mirror of
https://github.com/vicliu624/trail-mate.git
synced 2026-11-11 14:47:39 +00:00
Trail Mate Dev
6e613e382e
Compose the CM0 fullscreen application and standard Debian package, align the Cardputer Zero shell, and share protocol, configuration, audio and storage services with embedded targets through existing platform seams. Add the paginated on-device TMAP creator using Center's published producer, private workspace recovery and direct keyboard shortcuts. Preserve unfinished management work behind its existing opt-in capability. Include native, ARM and shared-core regression fixtures, integration records, packaging helpers and dependency/license updates. Keep local build trees, device credentials, produced packages and validation logs outside version control. Validation before integration: ESP stack hygiene, Reticulum scope guard, staged whitespace checks and GitNexus scope audit. Prior device/build evidence and remaining hardware/package boundaries are recorded in the acceptance documents.
63 lines
3.5 KiB
Markdown
63 lines
3.5 KiB
Markdown
# Linux HostLink lifecycle and implementation scope
|
|
|
|
The native HostLink service listens on a configurable TCP endpoint, defaults to
|
|
loopback and writes an endpoint locator under the configured SD root. The legacy
|
|
text greeting/echo exchange has now been replaced with shared `HL` binary framing,
|
|
Hello/status and correlated command rejection; see [binary transport](linux-hostlink-binary.md).
|
|
This is not a Linux USB device transport. Basic binary interoperability must not
|
|
be counted as management or route-install interoperability.
|
|
|
|
## Reproduced failure and repair
|
|
|
|
An invalid bind address made the worker terminate with an error. `stop()` then
|
|
returned early because the running flag was already false, leaving a joinable
|
|
thread. Static destruction aborted the process with `terminate called without
|
|
an active exception`. The isolated child-process regression failed before the
|
|
repair and passed afterwards.
|
|
|
|
An owning worker now stops before its mutex, state and string dependencies are
|
|
destroyed. Start/stop are serialized independently from status access. Stop
|
|
always joins an existing worker, even after startup failure. The worker owns
|
|
socket closure; cancellation is observed through the existing bounded poll.
|
|
The control thread no longer closes a descriptor while the worker may be using
|
|
it, avoiding descriptor reuse races. Thread creation failures become service
|
|
errors. Linux socket writes suppress SIGPIPE. Fallback port selection cannot
|
|
wrap above 65535 into an unintended port-zero listener.
|
|
|
|
`LinuxAppServices::shutdown()` explicitly stops HostLink before resource,
|
|
radio and storage service teardown. The process-exit owner remains a fallback.
|
|
|
|
## Verification on 21 October 2026
|
|
|
|
The isolated fixture covers failed listener cleanup and process exit, repeated
|
|
start/stop, four concurrent controllers with ten cycles each, and process exit
|
|
while a listener is active. It also checks endpoint-file cleanup and stopped
|
|
status. An additional public application-service shutdown check passed natively
|
|
and on CM0, confirming the listener is stopped before process exit. The fixture
|
|
passed natively and as armhf code on CM0. The full native
|
|
suite passed 115/115; Cardputer Zero Wayland/framebuffer builds and 14/14 tests
|
|
passed. Platform boundary and ESP stack guards passed.
|
|
|
|
The standard CM0 deb SHA-256 is
|
|
`821dd0285f55d04ccdb32de53e113a21fe315a33d8ddfef23566aa847075fa64`.
|
|
Lintian reported no package diagnostics. Installation and `dpkg -V` passed;
|
|
the original logo and 1232 by 568 P4 render remained correct. Compositor-confirmed
|
|
fullscreen/focused Alt+F4 exited with code zero in 0.699 seconds. No driver or
|
|
boot configuration was changed and no reboot was performed.
|
|
|
|
## Remaining formal management work
|
|
|
|
Reuse the shared frame decoder, router, service codec and management envelope;
|
|
do not invent a native-only route-import protocol. Formal package installation
|
|
also requires actor/session authorization, sealed uploads with ownership and
|
|
hash checks, prepare/status/expiry behavior, retained original signed package
|
|
bytes, publication policy and atomic route/binding publication. Existing shared
|
|
package checks and the native signed-image reader provide validation building
|
|
blocks, but neither supplies this missing transport/transaction service.
|
|
|
|
The relevant formal operations include `TransferBegin` through `TransferFinish`,
|
|
`TrackPackageInstall` (100) and `TrackPackageInstallStatus` (101). The current
|
|
binary transport does not yet implement these operations. It now advertises
|
|
`CapManagement` for operations 0-3 only; see
|
|
[author management](linux-hostlink-author-management.md).
|