OxygenFlow's own pipeline: layout, notes, size and isolation checks, then a summary, in microVMs on Earth f29b88af0d9b

# What the job can see of the machine (docs/m0.md §2).

echo "kernel: $(uname -r), cpus: $(nproc), user: $(id -u)"

echo "interfaces: $(tail -n +3 /proc/net/dev | cut -d: -f1 | tr -d ' ' | tr '\n' ' ')"

if wget -q -T 3 -O /dev/null http://1.1.1.1 2>/dev/null; then echo "network reachable: not isolated" >&2; exit 1; fi

echo "no network"

if touch /etc/flow-probe 2>/dev/null; then echo "rootfs writable" >&2; exit 1; fi

echo "rootfs read-only"

# The workspace has the crates and documents it should.

for f in Cargo.toml docs/m0.md crates/flow-core/src/pipeline.rs crates/flow-init/src/main.rs crates/flow/src/microvm.rs; do

    test -f "$f" || { echo "missing: $f" >&2; exit 1; }

    echo "found $f"

done

# Lines of Rust per crate.

for c in crates/*/; do

    n=$(find "$c" -name '*.rs' -exec cat {} + | wc -l)

    printf '%-24s %6d lines\n' "$c" "$n"

done

echo "$PROJECT: every check passed on this state."

# Notes left in the code, for the log (they do not fail the job).

n=$(grep -rn -E 'TODO|FIXME|XXX' crates | wc -l)

echo "$n TODO/FIXME notes in crates/"

grep -rn -E 'TODO|FIXME|XXX' crates | head -20 || true

// OxygenFlow's own pipeline (docs/m0.md). Runs in Firecracker microVMs on

// Earth for every push to a bookmark; see the Flow tab on OxygenHub.

schema-version 1

sandbox "alpine" {

    runtime "microvm"

    // Alpine 3.24.2 minirootfs, imported on Earth with `flow rootfs import`.

    rootfs "cas://blob/e95d22fb2380b67193f2640a12c2f8c7bae485f6fd14330bdb0c7157faa588dc"

    memory-limit "256MiB"

    cpu-limit 1

    network "isolated"

}

job "layout" {

    sandbox "alpine"

    exec "sh" "-eu" ".flow/jobs/layout.sh"

}

job "todos" {

    sandbox "alpine"

    scope "crates/**"

    exec "sh" "-eu" ".flow/jobs/todos.sh"

}

job "size" {

    sandbox "alpine"

    scope "crates/**"

    exec "sh" "-eu" ".flow/jobs/size.sh"

}

job "isolation" {

    sandbox "alpine"

    exec "sh" "-eu" ".flow/jobs/isolation.sh"

}

job "summary" {

    sandbox "alpine"

    depends-on "layout" "todos" "size" "isolation"

    env {

        PROJECT "OxygenFlow"

    }

    exec "sh" "-eu" ".flow/jobs/summary.sh"

}