feat(init): spawn service over IPC with per-client allowance refunded on child death; up to 4 death watchers; spawntest on test image

crates/init/src/manifest.rs

@@ -20,6 +20,10 @@ pub struct Program {
     pub uses: &'static [&'static str],
     /// Takes the console over from init; everyone else prints through it.
     pub console: bool,
+    /// May have init spawn programs, whose limits together stay within this.
+    pub spawns: Option<Limits>,
+    /// May halt the machine.
+    pub system_control: bool,
 }
 
 /// Enough for a small program: its image, stack and a little heap.
@@ -31,7 +35,17 @@ pub const SMALL: Limits = Limits {
 };
 
 const fn server(name: &'static str, file: &'static [u8], limits: Limits) -> Program {
-    Program { name, file, limits, serves: true, device: None, uses: &[], console: false }
+    Program {
+        name,
+        file,
+        limits,
+        serves: true,
+        device: None,
+        uses: &[],
+        console: false,
+        spawns: None,
+        system_control: false,
+    }
 }
 
 /// Started on every boot. The log server comes first so the rest can print.
@@ -47,6 +61,15 @@ pub const SERVERS: &[Program] = &[
     server("session", b"session.elf", SMALL),
 ];
 
+/// Run on the test image after the SMP self-test, instead of the desktop:
+/// spawns through init, then reports and halts.
+pub const TESTS: &[Program] = &[Program {
+    serves: false,
+    spawns: Some(Limits { pages: 128, endpoints: 2, notifications: 2, regions: 2 }),
+    system_control: true,
+    ..server("spawntest", b"spawntst.elf", SMALL)
+}];
+
 /// The desktop; the test image runs the SMP self-test instead.
 pub const APPS: &[Program] = &[Program {
     serves: false,