Connect your local process and your cloud environment, and run local code in cloud conditions.
MIT License
Bot releases are visible (Hide)
Published by eyalb181 almost 2 years ago
MIRRORD_AGENT_NETWORK_INTERFACE
environment variable/file config to let user control which network interface to use. Workaround for #670.deprecated
and unstable
tags to MirrordConfg macro for messaging user when using said fieldsPublished by aviramha almost 2 years ago
unwrap
from initialization functions./home
locally by default (for real this time).Full Changelog: https://github.com/metalbear-co/mirrord/compare/3.7.3...3.8.0
Published by eyalb181 almost 2 years ago
Published by eyalb181 almost 2 years ago
Published by eyalb181 almost 2 years ago
mirrord-schema.json
file that contains docs and types which should help the user write their mirrord config files. This file has to be manually generated (there is a test to help you remember).schema
feature out of feature flag (now it's always on).Published by eyalb181 almost 2 years ago
/home
to default file exclude list.Bypassing operation...
from warning to trace.Published by eyalb181 almost 2 years ago
Published by eyalb181 almost 2 years ago
Published by eyalb181 almost 2 years ago
FileFilter
that allows the user to include or exclude file paths (with regex support) for file operations.--
.fs
works: now it supports 2 modes Simple
and Advanced
, where Simple
is similar to the old behavior (enables read-only, read-write, or disable file ops), and Advanced
allows the user to specify include and exclude (regexes) filters for FileFilter
.README
and update it for --target
flag.--pod-name
, --pod-namespace
, --impersonated_container_name
have been removed in favor of --target
, --target-namespace
Published by aviramha almost 2 years ago
/Users
and /Library
to path to ignore for file operations to improve UX on macOS./var/run/..
for service account credentials. In many machines, /var/run
is symlink to /run
so we were using /run/..
instead of /proc/{target_pid}/root/run
.Published by eyalb181 almost 2 years ago
ERROR
from DEBUG
/run/dockershim.sock
instead of the default containerd path. Add new path as fallback.Published by eyalb181 almost 2 years ago
-s
and -x
wildcard matching, now supports PREFIX_*
, *_SUFFIX
, ect.JAVA_HOME
,HOMEPATH
,CLASSPATH
,JAVA_EXE
as it's usually runtime that you don't want from remote. Possibly fixes issue discussed on Discord (used complained that they had to use absolute path and not relative).jvm.cfg
to default bypass for files.connection::handle_error
.--pod-namespace
argument, closes--impersonated-container-name
and MIRRORD_IMPERSONATED_CONTAINER_NAME
are--target
or MIRRORD_IMPERSONATED_TARGET
--pod-namespace
and MIRRORD_AGENT_IMPERSONATED_POD_NAMESPACE
are deprecated in--target-namespace
and MIRRORD_TARGET_NAMESPACE
Published by eyalb181 almost 2 years ago
Published by eyalb181 about 2 years ago
Published by eyalb181 about 2 years ago
Published by eyalb181 about 2 years ago
pwrite
hook (used by dotnet
);-target deployment/deployment_name/container/container_name
flag to run on a specific container./nix/*
path is now ignored for file operations to support NixOS.deploy
for deployment
in target argument.pread
hook (used by dotnet
);--target
or MIRRORD_IMPERSONATED_TARGET
, closes [#392]connect
) is successfully intercepted and forwarded.MIRRORD_SKIP_PROCESSES
to provide a list of comma separated processes to not to load into.connect
: ignore localhost and ports 50000 - 60000 (reserved for debugger)IGNORE_REGEX
, refer [#350].error!
to trace!
.sh
to skipped list.getaddrinfo
now uses trust-dns-resolver
when resolving DNS (previously it would do a getaddrinfo
call in mirrord-agent that could result in incompatibility between the mirrored pod and the user environments).dd
.connect
returning error when called on UDP sockets and thetokio::time:timeout
to TcpStream::connect
, fixes golang issue where sometimes it would get stuck attempting to connect on IPv6.connect
fails back to the hook (previously we were handling these as errors in layer, so connect
had slightly wrong behavior).write_detur
is called to stdout/stderrpresented server name type wasn't supported
error when Kubernetes server has IP for CN in certificate. [#388]connect
fails back to the hook (previously we were handling these as errors in layer, so connect
had slightly wrong behavior).requests
specifications to avoid being defaulted to high values. See #579.pod_api.rs
to be more maintainble.EAFNOSUPPORT
error reporting (valid scenario).dotnet
files to IGNORE_FILES
regex set;Detour
type for use in the ops
modules instead of HookResult
. This type supports returning a Bypass
to avoid manually checking if a hook actually failed or if we should just bypass it;read
operation;integration
to http_mirroring
since there aree2e_macos
CI job.pcap
dependency with our own rawsocket
to make cross compiling faster and easier.info
level instead of error
because having a file not found, connection failed, etc can be part of a valid successful flow.tracing::instrument
from *_detour
functions.connect
.connect
function to be less bloated..dockerignore
now ignores more useless files (reduces mirrord-agent image build time, and size).tracing::instrument
for the outgoing traffic feature.IndexAllocator
now uses ConnectionId
for outgoing traffic feature.tracing::instrument
from go_env::goenvs_unix_detour
.tracing::instrument
to improve logs.go-e2e
test, call os.Exit
instead fo sending SIGINT
to the process.--pod-name
or MIRRORD_AGENT_IMPERSONATED_POD_NAME
is deprecated in favor of --target
or MIRRORD_IMPERSONATED_TARGET
Published by aviramha about 2 years ago
sh
to skipped list.Full Changelog: https://github.com/metalbear-co/mirrord/compare/3.0.21-alpha...3.0.22-alpha