Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

PVF worker: switch on seccomp networking restrictions #2163

Closed
mrcnski opened this issue Nov 5, 2023 · 0 comments · Fixed by #2221
Closed

PVF worker: switch on seccomp networking restrictions #2163

mrcnski opened this issue Nov 5, 2023 · 0 comments · Fixed by #2221
Assignees
@mrcnski
Labels
T0-node This PR/Issue is related to the topic “node”.

Comments

@mrcnski
Copy link
Contributor

mrcnski commented Nov 5, 2023

We've merged #2009 which logs seccomp violations for networking, but does not switch on full seccomp restrictions (voting against blocks on violations).

We should monitor releases and once #2009 has been released, we can switch this on for the next release.
@mrcnski mrcnski added the T0-node This PR/Issue is related to the topic “node”. label Nov 5, 2023
@mrcnski mrcnski mentioned this issue Nov 5, 2023
Closed
mrcnski added a commit that referenced this issue Nov 8, 2023
@mrcnski
PVF worker: switch on seccomp networking restrictions
1e068ed 
We've merged #2009 which logs seccomp violations for networking, but does not
switch on full seccomp restrictions (voting against blocks on violations).

We should monitor releases and once #2009 has been released, we can switch this
on for the next release.

Closes #2163
This was referenced Nov 8, 2023
Merged
Merged
@github-project-automation github-project-automation bot moved this from Todo to Done in PVF Security Hardening Nov 21, 2023
@mrcnski mrcnski self-assigned this Nov 26, 2023
@eskimor eskimor moved this from Backlog to Completed in parachains team board Jan 30, 2024
bkontur pushed a commit that referenced this issue May 10, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
3553587 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 14, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
9c49104 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 15, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
f681cfd 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 15, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
3d48cb4 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 15, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
6262c62 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 16, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
f75ca9f 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 17, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
7bd9538 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 17, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
f377cd4 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
svyatonik added a commit that referenced this issue May 17, 2024
@svyatonik
Revive new client and fix relay-halt issue (#2161)
3a7425b 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 20, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
401402e 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 21, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
b73ffa6 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 22, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
7faaeca 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
bkontur pushed a commit that referenced this issue May 23, 2024
@svyatonik @bkontur
Revive new client and fix relay-halt issue (#2161)
29fae91 
* Revert "Revert new client (#2153)"

This reverts commit 17cf7b596170419a1e9b9d39d7e329acdb1a87de.

* add comment re cache to CachingClient (#2162)

* do not wait for reader when sending items (#2163)

* Use unsync cache + async-aware sync primitives (#2164)

* use unsync cache + async-aware sync primitives

* clippy

* trigger CI

* Revert "trigger CI"

This reverts commit b5c1405492409b85abf552ba0b089c000824f722.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mrcnski mrcnski

Labels
T0-node This PR/Issue is related to the topic “node”.
Projects
parachains team board
Status: Completed
PVF Security Hardening
Status: Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

PVF worker: switch on seccomp networking restrictions paritytech/polkadot-sdk
1 participant
@mrcnski