rosa/hakurei
6
3
Fork 2
Code Issues 12 Pull Requests 2 Actions 2 Packages Projects Releases 15 Wiki Activity

internal/pkg: optional landlock LSM
All checks were successful
Test / Create distribution (push) Successful in 1m15s
Details
Test / Sandbox (push) Successful in 3m8s
Details
Test / Hakurei (push) Successful in 4m17s
Details
Test / ShareFS (push) Successful in 4m22s
Details
Test / Sandbox (race detector) (push) Successful in 5m43s
Details
Test / Hakurei (race detector) (push) Successful in 6m51s
Details
Test / Flake checks (push) Successful in 1m29s
Details

Browse Source 
The alpine linux riscv64 kernel does not enable Landlock LSM, and kernel compilation is not yet feasible.

Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra
2026-04-07 12:44:07 +09:00
parent 6907700d67
commit 10f8b1c221
2 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
internal/pkg/pkg.go
View File

@@ -521,6 +521,14 @@ const (
// was caused by an incorrect checksum accidentally left behind while
// bumping a package. Only enable this if you are really sure you need it.
CAssumeChecksum
// CHostAbstract disables restriction of sandboxed processes from connecting
// to an abstract UNIX socket created by a host process.
//
// This is considered less secure in some systems, but does not introduce
// impurity due to [KindExecNet] being [KnownChecksum]. This flag exists
// to support kernels without Landlock LSM enabled.
CHostAbstract
)
// Cache is a support layer that implementations of [Artifact] can use to store