dev

文件	最后提交记录	最后更新时间
cloud_hypervisor.go	network: enforce IPv4-only sandbox networking Conch network policies currently accept only IPv4 destinations, but guest IPv6 remained enabled during cold boot and CNI results were not checked comprehensively for IPv6 data. This could leave traffic outside the documented IPv4 policy boundary. Disable IPv6 on StratoVirt and Cloud Hypervisor cold boots. Reject CNI results containing IPv6 addresses, gateways, routes, or DNS servers before accepting a slot; existing slot-creation cleanup then performs CNI rollback. Document the IPv4-only contract and add focused command-generation and CNI result validation tests. Fixes Issue #167: https://github.com/ConchSandbox/Conch/issues/167	1 个月前
cloud_hypervisor_test.go	network: enforce IPv4-only sandbox networking Conch network policies currently accept only IPv4 destinations, but guest IPv6 remained enabled during cold boot and CNI results were not checked comprehensively for IPv6 data. This could leave traffic outside the documented IPv4 policy boundary. Disable IPv6 on StratoVirt and Cloud Hypervisor cold boots. Reject CNI results containing IPv6 addresses, gateways, routes, or DNS servers before accepting a slot; existing slot-creation cleanup then performs CNI rollback. Document the IPv4-only contract and add focused command-generation and CNI result validation tests. Fixes Issue #167: https://github.com/ConchSandbox/Conch/issues/167	1 个月前
restore.go	feat(cli): expose image, template, and sandbox workflows The public conch snapshot workflow exposed containerd keys, mount layouts, and lifecycle operations. Templates also persisted mutable snapshot refs and generic memory paths, coupling the product interface to host-local storage and VMM implementation details. Make image, template, and sandbox the public resource boundaries. Use an immutable OCI Boot Index digest as the Template contract, treat unpacked EROFS snapshots as rebuildable local cache, and keep capture, memory layout, and restore policies behind VMM-specific adapters. Build, validate, inspect, unpack, and distribute Boot Indexes by digest. Publish checkpoints as new indexes and atomically advance lineage. Expose explicit image kinds, retain snapshots only for debug repair, and remove legacy snapshot APIs and builders. Reorganize the CLI as: - image: pull, push, unpack, ls, and rm - template: create, pull, push, ls, inspect, and rm - sandbox: create, checkpoint, suspend, resume, and stop - debug snapshot: ls and rm	2 个月前
restore_test.go	docs: improve project documentation Documentation mixed user and developer guidance and still described outdated dependencies, commands, and runtime behavior. Organize documentation by audience, remove obsolete pages and assets, and align setup, template, network, and VMM guidance with the current implementation. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com>	1 个月前