hakurei

9 Commits

Include renames

Author	SHA1	Message	Date
cat	e599b5583d	fmsg: implement suspend in writer Test / Create distribution (push) Successful in 24s Details Test / Run NixOS test (push) Successful in 2m18s Details This removes the requirement to call fmsg.Exit on every exit path, and enables direct use of the "log" package. However, fmsg.BeforeExit is still encouraged when possible to catch exit on suspended output. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-16 18:51:53 +09:00
cat	fe7d208cf7	helper: use generic extra files interface Test / Create distribution (push) Successful in 1m38s Details Test / Run NixOS test (push) Successful in 4m36s Details This replaces the pipes object and integrates context into helper process lifecycle. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-13 23:34:15 +09:00
cat	d1d20c06fb	helper/seccomp: use sync.Once for closeWrite Test / Create distribution (push) Successful in 1m29s Details Test / Run NixOS test (push) Successful in 4m13s Details This makes the code much cleaner, and eliminates the intermittent ErrInvalid errors. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-13 22:49:16 +09:00
cat	1e6a059668	helper/seccomp: benchmark exporter Test / Create distribution (push) Successful in 1m44s Details Test / Run NixOS test (push) Successful in 4m32s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-13 22:37:51 +09:00
cat	099da78af5	helper/seccomp: eliminate data race on pfd Test / Create distribution (push) Successful in 2m10s Details Test / Run NixOS test (push) Successful in 4m50s Details Turns out the doc comment on os.File was lying about its methods being safe for concurrent use. The race detector picked up a data race from concurrent use of Fd and Close. This change eliminates that by calling Fd in the prepare routine. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-13 10:40:51 +09:00
cat	568d7758d5	helper/seccomp: panic on invalid closeWrite use Test / Create distribution (push) Successful in 1m46s Details Test / Run NixOS test (push) Successful in 4m39s Details Returning an error here puts exporter in an invalid state. The caller should guard against this condition instead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-07 12:58:20 +09:00
cat	5b7b3fa9a4	helper/seccomp: implement reader interface via pipe Test / Create distribution (push) Successful in 1m6s Details Test / Run NixOS test (push) Successful in 2m44s Details This also does not require the libc tmpfile call. BPF programs emitted by libseccomp seems to be deterministic. The tests would catch regressions as it verifies the program against known good output backed by manual testing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-03 19:43:03 +09:00
cat	7b96cd6ded	helper/seccomp: do not call F_println if not verbose Test / Create distribution (push) Successful in 1m42s Details Test / Run NixOS test (push) Successful in 3m34s Details This (slightly) improves performance. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-01-25 13:19:38 +09:00
cat	163f15e93f	helper/seccomp: separate seccomp package Test / Create distribution (push) Successful in 1m39s Details Test / Run NixOS test (push) Successful in 3m31s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-01-25 12:59:11 +09:00