contract.go RawHistoryFolder

1// SPDX-License-Identifier: MIT
2
3package sandbox
4
5// The host/guest contract shared by the drivers and the guest side
6// (internal/guest). Changing a value here changes both sides at once because
7// the host always attaches its own executable to the sandbox.
8const (
9	// VsockPort is the vsock port the executor connects to on the host (CID 2).
10	VsockPort = 1024
11	// GuestExecDir and GuestExecName locate the runner executable inside the
12	// sandbox (read-only), in both modes.
13	GuestExecDir  = "/opt/ermite"
14	GuestExecName = "ermite-runner"
15	// ContainerRunDir is the per-job directory bind-mounted into containers;
16	// ContainerSocket is the executor stream socket inside it.
17	ContainerRunDir = "/run/ermite"
18	ContainerSocket = "exec.sock"
19	// GuestScratch is where the per-job scratch disk (VM) or volume (container)
20	// is mounted; dockerd keeps its data root there.
21	GuestScratch = "/scratch"
22
23	// LabelJob marks every Docker object created for a job; reaping lists by it.
24	LabelJob = "dev.bnema.ermite-runner.job"
25
26	// Kernel command line keys of the VM (read from /proc/cmdline by init).
27	CmdlineSandbox = "ermite.sandbox" // "vm"
28	CmdlineConnect = "ermite.connect" // "vsock:1024"
29	CmdlineGateway = "ermite.gw"      // host side of the /30, also the DNS server
30)