feat(netvm): add waypipe support and cgroup/netns wrapping for chromebox

2026-10-05 13:41:05 -04:00
parent 4b92277686
commit ab7d1215e0
3 changed files with 51 additions and 8 deletions
@@ -10,6 +10,15 @@ netvm_names "$1"; TUID="$2"; TGID="$3"; THOME="$4"; shift 4
 [ "${1:-}" = "--" ]; shift
 RESOLV=/etc/netvm/resolv-warp.conf
 [ -f "$RESOLV" ] || echo "nameserver 1.1.1.1" > "$RESOLV"
-ip netns exec "$NETNS" env \
+
+EXEC_CMD=(ip netns exec "$NETNS" env \
  NETVM_RESOLV="$RESOLV" NETVM_UID="$TUID" NETVM_GID="$TGID" NETVM_HOME="$THOME" \
-  unshare --mount "$SCRIPT_DIR/netvm-enter-inner.sh" "$@"
+  unshare --mount "$SCRIPT_DIR/netvm-enter-inner.sh" "$@")
+
+if command -v systemd-run >/dev/null 2>&1; then
+  UNIT_NAME="netvm-${NODE}-$RANDOM"
+  exec systemd-run --scope -p MemoryMax=2G -p CPUQuota=200% --unit="$UNIT_NAME" "${EXEC_CMD[@]}"
+else
+  exec "${EXEC_CMD[@]}"
+fi
+