microsandbox-rb 0.8.0 → 0.8.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 06dc745a315d5d79f21e702032d45a984dbf53110e3375bb560de9cb008866d6
-  data.tar.gz: 9168ece64600356ce88ed3c3ed42cc88f4354f3619abfdc32fabd578745cf6c4
+  metadata.gz: f8cc1edaf4e221fe6e4addf4eea0d06e63370dd73bbcb1a7eb4d13e91bac7b40
+  data.tar.gz: 17f18d5aefead5fbb584a7b06ecd82d0aade2394c3e9c48aafd0f5d98673abfd
 SHA512:
-  metadata.gz: d8fed4d0957be541dd5de600dd24386ff7b62d9933e45e244a49200185989cb8427279c80234038a4355aee296fdc96ec1cd5738e4bcf3fae48b27388f7dcad5
-  data.tar.gz: 9310a3b2d3a0322e701bc85cbfe6b820576b4254c3d49099bbfcab07690421c1e2d9705d0106e1d2931fb3516a0d462401758d5393552810427a6891ed6fc79e
+  metadata.gz: e7c98769be2508875e54b1449d290c18b63af3189af497d311c6222073b6018290950faa4438c165f656928d175e6f6a50ec0f7af6323a8174dbf0e460b99042
+  data.tar.gz: 7a8edef36f6f7e3c12a5075e684d64ca71570350dd678ebcd3b819a9ebfab309007e2b71e348f1c0925ab8e3beb474787aeec741935f5e803676f5ce00daf513

data/CHANGELOG.md

@@ -8,6 +8,38 @@ wraps, and the README's Versioning section keeps the full gem→runtime map.
 
 ## [Unreleased]
 
+## [0.8.1] - 2026-06-25
+
+Gem-only release on the `v0.5.10` runtime (unchanged) — the two follow-ups to
+`0.8.0`'s runtime adoption that review surfaced.
+
+### Added
+
+- **Per-bind-mount guest-write quota override** (issue #19). An inline `volumes:`
+  bind mount now accepts a `quota_mib:` key to override the runtime's default
+  guest-write budget (4 GiB as of `v0.5.10`, documented in `0.8.0`), e.g.
+  `volumes: { "/out" => { bind: "/host/out", quota_mib: 16_384 } }`. The runtime
+  still applies the 4 GiB default when unset; there is no unbounded option, so
+  raise the value if a workload writes more. Valid on bind mounts only — the core
+  rejects it on tmpfs/disk/named mounts (set a named volume's quota via
+  `Volume.create(quota_mib:)`).
+
+### Fixed
+
+- **Stale local runtime is now re-provisioned instead of boot-failing**
+  (issue #18). `Microsandbox.ensure_runtime!` short-circuited as soon as
+  `installed?` was true, but that check confirms only that the `msb`/`libkrunfw`
+  files *exist*, not that their version matches the runtime this gem build links.
+  An older `msb` left in `~/.microsandbox` by a previous gem version therefore
+  passed and then failed every `Sandbox.create` at boot on a host↔guest
+  wire-protocol mismatch (e.g. a `v0.5.8` `msb` rejecting the `--config-fd` flag
+  the `v0.5.10` runtime passes). `ensure_runtime!` now delegates to the
+  idempotent, version-correcting installer on first use even when the runtime is
+  present (a cheap `msb --version`; re-downloads only on absence/mismatch), so an
+  upgrade-over-stale-install self-heals. Source-gem installs were already
+  corrected at build time; this closes the gap for the precompiled-gem upgrade
+  path. `MICROSANDBOX_NO_AUTO_INSTALL` still fully opts out.
+
 ## [0.8.0] - 2026-06-25
 
 Adopts upstream runtime **`v0.5.10`** (up from the `v0.5.8` that `0.7.0` shipped).

data/Cargo.lock

@@ -3249,7 +3249,7 @@ dependencies = [
 
 [[package]]
 name = "microsandbox_rb"
-version = "0.8.0"
+version = "0.8.1"
 dependencies = [
  "chrono",
  "futures",

data/README.md

@@ -398,6 +398,7 @@ Microsandbox.runtime_version   # => "v0.5.10"  (the embedded upstream runtime ta
 | `0.6.0`  | `v0.5.8` | gem version decoupled from the upstream tag; adds `runtime_version` |
 | `0.7.0`  | `v0.5.8` | SDK parity release (large binding-gap closure) |
 | `0.8.0`  | `v0.5.10` | adopts upstream `v0.5.10` (idle-only heartbeat, config-fd hardening, **4 GiB default bind-mount quota**); supersedes the reverted `v0.5.9` attempt |
+| `0.8.1`  | `v0.5.10` | gem-only: re-provision a stale local runtime; per-bind-mount `quota_mib:` override |
 
 **Going forward** — the gem version moves on its own semver track and no longer
 mirrors the upstream tag:

data/ext/microsandbox/Cargo.toml

@@ -7,7 +7,7 @@ description = "Ruby SDK native extension for microsandbox — secure, fast micro
 # Must equal Microsandbox::VERSION (lib/microsandbox/version.rb) — Native.version
 # returns this via env!("CARGO_PKG_VERSION") and version_spec.rb asserts equality.
 # The core-crate dependency below stays pinned at its own tag (v0.5.10).
-version = "0.8.0"
+version = "0.8.1"
 authors = ["Super Rad Company <development@superrad.company>"]
 repository = "https://github.com/superradcompany/microsandbox"
 license = "Apache-2.0"

data/ext/microsandbox/src/sandbox.rs

@@ -122,6 +122,10 @@ impl Sandbox {
                 .ok_or_else(|| error::base_error("volume mount is missing :kind"))?;
             let source = conv::opt_string(m, "source")?;
             let size_mib = conv::opt_u32(m, "size_mib")?;
+            // Bind-mount guest-write quota override (MiB). The core's MountBuilder
+            // applies it to bind mounts only and rejects it on tmpfs/disk/named at
+            // build(); we forward it as-is so that validation lives in one place.
+            let quota_mib = conv::opt_u32(m, "quota_mib")?;
             let fstype = conv::opt_string(m, "fstype")?;
             let readonly = conv::opt_bool(m, "readonly")?;
             let noexec = conv::opt_bool(m, "noexec")?;
@@ -161,6 +165,9 @@ impl Sandbox {
                 if let Some(n) = size_mib {
                     mb = mb.size(n);
                 }
+                if let Some(q) = quota_mib {
+                    mb = mb.quota(q);
+                }
                 if let Some(f) = format {
                     mb = mb.format(f);
                 }

data/lib/microsandbox/sandbox.rb

@@ -230,7 +230,10 @@ module Microsandbox
       #   `{ disk: "/img.raw", format: "raw", fstype: "ext4" }`. Any mount may add
       #   flags `ro:`/`readonly:`, `noexec:`, `nosuid:`, `nodev:`, and (bind/named
       #   only) `stat_virtualization:` (:strict/:relaxed/:off) and
-      #   `host_permissions:` (:private/:mirror).
+      #   `host_permissions:` (:private/:mirror). A bind mount accepts
+      #   `quota_mib:` to override the runtime's default guest-write budget
+      #   (4 GiB as of `v0.5.10`); the core rejects it on tmpfs/disk/named (for a
+      #   named volume, set its quota via {Volume.create}).
       # @param network [String, Symbol, NetworkPolicy, Hash, nil] network policy.
       #   A preset name ("public_only" (default), "none", "allow_all",
       #   "non_local"), a {NetworkPolicy} (e.g. {NetworkPolicy.custom}), or a Hash
@@ -677,11 +680,12 @@ module Microsandbox
       # Hashes for the native layer. A spec is a host path String (a read-write
       # bind mount) or a Hash describing the mount:
       #   { bind: "/host", ro: true, noexec: true }            # host bind mount
+      #   { bind: "/host", quota_mib: 16_384 }                  # raise the 4 GiB cap
       #   { named: "vol" }                                       # named volume
       #   { tmpfs: true, size_mib: 64 }                          # memory-backed
       #   { disk: "/img.raw", format: "raw", fstype: "ext4" }   # disk-image mount
       # Any mount may also carry stat_virtualization: (:strict/:relaxed/:off) and
-      # host_permissions: (:private/:mirror).
+      # host_permissions: (:private/:mirror); a bind mount may carry quota_mib:.
       def normalize_volumes(volumes)
         volumes.map do |guest, spec|
           mount = {"guest" => guest.to_s}
@@ -722,6 +726,12 @@ module Microsandbox
         mount["size_mib"] = Integer(size) if size
         fstype = spec[:fstype] || spec["fstype"]
         mount["fstype"] = fstype.to_s if fstype
+        # Bind-mount guest-write quota (MiB). Overrides the runtime's default
+        # budget (4 GiB as of v0.5.10); the core applies it only to bind mounts
+        # and rejects it on tmpfs/disk/named. `0` is forwarded as-is (a zero
+        # budget), not treated as "unset".
+        quota = spec[:quota_mib] || spec["quota_mib"]
+        mount["quota_mib"] = Integer(quota) if quota
       end
 
       # Apply a volume spec Hash's mount flags. `ro:`/`readonly:` makes the mount

data/lib/microsandbox/version.rb

@@ -8,7 +8,7 @@ module Microsandbox
   # Versioning section of the README for the full gem-to-runtime map. Must equal
   # the native ext's Cargo crate version (`Native.version`), enforced by
   # spec/unit/version_spec.rb.
-  VERSION = "0.8.0"
+  VERSION = "0.8.1"
 
   # The upstream microsandbox runtime release this gem build embeds — the `tag`
   # pinned on the `microsandbox`/`microsandbox-network` git deps in

data/lib/microsandbox.rb

@@ -93,16 +93,27 @@ module Microsandbox
       Native.installed?
     end
 
-    # Ensure the `msb` runtime + `libkrunfw` are present, provisioning them on
-    # first use if not. Called automatically by {Sandbox.create}/{Sandbox.start}
-    # so precompiled-gem users (who never ran the source build) get a working
-    # runtime without a manual {install} step.
+    # Ensure the `msb` runtime + `libkrunfw` are present *and version-matched*,
+    # provisioning them on first use if not. Called automatically by
+    # {Sandbox.create}/{Sandbox.start} so precompiled-gem users (who never ran the
+    # source build) get a working runtime without a manual {install} step.
     #
-    # The download is attempted at most once per process. Opt out by setting
+    # Runs at most once per process. Opt out by setting
     # `MICROSANDBOX_NO_AUTO_INSTALL` (e.g. air-gapped hosts that provision the
-    # runtime out of band); the subsequent operation then surfaces the missing
-    # runtime itself. Already-installed runtimes (e.g. source builds) skip
-    # straight through with only a cheap presence check.
+    # runtime out of band); the runtime is then left untouched and a missing or
+    # stale one surfaces at the operation itself.
+    #
+    # NOTE: this delegates to {install} even when {installed?} is already true,
+    # rather than short-circuiting on presence. {installed?} (upstream
+    # `verify_installation`) only confirms the `msb`/`libkrunfw` files *exist*, not
+    # that their version matches the runtime this gem build links. {install} is
+    # idempotent and *version-correcting*: it runs a cheap `msb --version` and
+    # re-downloads ONLY when the binary is absent or its version differs, then
+    # no-ops. A presence-only short-circuit would let a stale `msb` left in
+    # `~/.microsandbox` by an older gem pass, then fail every {Sandbox.create} on a
+    # host↔guest wire-protocol mismatch (e.g. a `v0.5.8` `msb` rejecting the
+    # `--config-fd` flag the `v0.5.10` runtime passes). Keep the {install} call on
+    # this path — do not "optimize" it back to skip-when-present.
     # @return [nil]
     def ensure_runtime!
       return if @runtime_ready
@@ -111,14 +122,18 @@ module Microsandbox
       # uses the same lazy env/profile/config ladder every operation already
       # consults, so this adds no work for local hosts (the common case).
       return if default_backend_kind == :cloud
-      if installed?
+      # Opted out: the caller manages the runtime out of band, so don't fetch,
+      # verify, or repair it here. Memoize the decision (the env var is stable for
+      # the process); the operation resolves `msb` itself and surfaces any problem.
+      if auto_install_disabled?
         @runtime_ready = true
         return
       end
-      return if auto_install_disabled?
 
-      warn "[microsandbox] runtime (msb + libkrunfw) not found; " \
-           "downloading to ~/.microsandbox (set MICROSANDBOX_NO_AUTO_INSTALL to skip)..."
+      unless installed?
+        warn "[microsandbox] runtime (msb + libkrunfw) not found; " \
+             "downloading to ~/.microsandbox (set MICROSANDBOX_NO_AUTO_INSTALL to skip)..."
+      end
       install
       @runtime_ready = true
       nil

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: microsandbox-rb
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.8.1
 platform: ruby
 authors:
 - ya-luotao