29 Commits
Author SHA1 Message Date
Andrei VaginandgVisor bot bd0dbf9b11 kvm/arm64: send SIGKILL if ring0.El0SyncInv has been triggered
Linux does the same thing.

PiperOrigin-RevId: 722789748
2025-02-03 14:07:09 -08:00
Andrei Vagin 4c89bb77d8 Update bazel packages 2024-10-09 17:40:55 -07:00
Andrei Vagin 975bf85ffd buildkite: start testing the network plugin 2024-09-25 19:23:06 -07:00
Andrei VaginandgVisor bot c3fe152a48 test: add the rtnetlink test suit
It is much easier to create complex configurations from bash scripts with help
of the iproute2 tools.

PiperOrigin-RevId: 646286415
2024-06-24 18:25:26 -07:00
Andrei VaginandAndrei Vagin 3cea35d3c0 Update bazel to 7.1.2
The key highlight from the release notes:

Build without the Bytes for builds using remote caching and/or remote
execution is now enabled by default (i.e. --remote_download_outputs
defaults to toplevel). This means that Bazel will no longer try to
download any intermediate outputs from the remote server, but only the
outputs of requested top-level targets instead. This significantly
improves build performance. Bazel now also handles the case of an
artifact falling out of the remote cache gracefully, by rewinding the
build.

Signed-off-by: Andrei Vagin <avagin@gmail.com>
2024-05-09 15:43:34 -07:00
Kevin KrakauerandgVisor bot dc40c49df4 images: use mulitarch default image instead of hacky workaround
Instead of lying to clang about the targeted system, we can install the
necessary package only on x86_64 machines. Our tooling supports multiarch
packages (see tools/images.mk).

PiperOrigin-RevId: 591385576
2023-12-15 16:14:40 -08:00
Kevin KrakauerandgVisor bot 2ae19ffb72 xdp: install libbpf-dev and work around arch build issue
PiperOrigin-RevId: 590826409
2023-12-13 23:00:29 -08:00
Tiwei Bie bff11508c7 runsc: add the EROFS rootfs support
This patch adds the EROFS rootfs support. No gofer process will be
created for the container, when there is no need to pass through host
files into a container via the gofer process. Annotations for rootfs
are also introduced to provide extra information, including the mount
source, mount type and overlay config. Additionally, busybox-static
is added to the default image and will be used to build the EROFS
rootfs images during the test.

Updates #8956

Signed-off-by: Tiwei Bie <tiwei.btw@antgroup.com>
2023-11-07 08:02:16 +08:00
Tiwei Bie 2f01e3fb90 Add an EROFS test in container tests
This patch adds an EROFS test which checks that the checksums we get
from the target directory in container are identical with the ones
got from the source directory that we used to create the EROFS images.

erofs-utils is also added to the default image and will be used to
build the EROFS images during the test.

Signed-off-by: Tiwei Bie <tiwei.btw@antgroup.com>
2023-10-06 01:00:30 +08:00
Andrei Vagin 506d87b963 Update bazel, rules_go and gazelle 2023-08-03 18:22:26 -07:00
Andrei Vagin b72fc827f6 Update bazel to 6.1.1 2023-03-21 23:20:28 -07:00
Adin ScannellandAndrei Vagin e41e5bd3bd Add appropriate arch_genrule transitions. 2023-02-28 12:28:17 -08:00
Andrei Vagin f63df34597 Update bazel to 6.0.0 2023-02-17 14:42:11 -08:00
gVisor bot 289e455495 Merge pull request #8154 from avagin:bazel-update
PiperOrigin-RevId: 492077389
2022-11-30 18:56:18 -08:00
Andrei Vagin 20b2ec04d9 Update bazel packages
Signed-off-by: Andrei Vagin <avagin@gmail.com>
2022-11-29 14:01:41 -08:00
Kevin KrakauerandgVisor bot f32046a7cd remove unnecessary dockerfile step
After cl/473873880 this is no longer necessary.

PiperOrigin-RevId: 474334039
2022-09-14 10:49:28 -07:00
Kevin KrakauerandgVisor bot d894c1d09b add clang to default image
clang will be used to compile BPF.

PiperOrigin-RevId: 463392266
2022-07-26 11:53:04 -07:00
Etienne PerotandgVisor bot 6a922404e7 Default Docker image: Add kmod package.
PiperOrigin-RevId: 450564818
2022-05-23 17:49:33 -07:00
Adin ScannellandgVisor bot a87bb4aae2 Ensure that nogo is enabled.
A recent change stopped using the correct file (the export data, not the
archive) and checklocks started failing. Unfortunately, this was suppressed,
since the filter command was not failing with findings.

This change fixes that problem and adds a test to ensure that this cannot
happen again. If nogo starts failing to identify problems, the sanity_test in
nogo/sanity will also start to fail.

This change also requires updating the WORKSPACE to the latest rules_go and
Go version, in order to pick up the fixed go_tools. The latest rules_go in
turn required an updated bazel, which in turn required a minor change in the
coverdata implementation.

Fixing the fact propagation brought forward a number of problems with caching
for bazel workers. Its unclear whether this was a core worker issue or whether
some caching was broken, but the situation was basically undebugable. Instead,
the way facts are stored and loaded is optimized to be able to remove the use
of workers altogether and ideally make nogo debuggable.

PiperOrigin-RevId: 426327186
2022-02-03 23:45:40 -08:00
Zeling FengandgVisor bot b318556f83 Dockerless PacketImpact
- More hermetic test network setup
- Easier to use/setup without docker

Updates #6018, #6835.

PiperOrigin-RevId: 410039248
2021-11-15 11:44:51 -08:00
Fengjin Chenandchenfengjin 7b300f556c Add -y to install docker-ce when build image 2021-08-02 12:40:22 +08:00
Tamir DubersteinandgVisor bot fb422db706 Update go-tools to 2020.2.1
...and a bunch of other things as I worked through the rot. Notably:
  - Upgrade to bazel 4.0.0
  - Upgrade to Go 1.15.7

Remove go_branch stderr suppression; this made it quite difficult to see
what was failing while developing this patch.

PiperOrigin-RevId: 355257833
2021-02-02 14:53:12 -08:00
Andrei VaginandAndrei Vagin 8de562b799 Add ARM smoke test
make BAZEL_CONFIG=aarch64 arm-qemu-smoke-test

Signed-off-by: Andrei Vagin <avagin@gmail.com>
2021-01-07 17:41:43 -08:00
Adin ScannellandgVisor bot 65a2242db4 Tweak aarch64 support.
A few images were broken with respect to aarch64. We should now
be able to run push-all-images with ARCH=aarch64 as part of the
regular continuous integration builds, and add aarch64 smoke tests
(via user emulation for now) to the regular test suite (future).

PiperOrigin-RevId: 346685462
2020-12-09 18:51:17 -08:00
Adin ScannellandShentubot a855a814d6 Refactor the Makefile to avoid recursive Make.
Recursive make is difficult to follow and debug. Drop this by using
internal functions, which, while difficult, are easier than trying to
following recursive invokations.

Further simplify the Makefile by collapsing the image bits and removing
the tools/vm directory, which is effectively unused.

Fixes #4952

PiperOrigin-RevId: 346569133
2020-12-09 15:53:23 -08:00