pptx704
c164aadfc9
- Replace single 'minimal' system template with four well-known distro
base images: minimal-ubuntu (id 0), minimal-alpine (id 1), minimal-arch
(id 2), minimal-fedora (id 3) — all platform-owned, reserved IDs 0–1024
- Add id.IsReservedTemplateID() guard and well-known ID constants
- Seed the four system base templates via a goose migration
- On-disk layout: images/teams/{b36(team)}/{b36(tid)}/rootfs.ext4
- Rebuild scripts (update-minimal-rootfs.sh, build-*.sh) handle all four
- rootfs-from-container.sh: fix usr-merged distro tini install, flatten
IMAGE_NAME slashes for tar path
Snapshotting:
- Allow snapshots from 'paused' state (not just 'running')
- Implement flattenPausedCow for paused sandboxes: re-attach dm-snapshot,
flatten CoW, tear down; distinct dm name to avoid colliding with Resume
- copyMemorySnapshotFiles + linkOrCopyFile: hardlink CH memory artefacts
with sparse-preserving cp --sparse=always fallback across filesystems
- Promote staging dir atomically with rename(2)
- Track origStatus through snapshotInBackground so badge returns to
paused (not running) after paused snapshot
- Expand CleanupOrphanPauseDirs to clean up .stage- prefixes too
Build service:
- Look up all base templates (including system ones) via DB query instead
of hardcoding the minimal template path
- Insert a sandbox DB record for builder sandboxes
- Destroy builder sandbox + mark DB record stopped on finalize
- Default base template to minimal-ubuntu instead of minimal
Chores:
- Remove stale recipe files (code-runner-beta, jupyter test)
- Remove prepare-wrenn-user.sh (replaced by setup-host.sh)
- Remove old build-rootfs.sh / docker-to-rootfs.sh / per-template build.sh
- Update CLAUDE.md, README.md, envd-rs README with new template info
- Frontend: update admin templates page, admin capsule view, snapshot
dialog to support paused-state snapshots
87 lines
1.7 KiB
TOML
87 lines
1.7 KiB
TOML
[package]
|
|
name = "envd"
|
|
version = "0.3.0"
|
|
edition = "2024"
|
|
rust-version = "1.95"
|
|
|
|
[dependencies]
|
|
# Async runtime
|
|
tokio = { version = "1", features = ["full"] }
|
|
|
|
# HTTP framework
|
|
axum = { version = "0.8", features = ["multipart"] }
|
|
tower = { version = "0.5", features = ["util"] }
|
|
tower-http = { version = "0.6", features = ["cors", "fs"] }
|
|
tower-service = "0.3"
|
|
|
|
# RPC (Connect protocol — serves Connect + gRPC + gRPC-Web on same port)
|
|
connectrpc = { version = "0.3", features = ["axum"] }
|
|
buffa-types = { path = "buffa-types-shim" }
|
|
|
|
# CLI
|
|
clap = { version = "4", features = ["derive"] }
|
|
|
|
# Serialization
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
|
|
# Logging
|
|
tracing = "0.1"
|
|
tracing-subscriber = { version = "0.3", features = ["json", "env-filter"] }
|
|
|
|
# System metrics
|
|
sysinfo = "0.33"
|
|
|
|
# Unix syscalls
|
|
nix = { version = "0.30", features = ["fs", "process", "signal", "user", "term", "mount", "ioctl"] }
|
|
|
|
# Concurrent map
|
|
dashmap = "6"
|
|
|
|
# Crypto
|
|
sha2 = "0.10"
|
|
hmac = "0.12"
|
|
hex = "0.4"
|
|
base64 = "0.22"
|
|
|
|
# Secure memory
|
|
zeroize = { version = "1", features = ["derive"] }
|
|
|
|
# File watching
|
|
notify = "7"
|
|
|
|
# Compression
|
|
flate2 = "1"
|
|
|
|
# Directory walking
|
|
walkdir = "2"
|
|
|
|
# Time parsing (RFC3339 → epoch nanos for clock fix)
|
|
chrono = { version = "0.4", default-features = false, features = ["clock", "std"] }
|
|
|
|
# Misc
|
|
libc = "0.2"
|
|
bytes = "1"
|
|
http = "1"
|
|
http-body-util = "0.1"
|
|
futures = "0.3"
|
|
tokio-util = { version = "0.7", features = ["io"] }
|
|
subtle = "2"
|
|
http-body = "1.0.1"
|
|
buffa = "0.3"
|
|
async-stream = "0.3.6"
|
|
mime_guess = "2"
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|
|
|
|
[build-dependencies]
|
|
connectrpc-build = "0.3"
|
|
|
|
[profile.release]
|
|
strip = true
|
|
lto = true
|
|
opt-level = "z"
|
|
codegen-units = 1
|
|
panic = "abort"
|