Merge branch 'main' into test-seccomp

Author: pb8o

.buildkite/pipeline_perf.py

@@ -124,6 +124,8 @@
 pins = {
     # TODO: Unpin when performance instability on m6i/5.10 has gone.
     "linux_5.10-pinned": {"instance": "m6i.metal", "kv": "linux_5.10"},
+    # TODO: Unpin when performance instability on m6i/6.1 has gone.
+    "linux_6.1-pinned": {"instance": "m6i.metal", "kv": "linux_6.1"},
 }
 
 

Cargo.lock

@@ -197,17 +197,16 @@ sudo ip link set dev "$TAP_DEV" up
 
 # Enable ip forwarding
 sudo sh -c "echo 1 > /proc/sys/net/ipv4/ip_forward"
+sudo iptables -P FORWARD ACCEPT
 
-HOST_IFACE="eth0"
+# This tries to determine the name of the host network interface to forward
+# VM's outbound network traffic through. If outbound traffic doesn't work,
+# double check this returns the correct interface!
+HOST_IFACE=$(ip -j route list default |jq -r '.[0].dev')
 
 # Set up microVM internet access
 sudo iptables -t nat -D POSTROUTING -o "$HOST_IFACE" -j MASQUERADE || true
-sudo iptables -D FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT \
-    || true
-sudo iptables -D FORWARD -i "$TAP_DEV" -o "$HOST_IFACE" -j ACCEPT || true
 sudo iptables -t nat -A POSTROUTING -o "$HOST_IFACE" -j MASQUERADE
-sudo iptables -I FORWARD 1 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-sudo iptables -I FORWARD 1 -i "$TAP_DEV" -o "$HOST_IFACE" -j ACCEPT
 
 API_SOCKET="/tmp/firecracker.socket"
 LOGFILE="./firecracker.log"

docs/getting-started.md

@@ -10,7 +10,7 @@ license = "Apache-2.0"
 displaydoc = "0.2.5"
 thiserror = "2.0.3"
 vm-memory = { version = "0.16.1", features = ["backend-mmap", "backend-bitmap"] }
-zerocopy = { version = "0.8.10", features = ["derive"] }
+zerocopy = { version = "0.8.11", features = ["derive"] }
 
 [lib]
 bench = false

src/acpi-tables/Cargo.toml

@@ -12,9 +12,9 @@ bench = false
 [dependencies]
 clap = { version = "4.5.21", features = ["derive"] }
 itertools = "0.13.0"
-proc-macro2 = { version = "1.0.89", features = ["span-locations"] }
+proc-macro2 = { version = "1.0.92", features = ["span-locations"] }
 quote = "1.0.37"
-syn = { version = "2.0.85", features = ["full", "extra-traits", "visit", "visit-mut", "printing"] } 
+syn = { version = "2.0.90", features = ["full", "extra-traits", "visit", "visit-mut", "printing"] } 
 walkdir = "2.5.0"
 
 [dev-dependencies]

src/clippy-tracing/Cargo.toml

@@ -12,7 +12,7 @@ bench = false
 [dependencies]
 clap = { version = "4.5.21", features = ["derive", "string"] }
 displaydoc = "0.2.5"
-libc = "0.2.164"
+libc = "0.2.167"
 log-instrument = { path = "../log-instrument", optional = true }
 serde = { version = "1.0.215", features = ["derive"] }
 serde_json = "1.0.133"

src/cpu-template-helper/Cargo.toml

@@ -18,7 +18,7 @@ bench = false
 [dependencies]
 displaydoc = "0.2.5"
 event-manager = "0.4.0"
-libc = "0.2.164"
+libc = "0.2.167"
 log-instrument = { path = "../log-instrument", optional = true }
 micro_http = { git = "https://github.com/firecracker-microvm/micro-http" }
 
@@ -34,7 +34,7 @@ vmm-sys-util = { version = "0.12.1", features = ["with-serde"] }
 
 [dev-dependencies]
 cargo_toml = "0.20.5"
-libc = "0.2.164"
+libc = "0.2.167"
 regex = { version = "1.11.1", default-features = false, features = ["std", "unicode-perl"] }
 
 # Dev-Dependencies for uffd examples

src/firecracker/Cargo.toml

@@ -12,7 +12,7 @@ name = "jailer"
 bench = false
 
 [dependencies]
-libc = "0.2.164"
+libc = "0.2.167"
 log-instrument = { path = "../log-instrument", optional = true }
 nix = { version = "0.29.0", default-features = false, features = ["dir"] }
 regex = { version = "1.11.1", default-features = false, features = ["std"] }

src/jailer/Cargo.toml

@@ -11,9 +11,9 @@ proc-macro = true
 bench = false
 
 [dependencies]
-proc-macro2 = "1.0.89"
+proc-macro2 = "1.0.92"
 quote = "1.0.37"
-syn = { version = "2.0.85", features = ["full", "extra-traits"] }
+syn = { version = "2.0.90", features = ["full", "extra-traits"] }
 
 [lints]
 workspace = true

src/log-instrument-macros/Cargo.toml

@@ -11,7 +11,7 @@ bench = false
 
 [dependencies]
 displaydoc = "0.2.5"
-libc = "0.2.164"
+libc = "0.2.167"
 log-instrument = { path = "../log-instrument", optional = true }
 thiserror = "2.0.3"
 vmm-sys-util = "0.12.1"