hakurei

Author	SHA1	Message	Date
cat	bc54db54d2	ldd: always copy stderr Dropping the buffer on success is unhelpful and could hide some useful information. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 00:08:00 +09:00
cat	bf07b7cd9e	ldd: mount /proc in container This covers host /proc. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 00:01:03 +09:00
cat	5d3c8dcc92	test: raise timeout Native container tooling is severely slowed down by race detector. Raise timeout so it reliably completes. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 23:51:17 +09:00
cat	48feca800f	sandbox: check command function pointer Setting default CommandContext on initialisation is somewhat of a footgun. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 23:29:14 +09:00
cat	42de09e896	helper: implement native container backend Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 02:57:46 +09:00
cat	1576fea8a3	helper: raise WaitDelay during tests Helper runs very slowly with race detector. This prevents it from timing out. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 02:49:41 +09:00
cat	ae522ab364	test: run go tests with race detector Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 02:07:42 +09:00
cat	273d97af85	ldd: lib paths resolve function This is what always happens right after a ldd call, so implement it here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 01:20:09 +09:00
cat	891316d924	helper/stub: copy args to stderr Some helpers are implemented via go test itself in tests, and as a result stdout gets clobbered. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:39:42 +09:00
cat	9f5dad1998	sandbox: return on zero length ops This dodges potentially confusing behaviour where init fails due to Ops being clobbered during transfer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:32:36 +09:00
cat	6e7ddb2d2e	helper: eliminate commandContext replacement This is done more cleanly by modifying Args in cmdF. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:01:25 +09:00
cat	bac4e67867	sandbox/init: early params nil check Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 04:03:10 +09:00
cat	4230281194	sandbox: return error on doubled start Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 03:30:14 +09:00
cat	e64e7608ca	sandbox: expose cancel behaviour Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 03:04:27 +09:00
cat	10a21ce3ef	helper: expose extra files to direct Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 02:27:40 +09:00
cat	0f1f0e4364	helper: combine helper ipc setup The two-step args call is no longer necessary since stat is passed on initialisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 02:10:22 +09:00
cat	f9bf20a3c7	helper: rearrange initialisation args This improves consistency across two different helper implementations. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 01:06:31 +09:00
cat	73c1a83032	helper: move process wrapper to direct Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 00:33:25 +09:00
cat	f443d315ad	helper: clean up interface The helper interface was messy due to odd context acquisition order. That has changed, so this cleans it up. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 00:27:44 +09:00
cat	9e18d1de77	helper/proc: pass extra files and start For integration with native container tooling. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 23:23:57 +09:00
cat	2647a71be1	seccomp: move out of helper Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 22:42:40 +09:00
cat	7c60a4d8e8	helper: embed context on creation Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 18:30:22 +09:00
cat	4bb5d9780f	ldd: run in native sandbox Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 17:55:55 +09:00
cat	f41fd94628	sandbox: write uid/gid map as init This avoids PR_SET_DUMPABLE in the parent process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 17:42:22 +09:00
cat	94895bbacb	sandbox: invert seccomp ruleset defaults Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:38:32 +09:00
cat	f332200ca4	sandbox: mount container /dev Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:18:44 +09:00
cat	2eff470091	sandbox/mount: pass custom tmpfs name The tmpfs driver allows arbitrary fsname. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:12:35 +09:00
cat	a092b042ab	sandbox: pass params to setup ops Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:11:38 +09:00
cat	e94b09d337	sandbox/mount: fix source flag path Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:10:48 +09:00
cat	5d9e669d97	sandbox: separate tmpfs function from op This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:21:20 +09:00
cat	f1002157a5	sandbox: separate bind mount function from op This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:16:41 +09:00
cat	4133b555ba	internal/app: rename init to init0 This makes way for the new container init. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 21:57:54 +09:00
cat	9b1a60b5c9	sandbox: native container tooling This should eventually replace bwrap. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 21:36:26 +09:00
cat	beb3918809	test: run go test under regular user By default test vm commands run as root, this causes buildFHSEnv bwrap to cover some parts of /proc, making it impossible to mount proc in a mount namespace created under it. Running as a regular user gets around this issue. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 20:56:32 +09:00
cat	2871426df2	test: print output of failed test Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 16:40:15 +09:00
cat	e048f31baa	internal: pull EINTR loop from stdlib Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:42:38 +09:00
cat	6af8b8859f	sandbox: read overflow ids Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:41:37 +09:00
cat	f38ba7e923	test/sandbox: bypass fields A field is bypassed if it contains a single null byte. This will never appear in the text format so is safe to use. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:00:58 +09:00
cat	d22145a392	ldd: handle musl static behaviour Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 23:29:43 +09:00
cat	29c3f8becb	helper/seccomp: improve error handling This passes both errno and libseccomp return value. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 15:52:48 +09:00
cat	be16970e77	helper/seccomp: seccomp_load on negative fd Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 15:18:52 +09:00
cat	df266527f1	test/sandbox/mount: work around nondeterminism Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 15:16:51 +09:00
cat	c8ed7aae6e	nix: update flake lock Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-10 18:38:14 +09:00
cat	61e58aa14d	helper/proc: expose setup file Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-09 17:22:31 +09:00
cat	9e15898c8f	internal/prctl: rename prctl wrappers Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-07 22:56:35 +09:00
cat	f7bd6a5a41	test/sandbox: check seccomp outcome Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-04 13:30:16 +09:00
cat	ea853e21d9	test/sandbox: check fs outcome Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-03 01:02:09 +09:00
cat	0bd9b9e8fe	test/sandbox: assert filesystem json Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 23:23:04 +09:00
cat	39e32799b3	test/sandbox: compare filesystem hierarchy For checking deterministic aspects of fs outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 22:59:04 +09:00
cat	9953768de5	test: rename session message identifier Labelling this as sway is misleading. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 22:47:33 +09:00
cat	0d3652b793	test/sandbox/assert: wrap printf Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 18:37:46 +09:00
cat	d8e9d71f87	test/sandbox: check mount outcome Do this at the beginning of the test for early failure. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 15:56:15 +09:00
cat	558974b996	test/sandbox: assert mntent json Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 15:40:58 +09:00
cat	4de4049713	test/sandbox: wrap libc getmntent For checking mounts outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 14:56:08 +09:00
cat	2d4cabe786	nix: increase nixfmt max width Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 14:43:46 +09:00
cat	80f9b62d25	app: print comp values early Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 22:27:55 +09:00
cat	673b648bd3	cmd/fpkg: call app in-process Wrapping fortify is slow, painful and error-prone. Start apps in-process instead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 19:51:44 +09:00
cat	45ad788c6d	cmd/fsu: allow switch from fpkg Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 19:42:28 +09:00
cat	56539d8db5	fortify: move internal commands up This improves readability. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 18:02:11 +09:00
cat	840ceb615a	app: handle RunState errors Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:36:14 +09:00
cat	741d011543	fortify: configure seccomp logger early Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:19:36 +09:00
cat	d050b3de25	app: define errors in a separate file Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:12:02 +09:00
cat	5de28800ad	test: verify fsu ppid check Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 16:51:57 +09:00
cat	8e50293ab7	test: remove sway process check This eliminates the race where systemd restarts sway too quick. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 13:52:44 +09:00
cat	12c6d66bfd	cmd/fpkg/test: nixos test fpkg install/start Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 13:12:16 +09:00
cat	d7d2bd33ed	cmd/fpkg/build: expose nixos configuration This should be used sparingly as the NixOS closure is in the bootstrap store which compresses rather poorly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 12:31:18 +09:00
cat	c21a4cff14	nix: wrap fpkg This is usable on nixos now due to the static build. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 12:24:04 +09:00
cat	4fa38d6063	cmd/fpkg: use fortify path from internal Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 12:16:35 +09:00
cat	6d4ac3d9fd	internal: store fortify path in internal This now makes more sense due to the changes in build system. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 12:03:25 +09:00
cat	a5d2f040fb	cmd/fpkg/build: run final build step in nix This used to be a script that had to be run outside of nix because the sandbox disallows access to nix store state. Turns out closureInfo is the proper way to do that. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 23:53:18 +09:00
cat	c62689e17f	nix: interrupt via tty Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 18:20:47 +09:00
cat	39dc8e7bd8	dbus: set process group id This stops signals sent by the TTY driver from propagating to the xdg-dbus-proxy process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 18:12:41 +09:00
cat	5a732d153e	nix: include fsu sources in dist build Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 01:32:47 +09:00
cat	b4549c72be	nix: verify silent signal exit This catches errors in the cleanup process initiated by a signal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 01:22:16 +09:00
cat	1818dc3a4c	system/acl: do not fail gone revert target A removed file effectively already has its ACLs stripped, so failing this makes no sense. Still print a message to warn about it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 01:11:05 +09:00
cat	65094b63cd	system/dbus: filter context cancellation error This message would otherwise show up when alternative exit path is taken due to a signal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 00:57:35 +09:00
cat	f0a082ec84	fortify: improve handling of RevertErr All this error wrapping is getting a bit ridiculous and I might want to do something about that somewhere down the line. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-25 00:45:00 +09:00
cat	751aa350ee	nix: exclude files ending in ".py" This reduces rebuilds when debugging nixos tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-24 17:41:56 +09:00
cat	e6cd2bb2a8	cmd/fpkg: integrate command handler Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 23:25:12 +09:00
cat	0fb72e5d99	cmd/fpkg/build: prepend extra nix flags Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 20:21:09 +09:00
cat	71135f339a	release: 0.2.18 Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 18:52:33 +09:00
cat	b6af8caffe	nix: clean up directory structure Tests for fpkg is going to be in ./cmd/fpkg, so this central tests directory is no longer necessary. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 18:48:01 +09:00
cat	e1a3549ea0	workflows: separate nixos tests from flake check Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 18:34:42 +09:00
cat	8bf162820b	nix: separate fsu from package This appears to be the only way to build them with different configuration. This enables static linking in the main package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 18:13:37 +09:00
cat	dccb366608	ldd: handle behaviour on static executable Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 18:02:33 +09:00
cat	83c8f0488b	ldd: pass absolute path to bwrap Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 17:46:22 +09:00
cat	478b27922c	fortify: handle errors via MustParse The errSuccess behaviour is kept for beforeExit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 12:57:59 +09:00
cat	ba1498cd18	command: filter parse errors Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 12:55:10 +09:00
cat	eda4d612c2	fortify: keep external files alive This should eliminate sporadic failures, like the known double close in "seccomp". Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 03:24:37 +09:00
cat	2e7e160683	release: 0.2.17 Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 02:59:31 +09:00
cat	79957f8ea7	fortify: test help message This helps catch regressions in "command". Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 02:51:35 +09:00
cat	7e52463445	fortify: integrate command handler Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 02:35:02 +09:00
cat	89970f5197	command/flag: implement repeatable flag Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 02:25:31 +09:00
cat	35037705a9	command/flag: implement integer flag Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 02:02:01 +09:00
cat	647c6ea21b	command: hide internal commands This marks commands as internal via a magic usage string. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 01:36:48 +09:00
cat	416d93e880	command: expose print help This is useful for custom help commands. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 01:17:57 +09:00
cat	312753924b	command: root early handler func special case This allows for early initialisation with access to flags on the root node. This can be useful for configuring global state used by subcommands. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 00:55:18 +09:00
cat	54308f79d2	command: expose command with direct handling This exposes flag set on commands with direct handling. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-23 00:24:03 +09:00
cat	dfa3217037	command: implement builder and parser Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-22 23:11:17 +09:00
cat	8000a2febb	command: implement help builder Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-22 22:43:37 +09:00