Skip to content

Conversation

@roypat
Copy link
Contributor

@roypat roypat commented Feb 14, 2025

The access to the firecracker_pid property causes a read to the vm's
pid file. This means that in the scenario where the VM is already dead
by the time the monitor starts running, we won't get a NoSuchProcess
error, we potentially get a FileNotFoundError (if the jail is already
cleaned up). Thus, to avoid spurious failures, also catch
FileNotFoundError.

We leave the catch for NoSuchProcess error in case a VM exits between
reading the pid file and the call to thepsutils.Process constructor
(race condition).

Signed-off-by: Patrick Roy roypat@amazon.co.uk## Changes

...

Reason

...

License Acceptance

By submitting this pull request, I confirm that my contribution is made under
the terms of the Apache 2.0 license. For more information on following Developer
Certificate of Origin and signing off your commits, please check
CONTRIBUTING.md.

PR Checklist

  • I have read and understand CONTRIBUTING.md.
  • I have run tools/devtool checkstyle to verify that the PR passes the
    automated style checks.
  • I have described what is done in these changes, why they are needed, and
    how they are solving the problem in a clear and encompassing way.
  • I have updated any relevant documentation (both in code and in the docs)
    in the PR.
  • I have mentioned all user-facing changes in CHANGELOG.md.
  • If a specific issue led to this PR, this PR closes the issue.
  • When making API changes, I have followed the
    Runbook for Firecracker API changes.
  • I have tested all new and changed functionalities in unit tests and/or
    integration tests.
  • I have linked an issue to every new TODO.

  • This functionality cannot be added in rust-vmm.

The access to the `firecracker_pid` property causes a read to the vm's
pid file. This means that in the scenario where the VM is already dead
by the time the monitor starts running, we won't get a `NoSuchProcess`
error, we potentially get a `FileNotFoundError` (if the jail is already
cleaned up). Thus, to avoid spurious failures, also catch
`FileNotFoundError`.

We leave the catch for `NoSuchProcess` error in case a VM exits between
reading the pid file and the call to the`psutils.Process` constructor
(race condition).

Signed-off-by: Patrick Roy <roypat@amazon.co.uk>
Running the sandbox command leaves the .ipython folder as owned by root.
Fix this up after exiting so that its can be accesses un-privileged
after docker exits (I have a git pre-commit hook that tries to stash all
unstaged changes, and it always chokes on this folder).

Signed-off-by: Patrick Roy <roypat@amazon.co.uk>
Because we're storing dmesg in a local variable, if an exception occurs
while killing a microvm, python will end up printing the entirety of the
host dmesg output to stderr, because it dumps local variables as part of
the backtrace. This is fine in CI because instances are shortlived, but
when running tests locally, it takes my terminal multiple minutes to
catch up with the amount of text that ends up being printed.

Fix this by not storing dmesg in a local variable anymore, and instead
inline it to its only use-site.

Signed-off-by: Patrick Roy <roypat@amazon.co.uk>
@roypat roypat added the Status: Awaiting review Indicates that a pull request is ready to be reviewed label Feb 14, 2025
@codecov
Copy link

codecov bot commented Feb 14, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 83.21%. Comparing base (d6a14fb) to head (79f3a94).
Report is 3 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #5041   +/-   ##
=======================================
  Coverage   83.21%   83.21%           
=======================================
  Files         245      245           
  Lines       26626    26626           
=======================================
  Hits        22156    22156           
  Misses       4470     4470           
Flag Coverage Δ
5.10-c5n.metal 83.69% <ø> (ø)
5.10-m5n.metal 83.67% <ø> (ø)
5.10-m6a.metal 82.89% <ø> (ø)
5.10-m6g.metal 79.64% <ø> (ø)
5.10-m6i.metal 83.66% <ø> (ø)
5.10-m7g.metal 79.64% <ø> (ø)
6.1-c5n.metal 83.69% <ø> (ø)
6.1-m5n.metal 83.68% <ø> (ø)
6.1-m6a.metal 82.89% <ø> (ø)
6.1-m6g.metal 79.63% <ø> (ø)
6.1-m6i.metal 83.68% <ø> (ø)
6.1-m7g.metal 79.64% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@roypat roypat merged commit 6521be5 into firecracker-microvm:main Feb 17, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Status: Awaiting review Indicates that a pull request is ready to be reviewed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants