Directories
¶
| Path | Synopsis |
|---|---|
|
acceptance
|
|
|
canary
command
Package main provides the repository-only local compatibility witness.
|
Package main provides the repository-only local compatibility witness. |
|
evaluation
command
evaluation reads saved local experiment artifacts without a dispatcher.
|
evaluation reads saved local experiment artifacts without a dispatcher. |
|
procinventory
Package procinventory reads process identities from procfs for the acceptance harnesses, which observe what an installed candidate started before they may repair anything themselves.
|
Package procinventory reads process identities from procfs for the acceptance harnesses, which observe what an installed candidate started before they may repair anything themselves. |
|
Package artifact defines the private distribution manifest shared by packaging and runtime verification.
|
Package artifact defines the private distribution manifest shared by packaging and runtime verification. |
|
Package bitrate is the bandwidth type the dispatcher admits and the executor enforces, so both compute with the same units and bounds.
|
Package bitrate is the bandwidth type the dispatcher admits and the executor enforces, so both compute with the same units and bounds. |
|
Package buildinfo holds linker-set distribution identity.
|
Package buildinfo holds linker-set distribution identity. |
|
Package configcheck holds the checks both daemons apply to their configuration file before they open storage, bind listeners or acquire a packet counter.
|
Package configcheck holds the checks both daemons apply to their configuration file before they open storage, bind listeners or acquire a packet counter. |
|
Package connections stores explicitly named dispatcher connections for local commands.
|
Package connections stores explicitly named dispatcher connections for local commands. |
|
Package connectivity implements fixed-size reachability challenges.
|
Package connectivity implements fixed-size reachability challenges. |
|
Package controlrpc carries the control session credential of one dispatcher and executor pair over gRPC metadata: the metadata keys both channels agree on, the constant-time match each side admits a request with, and the status vocabulary that answers a request it cannot admit.
|
Package controlrpc carries the control session credential of one dispatcher and executor pair over gRPC metadata: the metadata keys both channels agree on, the constant-time match each side admits a request with, and the status vocabulary that answers a request it cannot admit. |
|
Package controlsession defines the nonsecret, immutable identity persisted with a run.
|
Package controlsession defines the nonsecret, immutable identity persisted with a run. |
|
Package daemonlog holds the logger and shutdown handling the dispatcher and executor daemons share, so both report the same way.
|
Package daemonlog holds the logger and shutdown handling the dispatcher and executor daemons share, so both report the same way. |
|
Package demo owns the disposable installed local measurement.
|
Package demo owns the disposable installed local measurement. |
|
service
Package service installs a verified Debuglet role payload as a service the host's service manager supervises.
|
Package service installs a verified Debuglet role payload as a service the host's service manager supervises. |
|
Package dispatcher holds the dispatcher's application state: the registry of the executors that currently hold a control session, admission of submitted runs against reserved capacity, and the results those runs report.
|
Package dispatcher holds the dispatcher's application state: the registry of the executors that currently hold a control session, admission of submitted runs against reserved capacity, and the results those runs report. |
|
enrollment
Package enrollment binds an executor ID to the node credential its machine holds: the SHA-256 fingerprint of a verified client certificate.
|
Package enrollment binds an executor ID to the node credential its machine holds: the SHA-256 fingerprint of a verified client certificate. |
|
transport/rpc
Package rpc serves the dispatcher's side of the executor control plane and owns one session per connected executor.
|
Package rpc serves the dispatcher's side of the executor control plane and owns one session per connected executor. |
|
Package executor runs guest programs for one dispatcher control session at a time.
|
Package executor runs guest programs for one dispatcher control session at a time. |
|
cleanup
Package cleanup is the one place executor components classify resource release failures.
|
Package cleanup is the one place executor components classify resource release failures. |
|
debuglet/netpolicy
Package netpolicy holds the one network policy the executor applies to guest traffic: which transports a guest may use, which destinations it may reach, and on which ports.
|
Package netpolicy holds the one network policy the executor applies to guest traffic: which transports a guest may use, which destinations it may reach, and on which ports. |
|
debuglet/wasm
Package wasm contains the WASM host function implementations that are imported by WASM modules at runtime.
|
Package wasm contains the WASM host function implementations that are imported by WASM modules at runtime. |
|
isolation
Package isolation owns the executor's local compiler and guest processes.
|
Package isolation owns the executor's local compiler and guest processes. |
|
outputstore
Package outputstore persists output independently of execution scheduling.
|
Package outputstore persists output independently of execution scheduling. |
|
ratelimit/destinations
Package destinations holds the bookkeeping both packet counters keep to apply a per-destination limit given by name: which resolved addresses each debuglet's connections to that name reached.
|
Package destinations holds the bookkeeping both packet counters keep to apply a per-destination limit given by name: which resolved addresses each debuglet's connections to that name reached. |
|
scheduler/memory
Package memory is the in-memory admission core both executor schedulers use.
|
Package memory is the in-memory admission core both executor schedulers use. |
|
scheduler/sqlite
Package sqlite keeps one executor's persisted work and terminal results across restarts without silently running stored work again.
|
Package sqlite keeps one executor's persisted work and terminal results across restarts without silently running stored work again. |
|
tagger
Package tagger provides a transparent IPv4 IPID tagger that injects a 16-bit TESLA-derived authentication tag into every outgoing IPv4 packet.
|
Package tagger provides a transparent IPv4 IPID tagger that injects a 16-bit TESLA-derived authentication tag into every outgoing IPv4 packet. |
|
tagger/ebpf
Package ebpf provides an eBPF-based IPv4 IPID tagger for Linux.
|
Package ebpf provides an eBPF-based IPv4 IPID tagger for Linux. |
|
tagger/tagvectors
Package tagvectors loads testdata/tag-vectors-v1.json, the known-answer vectors of the debuglet-tag-v1 packet tag generated by the independent Python reference tools/tag_vectors.py.
|
Package tagvectors loads testdata/tag-vectors-v1.json, the known-answer vectors of the debuglet-tag-v1 packet tag generated by the independent Python reference tools/tag_vectors.py. |
|
tagger/tesla
Package tesla implements a TESLA-inspired hash-chain key schedule for delayed disclosure of packet authentication keys.
|
Package tesla implements a TESLA-inspired hash-chain key schedule for delayed disclosure of packet authentication keys. |
|
Package fsutil publishes files so that a reader, including one after a crash or power loss, sees either the previous file or the complete new one.
|
Package fsutil publishes files so that a reader, including one after a crash or power loss, sees either the previous file or the complete new one. |
|
Package guestio defines the optional debuglet_io_v1 socket import contract.
|
Package guestio defines the optional debuglet_io_v1 socket import contract. |
|
Package hostprobe reads host facts an executor reports about itself: the kernel clock discipline and the host platform.
|
Package hostprobe reads host facts an executor reports about itself: the kernel clock discipline and the host platform. |
|
Package ids parses the identifiers the dispatcher and executor exchange.
|
Package ids parses the identifiers the dispatcher and executor exchange. |
|
Package ipmetadata performs offline ASN and approximate location lookups.
|
Package ipmetadata performs offline ASN and approximate location lookups. |
|
ris
Package ris builds the dispatcher's ASN database from RIPE RIS routing data, the method RIPE Atlas uses for a probe's prefix and ASN: an address belongs to the longest prefix announced in BGP, and to that prefix's origin AS.
|
Package ris builds the dispatcher's ASN database from RIPE RIS routing data, the method RIPE Atlas uses for a probe's prefix and ASN: an address belongs to the longest prefix announced in BGP, and to that prefix's origin AS. |
|
Package observability collects on-demand operational observations without changing the subsystems being observed.
|
Package observability collects on-demand operational observations without changing the subsystems being observed. |
|
Command packaging builds and packages a Linux candidate.
|
Command packaging builds and packages a Linux candidate. |
|
Command protogen renders generated Go sources from a compiled protocol descriptor set using the pinned protoc-gen-go plugins.
|
Command protogen renders generated Go sources from a compiled protocol descriptor set using the pinned protoc-gen-go plugins. |
|
Package readiness publishes daemon startup records in owned private directories and reads them back for the process that launched the daemon.
|
Package readiness publishes daemon startup records in owned private directories and reads them back for the process that launched the daemon. |
|
Package schemacheck reads the canonical SQL of both roles and the bindings generated from it so tests can compare them against a real database.
|
Package schemacheck reads the canonical SQL of both roles and the bindings generated from it so tests can compare them against a real database. |
|
Package sqlitedb opens and migrates the daemons' SQLite databases with the connection settings their schemas rely on.
|
Package sqlitedb opens and migrates the daemons' SQLite databases with the connection settings their schemas rely on. |
|
Package storagecheck states which database schemas a build can operate on and verifies a supplied SQLite file against that policy before a daemon serves requests or restores work.
|
Package storagecheck states which database schemas a build can operate on and verifies a supplied SQLite file against that policy before a daemon serves requests or restores work. |
|
Package storageheadroom preserves an advisory margin for SQLite control and terminal records by refusing payload writes before available space is spent.
|
Package storageheadroom preserves an advisory margin for SQLite control and terminal records by refusing payload writes before available space is spent. |
|
Package testpeer supplies real control transports around a scripted executor for integration tests.
|
Package testpeer supplies real control transports around a scripted executor for integration tests. |
|
Package testtls issues certificate material for tests that need real TLS sockets: one authority, the identities it signs, and the unusable variants a verification test has to reject.
|
Package testtls issues certificate material for tests that need real TLS sockets: one authority, the identities it signs, and the unusable variants a verification test has to reject. |
|
Package tlsfiles loads the configured TLS identity and trust roots of a daemon, and refuses at startup what would fail every handshake later.
|
Package tlsfiles loads the configured TLS identity and trust roots of a daemon, and refuses at startup what would fail every handshake later. |
|
Package uploadsize defines the same payload bounds for HTTP admission and direct executor uploads.
|
Package uploadsize defines the same payload bounds for HTTP admission and direct executor uploads. |
Click to show internal directories.
Click to hide internal directories.