core/spindle/ at 1f34ccc00973f6209bff3540cb02829557e1708d · alice.pds.demo.boltless.dev/core · Tangled

alice.pds.demo.boltless.dev / core

0

This repository has no description

0

core / spindle

9 folders 12 files

at 1f34ccc00973f6209bff3540cb02829557e1708d

dawn spindle/microvm: dont enable sandboxing in slirp4netns 2mo ago

spindle,shuttle: microvm engine init spindle,shuttle,nix: add an alpine microvm image spindle/microvm: allow user defined binary caches in workflows shuttle,nix/microvm: get rid of the hacky nix config parsing / rendering, use nix directly so we can access module options spindle/engine: generalize scheduler out of microvm, make it work-conserving with aging and per-user fairness spindle/microvm: add resource budget limits and optional cgroup enforcement Signed-off-by: dawn <dawn@tangled.org>

2 months ago

spindle,shuttle: microvm engine init spindle,shuttle,nix: add an alpine microvm image spindle/microvm: allow user defined binary caches in workflows shuttle,nix/microvm: get rid of the hacky nix config parsing / rendering, use nix directly so we can access module options spindle/engine: generalize scheduler out of microvm, make it work-conserving with aging and per-user fairness spindle/microvm: add resource budget limits and optional cgroup enforcement Signed-off-by: dawn <dawn@tangled.org>

2 months ago

spindle,shuttle: microvm engine init spindle,shuttle,nix: add an alpine microvm image spindle/microvm: allow user defined binary caches in workflows shuttle,nix/microvm: get rid of the hacky nix config parsing / rendering, use nix directly so we can access module options spindle/engine: generalize scheduler out of microvm, make it work-conserving with aging and per-user fairness spindle/microvm: add resource budget limits and optional cgroup enforcement Signed-off-by: dawn <dawn@tangled.org>

2 months ago

spindle,shuttle: microvm engine init spindle,shuttle,nix: add an alpine microvm image spindle/microvm: allow user defined binary caches in workflows shuttle,nix/microvm: get rid of the hacky nix config parsing / rendering, use nix directly so we can access module options spindle/engine: generalize scheduler out of microvm, make it work-conserving with aging and per-user fairness spindle/microvm: add resource budget limits and optional cgroup enforcement Signed-off-by: dawn <dawn@tangled.org>

2 months ago

spindle/microvm: dont enable sandboxing in slirp4netns slirp4netns has a bug where it will break host devices on root user if this is enabled. so to avoid this, let's disable it. the sandboxing doesn't matter here because slirp4netns runs next to spindle anyway so if slirp is compromised you have bigger issues, and seccomp is still enabled, and if you really care your spindle should be a hardened systemd service anyway. Signed-off-by: dawn <dawn@tangled.org>

2 months ago

spindle,shuttle: microvm engine init spindle,shuttle,nix: add an alpine microvm image spindle/microvm: allow user defined binary caches in workflows shuttle,nix/microvm: get rid of the hacky nix config parsing / rendering, use nix directly so we can access module options spindle/engine: generalize scheduler out of microvm, make it work-conserving with aging and per-user fairness spindle/microvm: add resource budget limits and optional cgroup enforcement Signed-off-by: dawn <dawn@tangled.org>

2 months ago

spindle,shuttle: microvm engine init spindle,shuttle,nix: add an alpine microvm image spindle/microvm: allow user defined binary caches in workflows shuttle,nix/microvm: get rid of the hacky nix config parsing / rendering, use nix directly so we can access module options spindle/engine: generalize scheduler out of microvm, make it work-conserving with aging and per-user fairness spindle/microvm: add resource budget limits and optional cgroup enforcement Signed-off-by: dawn <dawn@tangled.org>

2 months ago

spindle: move secrets to repoDID -keyed Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

xrpc/serviceauth: service auth in lexicon method, typed context key Lewis: May this revision serve well! <lewis@tangled.org>

2 months ago

spindle: legacy casbin rekey via tap resync nudge Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

spindle: turn tap off when done backfilling Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

knotserver,spindle: member acl via firehose ingester Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

spindle: improve the logging situation Signed-off-by: oppiliappan <me@oppi.li>

10 months ago

appview/docs/nix/spindle/readme.md: fix outdated documentation links Signed-off-by: pompydev <pompydev@proton.me>

8 months ago

spindle: legacy secret migration via tap resync nudge Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

spindle,shuttle: microvm engine init spindle,shuttle,nix: add an alpine microvm image spindle/microvm: allow user defined binary caches in workflows shuttle,nix/microvm: get rid of the hacky nix config parsing / rendering, use nix directly so we can access module options spindle/engine: generalize scheduler out of microvm, make it work-conserving with aging and per-user fairness spindle/microvm: add resource budget limits and optional cgroup enforcement Signed-off-by: dawn <dawn@tangled.org>

2 months ago

startup_migrations.go

spindle: legacy secret migration via tap resync nudge Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

startup_migrations_test.go

spindle: legacy casbin rekey via tap resync nudge Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

knotserver,spindle: switch streaming to eventstream Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

spindle: turn tap off when done backfilling Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago

spindle: turn tap off when done backfilling Lewis: May this revision serve well! <lewis@tangled.org>

3 months ago