Harden hypervisor process liveness checks - #363

Open

yummybomb wants to merge 47 commits into

hypeship/generalize-vgpu-devicefrom

hypeship/hypervisor-liveness

Commits on Aug 17, 2026

Unify hypervisor liveness checks on ProcessExists
yummybomb
committed
9b439f3
Wait for non-child hypervisor exit before finishing kill
yummybomb
committed
585080b
Verify socket ownership before treating a hypervisor PID as live
yummybomb
committed
aba1338
Fail closed on hypervisor liveness checks
yummybomb
committed
50f9420
Fail closed on duplicate socket paths
yummybomb
committed
686b28f
Resolve socket owner from listening entries only
yummybomb
committed
baa0c82
Verify socket ownership before force-killing a hypervisor PID
yummybomb
committed
14b822f
Skip hypervisor kill when socket ownership is unconfirmed
yummybomb
committed
bc2e72d
Fail delete when hypervisor ownership is unconfirmed
yummybomb
committed
3ce7abe
Verify hypervisor ownership before killing
yummybomb
committed
454f959
Fail closed on unconfirmed socket match with no stored PID
yummybomb
committed
a29880d
Treat unsignalable hypervisor processes as alive
yummybomb
committed
90683f9
Document fail-closed hypervisor errors
yummybomb
committed
f2887fe
Handle process exit races during socket scans
yummybomb
committed
0191693
Confirm hypervisor identity before kill
yummybomb
committed
3c73c7d
Handle hypervisor identity edge cases
yummybomb
committed
c21b5d1
Disambiguate inherited hypervisor sockets
yummybomb
committed
b58b78b
Add non-Linux process owner resolver
yummybomb
committed
3cc4657
Scope hypervisor identity to host boot
yummybomb
committed
4d96e4a
Verify graceful shutdown process ownership
yummybomb
committed
5e0c884
Mint hypervisor identity tokens only for confirmed PIDs
yummybomb
committed
ddc15fe
Treat a hypervisor identity from a previous boot as dead
yummybomb
committed
954314a
Treat a socket with no owning process as proof the hypervisor is gone
yummybomb
committed
413a14e
Confirm the expected owner's socket fd before scanning all of /proc
yummybomb
committed
1b00b72
Backfill hypervisor process identity at startup
yummybomb
committed
6d05978
Memoize the host boot ID
yummybomb
committed
9129426
Skip unreadable fds in the candidate socket ownership check
yummybomb
committed
261e88f
Record a bare PID when the fallback hypervisor PID is dead
yummybomb
committed
b9b4f3c
Resolve hypervisor ownership before shutdown kill
yummybomb
committed
00ca9e5
Handle dead owners in shutdown and socket classification
yummybomb
committed
936dc46
Keep the fail-closed resolver off the hydration hot path
yummybomb
committed
f112723
Extract hypervisor process identity logic into process_identity.go
yummybomb
committed
72ed9bc
Group hypervisor process identity fields into a struct
yummybomb
committed
93962eb
Collapse the three SIGKILL-and-wait paths into one helper
yummybomb
committed
058a494
Log a summary line after hypervisor identity backfill
yummybomb
committed
454aee1
Reduce hypervisor SIGKILL wait from 30s to 2s
yummybomb
committed
0b38402
Defer stuck delete teardown to a background finalizer
yummybomb
committed
5ac5f96
Revert "Defer stuck delete teardown to a background finalizer"
yummybomb
committed
b3973c2
Drop unused identity checks and redundant kill-wait constant
yummybomb
committed
6d1c7de
Consolidate redundant identity tests
yummybomb
committed
8824255
Merge forceKillHypervisorProcess into killHypervisor
yummybomb
committed
73c89b4
Abort standby when the hypervisor cannot be confirmed dead
yummybomb
committed
43ab429
Remove the hypervisor socket only after confirmed exit
yummybomb
committed
ba55be6
Remove the command-line fallback from socket owner resolution
yummybomb
committed
36b59c8
Skip the force-kill fallback after a confirmed hypervisor shutdown
yummybomb
committed
022bcd0
Remove the startup hypervisor identity backfill
yummybomb
committed
cae7f96
Reap zombie child VMMs and scan /proc in the churn test
yummybomb
committed
1be6fd7