mirror of
https://github.com/mulgadc/spinifex.git
synced 2026-11-08 03:33:13 +00:00
Josh Siviour
de28c6781e
The lambdatestlink agent now loads its identity, seals fw_cfg and dials the host exactly as the normal agent does, then carries the test stream over that mutual-TLS connection instead of a device path. Nothing tenant-facing starts until the host's first valid frame: a refusal after the handshake, an early close or a shutdown never starts the bootstrap. Each VM serves one invocation and then stops. The normal agent is unchanged and still accepts no invocations. The tagged tests join the race tier for the two packages that carry the build tag.
25 lines
727 B
Go
25 lines
727 B
Go
// lambda-agent runs inside a Lambda guest.
|
|
//
|
|
// A normal build reads its per-generation identity from fw_cfg, unloads
|
|
// fw_cfg so nothing started later can read the guest key, and opens the
|
|
// authenticated control connection to the host. It accepts no invocations and
|
|
// never starts the function's bootstrap: the message protocol and grant
|
|
// fencing do not exist yet. The agent never listens for the host.
|
|
//
|
|
// A lambdatestlink build opens the same connection, then relays one invocation
|
|
// over a test carrier for local proofs; the carrier is not the guest protocol.
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"flag"
|
|
"os"
|
|
)
|
|
|
|
func main() { os.Exit(run()) }
|
|
|
|
func run() int {
|
|
flag.Parse()
|
|
return start(context.Background())
|
|
}
|