Harden hypervisor process liveness checks - #363

Open

yummybomb wants to merge 30 commits into

hypeship/generalize-vgpu-devicefrom

hypeship/hypervisor-liveness

Commits on Aug 13, 2026

Unify hypervisor liveness checks on ProcessExists
yummybomb
committed
f490302
Wait for non-child hypervisor exit before finishing kill
yummybomb
committed
a3220e7
Verify socket ownership before treating a hypervisor PID as live
yummybomb
committed
5b8a779
Fail closed on hypervisor liveness checks
yummybomb
committed
bfe5261
Fail closed on duplicate socket paths
yummybomb
committed
55f19ea
Resolve socket owner from listening entries only
yummybomb
committed
f756f91
Verify socket ownership before force-killing a hypervisor PID
yummybomb
committed
8c9d618
Skip hypervisor kill when socket ownership is unconfirmed
yummybomb
committed
d52c2f2
Fail delete when hypervisor ownership is unconfirmed
yummybomb
committed
8eee663
Verify hypervisor ownership before killing
yummybomb
committed
f3459f0
Fail closed on unconfirmed socket match with no stored PID
yummybomb
committed
0554e32
Treat unsignalable hypervisor processes as alive
yummybomb
committed
9b88d3d
Document fail-closed hypervisor errors
yummybomb
committed
9f9354d
Handle process exit races during socket scans
yummybomb
committed
434e9af
Confirm hypervisor identity before kill
yummybomb
committed
9179165
Handle hypervisor identity edge cases
yummybomb
committed
dc4f7fa
Disambiguate inherited hypervisor sockets
yummybomb
committed
d98b253
Add non-Linux process owner resolver
yummybomb
committed
51fd6be
Scope hypervisor identity to host boot
yummybomb
committed
8681699
Verify graceful shutdown process ownership
yummybomb
committed
07d61a2
Mint hypervisor identity tokens only for confirmed PIDs
yummybomb
committed
1b2ed44
Treat a hypervisor identity from a previous boot as dead
yummybomb
committed
49cdd50
Treat a socket with no owning process as proof the hypervisor is gone
yummybomb
committed
c6443db
Confirm the expected owner's socket fd before scanning all of /proc
yummybomb
committed
64c2b7f
Backfill hypervisor process identity at startup
yummybomb
committed
312affc
Memoize the host boot ID
yummybomb
committed
ecf49be
Skip unreadable fds in the candidate socket ownership check
yummybomb
committed
bf291eb
Record a bare PID when the fallback hypervisor PID is dead
yummybomb
committed
1376779
Resolve hypervisor ownership before shutdown kill
yummybomb
committed
1efc4be
Handle dead owners in shutdown and socket classification
yummybomb
committed
cf8c7d4

Navigation Menu

Uh oh!

Harden hypervisor process liveness checks - #363

Harden hypervisor process liveness checks#363
yummybomb wants to merge 30 commits into
hypeship/generalize-vgpu-devicefrom
hypeship/hypervisor-liveness

Commits on Aug 13, 2026

Unify hypervisor liveness checks on ProcessExists

Wait for non-child hypervisor exit before finishing kill

Verify socket ownership before treating a hypervisor PID as live

Fail closed on hypervisor liveness checks

Fail closed on duplicate socket paths

Resolve socket owner from listening entries only

Verify socket ownership before force-killing a hypervisor PID

Skip hypervisor kill when socket ownership is unconfirmed

Fail delete when hypervisor ownership is unconfirmed

Verify hypervisor ownership before killing

Fail closed on unconfirmed socket match with no stored PID

Treat unsignalable hypervisor processes as alive

Document fail-closed hypervisor errors

Handle process exit races during socket scans

Confirm hypervisor identity before kill

Handle hypervisor identity edge cases

Disambiguate inherited hypervisor sockets

Add non-Linux process owner resolver

Scope hypervisor identity to host boot

Verify graceful shutdown process ownership

Mint hypervisor identity tokens only for confirmed PIDs

Treat a hypervisor identity from a previous boot as dead

Treat a socket with no owning process as proof the hypervisor is gone

Confirm the expected owner's socket fd before scanning all of /proc

Backfill hypervisor process identity at startup

Memoize the host boot ID

Skip unreadable fds in the candidate socket ownership check

Record a bare PID when the fallback hypervisor PID is dead

Resolve hypervisor ownership before shutdown kill

Handle dead owners in shutdown and socket classification