nixbot

builds
sign in

fosskar/fencr build #52 succeeded

branch main · commit f45a8b6c7f · · took 16s · eval 15s

eval warnings 2 kinds · 3 occurrences
  • warn fencr.vms: smt is on, so a guest shares a core with the host and every other vm, where a cross-thread side channel reads what the vm boundary does not stop; set boot.kernelParams = [ "nosmt" ] to take Firecracker's tenant-separation guidance, at the cost of the second thread of every core. ×2
  • warn fencr.vms: swap without randomEncryption (/dev/sda2) can hold guest memory on disk; enable swapDevices.*.randomEncryption or use zramSwap. ×1

1 succeeded
loading…
7 already built ⚠ 2
checks.x86_64-linux.nixos-boot
  • fencr.vms: smt is on, so a guest shares a core with the host and every other vm, where a cross-thread side channel reads what the vm boundary does not stop; set boot.kernelParams = [ "nosmt" ] to take Firecracker's tenant-separation guidance, at the cost of the second thread of every core.
 —
checks.x86_64-linux.nixos-module
  • fencr.vms: swap without randomEncryption (/dev/sda2) can hold guest memory on disk; enable swapDevices.*.randomEncryption or use zramSwap.
  • fencr.vms: smt is on, so a guest shares a core with the host and every other vm, where a cross-thread side channel reads what the vm boundary does not stop; set boot.kernelParams = [ "nosmt" ] to take Firecracker's tenant-separation guidance, at the cost of the second thread of every core.
 —
checks.x86_64-linux.cli —
checks.x86_64-linux.core —
checks.x86_64-linux.egress —
checks.x86_64-linux.mcp-gateway —
checks.x86_64-linux.mcp-module —

Effect checks dependencies built, not run

schedule.update-flake-inputs.update-flake-inputs 1s