Implement exact bootstrap recovery and artifact GC

This commit is contained in:
ms2k 2026-07-17 05:38:43 +09:00
commit d25942596f

View file

@ -159,6 +159,11 @@ PROCESS_LINT_ALLOWANCES = {
"append_parent_identity",
"exec_target",
"run_transient",
"run_transient_with_stdout",
"run_transient_captured",
"spawn_bootstrap",
"captured_process",
"match_recovery_process",
},
"crates/lazaret-host-coordinator/tests/runtime-composition.rs": {"run_benchmark_guest"},
"crates/lazaret-linux/tests/acquisition.rs": {
@ -176,7 +181,9 @@ PROCESS_LINT_ALLOWANCES = {
"concurrent_acquisitions_serialize",
},
"crates/lazaret-linux/tests/capability-drop-helper.rs": {"main"},
"crates/lazaret-state-anchor/src/lib.rs": {"rootless_unmount"},
"crates/lazaret-prepared-lower/tests/prepared_lower.rs": {
"retained_fixed_child_bind_mount_is_refused_when_mount_setup_is_available"
},
}
FORBIDDEN_PROCESS_SYSCALLS = tuple(
re.compile(pattern)