mirrord

3.15.0

Added

• agent: Add support for k3s envs
• IntelliJ plugin - refactor, uses cli like vs code.

Changed

• cli now loads env, removes go env stuff at load, might fix some bugs there.

Fixed

• Create empty release to overcome temporary issue with VS Code marketplace publication

Fixed

• vscode ext: use process env for running mirrord. Fixes #854

Fixed

• layer + go - connect didn't intercept sometimes (we lacked a match). Fixes 851.

Changed

• cli: Set environment variables from cli to spawned process instead of layer when using mirrord exec.
• cli: use miette for nicer errors
• cli: some ext exec preparations, nothing user facing yet.
• vs code ext: use cli, fixes some env bugs with go and better user experience.

Please share experience using the VS Code extension.

Changed

• Don't add temp prefix when using extract command.
• VS Code extension: mirrord enable/disable to be per workspace.
• VS Code extension: bundle the resources
• Add /System to default ignore list.
• Remove test_mirrord_layer from CI as it's covered in integration testing.

Fixed

• fd leak on Linux when using libuv (Node). Caused undefined behavior. Fixes #757.

Misc

• Better separation in mirrord cli.

Changed

• Adjust filters - all directory filters also filter the directory itself (for when lstat/stating the directory).
  Added /Applications

Added

• Add mirrord ls which allows listing target path. Hidden from user at the moment, as for now it's meant for extension use only.

Changed

• Refactor e2e tests: split into modules based on functionality they test.
• internal refactor in mirrord-agent: Stealer feature changed from working per connection to now starting with
  the agent itself ("global"). Got rid of steal_worker in favor of a similar abstraction to what
  we have in sniffer.rs (TcpConnectionStealer that acts as the traffic stealing task, and
  TcpStealerApi which bridges the communication between the agent and the stealer task).
• Tests CI: don't wait for integration tests to start testing E2E tests.

Fixed

• Add missing fstat/lstat/fstatat/stat hooks.

Fixed

• Weird crash that started happening after Frida upgrade on macOS M1.

Fixed

• Fix asdf:
  • Add /tmp not just /tmp/ to exclusion.
  • Add .tool-version to exclusion.
  • fclose was calling close which doesn't flush.

Changed

• IntelliJ Plugin: downgrade Java to version 11.
• Disable progress in mirrord-layer - can cause issues with forks and generally confusing now
  that agent is created by cli (and soon to be created by IDE plugin via cli).
• Update to Frida 16.0.7
• Add more paths to the default ignore list (/snap and */.asdf/*) - to fix asdf issues.

Fixed

• Fix --fs-mode=local didn't disable hooks as it was supposed to.
• Fix hooking wrong libc functions because of lack of module specification - add function to resolve
  module name to hook from (libc on Unix,libsystem on macOS). Partially fixes asdf issue.

Added

• E2E test for pause feature with service that logs http requests and a service that makes requests.
• mirrord-layer: automatic operator discovery and connection if deployed on cluster. (Discovery can be disabled with MIRRORD_OPERATOR_ENABLE=false).

Changed

• Added /tmp/ to be excluded from file ops by default. Fixes #800.

Misc

• Reformatted a bit the file stuff, to make it more readable. We now have FILE_MODE instead of FILE_OPS_* internally.
• Changed fileops test to also test write override (mirrord mode is read and override specific path)

Added

• --pause feature (unstable). See #712.
• operator setup cli feature.
• mirrord-layer: operator connection that can be used instad of using kubernetes api to access agents.

Changed

• CI: cancel previous runs of same PR.
• cli: set canonical path for config file to avoid possible issues when child processes change current working directory.
• config: Refactor config proc macro and behavior - we now error if a config value is wrong instead of defaulting.
• layer: panic on error instead of exiting without any message.
• CI: don't run CI on draft PRs.
• Update dependencies.
• Update to clap v4 (cli parser crate).
• Started deprecation of fsmode=disabled, use fsmode=local instead.

Fixed

• Agent dockerfile: fix build for cross arch

Fixed

• release.yaml: Linux AArch64 for real this time. (embedded so was x64)

Changed

• Create agent in the cli and pass environment variables to exec'd process to improve agent re-use.
• IntelliJ: change default log level to warning (match cli/vscode).
• IntelliJ: don't show progress (can make some tests/scenarios fail).
• release.yaml: Build layer/cli with Centos 7 compatible glibc (AmazonLinux2 support).
• Change CPU/memory values requested by the Job agent to the lowest values possible.

Added

• MacOS: Support for executing SIP binaries in user applications. We hook execve
  and create a SIP-free version of the binary on-the-go and execute that instead of
  the SIP binary.
  This means we now support running bash scripts with mirrord also on MacOS.
  Closes #649.

Changed

• Only warn about invalid certificates once per agent.
• Reduce tokio features to needed ones only.

Fixed

• CI: Fix regex for homebrew formula
• Potentially ignoring write calls (fd < 2).
• CI: Fix release for linux aarch64. Fixes #760.
• Possible cases where we don't close fds correctly.

Fixed

• VS Code Extension: Fix crash when no env vars are defined in launch.json

Changed

• CLI: change temp lib file to only be created for new versions
• mirrord-config: refactored macro so future implementations will be easier

Fixed

• Release: fix homebrew release step

Fixed

• CI: fix release_gh zip file step

Changed

• CI: download shasums and add git username/email to make the homebrew release work.
• Remove unimplemented for some IO cases, we now return Unknown instead. Also added warning logs for these cases to track.
• Only recommend --accept-invalid-certificates on connection errors if not already set.
• Terminate user application on connection error instead of only stopping mirrord.