hakurei

104 Commits

Include renames

Author	SHA1	Message	Date
cat	31aef905fa	sandbox: expose seccomp interface Test / Create distribution (push) Successful in 31s Details Test / Sandbox (push) Successful in 1m59s Details Test / Hakurei (push) Successful in 2m47s Details Test / Sandbox (race detector) (push) Successful in 3m11s Details Test / Planterette (push) Successful in 3m34s Details Test / Hakurei (race detector) (push) Successful in 4m22s Details Test / Flake checks (push) Successful in 1m8s Details There's no point in artificially limiting and abstracting away these options. The higher level hakurei package is responsible for providing a secure baseline and sane defaults. The sandbox package should present everything to the caller. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-02 04:47:13 +09:00
cat	26b7afc890	sandbox/seccomp: prepare -> export Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m51s Details Test / Sandbox (race detector) (push) Successful in 3m3s Details Test / Planterette (push) Successful in 3m37s Details Test / Hakurei (race detector) (push) Successful in 4m17s Details Test / Hakurei (push) Successful in 2m12s Details Test / Flake checks (push) Successful in 1m12s Details Export makes a lot more sense, and also matches the libseccomp function. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-02 00:32:48 +09:00
cat	1a8840bebc	sandbox/seccomp: resolve rules natively Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m45s Details Test / Hakurei (push) Successful in 2m49s Details Test / Sandbox (race detector) (push) Successful in 3m1s Details Test / Planterette (push) Successful in 3m31s Details Test / Hakurei (race detector) (push) Successful in 4m18s Details Test / Flake checks (push) Successful in 1m6s Details This enables loading syscall filter policies from external cross-platform config files. This also removes a significant amount of C code. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-01 22:11:32 +09:00
cat	87e008d56d	treewide: rename to hakurei Test / Create distribution (push) Successful in 43s Details Test / Sandbox (push) Successful in 2m18s Details Test / Hakurei (push) Successful in 3m10s Details Test / Sandbox (race detector) (push) Successful in 3m30s Details Test / Hakurei (race detector) (push) Successful in 4m43s Details Test / Fpkg (push) Successful in 5m4s Details Test / Flake checks (push) Successful in 1m12s Details Fortify makes little sense for a container tool. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-06-25 04:57:41 +09:00