nixbot

builds
sign in

fosskar/fencr build #51 succeeded

branch main · PR #48 · commit d68dec8908 · · took 30s · eval 28s

eval warnings 2 kinds · 3 occurrences
  • warn fencr.vms: smt is on, so a guest shares a core with the host and every other vm, where a cross-thread side channel reads what the vm boundary does not stop; set boot.kernelParams = [ "nosmt" ] to take Firecracker's tenant-separation guidance, at the cost of the second thread of every core. ×2
  • warn fencr.vms: swap without randomEncryption (/dev/sda2) can hold guest memory on disk; enable swapDevices.*.randomEncryption or use zramSwap. ×1

2 succeeded ⚠ 1
checks.x86_64-linux.nixos-module
  • fencr.vms: swap without randomEncryption (/dev/sda2) can hold guest memory on disk; enable swapDevices.*.randomEncryption or use zramSwap.
  • fencr.vms: smt is on, so a guest shares a core with the host and every other vm, where a cross-thread side channel reads what the vm boundary does not stop; set boot.kernelParams = [ "nosmt" ] to take Firecracker's tenant-separation guidance, at the cost of the second thread of every core.
 2s
checks.x86_64-linux.formatting 1s
6 already built ⚠ 1
checks.x86_64-linux.nixos-boot
  • fencr.vms: smt is on, so a guest shares a core with the host and every other vm, where a cross-thread side channel reads what the vm boundary does not stop; set boot.kernelParams = [ "nosmt" ] to take Firecracker's tenant-separation guidance, at the cost of the second thread of every core.
 —
checks.x86_64-linux.cli —
checks.x86_64-linux.core —
checks.x86_64-linux.egress —
checks.x86_64-linux.mcp-gateway —
checks.x86_64-linux.mcp-module —

Effect checks dependencies built, not run

schedule.update-flake-inputs.update-flake-inputs 1s