diff --git a/kernel/lib/parallel/parallel.go b/kernel/lib/parallel/parallel.go
index 9f988e61..29eb666e 100644
--- a/kernel/lib/parallel/parallel.go
+++ b/kernel/lib/parallel/parallel.go
@@ -63,3 +63,123 @@ func Execute(tasks []Task, concurrency int64) error {
 
 	return util.MultipleErrors(errList)
 }
+
+func TaskWithLabel(taskType string, label string, task Task) LabeledTask {
+	return labeledTask{
+		taskType: taskType,
+		label:    label,
+		task:     task,
+	}
+}
+
+type LabeledTask interface {
+	Type() string
+	Execute() error
+	Label() string
+}
+
+type labeledTask struct {
+	taskType string
+	label    string
+	task     Task
+}
+
+func (l labeledTask) Type() string {
+	return l.taskType
+}
+
+func (self labeledTask) Execute() error {
+	return self.task()
+}
+
+func (self labeledTask) Label() string {
+	return self.label
+}
+
+type ErrorAction int
+
+const (
+	ErrActionIgnore ErrorAction = 0
+	ErrActionReport ErrorAction = 1
+	ErrActionRetry  ErrorAction = 2
+)
+
+type ErrorPolicy func(task LabeledTask, attempt int, err error) ErrorAction
+
+func AlwaysReport() ErrorPolicy {
+	return func(task LabeledTask, attempt int, err error) ErrorAction {
+		return ErrActionReport
+	}
+}
+
+func ExecuteLabeled(tasks []LabeledTask, concurrency int64, policy ErrorPolicy) error {
+	if len(tasks) == 0 {
+		pfxlog.Logger().Warn("ran parallel set of tasks, but no tasks provided")
+		return nil
+	}
+
+	if concurrency < 1 {
+		return errors.Errorf("invalid concurrency %v, must be at least 1", concurrency)
+	}
+
+	if policy == nil {
+		policy = AlwaysReport()
+	}
+
+	completed := atomic.Int64{}
+
+	sem := semaphore.NewWeighted(concurrency)
+	errorsC := make(chan error, len(tasks))
+	for _, task := range tasks {
+		if err := sem.Acquire(context.Background(), 1); err != nil {
+			errorsC <- err
+			continue
+		}
+		boundTask := task
+		go func() {
+			defer func() {
+				sem.Release(1)
+				current := completed.Add(1)
+				if current%10 == 0 {
+					pfxlog.Logger().Infof("completed %d/%d tasks", current, len(tasks))
+				}
+				if int(current) == len(tasks) {
+					close(errorsC)
+				}
+			}()
+			attempt := 1
+			done := false
+			for !done {
+				pfxlog.Logger().Infof("executing (%d): %s", attempt, boundTask.Label())
+				if err := boundTask.Execute(); err != nil {
+					switch policy(boundTask, attempt, err) {
+					case ErrActionIgnore:
+						done = true
+					case ErrActionReport:
+						errorsC <- err
+						done = true
+					case ErrActionRetry:
+						attempt++
+					}
+				} else {
+					done = true
+				}
+			}
+		}()
+	}
+
+	var errList []error
+	for err := range errorsC {
+		errList = append(errList, err)
+	}
+
+	if len(errList) == 0 {
+		return nil
+	}
+
+	if len(errList) == 1 {
+		return errList[0]
+	}
+
+	return util.MultipleErrors(errList)
+}