Harden hypervisor process liveness checks - #363

Merged

yummybomb merged 50 commits into

hypeship/generalize-vgpu-devicefrom

hypeship/hypervisor-liveness

Aug 31, 2026

Commits on Aug 28, 2026

Unify hypervisor liveness checks on ProcessExists
yummybomb
committed
34e9270
Wait for non-child hypervisor exit before finishing kill
yummybomb
committed
1e5c0a1
Verify socket ownership before treating a hypervisor PID as live
yummybomb
committed
0b1a387
Fail closed on hypervisor liveness checks
yummybomb
committed
bc1ba16
Fail closed on duplicate socket paths
yummybomb
committed
d03b190
Resolve socket owner from listening entries only
yummybomb
committed
fd372fa
Verify socket ownership before force-killing a hypervisor PID
yummybomb
committed
5fcd915
Skip hypervisor kill when socket ownership is unconfirmed
yummybomb
committed
e7c5782
Fail delete when hypervisor ownership is unconfirmed
yummybomb
committed
f7b141b
Verify hypervisor ownership before killing
yummybomb
committed
5d7e89f
Fail closed on unconfirmed socket match with no stored PID
yummybomb
committed
3689efb
Treat unsignalable hypervisor processes as alive
yummybomb
committed
929baf2
Document fail-closed hypervisor errors
yummybomb
committed
aedcdd1
Handle process exit races during socket scans
yummybomb
committed
5bbd742
Confirm hypervisor identity before kill
yummybomb
committed
18e779c
Handle hypervisor identity edge cases
yummybomb
committed
8af4066
Disambiguate inherited hypervisor sockets
yummybomb
committed
1e2f0cf
Add non-Linux process owner resolver
yummybomb
committed
a146a3b
Scope hypervisor identity to host boot
yummybomb
committed
8cd027b
Verify graceful shutdown process ownership
yummybomb
committed
95506fd
Mint hypervisor identity tokens only for confirmed PIDs
yummybomb
committed
89a6e38
Treat a hypervisor identity from a previous boot as dead
yummybomb
committed
ad6d0f7
Treat a socket with no owning process as proof the hypervisor is gone
yummybomb
committed
a8c2729
Confirm the expected owner's socket fd before scanning all of /proc
yummybomb
committed
68c3044
Backfill hypervisor process identity at startup
yummybomb
committed
66b1200
Memoize the host boot ID
yummybomb
committed
78d6c1e
Skip unreadable fds in the candidate socket ownership check
yummybomb
committed
498155f
Record a bare PID when the fallback hypervisor PID is dead
yummybomb
committed
5e805e4
Resolve hypervisor ownership before shutdown kill
yummybomb
committed
36cf13a
Handle dead owners in shutdown and socket classification
yummybomb
committed
3894897
Keep the fail-closed resolver off the hydration hot path
yummybomb
committed
67e0bf3
Extract hypervisor process identity logic into process_identity.go
yummybomb
committed
c9b384a
Group hypervisor process identity fields into a struct
yummybomb
committed
bb2a847
Collapse the three SIGKILL-and-wait paths into one helper
yummybomb
committed
bda8a2c
Log a summary line after hypervisor identity backfill
yummybomb
committed
ae21765
Reduce hypervisor SIGKILL wait from 30s to 2s
yummybomb
committed
50e9491
Defer stuck delete teardown to a background finalizer
yummybomb
committed
b5fed73
Revert "Defer stuck delete teardown to a background finalizer"
yummybomb
committed
c703ab3
Drop unused identity checks and redundant kill-wait constant
yummybomb
committed
3e9b706
Consolidate redundant identity tests
yummybomb
committed
c9230a1
Merge forceKillHypervisorProcess into killHypervisor
yummybomb
committed
e9f69cd
Abort standby when the hypervisor cannot be confirmed dead
yummybomb
committed
a1c8eda
Remove the hypervisor socket only after confirmed exit
yummybomb
committed
40f806c
Remove the command-line fallback from socket owner resolution
yummybomb
committed
5c154df
Skip the force-kill fallback after a confirmed hypervisor shutdown
yummybomb
committed
338f27b
Remove the startup hypervisor identity backfill
yummybomb
committed
df725d2
Reap zombie child VMMs and scan /proc in the churn test
yummybomb
committed
f5d1a9e
Retry cleanup deletes until the hypervisor teardown converges
yummybomb
committed
1d69bbd
Validate process identity without socket path
yummybomb
committed
4a92e23
Capture hypervisor PID before guest shutdown
yummybomb
committed
eb9678f