100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
cat	8b69bcd215	sandbox: cache kernel.cap_last_cap value ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-26 06:19:19 +09:00
cat	2dd49c437c	app: create XDG_RUNTIME_DIR with perm 0700 ... Many programs complain about this. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-26 02:49:37 +09:00
cat	92852d8235	release: 0.3.0 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-26 02:18:59 +09:00
cat	371dd5b938	nix: create current-system symlink ... This is copied at runtime because it appears to be impossible to obtain this path in nix. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-26 02:06:11 +09:00
cat	4836d570ae	test: raise long timeout to 15 seconds ... The race detector really slows down container tooling. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-26 01:59:05 +09:00
cat	985f9442e6	sandbox: copy symlink with magic prefix ... This does not dereference the symlink, but only reads one level of it. This is useful for symlink targets that are not yet known at the time the configuration is emitted. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-26 01:42:39 +09:00
cat	67eb28466d	nix: create opengl-driver symlink ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 20:52:20 +09:00
cat	c326c3f97d	fst/sandbox: do not create /etc in advance ... This is now handled by the setup op. This also gets rid of the hardcoded /etc path. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 20:00:34 +09:00
cat	971c79bb80	sandbox: remove hardcoded parent perm ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 19:49:51 +09:00
cat	f86d868274	sandbox: wrap error with its own text message ... PathError has a pretty good text message, many of them are wrapped with its own text message. This change adds a function to do just that to improve readability. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 19:42:20 +09:00
cat	33940265a6	sandbox: do not ensure symlink target ... This masks EEXIST on target and might clobber filesystems and lead to other confusing behaviour. Create its parent instead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 19:30:53 +09:00
cat	b39f3aeb59	helper: remove bubblewrap wrapper ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 05:35:02 +09:00
cat	61dbfeffe7	sandbox/wl: move into sandbox ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 05:26:37 +09:00
cat	532feb4bfa	app: merge shim into app package ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 05:21:47 +09:00
cat	ec5e91b8c9	system: optimise string formatting ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 04:42:30 +09:00
cat	ee51320abf	test: check revert type selection ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 04:37:58 +09:00
cat	5c4058d5ac	app: run in native sandbox ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 01:52:49 +09:00
cat	e732dca762	wl: fix sync pipe keepalive ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 01:33:37 +09:00
cat	a9adcd914b	fortify/parse: omit try fd fallthrough message ... This reduces noise in verbose output. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 01:21:11 +09:00
cat	3dd4ff29c8	test/sandbox: check mount table length ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-24 16:36:53 +09:00
cat	61d86c5e10	test/sandbox: fix stdout tty check ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-24 16:23:50 +09:00
cat	d097eaa28f	test/sandbox: unquote fail messages ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-24 16:03:53 +09:00
cat	ad3576c164	sandbox: resolve tty name ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-24 16:03:07 +09:00
cat	b989a4601a	test/sandbox: fail on mismatched mount entry ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-24 13:43:32 +09:00
cat	a11237b158	sandbox/vfs: add doc comments ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-24 13:21:55 +09:00
cat	40f00d570e	sandbox: set mkdir perm ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-24 12:51:39 +09:00
cat	0eb1bc6301	test/sandbox: verify outcome via mountinfo ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-24 01:42:38 +09:00
cat	1eb837eab8	test/sandbox: warn about misuse in doc comment ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 23:28:28 +09:00
cat	0a4e633db2	nix: filter test from source ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 22:20:19 +09:00
cat	e8809125d4	sandbox: verify outcome via mountinfo ... This contains much more information than /proc/mounts and allows for more fields to be checked. This also removes the dependency on the test package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 22:17:36 +09:00
cat	806ce18c0a	test/sandbox: check mapuid outcome ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 17:56:07 +09:00
cat	b71d2bf534	test/sandbox: check tty outcome ... This makes no difference currently but has different behaviour in the native sandbox. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 17:28:57 +09:00
cat	46059b1840	test/sandbox: print mismatching file content ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 17:24:52 +09:00
cat	d2c329bcea	test: format path aid offsets ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 17:21:14 +09:00
cat	2d379b5a38	test/sandbox: pass want file as argument ... This avoids building the check program multiple times. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 15:00:59 +09:00
cat	75e0c5d406	test/sandbox: parse full test case ... This makes declaring multiple tests much cleaner. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 14:53:50 +09:00
cat	770b37ae16	sandbox/vfs: match MS_NOSYMFOLLOW flag ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 13:57:30 +09:00
cat	c638193268	sandbox: apply vfs options to bind mounts ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 05:27:57 +09:00
cat	8c3a817881	sandbox/vfs: unfold mount hierarchy ... This presents all visible mount points under path. This is useful for applying extra vfs options to bind mounts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 05:23:31 +09:00
cat	e2fce321c1	sandbox/vfs: expose mountinfo line scanning ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 02:46:58 +09:00
cat	241702ae3a	go: 1.23 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-22 18:20:06 +09:00
cat	d21d9c5b1d	sandbox/vfs: parse vfs options ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 17:12:10 +09:00
cat	a70daf2250	sandbox: resolve inverted flags in op ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 12:58:38 +09:00
cat	632b18addd	test/sandbox: rename misleading bind destination ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 12:56:11 +09:00
cat	a57a7a6a16	test/sandbox: check type handling host_passthrough ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 12:21:08 +09:00
cat	5098b12e4a	sandbox/vfs: count mountinfo entries ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 12:14:33 +09:00
cat	9ddf5794dd	sandbox/vfs: implement proc_pid_mountinfo(5) parser ... Test cases are mostly taken from util-linux. This implementation is more correct and slightly faster than the one found in github:kubernetes/utils. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 00:35:49 +09:00
cat	b74a08dda9	sandbox: prepare ops early ... Some setup code needs to run in host root. This change allows that to happen. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-18 02:17:46 +09:00
cat	1b9408864f	sandbox: pass cmd to cancel function ... This is not usually in scope otherwise. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 22:36:39 +09:00
cat	cc89dbdf63	sandbox: place files with content ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 22:13:22 +09:00
cat	228f3301f2	sandbox: create directories ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 22:03:06 +09:00
cat	07181138e5	sandbox/mount: pass absolute path ... This should never be used unless there is a good reason to, like using a file in the intermediate root. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 21:53:31 +09:00
cat	816b372f14	sandbox: cancel process on serve error ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 21:49:45 +09:00
cat	d7eddd54a2	sandbox: rename params struct ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 21:45:08 +09:00
cat	7c063833e0	internal/sys: wrap getuid/getgid ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 17:10:03 +09:00
cat	af3619d440	sandbox: create symlinks ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 16:37:56 +09:00
cat	528674cb6e	sandbox/init: fail early on nil op ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 16:17:03 +09:00
cat	70c9757e26	sandbox/mount: rename device flag ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 16:10:55 +09:00
cat	c83a7e2efc	sandbox: mount container /dev/mqueue ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 15:42:40 +09:00
cat	904208b87f	sandbox: unwrap path string ... Mount proc and dev takes no additional parameters. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 15:33:20 +09:00
cat	007b52d81f	sandbox/seccomp: check for both partial read outcomes ... This eliminates intermittent test failures. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 12:51:21 +09:00
cat	3385538142	nix: clean up flake outputs ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 12:26:19 +09:00
cat	24618ab9a1	sandbox: move out of internal ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 02:55:36 +09:00
cat	9ce4706a07	sandbox: move params setup functions ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 02:48:32 +09:00
cat	9a1f8e129f	sandbox: wrap fmsg interface ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 02:44:07 +09:00
cat	ee10860357	seccomp: install output atomically ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 01:10:27 +09:00
cat	44277dc0f1	dbus: run in native sandbox ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 00:13:14 +09:00
cat	bc54db54d2	ldd: always copy stderr ... Dropping the buffer on success is unhelpful and could hide some useful information. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 00:08:00 +09:00
cat	bf07b7cd9e	ldd: mount /proc in container ... This covers host /proc. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 00:01:03 +09:00
cat	5d3c8dcc92	test: raise timeout ... Native container tooling is severely slowed down by race detector. Raise timeout so it reliably completes. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 23:51:17 +09:00
cat	48feca800f	sandbox: check command function pointer ... Setting default CommandContext on initialisation is somewhat of a footgun. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 23:29:14 +09:00
cat	42de09e896	helper: implement native container backend ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 02:57:46 +09:00
cat	1576fea8a3	helper: raise WaitDelay during tests ... Helper runs very slowly with race detector. This prevents it from timing out. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 02:49:41 +09:00
cat	ae522ab364	test: run go tests with race detector ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 02:07:42 +09:00
cat	273d97af85	ldd: lib paths resolve function ... This is what always happens right after a ldd call, so implement it here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 01:20:09 +09:00
cat	891316d924	helper/stub: copy args to stderr ... Some helpers are implemented via go test itself in tests, and as a result stdout gets clobbered. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:39:42 +09:00
cat	9f5dad1998	sandbox: return on zero length ops ... This dodges potentially confusing behaviour where init fails due to Ops being clobbered during transfer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:32:36 +09:00
cat	6e7ddb2d2e	helper: eliminate commandContext replacement ... This is done more cleanly by modifying Args in cmdF. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:01:25 +09:00
cat	bac4e67867	sandbox/init: early params nil check ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 04:03:10 +09:00
cat	4230281194	sandbox: return error on doubled start ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 03:30:14 +09:00
cat	e64e7608ca	sandbox: expose cancel behaviour ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 03:04:27 +09:00
cat	10a21ce3ef	helper: expose extra files to direct ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 02:27:40 +09:00
cat	0f1f0e4364	helper: combine helper ipc setup ... The two-step args call is no longer necessary since stat is passed on initialisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 02:10:22 +09:00
cat	f9bf20a3c7	helper: rearrange initialisation args ... This improves consistency across two different helper implementations. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 01:06:31 +09:00
cat	73c1a83032	helper: move process wrapper to direct ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 00:33:25 +09:00
cat	f443d315ad	helper: clean up interface ... The helper interface was messy due to odd context acquisition order. That has changed, so this cleans it up. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 00:27:44 +09:00
cat	9e18d1de77	helper/proc: pass extra files and start ... For integration with native container tooling. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 23:23:57 +09:00
cat	2647a71be1	seccomp: move out of helper ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 22:42:40 +09:00
cat	7c60a4d8e8	helper: embed context on creation ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 18:30:22 +09:00
cat	4bb5d9780f	ldd: run in native sandbox ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 17:55:55 +09:00
cat	f41fd94628	sandbox: write uid/gid map as init ... This avoids PR_SET_DUMPABLE in the parent process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 17:42:22 +09:00
cat	94895bbacb	sandbox: invert seccomp ruleset defaults ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:38:32 +09:00
cat	f332200ca4	sandbox: mount container /dev ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:18:44 +09:00
cat	2eff470091	sandbox/mount: pass custom tmpfs name ... The tmpfs driver allows arbitrary fsname. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:12:35 +09:00
cat	a092b042ab	sandbox: pass params to setup ops ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:11:38 +09:00
cat	e94b09d337	sandbox/mount: fix source flag path ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:10:48 +09:00
cat	5d9e669d97	sandbox: separate tmpfs function from op ... This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:21:20 +09:00
cat	f1002157a5	sandbox: separate bind mount function from op ... This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:16:41 +09:00
cat	4133b555ba	internal/app: rename init to init0 ... This makes way for the new container init. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 21:57:54 +09:00
cat	9b1a60b5c9	sandbox: native container tooling ... This should eventually replace bwrap. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 21:36:26 +09:00