maemachinebroke/hakurei
1
0
Fork 0
forked from rosa/hakurei
Code Pull Requests Activity
2,016 Commits 7 Branches 12 Tags
8541bdd8586f050afd9e7713bb68267c54a9e67c
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
cat 8541bdd858 internal/rosa: wrap per-arch values 
This is cleaner syntax in some specific cases.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-13 02:59:55 +09:00
cat 46be0b0dc8 internal/rosa/nss: buildcatrust 0.4.0 to 0.5.1 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-13 02:18:21 +09:00
cat cbe37e87e7 internal/rosa/python: pytest 9.0.2 to 9.0.3 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-13 02:18:02 +09:00
cat 66d741fb07 internal/rosa/python: pygments 2.19.2 to 2.20.0 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-13 02:13:04 +09:00
cat 0d449011f6 internal/rosa/python: use predictable URLs 
This is much cleaner and more maintainable than specifying URL prefix manually. This change also populates Anitya project identifiers.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-13 02:08:22 +09:00
cat 46428ed85d internal/rosa/python: url pip wheel helper 
This enables a cleaner higher-level helper.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-13 01:59:28 +09:00
cat 081d6b463c internal/rosa/llvm: libclc artifact 
This is built independently of llvm build system to avoid having to build llvm again.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-12 22:57:04 +09:00
cat 11b3171180 internal/rosa/glslang: glslang artifact 
Required by mesa.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-12 22:34:17 +09:00
cat adbb84c3dd internal/rosa/glslang: spirv-tools artifact 
Required by glslang.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-12 22:27:49 +09:00
cat 1084e31d95 internal/rosa/glslang: spirv-headers artifact 
Required by spirv-tools.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-12 22:16:29 +09:00
cat 27a1b8fe0a internal/rosa/mesa: libglvnd artifact 
Required by mesa.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-12 21:27:30 +09:00
cat b2141a41d7 internal/rosa/dbus: xdg-dbus-proxy artifact 
This is currently a hakurei runtime dependency, but will eventually be removed.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-12 19:41:49 +09:00
cat c0dff5bc87 internal/rosa/gnu: gcc set with-multilib-list as needed 
This breaks riscv64.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-12 18:03:45 +09:00
cat 04513c0510 internal/rosa/gnu: gmp explicit CC 
The configure script is hard coded to use gcc without fallback on riscv64.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-12 17:25:15 +09:00
cat 28ebf973d6 nix: add sharefs supplementary group 
This works around vfs inode file attribute race.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-11 23:28:18 +09:00
cat 41aeb404ec internal/rosa/hakurei: 0.3.7 to 0.4.0 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-11 10:53:29 +09:00
cat 0b1009786f release: 0.4.0 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-11 10:49:43 +09:00
cat b390640376 internal/landlock: relocate from package container 
This is not possible to use directly, so remove it from the public API.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 23:56:45 +09:00
cat ad2c9f36cd container: unexport PR_SET_NO_NEW_PRIVS wrapper 
This is subtle to use correctly. It also does not make sense as part of the container API.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 23:45:51 +09:00
cat 67db3fbb8d check: use encoding interfaces 
This turned out not to require specific treatment, so the shared interfaces are cleaner.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 22:11:53 +09:00
cat 560cb626a1 hst: remove enablement json adapter 
The go116 behaviour of built-in new function makes this cleaner.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 20:47:30 +09:00
cat c33a6a5b7e hst: optionally reject insecure options 
This prevents inadvertent use of insecure compatibility features.

Closes #30.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 19:34:02 +09:00
cat 952082bd9b internal/rosa/python: 3.14.3 to 3.14.4 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 02:38:22 +09:00
cat 24a9b24823 internal/rosa/openssl: 3.6.1 to 3.6.2 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 02:38:02 +09:00
cat c2e61e7987 internal/rosa/libcap: 2.77 to 2.78 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 02:37:04 +09:00
cat 86787b3bc5 internal/rosa/tamago: 1.26.1 to 1.26.2 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 02:31:57 +09:00
cat cdfcfe6ce0 internal/rosa/go: 1.26.1 to 1.26.2 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 02:18:27 +09:00
cat 68a2f0c240 internal/rosa/llvm: remove unused field 
This change also renames confusingly named flags field and corrects its doc comment.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 02:13:26 +09:00
cat 7319c7adf9 internal/rosa/llvm: use latest version on arm64 
This also removes arch-specific patches because they were not useful.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 01:07:25 +09:00
cat e9c890cbb2 internal/rosa/llvm: enable cross compilation 
This now passes the test suite.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 00:59:14 +09:00
cat 6f924336fc internal/rosa/llvm: increase stack size 
Some aarch64 regression tests fail intermittently on the default size.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-10 00:56:51 +09:00
cat bd88f10524 internal/rosa/llvm: 22.1.2 to 22.1.3 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-09 17:36:23 +09:00
cat e34e3b917e internal/kobject: process uevent message 
This deals with environment variables generally present in every message.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-08 18:00:04 +09:00
cat b0ba165107 cmd/sharefs: group-accessible permission bits 
This works around the race in vfs via supplementary group.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-08 16:14:47 +09:00
cat 351d6c5a35 cmd/sharefs: reproduce vfs inode file attribute race 
This happens in the vfs permissions check only and stale data appears to never reach userspace.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-08 15:51:36 +09:00
cat f23f73701c cmd/mbf: optional host abstract 
This works around kernels with Landlock LSM disabled. Does not affect cure outcome.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 18:15:49 +09:00
cat 876917229a internal/rosa/go: enable riscv64 bootstrap path 
This is quite expensive, but no other option, unfortunately.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 18:11:42 +09:00
cat 0558032c2d container: do not set static deadline 
This usually ends up in the buffer, or completes well before the deadline, however this can still timeout on a very slow system.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 17:00:20 +09:00
cat c61cdc505f internal/params: relocate from package container 
This does not make sense as part of the public API, so make it internal.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 16:37:44 +09:00
cat 062edb3487 container: remove setup pipe helper 
The API forces use of finalizer to close the read end of the setup pipe, which is no longer considered acceptable. Exporting this as part of package container also imposes unnecessary maintenance burden.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 16:05:33 +09:00
cat e4355279a1 all: optionally forbid degrading in tests 
This enables transparently degradable tests to be forced on in environments known to support them.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 15:22:52 +09:00
cat 289fdebead container: transparently degrade landlock in tests 
Explicitly requiring landlock in tests will be supported in a future change.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 15:03:48 +09:00
cat 9c9e190db9 ldd: remove timeout 
The program generally never blocks, and it is more flexible to leave it up to the caller to set a timeout.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 14:49:20 +09:00
cat d7d42c69a1 internal/pkg: transparently degrade landlock in tests 
This does not test package container, so should transparently cope with Landlock LSM being unavailable.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 14:44:34 +09:00
cat c758e762bd container: skip landlock on hostnet 
This overlaps with net namespace, so can be skipped without degrading security.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 14:36:44 +09:00
cat 10f8b1c221 internal/pkg: optional landlock LSM 
The alpine linux riscv64 kernel does not enable Landlock LSM, and kernel compilation is not yet feasible.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-07 12:44:07 +09:00
cat 6907700d67 cmd/dist: set hsu tar header mode bits 
This has no effect, but is nice to have.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-06 23:37:38 +09:00
cat 0243f3ffbd internal/rosa/stage0: add riscv64 tarball 
This had not yet passed all test suites because emulator is prohibitively slow.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-06 13:57:43 +09:00
cat cd0beeaf8e internal/uevent: optionally pass UUID during coldboot 
This enables rejection of non-coldboot synthetic events.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-06 12:42:47 +09:00
cat a69273ab2a cmd/dist: replace dist/release.sh 
This is much more robust than a shell script.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 23:58:08 +09:00
cat 4cd0f57e48 dist: remove redundant cleanup 
This breaks on shells that do not evaluate pathnames.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 16:16:37 +09:00
cat 33a0e6c01b hst: conditionally skip root remount 
This enables the writable root overlay use case.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 14:04:21 +09:00
cat d58f5c7590 dist: destroy workdir on exist 
This no longer relies on the hermetic build system to clean up.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 13:32:16 +09:00
cat 1da992e342 dist: prefix from environment 
These are baked in, so make them configurable for the build.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 13:11:44 +09:00
cat 9641805ec2 container/init: ignore finished process 
This is not considered an error, if the process finishes while the signal is being delivered.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 00:38:33 +09:00
cat 0738f4889a internal/rosa/gnu: fetch mpc source via git 
Eliminates the xz dependency.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 00:35:15 +09:00
cat 7de3cfe221 internal/rosa/netfilter: fetch iptables source via git 
Eliminates the xz dependency.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 00:19:40 +09:00
cat 8b0648dd5d internal/rosa/netfilter: fetch libnftnl source via git 
Eliminates the xz dependency.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 00:14:45 +09:00
cat 4667fac76c internal/rosa/libbsd: fetch source via git 
Eliminates the xz dependency.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 00:05:56 +09:00
cat 52e5443b0e internal/rosa/libbsd: fetch libmd source via git 
Eliminates the xz dependency.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-05 00:02:56 +09:00
cat 130e470b60 internal/rosa/libxslt: fetch source via git 
Eliminates the xz dependency.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-04 23:05:10 +09:00
cat ba5ee8e3ee internal/rosa/libxml2: fetch source via git 
Eliminates the xz dependency. This also switches to meson to avoid pulling in autotools.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-04 22:58:29 +09:00
cat d1cef30877 internal/rosa/gtk: fetch glib source via git 
This eliminates xz dependency.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-04 22:47:10 +09:00
cat 0188a3f0c7 internal/rosa/gnu: gnutls disable arm64 hardware acceleration 
Hardware on arm64 is quite messy, this miscompiles.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-04 23:37:18 +09:00
cat 04fe3b24ce internal/rosa/gnu: gnutls configure trust store 
The test suite is somehow happy on amd64 but fails on arm64.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-04 22:33:51 +09:00
cat 93ad551054 internal/rosa/git: shallow clone 
The .git directory is destroyed anyway, so no point fetching more than the bare minimum.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-04 20:14:40 +09:00
cat 3d54d1f176 internal/rosa: drop caches 
This enables accurate benchmarking of the toolchain abstraction.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 20:58:23 +09:00
cat 9feac7738f internal/pkg: optionally suppress via assumed checksum 
This is quite error-prone and causes cache inconsistency similar to the store inconsistency seen on nix when a similar condition happens. Keep this behind a flag in case it is ever beneficial.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 20:33:59 +09:00
cat 591a60bac9 internal/pkg: per-cache SCHED_IDLE 
This is cleaner than setting it globally, and is impossible to race.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 16:49:34 +09:00
cat 5093a06026 internal/pkg: cache flags 
This is cleaner for extending the API.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 16:16:55 +09:00
cat 50c1d7f880 internal/rosa/kernel: 6.12.78 to 6.12.80 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 16:14:16 +09:00
cat 9e63633fbc container: remove test timeouts 
These timeouts are no longer useful, and causes spurious test failures under load.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 10:51:37 +09:00
cat 61f981a34a internal/rosa/perl: 5.42.1 to 5.42.2 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 10:45:25 +09:00
cat d717c41bbe internal/rosa/cmake: 4.3.0 to 4.3.1 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 10:45:07 +09:00
cat b896eec9b7 internal/rosa/gnu: parallel 20260222 to 20260322 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 10:44:48 +09:00
cat 8ab99e5e40 internal/rosa/util-linux: 2.41.3 to 2.42 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 10:44:25 +09:00
cat 2b6160ef7d internal/rosa/wayland: wayland-protocols 1.47 to 1.48 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 10:44:04 +09:00
cat 4dcac7f133 internal/rosa/xz: 5.8.2 to 5.8.3 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 10:43:37 +09:00
cat 966fd4df9e internal/rosa: connman artifact 
Will be gradually replaced with a native implementation.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 01:17:10 +09:00
cat a2cf59b989 internal/rosa/ncurses: also build dynamic library 
GNU readline breaks without this.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 01:13:04 +09:00
cat e87f59c4e4 internal/rosa/gnu: readline artifact 
Nice to have library for command line programs.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 00:42:59 +09:00
cat 3b221c3e77 internal/rosa/gnu: gnutls artifact 
Incredibly ugly and expensive package, but unfortunately required by some packages.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 00:36:28 +09:00
cat ff3b385b12 internal/rosa: libunistring artifact 
Required by GnuTLS.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-03 00:00:13 +09:00
cat c6920e6ab7 cmd/mbf: pick up $TERM 
This improves behaviour of some programs.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-02 23:59:15 +09:00
cat 59b25d45fe internal/pkg: pick up $TERM if attaching stdin 
This improves behaviour of some programs.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-02 23:50:07 +09:00
cat 9b99650eb1 internal/rosa: libev artifact 
Required by gnutls.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-02 23:35:01 +09:00
cat 15bff9e1a6 internal/rosa/git: determine reporting name from url 
This is generally correct, and is a lot cleaner to call.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-02 22:42:16 +09:00
cat b948525c07 internal/rosa: nettle3 artifact 
Removed after all packages upgrade for nettle 4.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-02 22:12:39 +09:00
cat 9acbd16e9a internal/rosa/p11: explicitly enable libffi 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-02 22:05:07 +09:00
cat 64e5a1068b internal/rosa: libtasn1 artifact 
Optional dependency of p11-kit.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-01 17:20:12 +09:00
cat b6cbd49d8c internal/rosa: p11-kit artifact 
Another package distributed in xz only. This is fetched from the git remote directly to avoid XZ Utils.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-01 16:34:30 +09:00
cat 6913b9224a internal/rosa/git: recursively clone submodules 
There is generally no reason to disable this, so it was not made optional.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-01 16:21:46 +09:00
cat 9584958ecc internal/rosa/pkg-config: generate build system 
This unfortunately pulls automake, libtool and their dependencies into stage2.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-04-01 15:31:24 +09:00
cat 389844b1ea internal/rosa/gnu: mpc 1.3.1 to 1.4.0 
This package now unfortunately switched to xz as well.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-03-31 23:56:20 +09:00
cat 5b7ab35633 internal/rosa: iptables artifact 
This also pulls in netlink libraries from netfilter project.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-03-31 23:47:16 +09:00
cat 52b1a5a725 internal/rosa: use type P in helper interface 
This is easier to type and serialises correctly.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-03-31 23:45:01 +09:00
cat 6b78df8714 internal/rosa: libmd and libbsd artifacts 
These provide headers that are provided by glibc but not musl.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-03-31 22:57:08 +09:00
cat dadf170a46 internal/rosa: dbus artifact 
Unfortunate ugly indirect dependency we cannot yet get rid of.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-03-31 21:47:05 +09:00
cat 9594832302 internal/rosa/meson: disallow download 
This will fail and waste time on KindExec, and cause nondeterminism in KindExecNet.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-03-31 21:38:09 +09:00
cat 91a2d4d6e1 internal/uevent: integrate error handling in event loop 
There are many subtleties when recovering from errors in the event loop, and coldboot requires internals to drain the receive buffer as synthetic uevents are being arranged.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2026-03-31 00:10:14 +09:00