Use clone instead of fork on pvf (#2477)
@mrcnski Done the change on the prepare worker, once the prepare worker part is good I'll do the same for the execute worker. This is based on https://github.com/koute/polkavm/blob/11beebd06276ce9b84f335350138479e714f6caf/crates/polkavm/src/sandbox/linux.rs#L711. ## TODO - [x] Add a check for this capability at startup - [x] Add prdoc mentioning the new Secure Validator Mode (optional) requirement. ## Related Closes #2162 --------- Co-authored-by:Marcin S <marcin@realemail.net>
Showing
- Cargo.lock 2 additions, 12 deletionsCargo.lock
- polkadot/node/core/pvf/common/Cargo.toml 1 addition, 0 deletionspolkadot/node/core/pvf/common/Cargo.toml
- polkadot/node/core/pvf/common/src/execute.rs 3 additions, 2 deletionspolkadot/node/core/pvf/common/src/execute.rs
- polkadot/node/core/pvf/common/src/executor_interface.rs 8 additions, 5 deletionspolkadot/node/core/pvf/common/src/executor_interface.rs
- polkadot/node/core/pvf/common/src/lib.rs 2 additions, 0 deletionspolkadot/node/core/pvf/common/src/lib.rs
- polkadot/node/core/pvf/common/src/worker/mod.rs 128 additions, 32 deletionspolkadot/node/core/pvf/common/src/worker/mod.rs
- polkadot/node/core/pvf/common/src/worker/security/change_root.rs 1 addition, 9 deletions...t/node/core/pvf/common/src/worker/security/change_root.rs
- polkadot/node/core/pvf/common/src/worker/security/clone.rs 93 additions, 0 deletionspolkadot/node/core/pvf/common/src/worker/security/clone.rs
- polkadot/node/core/pvf/common/src/worker/security/landlock.rs 4 additions, 4 deletions...adot/node/core/pvf/common/src/worker/security/landlock.rs
- polkadot/node/core/pvf/common/src/worker/security/mod.rs 4 additions, 2 deletionspolkadot/node/core/pvf/common/src/worker/security/mod.rs
- polkadot/node/core/pvf/common/src/worker/security/seccomp.rs 2 additions, 2 deletionspolkadot/node/core/pvf/common/src/worker/security/seccomp.rs
- polkadot/node/core/pvf/execute-worker/Cargo.toml 2 additions, 2 deletionspolkadot/node/core/pvf/execute-worker/Cargo.toml
- polkadot/node/core/pvf/execute-worker/src/lib.rs 252 additions, 124 deletionspolkadot/node/core/pvf/execute-worker/src/lib.rs
- polkadot/node/core/pvf/prepare-worker/Cargo.toml 1 addition, 2 deletionspolkadot/node/core/pvf/prepare-worker/Cargo.toml
- polkadot/node/core/pvf/prepare-worker/src/lib.rs 197 additions, 89 deletionspolkadot/node/core/pvf/prepare-worker/src/lib.rs
- polkadot/node/core/pvf/src/host.rs 1 addition, 1 deletionpolkadot/node/core/pvf/src/host.rs
- polkadot/node/core/pvf/src/security.rs 130 additions, 96 deletionspolkadot/node/core/pvf/src/security.rs
- polkadot/node/core/pvf/tests/it/main.rs 3 additions, 0 deletionspolkadot/node/core/pvf/tests/it/main.rs
- polkadot/node/core/pvf/tests/it/process.rs 4 additions, 12 deletionspolkadot/node/core/pvf/tests/it/process.rs
- prdoc/pr_2477-use-clone-instead-of-fork-on-pvf.prdoc 22 additions, 0 deletionsprdoc/pr_2477-use-clone-instead-of-fork-on-pvf.prdoc
Please register or sign in to comment