hakurei

9 Commits

Include renames

Author	SHA1	Message	Date
cat	d2f9a9b83b	treewide: migrate to hakurei.app Test / Create distribution (push) Successful in 24s Details Test / Sandbox (push) Successful in 46s Details Test / Hakurei (push) Successful in 2m9s Details Test / Sandbox (race detector) (push) Successful in 3m14s Details Test / Planterette (push) Successful in 3m41s Details Test / Hakurei (race detector) (push) Successful in 3m40s Details Test / Flake checks (push) Successful in 1m18s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-03 03:30:39 +09:00
cat	1b5ecd9eaf	container: move out of toplevel Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m52s Details Test / Sandbox (race detector) (push) Successful in 3m14s Details Test / Planterette (push) Successful in 3m36s Details Test / Hakurei (race detector) (push) Successful in 4m31s Details Test / Hakurei (push) Successful in 2m3s Details Test / Flake checks (push) Successful in 1m13s Details This allows slightly easier use of the vanity url. This also provides some disambiguation between low level containers and hakurei app containers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-03 02:59:43 +09:00
cat	82561d62b6	system: move system access packages Test / Create distribution (push) Successful in 31s Details Test / Sandbox (push) Successful in 1m52s Details Test / Hakurei (push) Successful in 3m3s Details Test / Planterette (push) Successful in 3m38s Details Test / Hakurei (race detector) (push) Successful in 4m48s Details Test / Sandbox (race detector) (push) Successful in 1m14s Details Test / Flake checks (push) Successful in 1m6s Details These packages loosely belong in the "system" package and "system" provides high level wrappers for all of them. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-02 21:52:07 +09:00
cat	eec021cc4b	hakurei: move container helpers toplevel Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 2m1s Details Test / Hakurei (push) Successful in 2m52s Details Test / Sandbox (race detector) (push) Successful in 3m8s Details Test / Planterette (push) Successful in 3m32s Details Test / Hakurei (race detector) (push) Successful in 4m27s Details Test / Flake checks (push) Successful in 1m9s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-02 21:31:29 +09:00
cat	eb22a8bcc1	cmd/hakurei: move to cmd Test / Create distribution (push) Successful in 31s Details Test / Sandbox (push) Successful in 1m50s Details Test / Hakurei (push) Successful in 3m2s Details Test / Sandbox (race detector) (push) Successful in 3m18s Details Test / Planterette (push) Successful in 3m36s Details Test / Hakurei (race detector) (push) Successful in 4m35s Details Test / Flake checks (push) Successful in 1m7s Details Having it at the project root never made sense since the "ego" name was deprecated. This change finally addresses it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-02 20:42:51 +09:00
cat	31aef905fa	sandbox: expose seccomp interface Test / Create distribution (push) Successful in 31s Details Test / Sandbox (push) Successful in 1m59s Details Test / Hakurei (push) Successful in 2m47s Details Test / Sandbox (race detector) (push) Successful in 3m11s Details Test / Planterette (push) Successful in 3m34s Details Test / Hakurei (race detector) (push) Successful in 4m22s Details Test / Flake checks (push) Successful in 1m8s Details There's no point in artificially limiting and abstracting away these options. The higher level hakurei package is responsible for providing a secure baseline and sane defaults. The sandbox package should present everything to the caller. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-02 04:47:13 +09:00
cat	26b7afc890	sandbox/seccomp: prepare -> export Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m51s Details Test / Sandbox (race detector) (push) Successful in 3m3s Details Test / Planterette (push) Successful in 3m37s Details Test / Hakurei (race detector) (push) Successful in 4m17s Details Test / Hakurei (push) Successful in 2m12s Details Test / Flake checks (push) Successful in 1m12s Details Export makes a lot more sense, and also matches the libseccomp function. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-02 00:32:48 +09:00
cat	1a8840bebc	sandbox/seccomp: resolve rules natively Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m45s Details Test / Hakurei (push) Successful in 2m49s Details Test / Sandbox (race detector) (push) Successful in 3m1s Details Test / Planterette (push) Successful in 3m31s Details Test / Hakurei (race detector) (push) Successful in 4m18s Details Test / Flake checks (push) Successful in 1m6s Details This enables loading syscall filter policies from external cross-platform config files. This also removes a significant amount of C code. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-01 22:11:32 +09:00
cat	87e008d56d	treewide: rename to hakurei Test / Create distribution (push) Successful in 43s Details Test / Sandbox (push) Successful in 2m18s Details Test / Hakurei (push) Successful in 3m10s Details Test / Sandbox (race detector) (push) Successful in 3m30s Details Test / Hakurei (race detector) (push) Successful in 4m43s Details Test / Fpkg (push) Successful in 5m4s Details Test / Flake checks (push) Successful in 1m12s Details Fortify makes little sense for a container tool. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-06-25 04:57:41 +09:00