Directories
¶
| Path | Synopsis |
|---|---|
|
acceptance
|
|
|
canary
command
Package main provides the repository-only local compatibility witness.
|
Package main provides the repository-only local compatibility witness. |
|
procinventory
Package procinventory reads process identities from procfs for the acceptance harnesses, which observe what an installed candidate started before they may repair anything themselves.
|
Package procinventory reads process identities from procfs for the acceptance harnesses, which observe what an installed candidate started before they may repair anything themselves. |
|
Package artifact defines the private distribution manifest shared by packaging and runtime verification.
|
Package artifact defines the private distribution manifest shared by packaging and runtime verification. |
|
Package buildinfo holds linker-set distribution identity.
|
Package buildinfo holds linker-set distribution identity. |
|
Package configcheck holds the checks both daemons apply to their configuration file before they open storage, bind listeners or acquire a packet counter.
|
Package configcheck holds the checks both daemons apply to their configuration file before they open storage, bind listeners or acquire a packet counter. |
|
Package connections stores explicitly named dispatcher connections for local commands.
|
Package connections stores explicitly named dispatcher connections for local commands. |
|
Package controlrpc carries the control session credential of one dispatcher and executor pair over gRPC metadata: the metadata keys both channels agree on, the constant-time match each side admits a request with, and the status vocabulary that answers a request it cannot admit.
|
Package controlrpc carries the control session credential of one dispatcher and executor pair over gRPC metadata: the metadata keys both channels agree on, the constant-time match each side admits a request with, and the status vocabulary that answers a request it cannot admit. |
|
Package controlsession defines the nonsecret, immutable identity persisted with a run.
|
Package controlsession defines the nonsecret, immutable identity persisted with a run. |
|
Package demo owns the disposable installed local measurement.
|
Package demo owns the disposable installed local measurement. |
|
service
Package service installs a verified Debuglet role payload as a service the host's service manager supervises.
|
Package service installs a verified Debuglet role payload as a service the host's service manager supervises. |
|
Package dispatcher holds the dispatcher's application state: the registry of the executors that currently hold a control session, admission of submitted runs against reserved capacity, and the results those runs report.
|
Package dispatcher holds the dispatcher's application state: the registry of the executors that currently hold a control session, admission of submitted runs against reserved capacity, and the results those runs report. |
|
enrollment
Package enrollment binds an executor ID to the node credential its machine holds: the SHA-256 fingerprint of the client certificate the dispatcher's configured authority verified on a control connection.
|
Package enrollment binds an executor ID to the node credential its machine holds: the SHA-256 fingerprint of the client certificate the dispatcher's configured authority verified on a control connection. |
|
testutil
Package testutil holds test support shared by dispatcher packages.
|
Package testutil holds test support shared by dispatcher packages. |
|
transport/rpc
Package rpc serves the dispatcher's side of the executor control plane and owns one session per connected executor.
|
Package rpc serves the dispatcher's side of the executor control plane and owns one session per connected executor. |
|
Package executor runs guest programs for one dispatcher control session at a time.
|
Package executor runs guest programs for one dispatcher control session at a time. |
|
debuglet/netpolicy
Package netpolicy holds the one network policy the executor applies to guest traffic: which transports a guest may use, which destinations it may reach, and on which ports.
|
Package netpolicy holds the one network policy the executor applies to guest traffic: which transports a guest may use, which destinations it may reach, and on which ports. |
|
debuglet/wasm
Package wasm contains the WASM host function implementations that are imported by WASM modules at runtime.
|
Package wasm contains the WASM host function implementations that are imported by WASM modules at runtime. |
|
ratelimit/cleanup
Package cleanup identifies packet-counter disposal failures without introducing a dependency between the counter implementations and their factory.
|
Package cleanup identifies packet-counter disposal failures without introducing a dependency between the counter implementations and their factory. |
|
scheduler/memory
Package memory is the in-memory admission core both executor schedulers use.
|
Package memory is the in-memory admission core both executor schedulers use. |
|
scheduler/sqlite
Package sqlite keeps one executor's persisted work and terminal results across restarts without silently running stored work again.
|
Package sqlite keeps one executor's persisted work and terminal results across restarts without silently running stored work again. |
|
tagger
Package tagger provides a transparent IPv4 IPID tagger that injects a 16-bit TESLA-derived authentication tag into every outgoing IPv4 packet.
|
Package tagger provides a transparent IPv4 IPID tagger that injects a 16-bit TESLA-derived authentication tag into every outgoing IPv4 packet. |
|
tagger/ebpf
Package ebpf provides an eBPF-based IPv4 IPID tagger for Linux.
|
Package ebpf provides an eBPF-based IPv4 IPID tagger for Linux. |
|
tagger/tesla
Package tesla implements a TESLA-inspired hash-chain key schedule for delayed disclosure of packet authentication keys.
|
Package tesla implements a TESLA-inspired hash-chain key schedule for delayed disclosure of packet authentication keys. |
|
Command packaging builds and packages a Linux candidate.
|
Command packaging builds and packages a Linux candidate. |
|
Command protogen renders generated Go sources from a compiled protocol descriptor set using the pinned protoc-gen-go plugins.
|
Command protogen renders generated Go sources from a compiled protocol descriptor set using the pinned protoc-gen-go plugins. |
|
Package readiness publishes daemon startup records in owned private directories.
|
Package readiness publishes daemon startup records in owned private directories. |
|
Package schemacheck reads the canonical SQL of both roles and the bindings generated from it so tests can compare them against a real database.
|
Package schemacheck reads the canonical SQL of both roles and the bindings generated from it so tests can compare them against a real database. |
|
Package storagecheck states which database schemas a build can operate on and verifies a supplied SQLite file against that policy before a daemon serves requests or restores work.
|
Package storagecheck states which database schemas a build can operate on and verifies a supplied SQLite file against that policy before a daemon serves requests or restores work. |
|
Package testpeer supplies real control transports around a scripted executor for integration tests.
|
Package testpeer supplies real control transports around a scripted executor for integration tests. |
|
Package testtls issues certificate material for tests that need real TLS sockets: one authority, the identities it signs, and the unusable variants a verification test has to reject.
|
Package testtls issues certificate material for tests that need real TLS sockets: one authority, the identities it signs, and the unusable variants a verification test has to reject. |
Click to show internal directories.
Click to hide internal directories.