libevdev 1.14.0 reviewed, and the roadmap gives ADR-011's reason for the zone cookies by DevomB · Pull Request #250 · DevomB/KryptikOS

The source probe waits out duplicate address detection, binds every source, and counts before and after the net zone's chains

DevomB

committed

16bc28f

The net zone takes a zone's address only with that zone's MAC, which kryptikd sets on its eth0

DevomB

committed

7b935d4

A zone running across a net zone restart is shown going out through the gateway again, and the uplink coming back to zone 0 under its own name

DevomB

committed

73e1488

From the bridge the net zone takes in only what is addressed to the bridge, so no zone reaches it on its uplink addresses

DevomB

committed

a03c1ea

zone-source-pinned is listed beside volume-init, where it runs, so the list's first line stays as main has it and the PR merges clean

DevomB

committed

e9fa8fa

The zones suite reads the catch-all log across its archives, so a rotation cannot undo a count of READY lines or hide the newest one

DevomB

committed

d9585e0

reattach-egress pings the gateway from untrusted's namespace with ping, whose raw socket root may use there

DevomB

committed

97b431a

Merge main into net-restart-egress

DevomB

committed

1cd0d77

Merge main into net-zone-uplink-address

DevomB

committed

3b156c4

uplink-address-refused warms the path to the bridge before its gateway control, and says why the control failed

DevomB

committed

505c928

Merge main into zone-source-probe

DevomB

committed

9a076b5

Merge zone-source-probe (#228): The net zone takes a packet from a zone's address only with that zone's MAC

DevomB

committed

b85fe10

The boot and service scripts' comments are shorter, with their reasons kept: cleanup-held's cut of build/recipes/services.sh and five service scripts, redone on main by hand, comments only

DevomB

committed

2f87d80

A routed zone started again as its last run ends keeps its path: kryptikd replaces the port that run left in the net zone

DevomB

committed

71b439d

Merge net-restart-egress (#230): A zone running across a net zone restart goes out through the gateway again, and the uplink comes back to zone 0 under its own name

DevomB

committed

fa2a813

Merge zone-source-probe into net-zone-uplink-address

DevomB

committed

3fc8308

Merge main into net-zone-uplink-address

DevomB

committed

50ff93d

Merge comments-build-scripts (#241): The boot and service scripts' comments are shorter, with their reasons kept

DevomB

committed

eb38329

The signature, provenance and zone tools' comments are shorter, with their reasons kept: cleanup-held's cut of tools/kryptik, tools/provenance-inventory.sh, tools/verify-signatures.sh and three of …

DevomB

committed

de78fb8

The VM suites' comments are shorter, with their reasons kept: cleanup-held's cut of install-test, state-test, update-test, suite-lib and vm-drive.py, redone on main by hand, comments only

DevomB

committed

d37c459

The session's and the launcher's comments are shorter, with their reasons kept: cleanup-held's cut of tools/desktop/kryptik-launch.c and kryptik-session, redone on main by hand, comments only

DevomB

committed

5483012

kryptikd's broker, launch daemon, update, zone and command comments are shorter, with their reasons kept: cleanup-held's cut of kryptikd's sources, probes and cli suite, redone on main by hand, com…

DevomB

committed

0386d23

Merge comments-signature-tools (#242): The signature, provenance and zone tools' comments are shorter, with their reasons kept

DevomB

committed

d1e5ffd

Merge comments-vm-suites (#243): The VM suites' comments are shorter, with their reasons kept

DevomB

committed

064b3c9

Merge comments-desktop-tools (#244): The session's and the launcher's comments are shorter, with their reasons kept

DevomB

committed

5b04d9f

The decision records, the broker design and the supply-chain notes are shorter, with their claims kept: cleanup-held's cut of docs/decisions.md, docs/design/broker.md and docs/supply-chain.md, redo…

DevomB

committed

48a98a3

Merge comments-kryptikd (#246): kryptikd's comments are shorter, with their reasons kept

DevomB

committed

5f54ec9

The clock's, the boot check's and the integrity and installer suites' comments are shorter, with their reasons kept: cleanup-held's cut of time.rs, docs/design/time.md, boot-check.sh, integrity-tes…

DevomB

committed

39fccb8

Merge comments-docs (#247): The decision records, the broker design and the supply-chain notes are shorter, with their claims kept

DevomB

committed

2122cc9

Merge comments-update-boot (#248): The clock's, the boot check's and the integrity and installer suites' comments are shorter, with their reasons kept

DevomB

committed

488c091

Merge net-zone-uplink-address (#232): From the bridge the net zone takes in only what is addressed to the bridge, and a zone started again at once keeps its path

DevomB

committed

e50c1cb

libevdev 1.14.0 reviewed: two force-feedback functions and two documentation fixes, nothing libinput calls; and the roadmap's core-scheduling row gives ADR-011's reason for the cookies, that root c…

DevomB

committed

0a4ac1c

Navigation Menu

Repository navigation

libevdev 1.14.0 reviewed, and the roadmap gives ADR-011's reason for the zone cookies - #250

libevdev 1.14.0 reviewed, and the roadmap gives ADR-011's reason for the zone cookies#250
DevomB merged 33 commits into
mainfrom
pin-review-libevdev

Commits on Oct 5, 2026

A check that a zone cannot send from another zone's address: personal sends datagrams to the bridge from its own address and, with IPV6_FREEBIND, from untrusted's, and counters in the net zone say …

Commits on Oct 7, 2026

The source probe waits out duplicate address detection, binds every source, and counts before and after the net zone's chains

The net zone takes a zone's address only with that zone's MAC, which kryptikd sets on its eth0

A zone running across a net zone restart is shown going out through the gateway again, and the uplink coming back to zone 0 under its own name

From the bridge the net zone takes in only what is addressed to the bridge, so no zone reaches it on its uplink addresses

zone-source-pinned is listed beside volume-init, where it runs, so the list's first line stays as main has it and the PR merges clean

The zones suite reads the catch-all log across its archives, so a rotation cannot undo a count of READY lines or hide the newest one

reattach-egress pings the gateway from untrusted's namespace with ping, whose raw socket root may use there

Merge main into net-restart-egress

Merge main into net-zone-uplink-address

uplink-address-refused warms the path to the bridge before its gateway control, and says why the control failed

Merge main into zone-source-probe

Merge zone-source-probe (#228): The net zone takes a packet from a zone's address only with that zone's MAC

The boot and service scripts' comments are shorter, with their reasons kept: cleanup-held's cut of build/recipes/services.sh and five service scripts, redone on main by hand, comments only

A routed zone started again as its last run ends keeps its path: kryptikd replaces the port that run left in the net zone

Merge net-restart-egress (#230): A zone running across a net zone restart goes out through the gateway again, and the uplink comes back to zone 0 under its own name

Merge zone-source-probe into net-zone-uplink-address

Merge main into net-zone-uplink-address

Merge comments-build-scripts (#241): The boot and service scripts' comments are shorter, with their reasons kept

The signature, provenance and zone tools' comments are shorter, with their reasons kept: cleanup-held's cut of tools/kryptik, tools/provenance-inventory.sh, tools/verify-signatures.sh and three of …

The VM suites' comments are shorter, with their reasons kept: cleanup-held's cut of install-test, state-test, update-test, suite-lib and vm-drive.py, redone on main by hand, comments only

The session's and the launcher's comments are shorter, with their reasons kept: cleanup-held's cut of tools/desktop/kryptik-launch.c and kryptik-session, redone on main by hand, comments only

kryptikd's broker, launch daemon, update, zone and command comments are shorter, with their reasons kept: cleanup-held's cut of kryptikd's sources, probes and cli suite, redone on main by hand, com…

Merge comments-signature-tools (#242): The signature, provenance and zone tools' comments are shorter, with their reasons kept

Merge comments-vm-suites (#243): The VM suites' comments are shorter, with their reasons kept

Merge comments-desktop-tools (#244): The session's and the launcher's comments are shorter, with their reasons kept

The decision records, the broker design and the supply-chain notes are shorter, with their claims kept: cleanup-held's cut of docs/decisions.md, docs/design/broker.md and docs/supply-chain.md, redo…

Merge comments-kryptikd (#246): kryptikd's comments are shorter, with their reasons kept

The clock's, the boot check's and the integrity and installer suites' comments are shorter, with their reasons kept: cleanup-held's cut of time.rs, docs/design/time.md, boot-check.sh, integrity-tes…

Merge comments-docs (#247): The decision records, the broker design and the supply-chain notes are shorter, with their claims kept

Merge comments-update-boot (#248): The clock's, the boot check's and the integrity and installer suites' comments are shorter, with their reasons kept

Merge net-zone-uplink-address (#232): From the bridge the net zone takes in only what is addressed to the bridge, and a zone started again at once keeps its path

libevdev 1.14.0 reviewed: two force-feedback functions and two documentation fixes, nothing libinput calls; and the roadmap's core-scheduling row gives ADR-011's reason for the cookies, that root c…