Directories
¶
| Path | Synopsis |
|---|---|
|
Package actorevent emits the actor events: the lifecycle events and the usage samples.
|
Package actorevent emits the actor events: the lifecycle events and the usage samples. |
|
Package actorlock serializes lifecycle RPCs per actor.
|
Package actorlock serializes lifecycle RPCs per actor. |
|
Package actorlog provides structured JSON logging for actor sandboxes shared by the gVisor and micro-VM ateom runtimes.
|
Package actorlog provides structured JSON logging for actor sandboxes shared by the gVisor and micro-VM ateom runtimes. |
|
Package apierror holds the errors a substrate server deliberately returns to its caller.
|
Package apierror holds the errors a substrate server deliberately returns to its caller. |
|
Package ateattr is the single source of truth for substrate's ate.* telemetry attributes: the identity keys stamped on spans/logs, and the bounded value sets used as metric labels.
|
Package ateattr is the single source of truth for substrate's ate.* telemetry attributes: the identity keys stamped on spans/logs, and the bounded value sets used as metric labels. |
|
Package atelet contains shared constants and definitions that are used across Substrate components related to atelet.
|
Package atelet contains shared constants and definitions that are used across Substrate components related to atelet. |
|
Package ateletdial connects a worker Pod to the atelet on its own node over the node-local socket, authenticating both ends by Pod certificate.
|
Package ateletdial connects a worker Pod to the atelet on its own node over the node-local socket, authenticating both ends by Pod certificate. |
|
Package atenet defines the shared contract for Substrate actor networking.
|
Package atenet defines the shared contract for Substrate actor networking. |
|
Package ateom registers an ateom worker with the control plane through the node-local atelet, reporting its compute capacity and the sandbox runtime its actors start under.
|
Package ateom registers an ateom worker with the control plane through the node-local atelet, reporting its compute capacity and the sandbox runtime its actors start under. |
|
Package ateomcgroup delegates the worker pod's cgroup to the ateom so each actor can get a leaf of its own.
|
Package ateomcgroup delegates the worker pod's cgroup to the ateom so each actor can get a leaf of its own. |
|
Package ateominit runs a minimal init as PID 1 so ateom doesn't have to.
|
Package ateominit runs a minimal init as PID 1 so ateom doesn't have to. |
|
Package ateomnet provides shared networking configuration logic for Substrate runtime agents.
|
Package ateomnet provides shared networking configuration logic for Substrate runtime agents. |
|
dns
Package dns answers an actor's DNS from its sandbox's gateway namespace and writes the resolv.conf that points the actor at it.
|
Package dns answers an actor's DNS from its sandbox's gateway namespace and writes the resolv.conf that points the actor at it. |
|
dns/freemap
Package freemap implements an efficient mechanism for maintaining a map of free slots.
|
Package freemap implements an efficient mechanism for maintaining a map of free slots. |
|
dns/protocol
Package protocol contains helpers to manage encoding/decoding DNS protocol to/from a byte array.
|
Package protocol contains helpers to manage encoding/decoding DNS protocol to/from a byte array. |
|
netns
Package netns contains Linux network namespace-related functionality.
|
Package netns contains Linux network namespace-related functionality. |
|
Package ateomphaselog renders the per-actor "timing breakdown" log record an ateom emits for each checkpoint and restore.
|
Package ateomphaselog renders the per-actor "timing breakdown" log record an ateom emits for each checkpoint and restore. |
|
Package ateomstats holds the usage telemetry both ateom runtimes share: the attribution an ateom retains for each actor, the per-activation state behind every sample, the sampler, and the ate.actor.usage_sampled records.
|
Package ateomstats holds the usage telemetry both ateom runtimes share: the attribution an ateom retains for each actor, the per-activation state behind every sample, the sampler, and the ate.actor.usage_sampled records. |
|
ateomstatstest
Package ateomstatstest records the usage records an ateom writes, for tests.
|
Package ateomstatstest records the usage records an ateom writes, for tests. |
|
Package ateomsuspend asks the control plane, through the node-local atelet, to suspend an actor an ateom hosts.
|
Package ateomsuspend asks the control plane, through the node-local atelet, to suspend an actor an ateom hosts. |
|
Package ateomtunnel wires atunnel into an ateom: its flags, listeners, DNS relay, and per-actor ingress and egress.
|
Package ateomtunnel wires atunnel into an ateom: its flags, listeners, DNS relay, and per-actor ingress and egress. |
|
Package atunnel carries actor ingress and egress through an ateom worker pod.
|
Package atunnel carries actor ingress and egress through an ateom worker pod. |
|
benchmarking
|
|
|
boomer/agentsession
Package agentsession implements the AgentSessionUser locust test: each VU is one coding-agent session replaying a scripted step sequence (a YAML file under scripts/, selected by --agentsession-script) against a glutton actor.
|
Package agentsession implements the AgentSessionUser locust test: each VU is one coding-agent session replaying a scripted step sequence (a YAML file under scripts/, selected by --agentsession-script) against a glutton actor. |
|
boomer/dynconfig
Package dynconfig fetches and holds the boomer worker's runtime-mutable settings — the subset of locust flags the operator can change in the web UI form.
|
Package dynconfig fetches and holds the boomer worker's runtime-mutable settings — the subset of locust flags the operator can change in the web UI form. |
|
boomer/glutton
Package glutton implements the boomer-Go re-implementation of the GluttonUser locust test (see the legacy Python in benchmarking/locust/tests/glutton.py for the reference behavior).
|
Package glutton implements the boomer-Go re-implementation of the GluttonUser locust test (see the legacy Python in benchmarking/locust/tests/glutton.py for the reference behavior). |
|
boomer/metrics
Package metrics mirrors the Prometheus surface emitted by benchmarking/locust/common/metrics.py — same metric names and labels so dashboards built against the Python locust workers keep working when the load source is a boomer-Go worker.
|
Package metrics mirrors the Prometheus surface emitted by benchmarking/locust/common/metrics.py — same metric names and labels so dashboards built against the Python locust workers keep working when the load source is a boomer-Go worker. |
|
boomer/resumepaused
Package resumepaused drives ate-api-server's cold resume path: every ResumeActor targets a paused actor, so ateapi takes the actor lease, binds a worker, and waits on an atelet restore.
|
Package resumepaused drives ate-api-server's cold resume path: every ResumeActor targets a paused actor, so ateapi takes the actor lease, binds a worker, and waits on an atelet restore. |
|
boomer/trace
Package trace wires the OTLP tracer + W3C propagator used by the boomer load-test workers.
|
Package trace wires the OTLP tracer + W3C propagator used by the boomer load-test workers. |
|
glutton
Package glutton implements the benchmarking workload served by cmd/benchmarking/glutton: an API for consuming RAM, disk, and file descriptors, and for gossiping with other glutton instances, over either gRPC or protobuf-over-HTTP.
|
Package glutton implements the benchmarking workload served by cmd/benchmarking/glutton: an API for consuming RAM, disk, and file descriptors, and for gossiping with other glutton instances, over either gRPC or protobuf-over-HTTP. |
|
glutton/fake
Package fake provides an httptest-backed stand-in for a glutton actor.
|
Package fake provides an httptest-backed stand-in for a glutton actor. |
|
Package cdi reads a Container Device Interface spec and resolves what a named set of devices asks a container runtime to do.
|
Package cdi reads a Container Device Interface spec and resolves what a named set of devices asks a container runtime to do. |
|
Package clustertrustbundle supports stable and beta Kubernetes trust bundle APIs.
|
Package clustertrustbundle supports stable and beta Kubernetes trust bundle APIs. |
|
Package credbundle handles credential bundle files written by Kubernetes Pod Certificates.
|
Package credbundle handles credential bundle files written by Kubernetes Pod Certificates. |
|
Package deviceplugin advertises host device nodes (for example /dev/kvm) to kubelet as extended resources, so a worker pod can be granted just those devices instead of running privileged.
|
Package deviceplugin advertises host device nodes (for example /dev/kvm) to kubelet as extended resources, so a worker pod can be granted just those devices instead of running privileged. |
|
fixtures/probe
command
Command probe is a minimal introspection actor used by the e2e suites.
|
Command probe is a minimal introspection actor used by the e2e suites. |
|
fixtures/testserver
command
Command testserver is the one binary behind every plain helper pod the egress e2e suites stand up.
|
Command testserver is the one binary behind every plain helper pod the egress e2e suites stand up. |
|
Package egresspolicy evaluates an Actor's EgressPolicy against a destination.
|
Package egresspolicy evaluates an Actor's EgressPolicy against a destination. |
|
Package hardware probes host hardware compatibility attributes and evaluates sandbox runtime compatibility between workers and snapshots.
|
Package hardware probes host hardware compatibility attributes and evaluates sandbox runtime compatibility between workers and snapshots. |
|
Package imagecache implements the node-local OCI image cache: a content-addressed pool of unpacked image layers shared by every actor on the node, plus the per-bundle overlay spec that tells the ateom runtimes how to compose an actor rootfs from cached layers.
|
Package imagecache implements the node-local OCI image cache: a content-addressed pool of unpacked image layers shared by every actor on the node, plus the per-bundle overlay spec that tells the ateom runtimes how to compose an actor rootfs from cached layers. |
|
Package installdefaults holds the default namespace and Service names that match the canonical install layout in manifests/ate-install/.
|
Package installdefaults holds the default namespace and Service names that match the canonical install layout in manifests/ate-install/. |
|
Package localca implements a CA whose state can be stored in a local file or Kubernetes secret.
|
Package localca implements a CA whose state can be stored in a local file or Kubernetes secret. |
|
Package localjwtauthority implements a simple "CA" for JWTs.
|
Package localjwtauthority implements a simple "CA" for JWTs. |
|
Package nodepath holds the node-level paths more than one component needs: the host directory atelet and the ateoms both mount, the sockets and netns they find each other by, the per-actor parent directory, and where atelet stages runtime binaries.
|
Package nodepath holds the node-level paths more than one component needs: the host directory atelet and the ateoms both mount, the sockets and netns they find each other by, the per-actor parent directory, and where atelet stages runtime binaries. |
|
Package objectstore manages the existence of the objects an external snapshot is made of: listing them, copying them, and deleting them once nothing owns them any more.
|
Package objectstore manages the existence of the objects an external snapshot is made of: listing them, copying them, and deleting them once nothing owns them any more. |
|
objectstoretest
Package objectstoretest provides an in-memory objectstore.Store for tests that need to observe which external snapshots a flow created and released.
|
Package objectstoretest provides an in-memory objectstore.Store for tests that need to observe which external snapshots a flow created and released. |
|
Package objectstoreplugin implements the object-store plugin API on GCS or S3 object storage, using the plugin's own credentials.
|
Package objectstoreplugin implements the object-store plugin API on GCS or S3 object storage, using the plugin's own credentials. |
|
objectstoreplugintest
Package objectstoreplugintest provides object-store plugin clients that call the object-store plugins directly, without a socket, for tests that drive atelet or ate-api-server through the real plugin.
|
Package objectstoreplugintest provides object-store plugin clients that call the object-store plugins directly, without a socket, for tests that drive atelet or ate-api-server through the real plugin. |
|
Package ocispec builds the runtime-neutral OCI spec for actor bundles, which each ateom shapes for its runtime.
|
Package ocispec builds the runtime-neutral OCI spec for actor bundles, which each ateom shapes for its runtime. |
|
Package oidcdiscovery implements the issuer side of OpenID Connect Discovery for actor JWTs.
|
Package oidcdiscovery implements the issuer side of OpenID Connect Discovery for actor JWTs. |
|
Package oidcjwt verifies JWTs using OIDC discovery.
|
Package oidcjwt verifies JWTs using OIDC discovery. |
|
Package otlprelay carries ateom's OTLP telemetry to the collector over a unix socket served by atelet, so a worker pod needs no network path of its own to export spans, metrics, and log records.
|
Package otlprelay carries ateom's OTLP telemetry to the collector over a unix socket served by atelet, so a worker pod needs no network path of its own to export spans, metrics, and log records. |
|
Package pemutil sanitizes PEM certificate bundles for projection into actors, the way kubelet does for clusterTrustBundle projected volumes.
|
Package pemutil sanitizes PEM certificate bundles for projection into actors, the way kubelet does for clusterTrustBundle projected volumes. |
|
Package pluginsocket connects a server to its plugin sidecar over a Unix socket.
|
Package pluginsocket connects a server to its plugin sidecar over a Unix socket. |
|
Package portforward tunnels to the pods behind a Service.
|
Package portforward tunnels to the pods behind a Service. |
|
proto
|
|
|
Package protoredact masks the fields of a protobuf message that are marked [debug_redact = true] in the schema, so the message can be logged without exposing the secrets it carries.
|
Package protoredact masks the fields of a protobuf message that are marked [debug_redact = true] in the schema, so the message can be logged without exposing the secrets it carries. |
|
Package roottest gates tests that need root privileges (mounts, mknod, trusted.* xattrs, ...).
|
Package roottest gates tests that need root privileges (mounts, mknod, trusted.* xattrs, ...). |
|
Package sandboxversions reads and writes a worker's sandbox versions file, which atelet keeps in the worker's directory (nodepath.AteomPath) as nodepath.SandboxVersionsFileName.
|
Package sandboxversions reads and writes a worker's sandbox versions file, which atelet keeps in the worker's directory (nodepath.AteomPath) as nodepath.SandboxVersionsFileName. |
|
Package serverboot collects the startup boilerplate shared by the long-running substrate server binaries (ateapi, atelet, ateom-gvisor, ateom-microvm): slog wiring, OTel tracer + meter providers, a Prometheus /metrics server, a /readyz and /healthz server for the kubelet probes, and a couple of small helpers for startup fail-fast.
|
Package serverboot collects the startup boilerplate shared by the long-running substrate server binaries (ateapi, atelet, ateom-gvisor, ateom-microvm): slog wiring, OTel tracer + meter providers, a Prometheus /metrics server, a /readyz and /healthz server for the kubelet probes, and a couple of small helpers for startup fail-fast. |
|
Package sizing right-sizes a sandbox to the actor's declared resource limits.
|
Package sizing right-sizes a sandbox to the actor's declared resource limits. |
|
Package snapshotcache disposes of staged restore files and evicts preserved snapshot files from the host page cache after an actor restore completes.
|
Package snapshotcache disposes of staged restore files and evicts preserved snapshot files from the host page cache after an actor restore completes. |
|
Package substratex509 contains routines for creating and parsing x509 certificates that embed Substrate-specific X.509 extensions communicating the identity of a given workload.
|
Package substratex509 contains routines for creating and parsing x509 certificates that embed Substrate-specific X.509 extensions communicating the identity of a given workload. |
|
Package tarutil archives and restores a directory tree as a tar file, preserving the metadata a workload's data directory depends on: modes, ownership, modification times, symlinks, hardlinks, FIFOs, overlay whiteouts, and user.* / overlay extended attributes (as PAX SCHILY.xattr records).
|
Package tarutil archives and restores a directory tree as a tar file, preserving the metadata a workload's data directory depends on: modes, ownership, modification times, symlinks, hardlinks, FIFOs, overlay whiteouts, and user.* / overlay extended attributes (as PAX SCHILY.xattr records). |
|
Package testenv starts the envtest (kubebuilder) control plane shared by the repo's apiserver-backed test packages.
|
Package testenv starts the envtest (kubebuilder) control plane shared by the repo's apiserver-backed test packages. |
|
Package version exposes build-time identity for substrate binaries.
|
Package version exposes build-time identity for substrate binaries. |
|
Package volumepath holds the rule for the relative paths at which substrate projects files into an actor's volumes.
|
Package volumepath holds the rule for the relative paths at which substrate projects files into an actor's volumes. |
|
Package wakeupprobe polls a container's HTTP wakeup endpoint from inside an ateom.
|
Package wakeupprobe polls a container's HTTP wakeup endpoint from inside an ateom. |
Click to show internal directories.
Click to hide internal directories.