Deep Serverization

path crosses a supervised ring-3 service boundary. Why it matters: Phase 54 is not real unless at least one meaningful storage. Focus on `sys_open` and `open_resolved_path` in `kernel/src/arch/x86_64/syscall/mod.rs` while you trace the snippet.

fn open_resolved_path(name: &str, flags: u64, mode_arg: u64) -> u64 {
    // Decode POSIX access mode (O_ACCMODE = 0o3).
    let (readable, writable) = match flags & 0o3 {
        0 => (true, false),     // O_RDONLY
        1 => (false, true),     // O_WRONLY
        2 => (true, true),      // O_RDWR
        _ => return NEG_EINVAL, // invalid combination
    };

    // Phase 27: Permission check for existing files.
    let create = (flags & 0x40) != 0; // O_CREAT
    let file_meta = path_metadata(name);
    if (!create || file_meta.is_some())
        && let Some((fu, fg, fm)) = file_meta
    {
        let (_, _, euid, egid) = current_process_ids();
        let required = (if readable { 4u8 } else { 0 }) | (if writable { 2u8 } else { 0 });
        if required != 0 && !check_permission(fu, fg, fm, euid, egid, required) {
            return NEG_EACCES;
        }
    }

    // Phase 27: When creating a new file, check parent directory write+execute permission.
    if create

View on GitHub

service, not just a design note. Why it matters: The storage boundary must be backed by a real supervised. Focus on `program_main` and `populate_ext2_files` in `userspace/fat_server/src/main.rs` while you trace the snippet.

fn program_main(_args: &[&str]) -> i32 {
    syscall_lib::write_str(STDOUT_FILENO, "fat_server: starting\n");

    // 1. Create an IPC endpoint.
    let ep_handle = syscall_lib::create_endpoint();
    if ep_handle == u64::MAX {
        syscall_lib::write_str(STDOUT_FILENO, "fat_server: create_endpoint failed\n");
        return 1;
    }
    let ep_handle = ep_handle as u32;

    // 2. Register as "fat" service.
    let ret = syscall_lib::ipc_register_service(ep_handle, "fat");
    if ret == u64::MAX {
        syscall_lib::write_str(STDOUT_FILENO, "fat_server: register_service failed\n");
        return 1;
    }

    syscall_lib::write_str(
        STDOUT_FILENO,
        "fat_server: registered, entering recv loop\n",
    );

    // 3. Supervised recv loop — reply with "not implemented" to any request.

View on GitHub

service, not just a design note. Why it matters: The storage boundary must be backed by a real supervised. Focus on `program_main` and `populate_ext2_files` in `xtask/src/main.rs` while you trace the snippet.

/// Populate the ext2 partition image with initial directories and files
/// using `debugfs -w`. Creates temp host files for the `write` command.
fn populate_ext2_files(
    part_path: &Path,
    output_dir: &Path,
    enable_telnet: bool,
    smoke_test_mode: bool,
) {
    // Standard Unix root filesystem layout.
    let passwd_content =
        "root:x:0:0:root:/root:/bin/ion\nuser:x:1000:1000:user:/home/user:/bin/ion\n";
    // Pre-provisioned password hashes for CI/testing.  Format: $sha256$hex_salt$hex_hash
    // where hash = SHA-256(salt_bytes || password_bytes).  Passwords: root="root", user="user".
    let shadow_content = "root:$sha256$63695f726f6f745f73616c7431323334$5c8e5a851fee488aae9fc5890dd433f8a391fba2860899c271a6e6f5d3e4c439::::::\nuser:$sha256$63695f757365725f73616c7435363738$64fb26f3575e26ed5fc3b07e6c4ca2b6af8bf1f17267c34babb76448301a16ca::::::\n";
    let group_content = "root:x:0:root\nuser:x:1000:user\n";

    // Phase 46: service definition files.
    let sshd_conf = "name=sshd\ncommand=/bin/sshd\ntype=daemon\nrestart=always\nmax_restart=10\ndepends=syslogd\n";
    let telnetd_conf = "name=telnetd\ncommand=/bin/telnetd\ntype=daemon\nrestart=always\nmax_restart=10\ndepends=syslogd\n";
    let syslogd_conf = "name=syslogd\ncommand=/bin/syslogd\ntype=daemon\nrestart=always\nmax_restart=10\ndepends=\n";
    let crond_conf = "name=crond\ncommand=/bin/crond\ntype=daemon\nrestart=always\nmax_restart=10\ndepends=syslogd\n";

    // Phase 52: service definitions for extracted ring-3 services.
    let console_conf = "name=console\ncommand=/bin/console_server\ntype=daemon\nrestart=always\nmax_restart=10\ndepends=\n";

View on GitHub