ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Restore exact repository verification manifests

Browse source
This commit is contained in:
ms2k 2026-07-26 01:07:45 +09:00
commit 51d0c4db1d
1 changed files with 20 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

21
tools/lazaret_verify.py
View file

@ -213,18 +213,23 @@ PROCESS_LINT_ALLOWANCES = {
"acquire",
"acquire_with_stdio",
"acquire_with_stdio_after_ack",
"acquire_with_stdio_in_user_namespace",
"acquire_captured",
"private_role_command",
"mapped_wrapper_command",
"reap",
"reap_status",
"fail_running_captured",
"fail_running_mapped",
"acquire_spawned_child",
"verify_direct_child_pidfd",
"fail_before_pidfd",
"fail_after_pidfd_closed",
"run_transient",
"run_transient_in_user_namespace",
"run_transient_with_stdout",
"run_transient_captured",
"run_mapping_helper",
"spawn_bootstrap",
"captured_process",
},
@ -243,6 +248,7 @@ PROCESS_LINT_ALLOWANCES = {
},
"crates/lazaret-host-coordinator/tests/runtime-composition.rs": {"run_benchmark_guest"},
"crates/lazaret-client/tests/state_cli.rs": {
"active_domain_reports_actionable_maintenance_contention",
"machine_and_human_discovery_are_versioned_and_content_free",
"missing_store_succeeds_only_when_the_complete_state_anchor_is_absent",
"reset_refuses_an_arbitrary_container_or_host_path_before_state_access",
@ -268,7 +274,20 @@ PROCESS_LINT_ALLOWANCES = {
},
}
RUST_FILE_LINE_LIMIT = 1000
RUST_FILE_SIZE_EXCEPTIONS = {}
RUST_FILE_SIZE_EXCEPTIONS = {
"crates/lazaret-ignored-workspace/src/filesystem/operations.rs": (
"complete FUSE Filesystem trait operation dispatch for ignored workspace routing"
),
"crates/lazaret-prepared-lower/src/store.rs": (
"prepared lower materialization verification and atomic publication"
),
"crates/lazaret-runtime-supervisor/src/network.rs": (
"rootless network topology construction readiness and teardown"
),
"crates/lazaret-storage-catalog/src/lib.rs": (
"typed shared artifact lease recovery and reclaim lifecycle"
),
}
FORBIDDEN_PROCESS_SYSCALLS = tuple(
re.compile(pattern)
for pattern in (