Extract low level UFFD handler to a separate package

[ValentaTomas]

• Extract low level UFFD handler to a separate package
• Remove unused struct
• Improve uffd tests (ensure they are not flaky)
  • Add the 2M hugpages tests

---

Note

Extracts low-level UFFD into a new userfaultfd package, replaces mapping with memory map API, wires into orchestrator, and adds robust 4K/2MB tests; CI enables UFFD and hugepages.

• Orchestrator UFFD refactor:
  • Move low-level handling to new userfaultfd package (Serve, configureApi, Register, copy, Close).
  • Replace mapping with memory package (MemfileMap, MemoryMap.GetOffset); update Firecracker mapping and JSON parsing.
  • Update uffd integration to use userfaultfd.NewUserfaultfdFromFd(...).Serve(...); remove TrackAndReturnNil.
  • Simplify UFFD constants/APIs (remove write-protect helpers; adjust pagefault address/dst handling).
• Tests:
  • Add userfaultfd tests covering 4K and 2MB hugepages; ensure non-flaky behavior.
  • Introduce testutils helpers (NewPageMmap, ContiguousMap, random data, content slicer) and utils.MapKeys.
• CI:
  • Workflow enables unprivileged userfaultfd and mounts hugepages before tests.
• Misc:
  • Minor signature tweak in MaskTemplate.Close.

^{Written by Cursor Bugbot for commit dcea5f1. This will update automatically on new commits. Configure here.}

[ValentaTomas]

I'll improve the tests a little, but the rest should be ready.

[Copilot]

Pull Request Overview

This PR extracts the low-level user fault file descriptor (UFFD) handler into a separate userfaultfd package, improving code organization and modularity. The extraction refactors the UFFD functionality out of the main uffd package into a dedicated userfaultfd subpackage.

• Moved UFFD handling logic from uffd package to new userfaultfd package
• Created abstraction layer with memory mapping interfaces
• Added comprehensive test coverage for UFFD functionality including cross-process scenarios

Reviewed Changes

Copilot reviewed 12 out of 12 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
packages/orchestrator/internal/sandbox/uffd/userfaultfd/userfaultfd_test.go	Comprehensive test suite for UFFD missing page and write protection scenarios
packages/orchestrator/internal/sandbox/uffd/userfaultfd/userfaultfd_cross_process_test.go	Cross-process UFFD tests simulating FC-orchestrator interaction
packages/orchestrator/internal/sandbox/uffd/userfaultfd/userfaultfd.go	Core UFFD operations including registration and copy functionality
packages/orchestrator/internal/sandbox/uffd/userfaultfd/serve.go	UFFD event handling and page fault processing logic
packages/orchestrator/internal/sandbox/uffd/userfaultfd/constants.go	UFFD constants and helper functions with improved address handling
packages/orchestrator/internal/sandbox/uffd/uffd.go	Updated to use new userfaultfd package and memory interfaces
packages/orchestrator/internal/sandbox/uffd/testutils/	Test utilities for memory mapping and data preparation
packages/orchestrator/internal/sandbox/uffd/memory/	Memory mapping interfaces and Firecracker-specific implementations

Comments suppressed due to low confidence (2)

packages/orchestrator/internal/sandbox/uffd/userfaultfd/constants.go:1

• The constant UFFD_FEATURE_WP_HUGETLBFS_SHMEM is being removed but may be needed for write protection features. Verify this removal is intentional and doesn't break functionality.

package userfaultfd

packages/orchestrator/internal/sandbox/uffd/uffd.go:1

• The TrackAndReturnNil method is being removed. Ensure all callers of this method have been updated to handle its removal.

package uffd

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[ValentaTomas]

bugbot run

[ValentaTomas]

✅ Extracted all non-relevant (mostly write-protection and direct memory access related) code to separate PRs so it can be merged in steps.

[djeebus]

Looks good! Just added some opinions, none of which are critical.