silkd, sdk/python, ci: find on /proc, glibc headroom, keepalive, images base, guest speedups by CMGS · Pull Request #428 · cocoonstack/sandbox

silkd: open a find or replace file without blocking, so /proc/kmsg or a FIFO cannot hang the RPC

CMGS

committed

88273a6

sdk/python: enable TCP keepalive on the relay socket, as Go's dialer does

CMGS

committed

e23799d

packaging: wait 5 s between sandboxd restarts so a short PG outage at boot does not hit the start limit

CMGS

committed

6ee68f0

silkd: build on bookworm so the glibc binary runs on Ubuntu 24.04 with headroom

CMGS

committed

7c63a12

ci: diff images against the last green run's commit, not event.before

CMGS

committed

afa392b

ci: refuse a release tag that does not match silkd's version

CMGS

committed

acde088

scripts: egress-e2e prints the missing-bridge message instead of exiting silently

CMGS

committed

e27cd56

docs: pipelining past a sleeping read, upload request frames, mount namespaces, e2e VM cleanup, layer reproducibility, goldens after an upgrade

CMGS

committed

21c1750

silkd: skip a find file whose whole body does not match before the per-line scan

CMGS

committed

31718e1

silkd: decode stdin frames on the hand-written path data frames use

CMGS

committed

5d985d1

silkd: read a file's first chunk in the open hop, so a small fs_read costs one blocking-pool trip

CMGS

committed

9c4edd5

sdk/python: read relay frames through a 64 KiB buffer instead of the 8 KiB default

CMGS

committed

bce8f4d

docs: a golden whose clones keep failing is retired and rebuilt

CMGS

committed

9fdfb48

sdk/python: set the keepalive idle time on macOS too

CMGS

committed

7862953

silkd: size an fs_read's first chunk by the file's length, not BULK_CHUNK

CMGS

committed

bfef11d

docs: claims cold-boot while a retired golden rebuilds

CMGS

committed

70489ab

Navigation Menu

Repository navigation

silkd, sdk/python, ci: find on /proc, glibc headroom, keepalive, images base, guest speedups - #428

silkd, sdk/python, ci: find on /proc, glibc headroom, keepalive, images base, guest speedups#428
CMGS merged 16 commits into
mainfrom
fix/guest-ci-docs

Commits on Nov 3, 2026

silkd: open a find or replace file without blocking, so /proc/kmsg or a FIFO cannot hang the RPC

sdk/python: enable TCP keepalive on the relay socket, as Go's dialer does

packaging: wait 5 s between sandboxd restarts so a short PG outage at boot does not hit the start limit

silkd: build on bookworm so the glibc binary runs on Ubuntu 24.04 with headroom

ci: diff images against the last green run's commit, not event.before

ci: refuse a release tag that does not match silkd's version

scripts: egress-e2e prints the missing-bridge message instead of exiting silently

docs: pipelining past a sleeping read, upload request frames, mount namespaces, e2e VM cleanup, layer reproducibility, goldens after an upgrade

silkd: skip a find file whose whole body does not match before the per-line scan

silkd: decode stdin frames on the hand-written path data frames use

silkd: read a file's first chunk in the open hop, so a small fs_read costs one blocking-pool trip

sdk/python: read relay frames through a 64 KiB buffer instead of the 8 KiB default

docs: a golden whose clones keep failing is retired and rebuilt

sdk/python: set the keepalive idle time on macOS too

silkd: size an fs_read's first chunk by the file's length, not BULK_CHUNK

docs: claims cold-boot while a retired golden rebuilds