100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
cat	b71d2bf534	test/sandbox: check tty outcome ... This makes no difference currently but has different behaviour in the native sandbox. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 17:28:57 +09:00
cat	46059b1840	test/sandbox: print mismatching file content ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 17:24:52 +09:00
cat	d2c329bcea	test: format path aid offsets ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 17:21:14 +09:00
cat	2d379b5a38	test/sandbox: pass want file as argument ... This avoids building the check program multiple times. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 15:00:59 +09:00
cat	75e0c5d406	test/sandbox: parse full test case ... This makes declaring multiple tests much cleaner. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 14:53:50 +09:00
cat	770b37ae16	sandbox/vfs: match MS_NOSYMFOLLOW flag ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 13:57:30 +09:00
cat	c638193268	sandbox: apply vfs options to bind mounts ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 05:27:57 +09:00
cat	8c3a817881	sandbox/vfs: unfold mount hierarchy ... This presents all visible mount points under path. This is useful for applying extra vfs options to bind mounts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 05:23:31 +09:00
cat	e2fce321c1	sandbox/vfs: expose mountinfo line scanning ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-23 02:46:58 +09:00
cat	241702ae3a	go: 1.23 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-22 18:20:06 +09:00
cat	d21d9c5b1d	sandbox/vfs: parse vfs options ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 17:12:10 +09:00
cat	a70daf2250	sandbox: resolve inverted flags in op ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 12:58:38 +09:00
cat	632b18addd	test/sandbox: rename misleading bind destination ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 12:56:11 +09:00
cat	a57a7a6a16	test/sandbox: check type handling host_passthrough ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 12:21:08 +09:00
cat	5098b12e4a	sandbox/vfs: count mountinfo entries ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 12:14:33 +09:00
cat	9ddf5794dd	sandbox/vfs: implement proc_pid_mountinfo(5) parser ... Test cases are mostly taken from util-linux. This implementation is more correct and slightly faster than the one found in github:kubernetes/utils. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-21 00:35:49 +09:00
cat	b74a08dda9	sandbox: prepare ops early ... Some setup code needs to run in host root. This change allows that to happen. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-18 02:17:46 +09:00
cat	1b9408864f	sandbox: pass cmd to cancel function ... This is not usually in scope otherwise. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 22:36:39 +09:00
cat	cc89dbdf63	sandbox: place files with content ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 22:13:22 +09:00
cat	228f3301f2	sandbox: create directories ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 22:03:06 +09:00
cat	07181138e5	sandbox/mount: pass absolute path ... This should never be used unless there is a good reason to, like using a file in the intermediate root. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 21:53:31 +09:00
cat	816b372f14	sandbox: cancel process on serve error ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 21:49:45 +09:00
cat	d7eddd54a2	sandbox: rename params struct ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 21:45:08 +09:00
cat	7c063833e0	internal/sys: wrap getuid/getgid ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 17:10:03 +09:00
cat	af3619d440	sandbox: create symlinks ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 16:37:56 +09:00
cat	528674cb6e	sandbox/init: fail early on nil op ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 16:17:03 +09:00
cat	70c9757e26	sandbox/mount: rename device flag ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 16:10:55 +09:00
cat	c83a7e2efc	sandbox: mount container /dev/mqueue ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 15:42:40 +09:00
cat	904208b87f	sandbox: unwrap path string ... Mount proc and dev takes no additional parameters. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 15:33:20 +09:00
cat	007b52d81f	sandbox/seccomp: check for both partial read outcomes ... This eliminates intermittent test failures. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 12:51:21 +09:00
cat	3385538142	nix: clean up flake outputs ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 12:26:19 +09:00
cat	24618ab9a1	sandbox: move out of internal ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 02:55:36 +09:00
cat	9ce4706a07	sandbox: move params setup functions ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 02:48:32 +09:00
cat	9a1f8e129f	sandbox: wrap fmsg interface ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 02:44:07 +09:00
cat	ee10860357	seccomp: install output atomically ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 01:10:27 +09:00
cat	44277dc0f1	dbus: run in native sandbox ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 00:13:14 +09:00
cat	bc54db54d2	ldd: always copy stderr ... Dropping the buffer on success is unhelpful and could hide some useful information. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 00:08:00 +09:00
cat	bf07b7cd9e	ldd: mount /proc in container ... This covers host /proc. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 00:01:03 +09:00
cat	5d3c8dcc92	test: raise timeout ... Native container tooling is severely slowed down by race detector. Raise timeout so it reliably completes. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 23:51:17 +09:00
cat	48feca800f	sandbox: check command function pointer ... Setting default CommandContext on initialisation is somewhat of a footgun. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 23:29:14 +09:00
cat	42de09e896	helper: implement native container backend ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 02:57:46 +09:00
cat	1576fea8a3	helper: raise WaitDelay during tests ... Helper runs very slowly with race detector. This prevents it from timing out. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 02:49:41 +09:00
cat	ae522ab364	test: run go tests with race detector ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 02:07:42 +09:00
cat	273d97af85	ldd: lib paths resolve function ... This is what always happens right after a ldd call, so implement it here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 01:20:09 +09:00
cat	891316d924	helper/stub: copy args to stderr ... Some helpers are implemented via go test itself in tests, and as a result stdout gets clobbered. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:39:42 +09:00
cat	9f5dad1998	sandbox: return on zero length ops ... This dodges potentially confusing behaviour where init fails due to Ops being clobbered during transfer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:32:36 +09:00
cat	6e7ddb2d2e	helper: eliminate commandContext replacement ... This is done more cleanly by modifying Args in cmdF. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:01:25 +09:00
cat	bac4e67867	sandbox/init: early params nil check ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 04:03:10 +09:00
cat	4230281194	sandbox: return error on doubled start ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 03:30:14 +09:00
cat	e64e7608ca	sandbox: expose cancel behaviour ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 03:04:27 +09:00
cat	10a21ce3ef	helper: expose extra files to direct ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 02:27:40 +09:00
cat	0f1f0e4364	helper: combine helper ipc setup ... The two-step args call is no longer necessary since stat is passed on initialisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 02:10:22 +09:00
cat	f9bf20a3c7	helper: rearrange initialisation args ... This improves consistency across two different helper implementations. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 01:06:31 +09:00
cat	73c1a83032	helper: move process wrapper to direct ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 00:33:25 +09:00
cat	f443d315ad	helper: clean up interface ... The helper interface was messy due to odd context acquisition order. That has changed, so this cleans it up. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 00:27:44 +09:00
cat	9e18d1de77	helper/proc: pass extra files and start ... For integration with native container tooling. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 23:23:57 +09:00
cat	2647a71be1	seccomp: move out of helper ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 22:42:40 +09:00
cat	7c60a4d8e8	helper: embed context on creation ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 18:30:22 +09:00
cat	4bb5d9780f	ldd: run in native sandbox ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 17:55:55 +09:00
cat	f41fd94628	sandbox: write uid/gid map as init ... This avoids PR_SET_DUMPABLE in the parent process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 17:42:22 +09:00
cat	94895bbacb	sandbox: invert seccomp ruleset defaults ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:38:32 +09:00
cat	f332200ca4	sandbox: mount container /dev ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:18:44 +09:00
cat	2eff470091	sandbox/mount: pass custom tmpfs name ... The tmpfs driver allows arbitrary fsname. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:12:35 +09:00
cat	a092b042ab	sandbox: pass params to setup ops ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:11:38 +09:00
cat	e94b09d337	sandbox/mount: fix source flag path ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:10:48 +09:00
cat	5d9e669d97	sandbox: separate tmpfs function from op ... This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:21:20 +09:00
cat	f1002157a5	sandbox: separate bind mount function from op ... This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:16:41 +09:00
cat	4133b555ba	internal/app: rename init to init0 ... This makes way for the new container init. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 21:57:54 +09:00
cat	9b1a60b5c9	sandbox: native container tooling ... This should eventually replace bwrap. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 21:36:26 +09:00
cat	beb3918809	test: run go test under regular user ... By default test vm commands run as root, this causes buildFHSEnv bwrap to cover some parts of /proc, making it impossible to mount proc in a mount namespace created under it. Running as a regular user gets around this issue. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 20:56:32 +09:00
cat	2871426df2	test: print output of failed test ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 16:40:15 +09:00
cat	e048f31baa	internal: pull EINTR loop from stdlib ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:42:38 +09:00
cat	6af8b8859f	sandbox: read overflow ids ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:41:37 +09:00
cat	f38ba7e923	test/sandbox: bypass fields ... A field is bypassed if it contains a single null byte. This will never appear in the text format so is safe to use. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:00:58 +09:00
cat	d22145a392	ldd: handle musl static behaviour ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 23:29:43 +09:00
cat	29c3f8becb	helper/seccomp: improve error handling ... This passes both errno and libseccomp return value. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 15:52:48 +09:00
cat	be16970e77	helper/seccomp: seccomp_load on negative fd ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 15:18:52 +09:00
cat	df266527f1	test/sandbox/mount: work around nondeterminism ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-12 15:16:51 +09:00
cat	c8ed7aae6e	nix: update flake lock ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-10 18:38:14 +09:00
cat	61e58aa14d	helper/proc: expose setup file ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-09 17:22:31 +09:00
cat	9e15898c8f	internal/prctl: rename prctl wrappers ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-07 22:56:35 +09:00
cat	f7bd6a5a41	test/sandbox: check seccomp outcome ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-04 13:30:16 +09:00
cat	ea853e21d9	test/sandbox: check fs outcome ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-03 01:02:09 +09:00
cat	0bd9b9e8fe	test/sandbox: assert filesystem json ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 23:23:04 +09:00
cat	39e32799b3	test/sandbox: compare filesystem hierarchy ... For checking deterministic aspects of fs outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 22:59:04 +09:00
cat	9953768de5	test: rename session message identifier ... Labelling this as sway is misleading. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 22:47:33 +09:00
cat	0d3652b793	test/sandbox/assert: wrap printf ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-02 18:37:46 +09:00
cat	d8e9d71f87	test/sandbox: check mount outcome ... Do this at the beginning of the test for early failure. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 15:56:15 +09:00
cat	558974b996	test/sandbox: assert mntent json ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 15:40:58 +09:00
cat	4de4049713	test/sandbox: wrap libc getmntent ... For checking mounts outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 14:56:08 +09:00
cat	2d4cabe786	nix: increase nixfmt max width ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-28 14:43:46 +09:00
cat	80f9b62d25	app: print comp values early ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 22:27:55 +09:00
cat	673b648bd3	cmd/fpkg: call app in-process ... Wrapping fortify is slow, painful and error-prone. Start apps in-process instead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 19:51:44 +09:00
cat	45ad788c6d	cmd/fsu: allow switch from fpkg ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 19:42:28 +09:00
cat	56539d8db5	fortify: move internal commands up ... This improves readability. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 18:02:11 +09:00
cat	840ceb615a	app: handle RunState errors ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:36:14 +09:00
cat	741d011543	fortify: configure seccomp logger early ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:19:36 +09:00
cat	d050b3de25	app: define errors in a separate file ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 17:12:02 +09:00
cat	5de28800ad	test: verify fsu ppid check ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 16:51:57 +09:00
cat	8e50293ab7	test: remove sway process check ... This eliminates the race where systemd restarts sway too quick. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-26 13:52:44 +09:00