gazagnaire.org
Example mirage-eio unikernels
unikernels: synchronize firewall cram startup
Wait for the appliance startup marker, which follows frame-socket acquisition, before running the LAN peer. Surface the firewall log if the guest exits during startup.
author
Thomas Gazagnaire
date
(Jul 16, 2026, 10:04 PM UTC)
commit
0a93b6a2
0a93b6a2cd62331ccc00ed7754635e26b259c8e8
parent
b69c4243
b69c42432c82508325d7449b809e6dc673b999df
+10
-2
+10
-2
bin/apps/firewall/setup.sh
+10
-2
bin/apps/firewall/setup.sh
···
12
12
unikernel.exe --frame client=5801:5802 --frame uplink=5803:5804 >firewall.log 2>&1 &
13
13
fw_pid=$!
14
14
trap 'kill "$fw_pid" 2>/dev/null; wait "$fw_pid" 2>/dev/null' EXIT
15
-
# Give the appliance a moment to bind its frame sockets before driving it.
16
-
sleep 1
15
+
# The marker is printed after both frame devices have been acquired and their
16
+
# sockets bound. Do not drive the peer against an arbitrary startup delay.
17
+
until grep -q "firewall: forwarding" firewall.log 2>/dev/null; do
18
+
if ! kill -0 "$fw_pid" 2>/dev/null; then
19
+
cat firewall.log >&2
20
+
exit 1
21
+
fi
22
+
sleep 0.05
23
+
done
24
+
sleep 0.1