100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
cat	0b1009786f	release: 0.4.0 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-11 10:49:43 +09:00
cat	b390640376	internal/landlock: relocate from package container ... This is not possible to use directly, so remove it from the public API. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 23:56:45 +09:00
cat	ad2c9f36cd	container: unexport PR_SET_NO_NEW_PRIVS wrapper ... This is subtle to use correctly. It also does not make sense as part of the container API. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 23:45:51 +09:00
cat	67db3fbb8d	check: use encoding interfaces ... This turned out not to require specific treatment, so the shared interfaces are cleaner. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 22:11:53 +09:00
cat	560cb626a1	hst: remove enablement json adapter ... The go116 behaviour of built-in new function makes this cleaner. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 20:47:30 +09:00
cat	c33a6a5b7e	hst: optionally reject insecure options ... This prevents inadvertent use of insecure compatibility features. Closes #30. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 19:34:02 +09:00
cat	952082bd9b	internal/rosa/python: 3.14.3 to 3.14.4 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 02:38:22 +09:00
cat	24a9b24823	internal/rosa/openssl: 3.6.1 to 3.6.2 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 02:38:02 +09:00
cat	c2e61e7987	internal/rosa/libcap: 2.77 to 2.78 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 02:37:04 +09:00
cat	86787b3bc5	internal/rosa/tamago: 1.26.1 to 1.26.2 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 02:31:57 +09:00
cat	cdfcfe6ce0	internal/rosa/go: 1.26.1 to 1.26.2 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 02:18:27 +09:00
cat	68a2f0c240	internal/rosa/llvm: remove unused field ... This change also renames confusingly named flags field and corrects its doc comment. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 02:13:26 +09:00
cat	7319c7adf9	internal/rosa/llvm: use latest version on arm64 ... This also removes arch-specific patches because they were not useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 01:07:25 +09:00
cat	e9c890cbb2	internal/rosa/llvm: enable cross compilation ... This now passes the test suite. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 00:59:14 +09:00
cat	6f924336fc	internal/rosa/llvm: increase stack size ... Some aarch64 regression tests fail intermittently on the default size. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-10 00:56:51 +09:00
cat	bd88f10524	internal/rosa/llvm: 22.1.2 to 22.1.3 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-09 17:36:23 +09:00
cat	e34e3b917e	internal/kobject: process uevent message ... This deals with environment variables generally present in every message. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-08 18:00:04 +09:00
cat	b0ba165107	cmd/sharefs: group-accessible permission bits ... This works around the race in vfs via supplementary group. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-08 16:14:47 +09:00
cat	351d6c5a35	cmd/sharefs: reproduce vfs inode file attribute race ... This happens in the vfs permissions check only and stale data appears to never reach userspace. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-08 15:51:36 +09:00
cat	f23f73701c	cmd/mbf: optional host abstract ... This works around kernels with Landlock LSM disabled. Does not affect cure outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 18:15:49 +09:00
cat	876917229a	internal/rosa/go: enable riscv64 bootstrap path ... This is quite expensive, but no other option, unfortunately. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 18:11:42 +09:00
cat	0558032c2d	container: do not set static deadline ... This usually ends up in the buffer, or completes well before the deadline, however this can still timeout on a very slow system. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 17:00:20 +09:00
cat	c61cdc505f	internal/params: relocate from package container ... This does not make sense as part of the public API, so make it internal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 16:37:44 +09:00
cat	062edb3487	container: remove setup pipe helper ... The API forces use of finalizer to close the read end of the setup pipe, which is no longer considered acceptable. Exporting this as part of package container also imposes unnecessary maintenance burden. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 16:05:33 +09:00
cat	e4355279a1	all: optionally forbid degrading in tests ... This enables transparently degradable tests to be forced on in environments known to support them. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 15:22:52 +09:00
cat	289fdebead	container: transparently degrade landlock in tests ... Explicitly requiring landlock in tests will be supported in a future change. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 15:03:48 +09:00
cat	9c9e190db9	ldd: remove timeout ... The program generally never blocks, and it is more flexible to leave it up to the caller to set a timeout. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 14:49:20 +09:00
cat	d7d42c69a1	internal/pkg: transparently degrade landlock in tests ... This does not test package container, so should transparently cope with Landlock LSM being unavailable. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 14:44:34 +09:00
cat	c758e762bd	container: skip landlock on hostnet ... This overlaps with net namespace, so can be skipped without degrading security. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 14:36:44 +09:00
cat	10f8b1c221	internal/pkg: optional landlock LSM ... The alpine linux riscv64 kernel does not enable Landlock LSM, and kernel compilation is not yet feasible. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-07 12:44:07 +09:00
cat	6907700d67	cmd/dist: set hsu tar header mode bits ... This has no effect, but is nice to have. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-06 23:37:38 +09:00
cat	0243f3ffbd	internal/rosa/stage0: add riscv64 tarball ... This had not yet passed all test suites because emulator is prohibitively slow. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-06 13:57:43 +09:00
cat	cd0beeaf8e	internal/uevent: optionally pass UUID during coldboot ... This enables rejection of non-coldboot synthetic events. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-06 12:42:47 +09:00
cat	a69273ab2a	cmd/dist: replace dist/release.sh ... This is much more robust than a shell script. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 23:58:08 +09:00
cat	4cd0f57e48	dist: remove redundant cleanup ... This breaks on shells that do not evaluate pathnames. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 16:16:37 +09:00
cat	33a0e6c01b	hst: conditionally skip root remount ... This enables the writable root overlay use case. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 14:04:21 +09:00
cat	d58f5c7590	dist: destroy workdir on exist ... This no longer relies on the hermetic build system to clean up. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 13:32:16 +09:00
cat	1da992e342	dist: prefix from environment ... These are baked in, so make them configurable for the build. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 13:11:44 +09:00
cat	9641805ec2	container/init: ignore finished process ... This is not considered an error, if the process finishes while the signal is being delivered. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 00:38:33 +09:00
cat	0738f4889a	internal/rosa/gnu: fetch mpc source via git ... Eliminates the xz dependency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 00:35:15 +09:00
cat	7de3cfe221	internal/rosa/netfilter: fetch iptables source via git ... Eliminates the xz dependency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 00:19:40 +09:00
cat	8b0648dd5d	internal/rosa/netfilter: fetch libnftnl source via git ... Eliminates the xz dependency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 00:14:45 +09:00
cat	4667fac76c	internal/rosa/libbsd: fetch source via git ... Eliminates the xz dependency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 00:05:56 +09:00
cat	52e5443b0e	internal/rosa/libbsd: fetch libmd source via git ... Eliminates the xz dependency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-05 00:02:56 +09:00
cat	130e470b60	internal/rosa/libxslt: fetch source via git ... Eliminates the xz dependency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-04 23:05:10 +09:00
cat	ba5ee8e3ee	internal/rosa/libxml2: fetch source via git ... Eliminates the xz dependency. This also switches to meson to avoid pulling in autotools. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-04 22:58:29 +09:00
cat	d1cef30877	internal/rosa/gtk: fetch glib source via git ... This eliminates xz dependency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-04 22:47:10 +09:00
cat	0188a3f0c7	internal/rosa/gnu: gnutls disable arm64 hardware acceleration ... Hardware on arm64 is quite messy, this miscompiles. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-04 23:37:18 +09:00
cat	04fe3b24ce	internal/rosa/gnu: gnutls configure trust store ... The test suite is somehow happy on amd64 but fails on arm64. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-04 22:33:51 +09:00
cat	93ad551054	internal/rosa/git: shallow clone ... The .git directory is destroyed anyway, so no point fetching more than the bare minimum. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-04 20:14:40 +09:00
cat	3d54d1f176	internal/rosa: drop caches ... This enables accurate benchmarking of the toolchain abstraction. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 20:58:23 +09:00
cat	9feac7738f	internal/pkg: optionally suppress via assumed checksum ... This is quite error-prone and causes cache inconsistency similar to the store inconsistency seen on nix when a similar condition happens. Keep this behind a flag in case it is ever beneficial. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 20:33:59 +09:00
cat	591a60bac9	internal/pkg: per-cache SCHED_IDLE ... This is cleaner than setting it globally, and is impossible to race. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 16:49:34 +09:00
cat	5093a06026	internal/pkg: cache flags ... This is cleaner for extending the API. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 16:16:55 +09:00
cat	50c1d7f880	internal/rosa/kernel: 6.12.78 to 6.12.80 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 16:14:16 +09:00
cat	9e63633fbc	container: remove test timeouts ... These timeouts are no longer useful, and causes spurious test failures under load. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 10:51:37 +09:00
cat	61f981a34a	internal/rosa/perl: 5.42.1 to 5.42.2 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 10:45:25 +09:00
cat	d717c41bbe	internal/rosa/cmake: 4.3.0 to 4.3.1 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 10:45:07 +09:00
cat	b896eec9b7	internal/rosa/gnu: parallel 20260222 to 20260322 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 10:44:48 +09:00
cat	8ab99e5e40	internal/rosa/util-linux: 2.41.3 to 2.42 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 10:44:25 +09:00
cat	2b6160ef7d	internal/rosa/wayland: wayland-protocols 1.47 to 1.48 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 10:44:04 +09:00
cat	4dcac7f133	internal/rosa/xz: 5.8.2 to 5.8.3 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 10:43:37 +09:00
cat	966fd4df9e	internal/rosa: connman artifact ... Will be gradually replaced with a native implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 01:17:10 +09:00
cat	a2cf59b989	internal/rosa/ncurses: also build dynamic library ... GNU readline breaks without this. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 01:13:04 +09:00
cat	e87f59c4e4	internal/rosa/gnu: readline artifact ... Nice to have library for command line programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 00:42:59 +09:00
cat	3b221c3e77	internal/rosa/gnu: gnutls artifact ... Incredibly ugly and expensive package, but unfortunately required by some packages. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 00:36:28 +09:00
cat	ff3b385b12	internal/rosa: libunistring artifact ... Required by GnuTLS. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-03 00:00:13 +09:00
cat	c6920e6ab7	cmd/mbf: pick up $TERM ... This improves behaviour of some programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-02 23:59:15 +09:00
cat	59b25d45fe	internal/pkg: pick up $TERM if attaching stdin ... This improves behaviour of some programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-02 23:50:07 +09:00
cat	9b99650eb1	internal/rosa: libev artifact ... Required by gnutls. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-02 23:35:01 +09:00
cat	15bff9e1a6	internal/rosa/git: determine reporting name from url ... This is generally correct, and is a lot cleaner to call. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-02 22:42:16 +09:00
cat	b948525c07	internal/rosa: nettle3 artifact ... Removed after all packages upgrade for nettle 4. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-02 22:12:39 +09:00
cat	9acbd16e9a	internal/rosa/p11: explicitly enable libffi ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-02 22:05:07 +09:00
cat	64e5a1068b	internal/rosa: libtasn1 artifact ... Optional dependency of p11-kit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-01 17:20:12 +09:00
cat	b6cbd49d8c	internal/rosa: p11-kit artifact ... Another package distributed in xz only. This is fetched from the git remote directly to avoid XZ Utils. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-01 16:34:30 +09:00
cat	6913b9224a	internal/rosa/git: recursively clone submodules ... There is generally no reason to disable this, so it was not made optional. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-01 16:21:46 +09:00
cat	9584958ecc	internal/rosa/pkg-config: generate build system ... This unfortunately pulls automake, libtool and their dependencies into stage2. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-04-01 15:31:24 +09:00
cat	389844b1ea	internal/rosa/gnu: mpc 1.3.1 to 1.4.0 ... This package now unfortunately switched to xz as well. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-31 23:56:20 +09:00
cat	5b7ab35633	internal/rosa: iptables artifact ... This also pulls in netlink libraries from netfilter project. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-31 23:47:16 +09:00
cat	52b1a5a725	internal/rosa: use type P in helper interface ... This is easier to type and serialises correctly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-31 23:45:01 +09:00
cat	6b78df8714	internal/rosa: libmd and libbsd artifacts ... These provide headers that are provided by glibc but not musl. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-31 22:57:08 +09:00
cat	dadf170a46	internal/rosa: dbus artifact ... Unfortunate ugly indirect dependency we cannot yet get rid of. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-31 21:47:05 +09:00
cat	9594832302	internal/rosa/meson: disallow download ... This will fail and waste time on KindExec, and cause nondeterminism in KindExecNet. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-31 21:38:09 +09:00
cat	91a2d4d6e1	internal/uevent: integrate error handling in event loop ... There are many subtleties when recovering from errors in the event loop, and coldboot requires internals to drain the receive buffer as synthetic uevents are being arranged. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-31 00:10:14 +09:00
cat	a854719b9f	internal/netlink: optional recvmsg without netpoll ... For draining the socket receive buffer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-30 23:18:43 +09:00
cat	f03c0fb249	internal/uevent: synthetic events for coldboot ... This causes the kernel to regenerate events that happened before earlyinit started. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-30 23:01:08 +09:00
cat	a6600be34a	all: use filepath ... This makes package check portable, and removes nonportable behaviour from package pkg, pipewire, and system. All other packages remain nonportable due to their nature. No latency increase was observed due to this change on amd64 and arm64 linux. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-30 18:24:53 +09:00
cat	b5592633f5	internal/uevent: separate recvmsg helper ... This enables messages to be received separately. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-30 02:53:26 +09:00
cat	584e302168	internal/netlink: set receive buffer size ... This is done by both systemd sd-device and AOSP ueventd to improve robustness. Rosa OS will still handle ENOBUFS via coldboot but a big buffer should mitigate this as well. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-30 02:14:47 +09:00
cat	141958656f	internal/uevent: handle state divergence ... This requires the caller to arrange for a coldboot to happen, some time after this error is encountered, and to resume event processing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-30 01:50:09 +09:00
cat	648079f42c	internal/netlink: switch to recvmsg/sendmsg ... These are more flexible than recvfrom/sendto. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-29 23:36:00 +09:00
cat	19c76e0831	cmd: document Rosa OS programs ... The earlyinit and mbf program are not covered by the compatibility promise, so specify that here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-28 22:43:25 +09:00
cat	71fcc972ba	cmd/hsu: alternative hsurc path for Rosa OS ... Rosa OS does not have /etc. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-28 18:22:55 +09:00
cat	62002efd08	cmd/hsu: document hsurc format and internals ... This was previously only documented via an unexported function. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-28 18:17:31 +09:00
cat	e33294db9c	cmd/hakurei: document stable behaviour ... These are undocumented anywhere else and is required by tools invoking hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-28 17:31:46 +09:00
cat	b1ea3b4acf	cmd/hakurei: rename app to run ... The run command was a legacy holdover from very early days and is only useful for testing and demonstration these days. This change also renames it to exec. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-28 16:48:26 +09:00
cat	2c254c70b8	cmd/hakurei: remove linkname directive ... This used to be a function that did much more, and was later relocated to another package and exported. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-28 16:20:02 +09:00
cat	ea014d6af2	internal/uevent: consume kernel-originated events ... These are not possible to cover outside integration vm. Extreme care is required when dealing with this method, so keep it simple. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-28 15:39:16 +09:00
cat	1b48484c16	internal/uevent: exclusive socket access ... This is a much simplified mutex, since blocking is not required. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-28 01:01:06 +09:00
cat	713bff3eb0	internal/uevent: decode uevent messages ... The wire format and behaviour is entirely undocumented. This is implemented by reading lib/kobject_uevent.c, with testdata collected from the internal/rosa kernel. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-03-28 00:49:34 +09:00