| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
refactor(image): move boot index unpack to templates Image commands exposed archive transfer and unpacking for both OCI images and Conch Boot Indexes, although only template workflows need explicit unpacking. This blurred ownership and retained snapshot metadata and recovery behavior that the runtime no longer uses. Remove archive transfer and OCI image unpack APIs. Move explicit Boot Index unpacking to conch template unpack, resolve templates by immutable digest, and rely on containerd for component snapshot creation. Keep native manifest validation so invalid pulled templates fail before unpack reports success. Assisted-by: Codex:GPT-5.6-sol Assisted-by: Claude Code:GLM-5.2 Signed-off-by: Yifan Zhao <stopire@gmail.com> | 29 天前 | |
refactor(runtime): remove user-facing namespace support Namespace-aware APIs exposed isolation, but state and runtime paths did not consistently enforce it. Sandbox, template, image, snapshot, and volume identifiers could therefore have conflicting scopes. Adopt a single runtime scope and make identifiers globally unique within the daemon. Remove namespace fields from APIs, state records, CLI flags, SDK payloads, configuration, and documentation. Route containerd access through the adapter's fixed internal scope. Keep sandbox uniqueness policy in the runtime service while BoltStore remains an upsert-only persistence layer. Return configuration parsing errors from client construction so namespace removal does not hide malformed YAML. This intentionally provides no migration for namespace-scoped state. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 | |
conchd: standardize API error responses | 27 天前 | |
conchd: standardize API error responses | 27 天前 | |
conchd: standardize API error responses | 27 天前 | |
snapshot: reject stale restored view mounts Snapshot recovery reloads view records from the daemon state database after conchd restarts. A view directory can survive after its bind or EROFS mount disappears, so rehydration could restore a cache entry that later cannot serve a sandbox. Require restored view paths to be real mount points, resolve their mount specs through the correct snapshotter, skip stale records, and let the view manager recreate stale mounts on demand. Assisted-by: Codex:GPT-5.5 Signed-off-by: Yifan Zhao <yifan.yfzhao@foxmail.com> | 2 个月前 | |
feat(cli): expose image, template, and sandbox workflows The public conch snapshot workflow exposed containerd keys, mount layouts, and lifecycle operations. Templates also persisted mutable snapshot refs and generic memory paths, coupling the product interface to host-local storage and VMM implementation details. Make image, template, and sandbox the public resource boundaries. Use an immutable OCI Boot Index digest as the Template contract, treat unpacked EROFS snapshots as rebuildable local cache, and keep capture, memory layout, and restore policies behind VMM-specific adapters. Build, validate, inspect, unpack, and distribute Boot Indexes by digest. Publish checkpoints as new indexes and atomically advance lineage. Expose explicit image kinds, retain snapshots only for debug repair, and remove legacy snapshot APIs and builders. Reorganize the CLI as: - image: pull, push, unpack, ls, and rm - template: create, pull, push, ls, inspect, and rm - sandbox: create, checkpoint, suspend, resume, and stop - debug snapshot: ls and rm | 1 个月前 | |
refactor(runtime): remove user-facing namespace support Namespace-aware APIs exposed isolation, but state and runtime paths did not consistently enforce it. Sandbox, template, image, snapshot, and volume identifiers could therefore have conflicting scopes. Adopt a single runtime scope and make identifiers globally unique within the daemon. Remove namespace fields from APIs, state records, CLI flags, SDK payloads, configuration, and documentation. Route containerd access through the adapter's fixed internal scope. Keep sandbox uniqueness policy in the runtime service while BoltStore remains an upsert-only persistence layer. Return configuration parsing errors from client construction so namespace removal does not hide malformed YAML. This intentionally provides no migration for namespace-scoped state. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 | |
sandbox: expose runtime snapshot ownership | 5 天前 | |
refactor(runtime): remove user-facing namespace support Namespace-aware APIs exposed isolation, but state and runtime paths did not consistently enforce it. Sandbox, template, image, snapshot, and volume identifiers could therefore have conflicting scopes. Adopt a single runtime scope and make identifiers globally unique within the daemon. Remove namespace fields from APIs, state records, CLI flags, SDK payloads, configuration, and documentation. Route containerd access through the adapter's fixed internal scope. Keep sandbox uniqueness policy in the runtime service while BoltStore remains an upsert-only persistence layer. Return configuration parsing errors from client construction so namespace removal does not hide malformed YAML. This intentionally provides no migration for namespace-scoped state. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 | |
refactor(runtime): remove user-facing namespace support Namespace-aware APIs exposed isolation, but state and runtime paths did not consistently enforce it. Sandbox, template, image, snapshot, and volume identifiers could therefore have conflicting scopes. Adopt a single runtime scope and make identifiers globally unique within the daemon. Remove namespace fields from APIs, state records, CLI flags, SDK payloads, configuration, and documentation. Route containerd access through the adapter's fixed internal scope. Keep sandbox uniqueness policy in the runtime service while BoltStore remains an upsert-only persistence layer. Return configuration parsing errors from client construction so namespace removal does not hide malformed YAML. This intentionally provides no migration for namespace-scoped state. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com> | 1 个月前 | |
sandbox: expose runtime snapshot ownership | 5 天前 | |
feat(cli): expose image, template, and sandbox workflows The public conch snapshot workflow exposed containerd keys, mount layouts, and lifecycle operations. Templates also persisted mutable snapshot refs and generic memory paths, coupling the product interface to host-local storage and VMM implementation details. Make image, template, and sandbox the public resource boundaries. Use an immutable OCI Boot Index digest as the Template contract, treat unpacked EROFS snapshots as rebuildable local cache, and keep capture, memory layout, and restore policies behind VMM-specific adapters. Build, validate, inspect, unpack, and distribute Boot Indexes by digest. Publish checkpoints as new indexes and atomically advance lineage. Expose explicit image kinds, retain snapshots only for debug repair, and remove legacy snapshot APIs and builders. Reorganize the CLI as: - image: pull, push, unpack, ls, and rm - template: create, pull, push, ls, inspect, and rm - sandbox: create, checkpoint, suspend, resume, and stop - debug snapshot: ls and rm | 1 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 29 天前 | ||
| 1 个月前 | ||
| 27 天前 | ||
| 27 天前 | ||
| 27 天前 | ||
| 2 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 5 天前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 5 天前 | ||
| 1 个月前 |