Release of Solo5.0.11.0 - #29965
Merged
Merged
Conversation
- Lint our codebase with few warnings (@dinosaure, @hannesm, @MisterDA, ocaml#632) Our codebase compiles with: - `-Wshadow` - `-Wpointer-arith` - `-Wcast-qual` - `-Wsign-compare` - `-Wwrite-strings` It ensures a better codebase and less undefined behaviors. - Apply `clang-format` on our codebase (@dinosaure, @hannesm, ocaml#633) - Fix the CAPSICUM support on FreeBSD (@hannesm, @sg2342, spotted by @dinosaure, ocaml#636) - Improve performance on our net interfaces on Linux via `eventfd(2)` (@dinosaure, @hannesm, @reynir, ocaml#637) This PR changes deeply how we read and write on our TAP interface. This change mainly concerns Linux and the use of `eventfd(2)` to avoid a full VM exit whenever one wishes to write to a network interface. A few benchmarks (using `iperf3`) have been carried out on Linux and FreeBSD. For the former, an improvement was observed (around three times more data can be transferred per second), whilst no regression was observed for the latter (though no improvement either). This change **does not involve** an ABI change, meaning that the tender can still run unikernels that have not been compiled with this version and vice versa (a unikernel compiled with this version can be run by an older tender). - `solo5-hvt` set-up `seccomp` filters (@pocopepe, @dinosaure, @hannesm, ocaml#638, ocaml#282) `solo5-hvt` requires `libseccomp` and add some filters.
jmid
approved these changes
May 28, 2026
jmid
left a comment
jmid
left a comment
Member
There was a problem hiding this comment.
LGTM, thanks!
FTR, CI is failing only a lint check.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Lint our codebase with few warnings (@dinosaure, @hannesm, @MisterDA, Add -Wshadow -Wpointer-arith -Wcast-qual -Wsign-compare Solo5/solo5#632)
Our codebase compiles with:
-Wshadow-Wpointer-arith-Wcast-qual-Wsign-compare-Wwrite-stringsIt ensures a better codebase and less undefined behaviors.
Apply
clang-formaton our codebase (@dinosaure, @hannesm, Useclang-formatSolo5/solo5#633)Fix the CAPSICUM support on FreeBSD (@hannesm, @sg2342, spotted by @dinosaure, tenders: fix typo (since 3958d94d) to enabled capsicum Solo5/solo5#636)
Improve performance on our net interfaces on Linux via
eventfd(2)(@dinosaure, @hannesm, @reynir, hvt: optimize net interface Solo5/solo5#637)This PR changes deeply how we read and write on our TAP interface. This change mainly concerns Linux and the use of
eventfd(2)to avoid a full VM exit whenever one wishes to write to a network interface. A few benchmarks (usingiperf3) have been carried out on Linux and FreeBSD. For the former, an improvement was observed (around three times more data can be transferred per second), whilst no regression was observed for the latter (though no improvement either).This change does not involve an ABI change, meaning that the tender can still run unikernels that have not been compiled with this version and vice versa (a unikernel compiled with this version can be run by an older tender).
solo5-hvtset-upseccompfilters (@pocopepe, @dinosaure, @hannesm, add seccomp sandbox to hvt on linux Solo5/solo5#638, hvt_drop_privileges() behaviour Solo5/solo5#282)solo5-hvtrequireslibseccompand add some filters.