dckcandClaude Opus 5.5
88739d9495
Each vat is a Durable Object that stores code by hash and runs it as a facet through the Worker Loader: an empty env, no fetch, storage that carries over upgrades. Two sockets with no configured address: whoever starts workerd hands them in (systemd socket activation), so the admin socket is the authority to install code. Tests run a real workerd: install, upgrade, isolation between vats, no fetch, the public port can't install, and code and state survive a crash. They spawn the package binary rather than the .bin shim, which forks workerd, so killing the shim orphaned it and the test run never ended. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
17 lines
484 B
Desktop File
17 lines
484 B
Desktop File
[Unit]
|
|
Description=toybox vats (workerd)
|
|
Requires=toybox.socket
|
|
|
|
[Service]
|
|
ExecStart=/opt/toybox/node_modules/workerd/bin/workerd serve --experimental /opt/toybox/config.capnp -S http=3 -S admin=4 -d state=/var/lib/toybox
|
|
DynamicUser=yes
|
|
StateDirectory=toybox
|
|
# no network but the sockets handed in
|
|
PrivateNetwork=yes
|
|
RestrictAddressFamilies=AF_UNIX
|
|
ProtectSystem=strict
|
|
ProtectHome=yes
|
|
PrivateTmp=yes
|
|
SystemCallFilter=@system-service
|
|
# not MemoryDenyWriteExecute: V8's JIT needs W+X
|