ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Correct hostinet receive flag handling

Browse source 
Accept and discard Linux-inert send-only flags on hostinet receive calls, add native and runsc syscall coverage, and bind the resulting immutable runtime build.
This commit is contained in:
ms2k 2026-07-31 04:07:41 +09:00
commit b240bc1d12
1 changed files with 88 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

8
crates/lazaret-runtime-supervisor/src/sandbox.rs
View file

@ -41,13 +41,13 @@ use validation::{
};
pub const NETWORK_NAMESPACE_PATH: &str = "/proc/self/ns/net";
pub const RUNSC_BUILD_ID: &str = "5b441d02d40792cfe228b294fb688a80cf6161fb6876d49ef03138618ae2562e";
pub const RUNSC_BUILD_ID: &str = "34ed2f67fc55ef97a0b1755b4a94ed682f6aae57a41ce27eceb66ea366185ca7";
pub const RUNSC_BUILD_ID_BYTES: [u8; 32] = [
91, 68, 29, 2, 212, 7, 146, 207, 226, 40, 178, 148, 251, 104, 138, 128, 207, 97, 97, 251, 104,
118, 212, 158, 240, 49, 56, 97, 138, 226, 86, 46,
52, 237, 47, 103, 252, 85, 239, 151, 160, 177, 117, 91, 74, 148, 237, 104, 47, 106, 174, 87,
164, 28, 226, 126, 206, 182, 110, 163, 102, 24, 92, 167,
];
pub const RUNSC_EXECUTABLE_NAME: &str =
"lazaret-runsc-5b441d02d40792cfe228b294fb688a80cf6161fb6876d49ef03138618ae2562e";
"lazaret-runsc-34ed2f67fc55ef97a0b1755b4a94ed682f6aae57a41ce27eceb66ea366185ca7";
pub const DOMAIN_OPEN_FILE_LIMIT: u64 = 524_288;
const OCI_VERSION: &str = "1.2.1";