Skip to content

executor: mount read-only sysfs inside isolated actions - #42

Open
zbarsky-openai wants to merge 1 commit into
hermeticbuild:mainfrom
zbarsky-openai:zbarsky/actiond-readonly-action-sysfs
Open

zbarsky-openai wants to merge 1 commit into
hermeticbuild:mainfrom
zbarsky-openai:zbarsky/actiond-readonly-action-sysfs

Conversation

@zbarsky-openai

Copy link
Copy Markdown

Hardware-topology discovery inside actiond currently fails with:

hwloc/linux: failed to find sysfs cpu topology directory, aborting linux discovery.

Create an action-local /sys mount point and mount sysfs read-only after
entering the existing private mount namespace. Keep the mount nosuid,
nodev, and noexec, and extend the existing chroot-directory test.

The ARM64 guest was rebuilt through actiond. A real remote action reads
/sys/devices/system/cpu/online and verifies the sysfs mount is read-only;
the original mpi4py integration no longer reports the hwloc topology error
and advances to its separate libfabric initialization issue.

Hardware-topology discovery inside actiond currently fails with:

```text
hwloc/linux: failed to find sysfs cpu topology directory, aborting linux discovery.
```

Create an action-local `/sys` mount point and mount sysfs read-only after
entering the existing private mount namespace. Keep the mount `nosuid`,
`nodev`, and `noexec`, and extend the existing chroot-directory test.

The ARM64 guest was rebuilt through actiond. A real remote action reads
`/sys/devices/system/cpu/online` and verifies the sysfs mount is read-only;
the original mpi4py integration no longer reports the hwloc topology error
and advances to its separate libfabric initialization issue.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant