Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

ihoro / freebsd-src Public

forked from freebsd/freebsd-src

Notifications You must be signed in to change notification settings
Fork 0
Star 0

Code
Pull requests 7
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Pull requests
Actions
Projects
Security and quality
Insights

0004 kyua: add jail support#4

Closed

ihoro wants to merge 79 commits intomainihoro/freebsd-src:mainfrom

0004-kyua-jail-supportihoro/freebsd-src:0004-kyua-jail-supportCopy head branch name to clipboard

Conversation Commits79 (79)Checks Files changed

Closed

0004 kyua: add jail support#4
ihoro wants to merge 79 commits intomainfrom
0004-kyua-jail-support

Commits

Commits on May 27, 2024

kyua: quick PoC of jail support
ihoro
committed
kyua: jail params as set<string> is a bad idea
ihoro
committed
kyua: convert 'jail' metadata from set<string> to string type
ihoro
committed
kyua: add full cycle of jail support
ihoro
committed
kyua: intro execenv concept
ihoro
committed
kyua: switch plain and tap to execenv usage
ihoro
committed
kyua: revise sync_*cleanup() upon termination signal
ihoro
committed
kyua: code cleanups
ihoro
committed
kyua: create jail quietly
ihoro
committed
kyua: includes cleanup
ihoro
committed
kyua: fix metadata usage from a subproc
ihoro
committed
kyua: simplify code
ihoro
committed
kyua: make jexec run a program with kyua work dir set as cwd
ihoro
committed
kyua: jail: handle cd_exec.sh file creation fail case
ihoro
committed
kyua: add execenv metadata as a knob, execenv_jail is optional now
ihoro
committed
kyua: execenv="jail" makes is_exclusive being always false
ihoro
committed
kyua: skipped test should also skip execenv cleanup step
ihoro
committed
kyua: extend cleanup timeouts from 60s to 300s
ihoro
committed
kyua: cd_exec.sh -> kyua_cd_exec.sh
ihoro
committed
kyua: lower cleanup timeouts from 300s to 120s
ihoro
committed
kyua: lower timeouts back to 60s
ihoro
committed
kyua: move engine related logic out from utils::process::jail
ihoro
committed
kyua: make execenv if-else branching more obvious
ihoro
committed
kyua: set children.max=JAIL_MAX for jail creation defaults
ihoro
committed
kyua: do not mention vfork() related limitations in code comment
ihoro
committed
kyua: fix build
ihoro
committed
kyua: cleanup code comment
ihoro
committed
kyua: migrate process::jail::exec from jexec(8) to jail syscalls + lib
ihoro
committed
kyua: absorb the whole error message from jail(8)
ihoro
committed
kyua: resolve ngie@ comments: make if-else branching clear
ihoro
committed
kyua: resolve ngie@ comments: replace magic with constants
ihoro
committed
kyua: resolve ngie@ comments: make wait_any() switch logic clear
ihoro
committed
kyua: fix wait_any() not-the-best if-else branching
ihoro
committed
kyua: use security.jail.children.max dynamic value instead of JAIL_MAX
ihoro
committed
kyua: improve code comments
ihoro
committed
kyua: use POSIX PATH_MAX constant instead of a magic number
ihoro
committed
Integrate FreeBSD Jail support into Kyua build process
ihoro
committed
Separate FreeBSD related code beneath freebsd/
ihoro
committed
Fix tests after execenv introduction
ihoro
committed
kyua: overhaul the implementation
ihoro
committed
usr.bin/kyua: align build
ihoro
committed
kyua: make is_exclusive not depend on execenv
ihoro
committed
kyua: add execenv::manager TODO about extra metadata refactoring
ihoro
committed
kyua: fix execenv jail stub compilation
ihoro
committed
kyua: align with the project style
ihoro
committed
kyua: add "execenv" engine configuration variable
ihoro
committed
kyua: make jail stub error message OS agnostic
ihoro
committed
usr.bin/kyua: support build WITHOUT_JAIL
ihoro
committed
usr.bin/kyua: fix jail conditional concept in Makefile
ihoro
committed
kyua: implement support of set<string> type of variable in kyua.conf
ihoro
committed
kyua: fix existing tests after execenv kyua.conf variable introduction
ihoro
committed
kyua: align code style
ihoro
committed
kyua: fix style of usr.bin/kyua/Makefile
ihoro
committed
kyua: drop a TODO
ihoro
committed
kyua.conf.5: describe execenv engine configuration variable
ihoro
committed
kyuafile.5: describe new execenv and execenv_jail metadata
ihoro
committed
kyua.conf.5: align the wording with the other kyua docs
ihoro
committed
kyuafile.5: fix issues reported by mandoc -T lint and igor
ihoro
committed
kyua: correct error messages
ihoro
committed
kyua: extract "host" as a constant
ihoro
committed
kyua: int -> pid_t
ihoro
committed
kyua: use unsigned for a length constant
ihoro
committed
kyua: DRY utils::jail()
ihoro
committed
kyua: jail_getid() -- explicitly check for -1
ihoro
committed
kyua: reorder functions in alpha order
ihoro
committed
kyua: fix copyright
ihoro
committed
kyua: DRY sysctl oid
ihoro
committed
kyua: fix copyright years
ihoro
committed
kyua: refer to kyuafile.5 from kyua.conf.5 for possible execenvS
ihoro
committed
kyua: fix and re-phrase kyuafile.5 man page
ihoro
committed
kyua: rework parse_params_string() from C to C++
ihoro
committed
kyuafile.5: mention the formula of a temporary jail name
ihoro
committed
kyuafile.5: document root requirements for the jail feature
ihoro
committed
kyuafile.5: document security.jail.children.max and security.jail.children.cur sysctl
ihoro
committed
kyuafile.5: mention non-working combination of jail+unprivileged
ihoro
committed
kyua: rename execenv_jail metadata property to execenv_jail_params
ihoro
committed
kyua: rename "execenv" engine config variable to "execenvs"
ihoro
committed
kyua: align autotools files with the upstream
ihoro
committed
kyua: put freebsd/* beneath os/freebsd/
ihoro
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.