feat: add project-composable DeepSeek Harness microVMs

Share the live project cwd, DSH home and skills read-write while running guest root behind rootless QEMU and Bubblewrap. Reuse project toolchains, expose configurable SSH-forwarded web access, and launch the latest official DSH. Include the project template, operating guide, offline boot and mount tests, and shell checks.
2026-09-06 12:45:36 -05:00
parent 221e0b33cc
commit 35ca88d517
14 changed files with 1219 additions and 0 deletions
@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# Offline test of the real microvm.nix runner, mounts, SSH and host-side sandbox.
+set -euo pipefail
+launcher=$1
+tmp=$(mktemp -d)
+export HOME=$tmp/home DSH_HOME=$tmp/dsh DSH_AGENTS_HOME=$tmp/agents XDG_STATE_HOME=$tmp/state
+mkdir -p "$HOME" "$tmp/project" "$DSH_HOME/skills" "$DSH_AGENTS_HOME/skills"
+chmod 700 "$DSH_HOME"
+printf 'not shared\n' > "$HOME/host-only-secret"
+ln -s "$HOME/host-only-secret" "$tmp/project/escape"
+cd "$tmp/project"
+"$launcher" run > "$tmp/launcher.log" 2>&1 &
+pid=$!
+cleanup() {
+  status=$?
+  if (( status )); then
+    grep -h . "$tmp/launcher.log" "$XDG_STATE_HOME"/agent-vm/*/console.log | tail -80 || true
+  fi
+  "$launcher" stop >/dev/null 2>&1 || true
+  kill "$pid" 2>/dev/null || true
+  wait "$pid" 2>/dev/null || true
+  # Never delete real project/config data; everything here is a test fixture.
+  rm -rf "$tmp"
+  return "$status"
+}
+trap cleanup EXIT
+ready=false
+for ((i=0; i<120; i++)); do
+  if "$launcher" ssh true 2>/dev/null; then ready=true; break; fi
+  if ! kill -0 "$pid" 2>/dev/null; then break; fi
+  sleep 2
+done
+if ! $ready; then
+  grep -h . "$tmp/launcher.log" "$XDG_STATE_HOME"/agent-vm/*/console.log || true
+  exit 1
+fi
+[[ $("$launcher" ssh 'id -u') == 0 ]]
+[[ $("$launcher" ssh pwd) == "$tmp/project" ]]
+[[ $("$launcher" ssh nproc) == 4 ]]
+[[ $("$launcher" ssh 'printenv AGENT_PROJECT_TEST') == shared ]]
+[[ $("$launcher" ssh hello) == 'Hello, world!' ]]
+"$launcher" ssh 'test ! -e /workspace/escape; test ! -e /run/host; test -d /nix/.rw-store'
+"$launcher" ssh 'printf edited > /workspace/changed; printf config > /root/.dsh/config-test; printf creds > /root/.dsh/credentials-test; printf skill > /root/.dsh/skills/test.md; printf shared > /root/.agents/skills/test.md'
+[[ $(< changed) == edited && $(< "$DSH_HOME/config-test") == config ]]
+[[ $(< "$DSH_HOME/credentials-test") == creds && $(< "$DSH_HOME/skills/test.md") == skill ]]
+[[ $(< "$DSH_AGENTS_HOME/skills/test.md") == shared ]]
+[[ $(stat -c %u changed) == "$(id -u)" ]]
+"$launcher" ssh 'command -v rg python3 git; findmnt /workspace; findmnt /root/.dsh'
+# A second start must fail without disrupting the existing VM.
+if "$launcher" run >/dev/null 2>&1; then echo 'Duplicate launch succeeded' >&2; exit 1; fi
+"$launcher" stop
+wait "$pid"
+trap - EXIT
+rm -rf "$tmp"
+echo 'PASS: microVM boot, root SSH, shared toolchain, RW cwd/config/creds/skills, host ownership, symlink isolation, duplicate lock, shutdown'