@@ -1,5 +1,5 @@
1−use crate::instance::STATUS_FILE_NAME;
2use crate::session_manager::{GLOBAL_CACHE_DIR_NAME, INSTANCE_DIR_NAME};
1use crate::session_manager::{GLOBAL_CACHE_DIR_NAME, INSTANCE_DIR_NAME};
2+use anyhow::{Context, Error, Result, bail};
5 io::{self, Write},
5 io::{self, Write},
@@ -23,6 +23,7 @@ use std::{
25use block2::RcBlock;
25use block2::RcBlock;
26+use bytesize::ByteSize;
26use dispatch2::DispatchQueue;
27use dispatch2::DispatchQueue;
27use objc2::{AnyThread, rc::Retained, runtime::ProtocolObject};
28use objc2::{AnyThread, rc::Retained, runtime::ProtocolObject};
28use objc2_foundation::*;
29use objc2_foundation::*;
@@ -32,75 +33,46 @@ const DEBIAN_COMPRESSED_DISK_URL: &str = "https://cloud.debian.org/images/cloud/
32const DEBIAN_COMPRESSED_SHA: &str = "6ab9be9e6834adc975268367f2f0235251671184345c34ee13031749fdfbf66fe4c3aafd949a2d98550426090e9ac645e79009c51eb0eefc984c15786570bb38";
33const DEBIAN_COMPRESSED_SHA: &str = "6ab9be9e6834adc975268367f2f0235251671184345c34ee13031749fdfbf66fe4c3aafd949a2d98550426090e9ac645e79009c51eb0eefc984c15786570bb38";
33const DEBIAN_COMPRESSED_SIZE_BYTES: u64 = 280901576;
34const DEBIAN_COMPRESSED_SIZE_BYTES: u64 = 280901576;
34const SHARED_DIRECTORIES_TAG: &str = "shared";
35const SHARED_DIRECTORIES_TAG: &str = "shared";
36+pub const PROJECT_GUEST_BASE: &str = "/usr/local/vibebox-mounts";
36−const BYTES_PER_MB: u64 = 1024 * 1024;
37−const DEFAULT_CPU_COUNT: usize = 2;
38−const DEFAULT_RAM_MB: u64 = 2048;
39−const DEFAULT_RAM_BYTES: u64 = DEFAULT_RAM_MB * BYTES_PER_MB;
40const START_TIMEOUT: Duration = Duration::from_secs(60);
38const START_TIMEOUT: Duration = Duration::from_secs(60);
41const LOGIN_EXPECT_TIMEOUT: Duration = Duration::from_secs(120);
39const LOGIN_EXPECT_TIMEOUT: Duration = Duration::from_secs(120);
40+const PROVISION_EXPECT_TIMEOUT: Duration = Duration::from_secs(900);
43−struct StatusFile {
42+const ERROR_REPORT_SCRIPT: &str = include_str!("error_report.sh");
49− fn new(path: PathBuf) -> Self {
52− cleared: AtomicBool::new(false),
56− fn update(&self, message: &str) {
57− let _ = fs::write(&self.path, message);
61− if !self.cleared.swap(true, Ordering::SeqCst) {
62− let _ = fs::remove_file(&self.path);
67−impl Drop for StatusFile {
69− if !self.cleared.load(Ordering::SeqCst) {
70− let _ = fs::remove_file(&self.path);
71− self.cleared.store(true, Ordering::SeqCst);
75const PROVISION_SCRIPT: &str = include_str!("provision.sh");
43const PROVISION_SCRIPT: &str = include_str!("provision.sh");
76−const PROVISION_SCRIPT_NAME: &str = "provision.sh";
77const RESIZE_DISK_SCRIPT: &str = include_str!("resize_disk.sh");
44const RESIZE_DISK_SCRIPT: &str = include_str!("resize_disk.sh");
78const DEFAULT_RAW_NAME: &str = "default.raw";
45const DEFAULT_RAW_NAME: &str = "default.raw";
79const INSTANCE_RAW_NAME: &str = "instance.raw";
46const INSTANCE_RAW_NAME: &str = "instance.raw";
80const BASE_DISK_RAW_NAME: &str = "disk.raw";
47const BASE_DISK_RAW_NAME: &str = "disk.raw";
82#[derive(Clone)]
49#[derive(Clone)]
83−pub(crate) enum LoginAction {
50+pub enum LoginAction {
84− Expect { text: String, timeout: Duration },
53+ timeout: Duration,
85 Send(String),
60 Send(String),
62+use crate::config::BoxConfig;
87use LoginAction::*;
63use LoginAction::*;
89#[derive(Clone)]
65#[derive(Clone)]
90−pub(crate) struct DirectoryShare {
66+pub struct DirectoryShare {
91 host: PathBuf,
67 host: PathBuf,
92 guest: PathBuf,
68 guest: PathBuf,
93 read_only: bool,
69 read_only: bool,
96impl DirectoryShare {
72impl DirectoryShare {
99− mut guest: PathBuf,
73+ pub fn new(host: PathBuf, mut guest: PathBuf, read_only: bool) -> Result<Self> {
101− ) -> Result<Self, Box<dyn std::error::Error>> {
102 if !host.exists() {
74 if !host.exists() {
103− return Err(format!("Host path does not exist: {}", host.display()).into());
75+ bail!(format!("host path does not exist: {}", host.display()));
105 if !guest.is_absolute() {
77 if !guest.is_absolute() {
106 guest = PathBuf::from("/root").join(guest);
78 guest = PathBuf::from("/root").join(guest);
@@ -112,10 +84,10 @@ impl DirectoryShare {
115− pub(crate) fn from_mount_spec(spec: &str) -> Result<Self, Box<dyn std::error::Error>> {
87+ pub fn from_mount_spec(spec: &str) -> Result<Self> {
116 let parts: Vec<&str> = spec.split(':').collect();
88 let parts: Vec<&str> = spec.split(':').collect();
117 if parts.len() < 2 || parts.len() > 3 {
89 if parts.len() < 2 || parts.len() > 3 {
118− return Err(format!("Invalid mount spec: {spec}").into());
90+ bail!(format!("invalid mount spec: {spec}"));
120 let host = expand_tilde_path(parts[0]);
92 let host = expand_tilde_path(parts[0]);
121 let guest = PathBuf::from(parts[1]);
93 let guest = PathBuf::from(parts[1]);
@@ -124,11 +96,10 @@ impl DirectoryShare {
124 "read-only" => true,
96 "read-only" => true,
125 "read-write" => false,
97 "read-write" => false,
127− return Err(format!(
99+ bail!(format!(
128 "Invalid mount mode '{}'; expected read-only or read-write",
100 "Invalid mount mode '{}'; expected read-only or read-write",
@@ -172,19 +143,28 @@ pub struct VmArg {
172 pub mounts: Vec<String>,
143 pub mounts: Vec<String>,
146+type StatusEmitter<'a> = dyn Fn(&str) + std::marker::Send + Sync + 'a;
148+fn emit_status(status: Option<&StatusEmitter<'_>>, message: &str) {
149+ if let Some(status) = status {
175−pub fn run_with_args<F>(args: VmArg, io_handler: F) -> Result<(), Box<dyn std::error::Error>>
154+pub fn run_with_args<F>(args: VmArg, io_handler: F) -> Result<()>
177 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
156 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
179− run_with_args_and_extras(args, io_handler, Vec::new(), Vec::new())
158+ run_with_args_and_extras(args, io_handler, Vec::new(), Vec::new(), None)
182−pub(crate) fn run_with_args_and_extras<F>(
161+pub fn run_with_args_and_extras<F>(
183 args: VmArg,
162 args: VmArg,
184 io_handler: F,
163 io_handler: F,
185 extra_login_actions: Vec<LoginAction>,
164 extra_login_actions: Vec<LoginAction>,
186 extra_directory_shares: Vec<DirectoryShare>,
165 extra_directory_shares: Vec<DirectoryShare>,
187−) -> Result<(), Box<dyn std::error::Error>>
166+ status: Option<&StatusEmitter<'_>>,
189 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
169 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
@@ -193,7 +173,7 @@ where
193 let project_root = env::current_dir()?;
173 let project_root = env::current_dir()?;
194 let project_name = project_root
174 let project_name = project_root
195 .file_name()
175 .file_name()
196− .ok_or("Project directory has no name")?
176+ .with_context(|| "Project directory has no name")?
197 .to_string_lossy()
177 .to_string_lossy()
198 .into_owned();
178 .into_owned();
@@ -205,8 +185,10 @@ where
205 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
185 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
207 let instance_dir = project_root.join(INSTANCE_DIR_NAME);
187 let instance_dir = project_root.join(INSTANCE_DIR_NAME);
208− let status_file = StatusFile::new(instance_dir.join(STATUS_FILE_NAME));
188+ fs::create_dir_all(&instance_dir)?;
209− status_file.update("preparing VM image...");
189+ emit_status(status, "preparing VM image...");
190+ tracing::info!("preparing VM image...");
191+ let provision_log = instance_dir.join("provision.log");
211 let basename_compressed = DEBIAN_COMPRESSED_DISK_URL.rsplit('/').next().unwrap();
193 let basename_compressed = DEBIAN_COMPRESSED_DISK_URL.rsplit('/').next().unwrap();
212 let base_compressed = cache_dir.join(basename_compressed);
194 let base_compressed = cache_dir.join(basename_compressed);
@@ -230,13 +212,14 @@ where
230 &base_compressed,
212 &base_compressed,
231 &default_raw,
213 &default_raw,
232 std::slice::from_ref(&mise_directory_share),
214 std::slice::from_ref(&mise_directory_share),
233− Some(&status_file),
215+ Some(&provision_log),
235 let _ = ensure_instance_disk(
218 let _ = ensure_instance_disk(
236 &instance_raw,
219 &instance_raw,
237 &default_raw,
220 &default_raw,
238− args.disk_bytes,
221+ ByteSize(args.disk_bytes),
239− Some(&status_file),
222+ status,
241 let base_size = fs::metadata(&default_raw)?.len();
224 let base_size = fs::metadata(&default_raw)?.len();
242 let instance_size = fs::metadata(&instance_raw)?.len();
225 let instance_size = fs::metadata(&instance_raw)?.len();
@@ -247,7 +230,8 @@ where
247 let mut directory_shares = Vec::new();
230 let mut directory_shares = Vec::new();
249 if !args.no_default_mounts {
232 if !args.no_default_mounts {
233+ let project_guest_dir = PathBuf::from(PROJECT_GUEST_BASE).join(project_name);
250− login_actions.push(Send(format!("cd {project_name}")));
234+ login_actions.push(Send(format!("cd {}", project_guest_dir.display())));
252 // discourage read/write of .git folder from within the VM. note that this isn't secure, since the VM runs as root and could unmount this.
236 // discourage read/write of .git folder from within the VM. note that this isn't secure, since the VM runs as root and could unmount this.
253 // I couldn't find an alternative way to do this --- the MacOS sandbox doesn't apply to the Apple Virtualization system
237 // I couldn't find an alternative way to do this --- the MacOS sandbox doesn't apply to the Apple Virtualization system
@@ -255,15 +239,6 @@ where
255 login_actions.push(Send(r"mount -t tmpfs tmpfs .git/".into()));
239 login_actions.push(Send(r"mount -t tmpfs tmpfs .git/".into()));
258− directory_shares.push(
259− DirectoryShare::new(
261− PathBuf::from("/root/").join(project_name),
264− .expect("Project directory must exist"),
267 directory_shares.push(mise_directory_share);
242 directory_shares.push(mise_directory_share);
@@ -274,7 +249,7 @@ where
276 if needs_resize {
251 if needs_resize {
277− let resize_cmd = script_command_from_content("resize_disk", RESIZE_DISK_SCRIPT)?;
252+ let resize_cmd = script_command_from_content("resize_disk.sh", RESIZE_DISK_SCRIPT)?;
278 login_actions.push(Send(resize_cmd));
253 login_actions.push(Send(resize_cmd));
@@ -290,25 +265,29 @@ where
290 &directory_shares[..],
265 &directory_shares[..],
291 args.cpu_count,
266 args.cpu_count,
292 args.ram_bytes,
267 args.ram_bytes,
293− Some(&status_file),
268+ status,
294 io_handler,
269 io_handler,
298−pub(crate) fn script_command_from_content(
273+pub fn script_command_from_content(label: &str, script: &str) -> Result<String> {
301−) -> Result<String, Box<dyn std::error::Error>> {
302 let marker = "VIBE_SCRIPT_EOF";
274 let marker = "VIBE_SCRIPT_EOF";
303 let guest_dir = "/tmp/vibe-scripts";
275 let guest_dir = "/tmp/vibe-scripts";
304 let guest_path = format!("{guest_dir}/{label}.sh");
276 let guest_path = format!("{guest_dir}/{label}.sh");
277+ let script_body = match script.split_once('\n') {
278+ Some((first, rest)) if first.starts_with("#!") => rest,
281+ let wrapped_script = ERROR_REPORT_SCRIPT
282+ .replace("__LABEL__", label)
283+ .replace("__SCRIPT_BODY__", script_body);
305 let command = format!(
284 let command = format!(
306− "mkdir -p {guest_dir}\ncat >{guest_path} <<'{marker}'\n{script}\n{marker}\nchmod +x {guest_path}\n{guest_path}"
285+ "mkdir -p {guest_dir}\ncat >{guest_path} <<'{marker}'\n{wrapped_script}\n{marker}\nchmod +x {guest_path}\n{guest_path}"
308 if script.contains(marker) {
287 if script.contains(marker) {
309− return Err(
288+ bail!(format!(
310− format!("Script '{label}' contains marker '{marker}', cannot safely upload").into(),
289+ "Script '{label}' contains marker '{marker}', cannot safely upload"
313 Ok(command)
292 Ok(command)
@@ -372,6 +351,12 @@ enum WaitResult {
354+#[derive(PartialEq, Eq)]
375pub enum VmInput {
360pub enum VmInput {
376 Bytes(Vec<u8>),
361 Bytes(Vec<u8>),
377 Shutdown,
362 Shutdown,
@@ -379,6 +364,7 @@ pub enum VmInput {
380enum VmOutput {
365enum VmOutput {
381 LoginActionTimeout { action: String, timeout: Duration },
366 LoginActionTimeout { action: String, timeout: Duration },
367+ LoginActionFailed { action: String, reason: String },
384#[derive(Default)]
370#[derive(Default)]
@@ -415,6 +401,41 @@ impl OutputMonitor {
415 WaitResult::Found
401 WaitResult::Found
405+ fn wait_for_any(&self, needles: &[&str], timeout: Duration) -> WaitAnyResult {
406+ let mut found: Option<usize> = None;
407+ let (_unused, timeout_result) = self
409+ .wait_timeout_while(self.buffer.lock().unwrap(), timeout, |buf| {
410+ if let Some((pos, idx, len)) = find_any(buf, needles) {
411+ *buf = buf[(pos + len)..].to_string();
420+ if timeout_result.timed_out() {
421+ WaitAnyResult::Timeout
423+ WaitAnyResult::Found(found.unwrap_or(0))
428+fn find_any(buf: &str, needles: &[&str]) -> Option<(usize, usize, usize)> {
429+ let mut best: Option<(usize, usize, usize)> = None; // (pos, idx, len)
430+ for (idx, needle) in needles.iter().enumerate() {
431+ if let Some(pos) = buf.find(needle) {
432+ let candidate = (pos, idx, needle.len());
433+ if best.is_none_or(|b| candidate.0 < b.0) {
434+ best = Some(candidate);
420#[derive(Debug)]
441#[derive(Debug)]
@@ -463,18 +484,16 @@ impl IoControl {
463fn ensure_base_image(
484fn ensure_base_image(
464 base_raw: &Path,
485 base_raw: &Path,
465 base_compressed: &Path,
486 base_compressed: &Path,
466− status: Option<&StatusFile>,
487+ status: Option<&StatusEmitter<'_>>,
467−) -> Result<(), Box<dyn std::error::Error>> {
488+) -> Result<()> {
468 if base_raw.exists() {
489 if base_raw.exists() {
469 return Ok(());
490 return Ok(());
472 if !base_compressed.exists()
493 if !base_compressed.exists()
473− || std::fs::metadata(base_compressed).map(|m| m.len())? < DEBIAN_COMPRESSED_SIZE_BYTES
494+ || fs::metadata(base_compressed).map(|m| m.len())? < DEBIAN_COMPRESSED_SIZE_BYTES
475− if let Some(status) = status {
476− status.update("downloading base image...");
496+ emit_status(status, "downloading base image...");
478 tracing::info!("downloading base image");
497 tracing::info!("downloading base image");
479 let status = Command::new("curl")
498 let status = Command::new("curl")
@@ -489,15 +508,14 @@ fn ensure_base_image(
490 .status()?;
509 .status()?;
491 if !status.success() {
510 if !status.success() {
492− return Err("Failed to download base image".into());
511+ bail!("failed to download base image");
496 // Check SHA
515 // Check SHA
498− if let Some(status) = status {
517+ emit_status(status, "verifying base image...");
499− status.update("verifying base image...");
518+ tracing::info!("verifying base image...");
501 let input = format!("{} {}\n", DEBIAN_COMPRESSED_SHA, base_compressed.display());
519 let input = format!("{} {}\n", DEBIAN_COMPRESSED_SHA, base_compressed.display());
503 let mut child = Command::new("/usr/bin/shasum")
521 let mut child = Command::new("/usr/bin/shasum")
@@ -515,25 +533,25 @@ fn ensure_base_image(
516 let status = child.wait().expect("failed to wait on child");
534 let status = child.wait().expect("failed to wait on child");
517 if !status.success() {
535 if !status.success() {
518− return Err(format!("SHA validation failed for {DEBIAN_COMPRESSED_DISK_URL}").into());
537+ "SHA validation failed for {DEBIAN_COMPRESSED_DISK_URL}"
522− if let Some(status) = status {
523− status.update("decompressing base image...");
542+ emit_status(status, "decompressing base image...");
525− tracing::info!("decompressing base image");
543+ tracing::info!("decompressing base image...");
526 let status = Command::new("tar")
544 let status = Command::new("tar")
529 &base_compressed.to_string_lossy(),
547 &base_compressed.to_string_lossy(),
530 BASE_DISK_RAW_NAME,
548 BASE_DISK_RAW_NAME,
532− .stdout(std::fs::File::create(base_raw)?)
550+ .stdout(fs::File::create(base_raw)?)
533 .status()?;
551 .status()?;
535 if !status.success() {
553 if !status.success() {
536− return Err("Failed to decompress base image".into());
554+ bail!("Failed to decompress base image");
@@ -544,29 +562,56 @@ fn ensure_default_image(
544 base_compressed: &Path,
562 base_compressed: &Path,
545 default_raw: &Path,
563 default_raw: &Path,
546 directory_shares: &[DirectoryShare],
564 directory_shares: &[DirectoryShare],
565+ provision_log: Option<&Path>,
547− status: Option<&StatusFile>,
566+ status: Option<&StatusEmitter<'_>>,
548−) -> Result<(), Box<dyn std::error::Error>> {
567+) -> Result<()> {
549 if default_raw.exists() {
568 if default_raw.exists() {
550 return Ok(());
569 return Ok(());
553 ensure_base_image(base_raw, base_compressed, status)?;
572 ensure_base_image(base_raw, base_compressed, status)?;
555− if let Some(status) = status {
556− status.update("configuring base image...");
574+ emit_status(status, "configuring base image...");
558− tracing::info!("configuring base image");
575+ tracing::info!("configuring base image...");
559 fs::copy(base_raw, default_raw)?;
576 fs::copy(base_raw, default_raw)?;
561− let provision_command = script_command_from_content(PROVISION_SCRIPT_NAME, PROVISION_SCRIPT)?;
578+ let provision_command = script_command_from_content("provision.sh", PROVISION_SCRIPT)?;
562− run_vm(
579+ let provision_actions = [
564− &[Send(provision_command)],
580+ Send(provision_command),
582+ success: "VIBEBOX_PROVISION_OK".to_string(),
583+ failure: "VIBEBOX_PROVISION_FAILED".to_string(),
584+ timeout: PROVISION_EXPECT_TIMEOUT,
587+ let provision_result = if let Some(log_path) = provision_log {
588+ let log_path = log_path.to_path_buf();
593+ BoxConfig::default().cpu_count,
594+ BoxConfig::default().ram_size.as_u64(),
596+ move |output_monitor, vm_output_fd, vm_input_fd| {
597+ spawn_vm_io_with_log(output_monitor, vm_output_fd, vm_input_fd, log_path)
565− directory_shares,
604+ directory_shares,
566− DEFAULT_CPU_COUNT,
605+ BoxConfig::default().cpu_count,
567− DEFAULT_RAM_BYTES,
606+ BoxConfig::default().ram_size.as_u64(),
611+ if let Err(err) = provision_result {
612+ let _ = fs::remove_file(default_raw);
@@ -574,18 +619,16 @@ fn ensure_default_image(
574fn ensure_instance_disk(
619fn ensure_instance_disk(
575 instance_raw: &Path,
620 instance_raw: &Path,
576 template_raw: &Path,
621 template_raw: &Path,
577− target_bytes: u64,
622+ target_bytes: ByteSize,
578− status: Option<&StatusFile>,
623+ status: Option<&StatusEmitter<'_>>,
579−) -> Result<bool, Box<dyn std::error::Error>> {
624+) -> Result<bool> {
580 if instance_raw.exists() {
625 if instance_raw.exists() {
581− let current_size = fs::metadata(instance_raw)?.len();
626+ let current_size = ByteSize(fs::metadata(instance_raw)?.len());
582 if current_size != target_bytes {
627 if current_size != target_bytes {
583− let current_gb = current_size as f64 / (1024.0 * 1024.0 * 1024.0);
628+ let current_gb = current_size;
584− let target_gb = target_bytes as f64 / (1024.0 * 1024.0 * 1024.0);
629+ let target_gb = target_bytes;
585 tracing::warn!(
630 tracing::warn!(
586− current_bytes = current_size,
588− "instance disk size does not match config (current {:.2} GB, config {:.2} GB); disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using existing disk.",
631+ "instance disk size does not match config (current {}, config {}); disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using existing disk.",
589 current_gb,
632 current_gb,
590 target_gb
633 target_gb
@@ -593,30 +636,28 @@ fn ensure_instance_disk(
593 return Ok(false);
636 return Ok(false);
596− let template_size = fs::metadata(template_raw)?.len();
639+ let template_size = ByteSize(fs::metadata(template_raw)?.len());
597 if target_bytes < template_size {
640 if target_bytes < template_size {
598− return Err(format!(
641+ bail!(format!(
599− "Requested disk size {} bytes is smaller than base image size {} bytes",
642+ "Requested disk size {} is smaller than base image size {}",
600 target_bytes, template_size
643 target_bytes, template_size
604 let target_size = target_bytes;
646 let target_size = target_bytes;
605 let needs_resize = target_size > template_size;
647 let needs_resize = target_size > template_size;
607− if let Some(status) = status {
649+ emit_status(status, "creating instance disk...");
608− status.update("creating instance disk...");
650+ tracing::info!("creating instance disk...");
610 tracing::info!(path = %template_raw.display(), "creating instance disk");
651 tracing::info!(path = %template_raw.display(), "creating instance disk");
611− std::fs::create_dir_all(instance_raw.parent().unwrap())?;
652+ fs::create_dir_all(instance_raw.parent().unwrap())?;
612 if target_size == template_size {
653 if target_size == template_size {
613 fs::copy(template_raw, instance_raw)?;
654 fs::copy(template_raw, instance_raw)?;
614 return Ok(needs_resize);
655 return Ok(needs_resize);
617− let mut dst = std::fs::File::create(instance_raw)?;
658+ let mut dst = fs::File::create(instance_raw)?;
618− dst.set_len(target_size)?;
659+ dst.set_len(target_size.as_u64())?;
619− let mut src = std::fs::File::open(template_raw)?;
660+ let mut src = fs::File::open(template_raw)?;
620 std::io::copy(&mut src, &mut dst)?;
661 std::io::copy(&mut src, &mut dst)?;
621 Ok(needs_resize)
662 Ok(needs_resize)
@@ -634,18 +675,17 @@ pub fn create_pipe() -> (OwnedFd, OwnedFd) {
634 (read_stream.into(), write_stream.into())
675 (read_stream.into(), write_stream.into())
637−pub fn spawn_vm_io_with_hooks<F, G>(
678+pub fn spawn_vm_io_with_hooks<
679+ F: FnMut(&str) -> bool + std::marker::Send + 'static,
680+ G: FnMut(&[u8]) + std::marker::Send + 'static,
638 output_monitor: Arc<OutputMonitor>,
682 output_monitor: Arc<OutputMonitor>,
639 vm_output_fd: OwnedFd,
683 vm_output_fd: OwnedFd,
640 vm_input_fd: OwnedFd,
684 vm_input_fd: OwnedFd,
641 io_control: Arc<IoControl>,
685 io_control: Arc<IoControl>,
642 mut on_line: F,
686 mut on_line: F,
643 mut on_output: G,
687 mut on_output: G,
644−) -> IoContext
688+) -> IoContext {
646− F: FnMut(&str) -> bool + ::std::marker::Send + 'static,
647− G: FnMut(&[u8]) + ::std::marker::Send + 'static,
649 let (input_tx, input_rx): (Sender<VmInput>, Receiver<VmInput>) = mpsc::channel();
689 let (input_tx, input_rx): (Sender<VmInput>, Receiver<VmInput>) = mpsc::channel();
651 // raw_guard is set when we've put the user's terminal into raw mode because we've attached stdin/stdout to the VM.
691 // raw_guard is set when we've put the user's terminal into raw mode because we've attached stdin/stdout to the VM.
@@ -793,14 +833,14 @@ where
793 PollResult::Spurious => continue,
833 PollResult::Spurious => continue,
794 PollResult::Ready(bytes) => {
834 PollResult::Ready(bytes) => {
795 if io_control.forward_output() {
835 if io_control.forward_output() {
796− // enable raw mode, if we haven't already
836+ // enable raw mode if we haven't already
797 if raw_guard.lock().unwrap().is_none()
837 if raw_guard.lock().unwrap().is_none()
798 && let Ok(guard) = enable_raw_mode(libc::STDIN_FILENO)
838 && let Ok(guard) = enable_raw_mode(libc::STDIN_FILENO)
800 *raw_guard.lock().unwrap() = Some(guard);
840 *raw_guard.lock().unwrap() = Some(guard);
803− let mut stdout = std::io::stdout().lock();
843+ let mut stdout = io::stdout().lock();
804 if stdout.write_all(bytes).is_err() {
844 if stdout.write_all(bytes).is_err() {
@@ -816,7 +856,7 @@ where
817 // Copies data from mpsc channel into VM, so vibe can "type" stuff and run scripts.
857 // Copies data from mpsc channel into VM, so vibe can "type" stuff and run scripts.
818 let mux_thread = thread::spawn(move || {
858 let mux_thread = thread::spawn(move || {
819− let mut vm_writer = std::fs::File::from(vm_input_fd);
859+ let mut vm_writer = fs::File::from(vm_input_fd);
821 match input_rx.recv() {
861 match input_rx.recv() {
822 Ok(VmInput::Bytes(data)) => {
862 Ok(VmInput::Bytes(data)) => {
@@ -846,7 +886,7 @@ pub fn spawn_vm_io_with_line_handler<F>(
846 on_line: F,
886 on_line: F,
847) -> IoContext
887) -> IoContext
849− F: FnMut(&str) -> bool + ::std::marker::Send + 'static,
889+ F: FnMut(&str) -> bool + std::marker::Send + 'static,
851 spawn_vm_io_with_hooks(
891 spawn_vm_io_with_hooks(
852 output_monitor,
892 output_monitor,
@@ -866,6 +906,36 @@ pub fn spawn_vm_io(
866 spawn_vm_io_with_line_handler(output_monitor, vm_output_fd, vm_input_fd, |_| false)
906 spawn_vm_io_with_line_handler(output_monitor, vm_output_fd, vm_input_fd, |_| false)
909+fn spawn_vm_io_with_log(
910+ output_monitor: Arc<OutputMonitor>,
911+ vm_output_fd: OwnedFd,
912+ vm_input_fd: OwnedFd,
915+ let log_file = fs::OpenOptions::new()
921+ .map(|file| Arc::new(Mutex::new(file)));
923+ spawn_vm_io_with_hooks(
930+ if let Some(log) = &log_file
931+ && let Ok(mut file) = log.lock()
933+ let _ = file.write_all(bytes);
869impl IoContext {
939impl IoContext {
870 pub fn shutdown(self) {
940 pub fn shutdown(self) {
871 let _ = self.input_tx.send(VmInput::Shutdown);
941 let _ = self.input_tx.send(VmInput::Shutdown);
@@ -883,7 +953,7 @@ fn create_vm_configuration(
883 vm_writes_to_fd: OwnedFd,
953 vm_writes_to_fd: OwnedFd,
884 cpu_count: usize,
954 cpu_count: usize,
885 ram_bytes: u64,
955 ram_bytes: u64,
886−) -> Result<Retained<VZVirtualMachineConfiguration>, Box<dyn std::error::Error>> {
956+) -> Result<Retained<VZVirtualMachineConfiguration>> {
888 let platform =
958 let platform =
889 VZGenericPlatformConfiguration::init(VZGenericPlatformConfiguration::alloc());
959 VZGenericPlatformConfiguration::init(VZGenericPlatformConfiguration::alloc());
@@ -917,7 +987,7 @@ fn create_vm_configuration(
918 VZDiskImageCachingMode::Automatic,
988 VZDiskImageCachingMode::Automatic,
919 VZDiskImageSynchronizationMode::Full,
989 VZDiskImageSynchronizationMode::Full,
922 let disk_device = VZVirtioBlockDeviceConfiguration::initWithAttachment(
992 let disk_device = VZVirtioBlockDeviceConfiguration::initWithAttachment(
923 VZVirtioBlockDeviceConfiguration::alloc(),
993 VZVirtioBlockDeviceConfiguration::alloc(),
@@ -1004,7 +1074,7 @@ fn create_vm_configuration(
1004 // Validate
1074 // Validate
1005 config.validateWithError().map_err(|e| {
1075 config.validateWithError().map_err(|e| {
1006 io::Error::other(format!(
1076 io::Error::other(format!(
1007− "Invalid VM configuration: {:?}",
1077+ "invalid VM configuration: {:?}",
1008 e.localizedDescription()
1078 e.localizedDescription()
@@ -1013,9 +1083,9 @@ fn create_vm_configuration(
1016−fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>, Box<dyn std::error::Error>> {
1086+fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>> {
1017 unsafe {
1087 unsafe {
1018− let temp_dir = std::env::temp_dir();
1088+ let temp_dir = env::temp_dir();
1019 let temp_path = temp_dir.join(format!("efi_variable_store_{}.efivars", std::process::id()));
1089 let temp_path = temp_dir.join(format!("efi_variable_store_{}.efivars", std::process::id()));
1020 let url = nsurl_from_path(&temp_path)?;
1090 let url = nsurl_from_path(&temp_path)?;
1021 let options = VZEFIVariableStoreInitializationOptions::AllowOverwrite;
1091 let options = VZEFIVariableStoreInitializationOptions::AllowOverwrite;
@@ -1031,8 +1101,8 @@ fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>, Box<dyn std
1031fn spawn_login_actions_thread(
1101fn spawn_login_actions_thread(
1032 login_actions: Vec<LoginAction>,
1102 login_actions: Vec<LoginAction>,
1033 output_monitor: Arc<OutputMonitor>,
1103 output_monitor: Arc<OutputMonitor>,
1034− input_tx: mpsc::Sender<VmInput>,
1104+ input_tx: Sender<VmInput>,
1035− vm_output_tx: mpsc::Sender<VmOutput>,
1105+ vm_output_tx: Sender<VmOutput>,
1036) -> thread::JoinHandle<()> {
1106) -> thread::JoinHandle<()> {
1037 thread::spawn(move || {
1107 thread::spawn(move || {
1038 for a in login_actions {
1108 for a in login_actions {
@@ -1046,6 +1116,27 @@ fn spawn_login_actions_thread(
1123+ } => match output_monitor.wait_for_any(&[&success, &failure], timeout) {
1124+ WaitAnyResult::Found(0) => {}
1125+ WaitAnyResult::Found(_) => {
1126+ let _ = vm_output_tx.send(VmOutput::LoginActionFailed {
1127+ action: format!("expect '{}'", success),
1128+ reason: format!("saw failure marker '{}'", failure),
1132+ WaitAnyResult::Timeout => {
1133+ let _ = vm_output_tx.send(VmOutput::LoginActionTimeout {
1134+ action: format!("expect '{}'", success),
1049 Send(mut text) => {
1140 Send(mut text) => {
1050 text.push('\n'); // Type the newline so the command is actually submitted.
1141 text.push('\n'); // Type the newline so the command is actually submitted.
1051 input_tx.send(VmInput::Bytes(text.into_bytes())).unwrap();
1142 input_tx.send(VmInput::Bytes(text.into_bytes())).unwrap();
@@ -1061,9 +1152,9 @@ fn run_vm_with_io<F>(
1061 directory_shares: &[DirectoryShare],
1152 directory_shares: &[DirectoryShare],
1062 cpu_count: usize,
1153 cpu_count: usize,
1063 ram_bytes: u64,
1154 ram_bytes: u64,
1064− status: Option<&StatusFile>,
1155+ status: Option<&StatusEmitter<'_>>,
1065 io_handler: F,
1156 io_handler: F,
1066−) -> Result<(), Box<dyn std::error::Error>>
1157+) -> Result<()>
1068 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
1159 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
@@ -1110,24 +1201,22 @@ where
1111 match rx.try_recv() {
1202 match rx.try_recv() {
1112 Ok(result) => {
1203 Ok(result) => {
1113− result.map_err(|e| format!("Failed to start VM: {}", e))?;
1204+ result.map_err(|e| Error::msg(format!("Failed to start VM: {}", e)))?;
1116 Err(mpsc::TryRecvError::Empty) => continue,
1207 Err(mpsc::TryRecvError::Empty) => continue,
1117 Err(mpsc::TryRecvError::Disconnected) => {
1208 Err(mpsc::TryRecvError::Disconnected) => {
1118− return Err("VM start channel disconnected".into());
1209+ bail!("VM start channel disconnected");
1123 if Instant::now() >= start_deadline {
1214 if Instant::now() >= start_deadline {
1124− return Err("Timed out waiting for VM to start".into());
1215+ bail!("Timed out waiting for VM to start");
1127− if let Some(status) = status {
1218+ emit_status(status, "vm booting... go vibecoder!");
1128− status.update("vm booting... go vibecoder!");
1219+ tracing::info!("vm booting... go vibecoder!");
1131 tracing::info!("vm booting");
1220 tracing::info!("vm booting");
1133 let output_monitor = Arc::new(OutputMonitor::default());
1222 let output_monitor = Arc::new(OutputMonitor::default());
@@ -1173,7 +1262,7 @@ where
1175 let mut last_state = None;
1264 let mut last_state = None;
1176− let mut exit_result = Ok(());
1265+ let mut exit_result: Result<(), String> = Ok(());
1178 unsafe {
1267 unsafe {
1179 NSRunLoop::mainRunLoop().runMode_beforeDate(
1268 NSRunLoop::mainRunLoop().runMode_beforeDate(
@@ -1192,8 +1281,24 @@ where
1192 exit_result = Err(format!(
1281 exit_result = Err(format!(
1193 "Login action ({}) timed out after {:?}; shutting down.",
1282 "Login action ({}) timed out after {:?}; shutting down.",
1194 action, timeout
1283 action, timeout
1286+ if vm.canRequestStop() {
1287+ if let Err(err) = vm.requestStopWithError() {
1288+ tracing::error!(error = ?err, "failed to request VM stop");
1290+ } else if vm.canStop() {
1291+ let handler = RcBlock::new(|_error: *mut NSError| {});
1292+ vm.stopWithCompletionHandler(&handler);
1297+ Ok(VmOutput::LoginActionFailed { action, reason }) => {
1298+ exit_result = Err(format!(
1299+ "Login action ({}) failed: {}; shutting down.",
1197 unsafe {
1302 unsafe {
1198 if vm.canRequestStop() {
1303 if vm.canRequestStop() {
1199 if let Err(err) = vm.requestStopWithError() {
1304 if let Err(err) = vm.requestStopWithError() {
@@ -1209,7 +1314,7 @@ where
1209 Err(mpsc::TryRecvError::Empty) => {}
1314 Err(mpsc::TryRecvError::Empty) => {}
1210 Err(mpsc::TryRecvError::Disconnected) => {}
1315 Err(mpsc::TryRecvError::Disconnected) => {}
1212− if state != objc2_virtualization::VZVirtualMachineState::Running {
1317+ if state != VZVirtualMachineState::Running {
1213 //eprintln!("VM stopped with state: {:?}", state);
1318 //eprintln!("VM stopped with state: {:?}", state);
@@ -1219,7 +1324,7 @@ where
1220 io_ctx.shutdown();
1325 io_ctx.shutdown();
1222− exit_result
1327+ exit_result.map_err(Error::msg)
1225fn run_vm(
1330fn run_vm(
@@ -1228,8 +1333,8 @@ fn run_vm(
1228 directory_shares: &[DirectoryShare],
1333 directory_shares: &[DirectoryShare],
1229 cpu_count: usize,
1334 cpu_count: usize,
1230 ram_bytes: u64,
1335 ram_bytes: u64,
1231− status: Option<&StatusFile>,
1336+ status: Option<&StatusEmitter<'_>>,
1232−) -> Result<(), Box<dyn std::error::Error>> {
1337+) -> Result<()> {
1233 run_vm_with_io(
1338 run_vm_with_io(
1234 disk_path,
1339 disk_path,
1235 login_actions,
1340 login_actions,
@@ -1241,7 +1346,7 @@ fn run_vm(
1244−fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>, Box<dyn std::error::Error>> {
1349+fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>> {
1245 let abs_path = if path.is_absolute() {
1350 let abs_path = if path.is_absolute() {
1246 path.to_path_buf()
1351 path.to_path_buf()
1247 } else {
1352 } else {
@@ -1250,7 +1355,7 @@ fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>, Box<dyn std::error::E
1250 let ns_path = NSString::from_str(
1355 let ns_path = NSString::from_str(
1251 abs_path
1356 abs_path
1252 .to_str()
1357 .to_str()
1253− .ok_or("Non-UTF8 path encountered while building NSURL")?,
1358+ .with_context(|| "non-UTF8 path encountered while building NSURL")?,
1255 Ok(NSURL::fileURLWithPath(&ns_path))
1360 Ok(NSURL::fileURLWithPath(&ns_path))
@@ -1265,7 +1370,7 @@ fn enable_raw_mode(fd: i32) -> io::Result<RawModeGuard> {
1265 let original = attributes;
1370 let original = attributes;
1267 // Disable translation of carriage return to newline on input
1372 // Disable translation of carriage return to newline on input
1268− attributes.c_iflag &= !(libc::ICRNL);
1373+ attributes.c_iflag &= !libc::ICRNL;
1269 // Disable canonical mode (line buffering), echo, and signal generation
1374 // Disable canonical mode (line buffering), echo, and signal generation
1270 attributes.c_lflag &= !(libc::ICANON | libc::ECHO | libc::ISIG);
1375 attributes.c_lflag &= !(libc::ICANON | libc::ECHO | libc::ISIG);
1271 attributes.c_cc[libc::VMIN] = 0;
1376 attributes.c_cc[libc::VMIN] = 0;
@@ -1293,10 +1398,10 @@ impl Drop for RawModeGuard {
1294// Ensure the running binary has com.apple.security.virtualization entitlements by checking and, if not, signing and relaunching.
1399// Ensure the running binary has com.apple.security.virtualization entitlements by checking and, if not, signing and relaunching.
1295pub fn ensure_signed() {
1400pub fn ensure_signed() {
1296− if std::env::var("VIBEBOX_SKIP_CODESIGN").as_deref() == Ok("1") {
1401+ if env::var("VIBEBOX_SKIP_CODESIGN").as_deref() == Ok("1") {
1299− let exe = std::env::current_exe().expect("failed to get current exe path");
1404+ let exe = env::current_exe().expect("failed to get current exe path");
1300 let exe_str = exe.to_str().expect("exe path not valid utf-8");
1405 let exe_str = exe.to_str().expect("exe path not valid utf-8");
1302 let has_required_entitlements = {
1407 let has_required_entitlements = {
@@ -1318,8 +1423,8 @@ pub fn ensure_signed() {
1320 const ENTITLEMENTS: &str = include_str!("entitlements.plist");
1425 const ENTITLEMENTS: &str = include_str!("entitlements.plist");
1321− let entitlements_path = std::env::temp_dir().join("entitlements.plist");
1426+ let entitlements_path = env::temp_dir().join("entitlements.plist");
1322− std::fs::write(&entitlements_path, ENTITLEMENTS).expect("failed to write entitlements");
1427+ fs::write(&entitlements_path, ENTITLEMENTS).expect("failed to write entitlements");
1324 let output = Command::new("codesign")
1429 let output = Command::new("codesign")
@@ -1332,7 +1437,7 @@ pub fn ensure_signed() {
1333 .output();
1438 .output();
1335− let _ = std::fs::remove_file(&entitlements_path);
1440+ let _ = fs::remove_file(&entitlements_path);
1337 match output {
1442 match output {
1338 Ok(o) if o.status.success() => {
1443 Ok(o) if o.status.success() => {
@@ -1340,7 +1445,7 @@ pub fn ensure_signed() {
1340 if !stderr.trim().is_empty() {
1445 if !stderr.trim().is_empty() {
1341 tracing::debug!(codesign_stderr = %stderr.trim(), "codesign output");
1446 tracing::debug!(codesign_stderr = %stderr.trim(), "codesign output");
1343− let err = Command::new(&exe).args(std::env::args_os().skip(1)).exec();
1448+ let err = Command::new(&exe).args(env::args_os().skip(1)).exec();
1344 tracing::error!(error = %err, "failed to re-exec after signing");
1449 tracing::error!(error = %err, "failed to re-exec after signing");
1345 std::process::exit(1);
1450 std::process::exit(1);