ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Restore exact repository verification manifests

Browse source
This commit is contained in:
ms2k 2026-07-26 01:07:45 +09:00
commit 51d0c4db1d
1 changed files with 20 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

21
tools/lazaret_verify.py
View file

@ -213,18 +213,23 @@ PROCESS_LINT_ALLOWANCES = {
"acquire", "acquire",
"acquire_with_stdio", "acquire_with_stdio",
"acquire_with_stdio_after_ack", "acquire_with_stdio_after_ack",
"acquire_with_stdio_in_user_namespace",
"acquire_captured", "acquire_captured",
"private_role_command", "private_role_command",
"mapped_wrapper_command",
"reap", "reap",
"reap_status", "reap_status",
"fail_running_captured", "fail_running_captured",
"fail_running_mapped",
"acquire_spawned_child", "acquire_spawned_child",
"verify_direct_child_pidfd", "verify_direct_child_pidfd",
"fail_before_pidfd", "fail_before_pidfd",
"fail_after_pidfd_closed", "fail_after_pidfd_closed",
"run_transient", "run_transient",
"run_transient_in_user_namespace",
"run_transient_with_stdout", "run_transient_with_stdout",
"run_transient_captured", "run_transient_captured",
"run_mapping_helper",
"spawn_bootstrap", "spawn_bootstrap",
"captured_process", "captured_process",
}, },
@ -243,6 +248,7 @@ PROCESS_LINT_ALLOWANCES = {
}, },
"crates/lazaret-host-coordinator/tests/runtime-composition.rs": {"run_benchmark_guest"}, "crates/lazaret-host-coordinator/tests/runtime-composition.rs": {"run_benchmark_guest"},
"crates/lazaret-client/tests/state_cli.rs": { "crates/lazaret-client/tests/state_cli.rs": {
"active_domain_reports_actionable_maintenance_contention",
"machine_and_human_discovery_are_versioned_and_content_free", "machine_and_human_discovery_are_versioned_and_content_free",
"missing_store_succeeds_only_when_the_complete_state_anchor_is_absent", "missing_store_succeeds_only_when_the_complete_state_anchor_is_absent",
"reset_refuses_an_arbitrary_container_or_host_path_before_state_access", "reset_refuses_an_arbitrary_container_or_host_path_before_state_access",
@ -268,7 +274,20 @@ PROCESS_LINT_ALLOWANCES = {
}, },
} }
RUST_FILE_LINE_LIMIT = 1000 RUST_FILE_LINE_LIMIT = 1000
RUST_FILE_SIZE_EXCEPTIONS = {} RUST_FILE_SIZE_EXCEPTIONS = {
"crates/lazaret-ignored-workspace/src/filesystem/operations.rs": (
"complete FUSE Filesystem trait operation dispatch for ignored workspace routing"
),
"crates/lazaret-prepared-lower/src/store.rs": (
"prepared lower materialization verification and atomic publication"
),
"crates/lazaret-runtime-supervisor/src/network.rs": (
"rootless network topology construction readiness and teardown"
),
"crates/lazaret-storage-catalog/src/lib.rs": (
"typed shared artifact lease recovery and reclaim lifecycle"
),
}
FORBIDDEN_PROCESS_SYSCALLS = tuple( FORBIDDEN_PROCESS_SYSCALLS = tuple(
re.compile(pattern) re.compile(pattern)
for pattern in ( for pattern in (