CloudNebulaProject/reddwarf
Watch
1
0
Fork
You've already forked reddwarf
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Package native services and run bounded sandbox CI #8

Merged
toasterson merged 17 commits from codex/pilot-package-main-20261003 into main 2026-10-05 18:07:17 +00:00
Conversation 0 Commits 17 Files changed 25 +2033 -32
toasterson commented 2026-10-03 03:14:25 +00:00
Owner
Copy link

Work item: WI-6 (01a0f6e0-ddae-7be2-a3a9-a8bad3246342). Source: c238fa1c788035dc7fa02ad2a68afdbe19b89691.

This adds IPS packaging, disabled-by-default SMF control-plane and worker services, and a bounded one-job CI runner. Protected configuration/state paths are validated before activation; the runner retains its terminal receipt and log across guest and worker restarts. The native package runbook covers packaging and recovery.

Owned gateway teardown uses supported active-only ipadm disable-if -t and refuses saved or unknown interface configuration before any teardown mutation. Journal, parent/MAC, unrelated-address/VNIC and final absence checks remain intact. The owned networking runbook documents the ownership boundary.

Validation:

  • Current c238 passed 290 native workspace tests, including 196 runtime tests, formatting/strict Clippy, API/TLS/authorization/readiness/restart checks, two SMF XML validations, 12 method fixtures on each native Python and 21 runner fixtures. All 17 qualification steps passed; both release binaries passed native ELF/link checks. Receipt b40acc781cfa45016ccbbe2c483d63564f1367fd9d79fe2588d06ba0ea15c35d.
  • Eight corrected fabric tests and the standalone helper passed. Using that helper, the decommission graph removed all 18 owned datasets and task fabric/configuration, restored resource-cap state, and preserved unrelated state and the recovery BE. Exact .4 uninstall passed through completed API16 and distinct read-only finalizer17; original swap reservation was restored exactly. Failed parent attempts remain preserved.
  • IPS 0.20261004.5 was created from c238's measured release products with disabled SMF manifests, nine verified provider requirements and an exact 13-file public payload. All 30 package steps and both production manifest validators passed. Package receipt 879d22733b07407f7b6a11f27316e15de7a32e42b88511672be5c924ebbb18cf; delivered archive SHA-256 8372ab94b8475712a839bf9d5742e36386ae10f7d65533ae08f3142d32d69b55. Creation is separate from the installed .4 pilot. Attempt1's jobs metadata erratum is preserved; accepted attempt2 records the actual one-job build.
  • Historical compatibility pilot: host b316 passed 287 native tests and installed/exercised .4; guest source 39d732ec381ed353bdfd41de93d32d33bb1a2b12 passed 278 locked/offline tests. Guest/worker restarts preserved terminal results; normal workload deletion, whole-zone halt and durable zero-allocation COPY audit passed. These results retain their original source provenance.

Package and selected public evidence are retained in the maintainer workspace under artifacts/reddwarf-native-20261001/: package-c238fa1-20261004-2-reddwarf.p5p, the qualification/package receipts above, and the closed public inventory reddwarf-c238-closed-public-files-actual-20261004.json. Private native archives and configuration/database bytes remain excluded.

Anima review and exact-head CI will run after handback.

Final native acceptance: reddwarf-c238-native-final-acceptance-20261004.json, SHA-256 a608270fe35aec6ffb4c1221cadbfcf1edfe53987a8525b135bbbc21aaa635aa.

Work item: WI-6 (`01a0f6e0-ddae-7be2-a3a9-a8bad3246342`). Source: `c238fa1c788035dc7fa02ad2a68afdbe19b89691`. This adds IPS packaging, disabled-by-default SMF control-plane and worker services, and a bounded one-job CI runner. Protected configuration/state paths are validated before activation; the runner retains its terminal receipt and log across guest and worker restarts. The [native package runbook](https://code.aopc.cloud/CloudNebulaProject/reddwarf/src/commit/c238fa1c788035dc7fa02ad2a68afdbe19b89691/docs/native-package.md) covers packaging and recovery. Owned gateway teardown uses supported active-only `ipadm disable-if -t` and refuses saved or unknown interface configuration before any teardown mutation. Journal, parent/MAC, unrelated-address/VNIC and final absence checks remain intact. The [owned networking runbook](https://code.aopc.cloud/CloudNebulaProject/reddwarf/src/commit/c238fa1c788035dc7fa02ad2a68afdbe19b89691/docs/owned-networking.md) documents the ownership boundary. Validation: - Current c238 passed 290 native workspace tests, including 196 runtime tests, formatting/strict Clippy, API/TLS/authorization/readiness/restart checks, two SMF XML validations, 12 method fixtures on each native Python and 21 runner fixtures. All 17 qualification steps passed; both release binaries passed native ELF/link checks. Receipt `b40acc781cfa45016ccbbe2c483d63564f1367fd9d79fe2588d06ba0ea15c35d`. - Eight corrected fabric tests and the standalone helper passed. Using that helper, the decommission graph removed all 18 owned datasets and task fabric/configuration, restored resource-cap state, and preserved unrelated state and the recovery BE. Exact `.4` uninstall passed through completed API16 and distinct read-only finalizer17; original swap reservation was restored exactly. Failed parent attempts remain preserved. - IPS `0.20261004.5` was created from c238's measured release products with disabled SMF manifests, nine verified provider requirements and an exact 13-file public payload. All 30 package steps and both production manifest validators passed. Package receipt `879d22733b07407f7b6a11f27316e15de7a32e42b88511672be5c924ebbb18cf`; delivered archive SHA-256 `8372ab94b8475712a839bf9d5742e36386ae10f7d65533ae08f3142d32d69b55`. Creation is separate from the installed `.4` pilot. Attempt1's jobs metadata erratum is preserved; accepted attempt2 records the actual one-job build. - Historical compatibility pilot: host b316 passed 287 native tests and installed/exercised `.4`; guest source `39d732ec381ed353bdfd41de93d32d33bb1a2b12` passed 278 locked/offline tests. Guest/worker restarts preserved terminal results; normal workload deletion, whole-zone halt and durable zero-allocation COPY audit passed. These results retain their original source provenance. Package and selected public evidence are retained in the maintainer workspace under `artifacts/reddwarf-native-20261001/`: `package-c238fa1-20261004-2-reddwarf.p5p`, the qualification/package receipts above, and the closed public inventory `reddwarf-c238-closed-public-files-actual-20261004.json`. Private native archives and configuration/database bytes remain excluded. Anima review and exact-head CI will run after handback. Final native acceptance: `reddwarf-c238-native-final-acceptance-20261004.json`, SHA-256 `a608270fe35aec6ffb4c1221cadbfcf1edfe53987a8525b135bbbc21aaa635aa`.
toasterson changed title from WIP: Package disabled native roles and a bounded offline CI runner to WIP: Package native roles and prove a bounded sandbox CI runner 2026-10-03 07:54:03 +00:00
toasterson changed title from WIP: Package native roles and prove a bounded sandbox CI runner to Package native services and run bounded sandbox CI 2026-10-04 04:34:25 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
CloudNebulaProject/reddwarf!8
No description provided.