libpkgexec

libpkgexec is the native Zeppe-Lin program-execution authority.

It seals how one exact libpkgsource program is to be executed and retains what an execution backend actually established and observed. The core library contains no process syscalls and no Linux-specific executor.

The public contract separates four things that must not be collapsed:

1. an immutable semantic execution request;
2. call-scoped concrete resources supplied to a backend;
3. request-bound operational cancellation control;
4. immutable execution evidence returned by that backend.

A zero process exit is not sufficient for success. Successful evidence also requires the exact interpreter, every requested guarantee, complete requested stream captures, and verified cleanup.

Scope

The v1 core owns:

• build, check, and action-bound lifecycle execution purposes;
• logical read-only and writable resource layouts;
• a closed process environment;
• exact numeric credentials;
• resource limits with exact per-kind capability requirements;
• cancellation policy;
• monotonic call-scoped cancellation sources and tokens;
• controlled backend dispatch for cancellation-enabled requests;
• backend capability profiles;
• started and not-started failure evidence;
• output content identities and optional retained material;
• domain-separated request and evidence identities;
• canonical bounded encoding of execution-owned result evidence under exact caller-supplied request and backend authorities.

It does not own:

• source acquisition or extraction;
• package-input materialization;
• build-result or artifact construction;
• filesystem application;
• lifecycle policy;
• installed-state publication;
• Linux namespaces, Landlock, cgroups, or process supervision;
• CRUX, pkgmk, fakeroot, or pkgman compatibility.

Build

meson setup build \
  -Ddefault_library=shared \
  -Dlink_mode=shared
meson compile -C build
meson test -C build --print-errorlogs

Shared and static builds are separate. default_library and link_mode must select the same mode.

Dependency

libpkgexec 1.4.0 requires libpkgsource >= 2.0.0 and OpenSSL libcrypto.

License

GPL-3.0-or-later.