Signed-off-by: kanpov <[email protected]>

Signed-off-by: kanpov <[email protected]>

Signed-off-by: kanpov <[email protected]>

Signed-off-by: kanpov <[email protected]>

Signed-off-by: kanpov <[email protected]>

Signed-off-by: kanpov <[email protected]>

Updated the deflate on oom test to increase stability of the test.
Making the balloon smaller and the allocation larger.

Signed-off-by: Jack Thomson <[email protected]>

…dates

Bumps the firecracker group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [thiserror](https://github.com/dtolnay/thiserror) | `1.0.64` | `1.0.65` |
| [vm-memory](https://github.com/rust-vmm/vm-memory) | `0.15.0` | `0.16.0` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.6` | `0.8.7` |
| [proc-macro2](https://github.com/dtolnay/proc-macro2) | `1.0.88` | `1.0.89` |
| [syn](https://github.com/dtolnay/syn) | `2.0.82` | `2.0.85` |
| [serde](https://github.com/serde-rs/serde) | `1.0.210` | `1.0.214` |
| [regex](https://github.com/rust-lang/regex) | `1.11.0` | `1.11.1` |
| [gdbstub](https://github.com/daniel5151/gdbstub) | `0.7.2` | `0.7.3` |
| [kvm-ioctls](https://github.com/rust-vmm/kvm-ioctls) | `0.18.0` | `0.19.0` |
| [linux-loader](https://github.com/rust-vmm/linux-loader) | `0.12.0` | `0.13.0` |
| [vhost](https://github.com/rust-vmm/vhost) | `0.12.0` | `0.12.1` |
| [anstream](https://github.com/rust-cli/anstyle) | `0.6.15` | `0.6.17` |
| [anstyle](https://github.com/rust-cli/anstyle) | `1.0.8` | `1.0.9` |
| [anstyle-parse](https://github.com/rust-cli/anstyle) | `0.2.5` | `0.2.6` |
| [anstyle-query](https://github.com/rust-cli/anstyle) | `1.1.1` | `1.1.2` |
| [colorchoice](https://github.com/rust-cli/anstyle) | `1.0.2` | `1.0.3` |
| [libm](https://github.com/rust-lang/libm) | `0.2.8` | `0.2.11` |
| [prettyplease](https://github.com/dtolnay/prettyplease) | `0.2.24` | `0.2.25` |
| [rustix](https://github.com/bytecodealliance/rustix) | `0.38.37` | `0.38.38` |

Updates `thiserror` from 1.0.64 to 1.0.65
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.64...1.0.65)

Updates `vm-memory` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/rust-vmm/vm-memory/releases)
- [Changelog](https://github.com/rust-vmm/vm-memory/blob/main/CHANGELOG.md)
- [Commits](rust-vmm/vm-memory@v0.15.0...v0.16.0)

Updates `zerocopy` from 0.8.6 to 0.8.7
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](google/zerocopy@v0.8.6...v0.8.7)

Updates `proc-macro2` from 1.0.88 to 1.0.89
- [Release notes](https://github.com/dtolnay/proc-macro2/releases)
- [Commits](dtolnay/proc-macro2@1.0.88...1.0.89)

Updates `syn` from 2.0.82 to 2.0.85
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.82...2.0.85)

Updates `serde` from 1.0.210 to 1.0.214
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.210...v1.0.214)

Updates `serde_derive` from 1.0.210 to 1.0.214
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.210...v1.0.214)

Updates `regex` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](rust-lang/regex@1.11.0...1.11.1)

Updates `gdbstub` from 0.7.2 to 0.7.3
- [Release notes](https://github.com/daniel5151/gdbstub/releases)
- [Changelog](https://github.com/daniel5151/gdbstub/blob/master/CHANGELOG.md)
- [Commits](daniel5151/gdbstub@0.7.2...0.7.3)

Updates `kvm-ioctls` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/rust-vmm/kvm-ioctls/releases)
- [Changelog](https://github.com/rust-vmm/kvm-ioctls/blob/main/CHANGELOG.md)
- [Commits](rust-vmm/kvm@v0.18.0...v0.19.0)

Updates `linux-loader` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/rust-vmm/linux-loader/releases)
- [Changelog](https://github.com/rust-vmm/linux-loader/blob/main/CHANGELOG.md)
- [Commits](rust-vmm/linux-loader@v0.12.0...v0.13.0)

Updates `vhost` from 0.12.0 to 0.12.1
- [Release notes](https://github.com/rust-vmm/vhost/releases)
- [Commits](rust-vmm/vhost@vhost-v0.12.0...vhost-v0.12.1)

Updates `anstream` from 0.6.15 to 0.6.17
- [Commits](rust-cli/anstyle@anstream-v0.6.15...anstream-v0.6.17)

Updates `anstyle` from 1.0.8 to 1.0.9
- [Commits](rust-cli/anstyle@v1.0.8...v1.0.9)

Updates `anstyle-parse` from 0.2.5 to 0.2.6
- [Commits](rust-cli/anstyle@anstyle-parse-v0.2.5...anstyle-parse-v0.2.6)

Updates `anstyle-query` from 1.1.1 to 1.1.2
- [Commits](rust-cli/anstyle@anstyle-query-v1.1.1...anstyle-query-v1.1.2)

Updates `anstyle-wincon` from 3.0.4 to 3.0.6
- [Commits](rust-cli/anstyle@anstyle-wincon-v3.0.4...anstyle-wincon-v3.0.6)

Updates `colorchoice` from 1.0.2 to 1.0.3
- [Commits](rust-cli/anstyle@colorchoice-v1.0.2...colorchoice-v1.0.3)

Updates `libm` from 0.2.8 to 0.2.11
- [Release notes](https://github.com/rust-lang/libm/releases)
- [Changelog](https://github.com/rust-lang/libm/blob/master/CHANGELOG.md)
- [Commits](rust-lang/libm@0.2.8...libm-v0.2.11)

Updates `prettyplease` from 0.2.24 to 0.2.25
- [Release notes](https://github.com/dtolnay/prettyplease/releases)
- [Commits](dtolnay/prettyplease@0.2.24...0.2.25)

Updates `rustix` from 0.38.37 to 0.38.38
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGELOG.md)
- [Commits](bytecodealliance/rustix@v0.38.37...v0.38.38)

Updates `thiserror-impl` from 1.0.64 to 1.0.65
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.64...1.0.65)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: vm-memory
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: firecracker
- dependency-name: zerocopy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: proc-macro2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: syn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: serde_derive
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: regex
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: gdbstub
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: kvm-ioctls
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: firecracker
- dependency-name: linux-loader
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: firecracker
- dependency-name: vhost
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: anstream
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: anstyle
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: anstyle-parse
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: anstyle-query
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: anstyle-wincon
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: colorchoice
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: libm
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: prettyplease
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: rustix
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: thiserror-impl
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
...

Signed-off-by: dependabot[bot] <[email protected]>

vm-memory: GuestMemoryIterator is gone
kvm-ioctls: DeviceFd::get_device_attr is now unsafe.

Signed-off-by: Patrick Roy <[email protected]>

And remove 23.10 since it is EOL

Signed-off-by: Pablo Barbáchano <[email protected]>

v1.6.0 has been EOL for a few months already.

Signed-off-by: Pablo Barbáchano <[email protected]>

Add a const generic parameter to specify the
length of the IovDeque. This way different devices can use
different sizes for the queue.

Signed-off-by: Egor Lazarchuk <[email protected]>

Increase of the queue size helps with keeping both
vmm thread and guest busy at high network load and
improves performance.

Signed-off-by: Egor Lazarchuk <[email protected]>

Add `readv` and queue size increase changes in virtio-net
device to the CHANGELOG.

Signed-off-by: Egor Lazarchuk <[email protected]>

Signed-off-by: kanpov <[email protected]>

…nced: Multiple guests section

Signed-off-by: kanpov <[email protected]>

Allow a GDB debugging session to be started over API

Signed-off-by: Jack Thomson <[email protected]>

Add an entry for the new microVM guest kernel debugging feature

Signed-off-by: Jack Thomson <[email protected]>

Eliminate the local variable and the for-break-else construct by simply
returning early.

Signed-off-by: Patrick Roy <[email protected]>

Our docker container uses Python 3.12 these days, so follow the comment
the says "once we upgrade past 3.11, use the stdlib".

Signed-off-by: Patrick Roy <[email protected]>

`None` is an invalid value, and this caused A/B-Tests to be impossible
to run locally.

Signed-off-by: Patrick Roy <[email protected]>

The output of the spectre/meltdown checker, and the vulnerability files
on the host will not be influenced by the local checkout of the
firecracker repository. Thus these A/B-tests were noops. Fix this by
only doing the non-PR assertion in the nightly pipeline.

Signed-off-by: Patrick Roy <[email protected]>

Currently, we have two types of pre-PR A/B-Tests: Those that depend on
the repository as a whole (e.g. `cargo audit`, which checks properties
of Cargo.toml), and those that depend on the pre-compiled firecracker
binaries.

At the moment, these tests can use the same infrastructure, because our
buildkite shared build step will pre-compile binaries and then upload
the entire repository as an artifact, and so both types of A/B-tests
will find what they're looking for in this artifact and end up being
happy. However, this model makes it very difficult to manually run
A/B-tests locally (one will need to setup clones of the git repository
at specific locations and then pre-compile firecracker with specific
flags inside them). This patch series has the goal to simplify these
manual A/B-tests, but the cost is that the pre-PR A/B tests will require
different infrastructure.

Thus, prepare by providing different functions for each of these types
of A/B-test to use.

Signed-off-by: Patrick Roy <[email protected]>

The tools/ab_test.py script relies on precompiled binaries existing in
well-defined locations, and refuses to compile firecracker itself if
they're missing. It derives these locations from commit SHAs, so
conceptually, it makes more sense to cut out this middle step and just
directly pass in directories instead of SHAs (with the expectation that
the directories contain firecracker and jailer binaries).

However, the commit SHAs were still used to print the commit ranges over
which A/B-tests were done. It turns out that this was not working in the
vast majority of cases though, as the commit log printing logic did not
contain all the resolution logic that goes into compilation step (e.g.
for parsing revisions and such). So just remove that part.

In the EMF metrics, we now tag each report with the directory path
instead of the commit SHA. For the post-merge runs, this makes no
difference, as the SHA is part of the path.

Signed-off-by: Patrick Roy <[email protected]>

Passing `--rev` to `tools/devtool build` will do a checkout of the
specified revision into a temporary directory, compile firecracker into
it, and then copy over the final binaries into build/$revision.

This has advantages over our current approach for compiling A/B
revisions, as by only copying the final binaries into build/$revision we
save a lot of bandwidth when uploading artifacts for transfer between
different buildkite steps (as we no longer include gigabytes of
compilation artifacts).

This now means that all revisions are compiled in the same docker
container, however due to the rust-toolchain.toml this should not have
an impact on cross-toolchain testability, and has the advantage that the
cargo cache is shared (meaning we're hitting crates.io for downloads
less).

Signed-off-by: Patrick Roy <[email protected]>

Update the documentation to reflect that the script now takes
directories with binaries. The old documentation was wrong anyway, since
ab_test.py would fail if it couldn't find binaries in directories named
matching the passed revisions after the very specific naming scheme that
our buildkite infra uses.

Signed-off-by: Patrick Roy <[email protected]>

In the pre-PR A/B-tests we were compiling Firecracker. Instead,
explicitly rely on the precompiled binaries that we set up in the shared
buildkite build step. This has the slight downside that it makes it
harder to run these tests locally, as now you need to explicitly
pre-compile the binaries, but arguably running these vulnerability
A/B-tests locally doesnt make sense anyway, because they specifically
test the security configuration on our supported .metals.

While we're at it, rename the ab_* utility functions to make it obvious
that they expect pre-compiled binaries.

Signed-off-by: Patrick Roy <[email protected]>

Otherwise, they clash with the directories used for the pre-compiled
binaries (as the `build`-subdirectories now no longer contain checked
out repositories, but instead only binaries). Since each pipeline only
uses git_ab_test in precisely one test, loosing the re-use is not a big
deal.

Signed-off-by: Patrick Roy <[email protected]>

These tags were removed in 07e564c, so
the logic serves no purpose anymore (and it makes pytest print very
unhelpful error messages if a test function has no doc string).

Signed-off-by: Patrick Roy <[email protected]>

It's shorter and gives nicer error messages than `assert False` in a
`try` block.

Signed-off-by: Patrick Roy <[email protected]>

Add test comparing host and guest default cpu features.

Signed-off-by: Egor Lazarchuk <[email protected]>

Add test comparing host and guest default cpu features.

Signed-off-by: Egor Lazarchuk <[email protected]>

Add `_x86_64` to the file name be consistent with aarch64 version.

Signed-off-by: Egor Lazarchuk <[email protected]>

Bumps the firecracker group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [thiserror](https://github.com/dtolnay/thiserror) | `1.0.65` | `1.0.67` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.7` | `0.8.8` |
| [syn](https://github.com/dtolnay/syn) | `2.0.85` | `2.0.87` |
| [vhost](https://github.com/rust-vmm/vhost) | `0.12.1` | `0.13.0` |
| [anstyle](https://github.com/rust-cli/anstyle) | `1.0.9` | `1.0.10` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.1.31` | `1.1.34` |
| [thiserror-impl](https://github.com/dtolnay/thiserror) | `1.0.65` | `1.0.67` |


Updates `thiserror` from 1.0.65 to 1.0.67
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.65...1.0.67)

Updates `zerocopy` from 0.8.7 to 0.8.8
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/zerocopy/commits)

Updates `syn` from 2.0.85 to 2.0.87
- [Release notes](https://github.com/dtolnay/syn/releases)
- [Commits](dtolnay/syn@2.0.85...2.0.87)

Updates `vhost` from 0.12.1 to 0.13.0
- [Release notes](https://github.com/rust-vmm/vhost/releases)
- [Commits](rust-vmm/vhost@vhost-v0.12.1...vhost-v0.13.0)

Updates `anstyle` from 1.0.9 to 1.0.10
- [Commits](rust-cli/anstyle@v1.0.9...v1.0.10)

Updates `cc` from 1.1.31 to 1.1.34
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.1.31...cc-v1.1.34)

Updates `thiserror-impl` from 1.0.65 to 1.0.67
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.65...1.0.67)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: zerocopy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: syn
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: vhost
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: firecracker
- dependency-name: anstyle
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: cc
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: thiserror-impl
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
...

Signed-off-by: dependabot[bot] <[email protected]>

Update release policy ready for release

Signed-off-by: Jack Thomson <[email protected]>

Changing the queue size from 256 to 512 increases RX throughput but
seems to regress TX throughput by 3% on average. We are not sure what is
causing this. Revert this change until we have enough time to
investigate and understand better the mechanisms that are in play.

Signed-off-by: Babis Chalios <[email protected]>

bump version to 1.11.0-dev

Signed-off-by: Jack Thomson <[email protected]>

If we supply an invalid iperf binary to the test it still passes.
This adds checks for the command output.  While doing that, increase
the timeout to let the command finish without hitting it.

Signed-off-by: Nikita Kalyazin <[email protected]>

We observe iperf3 3.16+ crashes on aarch64 when running the test.
Use iperf3-vsock that we already build from source instead.

Signed-off-by: Nikita Kalyazin <[email protected]>

Linux kernel should hide "ssbs" since Neoverse-N1 and Neoverse-V1 have
an errata whereby an MSR to the SSBS special-purpose register does not
affect subsequent speculative instructions, permitting speculative store
bypassing for a window of time. Although Amazon Linux host kernels
(v5.10 and v6.1) backported it, the guest kernels (v5.10 and v6.1) and
the ubuntu host kernel (currently v6.8) lack the change.

Fixes: 2babc80 ("test(aarch64): add host vs guest cpu feature test")
Signed-off-by: Takahiro Itazuri <[email protected]>

Linux kernel v6.4+ passes through the "l1d_flush" CPUID bit to guests.
While the ubuntu host kernel (v6.8) has the change, the latest Amazon
Linux 2 and Amazon Linux 2023 doesn't.

Fixes: 4e014a1 ("test(x86_64): add host vs guest cpu feature test")
Signed-off-by: Takahiro Itazuri <[email protected]>

Linux kernel v6.6+ drops the synthetic feature flag. While the ubuntu
host kernel (v6.8) has the change, the Amazon Linux kernels (v5.10 and
v6.1) and the guest kernels (v5.10 and v6.1) don't.

Fixes: 4e014a1 ("test(x86_64): add host vs guest cpu feature test")
Signed-off-by: Takahiro Itazuri <[email protected]>

Update with v1.10.0 section

Signed-off-by: Jack Thomson <[email protected]>

Although we increased the refill time in the past in commit
347f877 ("unittest: net: eliminate ReadTapMock::MockFrame") to
avoid intermittent issues, it still fails rarely (maybe due to resource
contention). We are not sure the enough refill time, but it's worth a
try and may reduce the chance of kicking the retry of the whole unit
tests manually.

Signed-off-by: Takahiro Itazuri <[email protected]>

Use `NET_QUEUE_SIZES` for `parsed_descriptors` in the `RxBuffers`
instead of `FIRECRACKER_MAX_QUEUE_SIZE`

Signed-off-by: Egor Lazarchuk <[email protected]>

Use `FIRECRACKER_MAX_QUEUE_SIZE` for default type alias.
Use `L` const generic in the stub for `push_back` for kani.

Signed-off-by: Egor Lazarchuk <[email protected]>

Bump the snapshot version

Signed-off-by: Jack Thomson <[email protected]>

Bumps the firecracker group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [thiserror](https://github.com/dtolnay/thiserror) | `1.0.67` | `2.0.3` |
| [vm-memory](https://github.com/rust-vmm/vm-memory) | `0.16.0` | `0.16.1` |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.8` | `0.8.9` |
| [libc](https://github.com/rust-lang/libc) | `0.2.161` | `0.2.162` |
| [anstream](https://github.com/rust-cli/anstyle) | `0.6.17` | `0.6.18` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.1.34` | `1.1.37` |
| [hashbrown](https://github.com/rust-lang/hashbrown) | `0.15.0` | `0.15.1` |
| [regex-automata](https://github.com/rust-lang/regex) | `0.4.8` | `0.4.9` |
| [rustix](https://github.com/bytecodealliance/rustix) | `0.38.38` | `0.38.40` |
| [thiserror-impl](https://github.com/dtolnay/thiserror) | `1.0.67` | `1.0.69` |


Updates `thiserror` from 1.0.67 to 2.0.3
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.67...2.0.3)

Updates `vm-memory` from 0.16.0 to 0.16.1
- [Release notes](https://github.com/rust-vmm/vm-memory/releases)
- [Changelog](https://github.com/rust-vmm/vm-memory/blob/main/CHANGELOG.md)
- [Commits](rust-vmm/vm-memory@v0.16.0...v0.16.1)

Updates `zerocopy` from 0.8.8 to 0.8.9
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/zerocopy/commits)

Updates `libc` from 0.2.161 to 0.2.162
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.162/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.161...0.2.162)

Updates `anstream` from 0.6.17 to 0.6.18
- [Commits](rust-cli/anstyle@anstream-v0.6.17...anstream-v0.6.18)

Updates `cc` from 1.1.34 to 1.1.37
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.1.34...cc-v1.1.37)

Updates `hashbrown` from 0.15.0 to 0.15.1
- [Changelog](https://github.com/rust-lang/hashbrown/blob/master/CHANGELOG.md)
- [Commits](rust-lang/hashbrown@v0.15.0...v0.15.1)

Updates `regex-automata` from 0.4.8 to 0.4.9
- [Release notes](https://github.com/rust-lang/regex/releases)
- [Changelog](https://github.com/rust-lang/regex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/regex/commits/regex-automata-0.4.9)

Updates `rustix` from 0.38.38 to 0.38.40
- [Release notes](https://github.com/bytecodealliance/rustix/releases)
- [Changelog](https://github.com/bytecodealliance/rustix/blob/main/CHANGELOG.md)
- [Commits](bytecodealliance/rustix@v0.38.38...v0.38.40)

Updates `thiserror-impl` from 1.0.67 to 1.0.69
- [Release notes](https://github.com/dtolnay/thiserror/releases)
- [Commits](dtolnay/thiserror@1.0.67...1.0.69)

---
updated-dependencies:
- dependency-name: thiserror
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: firecracker
- dependency-name: vm-memory
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: zerocopy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: libc
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: anstream
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: cc
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: hashbrown
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: regex-automata
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: rustix
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: thiserror-impl
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
...

Signed-off-by: dependabot[bot] <[email protected]>

See dtolnay/thiserror#354

Signed-off-by: Patrick Roy <[email protected]>

Improve the PR checklist to make it more clear and explicitly ask
contributors to run the automated checkstyles.

Signed-off-by: Riccardo Mancini <[email protected]>

Add the SVE CPU template as a valid template in 5.10 since it works.

Signed-off-by: Pablo Barbáchano <[email protected]>

Update release policy to v1.10.1 patch

Signed-off-by: Jack Thomson <[email protected]>

`TcpIPv4Handler` for MMDS network stack preallocates several buffers
whose sizes are saved into a snapshot as `max_connections` and
`max_pending_resets` in `MmdsNetworkStackState`. But they are always the
same constant hardcoded values (`DEFAULT_MAX_CONNECTIONS` and
`DEFAULT_MAX_PENDING_RESETS`) as of today, which means there is no need
to save them into a snapshot. Even if we change the hardcoded sizes
across Firecracker versions, that should not be a problem. This is
because the snapshot feature does not support migration of network
connections and those buffers are initialized with empty on snapshot
restoration. When migrating from a Firecracker version with larger
buffers to another version with smaller ones, guest workloads that
worked previously might start to fail due to the less buffer spaces.
However, the issue is not a problem of the snapshot feature and it
should also occur even on a purely booted microVM (not restored from a
snapshot). Thus, it is fine to remove those fields from a snapshot.

Since this is a breaking change of the snapshot format, bumps the major
version.

Signed-off-by: Takahiro Itazuri <[email protected]>

There is no need to use MmdsNetworkStack::new() instead of
MmdsNetworkStack::new_with_defaults() in tests that pass the same
default values.

Signed-off-by: Takahiro Itazuri <[email protected]>

We bumped the snapshot version up twice recently, requiring users to
regenerate their snapshot, but the user action isn't clearly stated.

Signed-off-by: Takahiro Itazuri <[email protected]>

This avoids the need to store and download the image from S3.

Signed-off-by: Pablo Barbáchano <[email protected]>

Enabling ftrace in our kernels changed the performance of several tests,
so it was reverted.

Make a new set of kernels that will not be used for performance tests.

While doing this, simplify our guest kernel config customization that
relied on patches and use file concatenation instead. Turns out `make
olddefconfig` produces the same result and we avoid the complexity of
dealing with patches.

Signed-off-by: Pablo Barbáchano <[email protected]>

Compress squashfs with zstd since that now we have
CONFIG_SQUASHFS_ZSTD=y in all our guest kernels.

In my tests it is 78MB vs 85MB (an 8.2% reduction)

Signed-off-by: Pablo Barbáchano <[email protected]>

socat v1.8.0 in Ubuntu 24.04 has a bug when using `UDP-LISTEN` without
specifying the address family. It looks like:

    E xioopen_ipdgram_listen(): unknown address family 0

We can work-around it by specifying IPv4.

See http://www.dest-unreach.org/socat/CHANGES v1.8.0.1

Signed-off-by: Pablo Barbáchano <[email protected]>

Update guest rootfs to Ubuntu 24.04

Signed-off-by: Pablo Barbáchano <[email protected]>

Generate SSH key after downloading artifacts, and add it to the rootfs.

This avoids having an SSH key hardcoded in the rootfs. Downside is that
we have to rebuild the rootfs, but that is fast.

Signed-off-by: Pablo Barbáchano <[email protected]>

This returns a Popen object instead of waiting for the command to
finish. It may be useful when we need to incrementally read the output
of a long running process in the guest, without having to use screen.

Signed-off-by: Pablo Barbáchano <[email protected]>

So that we don't have to install it in the future.

Signed-off-by: Pablo Barbáchano <[email protected]>

For now it's a very simple one, but we can use it as a base to provide
more complicated ones in the future.

Signed-off-by: Pablo Barbáchano <[email protected]>

Use the new CI artifacts prepared for v1.11

Signed-off-by: Pablo Barbáchano <[email protected]>

It's more hassle to keep this as a separate tool than including it in
the tests, and we avoid having to treat it specially.

Also this way we can run it in parallel easily.

Signed-off-by: Pablo Barbáchano <[email protected]>

This is so we use less IO overall sending snapshot to/from S3.

- Punch holes in the memory snapshots
- Decrease guest memory from 1GB to 512MB as it's not important to the
  test.

This decreases around 10x:

Before: 27GB * 22 runs ~ 594GB
After: 2.7GB * 22 runs ~ 59.4GB

Signed-off-by: Pablo Barbáchano <[email protected]>

Also fix for when the patch kernel version is <100.

Signed-off-by: Pablo Barbáchano <[email protected]>

It is unlikely that we will ever support more than one rootfs.

Signed-off-by: Pablo Barbáchano <[email protected]>

Stage it so next time we rebuild the devctr it's there, and we can use
it to replace gzip, since it compresses better and faster.

Signed-off-by: Pablo Barbáchano <[email protected]>

Add debugging information to debug kernels, but split it out by default.

Signed-off-by: Pablo Barbáchano <[email protected]>

cargo-deny raised its MSRV to 1.81.0 in 0.16.2, while we are still at
1.79.0.

Pinning cargo-deny to last working version that works with our version
of Rust.

Signed-off-by: Pablo Barbáchano <[email protected]>

Bumps the firecracker group with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [zerocopy](https://github.com/google/zerocopy) | `0.8.9` | `0.8.10` |
| [clap](https://github.com/clap-rs/clap) | `4.5.20` | `4.5.21` |
| [libc](https://github.com/rust-lang/libc) | `0.2.162` | `0.2.164` |
| [serde](https://github.com/serde-rs/serde) | `1.0.214` | `1.0.215` |
| [serde_json](https://github.com/serde-rs/json) | `1.0.132` | `1.0.133` |
| [serde_derive](https://github.com/serde-rs/serde) | `1.0.214` | `1.0.215` |
| [aws-lc-rs](https://github.com/aws/aws-lc-rs) | `1.10.0` | `1.11.0` |
| [aws-lc-fips-sys](https://github.com/aws/aws-lc-rs) | `0.12.13` | `0.12.14` |
| [aws-lc-sys](https://github.com/aws/aws-lc-rs) | `0.22.0` | `0.23.0` |
| [cc](https://github.com/rust-lang/cc-rs) | `1.1.37` | `1.2.1` |
| [clap_builder](https://github.com/clap-rs/clap) | `4.5.20` | `4.5.21` |
| [clap_lex](https://github.com/clap-rs/clap) | `0.7.2` | `0.7.3` |
| [cpufeatures](https://github.com/RustCrypto/utils) | `0.2.14` | `0.2.15` |


Updates `zerocopy` from 0.8.9 to 0.8.10
- [Release notes](https://github.com/google/zerocopy/releases)
- [Changelog](https://github.com/google/zerocopy/blob/main/CHANGELOG.md)
- [Commits](google/zerocopy@v0.8.9...v0.8.10)

Updates `clap` from 4.5.20 to 4.5.21
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.5.20...clap_complete-v4.5.21)

Updates `libc` from 0.2.162 to 0.2.164
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/main/CHANGELOG.md)
- [Commits](rust-lang/libc@0.2.162...0.2.164)

Updates `serde` from 1.0.214 to 1.0.215
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.214...v1.0.215)

Updates `serde_json` from 1.0.132 to 1.0.133
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](serde-rs/json@v1.0.132...v1.0.133)

Updates `serde_derive` from 1.0.214 to 1.0.215
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](serde-rs/serde@v1.0.214...v1.0.215)

Updates `aws-lc-rs` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@v1.10.0...v1.11.0)

Updates `aws-lc-fips-sys` from 0.12.13 to 0.12.14
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@aws-lc-fips-sys/v0.12.13...aws-lc-fips-sys/v0.12.14)

Updates `aws-lc-sys` from 0.22.0 to 0.23.0
- [Release notes](https://github.com/aws/aws-lc-rs/releases)
- [Commits](aws/aws-lc-rs@aws-lc-sys/v0.22.0...aws-lc-sys/v0.23.0)

Updates `cc` from 1.1.37 to 1.2.1
- [Release notes](https://github.com/rust-lang/cc-rs/releases)
- [Changelog](https://github.com/rust-lang/cc-rs/blob/main/CHANGELOG.md)
- [Commits](rust-lang/cc-rs@cc-v1.1.37...cc-v1.2.1)

Updates `clap_builder` from 4.5.20 to 4.5.21
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@v4.5.20...v4.5.21)

Updates `clap_lex` from 0.7.2 to 0.7.3
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_lex-v0.7.2...clap_lex-v0.7.3)

Updates `cpufeatures` from 0.2.14 to 0.2.15
- [Commits](RustCrypto/utils@cpufeatures-v0.2.14...cpufeatures-v0.2.15)

---
updated-dependencies:
- dependency-name: zerocopy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: libc
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: serde_derive
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: aws-lc-rs
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: firecracker
- dependency-name: aws-lc-fips-sys
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: aws-lc-sys
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: firecracker
- dependency-name: cc
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: firecracker
- dependency-name: clap_builder
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: clap_lex
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
- dependency-name: cpufeatures
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: firecracker
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.10.5 to 3.10.11.
- [Release notes](https://github.com/aio-libs/aiohttp/releases)
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.10.5...v3.10.11)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

ensures binaries are installed in the directory specified by --path.

previously binaries could be overwriten during installation.

Signed-off-by: Matthew Buckingham-Bishop <[email protected]>

This helps the script work for instances it doesn't know about, which is
helpful while onboarding new instances.

Only Graviton metal instances are aarch64 at the moment.

Fixes: c33bc6c
Signed-off-by: Pablo Barbáchano <[email protected]>

Signed-off-by: kanpov <[email protected]>