lind_run: re-exec with sudo when not running as root#688
Merged
rennergade merged 2 commits intomainfrom Feb 5, 2026
Merged
Conversation
Contributor
End-to-End Test ReportTest PreviewTest Report Deterministic TestsSummary
Test Results by Category
Non Deterministic TestsSummary
Fail TestsSummary
Test Results by Category
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Contributor
Author
|
@Yaxuan-w The lind_run sudo change breaks test parity - native and WASM now run in different privilege contexts. Now, native runs as a normal user but wasmtime is in sudo, so two of our tests: forkexecuid and getuid fail due to an user id mismatch. This doesn't happen in CI because I am assuming everything runs as root. |
rennergade
approved these changes
Feb 5, 2026
Yaxuan-w
added a commit
that referenced
this pull request
Feb 8, 2026
commit 48e27f5 Author: MHemmings <discount.yoyos@gmail.com> Date: Sat Feb 7 08:37:03 2026 -0800 Add support for flags to be passed to wasmtestreport.py and lind_comp… (#691) * Add support for flags to be passed to wasmtestreport.py and lind_compile.sh scripts * Test permissions on wasmtestreport.py * Correct permissions on other scripts for tests * Remove support for json files and hard code math folder as variable commit a78185a Author: MHemmings <discount.yoyos@gmail.com> Date: Fri Feb 6 12:43:45 2026 -0800 Remove non-deterministic tests from test runner (#706) commit e717f4a Author: Alice Wen <40227173+Yaxuan-w@users.noreply.github.com> Date: Thu Feb 5 14:01:59 2026 -0500 Update gitignore (#702) * Update gitignore * Update gitignore commit df0e912 Author: Alice Wen <40227173+Yaxuan-w@users.noreply.github.com> Date: Thu Feb 5 11:22:00 2026 -0500 Add 3i and grate documentation (#493) * Add 3i and grate documentation * Deploy 3i doc to web * Fix type * Revise Lind-Wasm documentation for clarity and detail Updated the Lind-Wasm documentation to clarify the concepts of cages, grates, and the 3i system. Enhanced explanations of memory safety, control flow integrity, and the roles of Wasmtime and RawPOSIX. * Revising 3i doc according to comments * Update 3i.md (upper portion) I will comment on some of the lower portions which I think are wrong. * Update docs/index.md * Update docs/index.md * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update docs/index.md * Update docs/index.md * Update docs/index.md * Update docs/index.md * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update Wasm Implementation * Update wasm implementation * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Fix typo * Add 3i API doc + update 3i readme * Update 3i.md * Update 3i.md * Update 3i.md * todo * Update grate call routine doc and pic * Update according to comments * Add thread pool explanation * Remove ds_store * Add link and refine --------- Co-authored-by: Justin Cappos <justincappos@gmail.com> commit 44d910e Author: Rishabh Budhouliya <31189405+rishabhBudhouliya@users.noreply.github.com> Date: Wed Feb 4 19:06:04 2026 -0500 lind_run: re-exec with sudo when not running as root (#688) * add sudo if not root for lind_run * refactor
Yaxuan-w
added a commit
that referenced
this pull request
Feb 8, 2026
* Update Makefile, e2e, compilation, run scripts * Add chroot fix to lind_run * Copy to chroot * Squashed commit of the following: commit 48e27f5 Author: MHemmings <discount.yoyos@gmail.com> Date: Sat Feb 7 08:37:03 2026 -0800 Add support for flags to be passed to wasmtestreport.py and lind_comp… (#691) * Add support for flags to be passed to wasmtestreport.py and lind_compile.sh scripts * Test permissions on wasmtestreport.py * Correct permissions on other scripts for tests * Remove support for json files and hard code math folder as variable commit a78185a Author: MHemmings <discount.yoyos@gmail.com> Date: Fri Feb 6 12:43:45 2026 -0800 Remove non-deterministic tests from test runner (#706) commit e717f4a Author: Alice Wen <40227173+Yaxuan-w@users.noreply.github.com> Date: Thu Feb 5 14:01:59 2026 -0500 Update gitignore (#702) * Update gitignore * Update gitignore commit df0e912 Author: Alice Wen <40227173+Yaxuan-w@users.noreply.github.com> Date: Thu Feb 5 11:22:00 2026 -0500 Add 3i and grate documentation (#493) * Add 3i and grate documentation * Deploy 3i doc to web * Fix type * Revise Lind-Wasm documentation for clarity and detail Updated the Lind-Wasm documentation to clarify the concepts of cages, grates, and the 3i system. Enhanced explanations of memory safety, control flow integrity, and the roles of Wasmtime and RawPOSIX. * Revising 3i doc according to comments * Update 3i.md (upper portion) I will comment on some of the lower portions which I think are wrong. * Update docs/index.md * Update docs/index.md * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update docs/index.md * Update docs/index.md * Update docs/index.md * Update docs/index.md * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Update Wasm Implementation * Update wasm implementation * Update docs/internal/3i.md Co-authored-by: Justin Cappos <justincappos@gmail.com> * Fix typo * Add 3i API doc + update 3i readme * Update 3i.md * Update 3i.md * Update 3i.md * todo * Update grate call routine doc and pic * Update according to comments * Add thread pool explanation * Remove ds_store * Add link and refine --------- Co-authored-by: Justin Cappos <justincappos@gmail.com> commit 44d910e Author: Rishabh Budhouliya <31189405+rishabhBudhouliya@users.noreply.github.com> Date: Wed Feb 4 19:06:04 2026 -0500 lind_run: re-exec with sudo when not running as root (#688) * add sudo if not root for lind_run * refactor
qianxichen233
pushed a commit
that referenced
this pull request
Feb 12, 2026
* add sudo if not root for lind_run * refactor
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Purpose
After introducing
chrootfor filesystem isolation, wasmtime requires sudo to run the cage system. A non-root user runninglind_runwill require sudo.#685