maemachinebroke/hakurei
1
0
Fork 0
forked from rosa/hakurei
Code Pull Requests Activity
540 Commits 7 Branches 12 Tags
b4549c72bedfae071bae21c0c0c203931b03b286
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
cat b4549c72be nix: verify silent signal exit 
This catches errors in the cleanup process initiated by a signal.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 01:22:16 +09:00
cat 1818dc3a4c system/acl: do not fail gone revert target 
A removed file effectively already has its ACLs stripped, so failing this makes no sense. Still print a message to warn about it.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 01:11:05 +09:00
cat 65094b63cd system/dbus: filter context cancellation error 
This message would otherwise show up when alternative exit path is taken due to a signal.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 00:57:35 +09:00
cat f0a082ec84 fortify: improve handling of RevertErr 
All this error wrapping is getting a bit ridiculous and I might want to do something about that somewhere down the line.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-25 00:45:00 +09:00
cat 751aa350ee nix: exclude files ending in ".py" 
This reduces rebuilds when debugging nixos tests.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-24 17:41:56 +09:00
cat e6cd2bb2a8 cmd/fpkg: integrate command handler 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 23:25:12 +09:00
cat 0fb72e5d99 cmd/fpkg/build: prepend extra nix flags 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 20:21:09 +09:00
cat 71135f339a release: 0.2.18 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 18:52:33 +09:00
cat b6af8caffe nix: clean up directory structure 
Tests for fpkg is going to be in ./cmd/fpkg, so this central tests directory is no longer necessary.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 18:48:01 +09:00
cat e1a3549ea0 workflows: separate nixos tests from flake check 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 18:34:42 +09:00
cat 8bf162820b nix: separate fsu from package 
This appears to be the only way to build them with different configuration. This enables static linking in the main package.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 18:13:37 +09:00
cat dccb366608 ldd: handle behaviour on static executable 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 18:02:33 +09:00
cat 83c8f0488b ldd: pass absolute path to bwrap 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 17:46:22 +09:00
cat 478b27922c fortify: handle errors via MustParse 
The errSuccess behaviour is kept for beforeExit.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 12:57:59 +09:00
cat ba1498cd18 command: filter parse errors 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 12:55:10 +09:00
cat eda4d612c2 fortify: keep external files alive 
This should eliminate sporadic failures, like the known double close in "seccomp".

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 03:24:37 +09:00
cat 2e7e160683 release: 0.2.17 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:59:31 +09:00
cat 79957f8ea7 fortify: test help message 
This helps catch regressions in "command".

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:51:35 +09:00
cat 7e52463445 fortify: integrate command handler 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:35:02 +09:00
cat 89970f5197 command/flag: implement repeatable flag 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:25:31 +09:00
cat 35037705a9 command/flag: implement integer flag 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:02:01 +09:00
cat 647c6ea21b command: hide internal commands 
This marks commands as internal via a magic usage string.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 01:36:48 +09:00
cat 416d93e880 command: expose print help 
This is useful for custom help commands.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 01:17:57 +09:00
cat 312753924b command: root early handler func special case 
This allows for early initialisation with access to flags on the root node. This can be useful for configuring global state used by subcommands.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 00:55:18 +09:00
cat 54308f79d2 command: expose command with direct handling 
This exposes flag set on commands with direct handling.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 00:24:03 +09:00
cat dfa3217037 command: implement builder and parser 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-22 23:11:17 +09:00
cat 8000a2febb command: implement help builder 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-22 22:43:37 +09:00
cat 7bd48d3489 command: implement node structure 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-22 20:30:49 +09:00
cat b5eaeac11a command: declare command interface 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-22 20:29:47 +09:00
cat a9986aab6a system: document I methods 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 19:51:12 +09:00
cat ff30a5ab5d fst: remove empty file 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 19:27:08 +09:00
cat eb0c16dd8c cmd/fpkg: rename buildPackage file 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 18:13:34 +09:00
cat 4fa1e97026 cmd/fpkg: rename shell to shellPath 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 17:50:20 +09:00
cat 64b6dc41ba nix: split integration test 
For adding tests for fpkg.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 17:05:17 +09:00
cat c64b8163e7 app: separate instance from process state 
This works better for the implementation.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-21 16:06:24 +09:00
cat 9d9a165379 release: 0.2.16 
Mostly refactor and cleanup, but also contains major fix to process lifecycle management.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 23:39:16 +09:00
cat d0dff1cac9 wl: check against null character 
Wayland library takes null terminated strings.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 23:35:49 +09:00
cat 3c80fd2b0f app: defer system.I revert 
Just returning an error after a successful call of commit will leave garbage behind with no way for the caller to clean them. This change ensures revert is always called after successful commit with at least per-process state enabled.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 21:12:11 +09:00
cat ef81828e0c app: remove share method 
This is yet another implementation detail from before system.I, getting rid of this vastly cuts down on redundant seal state.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 16:20:25 +09:00
cat 2978a6f046 app: separate appSeal finalise method 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 12:33:51 +09:00
cat dfd9467523 app: merge seal with sys 
The existence of the appSealSys struct was an implementation detail obsolete since system.I was integrated in 084cd84f36.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 01:36:29 +09:00
cat 53571f030e app: embed appSeal in app struct 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 01:10:37 +09:00
cat aa164081e1 app/seal: improve documentation 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 01:04:14 +09:00
cat 9a10eeab90 app/seal: embed enablements 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 00:41:51 +09:00
cat d1f83f40d6 helper/bwrap: rename Write to WriteFile 
In case this might want to be an io.Writer.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 00:34:19 +09:00
cat a748d40745 app: store values with string representation 
Improves code readability without changing memory layout.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 00:25:00 +09:00
cat 648e1d641a app: separate interface from implementation 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 23:07:28 +09:00
cat 3c327084d3 fst: declare wrappers for sandbox config 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 23:04:13 +09:00
cat ffaa12b9d8 sys: wrap log methods 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 22:52:09 +09:00
cat bf95127332 fst: move App interface declaration 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 22:36:45 +09:00
cat e0f321b2c4 sys: rename from linux 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 18:47:48 +09:00
cat 2c9c7fee5b linux: wrap fsu lookup error 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 17:39:53 +09:00
cat d0400f3c81 fmsg: PrintBaseError skip empty message 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 17:01:26 +09:00
cat e9b0f9faef fmsg: export logBaseError function 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-18 13:02:51 +09:00
cat e85be67fd9 acl: implement Update in C 
The original implementation was effectively just writing C in Go.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 21:39:14 +09:00
cat 7e69893264 acl: rename UpdatePerms to Update 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 20:33:18 +09:00
cat 38a3e6af03 system: make xcb internal 
This package is hauntingly ugly. Move this to internal until it is removed or replaced.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 19:07:53 +09:00
cat 90cb01b274 system: move out of internal 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 19:00:43 +09:00
cat b1e1d5627e system: wrap console output functions 
This eliminates all fmsg imports from internal/system.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 18:17:55 +09:00
cat 3ae2ab652e system/wayland: sync file at caller specified address 
Storing this in sys is incredibly ugly: sys should be stateless and Ops must keep track of their state.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 13:24:17 +09:00
cat db71fbe22b system/tmpfiles: fail gracefully in API misuse 
Panicking here leaves garbage behind. Not ideal if this package is going to be exported.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 12:17:01 +09:00
cat 83e72c2b59 release: 0.2.15 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 00:13:04 +09:00
cat 82a072f641 system/tmpfiles: implement private tmpfiles 
These are only available within the mount namespace and should significantly reduce attack surface.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 00:07:52 +09:00
cat 60c10c3f4a nix: run integration tests with race detector 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-16 20:58:08 +09:00
cat 468696f611 internal: beforeExit before reachable fatal calls 
These are the only two calls to log.Fatal* reachable during suspended output. Call fmsg.BeforeExit here to catch that.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-16 19:03:34 +09:00
cat 29c38caac8 app/shim/manager: return error on bad fsu path 
This results in a graceful failure that does not leave garbage behind.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-16 18:59:45 +09:00
cat e599b5583d fmsg: implement suspend in writer 
This removes the requirement to call fmsg.Exit on every exit path, and enables direct use of the "log" package. However, fmsg.BeforeExit is still encouraged when possible to catch exit on suspended output.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-16 18:51:53 +09:00
cat 33a4ab11c2 internal: move shim and init into app 
This structure makes more sense, as both processes are part of an app's lifecycle.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-16 16:28:46 +09:00
cat 1fa5e992e4 helper/bwrap: expose address of DataConfig 
This allows the caller to defer fulfilling its payload.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-16 12:33:59 +09:00
cat c667b13a00 system: separate link Op implementation 
This Op would still be useful after replacing the Tmpfiles interface, so isolate it here.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-16 12:15:26 +09:00
cat 90b86a5531 release: 0.2.14 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 23:05:02 +09:00
cat f545e154f0 workflows: use native nix runner 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 22:58:04 +09:00
cat 268a90f1a5 app: improve WAYLAND_DISPLAY correctness 
This now has identical behaviour as wayland C library.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 14:45:09 +09:00
cat 3054527ca5 fortify: prevent exit status 0 on app failure 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 14:40:19 +09:00
cat ddb2f9c11b app: remove wayland socket hard link 
This Op was not doing anything useful.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 10:54:00 +09:00
cat 6ae02e72fa nix: test direct_wayland behaviour 
This should never be used outside tests unless you absolutely know what you're doing or are using GNOME.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 10:45:27 +09:00
cat 989fb5395f nix: remove unused configuration 
User setup no longer depends on userdb.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 10:10:42 +09:00
cat f955b15b84 system: remove write mode tmpfiles 
This interface is ugly and bug-prone. This change removes its write mode which has been obsoleted by CopyBind.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 03:22:20 +09:00
cat 0340c67995 app: port passwd and group files to copy 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 03:19:06 +09:00
cat 72b0160aad helper/bwrap: implement file copy flags 
These are significantly more efficient and less error-prone than mounting an external tmpfile. This should also reduce attack surface as the resulting files are private to its specific sandbox.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 03:13:15 +09:00
cat ea8d1c07df priv/shim: move /sbin/init setup to app 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 03:06:10 +09:00
cat a0062d8275 fmsg: resume on exit 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 02:22:09 +09:00
cat 43d2e4f5d7 nix: sway increase resolution 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 02:21:24 +09:00
cat be7d944b39 helper/bwrap: PositionalArg implement fmt.Stringer 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 00:11:48 +09:00
cat ace97952cc helper/bwrap: merge Args and FDArgs 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-14 18:13:06 +09:00
cat 73146ea7fa dbus: remove BwrapStatic method 
This method does not do anything and is not called from anywhere. It also does not make any sense as a public interface since the argument builder is no longer stateless.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-14 18:09:59 +09:00
cat 88040504b2 helper/bwrap: remove fmsg import 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-14 18:05:00 +09:00
cat 1fd571d561 cmd/fsu: check parse behaviour 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-14 16:43:55 +09:00
cat be30e2f11e cmd/fsu: revert offset in error message 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-14 15:31:39 +09:00
cat aaebb8f3ab fortify: check print behaviour 
These output are supposed to be deterministic, so checking them is a good way to catch regressions.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-14 14:44:28 +09:00
cat 1f74b636d3 state/join: use Join method when available 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-14 14:11:02 +09:00
cat e431ab3c24 app: check username length against LOGIN_NAME_MAX 
This limit is arbitrary, but it's good to enforce it anyway.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-14 12:44:55 +09:00
cat 3fba33687b fortify: print line after ps output 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-14 12:23:20 +09:00
cat 820f48ef94 release: 0.2.13 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-13 23:45:54 +09:00
cat fe7d208cf7 helper: use generic extra files interface 
This replaces the pipes object and integrates context into helper process lifecycle.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-13 23:34:15 +09:00
cat 60c2873750 helper/proc: cancel ec on parent ctx 
This allows errors written during a timeout to be received and handled.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-13 23:08:28 +09:00
cat d1d20c06fb helper/seccomp: use sync.Once for closeWrite 
This makes the code much cleaner, and eliminates the intermittent ErrInvalid errors.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-13 22:49:16 +09:00
cat 1e6a059668 helper/seccomp: benchmark exporter 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-13 22:37:51 +09:00
cat 318df0f7e1 nix: test syscall filter 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-13 22:01:16 +09:00
cat 58eb8f971d proc/pipe: implement args and stat file 
This is a generic implementation of helper/pipe.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-13 19:57:24 +09:00