mirrord

Added

• Added templating for mirrord config using Tera engine.
  #1817

Fixed

• Running mix works now (bug was calling lstat in stat bypass).
  #1967
• Fix progress message shows wrong latest version
  #1972

Removed

• Remove spammy messages from progress
  #1934

Added

• Added the ability to specify targetless in config file, to allow
  non-interactive targetless in IDEs
  #1962

Changed

• Change targetless + steal mode to warning instead of error.
• Changed file filter to exclude jar files from being read remote by default
  #1968

Fixed

• Fixes selecting container to use when using operator

Added

• New subcommand for generating shell completions for
  bash/fish/zsh/powershell/elvish
  #1947

Fixed

• Fix mirrord-cli verify-config command not serializing failures correctly due
  to serde not being able to serialize newtype pattern in tagged unions.
  #1840

Added

• Add new command mirrord verify-config [path] to the mirrord-cli. It
  verifies a mirrord config file producing a tool friendly output.
  #1840

Fixed

• Support mirroring existing sessions by introducing an HTTP check when the
  sniffer receives a tcp packet.
  #1317

Added

• Added support for pausing ephemeral containers. This feature requires the
  agent to have privileged access.
  #1358

Changed

• Add ruby related ENV to the default exclude list

Changed

• Add ruby related ENV to the default exclude list

Fixed

• Fixed connecting to unspecified ip i.e 0.0.0.0
  #1928

Changed

• Add some Ruby env to excluded: GEM_HOME, GEM_PATH
  #1892

Fixed

• Disable opendir hook on aarch macOS since it crashes due to arm64e issues
  #1920

Added

• Add hooks for opendir, readdir64_r, __lxstat, __lxstat64,
  __xstat64. Also contains a refactor of the *stat family of hooks (they
  now call a shared function), and openat64 as its own function.
  #1899

Changed

• CLI: Change operator setup to fetch from API version of operator to install
• Don't error on agent ready missing absent, add retry in connection to
  upstream agent

Fixed

• Fixed agent crashing on flush connections not enabled
  #1904
• CI: run macOS clippy on all of the codebase
• Fixed pause flakiness by improving our cleanup process [using watch]

Changed

• Changed the targeted and non targeted flows for creating agent.
  #1844
• Add info about errors to TELEMETRY.md

Fixed

• Change agent to use current thread runtime, multi thread is enabled by
  mistake.
  • Added a sleep before exiting both in layer and agent to allow
    tokio::spawn tasks spawned from Drop finish.
  • Changed implementation of pause guard to use tokio::spawn - fixes pause
    in combination with above change.
• Fix analytics not being sent on drop

Fixed

• Remove extra message of {"type":"FinishedTask","name":"mirrord preparing to launch","success":true,"message":null} that causes breakage in extensions.

Added

• Warn when running in a mesh service with mirror mode.
  #1768

Fixed

• Fixed detecting operator not found as an error
  #1868
• Update hyper and hyper-util to fix double select call (and properly handle
  large http traffic).
  #1869
• Fixed ongoing connections not being stolen by changing our flush mechanism -
  add a rule to drop marked connections and then mark existing connections when
  starting to steal.
  #1870
• Fixed panic on crash analytics
  #1872
• Fixed showing error on each file not found triggered by the file not found
  configuration
• Regex meta characters are now escaped in $HOME (not-found file filter).

Added

• Add the ability to send analytics on errors and not only on successful runs.
  #1785
• Report back internal proxy error stream to cli
  #1855

Changed

• Changed config unstable/deprecations to be aggregated with other config
  warnings #1860

Fixed

• not-found file filter fixed to only match files inside the $HOME
  directory. #1863
• Fix openshift detection taking too long by querying a subset instead of all
  APIs

Added

• Add analytics collection to operator session information.
  #1805
• Added an extra not-found file filter to improve experience when using cloud
  services under mirrord.
  #1694

Changed

• Update telemetry.md with new info about mirrord for Teams
  #1837
• Changed keep alive to happen from internal proxy to support cases where layer
  process is stuck [breakpoint/etc]
  #1839
• Changed CLI progress to print warnings and not only set it as the last
  message of progress
• Changed config verify to return aggregated warnings list for user to print
  instead of warn in current progress - can fix issues with extension where we
  printed to stderr.

Fixed

• Fix ephemeral agent creation api using agent namespace instead of target.
  Add note about agent namespace being irrelevant in ephemeral.
• Fix macOS SIP potential issues from exec having mirrord loaded into the code
  sign binary.
• Fix operator setup so MIRRORD_OPERATOR_IMAGE will function properly.
• Fixed issue connecting to ephemeral container when target is in different
  namespace

3.61.0 - 2023-08-22

Added

• Support DNS resolution for the outgoing filter config.
  #702

Fixed

• Fixed wrong errno being set by mirrord, fixing various flows that rely on
  errno even when return code is ok
  #1828

3.60.0 - 2023-08-21

Added

• Detect and warn when cluster is openshift
  #1560
• Add missing hook for open64, fixing certificate loading on C# + Linux
  #1815
• Small changes relevant to operator for #1782.

Fixed

• Fixed environment on ephemeral container
  This is done by two things:

  1. There was an issue where we used self instead of 1 to obtain env based
     on pid.
  2. We didn't have container runtime to use for fetching, so now we also copy
     env from the original pod spec and set it to ours.
     #1818

Added

• Add option to run agent container as privileged - "agent" : {"privileged": true}
  Should help with Bottlerocket or other secured k8s environments.
  Applicable for both job/ephemeral.
  #1806

Fixed

• Send only ResponseError::DnsLookup for all errors during DNS lookups
  #1809

Added

• Introduced hooks for sendmsg and recvmsg, so mongodb+srv protocol (Csharp)
  may resolve DNS (implementation follows previous sendto and recvfrom patch).
  #1776

Fixed

• Fixed more complicated scenarios using Go on Linux Arm

Internal

• Add nodes and pods/log resource permissions to mirrord-operator
  ClusterRole.

3.57.0 - 2023-08-15

Added

• Add hooks for Go 1.19 >= on Linux Arm
  #563
• Add node allocatabillity check to prevent OutOfPods error on agent job.
  #1782

Changed

• Incoming config now supports off mode, which is also used when "incoming": "off".
  When incoming is off, listen requests go through.
  Changed targetless to warn on listen, since bind can happen on outgoing
  sockets as well.

Fixed

• Replaced termspin with indicatif, fix multi line issues and refactored
  progress. #1664

Fixed

• Add missing hook for read$NOCANCEL, fixes reading remote files in some
  scenarios. #1747