OXYGENHUB

Changes up to # 32fbe8980585 touching crates/flow/src/runner.rs · 35

See as swimlanes (independent work side by side)

Pin oxygen with keyless step 5 (grants, keyless signer)
Andy McCall ·
✔ fc2a6d1817c0
Keyless step 3, runner: sign receipts with a key the hub certifies per job
Andy McCall via Claude Code agent ·
✔ 35f7a849bcc5
Runner: a heartbeat while it has no room to claim
Andy McCall via Claude Code agent ·
✔ a4b3f8cb9aae
Artifacts between jobs: input { artifact "x" from "job"; path "/src/x" }
Andy McCall via Claude Code agent ·
✔ 46fe2c815cc3
Allow-listed egress over vsock: network "egress" { allow "host"... }
Andy McCall via Claude Code agent ·
✔ ea81796bb757
Claims say when each build cache was last kept
Andy McCall ·
✔ 1e6b9fb1e73f
feat(cache): unchanged sources keep their times; claims list the caches held (closes #52, refs #51)
Andy McCall ·
✔ 82cf6e91d398
feat(runner): restarts cost no job (closes #49, closes #50)
Andy McCall ·
✔ 89171fca079c
A build cache: disk mounts that carry a build forward
Andy McCall ·
✔ d60aac6c3f8a
Jetstream: runners share images peer to peer
Andy McCall ·
✔ b14aeaae683a
A job's finish carries its peak disk and memory newer-pipelinepush-uses-login
Andy McCall ·
✔ 8f211e20bea5
Runners send their facts with every claim: free disk, load, speed
Andy McCall ·
✔ 62829d15ef09
Images by hash: flow rootfs push and pull, and runners fetch what they lack
Andy McCall ·
✔ 4cf0c99a1486
Report outputs: a directory with report.toml, uploaded file by file with a manifest newer-pipelinepush-uses-login
Andy McCall ·
✔ 6d53fb7d00ec
Artifacts: when "always" keeps a failing job's report
Andy McCall ·
✔ 9a6fac2b40a9
A runner declines a job it cannot run
Andy McCall ·
✔ b11e30f5031d
The syscall tier: jobs without KVM
Andy McCall ·
✔ ea56c56eaf90
A runner offers only the tiers it can run
Andy McCall ·
✔ c5b702e59c1f
A runner tries a fetch again after a network hiccup
Andy McCall ·
✔ f53e6d47b56a
Architecture awareness: image manifests, arch on a sandbox, archs on the claim
Andy McCall ·
✔ 1abadd4a2fa6
Secrets mount as files: secret blocks, the claim's secrets, flow-init writes them
Andy McCall ·
✔ e2c125610f43
Stop a job when its run is cancelled
Andy McCall ·
✔ 280ef951d193
A runner tells the hub which jobs it holds at each claim (refs oxygenhub#71)
Andy McCall ·
✔ 1daca0b6bb8c
A runner's claim lists the rootfs images it holds (refs andymccall/oxygenhub#73)
Andy McCall ·
✔ 8c0a4e3a8a30
A job's result is kept until the hub has it (refs andymccall/oxygenhub#71)
Andy McCall ·
✔ 3007d8f011fa
Build identity in flow --version and runner reports
Andy McCall ·
✔ 2d025bbf9842
Register runners with a token; describe them in claims
Andy McCall ·
✔ f98a8f7881e0
Job artifacts: output declarations, extraction and upload
Andy McCall ·
✔ a67b97e9a717
Runners sign their receipts
Andy McCall ·
✔ 47c1d64dec8a
Sandbox env, and an image's own environment
Andy McCall ·
✔ a72abeeedd78
The runner tries hub requests again after server errors
Andy McCall ·
✔ 1b2229dab1a4
Guest /dev/fd links; jobs are told what they build
Andy McCall ·
✔ c4285535b03a
The runner runs up to max_jobs jobs at once within a memory and vCPU budget, asking the hub only for jobs that fit (a lone job may use the whole budget); preparing workspaces stays one at a time
Andy McCall ·
✔ bb643c252515
Pinned subrepos in job workspaces: the claim lists them, the runner fetches each with the job token and exports its pinned state at its path, inside the scope hash
Andy McCall ·
✔ c23d519168d8
OxygenFlow M0: pipeline parser and canonical job graph, receipts, the runner API types, flow-init, the Firecracker tier, flow check, run, rootfs import and runner
Andy McCall ·
✔ e0918b887850