mirror of
https://github.com/hanzoai/visor.git
synced 2026-09-24 17:04:14 +00:00
zeekayandHanzo Dev
e1280967b6
A prometheus Data held its labels in a map, and control.ExecArgs held the live kernel objects an exec runs against -- a mount namespace, an fd table, a limit set. Neither has offsets, so neither payload could state a layout. Labels become a list, which also retires the O(n^2) walk that existed to read a map in sorted order. The kernel objects move to control.Env, which is what the sentry supplies and what a call arriving on the wire cannot: a namespace is a reference, not a value. Every urpc payload now states its own wire. Co-authored-by: Hanzo Dev <[email protected]>
121 lines
2.6 KiB
Python
121 lines
2.6 KiB
Python
load("//pkg/sync/locking:locking.bzl", "declare_mutex", "declare_rwmutex")
|
|
load("//tools:defs.bzl", "go_library", "go_test")
|
|
load("//tools/go_generics:defs.bzl", "go_template_instance")
|
|
|
|
package(
|
|
default_applicable_licenses = ["//:license"],
|
|
licenses = ["notice"],
|
|
)
|
|
|
|
go_template_instance(
|
|
name = "atomicptr_credentials",
|
|
out = "atomicptr_credentials_unsafe.go",
|
|
package = "auth",
|
|
suffix = "Credentials",
|
|
template = "//pkg/sync/atomicptr:generic_atomicptr",
|
|
types = {
|
|
"Value": "Credentials",
|
|
},
|
|
)
|
|
|
|
go_template_instance(
|
|
name = "id_map_range",
|
|
out = "id_map_range.go",
|
|
package = "auth",
|
|
prefix = "idMap",
|
|
template = "//pkg/segment:generic_range",
|
|
types = {
|
|
"T": "uint32",
|
|
},
|
|
)
|
|
|
|
go_template_instance(
|
|
name = "id_map_set",
|
|
out = "id_map_set.go",
|
|
consts = {
|
|
"minDegree": "3",
|
|
},
|
|
package = "auth",
|
|
prefix = "idMap",
|
|
template = "//pkg/segment:generic_set",
|
|
types = {
|
|
"Key": "uint32",
|
|
"Range": "idMapRange",
|
|
"Value": "uint32",
|
|
"Functions": "idMapFunctions",
|
|
},
|
|
)
|
|
|
|
declare_mutex(
|
|
name = "user_namespace_mutex",
|
|
out = "user_namespace_mutex.go",
|
|
nested_lock_names = ["ns"],
|
|
package = "auth",
|
|
prefix = "userNamespace",
|
|
)
|
|
|
|
declare_rwmutex(
|
|
name = "keyset_mutex",
|
|
out = "keyset_mutex.go",
|
|
package = "auth",
|
|
prefix = "keyset",
|
|
)
|
|
|
|
declare_mutex(
|
|
name = "keyset_transaction_mutex",
|
|
out = "keyset_transaction_mutex.go",
|
|
package = "auth",
|
|
prefix = "keysetTransaction",
|
|
)
|
|
|
|
go_library(
|
|
name = "auth",
|
|
srcs = [
|
|
"atomicptr_credentials_unsafe.go",
|
|
"auth.go",
|
|
"capability_set.go",
|
|
"context.go",
|
|
"credentials.go",
|
|
"id.go",
|
|
"id_map.go",
|
|
"id_map_functions.go",
|
|
"id_map_range.go",
|
|
"id_map_set.go",
|
|
"key.go",
|
|
"keyset_mutex.go",
|
|
"keyset_transaction_mutex.go",
|
|
"user_namespace.go",
|
|
"user_namespace_mutex.go",
|
|
"zap.go",
|
|
],
|
|
marshal = True,
|
|
visibility = [
|
|
"//pkg/sentry:internal",
|
|
"//test/e2e:__subpackages__",
|
|
],
|
|
deps = [
|
|
"//pkg/abi/linux",
|
|
"//pkg/bits",
|
|
"//pkg/context",
|
|
"//pkg/errors/linuxerr",
|
|
"//pkg/log",
|
|
"//pkg/rand",
|
|
"//pkg/refs",
|
|
"//pkg/sentry/seccheck",
|
|
"//pkg/sentry/seccheck/points:points_go_proto",
|
|
"//pkg/sync",
|
|
"//pkg/sync/locking",
|
|
"@com_github_zap_proto_go//:go",
|
|
],
|
|
)
|
|
|
|
go_test(
|
|
name = "auth_test",
|
|
srcs = ["capability_set_test.go"],
|
|
library = ":auth",
|
|
deps = [
|
|
"//pkg/abi/linux",
|
|
"//pkg/errors/linuxerr",
|
|
],
|
|
)
|