@jigging/jig 0.1.0-alpha.25 → 0.1.0-alpha.27

package/libexec/linux-rootless-supervisor.js

@@ -20,6 +20,7 @@ var POLICY = Object.freeze(["--no-env-file", "--no-install", "--config=/dev/null
 var SANDBOX_BUN = "/jig-runtime/bun";
 var SANDBOX_LIBRARY_PATH = "/jig-runtime/lib";
 var MAX_CONTROL_BYTES = 64 * 1024;
+var CORE_DUMP_POLL_MS = 250;
 var MODULE_DESTINATION = "/jig/linux-rootless-supervisor.ts";
 var DIGEST = /^sha256:[0-9a-f]{64}$/;
 var OWNER_TOKEN = /^[0-9a-f]{64}$/;
@@ -112,6 +113,9 @@ async function superviseConnected(control, startupDeadlineUnixMs) {
   let exitSignal = null;
   let evidence = emptyEvidence();
   let terminal;
+  let coreDumpTimer;
+  let coreDumpCheck;
+  let monitoringClosed = false;
   try {
     await mkdir(runCgroup, { mode: 493 });
     cgroupCreated = true;
@@ -162,6 +166,19 @@ async function superviseConnected(control, startupDeadlineUnixMs) {
     });
     childExit = childClose(launched);
     child = launched;
+    coreDumpTimer = setInterval(() => {
+      if (monitoringClosed || stopReason !== undefined || coreDumpCheck !== undefined)
+        return;
+      coreDumpCheck = privateHasCoreDumpingProcess(runCgroup, limits.pids).then((dumping) => {
+        if (dumping && !monitoringClosed && stopReason === undefined)
+          stop("core_dump");
+      }).catch(() => {
+        if (!monitoringClosed && stopReason === undefined)
+          stop("setup_failed");
+      }).finally(() => {
+        coreDumpCheck = undefined;
+      });
+    }, CORE_DUMP_POLL_MS);
     launched.stdio[4].on("error", () => stop("setup_failed"));
     const ready = await readReady(launched);
     if (configuration.output) {
@@ -187,12 +204,16 @@ async function superviseConnected(control, startupDeadlineUnixMs) {
       process.stderr.write(`${errorText(error)}
 `);
   } finally {
+    monitoringClosed = true;
+    clearInterval(coreDumpTimer);
     clearTimeout(deadline);
     await outputDirectory?.close();
     let cleanupError;
     try {
       child?.kill("SIGKILL");
       await killRun();
+      if (coreDumpCheck !== undefined)
+        await withinTimeout(coreDumpCheck, limits.cleanupTimeoutMs, "core-dump check did not settle");
       if (childExit !== undefined) {
         await withinTimeout(childExit.catch(() => {
           return;
@@ -225,6 +246,36 @@ async function superviseConnected(control, startupDeadlineUnixMs) {
     control.end();
   }
 }
+async function privateHasCoreDumpingProcess(runCgroup, maxProcesses, readText = (path) => readFile(path, "utf8")) {
+  const processes = (await readText(`${runCgroup}/cgroup.procs`)).trim();
+  const pids = processes === "" ? [] : processes.split(`
+`);
+  if (!positiveInteger(maxProcesses) || pids.length > maxProcesses || pids.some((pid) => !/^[1-9][0-9]*$/.test(pid) || !Number.isSafeInteger(Number(pid))))
+    throw new Error("invalid owned process observation");
+  const membership = `0::${runCgroup.slice("/sys/fs/cgroup".length)}`;
+  for (const pid of pids) {
+    try {
+      const status = await readText(`/proc/${pid}/status`);
+      if (status.length > MAX_CONTROL_BYTES)
+        throw new Error("oversized owned process status");
+      if (!/^CoreDumping:/m.test(status))
+        continue;
+      const dumping = /^CoreDumping:[ \t]+([01])$/m.exec(status);
+      if (dumping === null)
+        throw new Error("kernel core-dump observation is unavailable");
+      if (dumping[1] !== "1")
+        continue;
+      if ((await readText(`/proc/${pid}/cgroup`)).split(`
+`).includes(membership))
+        return true;
+    } catch (error) {
+      const code = error.code;
+      if (code !== "ENOENT" && code !== "ESRCH")
+        throw error;
+    }
+  }
+  return false;
+}
 async function enterMain(arguments_) {
   requireFixedBunPosture("entry trampoline");
   if (arguments_.length < 7)
@@ -792,3 +843,6 @@ if (import.meta.main) {
     process.exitCode = 70;
   });
 }
+export {
+  privateHasCoreDumpingProcess
+};