
 					}
 					return Poll::Ready((id, data_frame));
 				}
 				return Poll::Ready((id, data_frame));
 			}
 		}
--- a/src/net/server.rs
+++ b/src/net/server.rs
@ -190,7 +190,7 @@ impl RecvLoop for ServerConn {
 			let (prio, resp_enc_result) = match ReqEnc::decode(stream).await {
 				Ok(req_enc) => (req_enc.prio, self2.recv_handler_aux(req_enc).await),
-				Err(e) => (PRIO_HIGH, Err(e)),
+				Err(e) => (PRIO_NORMAL, Err(e)),
 			};
 			debug!("server: sending response to {}", id);
--- a/src/rpc/Cargo.toml
+++ b/src/rpc/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage_rpc"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>"]
 edition = "2018"
 license = "AGPL-3.0"
--- a/src/rpc/layout/helper.rs
+++ b/src/rpc/layout/helper.rs
@ -1,5 +1,4 @@
 use std::collections::HashMap;
 use std::ops::Deref;
 use std::sync::atomic::{AtomicUsize, Ordering};
 use serde::{Deserialize, Serialize};
@ -42,6 +41,7 @@ pub struct LayoutHelper {
 	trackers_hash: Hash,
 	staging_hash: Hash,
 	is_check_ok: bool,
 	// ack lock: counts in-progress write operations for each
 	// layout version ; we don't increase the ack update tracker
@ -49,13 +49,6 @@ pub struct LayoutHelper {
 	pub(crate) ack_lock: HashMap<u64, AtomicUsize>,
 }
 impl Deref for LayoutHelper {
 	type Target = LayoutHistory;
 	fn deref(&self) -> &LayoutHistory {
 		self.layout()
 	}
 }
 impl LayoutHelper {
 	pub fn new(
 		replication_factor: ReplicationFactor,
@ -115,6 +108,8 @@ impl LayoutHelper {
 			.entry(layout.current().version)
 			.or_insert(AtomicUsize::new(0));
 		let is_check_ok = layout.check().is_ok();
 		LayoutHelper {
 			replication_factor,
 			consistency_mode,
@ -126,15 +121,12 @@ impl LayoutHelper {
 			trackers_hash,
 			staging_hash,
 			ack_lock,
 			is_check_ok,
 		}
 	}
 	// ------------------ single updating function --------------
 	fn layout(&self) -> &LayoutHistory {
 		self.layout.as_ref().unwrap()
 	}
 	pub(crate) fn update<F>(&mut self, f: F) -> bool
 	where
 		F: FnOnce(&mut LayoutHistory) -> bool,
@ -153,10 +145,30 @@ impl LayoutHelper {
 	// ------------------ read helpers ---------------
 	pub fn inner(&self) -> &LayoutHistory {
 		self.layout.as_ref().unwrap()
 	}
 	pub fn current(&self) -> &LayoutVersion {
 		self.inner().current()
 	}
 	pub fn versions(&self) -> &[LayoutVersion] {
 		&self.inner().versions
 	}
 	pub fn is_check_ok(&self) -> bool {
 		self.is_check_ok
 	}
 	/// Return all nodes that have a role (gateway or storage)
 	/// in one of the currently active layout versions
 	pub fn all_nodes(&self) -> &[Uuid] {
 		&self.all_nodes
 	}
 	/// Return all nodes that are configured to store data
 	/// in one of the currently active layout versions
 	pub fn all_nongateway_nodes(&self) -> &[Uuid] {
 		&self.all_nongateway_nodes
 	}
@ -171,20 +183,19 @@ impl LayoutHelper {
 	pub fn sync_digest(&self) -> SyncLayoutDigest {
 		SyncLayoutDigest {
-			current: self.layout().current().version,
+			current: self.current().version,
 			ack_map_min: self.ack_map_min(),
-			min_stored: self.layout().min_stored(),
+			min_stored: self.inner().min_stored(),
 		}
 	}
 	pub fn read_nodes_of(&self, position: &Hash) -> Vec<Uuid> {
 		let sync_min = self.sync_map_min;
 		let version = self
-			.layout()
+			.versions()
 			.versions
 			.iter()
 			.find(|x| x.version == sync_min)
-			.or(self.layout().versions.last())
+			.or(self.versions().last())
 			.unwrap();
 		version
 			.nodes_of(position, version.replication_factor)
@ -192,8 +203,7 @@ impl LayoutHelper {
 	}
 	pub fn storage_sets_of(&self, position: &Hash) -> Vec<Vec<Uuid>> {
-		self.layout()
+		self.versions()
 			.versions
 			.iter()
 			.map(|x| x.nodes_of(position, x.replication_factor).collect())
 			.collect()
@ -201,7 +211,7 @@ impl LayoutHelper {
 	pub fn storage_nodes_of(&self, position: &Hash) -> Vec<Uuid> {
 		let mut ret = vec![];
-		for version in self.layout().versions.iter() {
+		for version in self.versions().iter() {
 			ret.extend(version.nodes_of(position, version.replication_factor));
 		}
 		ret.sort();
@ -220,7 +230,7 @@ impl LayoutHelper {
 	pub fn digest(&self) -> RpcLayoutDigest {
 		RpcLayoutDigest {
 			current_version: self.current().version,
-			active_versions: self.versions.len(),
+			active_versions: self.versions().len(),
 			trackers_hash: self.trackers_hash,
 			staging_hash: self.staging_hash,
 		}
@ -228,36 +238,24 @@ impl LayoutHelper {
 	// ------------------ helpers for update tracking ---------------
-	pub(crate) fn update_trackers(&mut self, local_node_id: Uuid) {
+	pub(crate) fn update_update_trackers(&mut self, local_node_id: Uuid) {
 		// Ensure trackers for this node's values are up-to-date
 		// 1. Acknowledge the last layout version which is not currently
 		//    locked by an in-progress write operation
-		self.ack_max_free(local_node_id);
+		self.update_ack_to_max_free(local_node_id);
 		// 2. Assume the data on this node is sync'ed up at least to
 		//    the first layout version in the history
-		self.sync_first(local_node_id);
+		let first_version = self.inner().min_stored();
 		// 3. Acknowledge everyone has synced up to min(self.sync_map)
 		self.sync_ack(local_node_id);
 		debug!("ack_map: {:?}", self.update_trackers.ack_map);
 		debug!("sync_map: {:?}", self.update_trackers.sync_map);
 		debug!("sync_ack_map: {:?}", self.update_trackers.sync_ack_map);
 	}
 	fn sync_first(&mut self, local_node_id: Uuid) {
 		let first_version = self.min_stored();
 		self.update(|layout| {
 			layout
 				.update_trackers
 				.sync_map
 				.set_max(local_node_id, first_version)
 		});
 	}
-	fn sync_ack(&mut self, local_node_id: Uuid) {
+		// 3. Acknowledge everyone has synced up to min(self.sync_map)
 		let sync_map_min = self.sync_map_min;
 		self.update(|layout| {
 			layout
@ -265,25 +263,18 @@ impl LayoutHelper {
 				.sync_ack_map
 				.set_max(local_node_id, sync_map_min)
 		});
 		debug!("ack_map: {:?}", self.inner().update_trackers.ack_map);
 		debug!("sync_map: {:?}", self.inner().update_trackers.sync_map);
 		debug!(
 			"sync_ack_map: {:?}",
 			self.inner().update_trackers.sync_ack_map
 		);
 	}
-	pub(crate) fn ack_max_free(&mut self, local_node_id: Uuid) -> bool {
+	pub(crate) fn update_ack_to_max_free(&mut self, local_node_id: Uuid) -> bool {
-		let max_ack = self.max_free_ack();
+		let max_free = self
-		let changed = self.update(|layout| {
+			.versions()
 			layout
 				.update_trackers
 				.ack_map
 				.set_max(local_node_id, max_ack)
 		});
 		if changed {
 			info!("ack_until updated to {}", max_ack);
 		}
 		changed
 	}
 	pub(crate) fn max_free_ack(&self) -> u64 {
 		self.layout()
 			.versions
 			.iter()
 			.map(|x| x.version)
 			.skip_while(|v| {
@ -293,6 +284,16 @@ impl LayoutHelper {
 					.unwrap_or(true)
 			})
 			.next()
-			.unwrap_or(self.current().version)
+			.unwrap_or(self.current().version);
 		let changed = self.update(|layout| {
 			layout
 				.update_trackers
 				.ack_map
 				.set_max(local_node_id, max_free)
 		});
 		if changed {
 			info!("ack_until updated to {}", max_free);
 		}
 		changed
 	}
 }
--- a/src/rpc/layout/history.rs
+++ b/src/rpc/layout/history.rs
@ -27,14 +27,18 @@ impl LayoutHistory {
 	// ------------------ who stores what now? ---------------
 	/// Returns the layout version with the highest number
 	pub fn current(&self) -> &LayoutVersion {
 		self.versions.last().as_ref().unwrap()
 	}
 	/// Returns the version number of the oldest layout version still active
 	pub fn min_stored(&self) -> u64 {
 		self.versions.first().as_ref().unwrap().version
 	}
 	/// Calculate the set of all nodes that have a role (gateway or storage)
 	/// in one of the currently active layout versions
 	pub fn get_all_nodes(&self) -> Vec<Uuid> {
 		if self.versions.len() == 1 {
 			self.versions[0].all_nodes().to_vec()
@ -48,6 +52,8 @@ impl LayoutHistory {
 		}
 	}
 	/// Calculate the set of all nodes that are configured to store data
 	/// in one of the currently active layout versions
 	pub(crate) fn get_all_nongateway_nodes(&self) -> Vec<Uuid> {
 		if self.versions.len() == 1 {
 			self.versions[0].nongateway_nodes().to_vec()
--- a/src/rpc/layout/manager.rs
+++ b/src/rpc/layout/manager.rs
@ -70,7 +70,7 @@ impl LayoutManager {
 			cluster_layout,
 			Default::default(),
 		);
-		cluster_layout.update_trackers(node_id.into());
+		cluster_layout.update_update_trackers(node_id.into());
 		let layout = Arc::new(RwLock::new(cluster_layout));
 		let change_notify = Arc::new(Notify::new());
@ -109,7 +109,7 @@ impl LayoutManager {
 	}
 	pub fn add_table(&self, table_name: &'static str) {
-		let first_version = self.layout().versions.first().unwrap().version;
+		let first_version = self.layout().versions().first().unwrap().version;
 		self.table_sync_version
 			.lock()
@ -127,16 +127,16 @@ impl LayoutManager {
 		if layout.update(|l| l.update_trackers.sync_map.set_max(self.node_id, sync_until)) {
 			info!("sync_until updated to {}", sync_until);
 			self.broadcast_update(SystemRpc::AdvertiseClusterLayoutTrackers(
-				layout.update_trackers.clone(),
+				layout.inner().update_trackers.clone(),
 			));
 		}
 	}
 	fn ack_new_version(self: &Arc<Self>) {
 		let mut layout = self.layout.write().unwrap();
-		if layout.ack_max_free(self.node_id) {
+		if layout.update_ack_to_max_free(self.node_id) {
 			self.broadcast_update(SystemRpc::AdvertiseClusterLayoutTrackers(
-				layout.update_trackers.clone(),
+				layout.inner().update_trackers.clone(),
 			));
 		}
 	}
@ -160,16 +160,16 @@ impl LayoutManager {
 	fn merge_layout(&self, adv: &LayoutHistory) -> Option<LayoutHistory> {
 		let mut layout = self.layout.write().unwrap();
 		let prev_digest = layout.digest();
-		let prev_layout_check = layout.check().is_ok();
+		let prev_layout_check = layout.is_check_ok();
 		if !prev_layout_check || adv.check().is_ok() {
 			if layout.update(|l| l.merge(adv)) {
-				layout.update_trackers(self.node_id);
+				layout.update_update_trackers(self.node_id);
-				if prev_layout_check && layout.check().is_err() {
+				if prev_layout_check && !layout.is_check_ok() {
 					panic!("Merged two correct layouts and got an incorrect layout.");
 				}
 				assert!(layout.digest() != prev_digest);
-				return Some(layout.clone());
+				return Some(layout.inner().clone());
 			}
 		}
@ -180,11 +180,11 @@ impl LayoutManager {
 		let mut layout = self.layout.write().unwrap();
 		let prev_digest = layout.digest();
-		if layout.update_trackers != *adv {
+		if layout.inner().update_trackers != *adv {
 			if layout.update(|l| l.update_trackers.merge(adv)) {
-				layout.update_trackers(self.node_id);
+				layout.update_update_trackers(self.node_id);
 				assert!(layout.digest() != prev_digest);
-				return Some(layout.update_trackers.clone());
+				return Some(layout.inner().update_trackers.clone());
 			}
 		}
@ -230,7 +230,7 @@ impl LayoutManager {
 	/// Save cluster layout data to disk
 	async fn save_cluster_layout(&self) -> Result<(), Error> {
-		let layout = self.layout.read().unwrap().clone();
+		let layout = self.layout.read().unwrap().inner().clone();
 		self.persist_cluster_layout
 			.save_async(&layout)
 			.await
@ -278,13 +278,13 @@ impl LayoutManager {
 	}
 	pub(crate) fn handle_pull_cluster_layout(&self) -> SystemRpc {
-		let layout = self.layout.read().unwrap().clone();
+		let layout = self.layout.read().unwrap().inner().clone();
 		SystemRpc::AdvertiseClusterLayout(layout)
 	}
 	pub(crate) fn handle_pull_cluster_layout_trackers(&self) -> SystemRpc {
 		let layout = self.layout.read().unwrap();
-		SystemRpc::AdvertiseClusterLayoutTrackers(layout.update_trackers.clone())
+		SystemRpc::AdvertiseClusterLayoutTrackers(layout.inner().update_trackers.clone())
 	}
 	pub(crate) async fn handle_advertise_cluster_layout(
--- a/src/rpc/rpc_helper.rs
+++ b/src/rpc/rpc_helper.rs
@ -26,15 +26,14 @@ use garage_util::data::*;
 use garage_util::error::Error;
 use garage_util::metrics::RecordDuration;
-use crate::layout::{LayoutHelper, LayoutHistory};
+use crate::layout::{LayoutHelper, LayoutVersion};
 use crate::metrics::RpcMetrics;
 // Default RPC timeout = 5 minutes
 const DEFAULT_TIMEOUT: Duration = Duration::from_secs(300);
 /// Strategy to apply when making RPC
-#[derive(Copy, Clone)]
+pub struct RequestStrategy<T> {
 pub struct RequestStrategy {
 	/// Min number of response to consider the request successful
 	rs_quorum: Option<usize>,
 	/// Send all requests at once
@ -43,6 +42,8 @@ pub struct RequestStrategy {
 	rs_priority: RequestPriority,
 	/// Custom timeout for this request
 	rs_timeout: Timeout,
 	/// Data to drop when everything completes
 	rs_drop_on_complete: T,
 }
 #[derive(Copy, Clone)]
@ -52,7 +53,19 @@ enum Timeout {
 	Custom(Duration),
 }
-impl RequestStrategy {
+impl Clone for RequestStrategy<()> {
 	fn clone(&self) -> Self {
 		RequestStrategy {
 			rs_quorum: self.rs_quorum,
 			rs_send_all_at_once: self.rs_send_all_at_once,
 			rs_priority: self.rs_priority,
 			rs_timeout: self.rs_timeout,
 			rs_drop_on_complete: (),
 		}
 	}
 }
 impl RequestStrategy<()> {
 	/// Create a RequestStrategy with default timeout and not interrupting when quorum reached
 	pub fn with_priority(prio: RequestPriority) -> Self {
 		RequestStrategy {
@ -60,8 +73,22 @@ impl RequestStrategy {
 			rs_send_all_at_once: None,
 			rs_priority: prio,
 			rs_timeout: Timeout::Default,
 			rs_drop_on_complete: (),
 		}
 	}
 	/// Add an item to be dropped on completion
 	pub fn with_drop_on_completion<T>(self, drop_on_complete: T) -> RequestStrategy<T> {
 		RequestStrategy {
 			rs_quorum: self.rs_quorum,
 			rs_send_all_at_once: self.rs_send_all_at_once,
 			rs_priority: self.rs_priority,
 			rs_timeout: self.rs_timeout,
 			rs_drop_on_complete: drop_on_complete,
 		}
 	}
 }
 impl<T> RequestStrategy<T> {
 	/// Set quorum to be reached for request
 	pub fn with_quorum(mut self, quorum: usize) -> Self {
 		self.rs_quorum = Some(quorum);
@ -82,6 +109,19 @@ impl RequestStrategy {
 		self.rs_timeout = Timeout::Custom(timeout);
 		self
 	}
 	/// Extract drop_on_complete item
 	fn extract_drop_on_complete(self) -> (RequestStrategy<()>, T) {
 		(
 			RequestStrategy {
 				rs_quorum: self.rs_quorum,
 				rs_send_all_at_once: self.rs_send_all_at_once,
 				rs_priority: self.rs_priority,
 				rs_timeout: self.rs_timeout,
 				rs_drop_on_complete: (),
 			},
 			self.rs_drop_on_complete,
 		)
 	}
 }
 #[derive(Clone)]
@ -122,7 +162,7 @@ impl RpcHelper {
 		endpoint: &Endpoint<M, H>,
 		to: Uuid,
 		msg: N,
-		strat: RequestStrategy,
+		strat: RequestStrategy<()>,
 	) -> Result<S, Error>
 	where
 		M: Rpc<Response = Result<S, Error>>,
@ -182,7 +222,7 @@ impl RpcHelper {
 		endpoint: &Endpoint<M, H>,
 		to: &[Uuid],
 		msg: N,
-		strat: RequestStrategy,
+		strat: RequestStrategy<()>,
 	) -> Result<Vec<(Uuid, Result<S, Error>)>, Error>
 	where
 		M: Rpc<Response = Result<S, Error>>,
@ -197,7 +237,7 @@ impl RpcHelper {
 		let resps = join_all(
 			to.iter()
-				.map(|to| self.call(endpoint, *to, msg.clone(), strat)),
+				.map(|to| self.call(endpoint, *to, msg.clone(), strat.clone())),
 		)
 		.with_context(Context::current_with_span(span))
 		.await;
@ -212,7 +252,7 @@ impl RpcHelper {
 		&self,
 		endpoint: &Endpoint<M, H>,
 		msg: N,
-		strat: RequestStrategy,
+		strat: RequestStrategy<()>,
 	) -> Result<Vec<(Uuid, Result<S, Error>)>, Error>
 	where
 		M: Rpc<Response = Result<S, Error>>,
@ -252,7 +292,7 @@ impl RpcHelper {
 		endpoint: &Arc<Endpoint<M, H>>,
 		to: &[Uuid],
 		msg: N,
-		strategy: RequestStrategy,
+		strategy: RequestStrategy<()>,
 	) -> Result<Vec<S>, Error>
 	where
 		M: Rpc<Response = Result<S, Error>> + 'static,
@ -285,7 +325,7 @@ impl RpcHelper {
 		endpoint: &Arc<Endpoint<M, H>>,
 		to: &[Uuid],
 		msg: N,
-		strategy: RequestStrategy,
+		strategy: RequestStrategy<()>,
 		quorum: usize,
 	) -> Result<Vec<S>, Error>
 	where
@ -304,7 +344,8 @@ impl RpcHelper {
 		// preemptively send an additional request to any remaining nodes.
 		// Reorder requests to priorize closeness / low latency
-		let request_order = self.request_order(&self.0.layout.read().unwrap(), to.iter().copied());
+		let request_order =
 			self.request_order(&self.0.layout.read().unwrap().current(), to.iter().copied());
 		let send_all_at_once = strategy.rs_send_all_at_once.unwrap_or(false);
 		// Build future for each request
@ -315,6 +356,7 @@ impl RpcHelper {
 			let self2 = self.clone();
 			let msg = msg.clone();
 			let endpoint2 = endpoint.clone();
 			let strategy = strategy.clone();
 			async move { self2.call(&endpoint2, to, msg, strategy).await }
 		});
@ -387,18 +429,19 @@ impl RpcHelper {
 	/// changes, where data has to be written both in the old layout and in the
 	/// new one as long as all nodes have not successfully tranisitionned and
 	/// moved all data to the new layout.
-	pub async fn try_write_many_sets<M, N, H, S>(
+	pub async fn try_write_many_sets<M, N, H, S, T>(
 		&self,
 		endpoint: &Arc<Endpoint<M, H>>,
 		to_sets: &[Vec<Uuid>],
 		msg: N,
-		strategy: RequestStrategy,
+		strategy: RequestStrategy<T>,
 	) -> Result<Vec<S>, Error>
 	where
 		M: Rpc<Response = Result<S, Error>> + 'static,
 		N: IntoReq<M>,
 		H: StreamingEndpointHandler<M> + 'static,
 		S: Send + 'static,
 		T: Send + 'static,
 	{
 		let quorum = strategy
 			.rs_quorum
@ -422,12 +465,12 @@ impl RpcHelper {
 			.await
 	}
-	async fn try_write_many_sets_inner<M, N, H, S>(
+	async fn try_write_many_sets_inner<M, N, H, S, T>(
 		&self,
 		endpoint: &Arc<Endpoint<M, H>>,
 		to_sets: &[Vec<Uuid>],
 		msg: N,
-		strategy: RequestStrategy,
+		strategy: RequestStrategy<T>,
 		quorum: usize,
 	) -> Result<Vec<S>, Error>
 	where
@ -435,11 +478,14 @@ impl RpcHelper {
 		N: IntoReq<M>,
 		H: StreamingEndpointHandler<M> + 'static,
 		S: Send + 'static,
 		T: Send + 'static,
 	{
 		// Peers may appear in many quorum sets. Here, build a list of peers,
 		// mapping to the index of the quorum sets in which they appear.
 		let mut result_tracker = QuorumSetResultTracker::new(to_sets, quorum);
 		let (strategy, drop_on_complete) = strategy.extract_drop_on_complete();
 		// Send one request to each peer of the quorum sets
 		let msg = msg.into_req().map_err(garage_net::error::Error::from)?;
 		let requests = result_tracker.nodes.keys().map(|peer| {
@ -447,6 +493,7 @@ impl RpcHelper {
 			let msg = msg.clone();
 			let endpoint2 = endpoint.clone();
 			let to = *peer;
 			let strategy = strategy.clone();
 			async move { (to, self2.call(&endpoint2, to, msg, strategy).await) }
 		});
 		let mut resp_stream = requests.collect::<FuturesUnordered<_>>();
@ -462,6 +509,7 @@ impl RpcHelper {
 				// Continue all other requets in background
 				tokio::spawn(async move {
 					resp_stream.collect::<Vec<(Uuid, Result<_, _>)>>().await;
 					drop(drop_on_complete);
 				});
 				return Ok(result_tracker.success_values());
@ -497,16 +545,16 @@ impl RpcHelper {
 		let mut ret = Vec::with_capacity(12);
 		let ver_iter = layout
-			.versions
+			.versions()
 			.iter()
 			.rev()
-			.chain(layout.old_versions.iter().rev());
+			.chain(layout.inner().old_versions.iter().rev());
 		for ver in ver_iter {
 			if ver.version > layout.sync_map_min() {
 				continue;
 			}
 			let nodes = ver.nodes_of(position, ver.replication_factor);
-			for node in rpc_helper.request_order(&layout, nodes) {
+			for node in rpc_helper.request_order(layout.current(), nodes) {
 				if !ret.contains(&node) {
 					ret.push(node);
 				}
@ -517,15 +565,12 @@ impl RpcHelper {
 	fn request_order(
 		&self,
-		layout: &LayoutHistory,
+		layout: &LayoutVersion,
 		nodes: impl Iterator<Item = Uuid>,
 	) -> Vec<Uuid> {
 		// Retrieve some status variables that we will use to sort requests
 		let peer_list = self.0.peering.get_peer_list();
-		let our_zone = layout
+		let our_zone = layout.get_node_zone(&self.0.our_node_id).unwrap_or("");
 			.current()
 			.get_node_zone(&self.0.our_node_id)
 			.unwrap_or("");
 		// Augment requests with some information used to sort them.
 		// The tuples are as follows:
@ -535,7 +580,7 @@ impl RpcHelper {
 		// and within a same zone we priorize nodes with the lowest latency.
 		let mut nodes = nodes
 			.map(|to| {
-				let peer_zone = layout.current().get_node_zone(&to).unwrap_or("");
+				let peer_zone = layout.get_node_zone(&to).unwrap_or("");
 				let peer_avg_ping = peer_list
 					.iter()
 					.find(|x| x.id.as_ref() == to.as_slice())
--- a/src/rpc/system.rs
+++ b/src/rpc/system.rs
@ -16,7 +16,7 @@ use tokio::sync::{watch, Notify};
 use garage_net::endpoint::{Endpoint, EndpointHandler};
 use garage_net::message::*;
-use garage_net::peering::PeeringManager;
+use garage_net::peering::{PeerConnState, PeeringManager};
 use garage_net::util::parse_and_resolve_peer_addr_async;
 use garage_net::{NetApp, NetworkKey, NodeID, NodeKey};
@ -46,7 +46,7 @@ const STATUS_EXCHANGE_INTERVAL: Duration = Duration::from_secs(10);
 /// Version tag used for version check upon Netapp connection.
 /// Cluster nodes with different version tags are deemed
 /// incompatible and will refuse to connect.
-pub const GARAGE_VERSION_TAG: u64 = 0x676172616765000A; // garage 0x000A
+pub const GARAGE_VERSION_TAG: u64 = 0x6761726167650010; // garage 0x0010 (1.0)
 /// RPC endpoint used for calls related to membership
 pub const SYSTEM_RPC_PATH: &str = "garage_rpc/system.rs/SystemRpc";
@ -142,7 +142,7 @@ pub struct NodeStatus {
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct KnownNodeInfo {
 	pub id: Uuid,
-	pub addr: SocketAddr,
+	pub addr: Option<SocketAddr>,
 	pub is_up: bool,
 	pub last_seen_secs_ago: Option<u64>,
 	pub status: NodeStatus,
@ -381,7 +381,11 @@ impl System {
 			.iter()
 			.map(|n| KnownNodeInfo {
 				id: n.id.into(),
-				addr: n.addr,
+				addr: match n.state {
 					PeerConnState::Ourself => self.rpc_public_addr,
 					PeerConnState::Connected { addr } => Some(addr),
 					_ => None,
 				},
 				is_up: n.is_up(),
 				last_seen_secs_ago: n
 					.last_seen
@ -447,7 +451,7 @@ impl System {
 		// Obtain information about nodes that have a role as storage nodes
 		// in one of the active layout versions
 		let mut storage_nodes = HashSet::<Uuid>::with_capacity(16);
-		for ver in layout.versions.iter() {
+		for ver in layout.versions().iter() {
 			storage_nodes.extend(
 				ver.roles
 					.items()
@ -466,7 +470,7 @@ impl System {
 		let mut partitions_all_ok = 0;
 		for (_, hash) in partitions.iter() {
 			let mut write_sets = layout
-				.versions
+				.versions()
 				.iter()
 				.map(|x| x.nodes_of(hash, x.replication_factor));
 			let has_quorum = write_sets
@ -630,7 +634,7 @@ impl System {
 				.filter(|p| p.is_up())
 				.count();
-			let not_configured = self.cluster_layout().check().is_err();
+			let not_configured = !self.cluster_layout().is_check_ok();
 			let no_peers = n_connected < self.replication_factor.into();
 			let expected_n_nodes = self.cluster_layout().all_nodes().len();
 			let bad_peers = n_connected != expected_n_nodes;
@ -722,7 +726,10 @@ impl System {
 			.peering
 			.get_peer_list()
 			.iter()
-			.map(|n| (n.id.into(), n.addr))
+			.filter_map(|n| match n.state {
 				PeerConnState::Connected { addr } => Some((n.id.into(), addr)),
 				_ => None,
 			})
 			.collect::<Vec<_>>();
 		// Before doing it, we read the current peer list file (if it exists)
--- a/src/table/Cargo.toml
+++ b/src/table/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage_table"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>"]
 edition = "2018"
 license = "AGPL-3.0"
--- a/src/util/Cargo.toml
+++ b/src/util/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage_util"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>"]
 edition = "2018"
 license = "AGPL-3.0"
--- a/src/util/async_hash.rs
+++ b/src/util/async_hash.rs
@ -1,61 +0,0 @@
 use bytes::Bytes;
 use digest::Digest;
 use tokio::sync::mpsc;
 use tokio::task::JoinHandle;
 use crate::data::*;
 /// Compute the sha256 of a slice,
 /// spawning on a tokio thread for CPU-intensive processing
 /// The argument has to be an owned Bytes, as it is moved out to a new thread.
 pub async fn async_sha256sum(data: Bytes) -> Hash {
 	tokio::task::spawn_blocking(move || sha256sum(&data))
 		.await
 		.unwrap()
 }
 /// Compute the blake2sum of a slice,
 /// spawning on a tokio thread for CPU-intensive processing.
 /// The argument has to be an owned Bytes, as it is moved out to a new thread.
 pub async fn async_blake2sum(data: Bytes) -> Hash {
 	tokio::task::spawn_blocking(move || blake2sum(&data))
 		.await
 		.unwrap()
 }
 // ----
 pub struct AsyncHasher<D: Digest> {
 	sendblk: mpsc::Sender<Bytes>,
 	task: JoinHandle<digest::Output<D>>,
 }
 impl<D: Digest> AsyncHasher<D> {
 	pub fn new() -> Self {
 		let (sendblk, mut recvblk) = mpsc::channel::<Bytes>(1);
 		let task = tokio::task::spawn_blocking(move || {
 			let mut digest = D::new();
 			while let Some(blk) = recvblk.blocking_recv() {
 				digest.update(&blk[..]);
 			}
 			digest.finalize()
 		});
 		Self { sendblk, task }
 	}
 	pub async fn update(&self, b: Bytes) {
 		self.sendblk.send(b).await.unwrap();
 	}
 	pub async fn finalize(self) -> digest::Output<D> {
 		drop(self.sendblk);
 		self.task.await.unwrap()
 	}
 }
 impl<D: Digest> Default for AsyncHasher<D> {
 	fn default() -> Self {
 		Self::new()
 	}
 }
--- a/src/util/config.rs
+++ b/src/util/config.rs
@ -23,6 +23,14 @@ pub struct Config {
 	#[serde(default)]
 	pub data_fsync: bool,
 	/// Disable automatic scrubbing of the data directory
 	#[serde(default)]
 	pub disable_scrub: bool,
 	/// Automatic snapshot interval for metadata
 	#[serde(default)]
 	pub metadata_auto_snapshot_interval: Option<String>,
 	/// Size of data blocks to save to disk
 	#[serde(
 		deserialize_with = "deserialize_capacity",
@ -52,6 +60,14 @@ pub struct Config {
 	)]
 	pub compression_level: Option<i32>,
 	/// Maximum amount of block data to buffer in RAM for sending to
 	/// remote nodes when these nodes are on slower links
 	#[serde(
 		deserialize_with = "deserialize_capacity",
 		default = "default_block_ram_buffer_max"
 	)]
 	pub block_ram_buffer_max: usize,
 	/// Skip the permission check of secret files. Useful when
 	/// POSIX ACLs (or more complex chmods) are used.
 	#[serde(default)]
@ -239,6 +255,9 @@ fn default_db_engine() -> String {
 fn default_block_size() -> usize {
 	1048576
 }
 fn default_block_ram_buffer_max() -> usize {
 	256 * 1024 * 1024
 }
 fn default_consistency_mode() -> String {
 	"consistent".into()
--- a/src/util/data.rs
+++ b/src/util/data.rs
@ -83,6 +83,19 @@ impl FixedBytes32 {
 		ret.copy_from_slice(by);
 		Some(Self(ret))
 	}
 	/// Return the next hash
 	pub fn increment(&self) -> Option<Self> {
 		let mut ret = *self;
 		for byte in ret.0.iter_mut().rev() {
 			if *byte == u8::MAX {
 				*byte = 0;
 			} else {
 				*byte = *byte + 1;
 				return Some(ret);
 			}
 		}
 		return None;
 	}
 }
 impl From<garage_net::NodeID> for FixedBytes32 {
@ -140,3 +153,25 @@ pub fn fasthash(data: &[u8]) -> FastHash {
 pub fn gen_uuid() -> Uuid {
 	rand::thread_rng().gen::<[u8; 32]>().into()
 }
 #[cfg(test)]
 mod test {
 	use super::*;
 	#[test]
 	fn test_increment() {
 		let zero: FixedBytes32 = [0u8; 32].into();
 		let mut one: FixedBytes32 = [0u8; 32].into();
 		one.0[31] = 1;
 		let max: FixedBytes32 = [0xFFu8; 32].into();
 		assert_eq!(zero.increment(), Some(one));
 		assert_eq!(max.increment(), None);
 		let mut test: FixedBytes32 = [0u8; 32].into();
 		let i = 0x198DF97209F8FFFFu64;
 		test.0[24..32].copy_from_slice(&u64::to_be_bytes(i));
 		let mut test2: FixedBytes32 = [0u8; 32].into();
 		test2.0[24..32].copy_from_slice(&u64::to_be_bytes(i + 1));
 		assert_eq!(test.increment(), Some(test2));
 	}
 }
--- a/src/util/error.rs
+++ b/src/util/error.rs
@ -70,6 +70,9 @@ pub enum Error {
 	#[error(display = "Corrupt data: does not match hash {:?}", _0)]
 	CorruptData(Hash),
 	#[error(display = "Missing block {:?}: no node returned a valid block", _0)]
 	MissingBlock(Hash),
 	#[error(display = "{}", _0)]
 	Message(String),
 }
--- a/src/util/lib.rs
+++ b/src/util/lib.rs
@ -3,7 +3,6 @@
 #[macro_use]
 extern crate tracing;
 pub mod async_hash;
 pub mod background;
 pub mod config;
 pub mod crdt;
--- a/src/web/Cargo.toml
+++ b/src/web/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "garage_web"
-version = "0.10.0"
+version = "1.0.0"
 authors = ["Alex Auvolat <alex@adnab.me>", "Quentin Dufour <quentin@dufour.io>"]
 edition = "2018"
 license = "AGPL-3.0"
Author	SHA1	Message	Date
maximilien	d38509ef4b	Merge pull request 'adding the ability to change the default podManagementPolicy for StatefulSets' (#823 ) from bodaciousbiscuits/garage:main into main Reviewed-on: Deuxfleurs/garage#823 Reviewed-by: maximilien <me@mricher.fr>	2024-05-25 18:35:53 +00:00
bodaciousbiscuits	39b37833c5	adding the ability to change the default podManagementPolicy for StatefulSets	2024-05-19 21:31:19 -05:00
maximilien	a2c1de646b	Merge pull request 'cli: clarify `garage block` is node-local' (#813 ) from flokli/garage:block-node-local into main Reviewed-on: Deuxfleurs/garage#813	2024-05-12 08:53:26 +00:00
Florian Klink	15847a636a	cli: clarify `garage block` is node-local Prevents some of the confusion from Deuxfleurs/garage#810.	2024-05-07 07:42:33 +00:00
Alex	123d3e1f04	Merge pull request 'flake.nix: add rust-analyzer to devShells.full, expose devShells.full in shell.nix' (#816 ) from flokli/garage:shell-fixes into main Reviewed-on: Deuxfleurs/garage#816	2024-04-23 18:54:26 +00:00
Florian Klink	a6e4b96ca9	shell.nix: expose devShellFull This allows accessing devShells.full from shell.nix.	2024-04-23 11:59:37 +03:00
Florian Klink	b442b0e35e	devShells.full: add rust-analyzer	2024-04-23 11:59:37 +03:00
Alex	33c2086d9e	Merge pull request '[fix-doc] fix broken references in documentation' (#802 ) from fix-doc into main Reviewed-on: Deuxfleurs/garage#802	2024-04-10 15:49:03 +00:00
Alex Auvolat	5ad1e55ccf	[fix-doc] fix broken references in documentation	2024-04-10 17:47:34 +02:00
Alex	1779fd40c0	Merge pull request 'Garage v1.0' (#683 ) from next-0.10 into main Reviewed-on: Deuxfleurs/garage#683	2024-04-10 15:23:12 +00:00
Alex Auvolat	ff093ddbb8	Merge branch 'main' into next-0.10	2024-04-10 14:38:14 +02:00
Alex Auvolat	90e3c2af91	[next-0.10] small updates to mention Garage v0.9.4	2024-04-10 14:35:30 +02:00
Alex	b47706809c	Merge pull request 'fix typo in doc' (#799 ) from fix-typo into main Reviewed-on: Deuxfleurs/garage#799	2024-04-08 15:09:27 +00:00
Alex Auvolat	126e0f47a3	fix typo in doc	2024-04-08 17:08:44 +02:00
Alex	738bb2f09c	Merge pull request 'Garage v0.9.4' (#798 ) from rel-0.9.4 into main Reviewed-on: Deuxfleurs/garage#798	2024-04-08 09:57:03 +00:00
Alex Auvolat	7dd7cb5759	[rel-0.9.4] upgrade version to v0.9.4	2024-04-08 11:18:19 +02:00
Alex	8b663d8c5b	Merge pull request 'jepsen testing of Garage v1.0.0-rc1' (#796 ) from jepsen-1.0rc1 into main Reviewed-on: Deuxfleurs/garage#796	2024-04-05 21:05:58 +00:00
Alex Auvolat	c051db8204	jepsen testing of Garage v1.0.0-rc1	2024-04-05 22:57:00 +02:00
Alex Auvolat	50669b3e76	[next-0.10] bump helm chart version	2024-04-03 14:19:59 +02:00
Alex	e5838b4837	Merge pull request '[doc-units] document how interval value is parsed' (#795 ) from doc-units into main Reviewed-on: Deuxfleurs/garage#795	2024-04-03 12:15:18 +00:00
Alex Auvolat	87dfaf2eb9	[doc-units] document how interval value is parsed	2024-04-03 14:14:13 +02:00
Alex Auvolat	554437254e	[next-0.10] Add migration guide for v1.0	2024-03-28 18:45:06 +01:00
Alex Auvolat	afad62939e	[next-0.10] bump version number to 1.0	2024-03-28 15:19:44 +01:00
Alex Auvolat	8bfc16ba7d	Merge branch 'main' into next-0.10	2024-03-28 15:01:05 +01:00
Alex	ecf641d88c	Merge pull request 'Fix unbounded buffering when one node has slower network' (#792 ) from fix-buffering into main Reviewed-on: Deuxfleurs/garage#792	2024-03-28 12:40:27 +00:00
Alex	75cd14926d	Merge pull request 'CI: properly cleanup between garage integration tests' (#793 ) from fix-ci into main Reviewed-on: Deuxfleurs/garage#793	2024-03-28 12:37:18 +00:00
Alex Auvolat	e1dc84e123	[fix-ci] CI: properly cleanup between garage integration tests	2024-03-28 13:08:42 +01:00
Alex Auvolat	85f580cbde	[fix-buffering] change request sending strategy and fix priorities remove LAS, priorize new requests but otherwise just do standard queuing	2024-03-27 16:22:40 +01:00
Alex Auvolat	0d3e285d13	[fix-buffering] implement `block_ram_buffer_max` to avoid excessive RAM usage	2024-03-27 16:22:40 +01:00
Alex Auvolat	25c196f34d	[next-0.10] admin api: fix logic in get cluster status	2024-03-27 13:55:49 +01:00
Alex Auvolat	4eba32f29f	[next-0.10] layout helper: rename & clarify updates to update trackers	2024-03-27 13:47:06 +01:00
Alex Auvolat	32f1786f9f	[next-0.10] cache layout check result	2024-03-27 13:37:20 +01:00
Alex Auvolat	01a0bd5410	[next-0.10] remove impl Deref for LayoutHelper	2024-03-27 13:32:13 +01:00
Alex Auvolat	c0eeb0b0f3	[next-0.10] fixes to k2v rpc + comment fixes	2024-03-27 10:44:03 +01:00
Alex Auvolat	51d11b4b26	[next-0.10] doc: 2 changes - rewrite section on encryption to mention SSE-C - change to real-world to make it closer to main branch	2024-03-27 10:10:45 +01:00
Alex Auvolat	f7cd4eb600	Merge branch 'main' into next-0.10	2024-03-26 16:34:40 +01:00
Alex	95eb8808e8	Merge pull request 'Disable more K2V tests' (#791 ) from disable-k2v-test into main Reviewed-on: Deuxfleurs/garage#791	2024-03-26 15:33:46 +00:00
Alex Auvolat	e0a4fc097a	[disable-k2v-test] remove obsolete k2v test script	2024-03-26 16:24:44 +01:00
Alex Auvolat	73551e9a2d	[disable-k2v-test] disable the other k2v poll test	2024-03-26 16:24:26 +01:00
Alex	80f81fa6f3	Merge pull request '[disable-k2v-test] disable tests::k2v::test_poll_item as it is not 100% reliable' (#789 ) from disable-k2v-test into main Reviewed-on: Deuxfleurs/garage#789	2024-03-26 14:57:46 +00:00
Alex Auvolat	f267609343	[disable-k2v-test] disable tests::k2v::test_poll_item as it is not 100% reliable	2024-03-26 15:39:17 +01:00
Alex	cdde0f19ee	Merge pull request 'checksum algorithms' (#787 ) from s3-checksum into next-0.10 Reviewed-on: Deuxfleurs/garage#787	2024-03-26 14:24:58 +00:00
Alex Auvolat	74949c69cb	[s3-checksum] implement x-amz-checksum-* headers	2024-03-26 15:01:34 +01:00
Alex	7e0107c47d	Merge pull request 'Fixes to garage_net peering manager' (#786 ) from net-fixes into next-0.10 Reviewed-on: Deuxfleurs/garage#786	2024-03-21 10:26:36 +00:00
Alex Auvolat	3844110cd0	[net-fixes] netapp peer exchange: send only currently connected address	2024-03-21 10:50:44 +01:00
Alex Auvolat	961b4f9af3	[net-fixes] fix issues with local peer address (fix #761 )	2024-03-21 10:45:34 +01:00
Alex Auvolat	5225a81dee	[net-fixes] peering: only count node IDs and not addresses in hash	2024-03-21 09:47:04 +01:00
Alex	e835196940	Merge pull request 'Add marker files in data directories (fix #601 )' (#785 ) from check-data-dir into main Reviewed-on: Deuxfleurs/garage#785	2024-03-20 16:53:47 +00:00
Alex Auvolat	ba33bb31f1	[check-data-dir] add marker files in data directories (fix #601 )	2024-03-20 15:20:25 +01:00
Alex	30abf7e086	Merge pull request 'Add support to logging to syslog (based on patch by @jirutka)' (#784 ) from syslog into main Reviewed-on: Deuxfleurs/garage#784	2024-03-20 13:54:18 +00:00
Alex Auvolat	84018be862	[syslog] warning when syslog support is not enabled	2024-03-20 14:39:04 +01:00
Alex Auvolat	091e693670	[syslog] document environment variables	2024-03-20 14:39:04 +01:00
Alex Auvolat	fe8a7819fa	[syslog] Add support to logging to syslog Original patch by Jakub Jirutka for Alpine Linux port.	2024-03-20 14:22:18 +01:00
Alex Auvolat	ce69dc302c	Merge branch 'main' into next-0.10	2024-03-19 17:17:46 +01:00
Alex	26310f3242	Merge pull request 'CLI: allow manipulating buckets by prefixes of their full IDs' (#783 ) from bucket-id-prefix into main Reviewed-on: Deuxfleurs/garage#783	2024-03-19 16:17:16 +00:00
Alex	65853a4863	Merge pull request 'block refcount repair' (#782 ) from block-ref-repair into next-0.10 Reviewed-on: Deuxfleurs/garage#782	2024-03-19 15:59:19 +00:00
Alex Auvolat	783b586de9	[bucket-id-prefix] CLI: allow manipulating buckets by prefixes of their full IDs	2024-03-19 16:57:51 +01:00
Alex Auvolat	3eab639c14	[block-ref-repair] mention `garage block repair-rc` in documentation	2024-03-19 16:24:34 +01:00
Alex Auvolat	3165ab926c	[block-ref-repair] rename rc's rc field to rc_table	2024-03-19 16:20:22 +01:00
Alex Auvolat	dc0b78cdb8	[block-ref-repair] Block refcount recalculation and repair - We always recalculate the reference count of a block before deleting it locally, to make sure that it is indeed zero. - If we had to fetch a remote block but we were not able to get it, check that refcount is indeed > 0. - Repair procedure that checks everything	2024-03-19 16:20:22 +01:00
Alex	693b89b94b	Merge pull request 'Update WinSCP link in documentation' (#781 ) from stefano/garage:main into main Reviewed-on: Deuxfleurs/garage#781	2024-03-19 09:34:16 +00:00
stefano	cf344d73d5	Update WinSCP link in documentation Update link to new wiki location. See Deuxfleurs/garage#780	2024-03-19 09:21:50 +00:00
Alex Auvolat	0038ca8a78	Merge branch 'main' into next-0.10	2024-03-18 20:19:30 +01:00
Alex	1a0bffae34	Merge pull request 'Use connection pooling in sqlite backend' (#779 ) from sqlite-r2d2 into main Reviewed-on: Deuxfleurs/garage#779	2024-03-18 19:02:36 +00:00
Alex Auvolat	b55f52a9b7	[sqlite-r2d2] run integration test with all db engines	2024-03-18 18:31:35 +01:00
Alex Auvolat	e8f9718ccd	[sqlite-r2d2] implement connection pooling in sqlite backend	2024-03-18 18:05:25 +01:00
Alex	fd2e19bf1b	Merge pull request 'metadata db snapshotting' (#775 ) from db-snapshot into main Reviewed-on: Deuxfleurs/garage#775	2024-03-15 13:17:53 +00:00
Alex Auvolat	8cf3d24875	[db-snapshot] documentation for metadata db snapshots	2024-03-15 13:51:31 +01:00
Alex Auvolat	a68c37555d	[db-snapshot] add garage meta snapshot cli operation	2024-03-15 13:51:31 +01:00
Alex Auvolat	1e42808a59	[db-snapshot] implement meta_auto_snapshot_interval	2024-03-15 13:51:31 +01:00
Alex Auvolat	8dff278b72	[db-snapshot] Implement db snapshotting logic in garage_db	2024-03-15 10:57:22 +01:00
Alex	a80ce6ab5a	Merge pull request '`disable_scrub` configuration option' (#774 ) from disable-scrub into main Reviewed-on: Deuxfleurs/garage#774	2024-03-15 09:22:33 +00:00
Alex Auvolat	990205dc3b	[disable-scrub] document `disable_scrub` config option	2024-03-14 17:01:16 +01:00
Alex Auvolat	7c86ff6c37	[disable-scrub] implement a `disable_scrub` configuration option	2024-03-14 17:01:16 +01:00
Alex	62b01d8705	Merge pull request 'Doc: be slightly more critical of LMDB' (#773 ) from doc-updates into main Reviewed-on: Deuxfleurs/garage#773	2024-03-14 15:43:30 +00:00
Alex Auvolat	422d45b659	[doc-updates] from source: fix default feature list	2024-03-14 16:35:15 +01:00
Alex Auvolat	a7dddebedd	[doc-updates] doc: be slightly more critical of LMDB	2024-03-14 16:31:22 +01:00