Struct WslRecoveryAllocationLock 

pub struct WslRecoveryAllocationLock { /* private fields */ }

Adds the Windows/WSL recovery fence to an ordinary allocation lock, and says on disk when allocations keep being refused.

A Windows watchdog writes its drain request before attempting the same atomic directory claim. Therefore either this process owns the directory and finishes the launches already in progress, or Windows owns it and no new launch can pass. The claim is shared by every launch of this process, from its reservation until its runner is up ([LaunchHold]), and released with the last: a drain request refuses new reservations, so the launches in progress run out and Windows gets the directory, as when there was one. A malformed configured fence fails closed. A guest claim whose owner is provably gone is reclaimed first; see runner_manager_platform::wsl::fence.

Refusals that persist are recorded

A refusal is always safe for one pass, and a refusal on every pass is a host that starts nothing while it looks healthy – 13 days of it, once. So after launch_health::BLOCKED_AFTER_DEFERRALS consecutive refusals spanning at least launch_health::BLOCKED_AFTER, with no launch of this process in progress, the lock writes the state/ record status, service status, wsl status and host doctor read. The next granted allocation removes it. Refusals while this process is itself launching are its own contention and count neither way.

Implementations

impl WslRecoveryAllocationLock

pub fn new(paths: Arc<AppPaths>, inner: Arc<dyn AllocationLock>) -> Self

Trait Implementations

impl AllocationLock for WslRecoveryAllocationLock

fn acquire<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<AllocationGuard, AllocationLockBusy>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Take the lock, waiting briefly for it.

impl Debug for WslRecoveryAllocationLock

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.