| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
api: bound request and file operation resources Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 20 天前 | |
[conch-init] Sync conch-init connect APIs Assisted-by: Codex:GPT-5.5 Signed-off-by: hu-zhangying <huzhangying@huawei.com> | 1 个月前 | |
[conch-init] Sync conch-init connect APIs Assisted-by: Codex:GPT-5.5 Signed-off-by: hu-zhangying <huzhangying@huawei.com> | 1 个月前 | |
feat(network): initialize guest networking from CNI Guest networking used fixed values before the host could pass its address and DNS information for the selected network slot. The guest resolver therefore could not reflect the CNI network. Add a framed host-agent initialization handshake carrying identity, environment, and guest network settings. Configure or revalidate the guest before starting services, use CNI as the sole DNS source, and close the handshake connection once readiness is established. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 27 天前 | |
refactor conch-init initramfs bootstrap Assisted-by: Codex:gpt-5.6-terra Signed-off-by: hu-zhangying <huzhangying@huawei.com> | 1 个月前 | |
fix(guestd): validate guest file paths Background: The FileService exposes the sandbox filesystem after guestd chroots into the merge root. Its public examples use absolute guest paths, including configured volume mount targets, but the server did not enforce that contract consistently. Root cause: cleanAgentFilepath treated filepath.Clean as validation. Clean rewrote dot segments and redundant separators while leaving relative and parent-relative inputs valid, so values such as ../etc/passwd reached guest-local file operations. Repeated upload chunks also compared cleaned paths and could accept an ambiguous spelling of the original target. Solution: Reject NUL-containing, relative, and non-normalized paths before file access, while retaining valid absolute guest paths, the guest root, and volume-visible paths. Revalidate every explicit upload chunk filepath, document the post-chroot threat boundary without describing a host escape, and cover the helper plus all four FileService entry points with regressions. Fixes: https://github.com/ConchSandbox/Conch/issues/74 Assisted-by: Codex <codex@openai.com> Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 | |
fix(guestd): validate guest file paths Background: The FileService exposes the sandbox filesystem after guestd chroots into the merge root. Its public examples use absolute guest paths, including configured volume mount targets, but the server did not enforce that contract consistently. Root cause: cleanAgentFilepath treated filepath.Clean as validation. Clean rewrote dot segments and redundant separators while leaving relative and parent-relative inputs valid, so values such as ../etc/passwd reached guest-local file operations. Repeated upload chunks also compared cleaned paths and could accept an ambiguous spelling of the original target. Solution: Reject NUL-containing, relative, and non-normalized paths before file access, while retaining valid absolute guest paths, the guest root, and volume-visible paths. Revalidate every explicit upload chunk filepath, document the post-chroot threat boundary without describing a host escape, and cover the helper plus all four FileService entry points with regressions. Fixes: https://github.com/ConchSandbox/Conch/issues/74 Assisted-by: Codex <codex@openai.com> Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 | |
fix(guestd): keep PID 1 alive on guest SIGTERM (#180) | 5 天前 | |
conch-init: fix volume mountFS usage Assisted-by: Codex:gpt-5.6-terra Signed-off-by: hu-zhangying <huzhangying@huawei.com> | 1 个月前 | |
fix(agent): recognize normalized default routes netlink.RouteList represents the restored default route as 0.0.0.0/0, while route validation previously accepted only a nil destination. This made checkpoint-resumed sandboxes reject a valid default route via 192.168.100.2 with NETWORK_MISMATCH. Treat both representations as the same default route. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: jingrui <jingrui@huawei.com> | 26 天前 | |
feat(network): initialize guest networking from CNI Guest networking used fixed values before the host could pass its address and DNS information for the selected network slot. The guest resolver therefore could not reflect the CNI network. Add a framed host-agent initialization handshake carrying identity, environment, and guest network settings. Configure or revalidate the guest before starting services, use CNI as the sole DNS source, and close the handshake connection once readiness is established. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 27 天前 | |
agent: bound pty dimensions before conversion Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 20 天前 | |
agent: bound pty dimensions before conversion Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 20 天前 | |
[conch-init]Rename conch-agent to conch-init Assisted-by: Codex:GPT-5.5 Signed-off-by: hu-zhangying <huzhangying@huawei.com> | 1 个月前 | |
feat(network): initialize guest networking from CNI Guest networking used fixed values before the host could pass its address and DNS information for the selected network slot. The guest resolver therefore could not reflect the CNI network. Add a framed host-agent initialization handshake carrying identity, environment, and guest network settings. Configure or revalidate the guest before starting services, use CNI as the sole DNS source, and close the handshake connection once readiness is established. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 27 天前 | |
feat(template): use Boot Index digests as Template IDs Template removal left containerd image records behind. This kept Boot Index content rooted after its metadata was deleted. Separate generated IDs also made the metadata and image lifecycles difficult to align. Use each Boot Index digest as its Template ID and maintain one canonical local image record for create, pull, and checkpoint flows. Remove that record with Template metadata so containerd GC can reclaim unreferenced content. Update the API, CLI, SDK, persistence, tests, and documentation for the new identity model. This intentionally replaces the previous generated Template ID format. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 20 天前 | |
feat: add process execution timeout Assisted-by: Codex:gpt-5.6-terra Signed-off-by: hu-zhangying <huzhangying@huawei.com> | 1 个月前 | |
fix(sandbox): validate initialization payloads before startup Validate environment entries and the complete vsock initialization payload before starting a VM. Treat guest environment application failures as terminal, and map invalid or oversized initialization data to stable sandbox API errors. | 24 天前 | |
fix(sandbox): validate initialization payloads before startup Validate environment entries and the complete vsock initialization payload before starting a VM. Treat guest environment application failures as terminal, and map invalid or oversized initialization data to stable sandbox API errors. | 24 天前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 20 天前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 27 天前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 5 天前 | ||
| 1 个月前 | ||
| 26 天前 | ||
| 27 天前 | ||
| 20 天前 | ||
| 20 天前 | ||
| 1 个月前 | ||
| 27 天前 | ||
| 20 天前 | ||
| 1 个月前 | ||
| 24 天前 | ||
| 24 天前 |