Skip to content

feat(isolation): add boundary protocol and Linux primitives - #2942

Open
drew wants to merge 7 commits into
codex/1737-rfc12-contractfrom
codex/1737-rfc12-supervisor-primitives
Open

feat(isolation): add boundary protocol and Linux primitives#2942
drew wants to merge 7 commits into
codex/1737-rfc12-contractfrom
codex/1737-rfc12-supervisor-primitives

Conversation

@drew

@drew drew commented Aug 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Summary

Implement the shared isolation interface beneath RFC 0012: the protected supervisor/sandbox protocol, transport adapters, binary identity helper, and capability-free Linux primitives used by every driver.

This PR contains no driver implementation. It exposes TCP and DNS mediation only; general application UDP is intentionally unsupported.

Related Issue

Part of #1737.

Changes

  • Add the openshell-isolation-interface contract and authenticated gRPC transport.
  • Add lifecycle, exec, attach, wait, signal, port-forward, TCP, and DNS protocol messages.
  • Add the shared openshell-binary-identity helper with generation-safe procfs identity checks.
  • Add Linux seccomp-notification, task-memory, pidfd, socket-registry, and Landlock primitives.
  • Preserve fail-closed protocol authentication, resource bounds, and reconnect behavior.

Testing

  • mise run pre-commit passes
  • Full unit and E2E validation delegated to remote CI

Checklist

  • Follows Conventional Commits
  • Authored commits are signed off (DCO)

Review remediation

  • Correct the mediated-DNS protocol documentation and replace brittle attach retry matching with one bounded connection wait.

Stack

  1. feat(isolation): define the RFC 0012 boundary contract #2941 — contract
  2. feat(isolation): add boundary protocol and Linux primitives #2942 — shared interface and primitives (this PR)
  3. feat(isolation): split supervisor and sandbox runtimes #3151 — supervisor and sandbox runtimes
  4. feat(vm): run the supervisor outside the guest workload #2945 — VM driver
  5. feat(docker): isolate workloads behind the host supervisor #2965 — Docker driver
  6. feat(kubernetes): add proxy-pod isolation topology #3144 — Kubernetes proxy-pod topology
  7. feat(podman): isolate workloads behind the host supervisor #3230 — Podman driver
  8. perf(isolation): add TCP and DNS benchmark harnesses #3229 — performance harnesses

@copy-pr-bot

copy-pr-bot Bot commented Aug 26, 2026

Copy link
Copy Markdown

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

@drew
drew force-pushed the codex/1737-rfc12-supervisor-primitives branch from fccbbc0 to 5b589ab Compare August 26, 2026 06:21
This was referenced Aug 26, 2026
Open
Draft
Open
@drew
drew force-pushed the codex/1737-rfc12-supervisor-primitives branch from 5b589ab to 8818afd Compare August 31, 2026 23:52
@copy-pr-bot

copy-pr-bot Bot commented Aug 31, 2026

Copy link
Copy Markdown

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

@drew drew mentioned this pull request Sep 1, 2026
Open
4 tasks
@drew
drew force-pushed the codex/1737-rfc12-supervisor-primitives branch 2 times, most recently from fbcc382 to efba1d8 Compare September 1, 2026 08:06
This was referenced Sep 2, 2026
Open
Open
@drew
drew marked this pull request as ready for review September 3, 2026 01:46
@drew
drew requested review from a team, derekwaynecarr, mrunalp and sjenning as code owners September 3, 2026 01:46
@drew
drew force-pushed the codex/1737-rfc12-supervisor-primitives branch from 00b12d3 to b06e0b1 Compare September 3, 2026 14:34
@drew drew added the test:e2e Requires end-to-end coverage label Sep 3, 2026
@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown

Label test:e2e applied for b06e0b1. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

@drew
drew force-pushed the codex/1737-rfc12-supervisor-primitives branch from b06e0b1 to 8e95cd7 Compare September 5, 2026 16:08
@drew

drew commented Sep 5, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

3 similar comments
@drew

drew commented Sep 5, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew

drew commented Sep 5, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew

drew commented Sep 5, 2026

Copy link
Copy Markdown
Collaborator Author

/ok to test

@drew
drew force-pushed the codex/1737-rfc12-supervisor-primitives branch from e4cc065 to 62a943a Compare September 8, 2026 22:32
@drew drew changed the title refactor(supervisor): add backend-neutral boundary primitives feat(isolation): add boundary protocol and Linux primitives Sep 8, 2026
@drew drew mentioned this pull request Sep 8, 2026
Open
5 tasks
@drew
drew force-pushed the codex/1737-rfc12-supervisor-primitives branch from 62a943a to 7f7a90e Compare September 9, 2026 04:39
@drew drew mentioned this pull request Sep 9, 2026
Open
5 tasks
@drew
drew removed this pull request from stack #3152 September 9, 2026 04:42
@drew
drew added this pull request to stack #3231 September 9, 2026 04:42
drew added 7 commits September 8, 2026 21:47
@drew
feat(isolation): add boundary protocol and Linux primitives
6378599 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
fix(isolation): harden signals and separate process status from trans…
222a34c 
…port

Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
fix(isolation): validate remote confirmation through public contract
b404cbf 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
fix(isolation): validate wire state and propagate snapshot failures
4dcb473 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
test(isolation): import owned agent specification explicitly
ece0ef7 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
docs(isolation): describe mediated DNS channel
d672ae1 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
fix(isolation): bound mediation attach without nested retries
ce8745c 
Signed-off-by: Drew Newberry <anewberry@nvidia.com>
@drew
drew force-pushed the codex/1737-rfc12-supervisor-primitives branch from 7f7a90e to ce8745c Compare September 9, 2026 04:53
@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown

🌿 Preview your docs: https://nvidia-preview-pr-2942.docs.buildwithfern.com/openshell

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mrunalp mrunalp Awaiting requested review from mrunalp mrunalp is a code owner
@sjenning sjenning Awaiting requested review from sjenning sjenning is a code owner
@derekwaynecarr derekwaynecarr Awaiting requested review from derekwaynecarr derekwaynecarr is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

test:e2e Requires end-to-end coverage

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@drew