mirrord

Changed

• Small optimization in file reads to avoid sending empty data
  #1254
• Changed internal proxy to close after 5s of inactivity instead of 1
• use Frida's replace_fast in Linux Go hooks

Fixed

• Child processes of python application would hang after a fork without an
  exec. #1588

Added

• Added new analytics, see TELEMETRY.md for more details.

Added

• Added Deployment to list of targets returnd from mirrord ls.
  #1503

Changed

• Bump rust nightly to 2023-04-19 (latest nightly with support for const std
  traits). #1457
• Change loglevel of warnings to info of logs that were mistakenly warning
• Moved IntelliJ to its own repository and versioning

Fixed

• Hook send_to and recv_from, leveraging our existing UDP interceptor mechanism
  to manually resolve DNS (as expected by netty, especially relevant for
  macos). #1458
• Add new rule to the OUTPUT chain of iptables in agent to support kubectl
  port-forward #1479
• If the local user application closes a socket but continues running, we now
  also stop mirroring/stealing from the target.
  #1530
• Add /home and /usr to the default file filter.
  #1582
• Fixed reporting EADDRINUSE as an error

Added

• Added listen_ports to incoming config to control what port is actually
  being used locally
  so mirrored/stolen ports can still be accessed locally via those. If port
  provided by listen_ports
  isn't available, application will receive EADDRINUSE.
  Example configuration:

  {
      "feature":
      {
          "incoming": {
              "listen_ports": [[80, 7111]]
          }
      }
  }
  

  will make port 80 available on 7111 locally, while stealing/mirroring port
  80. #1554

Changed

• Changed the logic of choosing local port to use for intercepting mirror/steal
  sockets
  now instead of assigning a random port always, we try to use the original one
  and if we fail we assign random port.
  This only happens if listen_ports isn't used.
  #1554
• The path /opt itself is read locally by default (up until now paths inside
  that directory were read locally by default, but not the directory itself).
  #1570
• Changed back required IntelliJ version to 222+ from 223+
• Moved VSCode extension to its own repository and versioning
  https://github.com/metalbear-co/mirrord-vscode

Fixed

• Running python with mirrord on apple CPUs.
  #1570

Added

• Add support for HTTP Path filtering
  #1512

Changed

• Refactor vscode-ext code to be more modular

Fixed

• Fixed bogus warnings in the VS Code extension.
  #1504
• Mirroring/stealing a port for a second time after the user application closed
  it once. #1526
• fixed using dotnet debugger on VSCode
  #1529
• Properly detecting and ignoring localhost port used by Rider's debugger.
• fix vscode SIP patch not working

Internal

• Remove frida openSSL dependency

Fixed

• Installation script now does not use sudo when not needed. This enbables
  installing mirrord in a RUN step in an ubuntu docker container, without
  installing sudo in an earlier step.
  #1514
• fix crio on openshift
  #1534
• Skipping gcc when debugging Go in VS Code extension.

Added

• Rider is now supported by the IntelliJ plugin.
  #1012

Fixed

• Changed agent to not return errors on reading from outgoing sockets, and
  layer to not crash in that case anyway

Changed

• Change phrasing on version mismatch warning.
• Add /Volumes to default local on macOS
• Change Ping interval from 60s down to 30s.
• Changed local read defaults - list now includes ^/sbin(/|$) and
  ^/var/run/com.apple.

Fixed

• Running postman with mirrord works.
  #1445
• Return valid error code when dns lookup fails, instead of -1.

Changed

• Never importing RUST_LOG environment variable from the cluster, regardless
  of configuration.

Fixed

• Provide helpful error messages on errors in IDEs.
  #1392
• Log level control when running targetless.
  #1446
• Change to sticky balloon on warnings in intelliJ
  #1456
• Setting the namespace via the configuration was not possible in the IDE
  without also setting a target in the configuration file.
  #1461
• fixed IntelliJ failing silently when error happened on listing pods

Added

• Changed agent's pause feature. Now the pause is requested dynamically by CLI
  during setup and the agent keeps the target container paused until exit or
  the unpause request was received.
  #1408
• Added support for NPM run configuration on JetBrains products.
  #1418

Changed

• Change mirrord ls to show only pods that are in running state (not
  crashing,starting,etc)
  #1436
• Change fs mode to be local with overrides when targetless is used
• Make progress text consitently lowercase.

Fixed

• Fix misalignment on IntelliJ not accepting complex path in target
  #1441
• Add impersonate permissions for GCP specific RBAC in operator

Added

• Support for targetless execution: when not specifying any target for the
  agent, mirrord now spins up an independent agent. This can be useful e.g. if
  you are just interested in getting the cluster's DNS resolution and outgoing
  connectivity but don't want any pod's incoming traffic or FS.
  #574
• Support for targetless mode in IntelliJ based IDEs.
  #1375
• Support for targetless mode in vscode.
  #1376

Changed

• If a user application tries to read paths inside mirrord's temp dir, we hook
  that and read the path outside instead.
  #1403
• Don't print error if we fail checking for operator

Fixed

• Added better detection for protected binaries, fixes not loading into Go
  binary #1397
• Disallow binding on the same address:port twice. Solves part of issue 1123.
  #1123
• Fix the lost update bug with config dropdown for intelliJ
  #1420
• Fix intelliJ compatability issue by implementing missing
  createPopupActionGroup

Added

• mirrord config dropdown for intelliJ.
  #1030
• Log agent version when initializing the agent.

Changed

• Remove quotes in InvalidTarget' target error message

Fixed

• Use ProgressManager for mirrord progress on intelliJ
  #1337
• Fixed go run failing because of reading remote files by maing paths under
  /private and /var/folders read locally by default.
  #1397
• Fix not loading into Go because of SIP by adding into default patched
  binaries

Fixed

• Fixed regression in GoLand and NodeJS causing a crash
  #1389

Added

• Last selected target is now remembered in IntelliJ extension and shown first
  in the target selection dialog.
  #1347
• Warn user when their mirrord version doesn't match the operator version.

Changed

• mirrord loading progress is displayed in the staus indicator on IntelliJ,
  replacing the singleton notifier
  #1337

Fixed

• Fix crash on unexpected LogMessage
  #1380
• Added hook for recvfrom to support cases where caller expects the messages to
  be from address they were sent to.
  #1386

Added

• Add a message informing users of the operator when they impersonate
  deployments with mirrord.
  #add-operator-message
• Last selected target is now remembered in VS Code and shown first in the
  quick pick widget.
  #1348

Fixed

• PyCharm plugin now detects pydevd debugger and properly excludes its port.
  #1020
• VS Code extension now detects debugpy debugger and properly excludes its
  port. #1145
• Fixed delve patch not working on GoLand macOS when running go tests
  #1364
• Fixed issues when importing some packages in Python caused by PYTHONPATH to
  be used from the remote pod (add it to exclude)

Changed

• Updated IntelliJ usage gif.

Fixed

• Add magic fix (by polling send_request) to (connection was not ready) hyper
  error. Also adds some more logs around HTTP stealer.
  #1302

Added

• Support for Node.js on IntelliJ - run/debug JavaScript scripts on IntelliJ
  with mirrord. #1284

Fixed

• Use RemoteFile ops in gethostname to not have a local fd.
  #1202

3.38.1 - 2023-04-19

Fixed

• Release action should work now.

Internal

• Add protobuf-compiler to rust docs action

3.38.0 - 2023-04-18

Added

• Add support for cri-o container runtime.
  #1258
• A descriptive message is now presented in the IntelliJ extension when no
  target is available. Listing targets failure is now handled and an error
  notification is presented.
  #1267
• Added waitlist registration via cli.
  Join the waitlist to try out first mirrord for Teams which is invite only at
  the moment. #1303
• Add email option to help messages.
  #1318

Changed

• When patching for SIP, use arm64 if possible (running on aarch64 and an arm64
  binary is available).
  #1155
• Changed our Discord invite link to https://discord.gg/metalbear

Fixed

• Change detour bypass to be more robust, not crashing in case it can't update
  the bypass #1320