Skip to content

Update NVX runtime bundle to 0.2.0 #1724

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Huzaifa Danish (huzaifa-d) merged 1 commit into from
Nov 12, 2026
Merged

Update NVX runtime bundle to 0.2.0 #1724

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions docs/backends/nvx/nvx.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,9 +30,9 @@ From the repository root, build the executor:
build.bat --with-microvm
```

The `aci_edge_sandboxes` crate, pinned to `0.1.1` with `agent-bundled`,
The `aci_edge_sandboxes` crate, pinned to `0.1.2` with `agent-bundled`,
downloads and stages its own signed agent bundle. This version pins release
`v0.1.0-build188642429` (sandbox ABI 3, guest runtime ABI
`v0.2.0-build189870623` (sandbox ABI 3, guest runtime ABI
`microvm-abi-v2-edge-ramfs-v7`). Distribute the complete `aci-edge-sandboxes`
directory beside the executable, including its manifests, runtime binaries,
guest images, and provenance files. Do not substitute a standalone OpenVMM
Expand Down Expand Up @@ -127,7 +127,7 @@ The table describes this MXC integration, not every capability of NVX. The
signed agent limits workloads to one hour and constrains their working
directories and environments as described below. Refusal of UI, writable
stdin, and PTY operations are restrictions of this MXC integration.
The [signed-agent documentation](https://docs.rs/aci_edge_sandboxes/0.1.1/aci_edge_sandboxes/agent/)
The [signed-agent documentation](https://docs.rs/aci_edge_sandboxes/0.1.2/aci_edge_sandboxes/agent/)
describes its contract; the direct OpenVMM backend uses a different guest and
does not define the limits of this integration.

Expand Down
12 changes: 6 additions & 6 deletions src/Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion src/mxc-sdk/Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -96,7 +96,7 @@ hyperlight-unikraft = { version = "=0.21.0", default-features = false, optional
ureq = { version = "3", default-features = false, features = ["native-tls", "gzip"], optional = true }

[target.'cfg(all(target_os = "windows", target_arch = "x86_64"))'.dependencies]
aci_edge_sandboxes = { version = "=0.1.1", default-features = false, features = ["agent-bundled"], optional = true }
aci_edge_sandboxes = { version = "=0.1.2", default-features = false, features = ["agent-bundled"], optional = true }

[target.'cfg(target_os = "windows")'.dependencies]
tracelogging.workspace = true
Expand Down
6 changes: 3 additions & 3 deletions src/mxc-sdk/src/backends/nvx/signature_verification.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,10 +33,10 @@ const FILE_SHARE_WRITE: u32 = 2;
const FILE_ATTRIBUTE_REPARSE_POINT: u32 = 0x400;
const FILE_FLAG_OPEN_REPARSE_POINT: u32 = 0x0020_0000;
const FILE_FLAG_BACKUP_SEMANTICS: u32 = 0x0200_0000;
// SHA256SUMS from the independently approved v0.1.0-build188642429 archive.
// Its archive SHA-256 is cad4db7c574a73aaa1c5a07e7a740cd2b01d5b83c62c81b2196d63bad9ecc126.
// SHA256SUMS from the independently approved v0.2.0-build189870623 archive.
// Its archive SHA-256 is 35de02f4d7decf840f336111b19dc04d36522629b965615bddf5865ea374f704.
const APPROVED_CHECKSUMS_SHA256: &str =
"24d6fcbd2fc22b7618045680c6313db74de3129872c170c25316c12c20145c29";
"3df1cd2384764d428902d49c7fa6ad505629298387efae36dab8fe42b954b552";

/// Keeps the checked files from being overwritten or deleted while the runtime uses them.
#[derive(Debug)]
Expand Down
Loading