public_git
/
tart-softnet
mirror of https://github.com/cirruslabs/softnet.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
153 Commits 10 Branches 42 Tags 1.7 MiB
Commit Graph

21 Commits

Author SHA1 Message Date
edi-oai 28bb29df4a
Validate DHCP client identity and source address (#191) 
* Validate DHCP client identity and source address

* Use CFBoolean instead of CFNumber for dhcp_ignore_client_identifier

* Serialize bootpd preference updates
 2026-08-10 22:10:20 -04:00
dependabot[bot] 237aec1df5
Bump the all-updates group across 1 directory with 5 updates (#189) 
* Bump the all-updates group across 1 directory with 5 updates

Bumps the all-updates group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [libc](https://github.com/rust-lang/libc) | `0.2.188` | `0.2.189` |
| [clap](https://github.com/clap-rs/clap) | `4.6.3` | `4.6.4` |
| [sentry](https://github.com/getsentry/sentry-rust) | `0.48.5` | `0.49.0` |
| [sentry-anyhow](https://github.com/getsentry/sentry-rust) | `0.48.5` | `0.49.0` |
| [serial_test](https://github.com/palfrey/serial_test) | `3.5.0` | `4.0.1` |



Updates `libc` from 0.2.188 to 0.2.189
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.189/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.188...0.2.189)

Updates `clap` from 4.6.3 to 4.6.4
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.6.3...clap_complete-v4.6.4)

Updates `sentry` from 0.48.5 to 0.49.0
- [Release notes](https://github.com/getsentry/sentry-rust/releases)
- [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-rust/compare/0.48.5...0.49.0)

Updates `sentry-anyhow` from 0.48.5 to 0.49.0
- [Release notes](https://github.com/getsentry/sentry-rust/releases)
- [Changelog](https://github.com/getsentry/sentry-rust/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-rust/compare/0.48.5...0.49.0)

Updates `serial_test` from 3.5.0 to 4.0.1
- [Release notes](https://github.com/palfrey/serial_test/releases)
- [Commits](https://github.com/palfrey/serial_test/compare/v3.5.0...v4.0.1)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: libc
  dependency-version: 0.2.189
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-updates
- dependency-name: sentry
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: sentry-anyhow
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-updates
- dependency-name: serial_test
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-updates
...

Signed-off-by: dependabot[bot] <support@github.com>

* Work around Sentry 0.49 marking ClientOptions as #[non_exhaustive]

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nikolay Edigaryev <edi@openai.com>
 2026-08-04 14:50:20 +01:00
edi-oai cdc2a508aa
Introduce stateful "in TARGET" and "out TARGET" rules (#188) 2026-08-03 11:33:22 -04:00
Fedor Kororkov 08200b7a09
Add dynamic Softnet policy control (#181) 
* Add dynamic Softnet policy control

* Simplify Softnet policy RPC methods

* Use jsonrpsee types for Softnet policy RPC

* Reject superseded Softnet policy revisions

* Apply Softnet policy updates only after enqueue

* Flush final Softnet response after input EOF

* Signal EOF when disabling Softnet control

* Normalize Softnet default-route isolation

* Keep policy rules on Proxy (#182)

* Simplify Softnet policy protocol

* Bound pipelined Softnet policy responses

* Keep Softnet port forwarding active on control wakes

---------

Co-authored-by: edi-oai <edi@openai.com>
 2026-07-21 21:30:06 +01:00
Minh Vu 5d6b4b9d0c
Validate VM file descriptors before ownership transfer (#177) 
* Validate VM file descriptors before ownership transfer

* Handle unnamed macOS Unix sockets
 2026-07-16 10:47:53 -04:00
Nikolay Edigaryev df84a30016
--allow: support "@host" syntax (#160) 
* --allow: support "@host" syntax

To make communication with the guest VM possible
when using --block=0.0.0.0/0.

* Use "@-alias" wording instead of "@host"
 2026-05-15 16:06:03 +02:00
Nikolay Edigaryev 431ae9bbc9
Introduce --block in addition to --allow (#126) 2025-10-21 17:14:28 +04:00
Nikolay Edigaryev 8519fa2f86
Support TCP port exposure via "--expose" command-line argument (#70) 2025-01-09 16:50:39 +04:00
Nikolay Edigaryev 4a13c5922b
Prevent multiple --allow flags (#35) 
* Prevent multiple --allow flags

* --allow: better value name instead of just <ALLOW>
 2024-03-11 23:02:59 +04:00
Nikolay Edigaryev a92f4e0c99
Introduce --allow command-line argument to allow traffic to CIDRs (#34) 2024-03-11 22:07:39 +04:00
Sergei Parshev 0a92c290be
Added a way to enable host-only networking through tart using --net-host (#32) 
* Added a way to enable host-only networking through tart using SOFTNET_NET_TYPE=host

* Removed env variable and moved to Enum instead of str

* Fixed defaults & restricted publicity of host

* Fixed usage of NetType
 2024-03-01 11:25:19 -05:00
Nikolay Edigaryev cd5f1d2f4f
Fix unaligned read by switching from unmaintained users crate (#26) 
* Fix unaligned read by switching from unmaintained users crate

* Bump proc-macro2 to to fix "unknown feature `proc_macro_span_shrink`"
 2023-09-12 06:59:02 -04:00
Nikolay Edigaryev d7699e95a9
Support graceful termination via SIGINT (#23) 
* Support graceful termination via SIGINT

* $ cargo fmt

* Explain why we need to ignore the SIGINT
 2023-03-16 18:38:03 +04:00
Fedor Korotkov e71b32a8dd
Populate Sentry Release (#17) 
* Populate Sentry Release

* Reverted new line

* Update src/main.rs

Co-authored-by: Nikolay Edigaryev <edigaryev@gmail.com>

Co-authored-by: Nikolay Edigaryev <edigaryev@gmail.com>
 2022-12-14 17:17:34 -05:00
Nikolay Edigaryev 59cd9098e0
Ignore ENOBUFS when writing to VM's socket (#18) 
* Ignore ENOBUFS when writing to VM's socket

* Hint the into() target type to the compiler to fix the build error

* Fix Clippy warnings
 2022-12-15 00:15:19 +04:00
Fedor Korotkov a1108b1b7f
Full backtrace (#14) 
To include line numbers
 2022-12-14 18:59:24 +04:00
Nikolay Edigaryev 11910d8540
Sentry integration (#13) 
* Sentry integration

* Introduce a more generic CIRRUS_SENTRY_TAGS

* Revert switching to nightly toolchain
 2022-12-12 21:33:45 +04:00
Nikolay Edigaryev 717e6b0f89
Increase the default bootpd(8) lease time from 1 to 10 minutes (#8) 2022-10-21 19:09:18 +04:00
Nikolay Edigaryev ce129ba5cb
Allow host communication (#7) 
* Allow communication with host

* Clarify missing root privileges message
 2022-08-12 17:50:10 +03:00
Nikolay Edigaryev 88cd05e112
Automatically escalate privileges via passwordless sudo (#3) 
* Automatically escalate privileges via passwordless sudo

* README.md: document passwordless sudo option in requirements
 2022-06-14 17:41:07 +03:00
Nikolay Edigaryev 226a7e6c86 Initial revision of Softnet, a software networking for Tart 2022-06-10 16:53:03 +03:00