From 5646eca119f80f8f45ebec9fcbe666ca614ebf5d Mon Sep 17 00:00:00 2001 From: James O'Doherty Date: Sat, 13 Jun 2026 13:50:25 -0400 Subject: feat: implement system preflight checks and health diagnostics Introduced a tiered system verification mechanism to improve reliability and provide actionable feedback to users, avoiding false positives in the critical execution path. Key changes: - Implement `CheckSystemRequirements` for critical, non-ambiguous requirements (e.g., TUN device availability) to ensure fatal environment issues are caught immediately during bootstrap. - Implement a user-facing `healthcheck` command that provides comprehensive diagnostics and actionable configuration hints for common misconfigurations (e.g., unprivileged user namespaces, subuid/subgid mappings, and kernel sysctls). - Refactor the `FileSystem` interface to support full mockability, allowing for exhaustive unit testing of diagnostic logic. - Add comprehensive unit tests in `internal/namespace/preflight_test.go` covering various Linux distributions, privilege levels, and hardware availability scenarios. - Ensure code quality through formatting, static analysis (golangci-lint), and validation of all existing unit, integration, and E2E tests. --- internal/manager/manager.go | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'internal/manager') diff --git a/internal/manager/manager.go b/internal/manager/manager.go index 270b99e..29bd229 100644 --- a/internal/manager/manager.go +++ b/internal/manager/manager.go @@ -49,6 +49,10 @@ func (m *Manager) Bootstrap(cfg *config.Config) error { return nil } + if err := m.NS.CheckSystemRequirements(); err != nil { + return fmt.Errorf("system check failed: %w", err) + } + // Preserve the host runtime base dir in the environment before bootstrapping. _ = os.Setenv("WG_WRAP_HOST_RUNTIME_BASE_DIR", m.PM.RuntimeBaseDir()) -- cgit v1.2.3