feat: gVisor runtime support by lpcox · Pull Request #6093 · github/gh-aw-firewall

lpcox · 2026-07-10T12:45:15Z

Summary

Add gVisor (runsc) container runtime support to AWF. This PR recompiles the gVisor smoke workflow on a branch so it can be tested via the test-gvisor label.

Testing

Apply the test-gvisor label to this PR to trigger the gVisor smoke test workflow.

Related: #3264, #6092

Recompiles the gVisor smoke workflow so it can be triggered via the test-gvisor label on this PR branch. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T12:46:36Z

🚀 Security Guard has started processing this pull request

github-actions · 2026-07-10T12:46:40Z

🦎 Smoke gVisor reports failed. gVisor compatibility issue detected.

github-actions · 2026-07-10T12:46:52Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.19%	99.18%	➡️ -0.01%
Statements	99.15%	99.14%	📉 -0.01%
Functions	99.45%	99.45%	➡️ +0.00%
Branches	96.00%	95.87%	📉 -0.13%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/cli-workflow.ts`	100.0% → 93.9% (-6.13%)	100.0% → 93.9% (-6.13%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

Copilot

Pull request overview

This PR updates the generated gVisor smoke test workflow lockfile to align with the current smoke-gvisor workflow content, specifically refining how the post-run verification searches agent logs for a gVisor indicator.

Changes:

Regenerates smoke-gvisor.lock.yml (updated gh-aw metadata hashes).
Updates the “Verify gVisor runtime was used” step to search within the downloaded agent artifact’s nested log directory and to match a more specific gVisor kernel/version indicator.

Show a summary per file

File	Description
`.github/workflows/smoke-gvisor.lock.yml`	Regenerated lockfile; adjusts the gVisor verification step to grep within `/tmp/gh-aw-agent/sandbox/agent/logs` and updates the fallback message.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 1/1 changed files
Comments generated: 0
Review effort level: Low

The gVisor release URL expects the raw architecture string from uname -m (e.g., x86_64) not the remapped form (amd64). Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T12:49:16Z

✅ Copilot review passed with no inline comments.

@lpcox Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

github-actions · 2026-07-10T12:51:03Z

🚀 Security Guard has started processing this pull request

github-actions · 2026-07-10T12:51:06Z

🦎 Smoke gVisor reports failed. gVisor compatibility issue detected.

Docker's SIGHUP reload handler does NOT call setHostGatewayIP(), so the HostGatewayIPs config field remains empty after a reload-only config change. This causes --add-host host.docker.internal:host-gateway to fail with 'could not parse extra host IP invalid IP' for any container started after the reload (including the MCP Gateway). A full restart runs initNetworkController() which calls setHostGatewayIP() to populate the bridge gateway IP. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T13:04:28Z

🚀 Security Guard has started processing this pull request

github-actions · 2026-07-10T13:04:36Z

🦎 Smoke gVisor completed. gVisor smoke test passed. ✅

Adds end-to-end support for running the agent container under an alternative OCI runtime (e.g. gVisor's runsc, Kata Containers): - Added runtime?: string to DockerService interface (types/docker.ts) - Added containerRuntime?: string to ContainerImageOptions - Added --container-runtime CLI flag - Added config file support (container.containerRuntime in awf.json) - Thread runtime through agent-service.ts → docker-compose.yml - Only agent container uses the custom runtime; infra containers (squid, api-proxy) always use the default runtime - Updated smoke-gvisor workflow: - Fixed gVisor download URL (raw uname -m, no arch remap) - Fixed systemctl restart (not reload) after runsc install - Postprocess injects --container-runtime runsc into AWF command - Verify step checks docker-compose.yml for runtime: runsc - Added 3 unit tests for runtime plumbing - All 3649 tests pass Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T13:39:34Z

🚀 Security Guard has started processing this pull request

github-actions · 2026-07-10T13:39:41Z

🦎 Smoke gVisor reports failed. gVisor compatibility issue detected.

gVisor's userspace netstack has an isolated sandbox loopback that cannot reach Docker's embedded DNS server at 127.0.0.11, causing container name resolution to fail with EAI_AGAIN (google/gvisor#7469, open since 2022). When containerRuntime is set (e.g., runsc for gVisor), AWF now: 1. Inspects topology-attached container IPs after connecting them to awf-net 2. Patches docker-compose.yml with extra_hosts entries for the agent 3. The agent resolves topology peers via /etc/hosts, bypassing DNS This runs between phase 2 (topology connect) and phase 3 (full compose up), so the agent picks up the entries before starting. Non-gVisor runs are unaffected — the patch only activates when containerRuntime is set. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T18:36:02Z

🔥 Smoke Test Results

Test	Status
GitHub MCP connectivity	✅
GitHub.com HTTP	✅ 200
File write/read	⚠️ Template vars unresolved in workflow

Overall: PASS (core connectivity verified)

cc @lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:36:22Z

Smoke Test: Copilot BYOK (Direct) Mode

✅ GitHub.com HTTP: 200
✅ MCP Connectivity: OK
✅ BYOK Mode: Active (COPILOT_DUMMY_BYOK)
✅ Inference: api-proxy → api.githubcopilot.com

Status: PASS — Direct BYOK mode working correctly.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:36:28Z

Smoke Test: Claude Engine Validation

Check	Result
API Status	✅ PASS
GH Check	✅ PASS
File Status	✅ PASS

Overall Result: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Smoke Claude for #6093 · 55.2 AIC · ⊞ 3.3K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:36:51Z

Smoke Test: Copilot PAT Auth — PASS

Test	Result
GitHub MCP connectivity	✅
GitHub.com HTTP	✅
File write/read	✅

Overall: PASS · Auth mode: PAT (COPILOT_GITHUB_TOKEN)

cc @lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 PAT report filed by Smoke Copilot PAT
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:37:04Z

Smoke Test: Services Connectivity

Redis PING: ❌ Network unreachable
PostgreSQL pg_isready: ❌ No response
PostgreSQL SELECT 1: ❌ Network unreachable

Overall: FAIL — host.docker.internal (172.17.0.1) is not reachable. Service containers may not be configured for this workflow.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:37:19Z

@lpcox
Running in direct BYOK mode (AWF_AUTH_TYPE=github-oidc + AWF_AUTH_AZURE_* + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw) authenticated via Microsoft Entra

GitHub MCP Testing: ✅
GitHub.com Connectivity: ✅
File Write/Read Test: ✅
BYOK Inference Test: ✅

Overall: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:37:21Z

✅ GitHub MCP (pre-fetched PR data validated)
✅ GitHub.com connectivity
✅ File I/O test
✅ BYOK inference test

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw)

@lpcox PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:37:38Z

OTEL Smoke Test Results

Scenario	Result	Notes
S1: Module Loading	✅ Pass	`otel.js` loads cleanly; exports: `startRequestSpan`, `setTokenAttributes`, `setBudgetAttributes`, `endSpan`, `endSpanError`, `shutdown`, `isEnabled`
S2: Test Suite	✅ Pass	59/59 tests passed across `otel.test.js` + `otel-fanout.test.js`
S3: Env Var Forwarding	✅ Pass	`src/services/api-proxy-env-config.ts` forwards all 6 OTEL vars: `GH_AW_OTLP_ENDPOINTS`, `OTEL_EXPORTER_OTLP_ENDPOINT`, `OTEL_EXPORTER_OTLP_HEADERS`, `GITHUB_AW_OTEL_TRACE_ID`, `GITHUB_AW_OTEL_PARENT_SPAN_ID`, `OTEL_SERVICE_NAME`
S4: Token Tracker Integration	✅ Pass	`onUsage` callback exists in `token-tracker-http.js` (line 285, invoked at line 343) as the OTEL hook point
S5: OTEL Diagnostics	i️ N/A	No live containers during static smoke test; file-based fallback exporter (`/var/log/api-proxy/otel.jsonl`) is configured when no OTEL endpoint is set

Overall: ✅ All scenarios pass. OTEL integration is fully wired end-to-end.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:37:47Z

Smoke Test\n- feat: gVisor runtime support\n- chore: recompile workflows after #6087\n- ✅ GitHub PR query\n- ✅ File write/read\n- ✅ Discussion lookup\n- ✅ Playwright title check\n- ✅ Build\n- Overall status: PASS

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

awmgmcpg
registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:38:06Z

Smoke Test: Gemini Engine Validation

GitHub MCP Testing: ❌ (Tools not found)
GitHub.com Connectivity: ❌ (Failed to connect/resolve)
File Writing Testing: ✅
Bash Tool Testing: ✅

Overall Status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:38:06Z

Chroot Version Comparison

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.13	Python 3.12.3	❌ NO
Node.js	v24.18.0	v22.23.1	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

⚠️ Not all versions match — ALL_TESTS_PASSED=false

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}

github-actions · 2026-07-10T18:39:23Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	All passed	✅ PASS
Node.js	execa	✅	All passed	✅ PASS
Node.js	p-limit	✅	All passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Note (Java): Maven could not create local repository at ~/.m2/repository (owned by root). Worked around by using -Dmaven.repo.local=/tmp/gh-aw/agent/m2-repo. All tests passed successfully.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Build Test Suite for #6093 · 32.6 AIC · ⊞ 6.9K · ◷
_{Add label ready-for-aw to run again}

- Update D1: gVisor resolved in #6093; Kata Containers still open - Add B11: silent repair failure causes exit 1, fixed in #6072 - Add B11 error-string lookup entry in all three catalog files - Update Known unresolved items: narrow D1 to Kata only - Update symptom mapping and known-gaps step in both doctor files - Update CI test assertions for D1 and B11 Closes #6103

…nt repair exit-1 (#6118) * Initial plan * docs: update runner doctor catalog - D1 gVisor resolved, add B11 - Update D1: gVisor resolved in #6093; Kata Containers still open - Add B11: silent repair failure causes exit 1, fixed in #6072 - Add B11 error-string lookup entry in all three catalog files - Update Known unresolved items: narrow D1 to Kata only - Update symptom mapping and known-gaps step in both doctor files - Update CI test assertions for D1 and B11 Closes #6103 * docs: align runner-doctor B11 and D1 wording with implementation --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

chore: recompile smoke-gvisor workflow on branch for testing

e6d058b

Recompiles the gVisor smoke workflow so it can be triggered via the test-gvisor label on this PR branch. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot AI review requested due to automatic review settings July 10, 2026 12:45

Copilot started reviewing on behalf of lpcox July 10, 2026 12:45 View session

lpcox added the test-gvisor label Jul 10, 2026

github-actions Bot mentioned this pull request Jul 10, 2026

[aw] Smoke gVisor failed #6094

Closed

Copilot AI reviewed Jul 10, 2026

View reviewed changes

fix: use raw uname -m for gVisor download URL

7930482

The gVisor release URL expects the raw architecture string from uname -m (e.g., x86_64) not the remapped form (amd64). Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

lpcox added test-gvisor and removed test-gvisor labels Jul 10, 2026

This comment has been minimized.

Sign in to view

github-actions Bot added the smoke-gvisor label Jul 10, 2026

lpcox added test-gvisor and removed test-gvisor labels Jul 10, 2026

lpcox removed the test-gvisor label Jul 10, 2026

lpcox added the test-gvisor label Jul 10, 2026

github-actions Bot added the smoke-copilot label Jul 10, 2026

github-actions Bot added the smoke-copilot-byok label Jul 10, 2026

github-actions Bot added the smoke-claude label Jul 10, 2026

github-actions Bot added the smoke-copilot-pat label Jul 10, 2026

lpcox temporarily deployed to aoai-model July 10, 2026 18:37 — with GitHub Actions Inactive

github-actions Bot added the smoke-copilot-byok-aoai-entra label Jul 10, 2026

lpcox temporarily deployed to aoai-model July 10, 2026 18:37 — with GitHub Actions Inactive

github-actions Bot added the smoke-codex label Jul 10, 2026

github-actions Bot mentioned this pull request Jul 10, 2026

[aw] No-Op Runs #5883

Open

github-actions Bot added the build-test label Jul 10, 2026

lpcox mentioned this pull request Jul 10, 2026

feat: add smoke-docker-sbx workflow #6099

Merged

lpcox merged commit b3e37f5 into main Jul 10, 2026
95 of 96 checks passed

lpcox deleted the feat/gvisor-runtime-support branch July 10, 2026 18:49

github-actions Bot mentioned this pull request Jul 10, 2026

🩺 Runner Doctor Update🩺 Runner Doctor update: D1 (gVisor resolved), B11 (silent repair failure → exit 1) #6103

Closed

Copilot AI mentioned this pull request Jul 11, 2026

docs: update runner doctor catalog — D1 gVisor resolved, add B11 silent repair exit-1 #6118

Merged

github-actions Bot mentioned this pull request Jul 12, 2026

🩺 Runner Doctor UpdateRunner Doctor: new failure mode D5 — stale gVisor release pin returns 404 (PR #6143) #6149

Open

Uh oh!

Conversation

lpcox commented Jul 10, 2026

Summary

Testing

Uh oh!

github-actions Bot commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

github-actions Bot commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment has been minimized.

github-actions Bot commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 10, 2026

🔥 Smoke Test Results

Uh oh!

github-actions Bot commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026

Smoke Test: Claude Engine Validation

Uh oh!

github-actions Bot commented Jul 10, 2026

Smoke Test: Copilot PAT Auth — PASS

Uh oh!

github-actions Bot commented Jul 10, 2026

Smoke Test: Services Connectivity

Uh oh!

github-actions Bot commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026

OTEL Smoke Test Results

Uh oh!

github-actions Bot commented Jul 10, 2026

Smoke Test\n- feat: gVisor runtime support\n- chore: recompile workflows after #6087\n- ✅ GitHub PR query\n- ✅ File write/read\n- ✅ Discussion lookup\n- ✅ Playwright title check\n- ✅ Build\n- Overall status: PASS

Uh oh!

github-actions Bot commented Jul 10, 2026

Smoke Test: Gemini Engine Validation

Uh oh!

github-actions Bot commented Jul 10, 2026

Chroot Version Comparison

Uh oh!

github-actions Bot commented Jul 10, 2026

🏗️ Build Test Suite Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

github-actions Bot commented Jul 10, 2026 •

edited

Loading

github-actions Bot commented Jul 10, 2026 •

edited

Loading

github-actions Bot commented Jul 10, 2026 •

edited

Loading

github-actions Bot commented Jul 10, 2026 •

edited

Loading

github-actions Bot commented Jul 10, 2026 •

edited

Loading