Commit Graph
11 Commits
Author SHA1 Message Date
Mounir IDRASSI 596beb82a1 macOS: harden volume discovery and FUSE-T teardown
Run display discovery asynchronously and bound batched disk-image inventory
queries. Filter auxiliary mounts by basename, filesystem and owner, and
keep unresolved candidates separate from verified volumes. Allow targeted
dismounts despite incomplete discovery while requiring complete results
for slot allocation and empty-inventory decisions.

Use nonthrowing GUI snapshots with monotonic freshness, completion events
and safe window lifetimes. Suspend inactivity decisions while the snapshot
is stale, without restarting idle timers: activity counters are cumulative
per volume instance. Refresh logout targets and retry only failed ones.
Show a progress dialog for interactive unmounts, but keep automatic ones
synchronous, so a quit or logout request that arrives meanwhile is handled
afterwards rather than refused. Guard core operations against reentry and
route wait-dialog requests only from worker threads, so a main-thread
message cannot wait for itself.

Bind teardown to captured mount and service identities, including process
start time. Report a service exit that cannot be confirmed after auxiliary
mount removal as a distinct error that keeps the original details. Such
volumes are not retried, and a multi-volume unmount reports all of them
together with any other failure or a declined prompt. Warn about it after
automatic unmounts and at quit, and keep the background application until
the warning is acknowledged. Keep rollback responsive, and let services
remove their auxiliary directories without probing mounted paths. Preserve
released /control compatibility and perform best-effort cleanup for older
services.

Reap bounded subprocesses as soon as their output ends. A child that
survives SIGKILL is reaped by a later call, which starts no new child until
then. Keep subjects and subprocess command, status and error output when
formatting exceptions for wrapping and logs. Clarify discovery and rollback
diagnostics. Fix the localization-dependent busy-volume regression
assertion and extend discovery, snapshot, process identity, cleanup, GUI
lifecycle, inactivity and teardown coverage.
2026-09-28 03:17:28 +02:00
Mounir IDRASSI aedb2ef863 macOS: harden FUSE-T dismount ownership and teardown
Keep FUSE serving until the auxiliary SMB filesystem is unmounted, then
join the shutdown worker before destroying the FUSE handle. Authenticate
socket peers and bind each request to the service and filesystem instance;
carry the force flag through to unmount and reply before teardown.

Resolve the current disk image before detach instead of trusting cached
BSD device numbers. Clear device and mount metadata when the image is gone,
and abort on inventory errors. Refresh ownership during enumeration and
before filesystem checks. Give each auxiliary mount a random path so an old
backend cannot target a subsequent VeraCrypt mount during cleanup.

Canonicalize the auxiliary path before service startup and hdiutil attach.
Resolve older clients' image paths through TMPDIR aliases without accessing
unrelated images. Treat candidate resolution failures as errors rather than
evidence that an attached image is gone.

Keep a new service provisional over a private inherited socketpair until
control-file readiness and public shutdown endpoint checks succeed. On
startup failure or caller exit, unmount while FUSE still serves and wait for
volume closure and service exit. Report incomplete cleanup explicitly and
keep retrying cleanup in the service if unmounting is temporarily blocked.

Restore dismounts of released services without /shutdown through a
validated legacy flow. Preserve incoming file-protocol notifications and
watch for external unmounts independently of those notifications. Legacy
unmount cannot guarantee termination of an already-running old service.

Use one fixed versioned socket frame and publish the random endpoint in
/shutdown-socket, preserving the three-field /shutdown identity. Remove
compatibility with unpublished socket protocols. Recover from transient
accept and mount-enumeration failures, bound partial-request lifetimes,
and report connection refusal as an availability error. Handle join failure
without unwinding the destructor or freeing a live worker's context.

Map auxiliary EBUSY to MountedVolumeInUse for the GUI force prompt. Return
failure for a single busy non-interactive dismount and log automatic-dismount
failures. Mark inherited descriptors close-on-exec before FUSE setup and
make File::SetCloseOnExec const.

Extend disposable-container tests for released clients and services,
reused device numbers, partial requests, identity validation, forced write
integrity, TMPDIR aliases, and injected startup and rollback failures.
Validated without sudo with a clean arm64 build, unchanged warnings,
algorithm self-tests, the compatibility matrix, descriptor audits, worker
fault-recovery checks, and 24 conditional compilation checks.
2026-09-27 09:28:37 +02:00
Sam HocevarandGitHub c7f69062db Use “unmount” instead of “dismount” in scripts and in text shown to the user. (#1548) 2025-05-31 23:06:30 +09:00
Mounir IDRASSI 1e92048017 Tests: refactor test batch script, clear and better code. 2024-07-26 11:31:28 +02:00
Mounir IDRASSI 3d76bb8f67 Tests: remove RIPEMD160 test container, add blake2s one. Enhance batch script. Harmonize test containers. 2024-07-25 14:22:39 +02:00
Mounir IDRASSIandGitHub bc5c32ad14 Linux: Add Github CI workflow for Linux (#1374)
* Linux/MacOSX: during build, fallback to /tmp if wxWidgets sources not found in parent directory

* Linux: Add Github workflow to build .deb files and test generated binaries

* Linux: fix wrong wxWidgets extract path in yaml

* fix: fix wrong wxWidgets extract path in yaml

* Linux: harmonize content of test volumes and update Github workflow for this

* Fix corrupted test container

* Linux: optimize Github workflow by caching wxBuildConsole and wxBuildGUI folders

We also modify build script to detect the presence of wxBuildConsole and wxBuildGUI folders and reuse them

* Remove files mistakenly added

* Linux: Fix wrong test for Github workflow

* Linux: use static build of wxWidgets for GUI in Github workflow

* Linux: upload also .deb SHA256SUM file if it is generated in Github workflow

* Linux: fix detection logic of parent folder in build scripts

* Github workflow: add build_cmake_deb.sh as trigger to build-linux.yml

* Github workflow: add wxWidgets source code to the cache of workflow
2024-07-06 16:36:56 +02:00
Mounir IDRASSI 153608142d Windows: Add Streebog to the benchmark script 2017-01-12 09:42:56 +01:00
David Foerster fc37cc4a02 Normalize all line terminators 2016-05-10 20:20:14 +02:00
Mounir IDRASSI d462806ea9 Windows: Make benchmark batch file run a PRF measurement only when associated container file is present. 2015-12-31 01:56:16 +01:00
Mounir IDRASSI 21be04cb6e Update test containers and benchmark script to support hidden containers and measure wrong password time 2015-02-28 22:47:41 +01:00
Mounir IDRASSI 39bf211ebe Add test containers and Windows benchmark script for mount performance 2015-02-24 00:41:56 +01:00