Directories
¶
| Path | Synopsis |
|---|---|
|
Package artifact packages a zygote as an OCI artifact and moves it through a registry, so every home that holds a grant for a template warms byte-identical zygote pages from one content-addressed source.
|
Package artifact packages a zygote as an OCI artifact and moves it through a registry, so every home that holds a grant for a template warms byte-identical zygote pages from one content-addressed source. |
|
Package backend is the seam between fiberd's host runtime and a sandbox mechanism.
|
Package backend is the seam between fiberd's host runtime and a sandbox mechanism. |
|
cloudhv
Package cloudhv is the Cloud Hypervisor backend: every fiber is a cloud-hypervisor process holding one micro-VM, restored from a snapshot of the warm guest.
|
Package cloudhv is the Cloud Hypervisor backend: every fiber is a cloud-hypervisor process holding one micro-VM, restored from a snapshot of the warm guest. |
|
gvisor
Package gvisor is the gVisor backend: every fiber is its own runsc sandbox, restored from a checkpoint of the warm template sandbox, so a fiber has a sandbox kernel between it and the host and the tier is FIBER_SNAPSHOT.
|
Package gvisor is the gVisor backend: every fiber is its own runsc sandbox, restored from a checkpoint of the warm template sandbox, so a fiber has a sandbox kernel between it and the host and the tier is FIBER_SNAPSHOT. |
|
hyperlight
Package hyperlight is the Hyperlight backend: every fiber is a Hyperlight micro-VM restored from a snapshot of the warm guest, held by a helper process that fiberd starts per grant and drives over the line protocol in hack/hyperlight/PROTOCOL.md.
|
Package hyperlight is the Hyperlight backend: every fiber is a Hyperlight micro-VM restored from a snapshot of the warm guest, held by a helper process that fiberd starts per grant and drives over the line protocol in hack/hyperlight/PROTOCOL.md. |
|
proc
Package proc is the fork backend.
|
Package proc is the fork backend. |
|
runc
Package runc is the proc backend with a launcher that runs the zygote as the init of an OCI container.
|
Package runc is the proc backend with a launcher that runs the zygote as the init of an OCI container. |
|
coretest
Package coretest holds helpers for tests of code built on pkg/core.
|
Package coretest holds helpers for tests of code built on pkg/core. |
|
Package endpoint is how a fiber's address is written, chosen and dialled.
|
Package endpoint is how a fiber's address is written, chosen and dialled. |
|
Package fiberd is fiberd as a library: the flags, the wiring of verifier, runtime, ledger, pressure ladder, admin socket and RPC server, and the fixed startup order (epoch++ -> reconcile -> open RPC).
|
Package fiberd is fiberd as a library: the flags, the wiring of verifier, runtime, ledger, pressure ladder, admin socket and RPC server, and the fixed startup order (epoch++ -> reconcile -> open RPC). |
|
Package grant encodes CapacityGrant as a signed JWT and verifies it offline.
|
Package grant encodes CapacityGrant as a signed JWT and verifies it offline. |
|
Package handoff is fiberd side of connection handoff.
|
Package handoff is fiberd side of connection handoff. |
|
Package home defines the seam between the invariant core and the environment that holds a grant: a standalone host, a Kubernetes grant Pod, a Slurm allocation.
|
Package home defines the seam between the invariant core and the environment that holds a grant: a standalone host, a Kubernetes grant Pod, a Slurm allocation. |
|
grantdir
Package grantdir delivers grants to every file-fed home from a directory polled for *.jwt files.
|
Package grantdir delivers grants to every file-fed home from a directory polled for *.jwt files. |
|
kubernetes
Package kubernetes is fiberd's home in a Kubernetes grant Pod, where fiberd is the Pod's one container.
|
Package kubernetes is fiberd's home in a Kubernetes grant Pod, where fiberd is the Pod's one container. |
|
kubernetes/fake
Package fake serves the Kubernetes home's slice of the API from memory, for tests that need no API server.
|
Package fake serves the Kubernetes home's slice of the API from memory, for tests that need no API server. |
|
standalone
Package standalone is the home for a plain host: no scheduler, no kubelet.
|
Package standalone is the home for a plain host: no scheduler, no kubelet. |
|
Package rpc serves the grant protocol (api/grant/v1) over gRPC on top of a core.Core, and optionally exposes a thin JSON gateway.
|
Package rpc serves the grant protocol (api/grant/v1) over gRPC on top of a core.Core, and optionally exposes a thin JSON gateway. |
|
runtime
|
|
|
host
Package host is the runtime every sandbox mechanism plugs into.
|
Package host is the runtime every sandbox mechanism plugs into. |
|
host/wsfs
Package wsfs is the file layer of a fiber's workspace.
|
Package wsfs is the file layer of a fiber's workspace. |
|
stub
Package stub is an in-memory runtime for tests and for the conformance suite's first target.
|
Package stub is an in-memory runtime for tests and for the conformance suite's first target. |
|
sys
|
|
|
caps
Package caps narrows the capabilities of fiberd and of everything it starts, such as criu, the zygote and a backend's helpers.
|
Package caps narrows the capabilities of fiberd and of everything it starts, such as criu, the zygote and a backend's helpers. |
|
cgroup
Package cgroup is a thin view of a delegated cgroup v2 subtree: create leaves with a memory ceiling and group OOM, open them for clone3, read what they charge, and kill them.
|
Package cgroup is a thin view of a delegated cgroup v2 subtree: create leaves with a memory ceiling and group OOM, open them for clone3, read what they charge, and kill them. |
|
criu
Package criu wraps the criu command line for the two things fiberd needs: dump one fiber's process tree into an image directory, and restore it later into a cgroup leaf of the runtime's choosing.
|
Package criu wraps the criu command line for the two things fiberd needs: dump one fiber's process tree into an image directory, and restore it later into a cgroup leaf of the runtime's choosing. |
|
helper
Package helper starts the programs fiberd hands privileged work to, such as criu, runc, runsc and ldd.
|
Package helper starts the programs fiberd hands privileged work to, such as criu, runc, runsc and ldd. |
|
mounts
Package mounts prepares what a container mounts read-only before fiberd builds its runtime.
|
Package mounts prepares what a container mounts read-only before fiberd builds its runtime. |
|
netns
Package netns runs small pieces of work inside another process's network namespace.
|
Package netns runs small pieces of work inside another process's network namespace. |
|
Package tlsconf builds the control plane's TLS configurations, for the fiberd's mutual-TLS server and for the callers that dial it.
|
Package tlsconf builds the control plane's TLS configurations, for the fiberd's mutual-TLS server and for the callers that dial it. |
|
tlsconftest
Package tlsconftest issues throwaway certificates for tests that need TLS or mutual TLS, in the spirit of net/http/httptest.
|
Package tlsconftest issues throwaway certificates for tests that need TLS or mutual TLS, in the spirit of net/http/httptest. |
Click to show internal directories.
Click to hide internal directories.