hakurei

Author	SHA1	Message	Date
Ophestra	6f719bc3c1	system: update doc commands and remove mutex All checks were successful Test / Create distribution (push) Successful in 34s Details Test / Sandbox (push) Successful in 2m6s Details Test / Hakurei (push) Successful in 3m19s Details Test / Hpkg (push) Successful in 3m54s Details Test / Sandbox (race detector) (push) Successful in 4m17s Details Test / Hakurei (race detector) (push) Successful in 5m19s Details Test / Flake checks (push) Successful in 1m39s Details The mutex is not really doing anything, none of these methods make sense when called concurrently anyway. The copylocks analysis is still satisfied by the noCopy struct. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-09-02 04:54:34 +09:00
Ophestra	b14690aa77	internal/app: remove seal interface All checks were successful Test / Create distribution (push) Successful in 34s Details Test / Sandbox (push) Successful in 2m1s Details Test / Hakurei (push) Successful in 3m13s Details Test / Hpkg (push) Successful in 3m55s Details Test / Sandbox (race detector) (push) Successful in 4m33s Details Test / Hakurei (race detector) (push) Successful in 5m19s Details Test / Flake checks (push) Successful in 1m36s Details This further cleans up the package for the restructure. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-28 01:07:51 +09:00
Ophestra	0d7c1a9a43	app: rename app implementation package All checks were successful Test / Create distribution (push) Successful in 26s Details Test / Sandbox (push) Successful in 1m48s Details Test / Fortify (push) Successful in 2m36s Details Test / Sandbox (race detector) (push) Successful in 2m52s Details Test / Fpkg (push) Successful in 3m32s Details Test / Fortify (race detector) (push) Successful in 4m9s Details Test / Flake checks (push) Successful in 1m4s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-04-12 10:54:24 +09:00
Ophestra	5c4058d5ac	app: run in native sandbox All checks were successful Test / Create distribution (push) Successful in 20s Details Test / Fortify (push) Successful in 2m5s Details Test / Fpkg (push) Successful in 3m0s Details Test / Data race detector (push) Successful in 4m12s Details Test / Flake checks (push) Successful in 1m4s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 01:52:49 +09:00
Ophestra	c64b8163e7	app: separate instance from process state All checks were successful Test / Create distribution (push) Successful in 19s Details Test / Run NixOS test (push) Successful in 1m59s Details This works better for the implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-21 16:06:24 +09:00
Ophestra	dfd9467523	app: merge seal with sys All checks were successful Test / Create distribution (push) Successful in 27s Details Test / Run NixOS test (push) Successful in 3m20s Details The existence of the appSealSys struct was an implementation detail obsolete since system.I was integrated in `084cd84f36`. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-19 01:36:29 +09:00
Ophestra	53571f030e	app: embed appSeal in app struct All checks were successful Test / Create distribution (push) Successful in 25s Details Test / Run NixOS test (push) Successful in 3m22s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-19 01:10:37 +09:00
Ophestra	a748d40745	app: store values with string representation All checks were successful Test / Create distribution (push) Successful in 25s Details Test / Run NixOS test (push) Successful in 3m26s Details Improves code readability without changing memory layout. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-19 00:25:00 +09:00
Ophestra	648e1d641a	app: separate interface from implementation All checks were successful Test / Create distribution (push) Successful in 26s Details Test / Run NixOS test (push) Successful in 3m31s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-18 23:07:28 +09:00
Ophestra	e0f321b2c4	sys: rename from linux All checks were successful Test / Create distribution (push) Successful in 26s Details Test / Run NixOS test (push) Successful in 3m28s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-18 18:47:48 +09:00
Ophestra	90cb01b274	system: move out of internal All checks were successful Test / Create distribution (push) Successful in 25s Details Test / Run NixOS test (push) Successful in 3m17s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-17 19:00:43 +09:00
Ophestra Umiker	df6fc298f6	migrate to git.gensokyo.uk/security/fortify All checks were successful Tests / Go tests (push) Successful in 2m55s Details Nix / NixOS tests (push) Successful in 5m10s Details Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-12-20 00:20:02 +09:00
Ophestra Umiker	2f676c9d6e	fst: rename from fipc All checks were successful Tests / Go tests (push) Successful in 38s Details Nix / NixOS tests (push) Successful in 5m48s Details Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-12-18 15:50:46 +09:00
Ophestra Umiker	584732f80a	cmd: shim and init into separate binaries All checks were successful test / test (push) Successful in 19s Details This change also fixes a deadlock when shim fails to connect and complete the setup. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-11-02 03:13:57 +09:00
Ophestra Umiker	ad7e389eee	app: test app permissive defaults sealing behaviour All checks were successful test / test (push) Successful in 20s Details This test seals App against a deterministic os stub and checks the resulting sys and bwrap values against known correct ones. The effects of sys and bwrap on the OS and sandbox is deterministic and tested in their own respective packages. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-25 17:12:13 +09:00

15 Commits