1
0
forked from rosa/hakurei

Commit Graph

  • a1e5f020f4 container: improve doc comments cat 2025-07-27 12:17:21 +09:00
  • bd3fa53a55 container: access test case by index in helper cat 2025-07-26 01:52:36 +09:00
  • 625632c593 nix: update flake lock cat 2025-07-26 12:59:47 +09:00
  • e71ae3b8c5 container: remove custom cmd initialisation cat 2025-07-25 00:43:22 +09:00
  • 9d7a19d162 container: use more reliable nonexistence cat 2025-07-18 23:18:26 +09:00
  • 6ba19a7ba5 release: 0.1.1 v0.1.1 cat 2025-07-09 05:42:31 +09:00
  • 749a2779f5 test/sandbox: add arm64 constants cat 2025-07-09 04:45:54 +09:00
  • e574042d76 test/sandbox: verify seccomp on all test cases cat 2025-07-09 03:47:16 +09:00
  • 2b44493e8a test/sandbox: guard on testtool tag cat 2025-07-07 20:11:29 +09:00
  • c30dd4e630 test/sandbox/seccomp: remove uselib cat 2025-07-07 15:28:55 +09:00
  • d90da1c8f5 container/seccomp: add arm64 constants cat 2025-07-07 14:58:03 +09:00
  • 5853d7700f container/seccomp: move bpf hashes cat 2025-07-07 14:41:47 +09:00
  • d5c7523726 container/init: fix prctl call cat 2025-07-07 14:06:14 +09:00
  • ddfcc51b91 container: move capset implementation cat 2025-07-07 13:47:05 +09:00
  • 8ebedbd88a container: move syscall constants cat 2025-07-07 13:23:01 +09:00
  • 84e8142a2d container/seccomp: move personality constants cat 2025-07-07 12:44:32 +09:00
  • 2c7b7ad845 container/seccomp: cross-platform sysnum cutoff cat 2025-07-07 12:27:00 +09:00
  • 72c2b66fc0 nix: cross-platform syscall wrapper cat 2025-07-07 04:22:55 +09:00
  • 356b42a406 container/init: use /proc/self as intermediate cat 2025-07-06 02:14:35 +09:00
  • d9b6d48e7c add miscellaneous badges cat 2025-07-03 18:04:09 +09:00
  • 087959e81b app: remove split implementation cat 2025-07-03 04:11:38 +09:00
  • e6967b8bbb release: 0.1.0 v0.1.0 cat 2025-07-03 03:42:58 +09:00
  • d2f9a9b83b treewide: migrate to hakurei.app cat 2025-07-03 03:30:39 +09:00
  • 1b5ecd9eaf container: move out of toplevel cat 2025-07-03 02:59:43 +09:00
  • 82561d62b6 system: move system access packages cat 2025-07-02 21:52:07 +09:00
  • eec021cc4b hakurei: move container helpers toplevel cat 2025-07-02 21:31:29 +09:00
  • a1d98823f8 hakurei: move container toplevel cat 2025-07-02 21:23:55 +09:00
  • 255b77d91d cmd/hakurei: move command handlers cat 2025-07-02 20:59:17 +09:00
  • f84ec5a3f8 sandbox/wl: track generated files cat 2025-07-02 20:52:22 +09:00
  • eb22a8bcc1 cmd/hakurei: move to cmd cat 2025-07-02 20:42:51 +09:00
  • 31aef905fa sandbox: expose seccomp interface cat 2025-07-02 04:38:28 +09:00
  • a6887f7253 sandbox/seccomp: import dot for syscall cat 2025-07-02 02:30:35 +09:00
  • 69bd581af7 sandbox/seccomp: append suffix to ops cat 2025-07-02 01:09:04 +09:00
  • 26b7afc890 sandbox/seccomp: prepare -> export cat 2025-07-02 00:32:48 +09:00
  • d5532aade0 sandbox/seccomp: native rule slice in helpers cat 2025-07-02 00:22:27 +09:00
  • 0c5409aec7 sandbox/seccomp: native rule type alias cat 2025-07-02 00:00:08 +09:00
  • 1a8840bebc sandbox/seccomp: resolve rules natively cat 2025-07-01 20:23:33 +09:00
  • 1fb453dffe sandbox/seccomp: extra constants cat 2025-07-01 20:15:42 +09:00
  • e03d702d08 sandbox/seccomp: implement syscall lookup cat 2025-07-01 00:35:27 +09:00
  • 241dc964a6 sandbox/seccomp: wire extra syscall cat 2025-07-01 00:32:08 +09:00
  • 8ef71e14d5 sandbox/seccomp: emit syscall constants cat 2025-06-30 20:34:33 +09:00
  • 972f4006f0 treewide: switch to hakurei.app cat 2025-06-26 04:01:02 +09:00
  • 9a8a047908 sandbox/seccomp: syscall name lookup table cat 2025-06-26 03:48:15 +09:00
  • 863bf69ad3 treewide: reapply clang-format cat 2025-06-25 23:43:42 +09:00
  • 0e957cc9c1 release: 0.0.2 cat 2025-06-25 21:11:11 +09:00
  • aa454b158f cmd/planterette: remove hsu special case cat 2025-06-25 20:44:49 +09:00
  • 7007bd6a1c workflows: port release workflow to github cat 2025-06-25 20:17:53 +09:00
  • 00efc95ee7 workflows: port test workflow to github cat 2025-06-25 19:37:45 +09:00
  • b380bb248c release: 0.0.1 cat 2025-06-25 05:05:06 +09:00
  • 87e008d56d treewide: rename to hakurei cat 2025-06-25 03:59:52 +09:00
  • 3992073212 dist: move comp to dist cat 2025-06-18 16:58:20 +09:00
  • ef80b19f2f treewide: switch to clang-format cat 2025-06-18 13:43:48 +09:00
  • 717771ae80 app: share runtime dir cat 2025-06-08 03:24:48 +09:00
  • bf5772bd8a nix: deduplicate home-manager merging cat 2025-06-07 04:29:32 +09:00
  • 9a7c81a44e nix: go generate in src derivation cat 2025-06-07 03:10:36 +09:00
  • b7e991de5b nix: update flake lock cat 2025-06-02 18:53:28 +09:00
  • 6c1205106d release: 0.4.1 cat 2025-05-26 02:55:19 +09:00
  • 2ffca6984a nix: use reverse-DNS style id as unique identifier cat 2025-05-25 20:12:30 +09:00
  • dde2516304 dbus: handle bizarre dbus proxy behaviour cat 2025-05-25 19:50:06 +09:00
  • f30a439bcd nix: improve common usability cat 2025-05-16 04:38:08 +09:00
  • 008e9e7fc5 nix: update flake lock cat 2025-05-07 19:36:26 +09:00
  • 23aefcd759 fortify: update help strings cat 2025-05-07 19:06:36 +09:00
  • cb8b886446 nix: update flake lock cat 2025-04-22 22:23:21 +09:00
  • 5979d8b1e0 dbus: clean up wrapper implementation cat 2025-04-16 23:10:04 +09:00
  • e587112e63 test: check xdg-dbus-proxy termination cat 2025-04-15 20:45:31 +09:00
  • d6cf736abf release: 0.4.0 cat 2025-04-13 11:10:45 +09:00
  • 15011c4173 app/instance/common: optimise ops allocation cat 2025-04-13 03:46:07 +09:00
  • 31b7ddd122 fst: improve config cat 2025-04-13 03:23:28 +09:00
  • c460892cbd fst: check template cat 2025-04-12 18:00:25 +09:00
  • 6309469e93 app/instance: wrap internal implementation cat 2025-04-12 13:56:41 +09:00
  • 0d7c1a9a43 app: rename app implementation package cat 2025-04-12 10:54:24 +09:00
  • ae6f5ede19 fst: mount passthrough /dev writable cat 2025-04-11 20:01:54 +09:00
  • 807d511c8b test/sandbox: check device outcome cat 2025-04-11 19:55:16 +09:00
  • 2f4f21fb18 fst: rename device field cat 2025-04-11 19:22:00 +09:00
  • 9967909460 sandbox: relative autoetc links cat 2025-04-11 18:54:00 +09:00
  • c806f43881 sandbox: implement autoetc as setup op cat 2025-04-10 18:54:25 +09:00
  • 584405f7cc sandbox/seccomp: rename flag type and constants cat 2025-04-08 01:59:45 +09:00
  • 50127ed5f9 fortify: print synthesised id in ps cat 2025-04-07 21:55:07 +09:00
  • b5eff27c40 fortify: check fst id string length cat 2025-04-07 21:39:46 +09:00
  • 74ba183256 app: install seccomp filter to shim cat 2025-04-07 04:13:08 +09:00
  • f885dede9b sandbox/seccomp: unexport println wrapper cat 2025-04-07 04:07:20 +09:00
  • e9a7cd526f app: improve shim process management cat 2025-04-05 23:51:39 +09:00
  • 12be7bc78e release: 0.3.3 cat 2025-04-01 01:42:10 +09:00
  • 0ba8be659f sandbox: document less obvious parts of setup cat 2025-04-01 01:21:04 +09:00
  • 022242a84a app: wayland socket in process share cat 2025-04-01 00:53:04 +09:00
  • 8aeb06f53c app: share path setup on demand cat 2025-03-31 23:14:00 +09:00
  • 4036da3b5c fst: optional configured shell path cat 2025-03-31 19:31:37 +09:00
  • 986105958c fortify: update show output cat 2025-03-31 04:54:10 +09:00
  • ecdd4d8202 fortify: clean ps output cat 2025-03-31 04:41:08 +09:00
  • bdee0c3921 nix: update flake lock cat 2025-03-30 23:15:18 +09:00
  • 48f634d046 release: 0.3.2 cat 2025-03-30 23:05:57 +09:00
  • 2a46f5bb12 sandbox/seccomp: update doc comment cat 2025-03-30 23:00:20 +09:00
  • 7f2c0af5ad fst: set multiarch bit cat 2025-03-30 22:55:00 +09:00
  • 297b444dfb test: separate app and sandbox cat 2025-03-30 22:03:48 +09:00
  • 89a05909a4 test: move test program to sandbox directory cat 2025-03-30 21:09:16 +09:00
  • f772940768 test/sandbox: treat ESRCH as temporary failure cat 2025-03-30 03:50:59 +09:00
  • 8886c40974 test/sandbox: separate check filter cat 2025-03-29 22:34:51 +09:00
  • 8b62e08b44 test: build test program in nixos config cat 2025-03-29 19:33:17 +09:00
  • 72c59f9229 nix: check share/applications in share package cat 2025-03-29 19:28:20 +09:00
  • ff3cfbb437 test/sandbox: check seccomp outcome cat 2025-03-28 02:24:27 +09:00