🏅 Sync 2026-09-05 03:00:50

daed/files/daed-guard

@@ -6,4 +6,24 @@ if ! daed_cleanup_runtime; then
 	echo "daed: stale network state could not be removed" >&2
 	exit 1
 fi
-exec /usr/bin/daed "$@"
+
+# Keep daed as a child so a panic or unexpected exit is followed by an
+# immediate teardown of all kernel/runtime state before procd can respawn us.
+child_pid=
+cleanup_child() {
+	[ -n "$child_pid" ] && kill "$child_pid" 2>/dev/null
+}
+trap cleanup_child TERM INT
+
+/usr/bin/daed "$@" &
+child_pid=$!
+wait "$child_pid"
+status=$?
+child_pid=
+trap - TERM INT
+
+if ! daed_cleanup_runtime; then
+	echo "daed: runtime cleanup after exit failed" >&2
+	status=1
+fi
+exit "$status"

daed/files/daed.init

@@ -33,7 +33,9 @@ start_service() {
 
 	procd_set_param limits core="unlimited"
 	procd_set_param limits nofile="1000000 1000000"
-	procd_set_param respawn
+	# Avoid an endless crash/respawn loop which can repeatedly reattach dae's
+	# data-plane hooks and make the router management plane unreachable.
+	procd_set_param respawn 3600 5 5
 	# procd_set_param stdout 1
 	procd_set_param stderr 1