fix(fspy): use memfd for Linux shared memory by wan9chi · Pull Request #523 · voidzero-dev/vite-task

wan9chi · 2026-07-09T05:00:05Z

Motivation

Stop Linux file-access tracking from consuming the container's /dev/shm quota and crashing with SIGBUS.

Changes

Replaces POSIX shared memory with a sealed memfd.
Uses an abstract Unix socket broker to send the descriptor to each opener.
Runs the broker asynchronously and keeps the preload client synchronous.
Stops new opens when the owner is dropped while keeping existing mappings valid.
Sets close-on-exec and derives the mapping length from the sealed descriptor.
Covers concurrent and invalid opens.
Updates the constrained-/dev/shm fixture to succeed.

Fixes #353

wan9chi · 2026-07-09T05:00:14Z

perf(fspy): use sparse Windows shared memory #524 : 2 dependent PRs (#525 , #526 )
fix(fspy): use memfd for Linux shared memory #523 👈 (View in Graphite)
test(e2e): reproduce constrained dev shm failure #522
docs(fspy): document shared-memory facade ownership semantics #521
refactor(fspy): introduce fspy_shm facade #520
main

This stack of pull requests is managed by Graphite. Learn more about stacking.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 308b887e8b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a55127096e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Replace the Linux /dev/shm-backed adapter with a sealed memfd mapping. Each client connection receives the descriptor immediately from a broker task on the ambient Tokio runtime. Dropping the owner cancels the broker, while already-open mappings remain valid. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Co-authored-by: GPT-5 Codex <codex@openai.com>

Co-authored-by: GPT-5 Codex <codex@openai.com>

wan9chi · 2026-07-11T00:45:02Z

Merge activity

Jul 11, 12:45 AM UTC: @wan9chi merged this pull request with Graphite.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: cc96f186e1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-07-11T00:52:27Z

+    let address = SocketAddrUnix::new_abstract_name(id.as_bytes())?;
+    connect(&socket, &address)?;


Avoid namespace-scoped broker addresses

When a traced task execs a descendant after entering another network namespace (for example through unshare -n or a sandbox helper), Linux abstract AF_UNIX names are looked up in that new namespace, so this connect cannot reach the broker that was bound in the parent namespace. The preload constructor treats ChannelConf::sender() failures as ipc_sender: None and then drops all accesses from that process, which can leave cache inputs incomplete for those sandboxed subtrees; use a namespace-independent handoff such as an inherited broker fd or an accessible filesystem socket instead.

Useful? React with 👍 / 👎.

wan9chi mentioned this pull request Jul 9, 2026

refactor(fspy): introduce fspy_shm facade #520

Merged

wan9chi force-pushed the constrained-dev-shm-e2e branch from 24813bf to ebc6e41 Compare July 9, 2026 05:12

wan9chi force-pushed the linux-memfd-shm branch from 8cca525 to a502041 Compare July 9, 2026 05:12

wan9chi force-pushed the constrained-dev-shm-e2e branch from ebc6e41 to eac0891 Compare July 9, 2026 05:22

wan9chi force-pushed the linux-memfd-shm branch from a502041 to bdac24a Compare July 9, 2026 05:22

wan9chi force-pushed the constrained-dev-shm-e2e branch from eac0891 to 82c057f Compare July 9, 2026 05:28

wan9chi force-pushed the linux-memfd-shm branch from bdac24a to f9bdd24 Compare July 9, 2026 05:28

wan9chi force-pushed the constrained-dev-shm-e2e branch from 82c057f to aaaf01b Compare July 9, 2026 05:35

wan9chi force-pushed the linux-memfd-shm branch from f9bdd24 to 308b887 Compare July 9, 2026 05:35

wan9chi marked this pull request as ready for review July 9, 2026 05:42

chatgpt-codex-connector Bot reviewed Jul 9, 2026

View reviewed changes

Comment thread crates/fspy_shm/src/linux/broker.rs Outdated

Comment thread crates/fspy_shm/src/lib.rs Outdated

wan9chi force-pushed the constrained-dev-shm-e2e branch from aaaf01b to a64e9b8 Compare July 9, 2026 07:57

wan9chi force-pushed the linux-memfd-shm branch from 308b887 to 379cedd Compare July 9, 2026 07:57

wan9chi force-pushed the constrained-dev-shm-e2e branch from a64e9b8 to ae72983 Compare July 9, 2026 14:16

wan9chi force-pushed the linux-memfd-shm branch from 379cedd to 67534d3 Compare July 9, 2026 14:16

wan9chi marked this pull request as draft July 10, 2026 01:16

wan9chi force-pushed the constrained-dev-shm-e2e branch from ae72983 to ac080f6 Compare July 10, 2026 06:02

wan9chi force-pushed the linux-memfd-shm branch from 67534d3 to bd42abf Compare July 10, 2026 06:03

wan9chi force-pushed the constrained-dev-shm-e2e branch from ac080f6 to ca12e8b Compare July 10, 2026 06:57

wan9chi force-pushed the linux-memfd-shm branch from bd42abf to 7e87bf1 Compare July 10, 2026 06:57

wan9chi force-pushed the constrained-dev-shm-e2e branch from ca12e8b to 4119fee Compare July 10, 2026 07:04

wan9chi force-pushed the linux-memfd-shm branch 2 times, most recently from 3f7527b to a6a417e Compare July 10, 2026 07:14

wan9chi force-pushed the constrained-dev-shm-e2e branch from 4119fee to d949311 Compare July 10, 2026 07:14

wan9chi force-pushed the constrained-dev-shm-e2e branch from 8dac1e8 to 3433486 Compare July 10, 2026 23:32

wan9chi force-pushed the linux-memfd-shm branch from 6996713 to a551270 Compare July 10, 2026 23:32

wan9chi marked this pull request as ready for review July 10, 2026 23:33

wan9chi force-pushed the constrained-dev-shm-e2e branch 2 times, most recently from 0f5cacc to cf3315b Compare July 10, 2026 23:37

wan9chi force-pushed the linux-memfd-shm branch from a551270 to d03b2f9 Compare July 10, 2026 23:37

chatgpt-codex-connector Bot reviewed Jul 10, 2026

View reviewed changes

Comment thread crates/fspy_shm/src/linux/broker.rs

wan9chi changed the base branch from constrained-dev-shm-e2e to graphite-base/523 July 10, 2026 23:40

wan9chi force-pushed the graphite-base/523 branch from cf3315b to 9e72876 Compare July 10, 2026 23:40

wan9chi force-pushed the linux-memfd-shm branch from d03b2f9 to 3a42fcd Compare July 10, 2026 23:40

graphite-app Bot changed the base branch from graphite-base/523 to main July 10, 2026 23:41

wan9chi force-pushed the linux-memfd-shm branch from 3a42fcd to 4552936 Compare July 10, 2026 23:41

wan9chi marked this pull request as draft July 10, 2026 23:43

wan9chi and others added 10 commits July 11, 2026 08:36

docs(changelog): clarify Linux shared memory fix

c82e0b5

Co-authored-by: GPT-5 Codex <codex@openai.com>

docs(fspy): explain Linux shared memory design

79238ff

Co-authored-by: GPT-5 Codex <codex@openai.com>

docs(fspy): explain Linux close-on-exec handling

b12ce8c

Co-authored-by: GPT-5 Codex <codex@openai.com>

docs(fspy): use direct Linux shared memory wording

4975ad1

Co-authored-by: GPT-5 Codex <codex@openai.com>

docs(fspy): remove hard wraps from Linux README

f95d355

Co-authored-by: GPT-5 Codex <codex@openai.com>

refactor(fspy): derive Linux shared memory size

8896e07

Co-authored-by: GPT-5 Codex <codex@openai.com>

docs(fspy): omit Linux mapping mechanics

0f0a5b3

Co-authored-by: GPT-5 Codex <codex@openai.com>

fix(fspy): authenticate shared memory clients

7d5f360

Co-authored-by: GPT-5 Codex <codex@openai.com>

docs(fspy): pin peer credential reference

cc96f18

Co-authored-by: GPT-5 Codex <codex@openai.com>

wan9chi force-pushed the linux-memfd-shm branch from 4552936 to cc96f18 Compare July 11, 2026 00:38

wan9chi marked this pull request as ready for review July 11, 2026 00:44

wan9chi merged commit 14807a2 into main Jul 11, 2026
16 checks passed

wan9chi deleted the linux-memfd-shm branch July 11, 2026 00:45

chatgpt-codex-connector Bot reviewed Jul 11, 2026

View reviewed changes

wan9chi mentioned this pull request Jul 11, 2026

vitest worker SIGBUS on /dev/shm-constrained hosts with task cache enabled #353

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(fspy): use memfd for Linux shared memory#523

fix(fspy): use memfd for Linux shared memory#523
wan9chi merged 10 commits into
mainfrom
linux-memfd-shm

wan9chi commented Jul 9, 2026 •

edited

Loading

Uh oh!

wan9chi commented Jul 9, 2026 •

edited

Loading

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

Uh oh!

Uh oh!

wan9chi commented Jul 11, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Jul 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

		let address = SocketAddrUnix::new_abstract_name(id.as_bytes())?;
		connect(&socket, &address)?;

Uh oh!

Conversation

wan9chi commented Jul 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Motivation

Changes

Uh oh!

wan9chi commented Jul 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

wan9chi commented Jul 11, 2026

Merge activity

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Jul 11, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

wan9chi commented Jul 9, 2026 •

edited

Loading

wan9chi commented Jul 9, 2026 •

edited

Loading