-
Notifications
You must be signed in to change notification settings - Fork 29
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Create sandbox for host file system access #783
Open
n0toose
wants to merge
8
commits into
hermit-os:main
Choose a base branch
from
n0toose:sandbox-uhyvefilemap
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Commits on Nov 6, 2024
-
feat(sandbox): Add UhyveFileMap structure and sandbox
* Add --mount parameter for "whitelisting" guest_paths and defining their respective filesystem paths on the host FS * Add UhyveFileMap structure * Add sandbox support to open() syscall A few points that could be further worked are unit tests, handling more of the parsing using the clap library directly and performance optimizations. Helped-by: Çağatay Yiğit Şahin <[email protected]> Helped-by: Jonathan Klimt <[email protected]>
Configuration menu - View commit details
-
Copy full SHA for b03b71c - Browse repository at this point
Copy the full SHA b03b71cView commit details -
docs(readme): remove host fs access warning
Also removes the "Introduction" header, as the header takes more space than the text itself now. Originally introduced in e7869a9.
Configuration menu - View commit details
-
Copy full SHA for 6917513 - Browse repository at this point
Copy the full SHA 6917513View commit details -
Configuration menu - View commit details
-
Copy full SHA for 0b243c1 - Browse repository at this point
Copy the full SHA 0b243c1View commit details
Commits on Nov 8, 2024
-
Configuration menu - View commit details
-
Copy full SHA for 2246517 - Browse repository at this point
Copy the full SHA 2246517View commit details -
Configuration menu - View commit details
-
Copy full SHA for b327406 - Browse repository at this point
Copy the full SHA b327406View commit details -
Configuration menu - View commit details
-
Copy full SHA for f50841f - Browse repository at this point
Copy the full SHA f50841fView commit details
Commits on Nov 12, 2024
-
test(isolation): introduce UhyveFileMap integration tests
Introduces a test for UhyveFileMap. Some refactoring was done so as to keep the two tests, fs-test and uhyvefilemap, in separate files. Some filesystem-related functions were moved into common.rs, because: - we anticipate that they will be necessary for further filesystem-related tests - putting two test functions in a single test (e.g. fs-test) causes the second test to hang for some mysterious reason - more descriptive errors
Configuration menu - View commit details
-
Copy full SHA for ca0e3c4 - Browse repository at this point
Copy the full SHA ca0e3c4View commit details -
feat(isolation): rework file map cli structure
- Rename --file_map to --mount - Temporarily remove short parameter - Temporarily remove environment variable - Don't split file_map params with commas - Change documentation, remove references to file_map variable
Configuration menu - View commit details
-
Copy full SHA for 2f5355f - Browse repository at this point
Copy the full SHA 2f5355fView commit details
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.