jschoubben
3e61b70517
All of mesh-build-go's buildstep Go module leaves mesh-catalog for modules/mesh-delivery-sdk: the step run, fetch and release and the regenerate-and-compare step as the package steprun, the CPU share as steprun/buildcpu, the conformance kit as steprun/conformance, the seat generator as seatgen with cmd/seatgen, and cmd/mesh-pack. The three build modules and the builder's and checker's tests import the SDK and keep no copy; the SDK requires nothing of mesh-catalog. Code the build modules share is the delivery domain's SDK, not one module's package. It carries the build-module round's two new files of that package (dropdetected.go 247c422f, storedbuilds.go 904b8aed). Builds: design 47 G §464, §680, §327, §420, §495 Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h
50 lines
1.6 KiB
Go
50 lines
1.6 KiB
Go
// The probe a run step's isolation is proved with (novox/hq ADR 0448; issue 1309, S19): run inside the step, it says
|
|
// on stdout every way it reached what a step must not, and "shut off" when it reached none. Its arguments: the files
|
|
// it must not read (the forge key, a bus login), a TCP address and a unix socket of the machine it must not reach, a
|
|
// name it must not resolve, and a cache file it writes, which must be unchanged after the step.
|
|
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"net"
|
|
"os"
|
|
"time"
|
|
)
|
|
|
|
func main() {
|
|
if len(os.Args) != 7 {
|
|
fmt.Println("usage: probe <key> <login> <tcp address> <unix socket> <name> <cache file>")
|
|
os.Exit(2)
|
|
}
|
|
key, login, tcp, socket, name, cache := os.Args[1], os.Args[2], os.Args[3], os.Args[4], os.Args[5], os.Args[6]
|
|
reached := 0
|
|
say := func(f string, a ...any) { reached++; fmt.Printf(f+"\n", a...) }
|
|
for _, f := range []string{key, login} {
|
|
if _, err := os.ReadFile(f); err == nil {
|
|
say("read %s", f)
|
|
}
|
|
}
|
|
if c, err := net.DialTimeout("tcp", tcp, 2*time.Second); err == nil {
|
|
c.Close()
|
|
say("reached %s", tcp)
|
|
}
|
|
if c, err := net.DialTimeout("unix", socket, 2*time.Second); err == nil {
|
|
c.Close()
|
|
say("reached %s", socket)
|
|
}
|
|
if addrs, err := net.LookupHost(name); err == nil {
|
|
say("resolved %s to %v", name, addrs)
|
|
}
|
|
if home, err := os.UserHomeDir(); err == nil {
|
|
if entries, err := os.ReadDir(home); err == nil && len(entries) > 0 {
|
|
say("the home %s holds %d entries", home, len(entries))
|
|
}
|
|
}
|
|
if err := os.WriteFile(cache, []byte("written by the step\n"), 0o644); err != nil {
|
|
say("could not write the cache under its throwaway layer: %v", err)
|
|
}
|
|
if reached == 0 {
|
|
fmt.Println("shut off")
|
|
}
|
|
}
|