Commit Graph

  • e99d7affb0 container: use absolute for pathname cat 2025-08-11 02:52:32 +09:00
  • 41ac2be965 container/absolute: wrap safe stdlib functions cat 2025-08-10 03:10:13 +09:00
  • 02271583fb container: remove PATH lookup behaviour cat 2025-08-09 19:08:54 +09:00
  • ef54b2cd08 container/absolute: early absolute pathname check cat 2025-08-09 17:50:03 +09:00
  • 82608164f6 container/params: remove confusingly named error cat 2025-08-09 17:36:36 +09:00
  • edd6f2cfa9 container: document ambient capabilities cat 2025-08-08 02:11:55 +09:00
  • acffa76812 container/ops: implement overlay op cat 2025-08-08 01:50:38 +09:00
  • 8da76483e6 container/path: fix typo "paths" cat 2025-08-08 01:32:48 +09:00
  • 534c932906 container: test case runtime initialisation cat 2025-08-08 01:03:35 +09:00
  • fee10fed4d container: test bypass output buffer on verbose cat 2025-08-08 00:57:27 +09:00
  • a4f7e92e1c test/interactive: helper scripts for tracing cat 2025-08-08 00:49:11 +09:00
  • f1a53d6116 container: raise CAP_DAC_OVERRIDE cat 2025-08-08 00:43:19 +09:00
  • b353c3deea nix: make src overlay writable cat 2025-08-07 18:07:19 +09:00
  • fde5f1ca64 container: buffer test output cat 2025-08-07 02:55:58 +09:00
  • 4d0bdd84b5 container: test respect verbose flag cat 2025-08-07 02:50:00 +09:00
  • 72a931a71a nix: interactive nixos vm cat 2025-08-05 21:31:36 +09:00
  • 9a25542c6d container/init: use mount string constants cat 2025-08-04 04:00:05 +09:00
  • c6be82bcf9 container/path: fhs path constants cat 2025-08-03 20:46:41 +09:00
  • 38245559dc container/ops: mount dev readonly cat 2025-08-03 19:18:53 +09:00
  • 7b416d47dc container/ops: merge mqueue and dev Ops cat 2025-08-03 18:34:55 +09:00
  • 15170735ba container/mount: move tmpfs sysroot prefixing to caller cat 2025-08-03 18:06:41 +09:00
  • 6a3886e9db container/op: unexport bind resolved source field cat 2025-08-03 17:57:37 +09:00
  • ff66296378 container/mount: mount data escape helper function cat 2025-08-03 15:35:32 +09:00
  • 347a79df72 container: improve clone flags readability cat 2025-08-02 18:19:44 +09:00
  • 0f78864a67 container/mount: export mount string constants cat 2025-08-02 17:15:41 +09:00
  • b32b1975a8 hst/container: remove cover cat 2025-08-02 00:34:52 +09:00
  • 2b1eaa62f1 update github notice cat 2025-08-02 00:20:46 +09:00
  • f13dca184c release: 0.1.3 v0.1.3 cat 2025-08-02 00:02:54 +09:00
  • 3b8a3d3b00 app: remount root readonly cat 2025-08-01 23:54:33 +09:00
  • c5d24979f5 container/ops: expose remount as Op cat 2025-08-01 23:48:02 +09:00
  • 1dc780bca7 container/mount: separate remount from bind cat 2025-08-01 23:32:38 +09:00
  • ec33061c92 nix: remove nscd cover cat 2025-08-01 22:04:58 +09:00
  • af0899de96 hst/container: mount tmpfs via magic src string cat 2025-08-01 21:23:52 +09:00
  • 547a2adaa4 container/mount: pass tmpfs flags cat 2025-08-01 18:58:42 +09:00
  • c02948e155 cmd/hakurei: print autoroot configuration cat 2025-08-01 04:29:01 +09:00
  • 387b86bcdd app: integrate container autoroot cat 2025-08-01 04:10:33 +09:00
  • 4e85643865 container: implement autoroot as setup op cat 2025-08-01 04:04:36 +09:00
  • 987981df73 test/sandbox: check pd behaviour cat 2025-08-01 02:11:19 +09:00
  • f14e7255be container/ops: use correct flags value in bind string cat 2025-08-01 00:54:08 +09:00
  • a8a79a8664 cmd/hpkg: rename from planterette cat 2025-07-31 23:57:11 +09:00
  • 3ae0cec000 test: increase vm memory cat 2025-07-31 22:08:01 +09:00
  • 4e518f11d8 container/ops: autoetc implementation to separate file cat 2025-07-31 19:54:03 +09:00
  • cb513bb1cd release: 0.1.2 v0.1.2 cat 2025-07-29 03:11:33 +09:00
  • f7bd28118c hst: configurable wait delay cat 2025-07-29 03:06:49 +09:00
  • 940ee00ffe container/init: configurable lingering process wait delay cat 2025-07-29 02:38:17 +09:00
  • b43d104680 app: integrate interrupt forwarding cat 2025-07-29 02:21:12 +09:00
  • ddf48a6c22 app/shim: implement signal handler outcome in Go cat 2025-07-28 23:38:28 +09:00
  • a0f499e30a app/shim: separate signal handler implementation cat 2025-07-28 21:52:53 +09:00
  • d6b07f12ff container: forward context cancellation cat 2025-07-28 01:44:31 +09:00
  • 65fe09caf9 container: check cancel signal delivery cat 2025-07-28 01:04:29 +09:00
  • a1e5f020f4 container: improve doc comments cat 2025-07-27 12:17:21 +09:00
  • bd3fa53a55 container: access test case by index in helper cat 2025-07-26 01:52:36 +09:00
  • 625632c593 nix: update flake lock cat 2025-07-26 12:59:47 +09:00
  • e71ae3b8c5 container: remove custom cmd initialisation cat 2025-07-25 00:43:22 +09:00
  • 9d7a19d162 container: use more reliable nonexistence cat 2025-07-18 23:18:26 +09:00
  • 6ba19a7ba5 release: 0.1.1 v0.1.1 cat 2025-07-09 05:42:31 +09:00
  • 749a2779f5 test/sandbox: add arm64 constants cat 2025-07-09 04:45:54 +09:00
  • e574042d76 test/sandbox: verify seccomp on all test cases cat 2025-07-09 03:47:16 +09:00
  • 2b44493e8a test/sandbox: guard on testtool tag cat 2025-07-07 20:11:29 +09:00
  • c30dd4e630 test/sandbox/seccomp: remove uselib cat 2025-07-07 15:28:55 +09:00
  • d90da1c8f5 container/seccomp: add arm64 constants cat 2025-07-07 14:58:03 +09:00
  • 5853d7700f container/seccomp: move bpf hashes cat 2025-07-07 14:41:47 +09:00
  • d5c7523726 container/init: fix prctl call cat 2025-07-07 14:06:14 +09:00
  • ddfcc51b91 container: move capset implementation cat 2025-07-07 13:47:05 +09:00
  • 8ebedbd88a container: move syscall constants cat 2025-07-07 13:23:01 +09:00
  • 84e8142a2d container/seccomp: move personality constants cat 2025-07-07 12:44:32 +09:00
  • 2c7b7ad845 container/seccomp: cross-platform sysnum cutoff cat 2025-07-07 12:27:00 +09:00
  • 72c2b66fc0 nix: cross-platform syscall wrapper cat 2025-07-07 04:22:55 +09:00
  • 356b42a406 container/init: use /proc/self as intermediate cat 2025-07-06 02:14:35 +09:00
  • d9b6d48e7c add miscellaneous badges cat 2025-07-03 18:04:09 +09:00
  • 087959e81b app: remove split implementation cat 2025-07-03 04:11:38 +09:00
  • e6967b8bbb release: 0.1.0 v0.1.0 cat 2025-07-03 03:42:58 +09:00
  • d2f9a9b83b treewide: migrate to hakurei.app cat 2025-07-03 03:30:39 +09:00
  • 1b5ecd9eaf container: move out of toplevel cat 2025-07-03 02:59:43 +09:00
  • 82561d62b6 system: move system access packages cat 2025-07-02 21:52:07 +09:00
  • eec021cc4b hakurei: move container helpers toplevel cat 2025-07-02 21:31:29 +09:00
  • a1d98823f8 hakurei: move container toplevel cat 2025-07-02 21:23:55 +09:00
  • 255b77d91d cmd/hakurei: move command handlers cat 2025-07-02 20:59:17 +09:00
  • f84ec5a3f8 sandbox/wl: track generated files cat 2025-07-02 20:52:22 +09:00
  • eb22a8bcc1 cmd/hakurei: move to cmd cat 2025-07-02 20:42:51 +09:00
  • 31aef905fa sandbox: expose seccomp interface cat 2025-07-02 04:38:28 +09:00
  • a6887f7253 sandbox/seccomp: import dot for syscall cat 2025-07-02 02:30:35 +09:00
  • 69bd581af7 sandbox/seccomp: append suffix to ops cat 2025-07-02 01:09:04 +09:00
  • 26b7afc890 sandbox/seccomp: prepare -> export cat 2025-07-02 00:32:48 +09:00
  • d5532aade0 sandbox/seccomp: native rule slice in helpers cat 2025-07-02 00:22:27 +09:00
  • 0c5409aec7 sandbox/seccomp: native rule type alias cat 2025-07-02 00:00:08 +09:00
  • 1a8840bebc sandbox/seccomp: resolve rules natively cat 2025-07-01 20:23:33 +09:00
  • 1fb453dffe sandbox/seccomp: extra constants cat 2025-07-01 20:15:42 +09:00
  • e03d702d08 sandbox/seccomp: implement syscall lookup cat 2025-07-01 00:35:27 +09:00
  • 241dc964a6 sandbox/seccomp: wire extra syscall cat 2025-07-01 00:32:08 +09:00
  • 8ef71e14d5 sandbox/seccomp: emit syscall constants cat 2025-06-30 20:34:33 +09:00
  • 972f4006f0 treewide: switch to hakurei.app cat 2025-06-26 04:01:02 +09:00
  • 9a8a047908 sandbox/seccomp: syscall name lookup table cat 2025-06-26 03:48:15 +09:00
  • 863bf69ad3 treewide: reapply clang-format cat 2025-06-25 23:43:42 +09:00
  • 0e957cc9c1 release: 0.0.2 cat 2025-06-25 21:11:11 +09:00
  • aa454b158f cmd/planterette: remove hsu special case cat 2025-06-25 20:44:49 +09:00
  • 7007bd6a1c workflows: port release workflow to github cat 2025-06-25 20:17:53 +09:00
  • 00efc95ee7 workflows: port test workflow to github cat 2025-06-25 19:37:45 +09:00
  • b380bb248c release: 0.0.1 cat 2025-06-25 05:05:06 +09:00
  • 87e008d56d treewide: rename to hakurei cat 2025-06-25 03:59:52 +09:00