Skip to content

fix(pvisor): stabilize macOS sandbox cases - #120

Merged
reiase merged 1 commit into
mainfrom
fix/macos-pvisor-cases
Sep 6, 2026
Merged

fix(pvisor): stabilize macOS sandbox cases#120
reiase merged 1 commit into
mainfrom
fix/macos-pvisor-cases

Conversation

@reiase

@reiase reiase commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

Summary

  • unify host network isolation policy across Linux namespaces and macOS Seatbelt
  • allow loopback proxy access while blocking non-loopback IP and ambient Unix sockets on macOS
  • make the pVisor case runner platform-aware and run supported cases on macOS
  • keep whole-rootfs/procfs namespace cases Linux-only with explicit skip reasons

Validation

  • cargo fmt --all -- --check
  • cargo check -p persisting-pvisor --locked
  • cargo nextest run -p persisting-pvisor --test macos_safe --locked deny_all_blocks_ip_and_host_unix_sockets_on_macos
  • just cases pvisor — 28 PASS / 0 FAIL / 15 SKIP on macOS

Linux cross-build validation was skipped as requested.

@reiase
reiase force-pushed the fix/macos-pvisor-cases branch from 870d1a4 to e29c11c Compare September 6, 2026 14:56
@reiase
reiase merged commit 6c9e1cc into main Sep 6, 2026
28 checks passed
@reiase
reiase deleted the fix/macos-pvisor-cases branch September 6, 2026 15:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant