maemachinebroke/hakurei
1
0
Fork 0
forked from security/hakurei
Code Pull Requests Activity
1,316 Commits 1 Branch 12 Tags
f8b3db3f6641f79cf1bf1bbb9aa28d6922afe422
Commit Graph

102 Commits

Author SHA1 Message Date
Ophestra
ccc0d98bd7 release: 0.3.2 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-12-09 08:12:52 +09:00
Ophestra
c761e1de4d nix: build with clang 
Clang is better than gcc in various ways. This also pulls in clang-format which is very helpful.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-11-15 16:36:36 +09:00
Ophestra
299685775a container: provide usage example 
This requires cgo so unfortunately will not run in the playground.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-11-14 18:25:22 +09:00
Ophestra
be0e387ab0 internal/info: relocate from internal 
This is cleaner and makes more sense. The longer LDFLAGS was never a valid concern since it is always inserted by a script.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-11-13 07:29:46 +09:00
Ophestra
17ffdb2dcf release: 0.3.1 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-11-12 00:53:14 +09:00
Ophestra
34ccda84b2 release: 0.3.0 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-11-06 01:37:15 +09:00
Ophestra
766dd89ffa internal: clean up build strings 
These names are less ambiguous and should be understandable without reading the source code.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-10-21 01:49:36 +09:00
Ophestra
ad1bc6794f release: 0.2.2 
Unfortunately removal of internal/hlog brought about some changes that breaks API. This will likely be the last 0.2.x release.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-09-28 21:58:19 +09:00
Ophestra
9d932d1039 release: 0.2.1 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-08-26 03:33:45 +09:00
Ophestra
07194c74cb release: 0.2.0 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-08-26 02:23:59 +09:00
Ophestra
f13dca184c release: 0.1.3 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-08-02 00:02:54 +09:00
Ophestra
a8a79a8664 cmd/hpkg: rename from planterette 
Planterette is now developed in another repository, so rename this proof of concept to avoid confusion.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-07-31 23:57:11 +09:00
Ophestra
cb513bb1cd release: 0.1.2 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-07-29 03:11:33 +09:00
Ophestra
625632c593 nix: update flake lock 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-07-26 18:57:54 +09:00
Ophestra
6ba19a7ba5 release: 0.1.1 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-07-09 05:42:31 +09:00
Ophestra
e6967b8bbb release: 0.1.0 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-07-03 03:42:58 +09:00
Ophestra
d2f9a9b83b treewide: migrate to hakurei.app 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-07-03 03:30:39 +09:00
Ophestra
a1d98823f8 hakurei: move container toplevel 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-07-02 21:23:55 +09:00
Ophestra
0e957cc9c1 release: 0.0.2 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-06-25 21:11:11 +09:00
Ophestra
aa454b158f cmd/planterette: remove hsu special case 
Remove special case and invoke hakurei out of process.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-06-25 20:50:24 +09:00
Ophestra
b380bb248c release: 0.0.1 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-06-25 05:05:06 +09:00
Ophestra
87e008d56d treewide: rename to hakurei 
Fortify makes little sense for a container tool.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-06-25 04:57:41 +09:00
Ophestra
3992073212 dist: move comp to dist 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-06-18 17:01:16 +09:00
Ophestra
9a7c81a44e nix: go generate in src derivation 
This saves the generated files in the nix store and exposes them for use by external tools.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-06-07 03:10:36 +09:00
Ophestra
6c1205106d release: 0.4.1 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-05-26 02:55:19 +09:00
Ophestra
d6cf736abf release: 0.4.0 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-04-13 11:10:45 +09:00
Ophestra
12be7bc78e release: 0.3.3 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-04-01 01:42:10 +09:00
Ophestra
48f634d046 release: 0.3.2 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-30 23:05:57 +09:00
Ophestra
2a4e2724a3 release: 0.3.1 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-26 07:48:50 +09:00
Ophestra
92852d8235 release: 0.3.0 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-26 02:18:59 +09:00
Ophestra
b39f3aeb59 helper: remove bubblewrap wrapper 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-25 05:35:02 +09:00
Ophestra
0eb1bc6301 test/sandbox: verify outcome via mountinfo 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-24 01:42:38 +09:00
Ophestra
0a4e633db2 nix: filter test from source 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-23 22:20:19 +09:00
Ophestra
3385538142 nix: clean up flake outputs 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-17 12:26:19 +09:00
Ophestra
4bb5d9780f ldd: run in native sandbox 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-14 17:55:55 +09:00
Ophestra
9b1a60b5c9 sandbox: native container tooling 
This should eventually replace bwrap.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-03-13 21:36:26 +09:00
Ophestra
2d4cabe786 nix: increase nixfmt max width 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-28 14:43:46 +09:00
Ophestra
673b648bd3 cmd/fpkg: call app in-process 
Wrapping fortify is slow, painful and error-prone. Start apps in-process instead.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 19:51:44 +09:00
Ophestra
c21a4cff14 nix: wrap fpkg 
This is usable on nixos now due to the static build.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 12:24:04 +09:00
Ophestra
6d4ac3d9fd internal: store fortify path in internal 
This now makes more sense due to the changes in build system.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-26 12:03:25 +09:00
Ophestra
751aa350ee nix: exclude files ending in ".py" 
This reduces rebuilds when debugging nixos tests.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-24 17:41:56 +09:00
Ophestra
71135f339a release: 0.2.18 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 18:52:33 +09:00
Ophestra
8bf162820b nix: separate fsu from package 
This appears to be the only way to build them with different configuration. This enables static linking in the main package.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 18:13:37 +09:00
Ophestra
2e7e160683 release: 0.2.17 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-23 02:59:31 +09:00
Ophestra
9d9a165379 release: 0.2.16 
Mostly refactor and cleanup, but also contains major fix to process lifecycle management.

Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-19 23:39:16 +09:00
Ophestra
83e72c2b59 release: 0.2.15 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-17 00:13:04 +09:00
Ophestra
90b86a5531 release: 0.2.14 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-15 23:05:02 +09:00
Ophestra
820f48ef94 release: 0.2.13 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-02-13 23:45:54 +09:00
Ophestra
21735a8abe release: 0.2.12 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-01-25 13:40:48 +09:00
Ophestra
7106b00968 release: 0.2.11 
Signed-off-by: Ophestra <cat@gensokyo.uk>
 2025-01-23 20:49:49 +09:00