ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Bind sandbox handoff authority and restore verifier gates

Browse source
This commit is contained in:
ms2k 2026-07-16 15:20:13 +09:00
commit 49d5def1a9
1 changed files with 951 additions and 170 deletions
Download patch file Download diff file Expand all files Collapse all files

22
tools/lazaret_verify.py
View file

@ -29,7 +29,7 @@ NEXTEST_COMMAND = (
"--filterset",
(
"not binary(capability-drop-helper) and not binary(acquisition) "
"and not binary(runtime-composition)"
"and not binary(runtime-composition) and not binary(network-runtime)"
),
)
DOCTEST_COMMAND = (
@ -71,9 +71,19 @@ RUNTIME_COMPOSITION_TEST_COMMAND = (
"runtime-composition",
"--locked",
)
NETWORK_RUNTIME_TEST_COMMAND = (
"cargo",
"test",
"--offline",
"-p",
"lazaret-runtime-supervisor",
"--test",
"network-runtime",
"--locked",
)
REQUIRED_TOOL_VERSIONS = (
("rustc", ("--version",), (0,), re.compile(r"^rustc 1\.90\.0 ")),
("cargo", ("--version",), (0,), re.compile(r"^cargo 1\.90\.0 ")),
("rustc", ("--version",), (0,), re.compile(r"^rustc 1\.97\.0 ")),
("cargo", ("--version",), (0,), re.compile(r"^cargo 1\.97\.0 ")),
(
"cargo-nextest",
("--version",),
@ -131,6 +141,7 @@ PROCESS_LINT_ALLOWANCES = {
"send_signal",
"acquire",
"acquire_with_stdio",
"acquire_with_stdio_after_ack",
"acquire_captured",
"private_role_command",
"require_reapable_sigchld",
@ -147,10 +158,14 @@ PROCESS_LINT_ALLOWANCES = {
"current_process_identity",
"append_parent_identity",
"exec_target",
"run_transient",
},
"crates/lazaret-host-coordinator/tests/runtime-composition.rs": {"run_benchmark_guest"},
"crates/lazaret-linux/tests/acquisition.rs": {
"run_acquisition",
"successful_acquisition",
"acknowledged_transition_precedes_exact_wrapper_release",
"failed_acknowledged_transition_refuses_exact_wrapper_release",
"lifetime_pipe_descriptor_contract",
"run_lifetime_pipe_target",
"failed_stages_and_acknowledgments",
@ -534,6 +549,7 @@ def run_rust_tests() -> None:
run(list(ACQUISITION_TEST_COMMAND))
run(list(CAPABILITY_TEST_COMMAND))
run_physical(list(RUNTIME_COMPOSITION_TEST_COMMAND))
run_physical(list(NETWORK_RUNTIME_TEST_COMMAND))
run(list(DOCTEST_COMMAND))