Drew Newberry
9ca19e6c80
refactor(compute): decouple gateway driver composition ( #2823 )
...
* refactor(compute): decouple gateway driver composition
Move first-party composition and VM process ownership into openshell-gateway, leaving openshell-server backend-independent. Update packaging and build references with the new crate, simplify the compiled-driver boundary, and keep the driver-free gateway path buildable with bundled Z3 tooling.
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(telemetry): bound compute driver categories
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* refactor(core): keep runtime transport generic
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(compute): complete server driver decoupling
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* fix(compute): preserve driver integrations after rebase
Signed-off-by: Drew Newberry <385+drew@users.noreply.github.com >
* fix(compute): preserve docker tracing after decoupling
Signed-off-by: Drew Newberry <385+drew@users.noreply.github.com >
* fix(compute): preserve driver behavior after extraction
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* refactor(compute): remove MXC policy side channel
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
* refactor(compute): separate policy delivery from readiness
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
---------
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
Signed-off-by: Drew Newberry <385+drew@users.noreply.github.com >
2026-09-01 21:13:45 +00:00
Evan Lezar
a715a90db5
fix(vm): bump gvproxy to v0.8.9 ( #2901 )
...
Closes #2895
Signed-off-by: Evan Lezar <elezar@nvidia.com >
2026-08-26 04:54:52 +00:00
Drew Newberry
910d3f09f2
feat(vm): boot sandboxes from ext4 root disks ( #1263 )
...
* feat(vm): boot sandboxes from ext4 root disks
* feat(vm): boot sandboxes with writable overlay disk
* fix(sandbox): improve sandbox provisioning behavior
* fix(vm): repair sandbox image provisioning
* fix(vm): clean up rebase fallout
* perf(vm): cache empty overlay images
* perf(vm): skip repeated sandbox ownership repair
* fix(vm): address lifecycle review issues
* fix(vm): repair gateway vm startup
* wip
2026-05-15 13:23:10 -07:00
Russell Bryant
c27dd88aa9
fix(vm): enable NFT_LOG kernel module for nftables bypass detection ( #1391 )
...
The nftables log statement requires CONFIG_NFT_LOG, which was not
included in the VM guest kernel config. Without it, nft rejects
rules containing the log keyword with "No such file or directory".
2026-05-14 22:18:10 -07:00
Drew Newberry
028763d4db
refactor(vm): remove legacy openshell-vm crate ( #1239 )
...
Signed-off-by: Drew Newberry <anewberry@nvidia.com >
2026-05-07 10:50:20 -07:00
Drew Newberry
4d388d2677
ci(vm): cleanup vm build infra ( #1186 )
2026-05-06 08:58:02 -07:00
Drew Newberry