sergio
b83d40a833
Rename batch de la Fase A del PLAN_MACRO: - 25 crates ente-* → arje-* (protocol/init/runtime/compat). El linaje arje (init Linux) queda con prefijo coherente. - vista → revista (revista-core + revista-web). - pluma → fana (fana-md + fana-md-reader-web). fana absorbe el linaje markdown de pluma; será el writer DAG editor (prioridad alta). Cambios: - git mv de 29 crate dirs + 2 SDDs - package/lib/bin names + path refs + imports .rs reescritos - workspace Cargo.toml + comentarios de sección - SDDs de init/runtime/compat/protocol actualizados a arje- - SDD de revista + SDD de fana (reescrito: writer DAG editor) - docs/STATUS.md, ROADMAP.md, PLAN_MACRO.md, arje-boot.md, arje-replace-systemd.md actualizados - docs/changelog/akasha.md → chasqui.md scripts/rename-fase-a.py idempotente (--dry-run soportado). cargo check --workspace verde. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
45 lines
1.4 KiB
Rust
45 lines
1.4 KiB
Rust
use std::path::PathBuf;
|
|
|
|
#[derive(Debug, thiserror::Error)]
|
|
pub enum IncarnateError {
|
|
#[error("namespace `{ns}` requires CAP_SYS_ADMIN or CLONE_NEWUSER (neither available)")]
|
|
NamespaceCapMissing { ns: &'static str },
|
|
|
|
#[error("user namespaces blocked by sysctl kernel.unprivileged_userns_clone=0")]
|
|
UserNsDisabledBySysctl,
|
|
|
|
#[error("user namespaces restricted by LSM (apparmor/selinux)")]
|
|
UserNsRestrictedByLsm,
|
|
|
|
#[error("cgroup path `{path}` is not writable (delegation missing?)")]
|
|
CgroupNotWritable { path: PathBuf },
|
|
|
|
#[error("payload is not executable in this incarnation path (Wasm/Virtual not supported here)")]
|
|
NonExecutablePayload,
|
|
|
|
#[error("clone(2) failed: {0}")]
|
|
Clone(#[source] nix::errno::Errno),
|
|
|
|
#[error("pipe2(2) failed: {0}")]
|
|
Pipe(#[source] nix::errno::Errno),
|
|
|
|
#[error("post-clone setup: {0}")]
|
|
PostClone(#[source] anyhow::Error),
|
|
|
|
#[error(transparent)]
|
|
Io(#[from] std::io::Error),
|
|
|
|
#[error("invalid argv: contains NUL byte")]
|
|
InvalidArgv,
|
|
}
|
|
|
|
/// Cuando `strict_caps = false`, errores no-fatales se reportan como
|
|
/// `Degradation` y la encarnación continúa con menos aislamiento del pedido.
|
|
#[derive(Debug, Clone)]
|
|
pub enum Degradation {
|
|
NamespaceSkipped { ns: &'static str },
|
|
CgroupSkipped { path: PathBuf, reason: String },
|
|
CpuAffinitySkipped { reason: String },
|
|
UidMapFailed { reason: String },
|
|
}
|