Skip to content

test: prove jailed VMM isolation across sleep and readoption - #229

Merged
ilbertt merged 3 commits into
mainfrom
codex/jailer-isolation-tests
Oct 4, 2026
Merged

test: prove jailed VMM isolation across sleep and readoption#229
ilbertt merged 3 commits into
mainfrom
codex/jailer-isolation-tests

Conversation

@ilbertt

@ilbertt ilbertt commented Oct 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

Verify distinct non-root identities and filesystem roots, plus retained volume and memory across sleep, wake, and daemon readoption.

Stacked after #232.

This was referenced Oct 3, 2026
Merged
Merged
ilbertt added a commit that referenced this pull request Oct 4, 2026
@ilbertt
feat: require the Firecracker jailer for every microVM (#215)
1da1180 
Require jailer for every cold boot and restore. Existing direct VMMs
keep serving until redeployment; their old snapshots cold boot with the
same volume.

Review order: #219 → #220 → #221 → #222 → #223 → #224 → #225 → #226 →
#227 → #228 → #215 → #229 → #230.
Base automatically changed from codex/firecracker-jailer to codex/jailer-snapshot-publication October 4, 2026 07:36
@ilbertt
ilbertt force-pushed the codex/jailer-snapshot-publication branch from 1da1180 to 56e5e75 Compare October 4, 2026 07:40
Base automatically changed from codex/jailer-snapshot-publication to main October 4, 2026 07:52
@ilbertt
ilbertt force-pushed the codex/jailer-isolation-tests branch from 6623378 to 4ce8920 Compare October 4, 2026 07:54
@ilbertt
ilbertt changed the base branch from main to codex/jailer-required-recovered October 4, 2026 07:54
@ilbertt
ilbertt force-pushed the codex/jailer-isolation-tests branch from 4ce8920 to a750d91 Compare October 4, 2026 07:55
@ilbertt
feat: require the Firecracker jailer for every microVM (#215)
3136b2e 
Require jailer for every cold boot and restore. Existing direct VMMs
keep serving until redeployment; their old snapshots cold boot with the
same volume.

Review order: #219 → #220 → #221 → #222 → #223 → #224 → #225 → #226 →
#227 → #228 → #215 → #229 → #230.
@ilbertt
ilbertt force-pushed the codex/jailer-required-recovered branch from e929a39 to 3136b2e Compare October 4, 2026 07:59
@ilbertt
ilbertt force-pushed the codex/jailer-isolation-tests branch from a750d91 to 06ce605 Compare October 4, 2026 08:00
Base automatically changed from codex/jailer-required-recovered to main October 4, 2026 08:04
@ilbertt
ilbertt enabled auto-merge (squash) October 4, 2026 08:05
@ilbertt
ilbertt merged commit 21ab98c into main Oct 4, 2026
12 checks passed
@ilbertt
ilbertt deleted the codex/jailer-isolation-tests branch October 4, 2026 08:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ilbertt