S8 — Proxy as the operator, VM as its own user #2256
Description
Slice
The proxy runs as the login user, and the EGW process, gvproxy and the VM as dedicated unprivileged users, as separate processes sharing no writable state.
Tasks:
- T65 — Lay out the split users, directories and socket modes for a split-user VMM #2560 — Lay out the split users, directories and socket modes for a split-user VMM
- T66 — Spawn gvproxy and the VMM child through sudo -n as their dedicated users #2566 — Spawn gvproxy and the VMM child through sudo -n as their dedicated users
- T38 — Run the egress gate and bep_host in an EGW process apart from the proxy #2285 — Run the egress gate and bep_host in an EGW process apart from the proxy
Generated by Claude Code
Activity
norrietaylor commentedon Oct 31, 2026
Closed 2026-10-31 in the #1501 close-out. The design (T57) and the users, directories and socket modes (T65) landed. The owner deferred the rest: the spawn through
sudo -n(#2566) and the EGW process (#2285) move with BEP-047 to the follow-on epic gominimal/inbox#1184. Spec 24 moves BEP-047 to Non-goals in #2768.