gecko-dev/build
Jed Davis 3680ce4b19 Bug 1440203 - Support memfd_create in IPC shared memory. r=glandium
This commit also allows `memfd_create` in the seccomp-bpf policy for all
process types.

`memfd_create` is an API added in Linux 3.17 (and adopted by FreeBSD
for the upcoming version 13) for creating anonymous shared memory
not connected to any filesystem.  Supporting it means that sandboxed
child processes on Linux can create shared memory directly instead of
messaging a broker, which is unavoidably slower, and it should avoid
the problems we'd been seeing with overly small `/dev/shm` in container
environments (which were causing serious problems for using Firefox for
automated testing of frontend projects).

`memfd_create` also introduces the related operation of file seals:
irrevocably preventing types of modifications to a file.  Unfortunately,
the most useful one, `F_SEAL_WRITE`, can't be relied on; see the large
comment in `SharedMemory:ReadOnlyCopy` for details.  So we still use
the applicable seals as defense in depth, but read-only copies are
implemented on Linux by using procfs (and see the comments on the
`ReadOnlyCopy` function in `shared_memory_posix.cc` for the subtleties
there).

There's also a FreeBSD implementation, using `cap_rights_limit` for
read-only copies, if the build host is new enough to have the
`memfd_create` function.

Differential Revision: https://phabricator.services.mozilla.com/D90605
2020-10-08 02:25:20 +00:00
..
autoconf Bug 1669633 - Don't recurse into js/src for the python-part of configure. r=firefox-build-system-reviewers,rstewart 2020-10-07 21:13:19 +00:00
build-clang Bug 1667841 - Update revert-r362047-and-r362065.patch for clang-12 r=firefox-build-system-reviewers,rstewart 2020-09-28 19:03:18 +00:00
build-infer
clang-plugin Bug 1664898 - move media/mtransport to media/transport. r=ng 2020-09-22 21:43:49 +00:00
compare-mozconfig Bug 1651824 - Run `mozboot` and `compare-mozconfig` unit tests in `mozbuild` task and not in `make check` r=froydnj 2020-07-10 18:25:07 +00:00
debian-packages Bug 1647880 - Upgrade cmake to 3.16.3 for toolchain builds. r=firefox-build-system-reviewers,rstewart 2020-06-24 15:17:03 +00:00
docs Bug 1588458 - Replace dxr by searchfox in the rst doc r=ahal DONTBUILD 2020-10-08 08:13:15 +00:00
gyp_includes
liblowercase Bug 1638401 - Make liblowercase also wrap fxstatat. r=froydnj 2020-05-15 17:10:34 +00:00
macosx Bug 1669642 - Rename LLVMCONFIG to LLVM_CONFIG and derive it like we do for LLVM_OBJDUMP. r=firefox-build-system-reviewers,andi,rstewart 2020-10-07 22:36:49 +00:00
mobile Bug 1638974 - Run 'mach mochitest' with Python 3; r=bc 2020-09-28 16:30:33 +00:00
moz.configure Bug 1440203 - Support memfd_create in IPC shared memory. r=glandium 2020-10-08 02:25:20 +00:00
package/mac_osx
pgo Bug 1663424 - fix pgo file writing from non-webcontent child processes in PROFILE_GENERATE runs, r=dmajor 2020-09-08 17:08:41 +00:00
sanitizers Bug 1656526 - Add resolver_64.cc to asan_blacklist_win.txt r=dmajor 2020-09-15 14:50:26 +00:00
sparse-profiles Bug 1661117 - Follow-up to update standalone WR CI for osmesa-src bump. r=kvark 2020-09-16 18:02:45 +00:00
tests/cram
unix Bug 1652374 - Use LLD for non-PGO-profile-use clang builds on automation. r=froydnj 2020-08-04 02:26:42 +00:00
valgrind Bug 1657650 - Require that Mach command providers subclass MachCommandBase. r=remote-protocol-reviewers,marionette-reviewers,maja_zf,mhentges,froydnj 2020-08-07 18:24:59 +00:00
win32 Bug 1669409: Convert the nsIPrintSettings:kEnableSelectionRB flag into a boolean, since it's the only entry in a bitfield. r=jwatt,emilio 2020-10-07 00:36:51 +00:00
win64 Bug 1642727 - Remove the VarCache machinery r=njn 2020-09-08 17:12:01 +00:00
win64-aarch64 Bug 1620165 - Prepare win64-aarch64 mozconfigs for cross-compilation. r=dmajor 2020-03-05 22:56:28 +00:00
workspace-hack Bug 1622328 - build/workspace-hack/src/lib.rs: Add the license r=firefox-build-system-reviewers,rstewart 2020-03-13 21:32:12 +00:00
.gdbinit Bug 1642121 - Remove directory dependence of GDB init files. r=nalexander 2020-06-16 15:45:43 +00:00
.gdbinit.loader Bug 1642121 - Remove directory dependence of GDB init files. r=nalexander 2020-06-16 15:45:43 +00:00
.gdbinit.py.in Bug 1642121 - Remove directory dependence of GDB init files. r=nalexander 2020-06-16 15:45:43 +00:00
.lldbinit.in Bug 1654994 - Switch full symbols archive to tar.zst. r=firefox-build-system-reviewers,rstewart,tomprince 2020-07-31 20:27:54 +00:00
RunCbindgen.py Bug 1646936 - Generate a single metadata file in the objdir, and feed it to cbindgen. r=glandium 2020-06-26 10:41:26 +00:00
__init__.py
appini_header.py Bug 1625461 - Fix bug where conditionally including the update URL in application.ini breaks building without the updater r=rstewart 2020-03-31 21:11:10 +00:00
application.ini.in Bug 1630041 - Allow setting the update host via set define at build time. r=glandium 2020-04-23 08:08:39 +00:00
binary-location.mk
build_virtualenv_packages.txt Bug 1663755 - Remove `inherit-from-parent-environment` implementation r=ahal 2020-09-11 22:14:41 +00:00
buildconfig.py
cargo-host-linker
cargo-host-linker.bat
cargo-linker
cargo-linker.bat
checksums.py
common_virtualenv_packages.txt Bug 1656993: Create and require by default global `virtualenv`s in `~/.mozbuild` for `mach` r=mhentges,ahal 2020-08-17 17:21:02 +00:00
defines.sh
dumbmake-dependencies
gecko_templates.mozbuild
gen_symverscript.py
gen_test_packages_manifest.py Bug 1644778 - add a mozperftest to measure browser.xhtml DOM size, r=tarek,dhouse,sparky 2020-07-13 15:44:38 +00:00
genrc.sh
gn.mozbuild
gyp.mozbuild Bug 1638830 - Remove `MOZ_WEBRTC_HARDWARE_AEC_NS` and its related code r=padenot 2020-05-20 13:22:40 +00:00
gyp_base.mozbuild
mach_bootstrap.py Bug 1668718 - Don't `import mach_bootstrap` for `virtualenv`s that don't have `populate_local_paths` set, or in Python 3 r=mhentges,firefox-build-system-reviewers 2020-10-05 17:05:05 +00:00
mach_virtualenv_packages.txt Bug 1656993: Create and require by default global `virtualenv`s in `~/.mozbuild` for `mach` r=mhentges,ahal 2020-08-17 17:21:02 +00:00
midl.py Bug 1661739 - Adjust merge_dlldata to widl output. r=nalexander 2020-09-01 20:25:49 +00:00
moz-automation.mk Bug 1648651 - Fix building with --disable-compile-environment. r=firefox-build-system-reviewers,rstewart 2020-06-28 23:43:18 +00:00
moz.build Bug 1646936 - Generate a single metadata file in the objdir, and feed it to cbindgen. r=glandium 2020-06-26 10:41:26 +00:00
mozconfig.artifact Bug 1654994 - Make full symbols archive opt-in rather than opt-out. r=froydnj 2020-07-31 10:01:54 +00:00
mozconfig.artifact.automation Bug 1607193 - Remove MOZ_AUTOMATION_L10N_CHECK; r=firefox-build-system-reviewers,rstewart 2020-03-13 18:34:05 +00:00
mozconfig.automation Bug 1607193 - Remove MOZ_AUTOMATION_L10N_CHECK; r=firefox-build-system-reviewers,rstewart 2020-03-13 18:34:05 +00:00
mozconfig.cache Bug 1632723 - Update builders to rustc 1.43. r=firefox-build-system-reviewers,rstewart 2020-04-29 21:21:36 +00:00
mozconfig.clang-cl Bug 1648519 - Add back clang lib directory to LIB on Windows r=glandium 2020-06-26 19:36:30 +00:00
mozconfig.comm-support
mozconfig.common
mozconfig.common.override
mozconfig.lld-link
mozconfig.nasm
mozconfig.no-compile Bug 1669642 - Rename LLVMCONFIG to LLVM_CONFIG and derive it like we do for LLVM_OBJDUMP. r=firefox-build-system-reviewers,andi,rstewart 2020-10-07 22:36:49 +00:00
mozconfig.node
mozconfig.rust
mozconfig.wasm-sandboxing Bug 1626174 - Enable use of wasm sandboxed libOgg in the OggDemuxer in linux, mac, try servers r=padenot,erahm,dmajor,firefox-build-system-reviewers 2020-04-22 11:16:10 +00:00
mozconfig.win-common Bug 1654994 - Stop setting up makecab for the build. r=firefox-build-system-reviewers,rstewart 2020-07-31 10:01:53 +00:00
non-unified-compat Bug 1666993 - new bakend for static-analysis that prevents regressing issues with files that can be built outside of the unified environment. r=botond 2020-09-30 04:29:25 +00:00
qemu-wrap
submit_telemetry_data.py
templates.mozbuild Bug 1646936 - Generate a single metadata file in the objdir, and feed it to cbindgen. r=glandium 2020-06-26 10:41:26 +00:00
test_templates.mozbuild Bug 1621441 - Update Python scripts that depend on PyECC to run in Python 3 and to leverage the ecdsa library instead r=glandium,keeler 2020-04-17 20:56:09 +00:00
update-settings.ini
upload.py
upload_generated_sources.py Bug 985141 - [mozbuild] Remove leading underscore from MozbuildObject._activate_virtualenv, r=firefox-build-system-reviewers,perftest-reviewers,andi,AlexandruIonescu,rstewart 2020-07-28 16:06:10 +00:00
variables.py Bug 1620744 - Convert variables.py:source_repo_header() to py3; r=firefox-build-system-reviewers,rstewart 2020-03-10 20:19:24 +00:00
windows_toolchain.py