Files
visor/runsc/specutils/BUILD
T
zeekayandHanzo Dev 3da05638df State the ZAP wire of every urpc payload
urpc encodes with encoding/json, which walks the payload on every call: a
realistic control.ExecArgs costs 7084ns and 10 allocations to cross. ZAP
reads a field at a constant offset out of the buffer that arrived, so the
same payload is 740ns and one allocation -- but only if the offsets are
stated, and a stated offset that is wrong is silent corruption rather than
a compile error. So state them from the types themselves.

//tools/zap reflects over the payloads at build time and writes the wire
as Go source with the offsets as constants. It lives inside Bazel because
pkg/sentry/control cannot be imported from outside it: the *_go_proto
packages it depends on have no source in the tree.

Six payloads had no layout to state. A map, an interface and a type from
another module have no offsets, so each is answered in the type:

  SaveOpts.Metadata and StartContainerArgs.InitialCgroups/Limits cross as
  lists of pairs; boot.Route.Destination restates net.IPNet as Subnet;
  OpenMountArgs restates the OCI mount fields the call actually uses;
  StartArgs.Spec and SinkConfig.Config carry their documents as the bytes
  they arrived as; MetricsRegistrationResponse carries the protocol
  buffer the same way; and seccheck's session options become a type
  instead of a map of any.

ExecArgs and MetricsExportData still have none: ExecArgs holds live
kernel objects behind an interface, and MetricsExportData reaches a
prometheus snapshot whose labels are a map.

Co-authored-by: Hanzo Dev <[email protected]>
2026-09-22 23:10:33 -07:00

57 lines
1.5 KiB
Python

load("//tools:defs.bzl", "go_library", "go_test")
package(
default_applicable_licenses = ["//:license"],
licenses = ["notice"],
)
go_library(
name = "specutils",
srcs = [
"cri.go",
"fs.go",
"gofer_conf.go",
"hooks.go",
"namespace.go",
"nvidia.go",
"rdma.go",
"restore.go",
"specutils.go",
"zap.go",
],
visibility = ["//:sandbox"],
deps = [
"//pkg/abi/linux",
"//pkg/abi/nvgpu",
"//pkg/log",
"//pkg/rdma",
"//pkg/sentry/devices/nvproxy/nvconf",
"//pkg/sentry/kernel/auth",
"//runsc/config",
"//runsc/flag",
"//runsc/specutils/seccomp",
"@com_github_cenkalti_backoff//:go_default_library",
"@com_github_moby_sys_capability//:go_default_library",
"@com_github_mohae_deepcopy//:go_default_library",
"@com_github_opencontainers_runtime_spec//specs-go/features:go_default_library",
"@com_github_opencontainers_runtime_spec//specs-go:go_default_library",
"@com_github_zap_proto_go//:go",
"@org_golang_x_sys//unix:go_default_library",
],
)
go_test(
name = "specutils_test",
size = "small",
srcs = [
"gofer_conf_test.go",
"specutils_test.go",
],
library = ":specutils",
deps = [
"//pkg/sentry/devices/nvproxy/nvconf",
"//runsc/config",
"@com_github_opencontainers_runtime_spec//specs-go:go_default_library",
],
)