hakurei

Author	SHA1	Message	Date
Ophestra	5d9e669d97	sandbox: separate tmpfs function from op This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:21:20 +09:00
Ophestra	f1002157a5	sandbox: separate bind mount function from op This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:16:41 +09:00
Ophestra	4133b555ba	internal/app: rename init to init0 This makes way for the new container init. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 21:57:54 +09:00
Ophestra	9b1a60b5c9	sandbox: native container tooling This should eventually replace bwrap. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 21:36:26 +09:00
Ophestra	beb3918809	test: run go test under regular user By default test vm commands run as root, this causes buildFHSEnv bwrap to cover some parts of /proc, making it impossible to mount proc in a mount namespace created under it. Running as a regular user gets around this issue. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 20:56:32 +09:00
Ophestra	2871426df2	test: print output of failed test Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 16:40:15 +09:00
Ophestra	e048f31baa	internal: pull EINTR loop from stdlib Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:42:38 +09:00
Ophestra	6af8b8859f	sandbox: read overflow ids Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:41:37 +09:00
Ophestra	f38ba7e923	test/sandbox: bypass fields A field is bypassed if it contains a single null byte. This will never appear in the text format so is safe to use. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:00:58 +09:00
Ophestra	d22145a392	ldd: handle musl static behaviour Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 23:29:43 +09:00
Ophestra	29c3f8becb	helper/seccomp: improve error handling This passes both errno and libseccomp return value. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 15:52:48 +09:00
Ophestra	be16970e77	helper/seccomp: seccomp_load on negative fd Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 15:18:52 +09:00
Ophestra	df266527f1	test/sandbox/mount: work around nondeterminism Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 15:16:51 +09:00
Ophestra	c8ed7aae6e	nix: update flake lock Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-10 18:38:14 +09:00
Ophestra	61e58aa14d	helper/proc: expose setup file Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-09 17:22:31 +09:00
Ophestra	9e15898c8f	internal/prctl: rename prctl wrappers Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-07 22:56:35 +09:00
Ophestra	f7bd6a5a41	test/sandbox: check seccomp outcome Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-04 13:30:16 +09:00
Ophestra	ea853e21d9	test/sandbox: check fs outcome Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-03 01:02:09 +09:00
Ophestra	0bd9b9e8fe	test/sandbox: assert filesystem json Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 23:23:04 +09:00
Ophestra	39e32799b3	test/sandbox: compare filesystem hierarchy For checking deterministic aspects of fs outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 22:59:04 +09:00
Ophestra	9953768de5	test: rename session message identifier Labelling this as sway is misleading. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 22:47:33 +09:00
Ophestra	0d3652b793	test/sandbox/assert: wrap printf Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 18:37:46 +09:00
Ophestra	d8e9d71f87	test/sandbox: check mount outcome Do this at the beginning of the test for early failure. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 15:56:15 +09:00
Ophestra	558974b996	test/sandbox: assert mntent json Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 15:40:58 +09:00
Ophestra	4de4049713	test/sandbox: wrap libc getmntent For checking mounts outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 14:56:08 +09:00
Ophestra	2d4cabe786	nix: increase nixfmt max width Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 14:43:46 +09:00
Ophestra	80f9b62d25	app: print comp values early Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 22:27:55 +09:00
Ophestra	673b648bd3	cmd/fpkg: call app in-process Wrapping fortify is slow, painful and error-prone. Start apps in-process instead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 19:51:44 +09:00
Ophestra	45ad788c6d	cmd/fsu: allow switch from fpkg Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 19:42:28 +09:00
Ophestra	56539d8db5	fortify: move internal commands up This improves readability. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 18:02:11 +09:00
Ophestra	840ceb615a	app: handle RunState errors Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:36:14 +09:00
Ophestra	741d011543	fortify: configure seccomp logger early Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:19:36 +09:00
Ophestra	d050b3de25	app: define errors in a separate file Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:12:02 +09:00
Ophestra	5de28800ad	test: verify fsu ppid check Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 16:51:57 +09:00
Ophestra	8e50293ab7	test: remove sway process check This eliminates the race where systemd restarts sway too quick. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 13:52:44 +09:00
Ophestra	12c6d66bfd	cmd/fpkg/test: nixos test fpkg install/start Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 13:12:16 +09:00
Ophestra	d7d2bd33ed	cmd/fpkg/build: expose nixos configuration This should be used sparingly as the NixOS closure is in the bootstrap store which compresses rather poorly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 12:31:18 +09:00
Ophestra	c21a4cff14	nix: wrap fpkg This is usable on nixos now due to the static build. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 12:24:04 +09:00
Ophestra	4fa38d6063	cmd/fpkg: use fortify path from internal Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 12:16:35 +09:00
Ophestra	6d4ac3d9fd	internal: store fortify path in internal This now makes more sense due to the changes in build system. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 12:03:25 +09:00
Ophestra	a5d2f040fb	cmd/fpkg/build: run final build step in nix This used to be a script that had to be run outside of nix because the sandbox disallows access to nix store state. Turns out closureInfo is the proper way to do that. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 23:53:18 +09:00
Ophestra	c62689e17f	nix: interrupt via tty Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 18:20:47 +09:00
Ophestra	39dc8e7bd8	dbus: set process group id This stops signals sent by the TTY driver from propagating to the xdg-dbus-proxy process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 18:12:41 +09:00
Ophestra	5a732d153e	nix: include fsu sources in dist build Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 01:32:47 +09:00
Ophestra	b4549c72be	nix: verify silent signal exit This catches errors in the cleanup process initiated by a signal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 01:22:16 +09:00
Ophestra	1818dc3a4c	system/acl: do not fail gone revert target A removed file effectively already has its ACLs stripped, so failing this makes no sense. Still print a message to warn about it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 01:11:05 +09:00
Ophestra	65094b63cd	system/dbus: filter context cancellation error This message would otherwise show up when alternative exit path is taken due to a signal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 00:57:35 +09:00
Ophestra	f0a082ec84	fortify: improve handling of RevertErr All this error wrapping is getting a bit ridiculous and I might want to do something about that somewhere down the line. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 00:45:00 +09:00
Ophestra	751aa350ee	nix: exclude files ending in ".py" This reduces rebuilds when debugging nixos tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-24 17:41:56 +09:00
Ophestra	e6cd2bb2a8	cmd/fpkg: integrate command handler Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 23:25:12 +09:00

... 3 4 5 6 7 ...

784 Commits