maemachinebroke/hakurei
1
0
Fork 0
forked from rosa/hakurei
Code Pull Requests Activity
1,033 Commits 7 Branches 12 Tags
a40d1827061650b5ab438e1cc10e12c31eb1391b
Commit Graph
1033 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
cat f1002157a5 sandbox: separate bind mount function from op 
This is useful in the implementation of various other ops.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-14 00:16:41 +09:00
cat 4133b555ba internal/app: rename init to init0 
This makes way for the new container init.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-13 21:57:54 +09:00
cat 9b1a60b5c9 sandbox: native container tooling 
This should eventually replace bwrap.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-13 21:36:26 +09:00
cat beb3918809 test: run go test under regular user 
By default test vm commands run as root, this causes buildFHSEnv bwrap to cover some parts of /proc, making it impossible to mount proc in a mount namespace created under it. Running as a regular user gets around this issue.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-13 20:56:32 +09:00
cat 2871426df2 test: print output of failed test 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-13 16:40:15 +09:00
cat e048f31baa internal: pull EINTR loop from stdlib 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-13 00:42:38 +09:00
cat 6af8b8859f sandbox: read overflow ids 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-13 00:41:37 +09:00
cat f38ba7e923 test/sandbox: bypass fields 
A field is bypassed if it contains a single null byte. This will never appear in the text format so is safe to use.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-13 00:00:58 +09:00
cat d22145a392 ldd: handle musl static behaviour 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-12 23:29:43 +09:00
cat 29c3f8becb helper/seccomp: improve error handling 
This passes both errno and libseccomp return value.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-12 15:52:48 +09:00
cat be16970e77 helper/seccomp: seccomp_load on negative fd 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-12 15:18:52 +09:00
cat df266527f1 test/sandbox/mount: work around nondeterminism 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-12 15:16:51 +09:00
cat c8ed7aae6e nix: update flake lock 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-10 18:38:14 +09:00
cat 61e58aa14d helper/proc: expose setup file 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-09 17:22:31 +09:00
cat 9e15898c8f internal/prctl: rename prctl wrappers 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-07 22:56:35 +09:00
cat f7bd6a5a41 test/sandbox: check seccomp outcome 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-04 13:30:16 +09:00
cat ea853e21d9 test/sandbox: check fs outcome 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-03 01:02:09 +09:00
cat 0bd9b9e8fe test/sandbox: assert filesystem json 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-02 23:23:04 +09:00
cat 39e32799b3 test/sandbox: compare filesystem hierarchy 
For checking deterministic aspects of fs outcome.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-02 22:59:04 +09:00
cat 9953768de5 test: rename session message identifier 
Labelling this as sway is misleading.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-02 22:47:33 +09:00
cat 0d3652b793 test/sandbox/assert: wrap printf 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-02 18:37:46 +09:00
cat d8e9d71f87 test/sandbox: check mount outcome 
Do this at the beginning of the test for early failure.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-28 15:56:15 +09:00
cat 558974b996 test/sandbox: assert mntent json 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-28 15:40:58 +09:00
cat 4de4049713 test/sandbox: wrap libc getmntent 
For checking mounts outcome.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-28 14:56:08 +09:00
cat 2d4cabe786 nix: increase nixfmt max width 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-28 14:43:46 +09:00
cat 80f9b62d25 app: print comp values early 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 22:27:55 +09:00
cat 673b648bd3 cmd/fpkg: call app in-process 
Wrapping fortify is slow, painful and error-prone. Start apps in-process instead.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 19:51:44 +09:00
cat 45ad788c6d cmd/fsu: allow switch from fpkg 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 19:42:28 +09:00
cat 56539d8db5 fortify: move internal commands up 
This improves readability.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 18:02:11 +09:00
cat 840ceb615a app: handle RunState errors 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 17:36:14 +09:00
cat 741d011543 fortify: configure seccomp logger early 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 17:19:36 +09:00
cat d050b3de25 app: define errors in a separate file 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 17:12:02 +09:00
cat 5de28800ad test: verify fsu ppid check 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 16:51:57 +09:00
cat 8e50293ab7 test: remove sway process check 
This eliminates the race where systemd restarts sway too quick.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 13:52:44 +09:00
cat 12c6d66bfd cmd/fpkg/test: nixos test fpkg install/start 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 13:12:16 +09:00
cat d7d2bd33ed cmd/fpkg/build: expose nixos configuration 
This should be used sparingly as the NixOS closure is in the bootstrap store which compresses rather poorly.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 12:31:18 +09:00
cat c21a4cff14 nix: wrap fpkg 
This is usable on nixos now due to the static build.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 12:24:04 +09:00
cat 4fa38d6063 cmd/fpkg: use fortify path from internal 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 12:16:35 +09:00
cat 6d4ac3d9fd internal: store fortify path in internal 
This now makes more sense due to the changes in build system.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 12:03:25 +09:00
cat a5d2f040fb cmd/fpkg/build: run final build step in nix 
This used to be a script that had to be run outside of nix because the sandbox disallows access to nix store state. Turns out closureInfo is the proper way to do that.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 23:53:18 +09:00
cat c62689e17f nix: interrupt via tty 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 18:20:47 +09:00
cat 39dc8e7bd8 dbus: set process group id 
This stops signals sent by the TTY driver from propagating to the xdg-dbus-proxy process.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 18:12:41 +09:00
cat 5a732d153e nix: include fsu sources in dist build 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 01:32:47 +09:00
cat b4549c72be nix: verify silent signal exit 
This catches errors in the cleanup process initiated by a signal.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 01:22:16 +09:00
cat 1818dc3a4c system/acl: do not fail gone revert target 
A removed file effectively already has its ACLs stripped, so failing this makes no sense. Still print a message to warn about it.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 01:11:05 +09:00
cat 65094b63cd system/dbus: filter context cancellation error 
This message would otherwise show up when alternative exit path is taken due to a signal.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 00:57:35 +09:00
cat f0a082ec84 fortify: improve handling of RevertErr 
All this error wrapping is getting a bit ridiculous and I might want to do something about that somewhere down the line.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 00:45:00 +09:00
cat 751aa350ee nix: exclude files ending in ".py" 
This reduces rebuilds when debugging nixos tests.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-24 17:41:56 +09:00
cat e6cd2bb2a8 cmd/fpkg: integrate command handler 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 23:25:12 +09:00
cat 0fb72e5d99 cmd/fpkg/build: prepend extra nix flags 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 20:21:09 +09:00