Skip to content

fix: verify recorded VMM peers before API commands - #223

Merged
ilbertt merged 6 commits into
mainfrom
codex/jailer-api-peer
Oct 3, 2026
Merged

ilbertt merged 6 commits into
mainfrom
codex/jailer-api-peer

Conversation

@ilbertt

@ilbertt ilbertt commented Oct 3, 2026

Copy link
Copy Markdown
Owner

Check the recorded PID and UID before sending commands to a jailed VMM socket.

Stacked after #222.

Base automatically changed from codex/jailer-process-records to main October 3, 2026 19:11
@ilbertt
ilbertt enabled auto-merge (squash) October 3, 2026 19:12
@ilbertt
ilbertt merged commit bdb36b5 into main Oct 3, 2026
12 checks passed
@ilbertt
ilbertt deleted the codex/jailer-api-peer branch October 3, 2026 19:16
ilbertt added a commit that referenced this pull request Oct 4, 2026
Reserve jailer UID/GID ranges through useradd and validate account and
subordinate-ID collisions. Repeated installation reuses the reservation.

Stacked after #223.
ilbertt added a commit that referenced this pull request Oct 4, 2026
Require jailer for every cold boot and restore. Existing direct VMMs
keep serving until redeployment; their old snapshots cold boot with the
same volume.

Review order: #219 → #220 → #221 → #222 → #223 → #224 → #225 → #226 →
#227 → #228 → #215 → #229 → #230.
ilbertt added a commit that referenced this pull request Oct 4, 2026
Require jailer for every cold boot and restore. Existing direct VMMs
keep serving until redeployment; their old snapshots cold boot with the
same volume.

Review order: #219 → #220 → #221 → #222 → #223 → #224 → #225 → #226 →
#227 → #228 → #215 → #229 → #230.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant