Skip to content

[ML] Reap child IPC dirs and fail closed on degraded seccomp - #3216

Closed
valeriy42 wants to merge 2 commits into
elastic:feature/sandbox2-pr-f-landlock-fallbackfrom
valeriy42:feature/sandbox2-pr-g-ipc-reap-seccomp
Closed

valeriy42 wants to merge 2 commits into
elastic:feature/sandbox2-pr-f-landlock-fallbackfrom
valeriy42:feature/sandbox2-pr-g-ipc-reap-seccomp

Conversation

@valeriy42

Copy link
Copy Markdown
Contributor

Summary

…nce exits

The controller removes $TMPDIR/ml-child-ipc/<deployment-id> once the bound
child exits or a spawn fails without a live pid, via CChildIpcDirectoryReaper
wired through the legacy tracker and Sandbox2 monitor.

Closes elastic#3214.
TERMINATE_ON_DEGRADED_SECCOMP_FAILURE is now true in CSystemCallFilter.h so
legacy and Landlock pytorch_inference launches exit before model IO when the
in-process filter cannot be installed.

Closes elastic#3213.
@valeriy42
valeriy42 requested a review from edsavage September 24, 2026 08:39
@valeriy42

Copy link
Copy Markdown
Contributor Author

Recreating with upstream head branch to match stack (#3215).

@valeriy42 valeriy42 closed this Sep 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant