host
a2a5624736
fix(chv): cell 后端由 nspawn 改为纯 stdlib userns 启动器
nspawn --directory=/ 在 systemd 255.4 上走不通(2026-11-07 真机
实测,修一个冒一个):裸 --no-new-privileges 被当成要值吞掉
下一个参数;--directory=/ 被根目录检查挡住;--volatile=state
又要 /run/host/os-release 挂载点与空 /dev(--tmpfs=/dev 不
生效)。cell 从未 live 跑通过(阶段 1 只测参数表纯函数)。
bwrap 作 chv 被 AppArmor userns 门挡住,newuidmap 客机未装。
新后端(同文件、同 CLI、同调用方):root 起进程,中间进程
unshare 用户 ns 并自己写 uid_map/gid_map(内 0 → 外 chv
1000),再进 mount/pid/net ns、挂 fresh /proc、/tmp tmpfs、
遮蔽敏感路径(目录盖 tmpfs、文件绑 /dev/null)、设
no_new_privileges + seccomp(禁 io_uring 三件套)+ 丢
capability,最后 exec payload;父进程配 veth/NAT、等退出码、
清 NAT。veth/NAT/nsenter 流程与旧版一致,seccomp BPF 与
capability 语义与 P2 设计一致。无新依赖、无 sysctl 改动。
2026-11-08 09:45:00 +00:00
..
2026-11-04 18:02:22 +00:00
2026-11-04 18:01:44 +00:00
2026-11-04 18:01:44 +00:00
2026-11-04 18:01:44 +00:00
2026-11-04 18:01:44 +00:00
2026-10-26 16:27:42 +08:00
2026-10-26 16:47:55 +08:00
2026-10-27 15:53:50 +08:00
2026-10-27 15:53:50 +08:00
2026-11-04 20:55:49 +00:00
2026-11-04 21:03:54 +00:00
2026-11-04 21:23:25 +00:00
2026-11-04 20:56:06 +00:00
2026-11-04 18:02:10 +00:00
2026-11-04 20:56:06 +00:00
2026-11-04 18:02:22 +00:00
2026-11-04 21:38:42 +00:00
2026-11-04 18:02:23 +00:00
2026-11-04 21:38:42 +00:00
2026-11-04 18:02:23 +00:00
2026-11-04 21:38:42 +00:00
2026-11-04 18:02:21 +00:00
2026-11-04 18:02:21 +00:00
2026-11-04 18:02:21 +00:00
2026-11-04 18:02:21 +00:00
2026-11-04 21:23:25 +00:00
2026-11-04 18:02:22 +00:00
2026-11-05 02:54:22 +08:00
2026-11-04 21:03:33 +00:00
2026-11-04 18:02:23 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 18:02:21 +00:00
2026-11-04 18:02:23 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 20:56:06 +00:00
2026-11-04 20:55:49 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 21:03:32 +00:00
2026-10-28 12:12:10 +08:00
2026-11-04 20:56:06 +00:00
2026-10-27 15:53:50 +08:00
2026-11-04 20:54:04 +00:00
2026-10-29 00:19:30 +08:00
2026-10-27 16:27:50 +00:00
2026-10-27 15:53:50 +08:00
2026-10-29 07:01:57 +08:00
2026-11-04 20:54:04 +00:00
2026-10-29 05:27:22 +08:00
2026-11-08 09:45:00 +00:00
2026-11-08 09:44:34 +00:00
2026-11-08 09:44:34 +00:00
2026-11-08 09:45:00 +00:00
2026-11-08 09:44:59 +00:00
2026-11-08 09:45:00 +00:00
2026-11-08 09:44:59 +00:00
2026-11-08 09:44:59 +00:00
2026-11-08 09:45:00 +00:00
2026-11-08 09:45:00 +00:00
2026-11-08 09:45:00 +00:00
2026-11-08 09:44:34 +00:00
2026-11-08 09:44:59 +00:00
2026-11-08 09:45:00 +00:00
2026-11-08 09:44:59 +00:00
2026-11-08 09:45:00 +00:00
2026-11-04 20:54:04 +00:00
2026-11-08 09:45:00 +00:00
2026-11-04 21:03:54 +00:00
2026-11-01 08:16:48 +00:00
2026-11-06 19:03:35 +00:00
2026-11-06 19:03:35 +00:00
2026-10-30 01:32:35 +08:00
2026-10-28 08:57:05 +00:00
2026-11-07 19:43:03 +00:00
2026-10-30 05:11:06 +08:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 21:03:33 +00:00
2026-10-26 03:23:06 +08:00
2026-11-04 18:01:44 +00:00
2026-10-26 10:26:21 +08:00
2026-11-04 20:54:04 +00:00
2026-11-04 18:02:20 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 21:04:06 +00:00
2026-11-04 21:04:06 +00:00
2026-11-04 21:04:06 +00:00
2026-11-04 21:04:06 +00:00
2026-11-04 21:03:54 +00:00
2026-11-04 21:03:54 +00:00
2026-11-04 21:03:54 +00:00
2026-11-04 21:04:06 +00:00
2026-10-30 02:53:46 +08:00
2026-10-27 16:27:50 +00:00
2026-11-05 02:45:09 +00:00
2026-10-29 06:32:38 +08:00
2026-10-29 16:45:07 +08:00
2026-10-27 10:56:08 +08:00
2026-11-06 19:03:35 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:54:04 +00:00
2026-10-26 08:39:57 +08:00
2026-10-28 03:43:02 +08:00
2026-11-04 20:53:46 +00:00
2026-10-30 04:05:00 +08:00
2026-11-01 09:06:28 +00:00
2026-10-30 01:32:35 +08:00
2026-11-04 20:58:34 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 21:36:18 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 20:54:04 +00:00
2026-11-07 20:51:23 +00:00
2026-10-30 07:15:05 +08:00
2026-10-28 10:13:40 +00:00
2026-10-29 04:40:47 +08:00
2026-11-04 21:03:32 +00:00
2026-10-30 14:46:11 +08:00
2026-10-27 19:10:49 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 20:55:49 +00:00
2026-11-04 20:56:06 +00:00
2026-11-04 20:54:04 +00:00
2026-10-30 12:58:41 +08:00
2026-11-04 18:01:44 +00:00
2026-10-27 15:35:23 +00:00
2026-10-29 16:45:07 +08:00
2026-10-26 16:27:42 +08:00
2026-10-26 16:27:42 +08:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:53:46 +00:00
2026-10-26 07:42:14 +08:00
2026-10-27 15:35:23 +00:00
2026-10-29 15:31:07 +08:00
2026-11-04 21:03:03 +00:00
2026-10-29 12:42:19 +08:00
2026-10-29 06:32:38 +08:00
2026-11-07 20:51:23 +00:00
2026-10-27 14:12:28 +08:00
2026-10-27 14:12:28 +08:00
2026-11-08 05:49:52 +00:00
2026-11-01 09:06:28 +00:00
2026-11-01 09:06:28 +00:00
2026-11-04 17:30:07 +01:00
2026-11-01 09:06:28 +00:00
2026-11-01 08:34:13 +00:00
2026-11-08 05:49:52 +00:00
2026-10-26 03:23:06 +08:00
2026-10-26 16:47:55 +08:00
2026-10-26 15:20:02 +08:00
2026-11-04 20:54:04 +00:00
2026-10-27 19:10:49 +00:00
2026-10-26 17:01:47 +08:00
2026-10-29 17:46:12 +08:00
2026-10-30 04:15:54 +08:00
2026-10-28 10:12:57 +00:00
2026-11-04 20:54:04 +00:00
2026-10-30 04:18:09 +08:00
2026-10-30 05:11:06 +08:00
2026-10-30 05:11:06 +08:00
2026-10-27 19:10:49 +00:00
2026-10-28 11:09:29 +08:00
2026-11-04 20:54:50 +00:00
2026-11-04 20:56:06 +00:00
2026-10-27 05:40:30 +08:00
2026-10-27 01:44:53 +08:00
2026-11-04 21:03:32 +00:00
2026-11-02 03:30:57 +00:00
2026-11-01 19:01:39 +00:00
2026-11-02 03:30:57 +00:00
2026-11-02 03:30:57 +00:00
2026-10-27 15:53:50 +08:00
2026-10-27 15:53:50 +08:00
2026-11-04 18:02:21 +00:00
2026-11-04 18:01:44 +00:00
2026-11-04 18:02:21 +00:00
2026-11-04 18:01:44 +00:00
2026-11-04 21:03:54 +00:00
2026-10-29 05:41:35 +08:00
2026-11-04 20:54:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 17:11:23 +01:00
2026-10-26 23:17:25 +08:00
2026-11-04 20:54:04 +00:00
2026-11-04 21:03:32 +00:00
2026-10-27 15:35:23 +00:00
2026-10-26 16:47:55 +08:00
2026-10-26 06:46:20 +08:00
2026-11-04 20:54:04 +00:00
2026-10-29 23:16:01 +08:00
2026-10-30 14:46:11 +08:00
2026-10-27 15:35:23 +00:00
2026-10-30 07:15:05 +08:00
2026-10-30 07:08:51 +00:00
2026-11-07 20:51:23 +00:00
2026-11-04 20:54:50 +00:00
2026-11-07 19:43:03 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:54:33 +00:00
2026-11-04 20:53:46 +00:00
2026-11-04 21:03:33 +00:00
2026-10-27 16:37:28 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:54:04 +00:00
2026-10-30 06:33:25 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:54:04 +00:00
2026-11-04 21:03:33 +00:00
2026-10-27 04:30:43 +08:00
2026-11-06 05:24:20 +00:00
2026-10-27 04:40:11 +08:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:54:04 +00:00
2026-10-30 05:11:06 +08:00
2026-10-30 02:25:48 +08:00
2026-10-30 00:39:13 +08:00
2026-10-28 11:14:10 +08:00
2026-10-28 11:25:17 +08:00
2026-11-04 20:54:04 +00:00
2026-10-29 06:32:38 +08:00
2026-11-06 22:00:52 +00:00
2026-10-28 04:56:22 +08:00
2026-10-27 16:37:28 +00:00
2026-10-28 05:36:18 +08:00
2026-10-28 06:10:02 +08:00
2026-10-28 04:33:20 +08:00
2026-10-30 05:11:06 +08:00
2026-11-04 18:02:20 +00:00
2026-10-30 14:46:11 +08:00
2026-11-04 21:03:32 +00:00
2026-11-05 02:22:47 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:23:25 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:33 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 21:03:32 +00:00
2026-11-04 21:03:54 +00:00
2026-11-04 20:54:04 +00:00
2026-10-30 01:16:49 +08:00
2026-11-01 14:15:54 +00:00
2026-11-04 21:03:54 +00:00
2026-10-30 01:16:49 +08:00
2026-11-04 20:53:46 +00:00
2026-10-26 06:46:20 +08:00
2026-10-27 14:12:28 +08:00
2026-11-04 21:03:54 +00:00
2026-10-28 11:25:17 +08:00
2026-11-04 21:03:32 +00:00
2026-10-30 14:46:11 +08:00
2026-10-30 01:38:01 +08:00
2026-11-04 20:54:04 +00:00
2026-11-04 20:54:04 +00:00