TODO: docs

squash this into the commit that first added all_tests.ts, we don't even
want to have a trace of it left

for the cli ones, we can simply iterate the filesystem relative our
location. for the web one, we determine it on launch and expose it as an
endpoint from the server which the client queries

.gitattributes

@@ -1 +0,0 @@
-*.az linguist-language=Azalea

.gitea/workflows/release.yml

@@ -14,7 +14,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Build for release
-        run: nix build --print-out-paths --print-build-logs ./test#dist
+        run: nix build --print-out-paths --print-build-logs .#dist
 
       - name: Release
         uses: https://gitea.com/actions/release-action@main

.gitea/workflows/test.yml

@@ -12,7 +12,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run NixOS test
-        run: nix build --out-link "result" --print-out-paths --print-build-logs ./test#checks.x86_64-linux.hakurei
+        run: nix build --out-link "result" --print-out-paths --print-build-logs .#checks.x86_64-linux.hakurei
 
       - name: Upload test output
         uses: actions/upload-artifact@v3
@@ -29,7 +29,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run NixOS test
-        run: nix build --out-link "result" --print-out-paths --print-build-logs ./test#checks.x86_64-linux.race
+        run: nix build --out-link "result" --print-out-paths --print-build-logs .#checks.x86_64-linux.race
 
       - name: Upload test output
         uses: actions/upload-artifact@v3
@@ -46,7 +46,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run NixOS test
-        run: nix build --out-link "result" --print-out-paths --print-build-logs ./test#checks.x86_64-linux.sandbox
+        run: nix build --out-link "result" --print-out-paths --print-build-logs .#checks.x86_64-linux.sandbox
 
       - name: Upload test output
         uses: actions/upload-artifact@v3
@@ -63,7 +63,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run NixOS test
-        run: nix build --out-link "result" --print-out-paths --print-build-logs ./test#checks.x86_64-linux.sandbox-race
+        run: nix build --out-link "result" --print-out-paths --print-build-logs .#checks.x86_64-linux.sandbox-race
 
       - name: Upload test output
         uses: actions/upload-artifact@v3
@@ -80,7 +80,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run NixOS test
-        run: nix build --out-link "result" --print-out-paths --print-build-logs ./test#checks.x86_64-linux.sharefs
+        run: nix build --out-link "result" --print-out-paths --print-build-logs .#checks.x86_64-linux.sharefs
 
       - name: Upload test output
         uses: actions/upload-artifact@v3
@@ -103,7 +103,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run checks
-        run: nix --print-build-logs --experimental-features 'nix-command flakes' flake check ./test
+        run: nix --print-build-logs --experimental-features 'nix-command flakes' flake check
 
   dist:
     name: Create distribution
@@ -116,9 +116,9 @@ jobs:
         id: build-test
         run: >-
           export HAKUREI_REV="$(git rev-parse --short HEAD)" &&
-          sed -i.old 's/version = /version = "0.0.0-'$HAKUREI_REV'"; # version = /' test/package.nix &&
-          nix build --print-out-paths --print-build-logs ./test#dist &&
-          mv test/{package.nix.old,package.nix} &&
+          sed -i.old 's/version = /version = "0.0.0-'$HAKUREI_REV'"; # version = /' package.nix &&
+          nix build --print-out-paths --print-build-logs .#dist &&
+          mv package.nix.old package.nix &&
           echo "rev=$HAKUREI_REV" >> $GITHUB_OUTPUT
 
       - name: Upload test build

.gitignore

@@ -1,5 +1,4 @@
 # produced by tools and text editors
-*.swp
 *.qcow2
 *.test
 *.out
@@ -14,6 +13,3 @@
 
 # cmd/dist default destination
 /dist
-
-# local packages
-/internal/rosa/package/local

README.md

@@ -11,7 +11,7 @@
   <a href="https://git.gensokyo.uk/rosa/hakurei/actions"><img src="https://git.gensokyo.uk/rosa/hakurei/actions/workflows/test.yml/badge.svg?branch=staging&style=flat-square" alt="Gitea Workflow Status" /></a>
   <br/>
   <a href="https://git.gensokyo.uk/rosa/hakurei/releases"><img src="https://img.shields.io/gitea/v/release/rosa/hakurei?gitea_url=https%3A%2F%2Fgit.gensokyo.uk&color=purple" alt="Release" /></a>
-  <a href="https://git.gensokyo.uk/rosa/hakurei/src/branch/master/LICENSE"><img src="https://img.shields.io/badge/license-MIT-pink" alt="MIT License" /></a>
+  <a href="https://goreportcard.com/report/hakurei.app"><img src="https://goreportcard.com/badge/hakurei.app" alt="Go Report Card" /></a>
   <a href="https://hakurei.app"><img src="https://img.shields.io/website?url=https%3A%2F%2Fhakurei.app" alt="Website" /></a>
 </p>
 
@@ -57,4 +57,9 @@ package [internal/rosa](https://pkg.go.dev/hakurei.app/internal/rosa).
 - [fuse](https://github.com/libfuse/libfuse) to implement the filesystem.
 
 New dependencies will generally not be added. Patches adding new dependencies
-are very likely to be rejected.
+are very likely to be rejected.
+
+## NixOS Module (deprecated)
+
+The NixOS module is in maintenance mode and will be removed once planterette is
+feature-complete. Full module documentation can be found [here](options.md).

check/absolute.go

@@ -20,8 +20,8 @@ func (e AbsoluteError) Error() string {
 }
 
 func (e AbsoluteError) Is(target error) bool {
-	ce, ok := errors.AsType[AbsoluteError](target)
-	if !ok {
+	var ce AbsoluteError
+	if !errors.As(target, &ce) {
 		return errors.Is(target, syscall.EINVAL)
 	}
 	return e == ce
@@ -31,8 +31,6 @@ func (e AbsoluteError) Is(target error) bool {
 type Absolute struct{ pathname unique.Handle[string] }
 
 var (
-	_ fmt.GoStringer = new(Absolute)
-
 	_ encoding.TextAppender    = new(Absolute)
 	_ encoding.TextMarshaler   = new(Absolute)
 	_ encoding.TextUnmarshaler = new(Absolute)
@@ -42,10 +40,6 @@ var (
 	_ encoding.BinaryUnmarshaler = new(Absolute)
 )
 
-func (a *Absolute) GoString() string {
-	return fmt.Sprintf("check.MustAbs(%q)", a.String())
-}
-
 // ok returns whether [Absolute] is not the zero value.
 func (a *Absolute) ok() bool { return a != nil && *a != (Absolute{}) }
 

cmd/app/app.go

@@ -1,354 +0,0 @@
-package main
-
-import (
-	"bufio"
-	"fmt"
-	"io"
-	"os"
-	"strconv"
-	"strings"
-
-	"hakurei.app/check"
-	"hakurei.app/ext"
-	"hakurei.app/fhs"
-	"hakurei.app/hst"
-)
-
-// parsePair parses a NUL-delimited quoted paths pair.
-func parsePair(s string) (source, target *check.Absolute, err error) {
-	var p string
-	if p, err = strconv.Unquote(s); err != nil {
-		return
-	}
-	_source, _target, ok := strings.Cut(p, "\x00")
-	if source, err = check.NewAbs(_source); err != nil {
-		return
-	}
-	if !ok {
-		return
-	}
-	target, err = check.NewAbs(_target)
-	return
-}
-
-// parse decodes a high-level configuration stream and returns its
-// corresponding [hst.Config].
-func parse(
-	id string,
-	base *check.Absolute,
-	r io.Reader,
-	templateP *string,
-) (*hst.Config, error) {
-	shell := fhs.AbsRoot.Append("bin", "zsh")
-	home := hst.AbsPrivateTmp.Append("home")
-
-	root := hst.FSOverlay{
-		Target: fhs.AbsRoot,
-		Lower:  []*check.Absolute{base.Append("initial")},
-	}
-	c := hst.Config{
-		ID:          id,
-		Enablements: new(hst.Enablements),
-
-		SessionBus: &hst.BusConfig{
-			Own: []string{
-				id + ".*",
-				"org.mpris.MediaPlayer2." + id + ".*",
-			},
-			Filter: true,
-		},
-		SystemBus: &hst.BusConfig{Filter: true},
-
-		Container: &hst.ContainerConfig{
-			Env: make(map[string]string),
-			Filesystem: []hst.FilesystemConfigJSON{
-				{FilesystemConfig: &root},
-				{FilesystemConfig: &hst.FSBind{
-					Target: home,
-					Source: base.Append("state", id),
-					Write:  true,
-					Ensure: true,
-				}},
-
-				{FilesystemConfig: &hst.FSEphemeral{
-					Target: fhs.AbsVar.Append("tmp"),
-					Write:  true,
-					Perm:   01777,
-				}},
-			},
-
-			Username: "chronos",
-			Shell:    shell,
-			Home:     home,
-			Path:     shell,
-			Args:     []string{"zsh", "-c"},
-
-			Flags: hst.FCoverRun,
-		},
-	}
-
-	s := bufio.NewScanner(r)
-	scanOnce := func() error {
-		if s.Scan() {
-			return nil
-		}
-		if err := s.Err(); err != nil {
-			return err
-		}
-		return io.ErrUnexpectedEOF
-	}
-
-	if err := scanOnce(); err != nil {
-		return nil, err
-	}
-	if template, identity, ok := strings.Cut(s.Text(), ":"); !ok {
-		return nil, io.ErrUnexpectedEOF
-	} else if v, err := strconv.Atoi(identity); err != nil {
-		return nil, err
-	} else {
-		if templateP != nil {
-			*templateP = template
-		}
-		c.Identity = v
-		root.Upper = base.Append("template", template)
-	}
-
-	if err := scanOnce(); err != nil {
-		return nil, err
-	}
-	c.Container.Args = append(c.Container.Args, s.Text(), "")
-
-	var flagInteractive, flagGPU, flagSystemBus bool
-	flags := map[string]*bool{
-		"interactive": &flagInteractive,
-		"gpu":         &flagGPU,
-		"system_bus":  &flagSystemBus,
-	}
-
-	for s.Scan() {
-		key, value, ok := strings.Cut(s.Text(), " ")
-		if key != "" && key[0] == ';' {
-			continue
-		}
-
-		if !ok {
-			if key == "" {
-				continue
-			}
-
-			var p *bool
-			if p, ok = flags[key]; ok {
-				*p = true
-				continue
-			}
-
-			switch key {
-			case "wayland":
-				*c.Enablements |= hst.EWayland
-			case "x11":
-				*c.Enablements |= hst.EX11
-			case "dbus":
-				*c.Enablements |= hst.EDBus
-			case "pipewire":
-				*c.Enablements |= hst.EPipeWire
-
-			case "multiarch":
-				c.Container.Flags |= hst.FMultiarch
-			case "devel":
-				c.Container.Flags |= hst.FDevel
-			case "userns":
-				c.Container.Flags |= hst.FUserns
-			case "net":
-				c.Container.Flags |= hst.FHostNet
-			case "abstract":
-				c.Container.Flags |= hst.FHostAbstract
-			case "tty":
-				c.Container.Flags |= hst.FTty
-			case "mapuid":
-				c.Container.Flags |= hst.FMapRealUID
-			case "device":
-				c.Container.Flags |= hst.FDevice
-
-			case "share_runtime":
-				c.Container.Flags |= hst.FShareRuntime
-			case "share_tmpdir":
-				c.Container.Flags |= hst.FShareTmpdir
-
-			default:
-				return nil, fmt.Errorf("invalid flag %q", key)
-			}
-
-			continue
-		}
-
-		switch key {
-		case "username":
-			c.Container.Username = value
-			continue
-
-		case "hostname":
-			c.Container.Hostname = value
-			continue
-
-		case "group":
-			c.Groups = append(c.Groups, value)
-			continue
-
-		case "sched_policy":
-			if err := c.SchedPolicy.UnmarshalText([]byte(value)); err != nil {
-				return nil, err
-			}
-			continue
-
-		case "sched_priority":
-			v, err := strconv.Atoi(value)
-			if err != nil {
-				return nil, err
-			}
-			c.SchedPriority = ext.Int(v)
-			continue
-
-		case "insecure":
-			switch value {
-			case "pipewire":
-				*c.Enablements |= hst.EPipeWire
-				c.DirectPipeWire = true
-				continue
-
-			default:
-				return nil, fmt.Errorf("invalid insecure flag %q", value)
-			}
-
-		case "env":
-			if key, value, ok = strings.Cut(value, "="); !ok {
-				return nil, fmt.Errorf("invalid environment %q", key)
-			}
-			c.Container.Env[key] = value
-			continue
-
-		case "ro":
-			source, target, err := parsePair(value)
-			if err != nil {
-				return nil, err
-			}
-			c.Container.Filesystem = append(c.Container.Filesystem,
-				hst.FilesystemConfigJSON{FilesystemConfig: &hst.FSBind{
-					Target: target,
-					Source: source,
-				}},
-			)
-			continue
-
-		case "ro+":
-			source, target, err := parsePair(value)
-			if err != nil {
-				return nil, err
-			}
-			c.Container.Filesystem = append(c.Container.Filesystem,
-				hst.FilesystemConfigJSON{FilesystemConfig: &hst.FSBind{
-					Target:   target,
-					Source:   source,
-					Optional: true,
-				}},
-			)
-			continue
-
-		case "rw":
-			source, target, err := parsePair(value)
-			if err != nil {
-				return nil, err
-			}
-			c.Container.Filesystem = append(c.Container.Filesystem,
-				hst.FilesystemConfigJSON{FilesystemConfig: &hst.FSBind{
-					Target: target,
-					Source: source,
-					Write:  true,
-				}},
-			)
-			continue
-
-		case "dev":
-			source, target, err := parsePair(value)
-			if err != nil {
-				return nil, err
-			}
-			c.Container.Filesystem = append(c.Container.Filesystem,
-				hst.FilesystemConfigJSON{FilesystemConfig: &hst.FSBind{
-					Target: target,
-					Source: source,
-					Device: true,
-				}},
-			)
-			continue
-
-		case "own":
-			c.SessionBus.Own = append(c.SessionBus.Own, value)
-			continue
-		case "own_system":
-			c.SystemBus.Own = append(c.SystemBus.Own, value)
-			continue
-
-		case "talk":
-			c.SessionBus.Talk = append(c.SessionBus.Talk, value)
-			continue
-		case "talk_system":
-			c.SystemBus.Talk = append(c.SystemBus.Talk, value)
-			continue
-
-		default:
-			return nil, fmt.Errorf("invalid key %q", key)
-		}
-	}
-	if err := s.Err(); err != nil {
-		return nil, err
-	}
-
-	if flagInteractive {
-		c.Container.Args[1] += "i"
-	}
-
-	if flagGPU {
-		c.Container.Filesystem = append(c.Container.Filesystem, []hst.FilesystemConfigJSON{
-			{FilesystemConfig: &hst.FSBind{
-				Source:   fhs.AbsDev.Append("dri"),
-				Device:   true,
-				Optional: true,
-			}},
-		}...)
-	}
-
-	if !flagSystemBus {
-		c.SystemBus = nil
-	}
-
-	if c.Container.Flags&hst.FShareTmpdir == 0 &&
-		(c.Enablements.Unwrap()&hst.EX11 == 0 ||
-			c.Container.Flags&(hst.FHostNet|hst.FHostAbstract) ==
-				hst.FHostNet|hst.FHostAbstract) {
-		c.Container.Filesystem = append(c.Container.Filesystem,
-			hst.FilesystemConfigJSON{FilesystemConfig: &hst.FSEphemeral{
-				Target: fhs.AbsTmp,
-				Write:  true,
-				Perm:   01777,
-			}},
-		)
-	}
-
-	return &c, nil
-}
-
-// list prints names of non-hidden entries in pathname.
-func list(pathname *check.Absolute, dir bool) error {
-	dents, err := os.ReadDir(pathname.String())
-	if err != nil {
-		return err
-	}
-	for _, dent := range dents {
-		name := dent.Name()
-		if (dent.IsDir() != dir) || (len(name) > 0 && name[0] == '.') {
-			continue
-		}
-		fmt.Println(dent.Name())
-	}
-	return nil
-}

cmd/app/app_test.go

@@ -1,148 +0,0 @@
-package main
-
-import (
-	"reflect"
-	"strings"
-	"testing"
-
-	"hakurei.app/check"
-	"hakurei.app/fhs"
-	"hakurei.app/hst"
-)
-
-func TestParse(t *testing.T) {
-	t.Parallel()
-
-	base := fhs.AbsProc.Append("nonexistent")
-	testCases := []struct {
-		name string
-		data string
-		want *hst.Config
-		err  error
-	}{
-		{"com.discordapp.Discord", `nonfree:8
-exec Discord --ozone-platform-hint=wayland
-
-gpu
-wayland
-dbus
-system_bus
-pipewire
-userns
-net
-mapuid
-
-share_runtime
-share_tmpdir
-
-group media_rw
-env ELECTRON_TRASH=gio
-rw "/sdcard"
-; remove before reusing
-ro "/bin\x00/.hakurei/bin"
-
-talk org.kde.StatusNotifierWatcher
-talk com.canonical.AppMenu.Registrar
-talk com.canonical.indicator.application
-talk com.canonical.Unity
-`, &hst.Config{
-			Identity:    8,
-			ID:          "com.discordapp.Discord",
-			Enablements: new(hst.EWayland | hst.EDBus | hst.EPipeWire),
-			Groups:      []string{"media_rw"},
-
-			SessionBus: &hst.BusConfig{
-				Talk: []string{
-					"org.kde.StatusNotifierWatcher",
-					"com.canonical.AppMenu.Registrar",
-					"com.canonical.indicator.application",
-					"com.canonical.Unity",
-				},
-				Own: []string{
-					"com.discordapp.Discord.*",
-					"org.mpris.MediaPlayer2.com.discordapp.Discord.*",
-				},
-				Filter: true,
-			},
-			SystemBus: &hst.BusConfig{Filter: true},
-
-			Container: &hst.ContainerConfig{
-				Env: map[string]string{
-					"ELECTRON_TRASH": "gio",
-				},
-				Filesystem: []hst.FilesystemConfigJSON{
-					{FilesystemConfig: &hst.FSOverlay{
-						Target: fhs.AbsRoot,
-						Lower: []*check.Absolute{
-							base.Append("initial"),
-						},
-						Upper: base.Append("template", "nonfree"),
-					}},
-					{FilesystemConfig: &hst.FSBind{
-						Target: hst.AbsPrivateTmp.Append("home"),
-						Source: base.Append("state", "com.discordapp.Discord"),
-						Write:  true,
-						Ensure: true,
-					}},
-
-					{FilesystemConfig: &hst.FSEphemeral{
-						Target: fhs.AbsVar.Append("tmp"),
-						Write:  true,
-						Perm:   01777,
-					}},
-
-					{FilesystemConfig: &hst.FSBind{
-						Source: check.MustAbs("/sdcard"),
-						Write:  true,
-					}},
-					{FilesystemConfig: &hst.FSBind{
-						Target: check.MustAbs("/.hakurei/bin"),
-						Source: check.MustAbs("/bin"),
-					}},
-
-					{FilesystemConfig: &hst.FSBind{
-						Source:   fhs.AbsDev.Append("dri"),
-						Device:   true,
-						Optional: true,
-					}},
-				},
-
-				Username: "chronos",
-				Shell:    fhs.AbsRoot.Append("bin", "zsh"),
-				Home:     hst.AbsPrivateTmp.Append("home"),
-				Path:     fhs.AbsRoot.Append("bin", "zsh"),
-				Args: []string{
-					"zsh", "-c",
-					"exec Discord --ozone-platform-hint=wayland",
-					"",
-				},
-
-				Flags: hst.FCoverRun | hst.FUserns | hst.FHostNet | hst.FMapRealUID |
-					hst.FShareRuntime | hst.FShareTmpdir,
-			},
-		}, nil},
-	}
-	for _, tc := range testCases {
-		t.Run(tc.name, func(t *testing.T) {
-			t.Parallel()
-
-			got, err := parse(
-				tc.name,
-				base,
-				strings.NewReader(tc.data),
-				nil,
-			)
-
-			if !reflect.DeepEqual(err, tc.err) {
-				t.Errorf("parse: error = %v, want %v", err, tc.err)
-			}
-			if err != nil {
-				return
-			}
-
-			if !reflect.DeepEqual(got, tc.want) {
-				t.Errorf("parse: %#v, want %#v", got, tc.want)
-			}
-		})
-	}
-}

cmd/app/lock.go

@@ -1,112 +0,0 @@
-package main
-
-import (
-	"errors"
-	"log"
-	"os"
-	"strconv"
-	"strings"
-
-	"hakurei.app/check"
-	"hakurei.app/fhs"
-	"hakurei.app/hst"
-	"hakurei.app/internal/env"
-	"hakurei.app/internal/lockedfile"
-	"hakurei.app/internal/outcome"
-)
-
-// MutationConflictError describes an active mutable instance.
-type MutationConflictError string
-
-func (e MutationConflictError) Error() string {
-	return "mutable instance active at " + string(e)
-}
-
-// informTemplate guards intention of a template or its derivatives.
-func informTemplate(base *check.Absolute, name string, mutable bool) (func() error, error) {
-	mu := lockedfile.MutexAt(base.Append("lock", name).String())
-	if unlock, err := mu.Lock(); err != nil {
-		return nil, err
-	} else {
-		defer unlock()
-	}
-
-	marker := base.Append("lock", "."+name)
-	if p, err := os.ReadFile(marker.String()); err == nil {
-		if _, err = os.Stat(fhs.AbsProc.Append(string(p)).String()); err == nil {
-			return nil, MutationConflictError(p)
-		} else if !errors.Is(err, os.ErrNotExist) {
-			return nil, err
-		}
-		log.Printf("removing stale marker by %s", string(p))
-		if err = os.Remove(marker.String()); err != nil {
-			return nil, err
-		}
-	} else if !errors.Is(err, os.ErrNotExist) {
-		return nil, err
-	}
-
-	if !mutable {
-		return nil, nil
-	}
-
-	var active []hst.ID
-	var sc hst.Paths
-	env.CopyPaths().Copy(&sc, new(outcome.Hsu).MustID(nil))
-	entries, copyError := outcome.NewStore(&sc).All()
-	var s hst.State
-	for eh := range entries {
-		s = hst.State{}
-		if _, err := eh.Load(&s); err != nil {
-			return nil, err
-		}
-
-		if s.Validate(0) != nil || len(s.Container.Filesystem) < 1 {
-			continue
-		}
-		root, ok := s.Container.Filesystem[0].FilesystemConfig.(*hst.FSOverlay)
-		if !ok || root == nil {
-			continue
-		}
-
-		if !root.Target.Is(fhs.AbsRoot) ||
-			len(root.Lower) != 1 ||
-			!root.Lower[0].Is(base.Append("initial")) ||
-			!root.Upper.Is(base.Append("template", name)) ||
-			root.Work != nil {
-			continue
-		}
-
-		active = append(active, s.ID)
-	}
-	if err := copyError(); err != nil {
-		return nil, err
-	}
-
-	if len(active) != 0 {
-		var buf strings.Builder
-		buf.WriteString("derivative instances still active:")
-		for _, id := range active {
-			buf.WriteString("\n\t")
-			buf.WriteString(id.String())
-		}
-		return nil, errors.New(buf.String())
-	}
-
-	return func() error { return os.RemoveAll(marker.String()) }, os.WriteFile(
-		marker.String(),
-		[]byte(strconv.Itoa(os.Getpid())),
-		0400,
-	)
-}
-
-// acquireTemplate obtains exclusivity of a template.
-func acquireTemplate(base *check.Absolute, name string) (remove func() error, err error) {
-	return informTemplate(base, name, true)
-}
-
-// enterTemplate checks against exclusivity of a template.
-func enterTemplate(base *check.Absolute, name string) error {
-	_, err := informTemplate(base, name, false)
-	return err
-}

cmd/app/main.go

@@ -1,226 +0,0 @@
-// The app program is a proof-of-concept frontend for cmd/hakurei.
-//
-// This program is not covered by the compatibility promise. The command line
-// interface and configuration syntax may change at any time.
-package main
-
-import (
-	"context"
-	"errors"
-	"io"
-	"log"
-	"os"
-	"os/exec"
-	"os/signal"
-	"path/filepath"
-	"syscall"
-
-	"hakurei.app/check"
-	"hakurei.app/command"
-	"hakurei.app/fhs"
-	"hakurei.app/hst"
-	"hakurei.app/message"
-)
-
-func main() {
-	log.SetFlags(0)
-	log.SetPrefix("app: ")
-	msg := message.New(log.Default())
-
-	ctx, stop := signal.NotifyContext(context.Background(),
-		syscall.SIGINT, syscall.SIGTERM, syscall.SIGHUP)
-	defer stop()
-
-	var (
-		flagVerbose  bool
-		flagBase     string
-		flagInsecure bool
-
-		base, template, initial *check.Absolute
-	)
-	c := command.New(os.Stderr, log.Printf, "app", func([]string) (err error) {
-		msg.SwapVerbose(flagVerbose)
-		flagBase = os.ExpandEnv(flagBase)
-		if flagBase == "" {
-			flagBase = "state"
-		}
-		if flagBase, err = filepath.Abs(flagBase); err != nil {
-			return
-		} else if base, err = check.NewAbs(flagBase); err != nil {
-			return
-		}
-
-		template = base.Append("template")
-		initial = base.Append("initial")
-		return
-	}).Flag(
-		&flagVerbose,
-		"v", command.BoolFlag(false),
-		"Increase log verbosity",
-	).Flag(
-		&flagBase,
-		"d", command.StringFlag("$ROSA_APP_PATH"),
-		"Configuration and state directory",
-	).Flag(
-		&flagInsecure,
-		"insecure", command.BoolFlag(false),
-		"Allow use of insecure compatibility options",
-	)
-
-	{
-		var (
-			flagShell string
-			flagHome  string
-		)
-		c.NewCommand(
-			"enter", "Enter mutable state template",
-			func(args []string) error {
-				if len(args) != 1 {
-					return list(template, true)
-				}
-
-				config := hst.Config{
-					ID: "app.hakurei.mutable." + args[0],
-					Container: &hst.ContainerConfig{
-						Hostname: args[0] + "-mutable",
-						Filesystem: []hst.FilesystemConfigJSON{
-							{FilesystemConfig: &hst.FSOverlay{
-								Target: fhs.AbsRoot,
-								Lower:  []*check.Absolute{initial},
-								Upper:  template.Append(args[0]),
-								Work:   base.Append("work", args[0]),
-							}},
-							{FilesystemConfig: &hst.FSEphemeral{
-								Target: fhs.AbsTmp,
-								Write:  true,
-								Perm:   0755,
-							}},
-						},
-						Username: "chronos",
-						Flags: hst.FNoPlace |
-							hst.FMultiarch |
-							hst.FDevel |
-							hst.FUserns |
-							hst.FHostNet |
-							hst.FTty,
-					},
-				}
-
-				if a, err := check.NewAbs(flagShell); err != nil {
-					return err
-				} else {
-					config.Container.Shell = a
-					config.Container.Path = a
-					config.Container.Args = []string{
-						"-" + filepath.Base(flagShell),
-					}
-				}
-
-				if a, err := check.NewAbs(flagHome); err != nil {
-					return err
-				} else {
-					config.Container.Home = a
-				}
-
-				remove, err := acquireTemplate(base, args[0])
-				if err != nil {
-					return err
-				}
-				err = run(ctx, msg, false, &config)
-				return errors.Join(err, remove())
-			},
-		).Flag(
-			&flagShell,
-			"shell", command.StringFlag("/bin/zsh"),
-			"Shell program within container",
-		).Flag(
-			&flagHome,
-			"home", command.StringFlag("/home/chronos"),
-			"Home directory within container",
-		)
-	}
-
-	{
-		var (
-			flagCommand string
-		)
-		c.NewCommand(
-			"run", "Start the named application",
-			func(args []string) error {
-				if len(args) < 1 {
-					return list(base.Append("app"), false)
-				}
-
-				var config *hst.Config
-				var r io.Reader
-				f, err := os.Open(base.Append("app", args[0]).String())
-				if err != nil {
-					return err
-				}
-				r = f
-
-				var common *os.File
-				if common, err = os.Open(base.Append("common").String()); err != nil {
-					if !errors.Is(err, os.ErrNotExist) {
-						_ = f.Close()
-						return err
-					}
-				} else {
-					r = io.MultiReader(f, common)
-				}
-
-				var name string
-				config, err = parse(args[0], base, r, &name)
-				if closeErr := f.Close(); err == nil {
-					err = closeErr
-				}
-				if common != nil {
-					if closeErr := common.Close(); err == nil {
-						err = closeErr
-					}
-				}
-				if err != nil {
-					return err
-				}
-
-				if flagCommand != "" {
-					config.Container.Args[2] = flagCommand
-				}
-
-				if err = enterTemplate(base, name); err != nil {
-					return err
-				}
-				return run(ctx, msg, flagInsecure, config, args[1:]...)
-			},
-		).
-			Flag(
-				&flagCommand,
-				"command", command.StringFlag(""),
-				"Override configured command",
-			)
-	}
-
-	c.MustParse(os.Args[1:], func(err error) {
-		if e, ok := errors.AsType[*exec.ExitError](err); ok && e != nil {
-			os.Exit(e.ExitCode())
-		}
-
-		if w, ok := err.(interface{ Unwrap() []error }); !ok {
-			var m string
-			m, ok = message.GetMessage(err)
-			if !ok {
-				log.Fatal(err)
-				return
-			}
-			log.Fatal(m)
-		} else {
-			errs := w.Unwrap()
-			for i, e := range errs {
-				if i == len(errs)-1 {
-					log.Fatal(e)
-				}
-				log.Println(e)
-			}
-		}
-	})
-}

cmd/app/run.go

@@ -1,61 +0,0 @@
-package main
-
-import (
-	"context"
-	"encoding/json"
-	"os"
-	"os/exec"
-	"syscall"
-
-	"hakurei.app/hst"
-	"hakurei.app/message"
-)
-
-// run starts a container via cmd/hakurei and returns after it terminates.
-func run(
-	ctx context.Context,
-	msg message.Msg,
-	insecure bool,
-	config *hst.Config,
-	args ...string,
-) error {
-	c, cancel := context.WithCancel(ctx)
-	defer cancel()
-
-	cmd := exec.CommandContext(c, "hakurei")
-	cmd.Stdin, cmd.Stdout, cmd.Stderr = os.Stdin, os.Stdout, os.Stderr
-	cmd.Cancel = func() error {
-		return cmd.Process.Signal(syscall.SIGINT)
-	}
-	if msg.IsVerbose() {
-		cmd.Args = append(cmd.Args, "-v")
-	}
-	if insecure {
-		cmd.Args = append(cmd.Args, "--insecure")
-	}
-	cmd.Args = append(cmd.Args, "run", "3")
-	cmd.Args = append(cmd.Args, args...)
-
-	r, w, err := os.Pipe()
-	if err != nil {
-		return err
-	}
-	cmd.ExtraFiles = append(cmd.ExtraFiles, r)
-
-	if err = cmd.Start(); err != nil {
-		_, _ = r.Close(), w.Close()
-		return err
-	}
-
-	if err = r.Close(); err != nil {
-		_ = w.Close()
-		return err
-	} else if err = json.NewEncoder(w).Encode(&config); err != nil {
-		_ = w.Close()
-		return err
-	} else if err = w.Close(); err != nil {
-		return err
-	}
-
-	return cmd.Wait()
-}

cmd/dist/VERSION

@@ -1 +0,0 @@
-v0.4.6

cmd/dist/main.go

@@ -18,13 +18,8 @@ import (
 	"os/signal"
 	"path/filepath"
 	"runtime"
-	"strings"
 )
 
-//go:generate sh -c "git describe --tags > VERSION"
-//go:embed VERSION
-var version string
-
 // getenv looks up an environment variable, and returns fallback if it is unset.
 func getenv(key, fallback string) string {
 	if v, ok := os.LookupEnv(key); ok {
@@ -35,11 +30,8 @@ func getenv(key, fallback string) string {
 
 // mustRun runs a command with the current process's environment and panics
 // on error or non-zero exit code.
-func mustRun(ctx context.Context, env []string, name string, arg ...string) {
+func mustRun(ctx context.Context, name string, arg ...string) {
 	cmd := exec.CommandContext(ctx, name, arg...)
-	if env != nil {
-		cmd.Env = append(cmd.Environ(), env...)
-	}
 	cmd.Stdin, cmd.Stdout, cmd.Stderr = os.Stdin, os.Stdout, os.Stderr
 	if err := cmd.Run(); err != nil {
 		panic(err)
@@ -52,12 +44,11 @@ var comp []byte
 func main() {
 	log.SetFlags(0)
 	log.SetPrefix("")
-	log.SetOutput(os.Stdout)
 
 	verbose := os.Getenv("VERBOSE") != ""
 	runTests := os.Getenv("HAKUREI_DIST_MAKE") == ""
-	version = getenv("HAKUREI_VERSION", strings.TrimSpace(version))
-	prefix := getenv("PREFIX", "/usr/local")
+	version := getenv("HAKUREI_VERSION", "untagged")
+	prefix := getenv("PREFIX", "/usr")
 	destdir := getenv("DESTDIR", "dist")
 
 	if verbose {
@@ -95,37 +86,26 @@ func main() {
 		verboseFlag = "-buildvcs=false"
 	}
 
-	log.Printf("Building hakurei %s for %s/%s.", version, runtime.GOOS, runtime.GOARCH)
-	mustRun(ctx, nil, "go", "generate", "./...")
+	log.Printf("Building hakurei for %s/%s.", runtime.GOOS, runtime.GOARCH)
+	mustRun(ctx, "go", "generate", "./...")
 	mustRun(
-		ctx, nil, "go", "build",
+		ctx, "go", "build",
 		"-trimpath",
 		verboseFlag, "-o", s,
 		"-ldflags=-s -w "+
 			"-buildid= -linkmode external -extldflags=-static "+
 			"-X hakurei.app/internal/info.buildVersion="+version+" "+
 			"-X hakurei.app/internal/info.hakureiPath="+prefix+"/bin/hakurei "+
-			"-X hakurei.app/internal/info.hsuPath="+prefix+"/bin/hsu",
-		"./cmd/hakurei",
-		"./cmd/sharefs",
-	)
-
-	log.Printf("Building cmd/hsu for %s/%s.", runtime.GOOS, runtime.GOARCH)
-	mustRun(
-		ctx, []string{"CGO_ENABLED=0"}, "go", "build",
-		"-trimpath",
-		verboseFlag, "-o", s,
-		"-ldflags=-s -w "+
-			"-buildid= "+
+			"-X hakurei.app/internal/info.hsuPath="+prefix+"/bin/hsu "+
 			"-X main.hakureiPath="+prefix+"/bin/hakurei",
-		"./cmd/hsu",
+		"./...",
 	)
-
 	log.Println()
+
 	if runTests {
 		log.Println("##### Testing Hakurei.")
 		mustRun(
-			ctx, nil, "go", "test",
+			ctx, "go", "test",
 			"-ldflags=-buildid= -linkmode external -extldflags=-static",
 			"./...",
 		)
@@ -217,7 +197,7 @@ func main() {
 	mustWriteFile("comp/", nil, os.ModeDir|0755)
 	mustWriteFile("comp/_hakurei", comp, 0644)
 	mustWriteFile("install.sh", []byte(`#!/bin/sh -e
-cd "$(dirname -- "$0")"
+cd "$(dirname -- "$0")" || exit 1
 
 install -vDm0755 "bin/hakurei" "${DESTDIR}`+prefix+`/bin/hakurei"
 install -vDm0755 "bin/sharefs" "${DESTDIR}`+prefix+`/bin/sharefs"
@@ -230,7 +210,7 @@ fi
 install -vDm0644 "comp/_hakurei" "${DESTDIR}`+prefix+`/share/zsh/site-functions/_hakurei"
 `), 0755)
 
-	mustWriteFromPath("LICENSE", "LICENSE", 0)
+	mustWriteFromPath("README.md", "README.md", 0)
 	mustWriteFile("hsurc.default", []byte("1000 0"), 0400)
 	mustWriteFromPath("bin/hsu", filepath.Join(s, "hsu"), 04511)
 	for _, name := range []string{

cmd/earlyinit/main.go

@@ -5,93 +5,17 @@
 package main
 
 import (
-	"context"
-	"crypto/rand"
-	"io"
 	"log"
 	"os"
-	"os/signal"
 	"runtime"
-	"runtime/pprof"
-	"slices"
 	"strings"
 	. "syscall"
-
-	"hakurei.app/internal/kobject"
-	"hakurei.app/internal/report"
-	"hakurei.app/internal/uevent"
-	"hakurei.app/message"
-)
-
-var r report.Reporter
-
-func init() {
-	log.SetFlags(0)
-	log.SetPrefix("earlyinit: ")
-	r.SetOutput(log.Default())
-
-	// this handles SIGQUIT to provide useful debugging information without
-	// terminating, and prevents the runtime from throwing on the must family
-	// of early error reporting functions, DO NOT REMOVE
-	c := make(chan os.Signal, 1)
-	signal.Notify(c, SIGQUIT)
-	go func() {
-		for {
-			<-c
-			if p := pprof.Lookup("goroutine"); p == nil {
-				log.Println("initial built-in goroutine profile does not exist")
-			} else if err := p.WriteTo(os.Stderr, 2); err != nil {
-				log.Println(err)
-			}
-		}
-	}()
-}
-
-// fatal calls [log.Println] with v and blocks forever. Must be called from
-// main. Must not be used after error reporting is set up.
-func fatal(v ...any) {
-	log.Println(v...)
-	log.Println("unable to continue, please reboot and resolve the problem manually")
-	log.SetOutput(io.Discard)
-	select {}
-}
-
-// must calls fatal with err if it is non-nil.
-func must(err error) {
-	if err != nil {
-		fatal(err)
-		select {}
-	}
-}
-
-// mustSyscall is like must, but with an additional action name.
-func mustSyscall(action string, err error) {
-	if err != nil {
-		fatal("cannot "+action+":", err)
-		select {}
-	}
-}
-
-// must1 is like must, but with an additional passed through value.
-func must1[T any](v T, err error) T {
-	must(err)
-	return v
-}
-
-const (
-	// optionSystem specifies devpath of the system device.
-	optionSystem = "system"
-
-	// flagVerbose increases output verbosity.
-	flagVerbose = "verbose"
-	// flagStrict sets [report.DStrict] on r.
-	flagStrict = "strict"
-	// flagNoRecover sets [report.DNoRecover] on r.
-	flagNoRecover = "no_recover"
 )
 
 func main() {
 	runtime.LockOSThread()
+	log.SetFlags(0)
+	log.SetPrefix("earlyinit: ")
 
 	var (
 		option map[string]string
@@ -109,44 +33,15 @@ func main() {
 		}
 	}
 
-	{
-		var flag uint64
-		if slices.Contains(flags, flagStrict) {
-			flag |= report.DStrict
-		}
-		if slices.Contains(flags, flagNoRecover) {
-			flag |= report.DNoRecover
-		}
-		log.Printf("reporting flags %x", flag)
-		r.SetFlags(flag)
-	}
-
-	msg := message.New(log.Default())
-	msg.SwapVerbose(slices.Contains(flags, flagVerbose))
-
-	mustSyscall("mount devtmpfs", Mount(
+	if err := Mount(
 		"devtmpfs",
 		"/dev/",
 		"devtmpfs",
 		MS_NOSUID|MS_NOEXEC,
 		"",
-	))
-	must(os.Mkdir("/dev/pts/", 0))
-	mustSyscall("mount devpts", Mount(
-		"devpts",
-		"/dev/pts/",
-		"devpts",
-		MS_NOSUID|MS_NOEXEC,
-		"mode=620,ptmxmode=666",
-	))
-	must(os.Mkdir("/dev/shm/", 0))
-	mustSyscall("mount shm", Mount(
-		"shm",
-		"/dev/shm/",
-		"tmpfs",
-		MS_NOSUID|MS_NODEV,
-		"",
-	))
+	); err != nil {
+		log.Fatalf("cannot mount devtmpfs: %v", err)
+	}
 
 	// The kernel might be unable to set up the console. When that happens,
 	// printk is called with "Warning: unable to open an initial console."
@@ -203,49 +98,6 @@ func main() {
 		"",
 	))
 
-	conn := must1(uevent.Dial(-128 * 1024 * 1024))
-	events := make(chan *uevent.Message, 1<<10)
-	var uuid uevent.UUID
-	must1(rand.Read(uuid[:]))
-	ctx, cancel := context.WithCancel(context.Background())
-
-	go consume(ctx, msg, &r, conn, uuid, events)
-	s := kobject.New(uuid, func(o *kobject.Object, env map[string]string) {
-		p := make([]string, 0, len(env))
-		for k, v := range env {
-			p = append(p, k+"="+v)
-		}
-		slices.Sort(p)
-		log.Printf("change %s: %s", o.DevPath, strings.Join(p, ", "))
-	}, func(err error) {
-		severity := report.Inconsistent
-		if e, ok := err.(kobject.EventError); ok && e.Kind == kobject.EBadTarget {
-			severity = report.Trivial
-		}
-		r.Dispatch(
-			severity,
-			"processed inconsistent uevent",
-			err,
-		)
-	})
-	go func() {
-		s.Consume(ctx, events)
-
-		log.Println("closing NETLINK_KOBJECT_UEVENT socket")
-		cancel()
-		if err := conn.Close(); err != nil {
-			log.Fatal(err) // not reached
-		}
-	}()
-
-	must(os.Mkdir("/system", 0))
-	if devpath := option[optionSystem]; devpath == "" {
-		fatal("system must be nonempty")
-	} else {
-		log.Printf("waiting for devpath pattern %q", devpath)
-		mustMountSystem(ctx, s, devpath)
-	}
-
 	// after top level has been set up
 	mustSyscall("remount root", Mount(
 		"",
@@ -261,6 +113,19 @@ func main() {
 		[]byte("/system/lib/firmware"),
 		0,
 	))
-	go dispatchModprobe(ctx, s)
 
 }
+
+// mustSyscall calls [log.Fatalln] if err is non-nil.
+func mustSyscall(action string, err error) {
+	if err != nil {
+		log.Fatalln("cannot "+action+":", err)
+	}
+}
+
+// must calls [log.Fatal] with err if it is non-nil.
+func must(err error) {
+	if err != nil {
+		log.Fatal(err)
+	}
+}

cmd/earlyinit/modprobe.go

@@ -1,74 +0,0 @@
-package main
-
-import (
-	"context"
-	"errors"
-	"fmt"
-	"log"
-	"os/exec"
-	"strings"
-
-	"hakurei.app/internal/kobject"
-	"hakurei.app/internal/report"
-	"hakurei.app/internal/uevent"
-)
-
-// ModprobeError describes an unsuccessful modprobe invocation.
-type ModprobeError struct {
-	ModAlias string `json:"modalias"`
-	Stdout   string `json:"stdout"`
-	Stderr   string `json:"stderr"`
-	ExitCode int    `json:"exit_code"`
-}
-
-var _ report.RepresentableError = ModprobeError{}
-
-func (ModprobeError) Representable() {}
-func (e ModprobeError) Error() string {
-	return fmt.Sprintf(
-		"%s (exit status %d)",
-		strings.TrimPrefix(strings.TrimSpace(e.Stderr), "modprobe: "),
-		e.ExitCode,
-	)
-}
-
-// dispatchModprobe invokes modprobe for [uevent.KOBJ_ADD] events raising new
-// MODALIAS strings.
-func dispatchModprobe(
-	ctx context.Context,
-	s *kobject.State,
-) {
-	aliases := make(chan string, 1<<8)
-	go func() {
-		defer close(aliases)
-		s.Range(ctx, func(o *kobject.Object, act uevent.KobjectAction) bool {
-			if act == uevent.KOBJ_ADD && o.Driver == "" && o.ModAlias != "" {
-				aliases <- o.ModAlias
-			}
-			return true
-		})
-	}()
-
-	for alias := range aliases {
-		stdout, err := exec.Command("/system/sbin/modprobe", alias).Output()
-		if err == nil {
-			if len(stdout) > 0 {
-				log.Println(string(stdout))
-			}
-			continue
-		}
-
-		exitError, ok := errors.AsType[*exec.ExitError](err)
-		if !ok || exitError == nil {
-			r.Dispatch(report.Degraded, "invoke modprobe", err)
-			continue
-		}
-
-		r.Dispatch(report.Trivial, "load device driver", ModprobeError{
-			ModAlias: alias,
-			Stdout:   string(stdout),
-			Stderr:   string(exitError.Stderr),
-			ExitCode: exitError.ExitCode(),
-		})
-	}
-}

cmd/earlyinit/mount.go

@@ -1,71 +0,0 @@
-package main
-
-import (
-	"context"
-	"errors"
-	"os"
-	"path/filepath"
-	"strconv"
-	"syscall"
-	"time"
-
-	"hakurei.app/check"
-	"hakurei.app/fhs"
-	"hakurei.app/internal/kobject"
-	"hakurei.app/internal/uevent"
-)
-
-// mustMountSystem waits for and mounts a system device matching pattern.
-func mustMountSystem(
-	ctx context.Context,
-	s *kobject.State,
-	pattern string,
-) {
-	c, stop := context.WithTimeout(ctx, 30*time.Second)
-	defer stop()
-
-	for {
-		var matchErr error
-		var systemPath *check.Absolute
-		s.Range(c, func(o *kobject.Object, act uevent.KobjectAction) bool {
-			if (act != uevent.KOBJ_ADD && act != uevent.KOBJ_CHANGE) ||
-				o.Subsystem != "block" ||
-				o.Env["DEVTYPE"] != "disk" {
-				return true
-			}
-
-			if ok, err := filepath.Match(pattern, o.DevPath); err != nil {
-				matchErr = err
-				return false
-			} else if !ok {
-				return true
-			}
-
-			name, ok := o.Env["DEVNAME"]
-			if !ok {
-				return true
-			}
-			systemPath = fhs.AbsDev.Append(name)
-			return false
-		})
-		if c.Err() != nil {
-			fatal("devpath", strconv.Quote(pattern), "never appeared")
-		}
-		if matchErr != nil {
-			fatal("cannot match system devpath:", matchErr)
-		}
-		err := syscall.Mount(
-			systemPath.String(),
-			"/system/",
-			"squashfs",
-			0,
-			"threads=multi",
-		)
-		if err == nil {
-			break
-		}
-		if !errors.Is(err, os.ErrNotExist) {
-			fatal("cannot mount system:", err)
-		}
-	}
-}

cmd/earlyinit/uevent.go

@@ -1,104 +0,0 @@
-package main
-
-import (
-	"context"
-	"time"
-
-	"hakurei.app/fhs"
-	"hakurei.app/internal/report"
-	"hakurei.app/internal/uevent"
-	"hakurei.app/message"
-)
-
-// newRejectColdboot returns a function to be called on every subsequent pending
-// coldboot, and returns whether coldboot should proceed. Rejection is sticky.
-func newRejectColdboot() func() bool {
-	// one coldboot per five minutes, two consecutive coldboot
-	const (
-		coldbootInterval = 5 * time.Minute
-		coldbootBurst    = 2
-	)
-
-	done := make(chan struct{})
-	s := make(chan struct{}, coldbootBurst)
-	s <- struct{}{} // for early fault before reporting is ready
-	go func() {
-		t := time.NewTicker(coldbootInterval)
-		for {
-			select {
-			case <-done:
-				return
-
-			case <-t.C:
-				select {
-				case s <- struct{}{}:
-				default:
-				}
-			}
-		}
-	}()
-
-	return func() bool {
-		select {
-		case <-s:
-			return true
-
-		case <-done:
-			return false
-
-		default:
-			close(done)
-			return false
-		}
-	}
-}
-
-// consume continuously consumes events from conn with retries.
-func consume(
-	ctx context.Context,
-	msg message.Msg,
-	r *report.Reporter,
-	conn *uevent.Conn,
-	uuid uevent.UUID,
-	events chan<- *uevent.Message,
-) {
-	defer close(events)
-
-	nextColdboot := newRejectColdboot()
-	coldboot := true
-retry:
-	if dispatchErr := conn.Consume(ctx, fhs.Sys, &uuid, events, coldboot, func(path string) {
-		msg.Verbose("coldboot visited", path)
-	}, func(err error) bool {
-		if _, ok := err.(uevent.NeedsColdboot); ok && !nextColdboot() {
-			r.Dispatch(
-				report.Degraded,
-				"rejecting coldboot loop",
-				err,
-			)
-			return false
-		}
-		r.Dispatch(
-			report.Inconsistent,
-			"consumed invalid message",
-			err,
-		)
-		return true
-	}, nil); dispatchErr != nil {
-		if _, ok := dispatchErr.(uevent.Recoverable); !ok {
-			r.Dispatch(
-				report.Fatal,
-				"discontinuing uevent processing due to nonrecoverable error",
-				dispatchErr,
-			)
-			return
-		}
-
-		if _, ok := dispatchErr.(uevent.NeedsColdboot); ok {
-			// coldboot loop rejected by handler
-			coldboot = false
-		}
-
-		goto retry
-	}
-}

cmd/earlyinit/uevent_test.go

@@ -1,35 +0,0 @@
-package main
-
-import (
-	"testing"
-	"testing/synctest"
-	"time"
-)
-
-func TestRejectColdboot(t *testing.T) {
-	t.Parallel()
-
-	synctest.Test(t, func(t *testing.T) {
-		nextColdboot := newRejectColdboot()
-		want := func(want bool) {
-			if got := nextColdboot(); got != want {
-				t.Fatalf("nextColdboot: %v, want %v", got, want)
-			}
-		}
-
-		synctest.Wait()
-		want(true)
-		time.Sleep(time.Hour)
-		synctest.Wait()
-		want(true)
-		want(true)
-		time.Sleep(5 * time.Minute)
-		synctest.Wait()
-		want(true)
-		want(false)
-		time.Sleep(time.Hour)
-		synctest.Wait()
-		want(false)
-		want(false)
-	})
-}

cmd/hakurei/command_test.go

@@ -19,9 +19,10 @@ func TestHelp(t *testing.T) {
 		want string
 	}{
 		{
-			"main", []string{}, `usage: hakurei [-h | --help] [-v] [--insecure] [--json] <command> [<args>]
+			"main", []string{}, `
+Usage:	hakurei [-h | --help] [-v] [--insecure] [--json] COMMAND [OPTIONS]
 
-commands:
+Commands:
     run         Load and start container from configuration file
     exec        Configure and start a permissive container
     show        Show live or local instance configuration
@@ -34,14 +35,10 @@ commands:
 `,
 		},
 		{
-			"exec", []string{"exec", "-h"}, `usage: hakurei exec [-h | --help] [--dbus-config <value>]
-                    [--dbus-system <value>] [--mpris] [--dbus-log]
-                    [--id <value>] [-a <int>] [-g <value>] [-d <value>]
-                    [-u <value>] [--policy <value>] [--priority <int>]
-                    [--private-runtime] [--private-tmpdir] [--wayland] [-X]
-                    [--dbus] [--pipewire] [--pulse] <command> [<args>]
+			"exec", []string{"exec", "-h"}, `
+Usage:	hakurei exec [-h | --help] [--dbus-config <value>] [--dbus-system <value>] [--mpris] [--dbus-log] [--id <value>] [-a <int>] [-g <value>] [-d <value>] [-u <value>] [--policy <value>] [--priority <int>] [--private-runtime] [--private-tmpdir] [--wayland] [-X] [--dbus] [--pipewire] [--pulse] COMMAND [OPTIONS]
 
-flags:
+Flags:
   -X	Enable direct connection to X11
   -a int
     	Application identity

cmd/hakurei/json.go

@@ -7,8 +7,7 @@ import (
 	"strconv"
 )
 
-// decodeJSON decodes json from r and stores it in v. A non-nil error results in
-// a call to fatal.
+// decodeJSON decodes json from r and stores it in v. A non-nil error results in a call to fatal.
 func decodeJSON(fatal func(v ...any), op string, r io.Reader, v any) {
 	err := json.NewDecoder(r).Decode(v)
 	if err == nil {
@@ -48,14 +47,14 @@ func encodeJSON(fatal func(v ...any), output io.Writer, short bool, v any) {
 	}
 
 	if err := encoder.Encode(v); err != nil {
-		if e, ok := errors.AsType[*json.MarshalerError](err); ok && e != nil {
+		var marshalerError *json.MarshalerError
+		if errors.As(err, &marshalerError) && marshalerError != nil {
 			// this likely indicates an implementation error in hst
-			fatal("cannot encode json for " + e.Type.String() + ": " + e.Err.Error())
+			fatal("cannot encode json for " + marshalerError.Type.String() + ": " + marshalerError.Err.Error())
 			return
 		}
 
-		// UnsupportedTypeError, UnsupportedValueError: incorrect usage, does
-		// not need to be handled
+		// UnsupportedTypeError, UnsupportedValueError: incorrect usage, does not need to be handled
 		fatal("cannot write json: " + err.Error())
 	}
 }

cmd/hakurei/print_test.go

@@ -64,7 +64,7 @@ func TestPrintShowInstance(t *testing.T) {
  Identity:       9 (org.chromium.Chromium)
  Enablements:    wayland, dbus, pipewire
  Groups:         video, dialout, plugdev
- Flags:          multiarch, compat, devel, userns, net, abstract, tty, mapuid, noplace, device, cover_run, runtime, tmpdir
+ Flags:          multiarch, compat, devel, userns, net, abstract, tty, mapuid, device, runtime, tmpdir
  Home:           /data/data/org.chromium.Chromium
  Hostname:       localhost
  Path:           /run/current-system/sw/bin/chromium
@@ -161,7 +161,7 @@ App
  Identity:       9 (org.chromium.Chromium)
  Enablements:    wayland, dbus, pipewire
  Groups:         video, dialout, plugdev
- Flags:          multiarch, compat, devel, userns, net, abstract, tty, mapuid, noplace, device, cover_run, runtime, tmpdir
+ Flags:          multiarch, compat, devel, userns, net, abstract, tty, mapuid, device, runtime, tmpdir
  Home:           /data/data/org.chromium.Chromium
  Hostname:       localhost
  Path:           /run/current-system/sw/bin/chromium
@@ -354,9 +354,7 @@ App
     "tty": true,
     "multiarch": true,
     "map_real_uid": true,
-    "noplace": true,
     "device": true,
-    "cover_run": true,
     "share_runtime": true,
     "share_tmpdir": true
   },
@@ -507,9 +505,7 @@ App
     "tty": true,
     "multiarch": true,
     "map_real_uid": true,
-    "noplace": true,
     "device": true,
-    "cover_run": true,
     "share_runtime": true,
     "share_tmpdir": true
   }
@@ -707,9 +703,7 @@ func TestPrintPs(t *testing.T) {
       "tty": true,
       "multiarch": true,
       "map_real_uid": true,
-      "noplace": true,
       "device": true,
-      "cover_run": true,
       "share_runtime": true,
       "share_tmpdir": true
     },

cmd/hsu/main.go

@@ -21,6 +21,15 @@
 // following paragraphs are considered an internal detail and not covered by the
 // compatibility promise.
 //
+// After checking credentials, hsu checks via /proc/ the absolute pathname of
+// its parent process, and fails if it does not match the hakurei pathname set
+// at link time. This is not a security feature: the priv-side is considered
+// trusted, and this feature makes no attempt to address the racy nature of
+// querying /proc/, or debuggers attached to the parent process. Instead, this
+// aims to discourage misuse and reduce confusion if the user accidentally
+// stumbles upon this program. It also prevents accidental use of the incorrect
+// installation of hsu in some environments.
+//
 // Since target container environment variables are set up in shim via the
 // [container] infrastructure, the environment is used for parameters from the
 // parent process.
@@ -53,6 +62,7 @@ import (
 	"runtime"
 	"slices"
 	"strconv"
+	"strings"
 	"syscall"
 )
 
@@ -97,6 +107,18 @@ func main() {
 		return
 	}
 
+	var toolPath string
+	pexe := filepath.Join("/proc", strconv.Itoa(os.Getppid()), "exe")
+	if p, err := os.Readlink(pexe); err != nil {
+		log.Fatalf("cannot read parent executable path: %v", err)
+	} else if strings.HasSuffix(p, " (deleted)") {
+		log.Fatal("hakurei executable has been deleted")
+	} else if p != hakureiPath {
+		log.Fatal("this program must be started by hakurei")
+	} else {
+		toolPath = p
+	}
+
 	// refuse to run if hsurc is not protected correctly
 	if s, err := os.Stat(hsuConfPath); err != nil {
 		log.Fatal(err)
@@ -183,7 +205,7 @@ func main() {
 		log.Fatalf("cannot set no_new_privs flag: %s", errno.Error())
 	}
 
-	if err := syscall.Exec(hakureiPath, []string{
+	if err := syscall.Exec(toolPath, []string{
 		"hakurei",
 		"shim",
 	}, []string{

cmd/hsu/package.nix

@@ -8,7 +8,7 @@ buildGoModule {
   pname = "${hakurei.pname}-hsu";
   inherit (hakurei) version;
 
-  src = ../cmd/hsu;
+  src = ./.;
   inherit (hakurei) vendorHash;
   env.CGO_ENABLED = 0;
 

cmd/mbf/cache.go

@@ -2,15 +2,13 @@ package main
 
 import (
 	"context"
-	"net/http"
 	"os"
 	"path/filepath"
-	"strconv"
 	"testing"
 
 	"hakurei.app/check"
+	"hakurei.app/container"
 	"hakurei.app/internal/pkg"
-	"hakurei.app/internal/rosa"
 	"hakurei.app/message"
 )
 
@@ -22,29 +20,17 @@ type cache struct {
 	// Should generally not be used directly.
 	c *pkg.Cache
 
-	attr pkg.CacheAttr
+	cures, jobs int
 	// Primarily to work around missing landlock LSM.
 	hostAbstract bool
 	// Set SCHED_IDLE.
 	idle bool
 	// Unset [pkg.CSuppressInit].
 	verboseInit bool
-	// Whether to enable output colours.
-	color bool
-	// Unset [pkg.CExternShallow].
-	deep bool
 	// Loaded artifact of [rosa.QEMU].
 	qemu pkg.Artifact
 
-	base, mirror string
-}
-
-// writeTitle sets title of the terminal connected to [message.Msg].
-func writeTitle(msg message.Msg, s string) {
-	msg.Suspend()
-	w := msg.GetLogger().Writer()
-	_, _ = w.Write([]byte("\x1b]0;" + s + "\a"))
-	msg.Resume()
+	base string
 }
 
 // open opens the underlying [pkg.Cache].
@@ -53,35 +39,22 @@ func (cache *cache) open() (err error) {
 		return os.ErrInvalid
 	}
 
-	var hostname string
-	if hostname, err = os.Hostname(); err != nil {
-		return
-	}
-
 	var base *check.Absolute
 	if cache.base, err = filepath.Abs(cache.base); err != nil {
 		return
 	} else if base, err = check.NewAbs(cache.base); err != nil {
 		return
 	}
-	var notify chan bool
 
+	var flags int
 	if cache.idle {
-		cache.attr.Flags |= pkg.CSchedIdle
+		flags |= pkg.CSchedIdle
 	}
 	if cache.hostAbstract {
-		cache.attr.Flags |= pkg.CHostAbstract
+		flags |= pkg.CHostAbstract
 	}
 	if !cache.verboseInit {
-		cache.attr.Flags |= pkg.CSuppressInit
-	}
-	if !cache.deep {
-		cache.attr.Flags |= pkg.CExternShallow
-	}
-	if cache.color {
-		cache.attr.Flags |= pkg.CColourOutput
-		notify = make(chan bool, 1<<12)
-		cache.attr.Notify = notify
+		flags |= pkg.CSuppressInit
 	}
 
 	done := make(chan struct{})
@@ -103,56 +76,16 @@ func (cache *cache) open() (err error) {
 	cache.c, err = pkg.Open(
 		cache.ctx,
 		cache.msg,
+		flags,
+		cache.cures,
+		cache.jobs,
 		base,
-		&cache.attr,
 	)
 	if err != nil {
 		return
 	}
 	done <- struct{}{}
 
-	if cache.mirror != "" {
-		var pub []byte
-		pub, err = os.ReadFile(base.Append("ed25519.pub").String())
-		if err != nil {
-			cache.c.Close()
-			return
-		}
-		var r rosa.Remote
-		if r, err = rosa.NewRemote(http.DefaultClient, cache.mirror, pub); err != nil {
-			cache.c.Close()
-			return err
-		}
-		cache.c.SetExternal(r)
-	}
-
-	if cache.attr.Notify != nil {
-		cache.msg.Suspend()
-		_, _ = cache.msg.GetLogger().Writer().Write([]byte("\x1b[22;0t"))
-		cache.msg.Resume()
-
-		prefix := hostname + ": mbf "
-		go func() {
-			var n, nc uint64
-			for enter := range notify {
-				if enter {
-					nc++
-				} else {
-					nc--
-					n++
-				}
-
-				if nc == 0 {
-					writeTitle(cache.msg, prefix[:len(prefix)-1])
-					continue
-				}
-				writeTitle(cache.msg, prefix+
-					"("+strconv.FormatUint(nc, 10)+
-					" running, "+strconv.FormatUint(n, 10)+" complete)")
-			}
-		}()
-	}
-
 	if cache.qemu != nil {
 		var pathname *check.Absolute
 		pathname, _, err = cache.c.Cure(cache.qemu)
@@ -161,9 +94,24 @@ func (cache *cache) open() (err error) {
 			return
 		}
 
-		for arch, entry := range rosa.Arches(pathname) {
-			pkg.RegisterArch(arch, entry)
-		}
+		pkg.RegisterArch("riscv64", container.BinfmtEntry{
+			Offset: 0,
+			Magic:  "\x7fELF\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\xf3\x00",
+			Mask:   "\xff\xff\xff\xff\xff\xff\xff\x00\xff\xff\xff\xff\xff\xff\xff\xff\xfe\xff\xff\xff",
+			Interpreter: pathname.Append(
+				"system/bin",
+				"qemu-riscv64",
+			),
+		})
+		pkg.RegisterArch("arm64", container.BinfmtEntry{
+			Offset: 0,
+			Magic:  "\x7fELF\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\xb7\x00",
+			Mask:   "\xff\xff\xff\xff\xff\xff\xff\xfc\xff\xff\xff\xff\xff\xff\xff\xff\xfe\xff\xff\xff",
+			Interpreter: pathname.Append(
+				"system/bin",
+				"qemu-aarch64",
+			),
+		})
 	}
 
 	return
@@ -173,11 +121,6 @@ func (cache *cache) open() (err error) {
 func (cache *cache) Close() {
 	if cache.c != nil {
 		cache.c.Close()
-		if cache.attr.Notify != nil {
-			cache.msg.Suspend()
-			_, _ = cache.msg.GetLogger().Writer().Write([]byte("\x1b[23;0t"))
-			cache.msg.Resume()
-		}
 	}
 }
 

cmd/mbf/daemon_test.go

@@ -28,8 +28,8 @@ func TestNoReply(t *testing.T) {
 	c, err := pkg.Open(
 		t.Context(),
 		message.New(log.New(os.Stderr, "cir: ", 0)),
+		0, 0, 0,
 		check.MustAbs(t.TempDir()),
-		nil,
 	)
 	if err != nil {
 		t.Fatalf("Open: error = %v", err)
@@ -63,7 +63,7 @@ func TestNoReply(t *testing.T) {
 	}
 
 	<-done
-	wantIdent := pkg.MustDecode("bpVsJ69hdKPBntMh_u777g7-quFNVmMlBJQOlM_thiQa9JnOFLAbe5OlR4zNjZ32")
+	wantIdent := pkg.MustDecode("fiZf-ZY_Yq6qxJNrHbMiIPYCsGkUiKCRsZrcSELXTqZWtCnESlHmzV5ThhWWGGYG")
 	if gotIdent := c.Ident(a).Value(); gotIdent != wantIdent {
 		t.Errorf(
 			"cureFromIR: %s, want %s",
@@ -124,7 +124,7 @@ func TestDaemon(t *testing.T) {
 	cancel()
 	<-done
 
-	const want = "bpVsJ69hdKPBntMh_u777g7-quFNVmMlBJQOlM_thiQa9JnOFLAbe5OlR4zNjZ32"
+	const want = "fiZf-ZY_Yq6qxJNrHbMiIPYCsGkUiKCRsZrcSELXTqZWtCnESlHmzV5ThhWWGGYG"
 	if got := filepath.Base(p.String()); got != want {
 		t.Errorf("cureRemote: %s, want %s", got, want)
 	}
@@ -132,8 +132,8 @@ func TestDaemon(t *testing.T) {
 	wantLog := []string{
 		"",
 		"daemon: aborting all pending cures",
-		"daemon: attempting to cancel invalid artifact 58Vy_5beLZCvZX__KzRKyIE6vATleaZP1ZBxbqoWnekz9aZ1zkxNgcIUFI5V1_Jf",
-		"daemon: fulfilled artifact " + want,
+		"daemon: attempting to cancel invalid artifact kQm9fmnCmXST1-MMmxzcau2oKZCXXrlZydo4PkeV5hO_2PKfeC8t98hrbV_ZZx_j",
+		"daemon: fulfilled artifact fiZf-ZY_Yq6qxJNrHbMiIPYCsGkUiKCRsZrcSELXTqZWtCnESlHmzV5ThhWWGGYG",
 	}
 	gotLog := strings.Split(buf.String(), "\n")
 	slices.Sort(gotLog)

cmd/mbf/info.go

@@ -21,10 +21,7 @@ func commandInfo(
 	r *rosa.Report,
 ) (err error) {
 	if len(args) == 0 {
-		for _, h := range rosa.Native().CollectAll() {
-			fmt.Println(h)
-		}
-		return nil
+		return errors.New("info requires at least 1 argument")
 	}
 
 	// recovered by HandleAccess
@@ -42,13 +39,14 @@ func commandInfo(
 	t := rosa.Native().Std()
 	for i, name := range args {
 		handle := rosa.ArtifactH(unique.Make(name))
-		if meta, a := t.Load(handle); meta == nil {
+		if meta := rosa.Native().Get(handle); meta == nil {
 			return fmt.Errorf("unknown artifact %q", name)
 		} else {
 			var suffix string
 
-			if meta.Version != rosa.Unversioned {
-				suffix += "-" + meta.Version
+			a, version := t.MustLoad(handle)
+			if version != rosa.Unversioned {
+				suffix += "-" + version
 			}
 			mustPrintln("name        : " + name + suffix)
 
@@ -60,10 +58,9 @@ func commandInfo(
 			if len(meta.Dependencies) > 0 {
 				mustPrint("depends on  :")
 				for _, d := range meta.Dependencies {
-					_meta, _ := rosa.Native().Std().MustLoad(d)
-					s := _meta.Name
-					if _meta.Version != rosa.Unversioned {
-						s += "-" + _meta.Version
+					s := rosa.Native().MustGet(d).Name
+					if _, _version := t.Load(d); _version != rosa.Unversioned {
+						s += "-" + _version
 					}
 					mustPrint(" " + s)
 				}

cmd/mbf/info_test.go

@@ -22,12 +22,12 @@ func TestInfo(t *testing.T) {
 	t.Parallel()
 
 	_t := rosa.Native().Std()
-	qemuMeta, _ := _t.Load(rosa.H("qemu"))
-	glibMeta, _ := _t.Load(rosa.H("glib"))
-	zlibMeta, zlib := _t.Load(rosa.H("zlib"))
-	zstdMeta, _ := _t.Load(rosa.H("zstd"))
-	hakureiMeta, _ := _t.Load(rosa.H("hakurei"))
-	hakureiDistMeta, _ := _t.Load(rosa.H("hakurei-dist"))
+	_, qemuVersion := _t.Load(rosa.QEMU)
+	_, glibVersion := _t.Load(rosa.GLib)
+	zlib, zlibVersion := _t.Load(rosa.Zlib)
+	_, zstdVersion := _t.Load(rosa.Zstd)
+	_, hakureiVersion := _t.Load(rosa.Hakurei)
+	_, hakureiDistVersion := _t.Load(rosa.HakureiDist)
 
 	testCases := []struct {
 		name    string
@@ -38,24 +38,24 @@ func TestInfo(t *testing.T) {
 		wantErr any
 	}{
 		{"qemu", []string{"qemu"}, nil, "", `
-name        : qemu-` + qemuMeta.Version + `
+name        : qemu-` + qemuVersion + `
 description : a generic and open source machine emulator and virtualizer
 website     : https://www.qemu.org
-depends on  : glib-` + glibMeta.Version + ` zstd-` + zstdMeta.Version + `
+depends on  : glib-` + glibVersion + ` zstd-` + zstdVersion + `
 `, nil},
 
 		{"multi", []string{"hakurei", "hakurei-dist"}, nil, "", `
-name        : hakurei-` + hakureiMeta.Version + `
+name        : hakurei-` + hakureiVersion + `
 description : low-level userspace tooling for Rosa OS
 website     : https://hakurei.app
 
-name        : hakurei-dist-` + hakureiDistMeta.Version + `
+name        : hakurei-dist-` + hakureiDistVersion + `
 description : low-level userspace tooling for Rosa OS (distribution tarball)
 website     : https://hakurei.app
 `, nil},
 
 		{"nonexistent", []string{"zlib", "\x00"}, nil, "", `
-name        : zlib-` + zlibMeta.Version + `
+name        : zlib-` + zlibVersion + `
 description : lossless data-compression library
 website     : https://zlib.net
 
@@ -65,12 +65,12 @@ website     : https://zlib.net
 			"zstd":    "internal/pkg (amd64) on satori\n",
 			"hakurei": "internal/pkg (amd64) on satori\n\n",
 		}, "", `
-name        : zlib-` + zlibMeta.Version + `
+name        : zlib-` + zlibVersion + `
 description : lossless data-compression library
 website     : https://zlib.net
 status      : not yet cured
 
-name        : zstd-` + zstdMeta.Version + `
+name        : zstd-` + zstdVersion + `
 description : a fast compression algorithm
 website     : https://facebook.github.io/zstd
 status      : internal/pkg (amd64) on satori
@@ -79,7 +79,7 @@ status      : internal/pkg (amd64) on satori
 		{"status cache perm", []string{"zlib"}, map[string]string{
 			"zlib": "\x00",
 		}, "", `
-name        : zlib-` + zlibMeta.Version + `
+name        : zlib-` + zlibVersion + `
 description : lossless data-compression library
 website     : https://zlib.net
 `, func(cm *cache) error {
@@ -91,7 +91,7 @@ website     : https://zlib.net
 		}},
 
 		{"status report", []string{"zlib"}, nil, strings.Repeat("\x00", len(pkg.Checksum{})+8), `
-name        : zlib-` + zlibMeta.Version + `
+name        : zlib-` + zlibVersion + `
 description : lossless data-compression library
 website     : https://zlib.net
 status      : not in report
@@ -140,7 +140,7 @@ status      : not in report
 
 			if tc.status != nil {
 				for name, status := range tc.status {
-					_, a := _t.Load(rosa.ArtifactH(unique.Make(name)))
+					a, _ := _t.Load(rosa.ArtifactH(unique.Make(name)))
 					if a == nil {
 						t.Fatalf("invalid name %q", name)
 					}

cmd/mbf/internal/pkgserver/api.go

@@ -30,7 +30,7 @@ var (
 // handleInfo writes constant system information.
 func handleInfo(w http.ResponseWriter, _ *http.Request) {
 	infoPayloadOnce.Do(func() {
-		infoPayload.Count = len(rosa.Native().Collect())
+		infoPayload.Count = int(rosa.Native().Count())
 		infoPayload.HakureiVersion = info.Version()
 	})
 	// TODO(mae): cache entire response if no additional fields are planned

cmd/mbf/internal/pkgserver/api_test.go

@@ -31,7 +31,7 @@ func TestAPIInfo(t *testing.T) {
 	checkPayload(t, resp, struct {
 		Count          int    `json:"count"`
 		HakureiVersion string `json:"hakurei_version"`
-	}{len(rosa.Native().Collect()), info.Version()})
+	}{rosa.Native().Count(), info.Version()})
 }
 
 func TestAPIGet(t *testing.T) {
@@ -92,12 +92,11 @@ func TestAPIGet(t *testing.T) {
 		)
 	})
 
-	count := len(rosa.Native().Collect())
 	t.Run("index", func(t *testing.T) {
 		t.Parallel()
 		checkValidate(
-			t, "limit=1&sort=0&index", 0, count-1,
-			"index must be an integer between 0 and "+strconv.Itoa(count-1),
+			t, "limit=1&sort=0&index", 0, rosa.Native().Count()-1,
+			"index must be an integer between 0 and "+strconv.Itoa(rosa.Native().Count()-1),
 		)
 	})
 

cmd/mbf/internal/pkgserver/index.go

@@ -33,10 +33,10 @@ type packageIndex struct {
 // metadata holds [rosa.Metadata] extended with additional information.
 type metadata struct {
 	handle rosa.ArtifactH
-	*rosa.Metadata
+	*rosa.Artifact
 
-	// Copied from [rosa.Metadata], [rosa.Unversioned] is equivalent to the zero
-	// value. Otherwise, the zero value is invalid.
+	// Populated via [rosa.Toolchain.Version], [rosa.Unversioned] is equivalent
+	// to the zero value. Otherwise, the zero value is invalid.
 	Version string `json:"version,omitempty"`
 	// Output data size, available if present in report.
 	Size int64 `json:"size,omitempty"`
@@ -61,12 +61,12 @@ func (index *packageIndex) populate(report *rosa.Report) (err error) {
 	index.names = make(map[string]*metadata)
 	ir := pkg.NewIR()
 	for i, handle := range handles {
-		meta, a := rosa.Native().Std().MustLoad(handle)
+		a, version := rosa.Native().Std().MustLoad(handle)
 		m := metadata{
 			handle: handle,
 
-			Metadata: meta,
-			Version:  meta.Version,
+			Artifact: rosa.Native().MustGet(handle),
+			Version:  version,
 		}
 		if m.Version == "" {
 			return errors.New("invalid version from " + m.Name)

cmd/mbf/internal/pkgserver/search.go

@@ -74,7 +74,7 @@ func (s *searchCache) clean() {
 }
 func indexsum(in [][]int) int {
 	sum := 0
-	for i := range in {
+	for i := 0; i < len(in); i++ {
 		sum += in[i][1] - in[i][0]
 	}
 	return sum

cmd/mbf/internal/pkgserver/ui/all_tests.ts

@@ -0,0 +1,2 @@
+// Import all test files to register their test suites.
+import "./index_test.js";

cmd/mbf/internal/pkgserver/ui/index_test.ts

@@ -0,0 +1,2 @@
+import { suite, test } from "./jstest/jstest.js";
+import "./index.js";

cmd/mbf/internal/pkgserver/ui/jstest/cli.ts

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+
+// Many editors have terminal emulators built in, so running tests with NodeJS
+// provides faster iteration, especially for those acclimated to test-driven
+// development.
+
+import "../all_tests.js";
+import { StreamReporter, GLOBAL_REGISTRAR } from "./jstest.js";
+
+// TypeScript doesn't like process and Deno as their type definitions aren't
+// installed, but doesn't seem to complain if they're accessed through
+// globalThis.
+const process: any = (globalThis as any).process;
+const Deno: any = (globalThis as any).Deno;
+
+function getArgs(): string[] {
+    if (process) {
+        const [runtime, program, ...args] = process.argv;
+        return args;
+    }
+    if (Deno) return Deno.args;
+    return [];
+}
+
+function exit(code?: number): never {
+    if (Deno) Deno.exit(code);
+    if (process) process.exit(code);
+    throw `exited with code ${code ?? 0}`;
+}
+
+const args = getArgs();
+let verbose = false;
+if (args.length > 1) {
+    console.error("Too many arguments");
+    exit(1);
+}
+if (args.length === 1) {
+    if (args[0] === "-v" || args[0] === "--verbose" || args[0] === "-verbose") {
+        verbose = true;
+    } else if (args[0] !== "--") {
+        console.error(`Unknown argument '${args[0]}'`);
+        exit(1);
+    }
+}
+
+let reporter = new StreamReporter({ writeln: console.log }, verbose);
+GLOBAL_REGISTRAR.run(reporter);
+exit(reporter.succeeded() ? 0 : 1);

cmd/mbf/internal/pkgserver/ui/jstest/failure-closed.svg

@@ -0,0 +1,13 @@
+<?xml version="1.0"?>
+<!-- See failure-open.svg for an explanation of the view box dimensions. -->
+<svg xmlns="http://www.w3.org/2000/svg" width="20" viewBox="-20,-20 160 130">
+    <!-- This triangle should match success-closed.svg, fill and stroke color notwithstanding. -->
+    <polygon points="0,0 100,50 0,100" fill="red" stroke="red" stroke-width="15" stroke-linejoin="round"/>
+    <!--
+     ! y-coordinates go before x-coordinates here to highlight the difference
+     ! (or, lack thereof) between these numbers and the ones in failure-open.svg;
+     ! try a textual diff. Make sure to keep the numbers in sync!
+     -->
+    <line y1="30" x1="10" y2="70" x2="50" stroke="white" stroke-width="16"/>
+    <line y1="30" x1="50" y2="70" x2="10" stroke="white" stroke-width="16"/>
+</svg>

cmd/mbf/internal/pkgserver/ui/jstest/failure-open.svg

@@ -0,0 +1,35 @@
+<?xml version="1.0"?>
+<!--
+ ! This view box is a bit weird: the strokes assume they're working in a view
+ ! box that spans from the (0,0) to (100,100), and indeed that is convenient
+ ! conceptualizing the strokes, but the stroke itself has a considerable width
+ ! that gets clipped by restrictive view box dimensions. Hence, the view is
+ ! shifted from (0,0)–(100,100) to (-20,-20)–(120,120), to make room for the
+ ! clipped stroke, while leaving behind an illusion of working in a view box
+ ! spanning from (0,0) to (100,100).
+ !
+ ! However, the resulting SVG is too close to the summary text, and CSS
+ ! properties to add padding do not seem to work with `content:` (likely because
+ ! they're anonymous replaced elements); thus, the width of the view is
+ ! increased considerably to provide padding in the SVG itself, while leaving
+ ! the strokes oblivious.
+ !
+ ! It gets worse: the summary text isn't vertically aligned with the icon! As
+ ! a flexbox cannot be used in a summary to align the marker with the text, the
+ ! simplest and most effective solution is to reduce the height of the view box
+ ! from 140 to 130, thereby removing some of the bottom padding present.
+ !
+ ! All six SVGs use the same view box (and indeed, they refer to this comment)
+ ! so that they all appear to be the same size and position relative to each
+ ! other on the DOM—indeed, the view box dimensions, alongside the width,
+ ! directly control their placement on the DOM.
+ !
+ ! TL;DR: CSS is janky, overflow is weird, and SVG is awesome!
+ -->
+<svg xmlns="http://www.w3.org/2000/svg" width="20" viewBox="-20,-20 160 130">
+    <!-- This triangle should match success-open.svg, fill and stroke color notwithstanding. -->
+    <polygon points="0,0 100,0 50,100" fill="red" stroke="red" stroke-width="15" stroke-linejoin="round"/>
+    <!-- See the comment in failure-closed.svg before modifying this. -->
+    <line x1="30" y1="10" x2="70" y2="50" stroke="white" stroke-width="16"/>
+    <line x1="30" y1="50" x2="70" y2="10" stroke="white" stroke-width="16"/>
+</svg>

cmd/mbf/internal/pkgserver/ui/jstest/go_test_entrypoint.ts

@@ -0,0 +1,3 @@
+import "../all_tests.js";
+import { GoTestReporter, GLOBAL_REGISTRAR } from "./jstest.js";
+GLOBAL_REGISTRAR.run(new GoTestReporter());

cmd/mbf/internal/pkgserver/ui/jstest/index.html

@@ -0,0 +1,39 @@
+<!doctype html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <link rel="stylesheet" href="./style.css">
+    <title>PkgServer Tests</title>
+</head>
+<body>
+<noscript>
+    I hate JavaScript as much as you, but this page runs tests written in
+    JavaScript to test the functionality of code written in JavaScript, so it
+    wouldn't make sense for it to work without JavaScript. <strong>Please turn
+    JavaScript on!</strong>
+</noscript>
+
+<h1>PkgServer Tests</h1>
+
+<main>
+<p id="counters">
+    <span id="success-counter">0</span> succeeded, <span id="failure-counter">0</span>
+    failed<span id="skip-counter-text" hidden>, <span id="skip-counter">0</span> skipped</span>.
+</p>
+
+<p hidden id="success-description">Successful test</p>
+<p hidden id="failure-description">Failed test</p>
+<p hidden id="skip-description">Partially or fully skipped test</p>
+
+<div id="root">
+</div>
+
+<script type="module">
+    import "../all_tests.js";
+    import { DOMReporter, GLOBAL_REGISTRAR } from "./jstest.js";
+    GLOBAL_REGISTRAR.run(new DOMReporter());
+</script>
+</main>
+</body>
+</html>

cmd/mbf/internal/pkgserver/ui/jstest/jstest.ts

@@ -0,0 +1,478 @@
+// =============================================================================
+// DSL
+
+type TestTree = TestGroup | Test;
+type TestGroup = { name: string; children: TestTree[] };
+type Test = { name: string; test: (t: TestController) => void };
+
+// A registrar provides a central location to register test suites.
+export class TestRegistrar {
+    // Note that, while this is equivalent to a new tree node sans a name, the
+    // lack of a name provides the illusion of multiple “top-level” suites,
+    // while still allowing reporters to pick their favorite name—say, “JS
+    // tests”—were they to need to label all suites together.
+    #suites: TestGroup[];
+
+    constructor() {
+        this.#suites = [];
+    }
+
+    suite(name: string, children: TestTree[]) {
+        checkDuplicates(name, children);
+        this.#suites.push({ name, children });
+    }
+
+    run(reporter: Reporter) {
+        reporter.register(this.#suites);
+        for (const suite of this.#suites) {
+            for (const c of suite.children) runTests(reporter, [suite.name], c);
+        }
+        reporter.finalize();
+    }
+}
+
+export let GLOBAL_REGISTRAR = new TestRegistrar();
+
+// Register a suite in the global registrar.
+export function suite(name: string, children: TestTree[]) {
+    GLOBAL_REGISTRAR.suite(name, children);
+}
+
+export function group(name: string, children: TestTree[]): TestTree {
+    checkDuplicates(name, children);
+    return { name, children };
+}
+export const context = group;
+export const describe = group;
+
+export function test(name: string, test: (t: TestController) => void): TestTree {
+    return { name, test };
+}
+
+// While this function could certainly refine the type to a map instead of
+// simply checking for duplicates and discarding that knowledge, these test
+// trees are primarily for flooding—that is, iteration—for which an array is
+// better suited.
+function checkDuplicates(parent: string, names: { name: string }[]) {
+    let seen = new Set<string>();
+    for (const { name } of names) {
+        if (seen.has(name)) {
+            throw new RangeError(`duplicate name '${name}' in '${parent}'`);
+        }
+        seen.add(name);
+    }
+}
+
+export type TestState = "success" | "failure" | "skip";
+
+class AbortSentinel {}
+
+export class TestController {
+    #state: TestState;
+    logs: string[];
+
+    constructor() {
+        this.#state = "success";
+        this.logs = [];
+    }
+
+    getState(): TestState {
+        return this.#state;
+    }
+
+    fail() {
+        this.#state = "failure";
+    }
+
+    failed(): boolean {
+        return this.#state === "failure";
+    }
+
+    failNow(): never {
+        this.fail();
+        throw new AbortSentinel();
+    }
+
+    log(message: string) {
+        this.logs.push(message);
+    }
+
+    error(message: string) {
+        this.log(message);
+        this.fail();
+    }
+
+    fatal(message: string): never {
+        this.log(message);
+        this.failNow();
+    }
+
+    skip(message?: string): never {
+        if (message != null) this.log(message);
+        if (this.#state !== "failure") this.#state = "skip";
+        throw new AbortSentinel();
+    }
+
+    skipped(): boolean {
+        return this.#state === "skip";
+    }
+}
+
+// =============================================================================
+// Execution
+
+export interface TestResult {
+    state: TestState;
+    logs: string[];
+}
+
+function runTests(reporter: Reporter, parents: string[], node: TestTree) {
+    const path = [...parents, node.name];
+    if ("children" in node) {
+        for (const c of node.children) runTests(reporter, path, c);
+        return;
+    }
+    let controller = new TestController();
+    try {
+        node.test(controller);
+    } catch (e) {
+        if (!(e instanceof AbortSentinel)) {
+            controller.error(extractExceptionString(e));
+        }
+    }
+    reporter.update(path, { state: controller.getState(), logs: controller.logs });
+}
+
+function extractExceptionString(e: any): string {
+    // String() instead of .toString() as null and undefined don't have
+    // properties.
+    const s = String(e);
+    if (!(e instanceof Error && e.stack)) return s;
+    // v8 (Chromium, NodeJS) includes the error message, while Firefox and
+    // WebKit do not.
+    if (e.stack.startsWith(s)) return e.stack;
+    return `${s}\n${e.stack}`;
+}
+
+// =============================================================================
+// Reporting
+
+export interface Reporter {
+    // A notable feature—or flaw, to some—of the DSL is that the tree of tests
+    // is statically known, which might greatly aid in implementing a reporter.
+    register(suites: TestGroup[]): void;
+    // While we could simply call a function with a tree representing all
+    // results, which would indeed greatly simplify implementation of reporters,
+    // simply registering a path and allowing the reporter to—either implicitly
+    // or explicitly—construct a tree themselves allows for results to be
+    // *incrementally reported*, instead of a great deal of silence until all
+    // tests finish.
+    update(path: string[], result: TestResult): void;
+    // With just update(), the reporter never knows when all tests have
+    // completed. The simplest possible use for this is to notify the user, but
+    // its intent is actually more tailored to the StreamReporter scenario:
+    // while destructively updated report rendering (as with a tree of DOM nodes
+    // which are mutated) always displays the results in a structured manner
+    // matching that of the tests, “rerendering” or otherwise destructively
+    // updating the rendered output might be infeasible in some paradigms, such
+    // as command-line applications—all existing implementations of such
+    // rendering both mess up the scrollback position and necessarily crop out
+    // some of the data at the bottom (since the top of the tree is forced to be
+    // at the top of the screen, as one cannot unscroll portably). Explicitly
+    // signaling to the reporter that no more results will be received permits
+    // it to simply display live test progress linearly, while building up
+    // a tree and displaying it once it's known the tree is complete.
+    finalize(): void;
+}
+
+// A reporter that diligently reports absolutely nothing. This is essentially
+// a way to “undo” the incremental reporting update() provides, getting back the
+// underlying result tree; this makes it extremely convenient in some cases like
+// testing ourself.
+export class NoOpReporter implements Reporter {
+    suites: TestGroup[];
+    results: ({ path: string[] } & TestResult)[];
+    finalized: boolean;
+
+    constructor() {
+        this.suites = [];
+        this.results = [];
+        this.finalized = false;
+    }
+
+    register(suites: TestGroup[]) {
+        this.suites = suites;
+    }
+
+    update(path: string[], result: TestResult) {
+        this.results.push({ path, ...result });
+    }
+
+    finalize() {
+        this.finalized = true;
+    }
+}
+
+export interface Stream {
+    writeln(s: string): void;
+}
+
+const SEP = " ❯ ";
+
+// A simple reporter that outputs to some stream; suitable for CLIs.
+export class StreamReporter implements Reporter {
+    stream: Stream;
+    verbose: boolean;
+    #successes: ({ path: string[] } & TestResult)[];
+    #failures: ({ path: string[] } & TestResult)[];
+    #skips: ({ path: string[] } & TestResult)[];
+
+    constructor(stream: Stream, verbose: boolean = false) {
+        this.stream = stream;
+        this.verbose = verbose;
+        this.#successes = [];
+        this.#failures = [];
+        this.#skips = [];
+    }
+
+    succeeded(): boolean {
+        return this.#successes.length > 0 && this.#failures.length === 0;
+    }
+
+    // We don't need the structure for reporting.
+    register(suites: TestGroup[]) {}
+
+    update(path: string[], result: TestResult) {
+        if (path.length === 0) throw new RangeError("path is empty");
+        const pathStr = path.join(SEP);
+        switch (result.state) {
+        case "success":
+            this.#successes.push({ path, ...result });
+            // NOTE: emojis are used instead of colored Unicode symbols as
+            // coloring isn't possible through all streams and detecting if
+            // colors should be used is very difficult¹. Furthermore, ensuring
+            // reasonable contrast is retained on every possible theme is
+            // difficult, with reverse video often being the only way (which
+            // also has questionable support across terminal emulators), and the
+            // Unicode characters might be too small to be immediately
+            // noticeable—consider ✓ and ⚠ and ✗. Emojis have an upper hand in
+            // that they're more common than obscure Unicode characters—which
+            // also means you're likely to have an emoji font but not a font for
+            // some weird symbols—and that they're double-width. Finally,
+            // Unicode characters are often very different across fonts; some
+            // fonts make ⚠ filled in, while others have just an outline for the
+            // triangle (which is much harder to comprehend), and the various
+            // crosses like all of x ⨯ × ✕ ✖ ✗ 🗙 🞨 🞩 🞪 🞫 🞬 🞭 🞮 look different
+            // across different fonts, which makes using them for some specific
+            // purpose difficult. Emojis don't have this problem because emoji
+            // vendors try to make them look similar to each other.
+            //
+            // ¹This necessitates checking if the stream is a TTY, checking if
+            //  $TERM is `dumb` when connected to a TTY, checking
+            //  https://no-color.org, https://bixense.com/clicolors, and
+            //  https://force-color.org, checking if setting the
+            //  ENABLE_VIRTUAL_TERMINAL_PROCESSING bit on the TTY works when on
+            //  on Windows, and doing something similar for Cygwin.
+            if (this.verbose) this.stream.writeln(`✅️ ${pathStr}`);
+            break;
+        case "failure":
+            this.#failures.push({ path, ...result });
+            this.stream.writeln(`⚠️ ${pathStr}`);
+            break;
+        case "skip":
+            this.#skips.push({ path, ...result });
+            this.stream.writeln(`⏭️ ${pathStr}`);
+            break;
+        }
+    }
+
+    finalize() {
+        if (this.verbose) this.#displaySection("successes", this.#successes, true);
+        this.#displaySection("failures", this.#failures);
+        this.#displaySection("skips", this.#skips);
+        this.stream.writeln("");
+        this.stream.writeln(
+            `${this.#successes.length} succeeded, ${this.#failures.length} failed` +
+                (this.#skips.length ? `, ${this.#skips.length} skipped` : ""),
+        );
+    }
+
+    #displaySection(name: string, data: ({ path: string[] } & TestResult)[], ignoreEmpty: boolean = false) {
+        if (!data.length) return;
+
+        // Transform [{ path: ["a", "b", "c"] }, { path: ["a", "b", "d"] }] into
+        // { "a ❯ b": ["c", "d"] }. NOTE: intermediate nodes are collapsed as
+        // excessive nesting is difficult to convey clearly in a text-only
+        // environment.
+        let pathMap = new Map<string, ({ name: string } & TestResult)[]>();
+        for (const t of data) {
+            if (t.path.length === 0) throw new RangeError("path is empty");
+            const key = t.path.slice(0, -1).join(SEP);
+            if (!pathMap.has(key)) pathMap.set(key, []);
+            pathMap.get(key)!.push({ name: t.path.at(-1)!, ...t });
+        }
+
+        this.stream.writeln("");
+        this.stream.writeln(name.toUpperCase());
+        this.stream.writeln("=".repeat(name.length));
+
+        for (let [path, tests] of pathMap) {
+            if (ignoreEmpty) tests = tests.filter((t) => t.logs.length);
+            if (tests.length === 0) continue;
+            if (tests.length === 1) {
+                this.#writeOutput(tests[0], path ? `${path}${SEP}` : "", false);
+            } else {
+                this.stream.writeln(path);
+                for (const t of tests) this.#writeOutput(t, "  - ", true);
+            }
+        }
+    }
+
+    #writeOutput(test: { name: string } & TestResult, prefix: string, nested: boolean) {
+        let output = "";
+        if (test.logs.length) {
+            // Individual logs might span multiple lines, so join them together
+            // then split it again.
+            const logStr = test.logs.join("\n");
+            const lines = logStr.split("\n");
+            if (lines.length <= 1) {
+                output = `: ${logStr}`;
+            } else {
+                const padding = nested ? "      " : "  ";
+                output = ":\n" + lines.map((line) => padding + line).join("\n");
+            }
+        }
+        this.stream.writeln(`${prefix}${test.name}${output}`);
+    }
+}
+
+function assertGetElementById(id: string): HTMLElement {
+    let elem = document.getElementById(id);
+    if (elem == null) throw new ReferenceError(`element with ID '${id}' missing from DOM`);
+    return elem;
+}
+
+// A reporter that directly translates a tree of results into a tree of
+// collapsible elements in the DOM.
+export class DOMReporter implements Reporter {
+    // It is very difficult to implement this using the statically known tree,
+    // because Map doesn't handle array keys properly (to store the path), and
+    // it's unknown of there's any way to implement it without writing one's own
+    // data types. Oh well; using the DOM as a data structure might seem hacky
+    // but it does have its benefits, apart from encouraging a tagless final.
+    register(suites: TestGroup[]) {}
+
+    update(path: string[], result: TestResult) {
+        if (path.length === 0) throw new RangeError("path is empty");
+        if (result.state === "skip") {
+            assertGetElementById("skip-counter-text").hidden = false;
+        }
+        const counter = assertGetElementById(`${result.state}-counter`);
+        counter.innerText = (Number(counter.innerText) + 1).toString();
+
+        let parent = assertGetElementById("root");
+        for (const node of path) {
+            let child: HTMLDetailsElement | null = null;
+            let summary: HTMLElement | null = null;
+            let d: Element;
+            outer: for (d of parent.children) {
+                if (!(d instanceof HTMLDetailsElement)) continue;
+                for (const s of d.children) {
+                    if (!(s instanceof HTMLElement)) continue;
+                    if (!(s.tagName === "SUMMARY" && s.innerText === node)) continue;
+                    child = d;
+                    summary = s;
+                    break outer;
+                }
+            }
+            if (!child) {
+                child = document.createElement("details");
+                child.className = "test-node";
+                child.ariaRoleDescription = "test";
+                summary = document.createElement("summary");
+                summary.appendChild(document.createTextNode(node));
+                summary.ariaRoleDescription = "test name";
+                child.appendChild(summary);
+                parent.appendChild(child);
+            }
+            if (!summary) throw new Error("unreachable as assigned above");
+
+            switch (result.state) {
+            case "failure":
+                // Only expand failures, to minimize successes and skips.
+                child.open = true;
+                child.classList.add("failure");
+                child.classList.remove("skip");
+                child.classList.remove("success");
+                // The summary marker does not appear in the AOM, so setting its
+                // alt text is fruitless; label the summary itself instead.
+                summary.setAttribute("aria-labelledby", "failure-description");
+                break;
+            case "skip":
+                if (child.classList.contains("failure")) break;
+                child.classList.add("skip");
+                child.classList.remove("success");
+                summary.setAttribute("aria-labelledby", "skip-description");
+                break;
+            case "success":
+                if (child.classList.contains("failure") || child.classList.contains("skip")) break;
+                child.classList.add("success");
+                summary.setAttribute("aria-labelledby", "success-description");
+                break;
+            }
+
+            parent = child;
+        }
+
+        const p = document.createElement("p");
+        p.classList.add("test-desc");
+        if (result.logs.length) {
+            const pre = document.createElement("pre");
+            pre.appendChild(document.createTextNode(result.logs.join("\n")));
+            p.appendChild(pre);
+        } else {
+            p.classList.add("italic");
+            p.appendChild(document.createTextNode("No output."));
+        }
+        parent.appendChild(p);
+    }
+
+    finalize() {}
+}
+
+interface GoNode {
+    name: string;
+    subtests?: GoNode[];
+}
+
+// Used to display results via `go test`, via some glue code from the Go side.
+// TODO(ophestra): said glue code has to be written.
+export class GoTestReporter implements Reporter {
+    register(suites: TestGroup[]) {
+        console.log(JSON.stringify(suites.map(GoTestReporter.serialize)));
+    }
+
+    // Convert a test tree into the one expected by the Go code.
+    static serialize(node: TestTree): GoNode {
+        return {
+            name: node.name,
+            subtests: "children" in node ? node.children.map(GoTestReporter.serialize) : undefined,
+        };
+    }
+
+    update(path: string[], result: TestResult) {
+        let state: number;
+        switch (result.state) {
+            case "success": state = 0; break;
+            case "failure": state = 1; break;
+            case "skip": state = 2; break;
+        }
+        console.log(JSON.stringify({ path, state, logs: result.logs }));
+    }
+
+    // Unnecessary but convenient on the Go side, so that it doesn't have to
+    // infer this via process exit.
+    finalize() {
+        console.log("null");
+    }
+}

cmd/mbf/internal/pkgserver/ui/jstest/skip-closed.svg

@@ -0,0 +1,21 @@
+<?xml version="1.0"?>
+<!-- See failure-open.svg for an explanation of the view box dimensions. -->
+<svg xmlns="http://www.w3.org/2000/svg" width="20" viewBox="-20,-20 160 130">
+    <!-- This triangle should match success-closed.svg, fill and stroke color notwithstanding. -->
+    <polygon points="0,0 100,50 0,100" fill="blue" stroke="blue" stroke-width="15" stroke-linejoin="round"/>
+    <!--
+     ! This path is extremely similar to the one in skip-open.svg; before
+     ! making minor modifications, diff the two to understand how they should
+     ! remain in sync.
+     -->
+    <path
+        d="M 50,50
+           A 23,23 270,1,1 30,30
+           l -10,20
+           m 10,-20
+           l -20,-10"
+        fill="none"
+        stroke="white"
+        stroke-width="12"
+        stroke-linejoin="round"/>
+</svg>

cmd/mbf/internal/pkgserver/ui/jstest/skip-open.svg

@@ -0,0 +1,21 @@
+<?xml version="1.0"?>
+<!-- See failure-open.svg for an explanation of the view box dimensions. -->
+<svg xmlns="http://www.w3.org/2000/svg" width="20" viewBox="-20,-20 160 130">
+    <!-- This triangle should match success-open.svg, fill and stroke color notwithstanding. -->
+    <polygon points="0,0 100,0 50,100" fill="blue" stroke="blue" stroke-width="15" stroke-linejoin="round"/>
+    <!--
+     ! This path is extremely similar to the one in skip-closed.svg; before
+     ! making minor modifications, diff the two to understand how they should
+     ! remain in sync.
+     -->
+    <path
+        d="M 50,50
+           A 23,23 270,1,1 70,30
+           l 10,-20
+           m -10,20
+           l -20,-10"
+        fill="none"
+        stroke="white"
+        stroke-width="12"
+        stroke-linejoin="round"/>
+</svg>

cmd/mbf/internal/pkgserver/ui/jstest/style.css

@@ -0,0 +1,87 @@
+/*
+ * When updating the theme colors, also update them in success-closed.svg and
+ * success-open.svg!
+ */
+
+:root {
+  --bg: #d3d3d3;
+  --fg: black;
+}
+
+@media (prefers-color-scheme: dark) {
+  :root {
+    --bg: #2c2c2c;
+    --fg: ghostwhite;
+  }
+}
+
+html {
+  background-color: var(--bg);
+  color: var(--fg);
+}
+
+h1, p, summary, noscript {
+  font-family: sans-serif;
+}
+
+noscript {
+  font-size: 16pt;
+}
+
+.root {
+  margin: 1rem 0;
+}
+
+details.test-node {
+  margin-left: 1rem;
+  padding: 0.2rem 0.5rem;
+  border-left: 2px dashed var(--fg);
+  > summary {
+    cursor: pointer;
+  }
+  &.success > summary::marker {
+    /*
+     * WebKit only supports color and font-size properties in ::marker [1], and
+     * its ::-webkit-details-marker only supports hiding the marker entirely
+     * [2], contrary to mdn's example [3]; thus, set a color as a fallback:
+     * while it may not be accessible for colorblind individuals, it's better
+     * than no indication of a test's state for anyone, as that there's no other
+     * way to include an indication in the marker on WebKit.
+     *
+     * [1]: https://developer.mozilla.org/en-US/docs/Web/CSS/Reference/Selectors/::marker#browser_compatibility
+     * [2]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/summary#default_style
+     * [3]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/summary#changing_the_summarys_icon
+     */
+    color: var(--fg);
+    content: url("./success-closed.svg") / "success";
+  }
+  &.success[open] > summary::marker {
+    content: url("./success-open.svg") / "success";
+  }
+  &.failure > summary::marker {
+    color: red;
+    content: url("./failure-closed.svg") / "failure";
+  }
+  &.failure[open] > summary::marker {
+    content: url("./failure-open.svg") / "failure";
+  }
+  &.skip > summary::marker {
+    color: blue;
+    content: url("./skip-closed.svg") / "skip";
+  }
+  &.skip[open] > summary::marker {
+    content: url("./skip-open.svg") / "skip";
+  }
+}
+
+p.test-desc {
+  margin: 0 0 0 1rem;
+  padding: 2px 0;
+  > pre {
+    margin: 0;
+  }
+}
+
+.italic {
+  font-style: italic;
+}

cmd/mbf/internal/pkgserver/ui/jstest/success-closed.svg

@@ -0,0 +1,16 @@
+<?xml version="1.0"?>
+<!-- See failure-open.svg for an explanation of the view box dimensions. -->
+<svg xmlns="http://www.w3.org/2000/svg" width="20" viewBox="-20,-20 160 130">
+    <style>
+    .adaptive-stroke {
+        stroke: black;
+    }
+    @media (prefers-color-scheme: dark) {
+        .adaptive-stroke {
+            stroke: ghostwhite;
+        }
+    }
+    </style>
+    <!-- When updating this triangle, also update the other five SVGs. -->
+    <polygon points="0,0 100,50 0,100" fill="none" class="adaptive-stroke" stroke-width="15" stroke-linejoin="round"/>
+</svg>

cmd/mbf/internal/pkgserver/ui/jstest/success-open.svg

@@ -0,0 +1,16 @@
+<?xml version="1.0"?>
+<!-- See failure-open.svg for an explanation of the view box dimensions. -->
+<svg xmlns="http://www.w3.org/2000/svg" width="20" viewBox="-20,-20 160 130">
+    <style>
+    .adaptive-stroke {
+        stroke: black;
+    }
+    @media (prefers-color-scheme: dark) {
+        .adaptive-stroke {
+            stroke: ghostwhite;
+        }
+    }
+    </style>
+    <!-- When updating this triangle, also update the other five SVGs. -->
+    <polygon points="0,0 100,0 50,100" fill="none" class="adaptive-stroke" stroke-width="15" stroke-linejoin="round"/>
+</svg>

cmd/mbf/internal/pkgserver/ui/test_ui.go

@@ -0,0 +1,13 @@
+//go:build frontend && frontend_test
+
+package ui
+
+import "embed"
+
+//go:generate tsc -p tsconfig.test.json
+//go:generate cp index.html style.css favicon.ico static
+//go:generate cp jstest/index.html jstest/style.css static/jstest
+//go:generate sh -c "cp jstest/*.svg static/jstest"
+//go:embed static
+var _static embed.FS
+var static = staticFS(_static)

cmd/mbf/internal/pkgserver/ui/tsconfig.json

@@ -1,8 +1,11 @@
+// This file defines the common options for all TypeScript here. This shouldn't
+// be directly used as the project file in builds; see tsconfig.*.json instead,
+// which inherit from this file and essentially define specific build targets.
 {
   "compilerOptions": {
     "target": "ES2024",
     "strict": true,
     "alwaysStrict": true,
-    "outDir": "static"
-  }
-}
+    "outDir": "static",
+  },
+}

cmd/mbf/internal/pkgserver/ui/tsconfig.test.json

@@ -0,0 +1,5 @@
+// Project file for building pkgserver alongside its tests. test_ui.go uses this
+// as its project file.
+{
+  "extends": "./tsconfig.json",
+}

cmd/mbf/internal/pkgserver/ui/tsconfig.ui.json

@@ -0,0 +1,6 @@
+// Project file for building just the pkgserver UI, with none of the testing
+// stuff attached. ui_full.go uses this as its project file.
+{
+  "extends": "./tsconfig.json",
+  "exclude": ["jstest", "all_tests.ts", "*_test.ts"],
+}

cmd/mbf/internal/pkgserver/ui/ui.go

@@ -1,7 +1,19 @@
 // Package ui holds the static web UI.
 package ui
 
-import "net/http"
+import (
+	"io/fs"
+	"net/http"
+)
+
+// staticFS is an internal helper to wrap around go:embed's filesystem.
+func staticFS(static fs.FS) fs.FS {
+	if f, err := fs.Sub(static, "static"); err != nil {
+		panic(err)
+	} else {
+		return f
+	}
+}
 
 // Register arranges for mux to serve the embedded frontend.
 func Register(mux *http.ServeMux) {

cmd/mbf/internal/pkgserver/ui/ui_full.go

@@ -1,21 +1,11 @@
-//go:build frontend
+//go:build frontend && !frontend_test
 
 package ui
 
-import (
-	"embed"
-	"io/fs"
-)
+import "embed"
 
-//go:generate tsc
+//go:generate tsc -p tsconfig.ui.json
 //go:generate cp index.html style.css static
 //go:embed static
 var _static embed.FS
-
-var static = func() fs.FS {
-	if f, err := fs.Sub(_static, "static"); err != nil {
-		panic(err)
-	} else {
-		return f
-	}
-}()
+var static = staticFS(_static)

cmd/mbf/main.go

@@ -14,7 +14,6 @@ package main
 
 import (
 	"context"
-	"crypto/ed25519"
 	"crypto/sha512"
 	"errors"
 	"fmt"
@@ -27,17 +26,17 @@ import (
 	"path/filepath"
 	"runtime"
 	"strconv"
-	"strings"
 	"sync"
 	"sync/atomic"
 	"syscall"
 	"time"
 	"unique"
-	"unsafe"
 
 	"hakurei.app/check"
 	"hakurei.app/command"
 	"hakurei.app/container"
+	"hakurei.app/container/seccomp"
+	"hakurei.app/container/std"
 	"hakurei.app/ext"
 	"hakurei.app/fhs"
 	"hakurei.app/internal/pkg"
@@ -48,19 +47,6 @@ import (
 	"hakurei.app/cmd/mbf/internal/pkgserver/ui"
 )
 
-// writeFileExcl is like [os.WriteFile], but sets [os.O_EXCL] instead.
-func writeFileExcl(name string, data []byte, perm os.FileMode) error {
-	f, err := os.OpenFile(name, os.O_WRONLY|os.O_CREATE|os.O_EXCL, perm)
-	if err != nil {
-		return err
-	}
-	_, err = f.Write(data)
-	if err1 := f.Close(); err1 != nil && err == nil {
-		err = err1
-	}
-	return err
-}
-
 func main() {
 	container.TryArgv0(nil)
 
@@ -72,31 +58,12 @@ func main() {
 		log.Fatal("this program must not run as root")
 	}
 
-	defer func() {
-		r := recover()
-		if r == nil {
-			return
-		}
-
-		switch r.(type) {
-		case rosa.LoadError, pkg.IRStringError:
-			log.Fatal(r)
-		default:
-			panic(r)
-		}
-	}()
-
 	ctx, stop := signal.NotifyContext(context.Background(),
 		syscall.SIGINT, syscall.SIGTERM, syscall.SIGHUP)
 	defer stop()
 
 	var cm cache
 	defer func() { cm.Close() }()
-	if cm.color = ext.Isatty(syscall.Stderr) &&
-		os.Getenv("NO_COLOR") == "" &&
-		os.Getenv("TERM") != "dumb"; cm.color {
-		log.SetPrefix("\x1b[2mmbf: \x1b[0m")
-	}
 
 	var (
 		flagQuiet bool
@@ -104,32 +71,18 @@ func main() {
 		flagArch  string
 		flagCheck bool
 		flagLTO   bool
-		flagPT    bool
-		flagDry   bool
-		flagPath  string
 
-		flagSourcePath    string
 		flagCrossOverride int
 
 		addr net.UnixAddr
 	)
 	c := command.New(os.Stderr, log.Printf, "mbf", func([]string) error {
-		if !rosa.Native().HasStageEarly() {
-			return pkg.UnsupportedArchError(runtime.GOARCH)
-		}
-
-		if flagPT {
-			log.Println("parsed in", rosa.ParseTime())
-		}
-
 		msg.SwapVerbose(!flagQuiet)
 		cm.ctx, cm.msg = ctx, msg
 		cm.base = os.ExpandEnv(cm.base)
 		if cm.base == "" {
 			cm.base = "cache"
 		}
-		cm.mirror = os.ExpandEnv(cm.mirror)
-		azaleaPath := os.ExpandEnv(flagPath)
 
 		addr.Net = "unix"
 		addr.Name = os.ExpandEnv(addr.Name)
@@ -147,7 +100,7 @@ func main() {
 		rosa.Native().DropCaches("", flags)
 		cross := flagArch != "" && flagArch != runtime.GOARCH
 		if flagQEMU || cross {
-			_, cm.qemu = rosa.Native().Std().MustLoad(rosa.H("qemu"))
+			cm.qemu, _ = rosa.Native().Std().Load(rosa.QEMU)
 		}
 
 		if cross {
@@ -156,28 +109,11 @@ func main() {
 			}
 
 			rosa.Native().DropCaches(flagArch, flags)
-			if !rosa.Native().HasStageEarly() {
+			if !rosa.HasStage0() {
 				return pkg.UnsupportedArchError(flagArch)
 			}
 		}
 
-		if flagSourcePath != "" {
-			if err := rosa.Native().SetSource(os.DirFS(flagSourcePath)); err != nil {
-				return err
-			}
-		}
-
-		if azaleaPath != "" {
-			var root *os.Root
-			if a, err := check.NewAbs(azaleaPath); err != nil {
-				return err
-			} else if root, err = os.OpenRoot(a.String()); err != nil {
-				return err
-			} else if err = rosa.Native().RegisterFS(root.FS()); err != nil {
-				return err
-			}
-		}
-
 		return nil
 	}).Flag(
 		&flagQuiet,
@@ -208,30 +144,17 @@ func main() {
 		"v", command.BoolFlag(false),
 		"Do not suppress verbose output from init",
 	).Flag(
-		&cm.attr.Cures,
+		&cm.cures,
 		"cures", command.IntFlag(0),
 		"Maximum number of dependencies to cure at any given time",
 	).Flag(
-		&cm.attr.Jobs,
+		&cm.jobs,
 		"jobs", command.IntFlag(0),
 		"Preferred number of jobs to run, when applicable",
-	).Flag(
-		&cm.attr.Load,
-		"load-average", command.IntFlag(0),
-		"Preferred load average number, when applicable",
 	).Flag(
 		&cm.base,
 		"d", command.StringFlag("$MBF_CACHE_DIR"),
 		"Directory to store cured artifacts",
-	).Flag(
-		&cm.mirror,
-		"r", command.StringFlag("$MBF_REMOTE"),
-		"URL of mirror service",
-	).Flag(
-		&cm.deep,
-		"deep", command.BoolFlag(false),
-		"Cure all inputs even when the required artifact is available "+
-			"via the mirror service",
 	).Flag(
 		&cm.idle,
 		"sched-idle", command.BoolFlag(false),
@@ -247,22 +170,6 @@ func main() {
 		&addr.Name,
 		"socket", command.StringFlag("$MBF_DAEMON_SOCKET"),
 		"Pathname of socket to bind to",
-	).Flag(
-		&flagPT,
-		"parse-time", command.BoolFlag(false),
-		"Print duration of the initial azalea parse",
-	).Flag(
-		&flagDry,
-		"dry", command.BoolFlag(false),
-		"Do not destroy cache entries",
-	).Flag(
-		&flagSourcePath,
-		"source", command.StringFlag(""),
-		"Override hakurei source tree",
-	).Flag(
-		&flagPath,
-		"p", command.StringFlag("$AZALEA_PATH"),
-		"Load additional azalea files",
 	)
 
 	c.NewCommand(
@@ -283,7 +190,7 @@ func main() {
 			if _, err := io.Copy(h, os.Stdin); err != nil {
 				return err
 			}
-			fmt.Println(pkg.Encode(pkg.Checksum(h.Sum(nil))))
+			log.Println(pkg.Encode(pkg.Checksum(h.Sum(nil))))
 			return nil
 		},
 	)
@@ -415,10 +322,7 @@ func main() {
 	)
 
 	{
-		var (
-			flagJobs    int
-			flagNoBlock bool
-		)
+		var flagJobs int
 		c.NewCommand("updates", command.UsageInternal, func([]string) error {
 			var (
 				errsMu sync.Mutex
@@ -432,16 +336,11 @@ func main() {
 			for range max(flagJobs, 1) {
 				wg.Go(func() {
 					for p := range w {
-						meta, _ := rosa.Native().Std().MustLoad(p)
+						meta := rosa.Native().MustGet(p)
 						if meta.ID == 0 {
 							continue
 						}
 
-						if !flagNoBlock && meta.Blocked != "" {
-							msg.Verbosef("%s is blocked: %s", meta.Name, meta.Blocked)
-							continue
-						}
-
 						v, err := meta.GetVersions(ctx)
 						if err != nil {
 							errsMu.Lock()
@@ -450,9 +349,13 @@ func main() {
 							continue
 						}
 
-						if latest := meta.GetLatest(v); meta.Version != latest {
+						_, version := rosa.Native().Std().Load(p)
+						if current, latest :=
+							version,
+							meta.GetLatest(v); current != latest {
+
 							n.Add(1)
-							log.Printf("%s %s < %s", meta.Name, meta.Version, latest)
+							log.Printf("%s %s < %s", meta.Name, current, latest)
 							continue
 						}
 
@@ -462,7 +365,7 @@ func main() {
 			}
 
 		done:
-			for _, p := range rosa.Native().CollectAll() {
+			for _, p := range rosa.Native().Collect() {
 				select {
 				case w <- p:
 					break
@@ -482,23 +385,9 @@ func main() {
 			&flagJobs,
 			"j", command.IntFlag(32),
 			"Maximum number of simultaneous connections",
-		).Flag(
-			&flagNoBlock,
-			"ignore-block", command.BoolFlag(false),
-			"Inhibit update blocking",
 		)
 	}
 
-	c.NewCommand("blocked", command.UsageInternal, func([]string) error {
-		for _, p := range rosa.Native().CollectAll() {
-			meta, _ := rosa.Native().Std().Load(p)
-			if meta.Blocked != "" {
-				fmt.Printf("%s: %s\n", meta.Name, meta.Blocked)
-			}
-		}
-		return nil
-	})
-
 	c.NewCommand(
 		"daemon",
 		"Service artifact IR with Rosa OS extensions",
@@ -512,126 +401,37 @@ func main() {
 		},
 	)
 
-	c.NewCommand(
-		"keygen",
-		"Create keypair for local cache",
-		func([]string) error {
-			pub, priv, err := ed25519.GenerateKey(nil)
-			if err != nil {
-				return err
-			}
-
-			return errors.Join(writeFileExcl(filepath.Join(
-				cm.base,
-				"ed25519.pub",
-			), pub, 0444), writeFileExcl(filepath.Join(
-				cm.base,
-				"ed25519",
-			), priv, 0400))
-		},
-	)
-
-	c.NewCommand(
-		"serve",
-		"Export local cache as mirror",
-		func(args []string) error {
-			const shutdownTimeout = 15 * time.Second
-
-			if len(args) != 1 {
-				return errors.New("serve requires 1 argument")
-			}
-
-			var key ed25519.PrivateKey
-			if p, err := os.ReadFile(filepath.Join(cm.base, "ed25519")); err != nil {
-				return err
-			} else if len(p) != ed25519.PrivateKeySize {
-				return errors.New("invalid private key")
-			} else {
-				key = p
-			}
-
-			var h http.Handler
-			if base, err := os.OpenRoot(cm.base); err != nil {
-				return err
-			} else {
-				var mux http.ServeMux
-				rosa.NewMirror(msg, base.FS(), key).Register(&mux)
-				h = &mux
-			}
-
-			server := http.Server{Addr: args[0], Handler: h}
-			go func() {
-				<-ctx.Done()
-				cc, cancel := context.WithTimeout(context.Background(), shutdownTimeout)
-				defer cancel()
-				if err := server.Shutdown(cc); err != nil {
-					log.Fatal(err)
-				}
-			}()
-
-			msg.Verbosef("listening on %q", args[0])
-			err := server.ListenAndServe()
-			if errors.Is(err, http.ErrServerClosed) {
-				err = nil
-			}
-			return err
-		},
-	)
-
-	c.NewCommand(
-		"snapshot",
-		"Populate an empty directory with a static mirror snapshot",
-		func(args []string) error {
-			if len(args) != 1 {
-				return errors.New("snapshot requires 1 argument")
-			}
-
-			var key ed25519.PrivateKey
-			if p, err := os.ReadFile(filepath.Join(cm.base, "ed25519")); err != nil {
-				return err
-			} else if len(p) != ed25519.PrivateKeySize {
-				return errors.New("invalid private key")
-			} else {
-				key = p
-			}
-
-			var m rosa.Mirror
-			if base, err := os.OpenRoot(cm.base); err != nil {
-				return err
-			} else {
-				m = rosa.NewMirror(msg, base.FS(), key)
-			}
-
-		retry:
-			root, err := os.OpenRoot(args[0])
-			if err != nil {
-				if os.IsNotExist(err) {
-					if err = os.MkdirAll(args[0], 0755); err != nil {
-						return err
-					}
-					goto retry
-				}
-				return err
-			}
-
-			go func() { <-ctx.Done(); _ = root.Close() }()
-			return m.Populate(root)
-		},
-	)
-
 	{
+		var (
+			flagGentoo   string
+			flagChecksum string
+
+			flagStage0 bool
+		)
 		c.NewCommand(
-			"stage4",
+			"stage3",
 			"Check for toolchain 3-stage non-determinism",
 			func(args []string) (err error) {
+				s := rosa.Std
+				if flagGentoo != "" {
+					s -= 3 // magic number to discourage misuse
+
+					var checksum pkg.Checksum
+					if len(flagChecksum) != 0 {
+						if err = pkg.Decode(&checksum, flagChecksum); err != nil {
+							return
+						}
+					}
+					rosa.Native().SetGentooStage3(flagGentoo, checksum)
+				}
+
 				var (
 					pathname *check.Absolute
 					checksum [2]unique.Handle[pkg.Checksum]
 				)
 
-				_llvm := rosa.H("llvm")
 				if err = cm.Do(func(cache *pkg.Cache) (err error) {
-					_, llvm := rosa.Native().New(rosa.Std - 2).Load(_llvm)
+					llvm, _ := rosa.Native().New(s - 2).Load(rosa.LLVM)
 					pathname, _, err = cache.Cure(llvm)
 					return
 				}); err != nil {
@@ -640,31 +440,21 @@ func main() {
 				log.Println("stage1:", pathname)
 
 				if err = cm.Do(func(cache *pkg.Cache) (err error) {
-					_, llvm := rosa.Native().New(rosa.Std - 1).Load(_llvm)
-					pathname, _, err = cache.Cure(llvm)
-					return
-				}); err != nil {
-					return
-				}
-				log.Println("stage2:", pathname)
-
-				if err = cm.Do(func(cache *pkg.Cache) (err error) {
-					_, llvm := rosa.Native().New(rosa.Std).Load(_llvm)
+					llvm, _ := rosa.Native().New(s - 1).Load(rosa.LLVM)
 					pathname, checksum[0], err = cache.Cure(llvm)
 					return
 				}); err != nil {
 					return
 				}
-				log.Println("stage3:", pathname)
-
+				log.Println("stage2:", pathname)
 				if err = cm.Do(func(cache *pkg.Cache) (err error) {
-					_, llvm := rosa.Native().New(rosa.Stage3).Load(_llvm)
+					llvm, _ := rosa.Native().New(s).Load(rosa.LLVM)
 					pathname, checksum[1], err = cache.Cure(llvm)
 					return
 				}); err != nil {
 					return
 				}
-				log.Println("stage4:", pathname)
+				log.Println("stage3:", pathname)
 
 				if checksum[0] != checksum[1] {
 					err = &pkg.ChecksumMismatchError{
@@ -673,34 +463,39 @@ func main() {
 					}
 				} else {
 					log.Println(
-						"stage3 is identical to stage4",
+						"stage2 is identical to stage3",
 						"("+pkg.Encode(checksum[0].Value())+")",
 					)
 				}
+
+				if flagStage0 {
+					if err = cm.Do(func(cache *pkg.Cache) (err error) {
+						stage0, _ := rosa.Native().New(s).Load(rosa.Stage0)
+						pathname, _, err = cache.Cure(stage0)
+						return
+					}); err != nil {
+						return
+					}
+					log.Println(pathname)
+				}
+
 				return
 			},
+		).Flag(
+			&flagGentoo,
+			"gentoo", command.StringFlag(""),
+			"Bootstrap from a Gentoo stage3 tarball",
+		).Flag(
+			&flagChecksum,
+			"checksum", command.StringFlag(""),
+			"Checksum of Gentoo stage3 tarball",
+		).Flag(
+			&flagStage0,
+			"stage0", command.BoolFlag(false),
+			"Create bootstrap stage0 tarball",
 		)
 	}
 
-	c.NewCommand(
-		"all",
-		command.UsageInternal,
-		func([]string) error {
-			all := rosa.Native().CollectAll()
-			a := make(pkg.Collect, len(all))
-			for i, h := range all {
-				_, a[i] = rosa.Native().Std().Load(h)
-			}
-			return cm.Do(func(cache *pkg.Cache) (err error) {
-				_, _, err = cache.Cure(&a)
-				if pkg.IsCollected(err) {
-					err = nil
-				}
-				return
-			})
-		},
-	)
-
 	{
 		var (
 			flagDump    string
@@ -710,13 +505,9 @@ func main() {
 			flagNoReply bool
 			flagFaults  bool
 			flagPop     bool
-			flagRebuild bool
 
 			flagBoot bool
 			flagStd  bool
-
-			flagGentoo   string
-			flagChecksum string
 		)
 		c.NewCommand(
 			"cure",
@@ -733,19 +524,7 @@ func main() {
 					t -= 1
 				}
 
-				if flagGentoo != "" {
-					var checksum pkg.Checksum
-					if len(flagChecksum) != 0 {
-						if err := pkg.Decode(&checksum, flagChecksum); err != nil {
-							return err
-						}
-					}
-					rosa.Native().SetGentooStage3(flagGentoo, checksum)
-
-					t -= 3 // magic number to discourage misuse
-				}
-
-				_, a := rosa.Native().New(t).Load(rosa.ArtifactH(unique.Make(args[0])))
+				a, _ := rosa.Native().New(t).Load(rosa.ArtifactH(unique.Make(args[0])))
 				if a == nil {
 					return fmt.Errorf("unknown artifact %q", args[0])
 				}
@@ -754,17 +533,13 @@ func main() {
 				default:
 					var pathname *check.Absolute
 					err := cm.Do(func(cache *pkg.Cache) (err error) {
-						if flagRebuild {
-							pathname, _, err = cache.CureNew(a)
-						} else {
-							pathname, _, err = cache.Cure(a)
-						}
+						pathname, _, err = cache.Cure(a)
 						return
 					})
 					if err != nil {
 						return err
 					}
-					fmt.Println(pathname)
+					log.Println(pathname)
 
 					if flagExport != "" {
 						msg.Verbosef("exporting %s to %s...", args[0], flagExport)
@@ -776,7 +551,7 @@ func main() {
 							0400,
 						); err != nil {
 							return err
-						} else if err = pkg.Write(
+						} else if _, err = pkg.Flatten(
 							os.DirFS(pathname.String()),
 							".",
 							f,
@@ -812,8 +587,8 @@ func main() {
 						return cache.EnterExec(
 							ctx,
 							a,
-							"", true, os.Stdin, os.Stdout, os.Stderr,
-							rosa.AbsSystem.Append("bin", "sh"),
+							true, os.Stdin, os.Stdout, os.Stderr,
+							rosa.AbsSystem.Append("bin", "mksh"),
 							"sh",
 						)
 					})
@@ -825,7 +600,7 @@ func main() {
 					}
 					pathname, err := cureRemote(ctx, &addr, a, flags)
 					if !flagNoReply && err == nil {
-						fmt.Println(pathname)
+						log.Println(pathname)
 					}
 
 					if errors.Is(err, context.Canceled) {
@@ -919,100 +694,11 @@ func main() {
 			&flagPop,
 			"pop", command.BoolFlag(false),
 			"Display and destroy the most recent fault entry",
-		).Flag(
-			&flagRebuild,
-			"rebuild", command.BoolFlag(false),
-			"Always enter the artifact implementation",
-		).Flag(
-			&flagGentoo,
-			"gentoo", command.StringFlag(""),
-			"Bootstrap from a Gentoo stage3 tarball",
-		).Flag(
-			&flagChecksum,
-			"checksum", command.StringFlag(""),
-			"Checksum of Gentoo stage3 tarball",
 		)
 	}
 
 	c.NewCommand(
-		"validate",
-		"Repeatedly cure named artifact to validate determinism",
-		func(args []string) error {
-			stage := rosa.Std
-			if len(args) == 3 {
-				switch args[0] {
-				case "boot":
-					stage -= 2
-				case "std":
-					stage -= 1
-
-				default:
-					return fmt.Errorf("invalid stage %q", args[0])
-				}
-				args = args[1:]
-			}
-
-			if len(args) != 2 {
-				return errors.New("validate requires 2 arguments")
-			}
-
-			n, err := strconv.Atoi(args[0])
-			if err != nil {
-				return fmt.Errorf("invalid passes %q", args[0])
-			}
-
-			if n < 2 {
-				return errors.New("validate must rebuild at least twice")
-			}
-
-			_, a := rosa.Native().New(stage).Load(rosa.ArtifactH(unique.Make(args[1])))
-			if a == nil {
-				return fmt.Errorf("unknown artifact %q", args[1])
-			}
-
-			if !a.IsExclusive() && cm.attr.Jobs < 1 {
-				cm.attr.Jobs = runtime.NumCPU()/n + 1
-			}
-
-			res := make([]unique.Handle[pkg.Checksum], n)
-			if err = cm.Do(func(cache *pkg.Cache) error {
-				errs := make([]error, n)
-				var wg sync.WaitGroup
-				for i := range n {
-					wg.Go(func() {
-						_, res[i], errs[i] = cache.CureNew(a)
-					})
-				}
-				wg.Wait()
-				return errors.Join(errs...)
-			}); err != nil {
-				return err
-			}
-
-			for i := range n - 1 {
-				if res[i] == res[i+1] {
-					continue
-				}
-
-				var buf strings.Builder
-				buf.WriteString("nondeterminism:")
-				for _, o := range res {
-					buf.WriteString("\n\t")
-					buf.WriteString(filepath.Join(
-						cm.base,
-						"checksum",
-						pkg.Encode(o.Value()),
-					))
-				}
-				return errors.New(buf.String())
-			}
-			return nil
-		},
-	)
-
-	cleanC := c.New("clean", "Remove unused entries from the cache")
-	cleanC.NewCommand(
-		"fault",
+		"clear",
 		"Remove all fault entries from the cache",
 		func([]string) error {
 			return cm.Do(func(*pkg.Cache) error {
@@ -1033,58 +719,6 @@ func main() {
 			})
 		},
 	)
-	cleanC.NewCommand(
-		"checksum",
-		"Remove unreachable checksum entries",
-		func([]string) error {
-			return cm.Do(func(cache *pkg.Cache) error {
-				_, checksums, err := cache.Clean(flagDry, false)
-				log.Printf("destroyed %d entries", len(checksums))
-				return err
-			})
-		},
-	)
-	{
-		var flagDeep bool
-		cleanC.NewCommand(
-			"all",
-			"Remove identifiers not reachable by loaded packages",
-			func([]string) error {
-				return cm.Do(func(cache *pkg.Cache) error {
-					t := rosa.Native().Clone().Std()
-					handles := t.CollectAll()
-
-					flags := t.Flags()
-					a := t.Append(nil, handles...)
-					for arch := range rosa.Arches(nil) {
-						if arch == runtime.GOARCH {
-							continue
-						}
-
-						t.DropCaches(arch, rosa.OptLLVMNoLTO|rosa.OptSkipCheck)
-						a = t.Append(a, handles...)
-						t.DropCaches(arch, flags)
-						a = t.Append(a, handles...)
-					}
-
-					ids, checksums, err := cache.Clean(
-						flagDry,
-						!flagDeep,
-						a...,
-					)
-					log.Printf(
-						"destroyed %d identifier and %d checksum entries",
-						len(ids), len(checksums),
-					)
-					return err
-				})
-			},
-		).Flag(
-			&flagDeep,
-			"deep", command.BoolFlag(false),
-			"Include transitive inputs",
-		)
-	}
 
 	c.NewCommand(
 		"abort",
@@ -1103,72 +737,131 @@ func main() {
 			"shell",
 			"Interactive shell in the specified Rosa OS environment",
 			func(args []string) error {
-				resolvconf := "nameserver 1.1.1.1\nnameserver 1.0.0.1\n"
-				if p, err := os.ReadFile(fhs.AbsEtc.Append(
-					"resolv.conf",
-				).String()); err != nil {
-					if !errors.Is(err, os.ErrNotExist) {
-						return err
-					}
-				} else {
-					resolvconf = unsafe.String(unsafe.SliceData(p), len(p))
-				}
-
-				handles := make([]rosa.ArtifactH, len(args), len(args)+3)
+				handles := make([]rosa.ArtifactH, len(args)+3)
 				for i, arg := range args {
 					handles[i] = rosa.ArtifactH(unique.Make(arg))
-					if meta, _ := rosa.Native().Std().Load(handles[i]); meta == nil {
+					if rosa.Native().Get(handles[i]) == nil {
 						return fmt.Errorf("unknown artifact %q", arg)
 					}
 				}
 
-				base := rosa.H("llvm")
+				base := rosa.LLVM
 				if !flagWithToolchain {
-					base = rosa.H("musl")
+					base = rosa.Musl
 				}
 				handles = append(handles,
 					base,
-					rosa.H("mksh"),
-					rosa.H("toybox"),
+					rosa.Mksh,
+					rosa.Toybox,
 				)
 
 				root := make(pkg.Collect, 0, 6+len(args))
-				root = append(root, rosa.NewEtc(false))
 				root = rosa.Native().Std().Append(root, handles...)
 
-				return cm.Do(func(cache *pkg.Cache) error {
-					return cache.EnterExec(
-						ctx,
-						pkg.NewExec(
-							"",
-							rosa.Native().Arch(),
-							new(pkg.Checksum),
-							1,
-							flagNet,
-							false,
-							fhs.AbsRoot,
-							[]string{
-								"SHELL=/system/bin/mksh",
-								"PATH=/system/bin",
-								"HOME=/",
-							},
-							fhs.AbsProc.Append("nonexistent"),
-							nil,
-							pkg.Path(fhs.AbsRoot, true, root...),
-							pkg.Path(
-								fhs.AbsEtc.Append("resolv.conf"), false,
-								pkg.NewFile(
-									"resolv.conf",
-									unsafe.Slice(unsafe.StringData(resolvconf), len(resolvconf)),
-								),
-							),
-						),
-						"localhost",
-						flagSession, os.Stdin, os.Stdout, os.Stderr,
-						rosa.AbsSystem.Append("bin", "mksh"),
-						"sh",
-					)
+				if err := cm.Do(func(cache *pkg.Cache) error {
+					_, _, err := cache.Cure(&root)
+					return err
+				}); err == nil {
+					return errors.New("unreachable")
+				} else if !pkg.IsCollected(err) {
+					return err
+				}
+
+				type cureRes struct {
+					pathname *check.Absolute
+					checksum unique.Handle[pkg.Checksum]
+				}
+				cured := make(map[pkg.Artifact]cureRes)
+				for _, a := range root {
+					if err := cm.Do(func(cache *pkg.Cache) error {
+						pathname, checksum, err := cache.Cure(a)
+						if err == nil {
+							cured[a] = cureRes{pathname, checksum}
+						}
+						return err
+					}); err != nil {
+						return err
+					}
+				}
+
+				// explicitly open for direct error-free use from this point
+				if cm.c == nil {
+					if err := cm.open(); err != nil {
+						return err
+					}
+				}
+
+				layers := pkg.PromoteLayers(root, func(a pkg.Artifact) (
+					*check.Absolute,
+					unique.Handle[pkg.Checksum],
+				) {
+					res := cured[a]
+					return res.pathname, res.checksum
+				}, func(i int, d pkg.Artifact) {
+					r := pkg.Encode(cm.c.Ident(d).Value())
+					if s, ok := d.(fmt.Stringer); ok {
+						if name := s.String(); name != "" {
+							r += "-" + name
+						}
+					}
+					msg.Verbosef("promoted layer %d as %s", i, r)
 				})
+
+				z := container.New(ctx, msg)
+				z.WaitDelay = 3 * time.Second
+				z.SeccompPresets = pkg.SeccompPresets
+				z.SeccompFlags |= seccomp.AllowMultiarch
+				z.ParentPerm = 0700
+				z.HostNet = flagNet
+				z.RetainSession = flagSession
+				z.Hostname = "localhost"
+				z.Uid, z.Gid = (1<<10)-1, (1<<10)-1
+				z.Stdin, z.Stdout, z.Stderr = os.Stdin, os.Stdout, os.Stderr
+				z.Quiet = !cm.verboseInit
+				if s, ok := os.LookupEnv("TERM"); ok {
+					z.Env = append(z.Env, "TERM="+s)
+				}
+
+				var tempdir *check.Absolute
+				if s, err := filepath.Abs(os.TempDir()); err != nil {
+					return err
+				} else if tempdir, err = check.NewAbs(s); err != nil {
+					return err
+				}
+
+				z.Dir = fhs.AbsRoot
+				z.Env = []string{
+					"SHELL=/system/bin/mksh",
+					"PATH=/system/bin",
+					"HOME=/",
+				}
+				z.Path = rosa.AbsSystem.Append("bin", "mksh")
+				z.Args = []string{"mksh"}
+				z.
+					OverlayEphemeral(fhs.AbsRoot, layers...).
+					Place(
+						fhs.AbsEtc.Append("hosts"),
+						[]byte("127.0.0.1 localhost\n"),
+					).
+					Place(
+						fhs.AbsEtc.Append("passwd"),
+						[]byte("media_rw:x:1023:1023::/:/system/bin/sh\n"+
+							"nobody:x:65534:65534::/proc/nonexistent:/system/bin/false\n"),
+					).
+					Place(
+						fhs.AbsEtc.Append("group"),
+						[]byte("media_rw:x:1023:\nnobody:x:65534:\n"),
+					).
+					Bind(tempdir, fhs.AbsTmp, std.BindWritable).
+					Proc(fhs.AbsProc).Dev(fhs.AbsDev, true)
+
+				if err := z.Start(); err != nil {
+					return err
+				}
+				if err := z.Serve(); err != nil {
+					return err
+				}
+				return z.Wait()
 			},
 		).Flag(
 			&flagNet,
@@ -1183,6 +876,7 @@ func main() {
 			"with-toolchain", command.BoolFlag(false),
 			"Include the stage2 LLVM toolchain",
 		)
+
 	}
 
 	c.Command(

cmd/mbf/main_test.go

@@ -36,8 +36,8 @@ func TestCureAll(t *testing.T) {
 	})
 
 	for _, handle := range rosa.Native().Collect() {
-		_, a := rosa.Native().Std().MustLoad(handle)
-		t.Run(handle.String(), func(t *testing.T) {
+		a, _ := rosa.Native().Std().MustLoad(handle)
+		t.Run(rosa.Native().MustGet(handle).Name, func(t *testing.T) {
 			_, err := cureRemote(t.Context(), &addr, a, 0)
 			if err != nil {
 				t.Error(err)

cmd/sharefs/fuse.go

@@ -508,8 +508,8 @@ func _main(s ...string) (exitCode int) {
 
 		if !z.AllowOrphan {
 			if err := z.Wait(); err != nil {
-				exitError, ok := errors.AsType[*exec.ExitError](err)
-				if !ok || exitError == nil {
+				var exitError *exec.ExitError
+				if !errors.As(err, &exitError) || exitError == nil {
 					log.Println(err)
 					return 5
 				}

command/builder.go

@@ -13,7 +13,6 @@ func New(output io.Writer, logf LogFunc, name string, early HandlerFunc) Command
 	return c
 }
 
-// newNode initialises a subcommand tree and returns its address.
 func newNode(output io.Writer, logf LogFunc, name, usage string) *node {
 	n := &node{
 		name: name, usage: usage,
@@ -23,8 +22,8 @@ func newNode(output io.Writer, logf LogFunc, name, usage string) *node {
 	n.set.SetOutput(output)
 	n.set.Usage = func() {
 		_ = n.writeHelp()
-		if len(n.suffix) > 0 {
-			_, _ = fmt.Fprintln(output, "flags:")
+		if n.suffix.Len() > 0 {
+			_, _ = fmt.Fprintln(output, "Flags:")
 			n.set.PrintDefaults()
 			_, _ = fmt.Fprintln(output)
 		}

command/builder_test.go

@@ -18,14 +18,8 @@ func TestBuild(t *testing.T) {
 
 	t.Run("direct zero length", func(t *testing.T) {
 		wantPanic := "invalid subcommand"
-		t.Run("zero length name", func(t *testing.T) {
-			defer checkRecover(t, "Command", wantPanic)
-			c.Command("", "usage", stubHandler)
-		})
-		t.Run("zero length usage", func(t *testing.T) {
-			defer checkRecover(t, "Command", wantPanic)
-			c.Command("name", "", stubHandler)
-		})
+		t.Run("zero length name", func(t *testing.T) { defer checkRecover(t, "Command", wantPanic); c.Command("", "usage", stubHandler) })
+		t.Run("zero length usage", func(t *testing.T) { defer checkRecover(t, "Command", wantPanic); c.Command("name", "", stubHandler) })
 	})
 
 	t.Run("direct adopt unique names", func(t *testing.T) {
@@ -40,14 +34,8 @@ func TestBuild(t *testing.T) {
 
 	t.Run("zero length", func(t *testing.T) {
 		wantPanic := "invalid subcommand tree"
-		t.Run("zero length name", func(t *testing.T) {
-			defer checkRecover(t, "New", wantPanic)
-			c.New("", "usage")
-		})
-		t.Run("zero length usage", func(t *testing.T) {
-			defer checkRecover(t, "New", wantPanic)
-			c.New("name", "")
-		})
+		t.Run("zero length name", func(t *testing.T) { defer checkRecover(t, "New", wantPanic); c.New("", "usage") })
+		t.Run("zero length usage", func(t *testing.T) { defer checkRecover(t, "New", wantPanic); c.New("name", "") })
 	})
 
 	t.Run("direct adopt unique names", func(t *testing.T) {

command/command.go

@@ -6,43 +6,36 @@ import (
 	"strings"
 )
 
-// UsageInternal is a special usage string that hides the command from the
-// generated help message.
-const UsageInternal = "\x00"
+// UsageInternal causes the command to be hidden from help text when set as the usage string.
+const UsageInternal = "internal"
 
 type (
 	// HandlerFunc is called when matching a directly handled subcommand tree.
 	HandlerFunc = func(args []string) error
 
-	// LogFunc is the function signature of a printf function. The zero value
-	// implies [log.Printf].
+	// LogFunc is the function signature of a printf function.
 	LogFunc = func(format string, a ...any)
 
-	// FlagDefiner is a deferred flag definer value, usually encapsulating the
-	// default value.
+	// FlagDefiner is a deferred flag definer value, usually encapsulating the default value.
 	FlagDefiner interface {
 		// Define defines the flag in set.
 		Define(b *strings.Builder, set *flag.FlagSet, p any, name, usage string)
 	}
 
-	// A Flag is satisfied by command objects capable of receiving flags.
 	Flag[T any] interface {
 		// Flag defines a generic flag type in Node's flag set.
 		Flag(p any, name string, value FlagDefiner, usage string) T
 	}
 
-	// A Command is the root of a command tree.
 	Command interface {
 		Parse(arguments []string) error
 
-		// MustParse determines exit outcomes for Parse errors and calls
-		// handleError if [HandlerFunc] returns a non-nil error.
+		// MustParse determines exit outcomes for Parse errors
+		// and calls handleError if [HandlerFunc] returns a non-nil error.
 		MustParse(arguments []string, handleError func(error))
 
 		baseNode[Command]
 	}
-
-	// A Node is a subcommand under a [Command].
 	Node baseNode[Node]
 
 	baseNode[T any] interface {
@@ -60,16 +53,3 @@ type (
 		Flag[T]
 	}
 )
-
-// rootNode satisfies baseNode for [Command].
-type rootNode struct{ *node }
-
-func (r rootNode) Command(name, usage string, f HandlerFunc) Command {
-	r.node.Command(name, usage, f)
-	return r
-}
-
-func (r rootNode) Flag(p any, name string, value FlagDefiner, usage string) Command {
-	r.node.Flag(p, name, value, usage)
-	return r
-}

command/flag.go

@@ -16,13 +16,7 @@ func (e FlagError) Is(target error) bool {
 }
 
 func (n *node) Flag(p any, name string, value FlagDefiner, usage string) Node {
-	var buf strings.Builder
-	value.Define(&buf, n.set, p, name, usage)
-	s := buf.String()
-	if len(s) > 0 && s[0] == ' ' {
-		s = s[1:]
-	}
-	n.suffix = append(n.suffix, s)
+	value.Define(&n.suffix, n.set, p, name, usage)
 	return n
 }
 

command/help.go

@@ -1,7 +1,6 @@
 package command
 
 import (
-	"bytes"
 	"errors"
 	"fmt"
 	"io"
@@ -14,31 +13,14 @@ var ErrHelp = errors.New("help requested")
 func (n *node) PrintHelp() { _ = n.writeHelp() }
 
 func (n *node) writeHelp() error {
-	prefix := strings.Join(append(n.prefix, n.name), " ")
-	var buf strings.Builder
-	offset := 7 + len(prefix)
-	line := offset + 14
-	w := bytes.Repeat([]byte{' '}, offset+1)
-	w[0] = '\n'
-
-	for _, flag := range n.suffix {
-		line += len(flag) + 1
-		if line >= 80 {
-			line = offset + len(flag) + 1
-			buf.Write(w)
-		}
-		buf.WriteByte(' ')
-		buf.WriteString(flag)
-	}
-
 	if _, err := fmt.Fprintf(n.out,
-		"usage: %s [-h | --help]%s <command> [<args>]\n",
-		prefix, &buf,
+		"\nUsage:\t%s [-h | --help]%s COMMAND [OPTIONS]\n",
+		strings.Join(append(n.prefix, n.name), " "), &n.suffix,
 	); err != nil {
 		return err
 	}
 	if n.child != nil {
-		if _, err := fmt.Fprint(n.out, "\ncommands:\n"); err != nil {
+		if _, err := fmt.Fprint(n.out, "\nCommands:\n"); err != nil {
 			return err
 		}
 	}

command/node.go

@@ -3,9 +3,9 @@ package command
 import (
 	"flag"
 	"io"
+	"strings"
 )
 
-// A node represents a command.
 type node struct {
 	child, next *node
 	name, usage string
@@ -13,16 +13,13 @@ type node struct {
 	out  io.Writer
 	logf LogFunc
 
-	// Names of commands preceding node.
 	prefix []string
-	// Short user-facing representations of flags received by node.
-	suffix []string
+	suffix strings.Builder
 
 	f   HandlerFunc
 	set *flag.FlagSet
 }
 
-// adopt adds v as the last child of n.
 func (n *node) adopt(v *node) bool {
 	if n.child != nil {
 		return n.child.append(v)
@@ -31,7 +28,6 @@ func (n *node) adopt(v *node) bool {
 	return true
 }
 
-// append adds v as the last sibling of n.
 func (n *node) append(v *node) bool {
 	if n.name == v.name {
 		return false

command/parse.go

@@ -91,8 +91,8 @@ func (n *node) MustParse(arguments []string, handleError func(error)) {
 	case ErrEmptyTree:
 		os.Exit(1)
 	default:
-		flagError, ok := errors.AsType[FlagError](err)
-		if !ok { // returned by HandlerFunc
+		var flagError FlagError
+		if !errors.As(err, &flagError) { // returned by HandlerFunc
 			handleError(err)
 			os.Exit(1)
 		}

command/parse_test.go

@@ -70,7 +70,7 @@ func TestParse(t *testing.T) {
 			"d=0 out of order string flag",
 			buildTestCommand,
 			[]string{"string", "--string", "64d3b4b7b21788585845060e2199a78f"},
-			"flag provided but not defined: -string\nusage: test string [-h | --help] <command> [<args>]\n\n", "",
+			"flag provided but not defined: -string\n\nUsage:\ttest string [-h | --help] COMMAND [OPTIONS]\n\n", "",
 			errors.New("flag provided but not defined: -string"),
 		},
 		{
@@ -120,7 +120,7 @@ func TestParse(t *testing.T) {
 			"d=1 empty sub help",
 			buildTestCommand,
 			[]string{"empty", "-h"},
-			"usage: test empty [-h | --help] <command> [<args>]\n\n", "", flag.ErrHelp,
+			"\nUsage:\ttest empty [-h | --help] COMMAND [OPTIONS]\n\n", "", flag.ErrHelp,
 		},
 		{
 			"d=1 no match",
@@ -151,10 +151,10 @@ func TestParse(t *testing.T) {
 			"d=0 help",
 			buildTestCommand,
 			[]string{},
-			`usage: test [-h | --help] [-v] [--fail] [--string <value>] [--int <int>]
-            [--repeat <value>] <command> [<args>]
+			`
+Usage:	test [-h | --help] [-v] [--fail] [--string <value>] [--int <int>] [--repeat <value>] COMMAND [OPTIONS]
 
-commands:
+Commands:
     error      return an error
     print      wraps Fprint
     string     print string passed by flag
@@ -171,10 +171,10 @@ commands:
 			"d=0 help flag",
 			buildTestCommand,
 			[]string{"-h"},
-			`usage: test [-h | --help] [-v] [--fail] [--string <value>] [--int <int>]
-            [--repeat <value>] <command> [<args>]
+			`
+Usage:	test [-h | --help] [-v] [--fail] [--string <value>] [--int <int>] [--repeat <value>] COMMAND [OPTIONS]
 
-commands:
+Commands:
     error      return an error
     print      wraps Fprint
     string     print string passed by flag
@@ -185,7 +185,7 @@ commands:
     succeed    this command succeeds
     deep       top level of command tree with various levels
 
-flags:
+Flags:
   -fail
     	fail early
   -int int
@@ -203,9 +203,10 @@ flags:
 			"d=1 help",
 			buildTestCommand,
 			[]string{"join"},
-			`usage: test join [-h | --help] <command> [<args>]
+			`
+Usage:	test join [-h | --help] COMMAND [OPTIONS]
 
-commands:
+Commands:
     out    write result to wout
     log    log result to wlog
 
@@ -215,9 +216,10 @@ commands:
 			"d=1 help flag",
 			buildTestCommand,
 			[]string{"join", "-h"},
-			`usage: test join [-h | --help] <command> [<args>]
+			`
+Usage:	test join [-h | --help] COMMAND [OPTIONS]
 
-commands:
+Commands:
     out    write result to wout
     log    log result to wlog
 
@@ -228,9 +230,10 @@ commands:
 			"d=2 help",
 			buildTestCommand,
 			[]string{"deep", "d=2"},
-			`usage: test deep d=2 [-h | --help] <command> [<args>]
+			`
+Usage:	test deep d=2 [-h | --help] COMMAND [OPTIONS]
 
-commands:
+Commands:
     d=3    relative third level
 
 `, "", command.ErrHelp,
@@ -239,9 +242,10 @@ commands:
 			"d=2 help flag",
 			buildTestCommand,
 			[]string{"deep", "d=2", "-h"},
-			`usage: test deep d=2 [-h | --help] <command> [<args>]
+			`
+Usage:	test deep d=2 [-h | --help] COMMAND [OPTIONS]
 
-commands:
+Commands:
     d=3    relative third level
 
 `, "", flag.ErrHelp,
@@ -257,7 +261,7 @@ commands:
 				t.Errorf("Parse: error = %v; wantErr %v", err, tc.wantErr)
 			}
 			if got := wout.String(); got != tc.want {
-				t.Errorf("Parse:\n%s\nwant\n%s", got, tc.want)
+				t.Errorf("Parse: %s want %s", got, tc.want)
 			}
 			if gotLog := wlog.String(); gotLog != tc.wantLog {
 				t.Errorf("Parse: log = %s wantLog %s", gotLog, tc.wantLog)

command/wrap.go

@@ -0,0 +1,14 @@
+package command
+
+// the top level node wants [Command] returned for its builder methods
+type rootNode struct{ *node }
+
+func (r rootNode) Command(name, usage string, f HandlerFunc) Command {
+	r.node.Command(name, usage, f)
+	return r
+}
+
+func (r rootNode) Flag(p any, name string, value FlagDefiner, usage string) Command {
+	r.node.Flag(p, name, value, usage)
+	return r
+}

container/container.go

@@ -154,8 +154,11 @@ func (e *StartError) Error() string {
 		return e.Step
 	}
 
-	if se, ok := errors.AsType[*os.SyscallError](e.Err); ok && se != nil {
-		return e.Step + " " + se.Error()
+	{
+		var syscallError *os.SyscallError
+		if errors.As(e.Err, &syscallError) && syscallError != nil {
+			return e.Step + " " + syscallError.Error()
+		}
 	}
 
 	return e.Step + ": " + e.Err.Error()

container/dispatcher_test.go

@@ -235,6 +235,8 @@ func checkOpBehaviour(t *testing.T, testCases []opBehaviourTestCase) {
 	})
 }
 
+func sliceAddr[S any](s []S) *[]S { return &s }
+
 func newCheckedFile(t *testing.T, name, wantData string, closeErr error) osFile {
 	f := &checkedOsFile{t: t, name: name, want: wantData, closeErr: closeErr}
 	// check happens in Close, and cleanup is not guaranteed to run, so relying

container/errors.go

@@ -46,8 +46,9 @@ func messageFromError(err error) (m string, ok bool) {
 // While this is usable for pointer errors, such use should be avoided as nil
 // check is omitted.
 func messagePrefix[T error](prefix string, err error) (string, bool) {
-	if e, ok := errors.AsType[T](err); ok {
-		return prefix + e.Error(), true
+	var targetError T
+	if errors.As(err, &targetError) {
+		return prefix + targetError.Error(), true
 	}
 	return zeroString, false
 }
@@ -57,8 +58,9 @@ func messagePrefixP[V any, T interface {
 	*V
 	error
 }](prefix string, err error) (string, bool) {
-	if e, ok := errors.AsType[T](err); ok && e != nil {
-		return prefix + e.Error(), true
+	var targetError T
+	if errors.As(err, &targetError) && targetError != nil {
+		return prefix + targetError.Error(), true
 	}
 	return zeroString, false
 }
@@ -107,8 +109,8 @@ func optionalErrorUnwrap(err error) error {
 
 // errnoFallback returns the concrete errno from an error, or a [os.PathError] fallback.
 func errnoFallback(op, path string, err error) (syscall.Errno, *os.PathError) {
-	errno, ok := errors.AsType[syscall.Errno](err)
-	if !ok {
+	var errno syscall.Errno
+	if !errors.As(err, &errno) {
 		return 0, &os.PathError{Op: op, Path: path, Err: err}
 	}
 	return errno, nil

container/init_test.go

@@ -95,7 +95,7 @@ func TestInitEntrypoint(t *testing.T) {
 					Uid:            1 << 16,
 					Gid:            1 << 15,
 					Hostname:       "hakurei-check",
-					Ops:            new(make(Ops, 1)),
+					Ops:            (*Ops)(sliceAddr(make(Ops, 1))),
 					SeccompRules:   make([]std.NativeRule, 0),
 					SeccompPresets: std.PresetStrict,
 					RetainSession:  true,
@@ -123,7 +123,7 @@ func TestInitEntrypoint(t *testing.T) {
 					Uid:            1 << 16,
 					Gid:            1 << 15,
 					Hostname:       "hakurei-check",
-					Ops:            new(make(Ops, 1)),
+					Ops:            (*Ops)(sliceAddr(make(Ops, 1))),
 					SeccompRules:   make([]std.NativeRule, 0),
 					SeccompPresets: std.PresetStrict,
 					RetainSession:  true,
@@ -152,7 +152,7 @@ func TestInitEntrypoint(t *testing.T) {
 					Uid:            1 << 16,
 					Gid:            1 << 15,
 					Hostname:       "hakurei-check",
-					Ops:            new(make(Ops, 1)),
+					Ops:            (*Ops)(sliceAddr(make(Ops, 1))),
 					SeccompRules:   make([]std.NativeRule, 0),
 					SeccompPresets: std.PresetStrict,
 					RetainSession:  true,
@@ -182,7 +182,7 @@ func TestInitEntrypoint(t *testing.T) {
 					Uid:            1 << 16,
 					Gid:            1 << 15,
 					Hostname:       "hakurei-check",
-					Ops:            new(make(Ops, 1)),
+					Ops:            (*Ops)(sliceAddr(make(Ops, 1))),
 					SeccompRules:   make([]std.NativeRule, 0),
 					SeccompPresets: std.PresetStrict,
 					RetainSession:  true,
@@ -213,7 +213,7 @@ func TestInitEntrypoint(t *testing.T) {
 					Uid:            1 << 16,
 					Gid:            1 << 15,
 					Hostname:       "hakurei-check",
-					Ops:            new(make(Ops, 1)),
+					Ops:            (*Ops)(sliceAddr(make(Ops, 1))),
 					SeccompRules:   make([]std.NativeRule, 0),
 					SeccompPresets: std.PresetStrict,
 					RetainSession:  true,
@@ -245,7 +245,7 @@ func TestInitEntrypoint(t *testing.T) {
 					Uid:            1 << 16,
 					Gid:            1 << 15,
 					Hostname:       "hakurei-check",
-					Ops:            new(make(Ops, 1)),
+					Ops:            (*Ops)(sliceAddr(make(Ops, 1))),
 					SeccompRules:   make([]std.NativeRule, 0),
 					SeccompPresets: std.PresetStrict,
 					RetainSession:  true,
@@ -279,7 +279,7 @@ func TestInitEntrypoint(t *testing.T) {
 					Uid:            1 << 16,
 					Gid:            1 << 15,
 					Hostname:       "hakurei-check",
-					Ops:            new(make(Ops, 1)),
+					Ops:            (*Ops)(sliceAddr(make(Ops, 1))),
 					SeccompRules:   make([]std.NativeRule, 0),
 					SeccompPresets: std.PresetStrict,
 					RetainSession:  true,
@@ -315,7 +315,7 @@ func TestInitEntrypoint(t *testing.T) {
 					Uid:            1 << 16,
 					Gid:            1 << 15,
 					Hostname:       "hakurei-check",
-					Ops:            new(make(Ops, 1)),
+					Ops:            (*Ops)(sliceAddr(make(Ops, 1))),
 					SeccompRules:   make([]std.NativeRule, 0),
 					SeccompPresets: std.PresetStrict,
 					RetainSession:  true,

ext/ext_test.go

@@ -39,7 +39,7 @@ func TestSyscall(t *testing.T) {
 					t.Errorf("Unmarshal: %v, want %v", got, tc.want)
 				}
 			})
-			if _, ok := errors.AsType[ext.SyscallNameError](tc.err); ok {
+			if errors.As(tc.err, new(ext.SyscallNameError)) {
 				return
 			}
 

flake.lock

@@ -7,32 +7,32 @@
         ]
       },
       "locked": {
-        "lastModified": 1780361225,
-        "narHash": "sha256-wnV9ttf4fPWNonBIQmvlrSlNpQYgx5HgWWd007mwIFA=",
+        "lastModified": 1772985280,
+        "narHash": "sha256-FdrNykOoY9VStevU4zjSUdvsL9SzJTcXt4omdEDZDLk=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "e28654b71096e08c019d4861ca26acb646f583d8",
+        "rev": "8f736f007139d7f70752657dff6a401a585d6cbc",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-26.05",
+        "ref": "release-25.11",
         "repo": "home-manager",
         "type": "github"
       }
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1780453794,
-        "narHash": "sha256-bXMRa9VTsHSPXL4Cw8R6JJLQeY3Y/IP4+YJCYVmQ7FY=",
+        "lastModified": 1772822230,
+        "narHash": "sha256-yf3iYLGbGVlIthlQIk5/4/EQDZNNEmuqKZkQssMljuw=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "6b316287bae2ee04c9b93c8c858d930fd07d7338",
+        "rev": "71caefce12ba78d84fe618cf61644dce01cf3a96",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
-        "ref": "nixos-26.05",
+        "ref": "nixos-25.11",
         "repo": "nixpkgs",
         "type": "github"
       }

flake.nix

@@ -2,10 +2,10 @@
   description = "hakurei container tool and nixos module";
 
   inputs = {
-    nixpkgs.url = "github:NixOS/nixpkgs/nixos-26.05";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
 
     home-manager = {
-      url = "github:nix-community/home-manager/release-26.05";
+      url = "github:nix-community/home-manager/release-25.11";
       inputs.nixpkgs.follows = "nixpkgs";
     };
   };
@@ -37,27 +37,27 @@
           inherit (pkgs)
             runCommandLocal
             callPackage
-            nixfmt
+            nixfmt-rfc-style
             deadnix
             statix
             ;
         in
         {
-          hakurei = callPackage ./. { inherit system self; };
-          race = callPackage ./. {
+          hakurei = callPackage ./test { inherit system self; };
+          race = callPackage ./test {
             inherit system self;
             withRace = true;
           };
 
-          sandbox = callPackage ./sandbox { inherit self; };
-          sandbox-race = callPackage ./sandbox {
+          sandbox = callPackage ./test/sandbox { inherit self; };
+          sandbox-race = callPackage ./test/sandbox {
             inherit self;
             withRace = true;
           };
 
-          sharefs = callPackage ./sharefs { inherit system self; };
+          sharefs = callPackage ./cmd/sharefs/test { inherit system self; };
 
-          formatting = runCommandLocal "check-formatting" { nativeBuildInputs = [ nixfmt ]; } ''
+          formatting = runCommandLocal "check-formatting" { nativeBuildInputs = [ nixfmt-rfc-style ]; } ''
             cd ${./.}
 
             echo "running nixfmt..."
@@ -116,7 +116,7 @@
               nettools
               ;
           };
-          hsu = pkgs.callPackage ./hsu.nix { inherit (self.packages.${system}) hakurei; };
+          hsu = pkgs.callPackage ./cmd/hsu/package.nix { inherit (self.packages.${system}) hakurei; };
           sharefs = pkgs.linkFarm "sharefs" {
             "bin/sharefs" = "${hakurei}/libexec/sharefs";
             "bin/mount.fuse.sharefs" = "${hakurei}/libexec/sharefs";
@@ -139,6 +139,7 @@
                 GOCACHE="$(mktemp -d)" \
                 PATH="${pkgs.pkgsStatic.musl.bin}/bin:$PATH" \
                 DESTDIR="$out" \
+                HAKUREI_VERSION="v${hakurei.version}" \
                   ./all.sh
               '';
         }
@@ -190,11 +191,11 @@
                     };
                   }
 
-                  ./interactive/configuration.nix
-                  ./interactive/vm.nix
-                  ./interactive/hakurei.nix
-                  ./interactive/trace.nix
-                  ./interactive/raceattr.nix
+                  ./test/interactive/configuration.nix
+                  ./test/interactive/vm.nix
+                  ./test/interactive/hakurei.nix
+                  ./test/interactive/trace.nix
+                  ./test/interactive/raceattr.nix
 
                   self.nixosModules.hakurei
                   home-manager.nixosModules.home-manager

hst/container.go

@@ -2,7 +2,6 @@ package hst
 
 import (
 	"encoding/json"
-	"fmt"
 	"strings"
 	"syscall"
 	"time"
@@ -65,14 +64,10 @@ const (
 	// Some programs fail to connect to dbus session running as a different uid,
 	// this option works around it by mapping priv-side caller uid in container.
 	FMapRealUID
-	// FNoPlace disables placement of /etc/passwd and /etc/group.
-	FNoPlace
 
 	// FDevice mount /dev/ from the init mount namespace as is in the container
 	// mount namespace.
 	FDevice
-	// FCoverRun covers /run/ in the container mount namespace early.
-	FCoverRun
 
 	// FShareRuntime shares XDG_RUNTIME_DIR between containers under the same identity.
 	FShareRuntime
@@ -103,12 +98,8 @@ func (flags Flags) String() string {
 		return "tty"
 	case FMapRealUID:
 		return "mapuid"
-	case FNoPlace:
-		return "noplace"
 	case FDevice:
 		return "device"
-	case FCoverRun:
-		return "cover_run"
 	case FShareRuntime:
 		return "runtime"
 	case FShareTmpdir:
@@ -170,10 +161,6 @@ type ContainerConfig struct {
 	Flags Flags `json:"-"`
 }
 
-func (c *ContainerConfig) GoString() string {
-	return fmt.Sprintf("&%#v", *c)
-}
-
 // ContainerConfigF is [ContainerConfig] stripped of its methods.
 //
 // The [ContainerConfig.Flags] field does not survive a [json] round trip.
@@ -201,13 +188,9 @@ type containerConfigJSON = struct {
 
 	// Corresponds to [FMapRealUID].
 	MapRealUID bool `json:"map_real_uid"`
-	// Corresponds to [FNoPlace].
-	NoPlace bool `json:"noplace,omitempty"`
 
 	// Corresponds to [FDevice].
 	Device bool `json:"device,omitempty"`
-	// Corresponds to [FCoverRun].
-	CoverRun bool `json:"cover_run,omitempty"`
 
 	// Corresponds to [FShareRuntime].
 	ShareRuntime bool `json:"share_runtime,omitempty"`
@@ -230,9 +213,7 @@ func (c *ContainerConfig) MarshalJSON() ([]byte, error) {
 		Tty:           c.Flags&FTty != 0,
 		Multiarch:     c.Flags&FMultiarch != 0,
 		MapRealUID:    c.Flags&FMapRealUID != 0,
-		NoPlace:       c.Flags&FNoPlace != 0,
 		Device:        c.Flags&FDevice != 0,
-		CoverRun:      c.Flags&FCoverRun != 0,
 		ShareRuntime:  c.Flags&FShareRuntime != 0,
 		ShareTmpdir:   c.Flags&FShareTmpdir != 0,
 	})
@@ -273,15 +254,9 @@ func (c *ContainerConfig) UnmarshalJSON(data []byte) error {
 	if v.MapRealUID {
 		c.Flags |= FMapRealUID
 	}
-	if v.NoPlace {
-		c.Flags |= FNoPlace
-	}
 	if v.Device {
 		c.Flags |= FDevice
 	}
-	if v.CoverRun {
-		c.Flags |= FCoverRun
-	}
 	if v.ShareRuntime {
 		c.Flags |= FShareRuntime
 	}

hst/container_test.go

@@ -21,8 +21,8 @@ func TestFlagsString(t *testing.T) {
 	}{
 		{"none", 0, "none"},
 		{"none high", hst.FAll + 1, "none"},
-		{"all", hst.FAll, "multiarch, compat, devel, userns, net, abstract, tty, mapuid, noplace, device, cover_run, runtime, tmpdir"},
-		{"all high", math.MaxUint, "multiarch, compat, devel, userns, net, abstract, tty, mapuid, noplace, device, cover_run, runtime, tmpdir"},
+		{"all", hst.FAll, "multiarch, compat, devel, userns, net, abstract, tty, mapuid, device, runtime, tmpdir"},
+		{"all high", math.MaxUint, "multiarch, compat, devel, userns, net, abstract, tty, mapuid, device, runtime, tmpdir"},
 	}
 	for _, tc := range testCases {
 		t.Run(tc.name, func(t *testing.T) {
@@ -53,7 +53,7 @@ func TestContainerConfig(t *testing.T) {
 		{"hostnet hostabstract mapuid", &hst.ContainerConfig{Flags: hst.FHostNet | hst.FHostAbstract | hst.FMapRealUID},
 			`{"env":null,"filesystem":null,"shell":null,"home":null,"args":null,"host_net":true,"host_abstract":true,"map_real_uid":true}`},
 		{"all", &hst.ContainerConfig{Flags: hst.FAll},
-			`{"env":null,"filesystem":null,"shell":null,"home":null,"args":null,"seccomp_compat":true,"devel":true,"userns":true,"host_net":true,"host_abstract":true,"tty":true,"multiarch":true,"map_real_uid":true,"noplace":true,"device":true,"cover_run":true,"share_runtime":true,"share_tmpdir":true}`},
+			`{"env":null,"filesystem":null,"shell":null,"home":null,"args":null,"seccomp_compat":true,"devel":true,"userns":true,"host_net":true,"host_abstract":true,"tty":true,"multiarch":true,"map_real_uid":true,"device":true,"share_runtime":true,"share_tmpdir":true}`},
 	}
 
 	for _, tc := range testCases {

hst/dbus.go

@@ -1,7 +1,6 @@
 package hst
 
 import (
-	"fmt"
 	"strconv"
 	"strings"
 )
@@ -62,10 +61,6 @@ type BusConfig struct {
 	Filter bool `json:"filter"`
 }
 
-func (c *BusConfig) GoString() string {
-	return fmt.Sprintf("&%#v", *c)
-}
-
 // Interfaces iterates over all interface strings specified in [BusConfig].
 func (c *BusConfig) Interfaces(yield func(string) bool) {
 	if c == nil {

hst/fs.go

@@ -6,7 +6,6 @@ import (
 	"fmt"
 	"os"
 	"reflect"
-	"strings"
 
 	"hakurei.app/check"
 )
@@ -37,8 +36,6 @@ type Ops interface {
 	Bind(source, target *check.Absolute, flags int) Ops
 	// Overlay appends an op that mounts the overlay pseudo filesystem.
 	Overlay(target, state, work *check.Absolute, layers ...*check.Absolute) Ops
-	// OverlayEphemeral appends a MountOverlayOp with an ephemeral upperdir and workdir.
-	OverlayEphemeral(target *check.Absolute, layers ...*check.Absolute) Ops
 	// OverlayReadonly appends an op that mounts the overlay pseudo filesystem readonly.
 	OverlayReadonly(target *check.Absolute, layers ...*check.Absolute) Ops
 
@@ -81,17 +78,17 @@ type FSImplError struct{ Value FilesystemConfig }
 
 func (f FSImplError) Error() string {
 	implType := reflect.TypeOf(f.Value)
-	var buf strings.Builder
-	for implType != nil && implType.Kind() == reflect.Pointer {
-		buf.WriteByte('*')
+	var name string
+	for implType != nil && implType.Kind() == reflect.Ptr {
+		name += "*"
 		implType = implType.Elem()
 	}
 	if implType != nil {
-		buf.WriteString(implType.Name())
+		name += implType.Name()
 	} else {
-		buf.WriteString("nil")
+		name += "nil"
 	}
-	return "implementation " + buf.String() + " not supported"
+	return fmt.Sprintf("implementation %s not supported", name)
 }
 
 // FilesystemConfigJSON is the [json] adapter for [FilesystemConfig].

hst/fs_test.go

@@ -3,7 +3,6 @@ package hst_test
 import (
 	"encoding/json"
 	"errors"
-	"fmt"
 	"os"
 	"reflect"
 	"strings"
@@ -104,7 +103,7 @@ func TestFilesystemConfigJSON(t *testing.T) {
 			t.Run("marshal", func(t *testing.T) {
 				t.Parallel()
 				wantErr := tc.wantErr
-				if _, ok := errors.AsType[hst.FSTypeError](wantErr); ok {
+				if errors.As(wantErr, new(hst.FSTypeError)) {
 					// for unsupported implementation tc
 					wantErr = hst.FSImplError{Value: stubFS{"cat"}}
 				}
@@ -140,7 +139,7 @@ func TestFilesystemConfigJSON(t *testing.T) {
 			t.Run("unmarshal", func(t *testing.T) {
 				t.Parallel()
 				if tc.data == "\x00" && tc.sData == "\x00" {
-					if _, ok := errors.AsType[hst.FSImplError](tc.wantErr); ok {
+					if errors.As(tc.wantErr, new(hst.FSImplError)) {
 						// this error is only returned on marshal
 						return
 					}
@@ -284,11 +283,11 @@ func checkFs(t *testing.T, testCases []fsTestCase) {
 				if !reflect.DeepEqual(ops, &tc.ops) {
 					gotString := new(strings.Builder)
 					for _, op := range *ops {
-						gotString.WriteString("\n" + fmt.Sprintf("%#v", op))
+						gotString.WriteString("\n" + op.String())
 					}
 					wantString := new(strings.Builder)
 					for _, op := range tc.ops {
-						wantString.WriteString("\n" + fmt.Sprintf("%#v", op))
+						wantString.WriteString("\n" + op.String())
 					}
 					t.Errorf("Apply: %s, want %s", gotString, wantString)
 				}
@@ -340,10 +339,6 @@ func (p opsAdapter) Overlay(target, state, work *check.Absolute, layers ...*chec
 	return opsAdapter{p.Ops.Overlay(target, state, work, layers...)}
 }
 
-func (p opsAdapter) OverlayEphemeral(target *check.Absolute, layers ...*check.Absolute) hst.Ops {
-	return opsAdapter{p.Ops.OverlayEphemeral(target, layers...)}
-}
-
 func (p opsAdapter) OverlayReadonly(target *check.Absolute, layers ...*check.Absolute) hst.Ops {
 	return opsAdapter{p.Ops.OverlayReadonly(target, layers...)}
 }

hst/fsephemeral.go

@@ -43,13 +43,18 @@ func (e *FSEphemeral) Apply(z *ApplyState) {
 		return
 	}
 
+	size := e.Size
+	if size < 0 {
+		size = 0
+	}
+
 	perm := e.Perm
 	if perm == 0 {
 		perm = fsEphemeralDefaultPerm
 	}
 
 	if e.Write {
-		z.Tmpfs(e.Target, max(e.Size, 0), perm)
+		z.Tmpfs(e.Target, size, perm)
 	} else {
 		z.Readonly(e.Target, perm)
 	}

hst/fsoverlay.go

@@ -2,7 +2,6 @@ package hst
 
 import (
 	"encoding/gob"
-	"slices"
 	"strings"
 
 	"hakurei.app/check"
@@ -41,7 +40,7 @@ func (o *FSOverlay) Valid() bool {
 	}
 
 	if o.Upper != nil { // rw
-		return o.Work != nil || len(o.Lower) > 0
+		return o.Work != nil && len(o.Lower) > 0
 	} else { // ro
 		return len(o.Lower) >= 2
 	}
@@ -59,11 +58,8 @@ func (o *FSOverlay) Host() []*check.Absolute {
 		return nil
 	}
 	p := make([]*check.Absolute, 0, 2+len(o.Lower))
-	if o.Upper != nil {
-		p = append(p, o.Upper)
-		if o.Work != nil {
-			p = append(p, o.Work)
-		}
+	if o.Upper != nil && o.Work != nil {
+		p = append(p, o.Upper, o.Work)
 	}
 	p = append(p, o.Lower...)
 	return p
@@ -74,18 +70,11 @@ func (o *FSOverlay) Apply(z *ApplyState) {
 		return
 	}
 
-	if o.Upper != nil {
+	if o.Upper != nil && o.Work != nil {
+		z.Overlay(o.Target, o.Upper, o.Work, o.Lower...)
 		if o.Target.Is(fhs.AbsRoot) {
 			z.NoRemountRoot = true
 		}
-		if o.Work != nil {
-			z.Overlay(o.Target, o.Upper, o.Work, o.Lower...)
-		} else {
-			z.OverlayEphemeral(o.Target, slices.Concat(
-				[]*check.Absolute{o.Upper},
-				o.Lower,
-			)...)
-		}
 	} else {
 		z.OverlayReadonly(o.Target, o.Lower...)
 	}
@@ -101,19 +90,12 @@ func (o *FSOverlay) String() string {
 		lower[i] = check.EscapeOverlayDataSegment(a.String())
 	}
 
-	if o.Upper != nil {
-		if o.Work != nil {
-			return "w*" + strings.Join(append([]string{
-				check.EscapeOverlayDataSegment(o.Target.String()),
-				check.EscapeOverlayDataSegment(o.Upper.String()),
-				check.EscapeOverlayDataSegment(o.Work.String())},
-				lower...), check.SpecialOverlayPath)
-		}
-		return "e*" + strings.Join(append([]string{
+	if o.Upper != nil && o.Work != nil {
+		return "w*" + strings.Join(append([]string{
 			check.EscapeOverlayDataSegment(o.Target.String()),
-			check.EscapeOverlayDataSegment(o.Upper.String())},
+			check.EscapeOverlayDataSegment(o.Upper.String()),
+			check.EscapeOverlayDataSegment(o.Work.String())},
 			lower...), check.SpecialOverlayPath)
-
 	} else {
 		return "*" + strings.Join(append([]string{
 			check.EscapeOverlayDataSegment(o.Target.String())},

hst/fsoverlay_test.go

@@ -5,7 +5,6 @@ import (
 
 	"hakurei.app/check"
 	"hakurei.app/container"
-	"hakurei.app/fhs"
 	"hakurei.app/hst"
 )
 
@@ -15,7 +14,7 @@ func TestFSOverlay(t *testing.T) {
 	checkFs(t, []fsTestCase{
 		{"nil", (*hst.FSOverlay)(nil), false, nil, nil, nil, "<invalid>"},
 		{"nil lower", &hst.FSOverlay{Target: m("/etc"), Lower: []*check.Absolute{nil}}, false, nil, nil, nil, "<invalid>"},
-		{"zero lower", &hst.FSOverlay{Target: m("/etc"), Work: m("/")}, false, nil, nil, nil, "<invalid>"},
+		{"zero lower", &hst.FSOverlay{Target: m("/etc"), Upper: m("/"), Work: m("/")}, false, nil, nil, nil, "<invalid>"},
 		{"zero lower ro", &hst.FSOverlay{Target: m("/etc")}, false, nil, nil, nil, "<invalid>"},
 		{"short lower", &hst.FSOverlay{Target: m("/etc"), Lower: ms("/etc")}, false, nil, nil, nil, "<invalid>"},
 
@@ -63,16 +62,5 @@ func TestFSOverlay(t *testing.T) {
 			Work:   m("/tmp/work"),
 		}}, m("/"), ms("/tmp/upper", "/tmp/work", "/tmp/.src0", "/tmp/.src1"),
 			"w*/:/tmp/upper:/tmp/work:/tmp/.src0:/tmp/.src1"},
-
-		{"ephemeral", &hst.FSOverlay{
-			Target: m("/"),
-			Lower:  ms("/tmp/.src0", "/tmp/.src1"),
-			Upper:  m("/tmp/upper"),
-		}, true, container.Ops{&container.MountOverlayOp{
-			Target: m("/"),
-			Lower:  ms("/tmp/upper", "/tmp/.src0", "/tmp/.src1"),
-			Upper:  fhs.AbsRoot,
-		}}, m("/"), ms("/tmp/upper", "/tmp/.src0", "/tmp/.src1"),
-			"e*/:/tmp/upper:/tmp/.src0:/tmp/.src1"},
 	})
 }

hst/hst_test.go

@@ -244,9 +244,7 @@ func TestTemplate(t *testing.T) {
 		"tty": true,
 		"multiarch": true,
 		"map_real_uid": true,
-		"noplace": true,
 		"device": true,
-		"cover_run": true,
 		"share_runtime": true,
 		"share_tmpdir": true
 	}

internal/dbus/address.go

@@ -80,7 +80,7 @@ func unescapeValue(v []byte) (val []byte, errno ParseError) {
 			continue
 		}
 
-		if found := bytes.Contains([]byte("-_/.\\*"), []byte{b}); found { // - // _/.\*
+		if ib := bytes.IndexByte([]byte("-_/.\\*"), b); ib != -1 { // - // _/.\*
 			goto opt
 		} else if b >= '0' && b <= '9' { // 0-9
 			goto opt
@@ -101,7 +101,7 @@ func unescapeValue(v []byte) (val []byte, errno ParseError) {
 			break
 		}
 		if c, err := hex.Decode(val[i:i+1], v[iu+1:iu+3]); err != nil {
-			if _, ok := errors.AsType[hex.InvalidByteError](err); ok {
+			if errors.As(err, new(hex.InvalidByteError)) {
 				errno = ErrBadValHexByte
 				break
 			}

internal/env/env.go

@@ -1,29 +1,21 @@
-// Package env provides the [Paths] struct for efficiently building paths from
-// the environment.
+// Package env provides the [Paths] struct for efficiently building paths from the environment.
 package env
 
 import (
-	"errors"
-	"io/fs"
 	"log"
 	"os"
 	"strconv"
 
 	"hakurei.app/check"
-	"hakurei.app/fhs"
 	"hakurei.app/hst"
 )
 
-const VarRunNscd = fhs.Var + "run/nscd"
-
 // Paths holds paths copied from the environment and is used to create [hst.Paths].
 type Paths struct {
 	// TempDir is returned by [os.TempDir].
 	TempDir *check.Absolute
 	// RuntimePath is copied from $XDG_RUNTIME_DIR.
 	RuntimePath *check.Absolute
-	// Whether [VarRunNscd] is a directory.
-	HasNscd bool
 }
 
 // Copy expands [Paths] into [hst.Paths].
@@ -45,17 +37,14 @@ func (env *Paths) Copy(v *hst.Paths, userid int) {
 }
 
 // CopyPaths returns a populated [Paths].
-func CopyPaths() *Paths {
-	return CopyPathsFunc(log.Fatalf, os.TempDir, os.Getenv, os.Stat)
-}
+func CopyPaths() *Paths { return CopyPathsFunc(log.Fatalf, os.TempDir, os.Getenv) }
 
-// CopyPathsFunc returns a populated [Paths], using the provided [log.Fatalf],
-// [os.TempDir], [os.Getenv] functions.
+// CopyPathsFunc returns a populated [Paths],
+// using the provided [log.Fatalf], [os.TempDir], [os.Getenv] functions.
 func CopyPathsFunc(
 	fatalf func(format string, v ...any),
 	tempdir func() string,
 	getenv func(key string) string,
-	stat func(name string) (fs.FileInfo, error),
 ) *Paths {
 	const xdgRuntimeDir = "XDG_RUNTIME_DIR"
 
@@ -72,14 +61,5 @@ func CopyPathsFunc(
 		env.RuntimePath = a
 	}
 
-	if fi, err := stat(VarRunNscd); err != nil {
-		if !errors.Is(err, fs.ErrNotExist) {
-			fatalf("%v", err)
-			panic("unreachable")
-		}
-	} else {
-		env.HasNscd = fi.IsDir()
-	}
-
 	return &env
 }

internal/env/env_test.go

@@ -2,7 +2,6 @@ package env_test
 
 import (
 	"fmt"
-	"io/fs"
 	"reflect"
 	"testing"
 
@@ -105,9 +104,7 @@ func TestCopyPaths(t *testing.T) {
 					t.Fatalf("fatalf: %q, want %q", got, tc.fatal)
 				}
 				panic(stub.PanicExit)
-			}, func() string { return tc.tmp }, func(key string) string { return tc.env[key] }, func(name string) (fs.FileInfo, error) {
-				return nil, fs.ErrNotExist
-			})
+			}, func() string { return tc.tmp }, func(key string) string { return tc.env[key] })
 
 			if tc.fatal != "" {
 				t.Fatalf("copyPaths: expected fatal %q", tc.fatal)

internal/kobject/event.go

@@ -2,7 +2,6 @@ package kobject
 
 import (
 	"errors"
-	"maps"
 	"strconv"
 	"strings"
 	"unsafe"
@@ -29,22 +28,6 @@ type Event struct {
 	Subsystem string `json:"subsystem"`
 }
 
-// Clone returns a copy of e.
-func (e *Event) Clone() Event {
-	v := *e
-	v.Env = maps.Clone(e.Env)
-	return v
-}
-
-// makeColdboot allocates a new [Object] from e in [StateColdboot].
-func (e *Event) makeColdboot() *Object {
-	return &Object{
-		State:     StateColdboot,
-		DevPath:   e.DevPath,
-		Subsystem: e.Subsystem,
-	}
-}
-
 // Populate populates e with the contents of a [uevent.Message].
 //
 // The ACTION and DEVPATH environment variables are ignored and assumed to be

internal/kobject/kobject.go

@@ -1,491 +0,0 @@
-// Package kobject interprets uevent messages from a NETLINK_KOBJECT_UEVENT socket.
-package kobject
-
-import (
-	"context"
-	"fmt"
-	"maps"
-	"slices"
-	"strconv"
-	"sync"
-
-	"hakurei.app/internal/report"
-	"hakurei.app/internal/uevent"
-)
-
-const (
-	// StateColdboot denotes an [Object] populated by a coldboot event. It is
-	// eligible for all event actions.
-	StateColdboot = iota
-	// StateNew denotes an [Object] previously populated by a [uevent.KOBJ_ADD]
-	// event, but has not yet been targeted by a [uevent.KOBJ_BIND] event, or
-	// has been targeted by a [uevent.KOBJ_UNBIND] event.
-	StateNew
-	// StateBound denotes an [Object] that has been targeted by a
-	// [uevent.KOBJ_BIND] and has not been targeted by a [uevent.KOBJ_UNBIND]
-	// after that.
-	StateBound
-)
-
-// Object represents a kernel object.
-type Object struct {
-	// Origin of the object.
-	State int `json:"state,omitempty"`
-	// Set by [uevent.KOBJ_OFFLINE] and [uevent.KOBJ_ONLINE].
-	Offline bool `json:"offline,omitempty"`
-
-	// alloc_uevent_skb: devpath
-	DevPath string `json:"devpath"`
-	// registered per-driver (optional)
-	ModAlias string `json:"modalias,omitempty"`
-	// dev_driver_uevent: drv->name (optional)
-	Driver string `json:"driver,omitempty"`
-
-	// SUBSYSTEM value set by the kernel.
-	Subsystem string `json:"subsystem"`
-
-	// Uninterpreted environment variable pairs. An entry missing a separator
-	// gains the value "\x00".
-	Env map[string]string `json:"env"`
-}
-
-// Clone returns the address of a copy of o.
-func (o *Object) Clone() *Object {
-	v := *o
-	v.Env = maps.Clone(o.Env)
-	return &v
-}
-
-// GoString returns compound literal for the underlying value.
-func (o *Object) GoString() string {
-	return fmt.Sprintf("&%#v", *o)
-}
-
-// merge merges uninterpreted environment variable pairs from an [Event].
-func (o *Object) merge(env map[string]string) {
-	for k, v := range env {
-		if v == "\x00" {
-			continue
-		}
-
-		switch k {
-		case "MODALIAS":
-			o.ModAlias = v
-			continue
-
-		case "DRIVER":
-			o.Driver = v
-			continue
-
-		default:
-			if o.Env == nil {
-				o.Env = make(map[string]string)
-			}
-			o.Env[k] = v
-		}
-	}
-}
-
-// update updates o with pairs from env, optionally stripping visited pairs.
-func (o *Object) update(env map[string]string, strip bool) {
-	for k := range o.Env {
-		if v, ok := env[k]; ok {
-			if strip {
-				delete(env, k)
-			}
-			o.Env[k] = v
-		}
-	}
-}
-
-// A pendingIterator is a callback currently iterating through objects targeted
-// by ongoing events.
-type pendingIterator struct {
-	f    func(o *Object, act uevent.KobjectAction) bool
-	done chan<- struct{}
-}
-
-// State processes a stream of [Event] populated from [uevent.Message] received
-// from a NETLINK_KOBJECT_UEVENT socket and presents an efficient representation
-// of kernel state.
-type State struct {
-	// Next expected SEQNUM.
-	seq uint64
-	// DevPath to environment variables.
-	uevent map[string]*Object
-	// Synchronises access to uevent and its objects.
-	ueventMu sync.RWMutex
-	// Alive iterators.
-	iter []*pendingIterator
-	// Synchronises access to iter.
-	iterMu sync.Mutex
-	// UUID for synthetic [uevent.Coldboot] events.
-	coldboot uevent.UUID
-	// Called on [uevent.KOBJ_CHANGE] with stripped environment variables.
-	handleChange func(o *Object, env map[string]string)
-	// Reports errors populating [Event] from [uevent.Message]. A user-supplied
-	// nil value is replaced with a noop.
-	reportErr func(error)
-}
-
-// New returns the address of a new [State].
-func New(
-	coldboot uevent.UUID,
-	handleChange func(o *Object, env map[string]string),
-	reportErr func(error),
-) *State {
-	return &State{
-		uevent:       make(map[string]*Object),
-		coldboot:     coldboot,
-		handleChange: handleChange,
-		reportErr:    reportErr,
-	}
-}
-
-// deleteIter removes an iterator from s. Must be called after acquiring iterMu.
-func (s *State) deleteIter(p *pendingIterator) {
-	s.iter = slices.DeleteFunc(s.iter, func(v *pendingIterator) bool {
-		return p == v
-	})
-}
-
-// dispatchIter broadcasts an [Object] to all alive iterators.
-func (s *State) dispatchIter(o *Object, act uevent.KobjectAction) {
-	s.iterMu.Lock()
-	defer s.iterMu.Unlock()
-
-	for _, p := range s.iter {
-		if !p.f(o, act) {
-			s.deleteIter(p)
-			close(p.done)
-		}
-	}
-}
-
-// Range calls f on all current and upcoming [Object] values tracked by s until
-// f returns false or the context is cancelled. f must not retain o or modify
-// the value it points to.
-func (s *State) Range(
-	ctx context.Context,
-	f func(o *Object, act uevent.KobjectAction) bool,
-) {
-	done := make(chan struct{})
-	p := pendingIterator{f, done}
-
-	s.iterMu.Lock()
-	s.ueventMu.RLock()
-	for _, o := range s.uevent {
-		if !f(o, uevent.KOBJ_ADD) {
-			s.ueventMu.RUnlock()
-			s.iterMu.Unlock()
-			return
-		}
-	}
-	s.ueventMu.RUnlock()
-	s.iter = append(s.iter, &p)
-	s.iterMu.Unlock()
-
-	select {
-	case <-ctx.Done():
-		s.iterMu.Lock()
-		s.deleteIter(&p)
-		s.iterMu.Unlock()
-		return
-
-	case <-done:
-		// deregistered by dispatchIter
-		return
-	}
-}
-
-// An EventError describes a malformed or inconsistent [Event].
-type EventError struct {
-	Kind int     `json:"fault"`
-	E    Event   `json:"event"`
-	O    *Object `json:"object,omitempty"`
-}
-
-var _ report.RepresentableError = EventError{}
-
-func (EventError) Representable() {}
-
-const (
-	// EUnexpectedColdboot is reported for a coldboot event with action other
-	// than the expected [uevent.KOBJ_ADD].
-	EUnexpectedColdboot = iota
-	// EDuplicateAdd is reported for a [uevent.KOBJ_ADD] event on a
-	// still-existing entry that was not the result of a coldboot.
-	EDuplicateAdd
-	// EBadTarget is reported for an event on a nonexistent [Object]. This is
-	// generally only possible before coldboot completes.
-	EBadTarget
-	// ERemoveState is reported for a [uevent.KOBJ_REMOVE] event targeting an
-	// entry in a state other than [StateColdboot] and [StateNew].
-	ERemoveState
-	// EUnexpectedOffline is reported for a [uevent.KOBJ_OFFLINE] or
-	// [uevent.KOBJ_ONLINE] event targeting an already offline or online object.
-	EUnexpectedOffline
-	// EBindState is reported for a [uevent.KOBJ_BIND] event targeting an entry
-	// in a state other than [StateColdboot] and [StateNew].
-	EBindState
-	// EUnbindState is reported for a [uevent.KOBJ_UNBIND] event targeting an
-	// entry in a state other than [StateBound].
-	EUnbindState
-	// EMalformedMove is reported for a [uevent.KOBJ_MOVE] event missing the
-	// DEVPATH_OLD environment variable.
-	EMalformedMove
-)
-
-func (e EventError) Error() string {
-	switch e.Kind {
-	case EUnexpectedColdboot:
-		return "unexpected " + e.E.Action.String() + " coldboot event"
-	case EDuplicateAdd:
-		return "duplicate add event on devpath " + strconv.Quote(e.E.DevPath)
-	case EBadTarget:
-		return "unexpected " + e.E.Action.String() + " event on devpath " +
-			strconv.Quote(e.E.DevPath)
-	case ERemoveState:
-		if e.O == nil {
-			return "invalid remove event error"
-		}
-		return "remove event targeting devpath " + strconv.Quote(e.E.DevPath) +
-			" in state " + strconv.Itoa(e.O.State)
-	case EUnexpectedOffline:
-		if e.O == nil {
-			return "invalid unexpected offline error"
-		}
-		if e.O.Offline {
-			return "offline event targeting devpath " + strconv.Quote(e.E.DevPath)
-		}
-		return "online event targeting devpath " + strconv.Quote(e.E.DevPath)
-	case EBindState:
-		if e.O == nil {
-			return "invalid bind state error"
-		}
-		return "bind event targeting devpath " + strconv.Quote(e.E.DevPath) +
-			" in state " + strconv.Itoa(e.O.State)
-	case EUnbindState:
-		if e.O == nil {
-			return "invalid unbind state error"
-		}
-		return "unbind event targeting devpath " + strconv.Quote(e.E.DevPath) +
-			" in state " + strconv.Itoa(e.O.State)
-	case EMalformedMove:
-		return "move event targeting devpath " + strconv.Quote(e.E.DevPath) +
-			" missing DEVPATH_OLD"
-
-	default:
-		return "invalid event error kind " + strconv.Itoa(e.Kind)
-	}
-}
-
-// NewError returns a new [EventError] for e and o.
-func (e *Event) NewError(kind int, o *Object) error {
-	if o != nil {
-		o = o.Clone()
-	}
-	return EventError{kind, e.Clone(), o}
-}
-
-// processEvent merges an event into s.
-func (s *State) processEvent(e *Event) {
-	s.ueventMu.Lock()
-	defer s.ueventMu.Unlock()
-
-	coldboot := e.Synth != nil
-	if e.Action != uevent.KOBJ_ADD && coldboot {
-		s.reportErr(e.NewError(EUnexpectedColdboot, nil))
-		return
-	}
-
-	switch act := e.Action; act {
-	case uevent.KOBJ_ADD:
-		if e.Synth == nil {
-			if o, ok := s.uevent[e.DevPath]; ok {
-				s.reportErr(e.NewError(EDuplicateAdd, o))
-				o.merge(e.Env)
-				s.dispatchIter(o, act)
-				return
-			}
-		}
-		o := e.makeColdboot()
-		if !coldboot {
-			o.State = StateNew
-		}
-		o.merge(e.Env)
-		s.uevent[e.DevPath] = o
-		s.dispatchIter(o, act)
-		return
-
-	case uevent.KOBJ_REMOVE:
-		if o, ok := s.uevent[e.DevPath]; !ok {
-			s.reportErr(e.NewError(EBadTarget, nil))
-			return
-		} else if o.State != StateColdboot && o.State != StateNew {
-			s.reportErr(e.NewError(ERemoveState, o))
-		}
-		delete(s.uevent, e.DevPath)
-		return
-
-	case uevent.KOBJ_CHANGE:
-		o, ok := s.uevent[e.DevPath]
-		if !ok {
-			s.reportErr(e.NewError(EBadTarget, nil))
-			// this suffers from the coldboot race window similar to KOBJ_MOVE,
-			// however this action combines driver-specific and change-specific
-			// environment variables and combines them with environment
-			// variables meant to convey state of the kobject, and it is not
-			// possible to reliably separate them, so this fallback avoids the
-			// race at the cost of including some garbage in tracked state
-			o = e.makeColdboot()
-			o.merge(e.Env)
-			s.uevent[e.DevPath] = o
-			s.dispatchIter(o, act)
-			return
-		}
-		o.update(e.Env, true)
-		if s.handleChange != nil {
-			s.handleChange(o, e.Env)
-		}
-		s.dispatchIter(o, act)
-		return
-
-	case uevent.KOBJ_MOVE:
-		var o *Object
-		if old, ok := e.Env["DEVPATH_OLD"]; !ok {
-			s.reportErr(e.NewError(EMalformedMove, nil))
-			// not reached
-			o = e.makeColdboot()
-		} else if o, ok = s.uevent[old]; !ok {
-			s.reportErr(e.NewError(EBadTarget, nil))
-			// this generally happens during coldboot, dropping the event here
-			// may cause inconsistent state if the coldboot event for this
-			// object was generated before the bind event
-			delete(e.Env, "DEVPATH_OLD")
-			o = e.makeColdboot()
-		} else {
-			delete(s.uevent, old)
-			delete(e.Env, "DEVPATH_OLD")
-		}
-		o.merge(e.Env)
-		s.uevent[e.DevPath] = o
-		o.DevPath = e.DevPath
-		s.dispatchIter(o, act)
-		return
-
-	case uevent.KOBJ_ONLINE:
-		o, ok := s.uevent[e.DevPath]
-		if !ok {
-			s.reportErr(e.NewError(EBadTarget, nil))
-			// coldboot race window similar to an unexpected KOBJ_MOVE
-			o = e.makeColdboot()
-			s.uevent[e.DevPath] = o
-			o.merge(e.Env)
-		}
-		if !o.Offline {
-			s.reportErr(e.NewError(EUnexpectedOffline, o))
-		}
-		o.Offline = false
-		s.dispatchIter(o, act)
-		return
-
-	case uevent.KOBJ_OFFLINE:
-		o, ok := s.uevent[e.DevPath]
-		if !ok {
-			s.reportErr(e.NewError(EBadTarget, nil))
-			// coldboot race window similar to an unexpected KOBJ_MOVE
-			o = e.makeColdboot()
-			s.uevent[e.DevPath] = o
-			o.merge(e.Env)
-		}
-		if o.Offline {
-			s.reportErr(e.NewError(EUnexpectedOffline, o))
-		}
-		o.Offline = true
-		s.dispatchIter(o, act)
-		return
-
-	case uevent.KOBJ_BIND:
-		o, ok := s.uevent[e.DevPath]
-		if !ok {
-			s.reportErr(e.NewError(EBadTarget, nil))
-			// coldboot race window similar to an unexpected KOBJ_MOVE
-			o = e.makeColdboot()
-			s.uevent[e.DevPath] = o
-		}
-		if o.State != StateColdboot && o.State != StateNew {
-			s.reportErr(e.NewError(EBindState, o))
-		}
-		o.State = StateBound
-		o.merge(e.Env)
-		s.dispatchIter(o, act)
-		return
-
-	case uevent.KOBJ_UNBIND:
-		o, ok := s.uevent[e.DevPath]
-		if !ok {
-			s.reportErr(e.NewError(EBadTarget, nil))
-			// coldboot race window similar to an unexpected KOBJ_MOVE, but does
-			// not result in inconsistent state if dropped
-			return
-		}
-		if o.State != StateBound {
-			s.reportErr(e.NewError(EUnbindState, o))
-		}
-		o.State = StateNew
-		o.Driver = ""
-		s.dispatchIter(o, act)
-		return
-
-	default: // not reached
-		s.reportErr(fmt.Errorf("invalid action %d", e.Action))
-		return
-	}
-}
-
-// BadSequenceError is reported for an unexpected SEQNUM.
-type BadSequenceError struct{ Got, Want uint64 }
-
-func (e BadSequenceError) Error() string {
-	return "SEQNUM=" + strconv.FormatUint(e.Got, 10) +
-		", want " + strconv.FormatUint(e.Want, 10)
-}
-
-// Consume receives uevent messages and updates s to reflect state of kernel.
-func (s *State) Consume(ctx context.Context, events <-chan *uevent.Message) {
-	if s.uevent == nil {
-		s.uevent = make(map[string]*Object)
-	}
-	if s.reportErr == nil {
-		s.reportErr = func(error) {}
-	}
-
-	var e Event
-	for {
-		select {
-		case <-ctx.Done():
-			return
-
-		case m, ok := <-events:
-			if !ok {
-				return
-			}
-			e.Populate(s.reportErr, m)
-
-			// skip external synthetic event
-			if e.Synth != nil && *e.Synth != s.coldboot {
-				continue
-			}
-
-			if s.seq == 0 {
-				s.seq = e.Sequence
-			}
-			if s.seq != e.Sequence {
-				s.reportErr(BadSequenceError{e.Sequence, s.seq})
-			}
-			s.seq++
-			s.processEvent(&e)
-		}
-	}
-}

internal/kobject/testdata/00-coldboot

@@ -1,266 +0,0 @@
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXPWRBN:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXPWRBN:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:LNXPWRBN:","SEQNUM=777"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup7","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup7","SUBSYSTEM=wakeup","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=778"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0010:00/LNXCPU:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0010:00/LNXCPU:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:LNXCPU:","SEQNUM=779"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0010:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/ACPI0010:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:ACPI0010:PNP0A05:","SEQNUM=780"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0103:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0103:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0103:","SEQNUM=781"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0A06:","SEQNUM=782"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:01","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:01","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0A06:","SEQNUM=783"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:02","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:02","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0A06:","SEQNUM=784"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/QEMU0002:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/QEMU0002:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:QEMU0002:","SEQNUM=785"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=786"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00/wakeup/wakeup0","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00/wakeup/wakeup0","SUBSYSTEM=wakeup","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=787"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0303:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0303:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0303:","SEQNUM=788"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0400:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0400:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0400:","SEQNUM=789"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0501:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0501:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0501:","SEQNUM=790"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0700:00/device:02","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0700:00/device:02","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=791"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0700:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0700:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0700:","SEQNUM=792"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0B00:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0B00:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0B00:","SEQNUM=793"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0F13:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0F13:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0F13:","SEQNUM=794"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=795"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/wakeup/wakeup1","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/wakeup/wakeup1","SUBSYSTEM=wakeup","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=796"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=797"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03/wakeup/wakeup2","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03/wakeup/wakeup2","SUBSYSTEM=wakeup","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=798"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:04","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:04","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=799"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:04/wakeup/wakeup3","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:04/wakeup/wakeup3","SUBSYSTEM=wakeup","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=800"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:05","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:05","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=801"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:05/wakeup/wakeup4","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:05/wakeup/wakeup4","SUBSYSTEM=wakeup","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=802"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:06","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:06","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=803"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:06/wakeup/wakeup5","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:06/wakeup/wakeup5","SUBSYSTEM=wakeup","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=804"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=805"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=806"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=807"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0a","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0a","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=808"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0b","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0b","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=809"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0c","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0c","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=810"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0d","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0d","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=811"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0e","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=812"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0f","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0f","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=813"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:10","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:10","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=814"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:11","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:11","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=815"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:12","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:12","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=816"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=817"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:14","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:14","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=818"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:15","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:15","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=819"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:16","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:16","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=820"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:17","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:17","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=821"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:18","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:18","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=822"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:19","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:19","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=823"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1a","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1a","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=824"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1b","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1b","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=825"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1c","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1c","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=826"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1d","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1d","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=827"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1e","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1e","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=828"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1f","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:1f","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=829"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:20","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:20","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=830"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:21","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:21","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=831"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:22","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:22","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=832"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0A03:","SEQNUM=833"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup6","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup6","SUBSYSTEM=wakeup","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=834"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0C0F:","SEQNUM=835"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0C0F:","SEQNUM=836"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:02","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:02","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0C0F:","SEQNUM=837"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:03","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:03","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0C0F:","SEQNUM=838"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:04","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:04","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0C0F:","SEQNUM=839"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:LNXSYBUS:","SEQNUM=840"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:01","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:01","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:LNXSYBUS:","SEQNUM=841"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00","SUBSYSTEM=acpi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:LNXSYSTM:","SEQNUM=842"]}
-{"action":"add","devpath":"/devices/breakpoint","env":["ACTION=add","DEVPATH=/devices/breakpoint","SUBSYSTEM=event_source","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=843"]}
-{"action":"add","devpath":"/devices/cpu","env":["ACTION=add","DEVPATH=/devices/cpu","SUBSYSTEM=event_source","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=844"]}
-{"action":"add","devpath":"/devices/kprobe","env":["ACTION=add","DEVPATH=/devices/kprobe","SUBSYSTEM=event_source","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=845"]}
-{"action":"add","devpath":"/devices/msr","env":["ACTION=add","DEVPATH=/devices/msr","SUBSYSTEM=event_source","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=846"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:00.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:00.0","SUBSYSTEM=pci","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","PCI_CLASS=60000","PCI_ID=8086:1237","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:00.0","MODALIAS=pci:v00008086d00001237sv00001AF4sd00001100bc06sc00i00","SEQNUM=847"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.0","SUBSYSTEM=pci","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","PCI_CLASS=60100","PCI_ID=8086:7000","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:01.0","MODALIAS=pci:v00008086d00007000sv00001AF4sd00001100bc06sc01i00","SEQNUM=848"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata1/ata_port/ata1","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata1/ata_port/ata1","SUBSYSTEM=ata_port","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=849"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata1/host0/scsi_host/host0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata1/host0/scsi_host/host0","SUBSYSTEM=scsi_host","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=850"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata1/host0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata1/host0","SUBSYSTEM=scsi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=scsi_host","SEQNUM=851"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata1/link1/ata_link/link1","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata1/link1/ata_link/link1","SUBSYSTEM=ata_link","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=852"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.0/ata_device/dev1.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.0/ata_device/dev1.0","SUBSYSTEM=ata_device","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=853"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.1/ata_device/dev1.1","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.1/ata_device/dev1.1","SUBSYSTEM=ata_device","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=854"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/ata_port/ata2","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/ata_port/ata2","SUBSYSTEM=ata_port","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=855"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/host1/scsi_host/host1","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/host1/scsi_host/host1","SUBSYSTEM=scsi_host","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=856"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/bsg/1:0:0:0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/bsg/1:0:0:0","SUBSYSTEM=bsg","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=251","MINOR=0","DEVNAME=bsg/1:0:0:0","SEQNUM=857"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/scsi_device/1:0:0:0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/scsi_device/1:0:0:0","SUBSYSTEM=scsi_device","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=858"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0","SUBSYSTEM=scsi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=scsi_device","MODALIAS=scsi:t-0x05","SEQNUM=859"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0","SUBSYSTEM=scsi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=scsi_target","SEQNUM=860"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/host1","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/host1","SUBSYSTEM=scsi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=scsi_host","SEQNUM=861"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/link2/ata_link/link2","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/link2/ata_link/link2","SUBSYSTEM=ata_link","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=862"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/link2/dev2.0/ata_device/dev2.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/link2/dev2.0/ata_device/dev2.0","SUBSYSTEM=ata_device","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=863"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1/ata2/link2/dev2.1/ata_device/dev2.1","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1/ata2/link2/dev2.1/ata_device/dev2.1","SUBSYSTEM=ata_device","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=864"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.1","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.1","SUBSYSTEM=pci","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DRIVER=ata_piix","PCI_CLASS=10180","PCI_ID=8086:7010","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:01.1","MODALIAS=pci:v00008086d00007010sv00001AF4sd00001100bc01sc01i80","SEQNUM=865"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:01.3","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:01.3","SUBSYSTEM=pci","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","PCI_CLASS=68000","PCI_ID=8086:7113","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:01.3","MODALIAS=pci:v00008086d00007113sv00001AF4sd00001100bc06sc80i00","SEQNUM=866"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:02.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:02.0","SUBSYSTEM=pci","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","PCI_CLASS=20000","PCI_ID=8086:100E","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:02.0","MODALIAS=pci:v00008086d0000100Esv00001AF4sd00001100bc02sc00i00","SEQNUM=867"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:03.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:03.0","SUBSYSTEM=pci","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DRIVER=virtio-pci","PCI_CLASS=10000","PCI_ID=1AF4:1001","PCI_SUBSYS_ID=1AF4:0002","PCI_SLOT_NAME=0000:00:03.0","MODALIAS=pci:v00001AF4d00001001sv00001AF4sd00000002bc01sc00i00","SEQNUM=868"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:03.0/virtio0/block/vda","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:03.0/virtio0/block/vda","SUBSYSTEM=block","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=254","MINOR=0","DEVNAME=vda","DEVTYPE=disk","DISKSEQ=1","SEQNUM=869"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:03.0/virtio0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:03.0/virtio0","SUBSYSTEM=virtio","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DRIVER=virtio_blk","MODALIAS=virtio:d00000002v00001AF4","SEQNUM=870"]}
-{"action":"add","devpath":"/devices/pci0000:00/QEMU0002:00","env":["ACTION=add","DEVPATH=/devices/pci0000:00/QEMU0002:00","SUBSYSTEM=platform","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:QEMU0002:","SEQNUM=871"]}
-{"action":"add","devpath":"/devices/pci0000:00/pci_bus/0000:00","env":["ACTION=add","DEVPATH=/devices/pci0000:00/pci_bus/0000:00","SUBSYSTEM=pci_bus","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=872"]}
-{"action":"add","devpath":"/devices/platform/PNP0103:00","env":["ACTION=add","DEVPATH=/devices/platform/PNP0103:00","SUBSYSTEM=platform","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=acpi:PNP0103:","SEQNUM=873"]}
-{"action":"add","devpath":"/devices/platform/pcspkr","env":["ACTION=add","DEVPATH=/devices/platform/pcspkr","SUBSYSTEM=platform","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=platform:pcspkr","SEQNUM=874"]}
-{"action":"add","devpath":"/devices/platform/reg-dummy/regulator/regulator.0","env":["ACTION=add","DEVPATH=/devices/platform/reg-dummy/regulator/regulator.0","SUBSYSTEM=regulator","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=875"]}
-{"action":"add","devpath":"/devices/platform/reg-dummy","env":["ACTION=add","DEVPATH=/devices/platform/reg-dummy","SUBSYSTEM=platform","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DRIVER=reg-dummy","MODALIAS=platform:reg-dummy","SEQNUM=876"]}
-{"action":"add","devpath":"/devices/platform/serial8250/serial8250:0/serial8250:0.1/tty/ttyS1","env":["ACTION=add","DEVPATH=/devices/platform/serial8250/serial8250:0/serial8250:0.1/tty/ttyS1","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=65","DEVNAME=ttyS1","SEQNUM=877"]}
-{"action":"add","devpath":"/devices/platform/serial8250/serial8250:0/serial8250:0.1","env":["ACTION=add","DEVPATH=/devices/platform/serial8250/serial8250:0/serial8250:0.1","SUBSYSTEM=serial-base","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=port","DRIVER=port","SEQNUM=878"]}
-{"action":"add","devpath":"/devices/platform/serial8250/serial8250:0/serial8250:0.2/tty/ttyS2","env":["ACTION=add","DEVPATH=/devices/platform/serial8250/serial8250:0/serial8250:0.2/tty/ttyS2","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=66","DEVNAME=ttyS2","SEQNUM=879"]}
-{"action":"add","devpath":"/devices/platform/serial8250/serial8250:0/serial8250:0.2","env":["ACTION=add","DEVPATH=/devices/platform/serial8250/serial8250:0/serial8250:0.2","SUBSYSTEM=serial-base","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=port","DRIVER=port","SEQNUM=880"]}
-{"action":"add","devpath":"/devices/platform/serial8250/serial8250:0/serial8250:0.3/tty/ttyS3","env":["ACTION=add","DEVPATH=/devices/platform/serial8250/serial8250:0/serial8250:0.3/tty/ttyS3","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=67","DEVNAME=ttyS3","SEQNUM=881"]}
-{"action":"add","devpath":"/devices/platform/serial8250/serial8250:0/serial8250:0.3","env":["ACTION=add","DEVPATH=/devices/platform/serial8250/serial8250:0/serial8250:0.3","SUBSYSTEM=serial-base","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=port","DRIVER=port","SEQNUM=882"]}
-{"action":"add","devpath":"/devices/platform/serial8250/serial8250:0","env":["ACTION=add","DEVPATH=/devices/platform/serial8250/serial8250:0","SUBSYSTEM=serial-base","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=ctrl","DRIVER=ctrl","SEQNUM=883"]}
-{"action":"add","devpath":"/devices/platform/serial8250","env":["ACTION=add","DEVPATH=/devices/platform/serial8250","SUBSYSTEM=platform","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DRIVER=serial8250","MODALIAS=platform:serial8250","SEQNUM=884"]}
-{"action":"add","devpath":"/devices/pnp0/00:00","env":["ACTION=add","DEVPATH=/devices/pnp0/00:00","SUBSYSTEM=pnp","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=885"]}
-{"action":"add","devpath":"/devices/pnp0/00:01","env":["ACTION=add","DEVPATH=/devices/pnp0/00:01","SUBSYSTEM=pnp","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=886"]}
-{"action":"add","devpath":"/devices/pnp0/00:02","env":["ACTION=add","DEVPATH=/devices/pnp0/00:02","SUBSYSTEM=pnp","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=887"]}
-{"action":"add","devpath":"/devices/pnp0/00:03","env":["ACTION=add","DEVPATH=/devices/pnp0/00:03","SUBSYSTEM=pnp","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=888"]}
-{"action":"add","devpath":"/devices/pnp0/00:04/00:04:0/00:04:0.0/tty/ttyS0","env":["ACTION=add","DEVPATH=/devices/pnp0/00:04/00:04:0/00:04:0.0/tty/ttyS0","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=64","DEVNAME=ttyS0","SEQNUM=889"]}
-{"action":"add","devpath":"/devices/pnp0/00:04/00:04:0/00:04:0.0","env":["ACTION=add","DEVPATH=/devices/pnp0/00:04/00:04:0/00:04:0.0","SUBSYSTEM=serial-base","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=port","DRIVER=port","SEQNUM=890"]}
-{"action":"add","devpath":"/devices/pnp0/00:04/00:04:0","env":["ACTION=add","DEVPATH=/devices/pnp0/00:04/00:04:0","SUBSYSTEM=serial-base","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DEVTYPE=ctrl","DRIVER=ctrl","SEQNUM=891"]}
-{"action":"add","devpath":"/devices/pnp0/00:04","env":["ACTION=add","DEVPATH=/devices/pnp0/00:04","SUBSYSTEM=pnp","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DRIVER=serial","SEQNUM=892"]}
-{"action":"add","devpath":"/devices/pnp0/00:05","env":["ACTION=add","DEVPATH=/devices/pnp0/00:05","SUBSYSTEM=pnp","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=893"]}
-{"action":"add","devpath":"/devices/software","env":["ACTION=add","DEVPATH=/devices/software","SUBSYSTEM=event_source","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=894"]}
-{"action":"add","devpath":"/devices/system/clockevents/broadcast","env":["ACTION=add","DEVPATH=/devices/system/clockevents/broadcast","SUBSYSTEM=clockevents","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=895"]}
-{"action":"add","devpath":"/devices/system/clockevents/clockevent0","env":["ACTION=add","DEVPATH=/devices/system/clockevents/clockevent0","SUBSYSTEM=clockevents","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=896"]}
-{"action":"add","devpath":"/devices/system/clocksource/clocksource0","env":["ACTION=add","DEVPATH=/devices/system/clocksource/clocksource0","SUBSYSTEM=clocksource","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=897"]}
-{"action":"add","devpath":"/devices/system/container/PNP0A06:00","env":["ACTION=add","DEVPATH=/devices/system/container/PNP0A06:00","SUBSYSTEM=container","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=898"]}
-{"action":"add","devpath":"/devices/system/container/PNP0A06:01","env":["ACTION=add","DEVPATH=/devices/system/container/PNP0A06:01","SUBSYSTEM=container","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=899"]}
-{"action":"add","devpath":"/devices/system/container/PNP0A06:02","env":["ACTION=add","DEVPATH=/devices/system/container/PNP0A06:02","SUBSYSTEM=container","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=900"]}
-{"action":"add","devpath":"/devices/system/cpu/cpu0","env":["ACTION=add","DEVPATH=/devices/system/cpu/cpu0","SUBSYSTEM=cpu","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","DRIVER=processor","MODALIAS=cpu:type:x86,ven0002fam000Fmod006B:feature:,0000,0002,0003,0004,0005,0006,0007,0008,0009,000B,000C,000D,000E,000F,0010,0011,0013,0017,0018,0019,001A,0020,0022,0023,0024,0025,0026,0027,0028,0029,002B,002C,002D,002E,002F,0030,0031,0034,0037,0038,003D,0064,006E,0070,0074,0075,0076,0079,007A,007F,0080,008D,0095,009F,00C0,00C8,00ED,00F3,010F,0115,0165,016C,0282\n","SEQNUM=901"]}
-{"action":"add","devpath":"/devices/system/machinecheck/machinecheck0","env":["ACTION=add","DEVPATH=/devices/system/machinecheck/machinecheck0","SUBSYSTEM=machinecheck","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=902"]}
-{"action":"add","devpath":"/devices/system/memory/memory0","env":["ACTION=add","DEVPATH=/devices/system/memory/memory0","SUBSYSTEM=memory","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=903"]}
-{"action":"add","devpath":"/devices/system/memory/memory1","env":["ACTION=add","DEVPATH=/devices/system/memory/memory1","SUBSYSTEM=memory","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=904"]}
-{"action":"add","devpath":"/devices/system/memory/memory2","env":["ACTION=add","DEVPATH=/devices/system/memory/memory2","SUBSYSTEM=memory","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=905"]}
-{"action":"add","devpath":"/devices/system/memory/memory3","env":["ACTION=add","DEVPATH=/devices/system/memory/memory3","SUBSYSTEM=memory","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=906"]}
-{"action":"add","devpath":"/devices/system/memory/memory4","env":["ACTION=add","DEVPATH=/devices/system/memory/memory4","SUBSYSTEM=memory","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=907"]}
-{"action":"add","devpath":"/devices/system/memory/memory5","env":["ACTION=add","DEVPATH=/devices/system/memory/memory5","SUBSYSTEM=memory","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=908"]}
-{"action":"add","devpath":"/devices/system/memory/memory6","env":["ACTION=add","DEVPATH=/devices/system/memory/memory6","SUBSYSTEM=memory","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=909"]}
-{"action":"add","devpath":"/devices/system/memory/memory7","env":["ACTION=add","DEVPATH=/devices/system/memory/memory7","SUBSYSTEM=memory","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=910"]}
-{"action":"add","devpath":"/devices/system/node/node0","env":["ACTION=add","DEVPATH=/devices/system/node/node0","SUBSYSTEM=node","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=911"]}
-{"action":"add","devpath":"/devices/tracepoint","env":["ACTION=add","DEVPATH=/devices/tracepoint","SUBSYSTEM=event_source","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=912"]}
-{"action":"add","devpath":"/devices/uprobe","env":["ACTION=add","DEVPATH=/devices/uprobe","SUBSYSTEM=event_source","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=913"]}
-{"action":"add","devpath":"/devices/virtual/bdi/254:0","env":["ACTION=add","DEVPATH=/devices/virtual/bdi/254:0","SUBSYSTEM=bdi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=914"]}
-{"action":"add","devpath":"/devices/virtual/devlink/:ata2--scsi:1:0:0:0","env":["ACTION=add","DEVPATH=/devices/virtual/devlink/:ata2--scsi:1:0:0:0","SUBSYSTEM=devlink","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=915"]}
-{"action":"add","devpath":"/devices/virtual/dmi/id","env":["ACTION=add","DEVPATH=/devices/virtual/dmi/id","SUBSYSTEM=dmi","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MODALIAS=dmi:bvnSeaBIOS:bvrrel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org:bd04/01/2014:br0.0:svnQEMU:pnStandardPC(i440FX+PIIX,1996):pvrpc-i440fx-10.1:cvnQEMU:ct1:cvrpc-i440fx-10.1:sku:","SEQNUM=916"]}
-{"action":"add","devpath":"/devices/virtual/mem/full","env":["ACTION=add","DEVPATH=/devices/virtual/mem/full","SUBSYSTEM=mem","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=1","MINOR=7","DEVNAME=full","DEVMODE=0666","SEQNUM=917"]}
-{"action":"add","devpath":"/devices/virtual/mem/kmsg","env":["ACTION=add","DEVPATH=/devices/virtual/mem/kmsg","SUBSYSTEM=mem","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=1","MINOR=11","DEVNAME=kmsg","DEVMODE=0644","SEQNUM=918"]}
-{"action":"add","devpath":"/devices/virtual/mem/mem","env":["ACTION=add","DEVPATH=/devices/virtual/mem/mem","SUBSYSTEM=mem","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=1","MINOR=1","DEVNAME=mem","SEQNUM=919"]}
-{"action":"add","devpath":"/devices/virtual/mem/null","env":["ACTION=add","DEVPATH=/devices/virtual/mem/null","SUBSYSTEM=mem","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=1","MINOR=3","DEVNAME=null","DEVMODE=0666","SEQNUM=920"]}
-{"action":"add","devpath":"/devices/virtual/mem/port","env":["ACTION=add","DEVPATH=/devices/virtual/mem/port","SUBSYSTEM=mem","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=1","MINOR=4","DEVNAME=port","SEQNUM=921"]}
-{"action":"add","devpath":"/devices/virtual/mem/random","env":["ACTION=add","DEVPATH=/devices/virtual/mem/random","SUBSYSTEM=mem","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=1","MINOR=8","DEVNAME=random","DEVMODE=0666","SEQNUM=922"]}
-{"action":"add","devpath":"/devices/virtual/mem/urandom","env":["ACTION=add","DEVPATH=/devices/virtual/mem/urandom","SUBSYSTEM=mem","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=1","MINOR=9","DEVNAME=urandom","DEVMODE=0666","SEQNUM=923"]}
-{"action":"add","devpath":"/devices/virtual/mem/zero","env":["ACTION=add","DEVPATH=/devices/virtual/mem/zero","SUBSYSTEM=mem","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=1","MINOR=5","DEVNAME=zero","DEVMODE=0666","SEQNUM=924"]}
-{"action":"add","devpath":"/devices/virtual/memory_tiering/memory_tier4","env":["ACTION=add","DEVPATH=/devices/virtual/memory_tiering/memory_tier4","SUBSYSTEM=memory_tiering","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=925"]}
-{"action":"add","devpath":"/devices/virtual/misc/cpu_dma_latency","env":["ACTION=add","DEVPATH=/devices/virtual/misc/cpu_dma_latency","SUBSYSTEM=misc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=10","MINOR=259","DEVNAME=cpu_dma_latency","SEQNUM=926"]}
-{"action":"add","devpath":"/devices/virtual/misc/hpet","env":["ACTION=add","DEVPATH=/devices/virtual/misc/hpet","SUBSYSTEM=misc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=10","MINOR=228","DEVNAME=hpet","SEQNUM=927"]}
-{"action":"add","devpath":"/devices/virtual/misc/snapshot","env":["ACTION=add","DEVPATH=/devices/virtual/misc/snapshot","SUBSYSTEM=misc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=10","MINOR=231","DEVNAME=snapshot","SEQNUM=928"]}
-{"action":"add","devpath":"/devices/virtual/misc/udmabuf","env":["ACTION=add","DEVPATH=/devices/virtual/misc/udmabuf","SUBSYSTEM=misc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=10","MINOR=258","DEVNAME=udmabuf","SEQNUM=929"]}
-{"action":"add","devpath":"/devices/virtual/misc/userfaultfd","env":["ACTION=add","DEVPATH=/devices/virtual/misc/userfaultfd","SUBSYSTEM=misc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=10","MINOR=257","DEVNAME=userfaultfd","SEQNUM=930"]}
-{"action":"add","devpath":"/devices/virtual/misc/vga_arbiter","env":["ACTION=add","DEVPATH=/devices/virtual/misc/vga_arbiter","SUBSYSTEM=misc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=10","MINOR=256","DEVNAME=vga_arbiter","SEQNUM=931"]}
-{"action":"add","devpath":"/devices/virtual/net/lo","env":["ACTION=add","DEVPATH=/devices/virtual/net/lo","SUBSYSTEM=net","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","INTERFACE=lo","IFINDEX=1","SEQNUM=932"]}
-{"action":"add","devpath":"/devices/virtual/thermal/cooling_device0","env":["ACTION=add","DEVPATH=/devices/virtual/thermal/cooling_device0","SUBSYSTEM=thermal","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=933"]}
-{"action":"add","devpath":"/devices/virtual/tty/console","env":["ACTION=add","DEVPATH=/devices/virtual/tty/console","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=5","MINOR=1","DEVNAME=console","SEQNUM=934"]}
-{"action":"add","devpath":"/devices/virtual/tty/ptmx","env":["ACTION=add","DEVPATH=/devices/virtual/tty/ptmx","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=5","MINOR=2","DEVNAME=ptmx","DEVMODE=0666","SEQNUM=935"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=5","MINOR=0","DEVNAME=tty","DEVMODE=0666","SEQNUM=936"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty0","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty0","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=0","DEVNAME=tty0","SEQNUM=937"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty1","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty1","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=1","DEVNAME=tty1","SEQNUM=938"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty10","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty10","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=10","DEVNAME=tty10","SEQNUM=939"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty11","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty11","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=11","DEVNAME=tty11","SEQNUM=940"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty12","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty12","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=12","DEVNAME=tty12","SEQNUM=941"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty13","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty13","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=13","DEVNAME=tty13","SEQNUM=942"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty14","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty14","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=14","DEVNAME=tty14","SEQNUM=943"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty15","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty15","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=15","DEVNAME=tty15","SEQNUM=944"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty16","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty16","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=16","DEVNAME=tty16","SEQNUM=945"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty17","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty17","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=17","DEVNAME=tty17","SEQNUM=946"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty18","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty18","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=18","DEVNAME=tty18","SEQNUM=947"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty19","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty19","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=19","DEVNAME=tty19","SEQNUM=948"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty2","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty2","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=2","DEVNAME=tty2","SEQNUM=949"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty20","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty20","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=20","DEVNAME=tty20","SEQNUM=950"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty21","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty21","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=21","DEVNAME=tty21","SEQNUM=951"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty22","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty22","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=22","DEVNAME=tty22","SEQNUM=952"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty23","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty23","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=23","DEVNAME=tty23","SEQNUM=953"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty24","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty24","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=24","DEVNAME=tty24","SEQNUM=954"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty25","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty25","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=25","DEVNAME=tty25","SEQNUM=955"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty26","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty26","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=26","DEVNAME=tty26","SEQNUM=956"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty27","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty27","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=27","DEVNAME=tty27","SEQNUM=957"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty28","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty28","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=28","DEVNAME=tty28","SEQNUM=958"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty29","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty29","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=29","DEVNAME=tty29","SEQNUM=959"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty3","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty3","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=3","DEVNAME=tty3","SEQNUM=960"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty30","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty30","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=30","DEVNAME=tty30","SEQNUM=961"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty31","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty31","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=31","DEVNAME=tty31","SEQNUM=962"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty32","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty32","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=32","DEVNAME=tty32","SEQNUM=963"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty33","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty33","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=33","DEVNAME=tty33","SEQNUM=964"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty34","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty34","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=34","DEVNAME=tty34","SEQNUM=965"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty35","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty35","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=35","DEVNAME=tty35","SEQNUM=966"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty36","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty36","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=36","DEVNAME=tty36","SEQNUM=967"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty37","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty37","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=37","DEVNAME=tty37","SEQNUM=968"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty38","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty38","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=38","DEVNAME=tty38","SEQNUM=969"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty39","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty39","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=39","DEVNAME=tty39","SEQNUM=970"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty4","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty4","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=4","DEVNAME=tty4","SEQNUM=971"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty40","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty40","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=40","DEVNAME=tty40","SEQNUM=972"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty41","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty41","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=41","DEVNAME=tty41","SEQNUM=973"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty42","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty42","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=42","DEVNAME=tty42","SEQNUM=974"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty43","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty43","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=43","DEVNAME=tty43","SEQNUM=975"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty44","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty44","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=44","DEVNAME=tty44","SEQNUM=976"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty45","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty45","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=45","DEVNAME=tty45","SEQNUM=977"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty46","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty46","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=46","DEVNAME=tty46","SEQNUM=978"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty47","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty47","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=47","DEVNAME=tty47","SEQNUM=979"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty48","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty48","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=48","DEVNAME=tty48","SEQNUM=980"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty49","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty49","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=49","DEVNAME=tty49","SEQNUM=981"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty5","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty5","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=5","DEVNAME=tty5","SEQNUM=982"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty50","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty50","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=50","DEVNAME=tty50","SEQNUM=983"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty51","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty51","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=51","DEVNAME=tty51","SEQNUM=984"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty52","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty52","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=52","DEVNAME=tty52","SEQNUM=985"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty53","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty53","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=53","DEVNAME=tty53","SEQNUM=986"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty54","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty54","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=54","DEVNAME=tty54","SEQNUM=987"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty55","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty55","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=55","DEVNAME=tty55","SEQNUM=988"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty56","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty56","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=56","DEVNAME=tty56","SEQNUM=989"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty57","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty57","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=57","DEVNAME=tty57","SEQNUM=990"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty58","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty58","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=58","DEVNAME=tty58","SEQNUM=991"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty59","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty59","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=59","DEVNAME=tty59","SEQNUM=992"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty6","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty6","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=6","DEVNAME=tty6","SEQNUM=993"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty60","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty60","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=60","DEVNAME=tty60","SEQNUM=994"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty61","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty61","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=61","DEVNAME=tty61","SEQNUM=995"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty62","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty62","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=62","DEVNAME=tty62","SEQNUM=996"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty63","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty63","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=63","DEVNAME=tty63","SEQNUM=997"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty7","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty7","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=7","DEVNAME=tty7","SEQNUM=998"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty8","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty8","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=8","DEVNAME=tty8","SEQNUM=999"]}
-{"action":"add","devpath":"/devices/virtual/tty/tty9","env":["ACTION=add","DEVPATH=/devices/virtual/tty/tty9","SUBSYSTEM=tty","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=4","MINOR=9","DEVNAME=tty9","SEQNUM=1000"]}
-{"action":"add","devpath":"/devices/virtual/vc/vcs","env":["ACTION=add","DEVPATH=/devices/virtual/vc/vcs","SUBSYSTEM=vc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=7","MINOR=0","DEVNAME=vcs","SEQNUM=1001"]}
-{"action":"add","devpath":"/devices/virtual/vc/vcs1","env":["ACTION=add","DEVPATH=/devices/virtual/vc/vcs1","SUBSYSTEM=vc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=7","MINOR=1","DEVNAME=vcs1","SEQNUM=1002"]}
-{"action":"add","devpath":"/devices/virtual/vc/vcsa","env":["ACTION=add","DEVPATH=/devices/virtual/vc/vcsa","SUBSYSTEM=vc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=7","MINOR=128","DEVNAME=vcsa","SEQNUM=1003"]}
-{"action":"add","devpath":"/devices/virtual/vc/vcsa1","env":["ACTION=add","DEVPATH=/devices/virtual/vc/vcsa1","SUBSYSTEM=vc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=7","MINOR=129","DEVNAME=vcsa1","SEQNUM=1004"]}
-{"action":"add","devpath":"/devices/virtual/vc/vcsu","env":["ACTION=add","DEVPATH=/devices/virtual/vc/vcsu","SUBSYSTEM=vc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=7","MINOR=64","DEVNAME=vcsu","SEQNUM=1005"]}
-{"action":"add","devpath":"/devices/virtual/vc/vcsu1","env":["ACTION=add","DEVPATH=/devices/virtual/vc/vcsu1","SUBSYSTEM=vc","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","MAJOR=7","MINOR=65","DEVNAME=vcsu1","SEQNUM=1006"]}
-{"action":"add","devpath":"/devices/virtual/vtconsole/vtcon0","env":["ACTION=add","DEVPATH=/devices/virtual/vtconsole/vtcon0","SUBSYSTEM=vtconsole","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=1007"]}
-{"action":"add","devpath":"/devices/virtual/workqueue/nvme-auth-wq","env":["ACTION=add","DEVPATH=/devices/virtual/workqueue/nvme-auth-wq","SUBSYSTEM=workqueue","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=1008"]}
-{"action":"add","devpath":"/devices/virtual/workqueue/nvme-delete-wq","env":["ACTION=add","DEVPATH=/devices/virtual/workqueue/nvme-delete-wq","SUBSYSTEM=workqueue","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=1009"]}
-{"action":"add","devpath":"/devices/virtual/workqueue/nvme-reset-wq","env":["ACTION=add","DEVPATH=/devices/virtual/workqueue/nvme-reset-wq","SUBSYSTEM=workqueue","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=1010"]}
-{"action":"add","devpath":"/devices/virtual/workqueue/nvme-wq","env":["ACTION=add","DEVPATH=/devices/virtual/workqueue/nvme-wq","SUBSYSTEM=workqueue","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=1011"]}
-{"action":"add","devpath":"/devices/virtual/workqueue/scsi_tmf_0","env":["ACTION=add","DEVPATH=/devices/virtual/workqueue/scsi_tmf_0","SUBSYSTEM=workqueue","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=1012"]}
-{"action":"add","devpath":"/devices/virtual/workqueue/scsi_tmf_1","env":["ACTION=add","DEVPATH=/devices/virtual/workqueue/scsi_tmf_1","SUBSYSTEM=workqueue","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=1013"]}
-{"action":"add","devpath":"/devices/virtual/workqueue/writeback","env":["ACTION=add","DEVPATH=/devices/virtual/workqueue/writeback","SUBSYSTEM=workqueue","SYNTH_UUID=fe4d7c9d-b8c6-4a70-9ef1-3d8a58d18eed","SEQNUM=1014"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07/wakeup/wakeup8","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07/wakeup/wakeup8","SUBSYSTEM=wakeup","SEQNUM=1015"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:04.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:04.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:04.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1016"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:04.0/virtio1","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:04.0/virtio1","SUBSYSTEM=virtio","MODALIAS=virtio:d00000019v00001AF4","SEQNUM=1017"]}
-{"action":"bind","devpath":"/devices/pci0000:00/0000:00:04.0","env":["ACTION=bind","DEVPATH=/devices/pci0000:00/0000:00:04.0","SUBSYSTEM=pci","DRIVER=virtio-pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:04.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1018"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/wakeup/wakeup9","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/wakeup/wakeup9","SUBSYSTEM=wakeup","SEQNUM=1019"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:05.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:05.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:05.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1020"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:05.0/virtio2","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:05.0/virtio2","SUBSYSTEM=virtio","MODALIAS=virtio:d00000019v00001AF4","SEQNUM=1021"]}
-{"action":"bind","devpath":"/devices/pci0000:00/0000:00:05.0","env":["ACTION=bind","DEVPATH=/devices/pci0000:00/0000:00:05.0","SUBSYSTEM=pci","DRIVER=virtio-pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:05.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1022"]}
-{"action":"remove","devpath":"/devices/pci0000:00/0000:00:04.0/virtio1","env":["ACTION=remove","DEVPATH=/devices/pci0000:00/0000:00:04.0/virtio1","SUBSYSTEM=virtio","MODALIAS=virtio:d00000019v00001AF4","SEQNUM=1023"]}
-{"action":"unbind","devpath":"/devices/pci0000:00/0000:00:04.0","env":["ACTION=unbind","DEVPATH=/devices/pci0000:00/0000:00:04.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:04.0","SEQNUM=1024"]}
-{"action":"remove","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07/wakeup/wakeup8","env":["ACTION=remove","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07/wakeup/wakeup8","SUBSYSTEM=wakeup","SEQNUM=1025"]}
-{"action":"remove","devpath":"/devices/pci0000:00/0000:00:04.0","env":["ACTION=remove","DEVPATH=/devices/pci0000:00/0000:00:04.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:04.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1026"]}
-{"action":"remove","devpath":"/devices/pci0000:00/0000:00:05.0/virtio2","env":["ACTION=remove","DEVPATH=/devices/pci0000:00/0000:00:05.0/virtio2","SUBSYSTEM=virtio","MODALIAS=virtio:d00000019v00001AF4","SEQNUM=1027"]}
-{"action":"unbind","devpath":"/devices/pci0000:00/0000:00:05.0","env":["ACTION=unbind","DEVPATH=/devices/pci0000:00/0000:00:05.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:05.0","SEQNUM=1028"]}
-{"action":"remove","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/wakeup/wakeup9","env":["ACTION=remove","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/wakeup/wakeup9","SUBSYSTEM=wakeup","SEQNUM=1029"]}
-{"action":"remove","devpath":"/devices/pci0000:00/0000:00:05.0","env":["ACTION=remove","DEVPATH=/devices/pci0000:00/0000:00:05.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:05.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1030"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07/wakeup/wakeup8","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:07/wakeup/wakeup8","SUBSYSTEM=wakeup","SEQNUM=1031"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:04.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:04.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:04.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1032"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:04.0/virtio1","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:04.0/virtio1","SUBSYSTEM=virtio","MODALIAS=virtio:d00000019v00001AF4","SEQNUM=1033"]}
-{"action":"bind","devpath":"/devices/pci0000:00/0000:00:04.0","env":["ACTION=bind","DEVPATH=/devices/pci0000:00/0000:00:04.0","SUBSYSTEM=pci","DRIVER=virtio-pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:04.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1034"]}
-{"action":"add","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/wakeup/wakeup9","env":["ACTION=add","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/wakeup/wakeup9","SUBSYSTEM=wakeup","SEQNUM=1035"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:05.0","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:05.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:05.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1036"]}
-{"action":"add","devpath":"/devices/pci0000:00/0000:00:05.0/virtio2","env":["ACTION=add","DEVPATH=/devices/pci0000:00/0000:00:05.0/virtio2","SUBSYSTEM=virtio","MODALIAS=virtio:d00000019v00001AF4","SEQNUM=1037"]}
-{"action":"bind","devpath":"/devices/pci0000:00/0000:00:05.0","env":["ACTION=bind","DEVPATH=/devices/pci0000:00/0000:00:05.0","SUBSYSTEM=pci","DRIVER=virtio-pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:05.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1038"]}
-{"action":"remove","devpath":"/devices/pci0000:00/0000:00:05.0/virtio2","env":["ACTION=remove","DEVPATH=/devices/pci0000:00/0000:00:05.0/virtio2","SUBSYSTEM=virtio","MODALIAS=virtio:d00000019v00001AF4","SEQNUM=1039"]}
-{"action":"unbind","devpath":"/devices/pci0000:00/0000:00:05.0","env":["ACTION=unbind","DEVPATH=/devices/pci0000:00/0000:00:05.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:05.0","SEQNUM=1040"]}
-{"action":"remove","devpath":"/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/wakeup/wakeup9","env":["ACTION=remove","DEVPATH=/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/wakeup/wakeup9","SUBSYSTEM=wakeup","SEQNUM=1041"]}
-{"action":"remove","devpath":"/devices/pci0000:00/0000:00:05.0","env":["ACTION=remove","DEVPATH=/devices/pci0000:00/0000:00:05.0","SUBSYSTEM=pci","PCI_CLASS=40100","PCI_ID=1AF4:1059","PCI_SUBSYS_ID=1AF4:1100","PCI_SLOT_NAME=0000:00:05.0","MODALIAS=pci:v00001AF4d00001059sv00001AF4sd00001100bc04sc01i00","SEQNUM=1042"]}

internal/kobject/testdata/01-move

@@ -1 +0,0 @@
-{"action":"move","devpath":"/devices/virtual/net/_lo","env":["ACTION=move","DEVPATH=/devices/virtual/net/_lo","SUBSYSTEM=net","DEVPATH_OLD=/devices/virtual/net/lo","INTERFACE=_lo","IFINDEX=1","SEQNUM=1043"]}

internal/kobject/testdata/02-cpu

@@ -1,8 +0,0 @@
-{"action":"remove","devpath":"/devices/system/machinecheck/machinecheck0","env":["ACTION=remove","DEVPATH=/devices/system/machinecheck/machinecheck0","SUBSYSTEM=machinecheck","SEQNUM=1044"]}
-{"action":"offline","devpath":"/devices/system/cpu/cpu0","env":["ACTION=offline","DEVPATH=/devices/system/cpu/cpu0","SUBSYSTEM=cpu","DRIVER=processor","MODALIAS=cpu:type:x86,ven0002fam000Fmod006B:feature:,0000,0002,0003,0004,0005,0006,0007,0008,0009,000B,000C,000D,000E,000F,0010,0011,0013,0017,0018,0019,001A,001C,0020,0022,0023,0024,0025,0026,0027,0028,0029,002B,002C,002D,002E,002F,0030,0031,0034,0037,0038,003D,0064,006E,0070,0074,0075,0076,0079,007A,007F,0080,008D,0095,009F,00C0,00C1,00C8,00ED,00F3,010F,0115,0165,016C,0282\n","SEQNUM=1045"]}
-{"action":"add","devpath":"/devices/system/machinecheck/machinecheck0","env":["ACTION=add","DEVPATH=/devices/system/machinecheck/machinecheck0","SUBSYSTEM=machinecheck","SEQNUM=1046"]}
-{"action":"online","devpath":"/devices/system/cpu/cpu0","env":["ACTION=online","DEVPATH=/devices/system/cpu/cpu0","SUBSYSTEM=cpu","DRIVER=processor","MODALIAS=cpu:type:x86,ven0002fam000Fmod006B:feature:,0000,0002,0003,0004,0005,0006,0007,0008,0009,000B,000C,000D,000E,000F,0010,0011,0013,0017,0018,0019,001A,001C,0020,0022,0023,0024,0025,0026,0027,0028,0029,002B,002C,002D,002E,002F,0030,0031,0034,0037,0038,003D,0064,006E,0070,0074,0075,0076,0079,007A,007F,0080,008D,0095,009F,00C0,00C1,00C8,00ED,00F3,010F,0115,0165,016C,0282\n","SEQNUM=1047"]}
-{"action":"remove","devpath":"/devices/system/machinecheck/machinecheck0","env":["ACTION=remove","DEVPATH=/devices/system/machinecheck/machinecheck0","SUBSYSTEM=machinecheck","SEQNUM=1048"]}
-{"action":"offline","devpath":"/devices/system/cpu/cpu0","env":["ACTION=offline","DEVPATH=/devices/system/cpu/cpu0","SUBSYSTEM=cpu","DRIVER=processor","MODALIAS=cpu:type:x86,ven0002fam000Fmod006B:feature:,0000,0002,0003,0004,0005,0006,0007,0008,0009,000B,000C,000D,000E,000F,0010,0011,0013,0017,0018,0019,001A,001C,0020,0022,0023,0024,0025,0026,0027,0028,0029,002B,002C,002D,002E,002F,0030,0031,0034,0037,0038,003D,0064,006E,0070,0074,0075,0076,0079,007A,007F,0080,008D,0095,009F,00C0,00C1,00C8,00ED,00F3,010F,0115,0165,016C,0282\n","SEQNUM=1049"]}
-{"action":"add","devpath":"/devices/system/machinecheck/machinecheck0","env":["ACTION=add","DEVPATH=/devices/system/machinecheck/machinecheck0","SUBSYSTEM=machinecheck","SEQNUM=1050"]}
-{"action":"online","devpath":"/devices/system/cpu/cpu0","env":["ACTION=online","DEVPATH=/devices/system/cpu/cpu0","SUBSYSTEM=cpu","DRIVER=processor","MODALIAS=cpu:type:x86,ven0002fam000Fmod006B:feature:,0000,0002,0003,0004,0005,0006,0007,0008,0009,000B,000C,000D,000E,000F,0010,0011,0013,0017,0018,0019,001A,001C,0020,0022,0023,0024,0025,0026,0027,0028,0029,002B,002C,002D,002E,002F,0030,0031,0034,0037,0038,003D,0064,006E,0070,0074,0075,0076,0079,007A,007F,0080,008D,0095,009F,00C0,00C1,00C8,00ED,00F3,010F,0115,0165,016C,0282\n","SEQNUM=1051"]}

internal/kobject/testdata/03-loop

@@ -1,19 +0,0 @@
-{"action":"add","devpath":"/devices/virtual/misc/loop-control","env":["ACTION=add","DEVPATH=/devices/virtual/misc/loop-control","SUBSYSTEM=misc","MAJOR=10","MINOR=237","DEVNAME=loop-control","SEQNUM=1052"]}
-{"action":"add","devpath":"/devices/virtual/bdi/7:0","env":["ACTION=add","DEVPATH=/devices/virtual/bdi/7:0","SUBSYSTEM=bdi","SEQNUM=1053"]}
-{"action":"add","devpath":"/devices/virtual/block/loop0","env":["ACTION=add","DEVPATH=/devices/virtual/block/loop0","SUBSYSTEM=block","MAJOR=7","MINOR=0","DEVNAME=loop0","DEVTYPE=disk","DISKSEQ=2","SEQNUM=1054"]}
-{"action":"add","devpath":"/devices/virtual/bdi/7:1","env":["ACTION=add","DEVPATH=/devices/virtual/bdi/7:1","SUBSYSTEM=bdi","SEQNUM=1055"]}
-{"action":"add","devpath":"/devices/virtual/block/loop1","env":["ACTION=add","DEVPATH=/devices/virtual/block/loop1","SUBSYSTEM=block","MAJOR=7","MINOR=1","DEVNAME=loop1","DEVTYPE=disk","DISKSEQ=3","SEQNUM=1056"]}
-{"action":"add","devpath":"/devices/virtual/bdi/7:2","env":["ACTION=add","DEVPATH=/devices/virtual/bdi/7:2","SUBSYSTEM=bdi","SEQNUM=1057"]}
-{"action":"add","devpath":"/devices/virtual/block/loop2","env":["ACTION=add","DEVPATH=/devices/virtual/block/loop2","SUBSYSTEM=block","MAJOR=7","MINOR=2","DEVNAME=loop2","DEVTYPE=disk","DISKSEQ=4","SEQNUM=1058"]}
-{"action":"add","devpath":"/devices/virtual/bdi/7:3","env":["ACTION=add","DEVPATH=/devices/virtual/bdi/7:3","SUBSYSTEM=bdi","SEQNUM=1059"]}
-{"action":"add","devpath":"/devices/virtual/block/loop3","env":["ACTION=add","DEVPATH=/devices/virtual/block/loop3","SUBSYSTEM=block","MAJOR=7","MINOR=3","DEVNAME=loop3","DEVTYPE=disk","DISKSEQ=5","SEQNUM=1060"]}
-{"action":"add","devpath":"/devices/virtual/bdi/7:4","env":["ACTION=add","DEVPATH=/devices/virtual/bdi/7:4","SUBSYSTEM=bdi","SEQNUM=1061"]}
-{"action":"add","devpath":"/devices/virtual/block/loop4","env":["ACTION=add","DEVPATH=/devices/virtual/block/loop4","SUBSYSTEM=block","MAJOR=7","MINOR=4","DEVNAME=loop4","DEVTYPE=disk","DISKSEQ=6","SEQNUM=1062"]}
-{"action":"add","devpath":"/devices/virtual/bdi/7:5","env":["ACTION=add","DEVPATH=/devices/virtual/bdi/7:5","SUBSYSTEM=bdi","SEQNUM=1063"]}
-{"action":"add","devpath":"/devices/virtual/block/loop5","env":["ACTION=add","DEVPATH=/devices/virtual/block/loop5","SUBSYSTEM=block","MAJOR=7","MINOR=5","DEVNAME=loop5","DEVTYPE=disk","DISKSEQ=7","SEQNUM=1064"]}
-{"action":"add","devpath":"/devices/virtual/bdi/7:6","env":["ACTION=add","DEVPATH=/devices/virtual/bdi/7:6","SUBSYSTEM=bdi","SEQNUM=1065"]}
-{"action":"add","devpath":"/devices/virtual/block/loop6","env":["ACTION=add","DEVPATH=/devices/virtual/block/loop6","SUBSYSTEM=block","MAJOR=7","MINOR=6","DEVNAME=loop6","DEVTYPE=disk","DISKSEQ=8","SEQNUM=1066"]}
-{"action":"add","devpath":"/devices/virtual/bdi/7:7","env":["ACTION=add","DEVPATH=/devices/virtual/bdi/7:7","SUBSYSTEM=bdi","SEQNUM=1067"]}
-{"action":"add","devpath":"/devices/virtual/block/loop7","env":["ACTION=add","DEVPATH=/devices/virtual/block/loop7","SUBSYSTEM=block","MAJOR=7","MINOR=7","DEVNAME=loop7","DEVTYPE=disk","DISKSEQ=9","SEQNUM=1068"]}
-{"action":"add","devpath":"/module/loop","env":["ACTION=add","DEVPATH=/module/loop","SUBSYSTEM=module","SEQNUM=1069"]}
-{"action":"change","devpath":"/devices/virtual/block/loop0","env":["ACTION=change","DEVPATH=/devices/virtual/block/loop0","SUBSYSTEM=block","MAJOR=7","MINOR=0","DEVNAME=loop0","DEVTYPE=disk","DISKSEQ=10","SEQNUM=1070"]}

internal/kobject/testdata/04-loop-detach

@@ -1,2 +0,0 @@
-{"action":"change","devpath":"/devices/virtual/block/loop0","env":["ACTION=change","DEVPATH=/devices/virtual/block/loop0","SUBSYSTEM=block","MAJOR=7","MINOR=0","DEVNAME=loop0","DEVTYPE=disk","DISKSEQ=10","SEQNUM=1071"]}
-{"action":"change","devpath":"/devices/virtual/block/loop0","env":["ACTION=change","DEVPATH=/devices/virtual/block/loop0","SUBSYSTEM=block","DISK_MEDIA_CHANGE=1","MAJOR=7","MINOR=0","DEVNAME=loop0","DEVTYPE=disk","DISKSEQ=10","SEQNUM=1072"]}

internal/kobject/testdata/05-loop-remove

@@ -1,18 +0,0 @@
-{"action":"remove","devpath":"/devices/virtual/misc/loop-control","env":["ACTION=remove","DEVPATH=/devices/virtual/misc/loop-control","SUBSYSTEM=misc","MAJOR=10","MINOR=237","DEVNAME=loop-control","SEQNUM=1073"]}
-{"action":"remove","devpath":"/devices/virtual/bdi/7:0","env":["ACTION=remove","DEVPATH=/devices/virtual/bdi/7:0","SUBSYSTEM=bdi","SEQNUM=1074"]}
-{"action":"remove","devpath":"/devices/virtual/block/loop0","env":["ACTION=remove","DEVPATH=/devices/virtual/block/loop0","SUBSYSTEM=block","MAJOR=7","MINOR=0","DEVNAME=loop0","DEVTYPE=disk","DISKSEQ=11","SEQNUM=1075"]}
-{"action":"remove","devpath":"/devices/virtual/bdi/7:1","env":["ACTION=remove","DEVPATH=/devices/virtual/bdi/7:1","SUBSYSTEM=bdi","SEQNUM=1076"]}
-{"action":"remove","devpath":"/devices/virtual/block/loop1","env":["ACTION=remove","DEVPATH=/devices/virtual/block/loop1","SUBSYSTEM=block","MAJOR=7","MINOR=1","DEVNAME=loop1","DEVTYPE=disk","DISKSEQ=3","SEQNUM=1077"]}
-{"action":"remove","devpath":"/devices/virtual/bdi/7:2","env":["ACTION=remove","DEVPATH=/devices/virtual/bdi/7:2","SUBSYSTEM=bdi","SEQNUM=1078"]}
-{"action":"remove","devpath":"/devices/virtual/block/loop2","env":["ACTION=remove","DEVPATH=/devices/virtual/block/loop2","SUBSYSTEM=block","MAJOR=7","MINOR=2","DEVNAME=loop2","DEVTYPE=disk","DISKSEQ=4","SEQNUM=1079"]}
-{"action":"remove","devpath":"/devices/virtual/bdi/7:3","env":["ACTION=remove","DEVPATH=/devices/virtual/bdi/7:3","SUBSYSTEM=bdi","SEQNUM=1080"]}
-{"action":"remove","devpath":"/devices/virtual/block/loop3","env":["ACTION=remove","DEVPATH=/devices/virtual/block/loop3","SUBSYSTEM=block","MAJOR=7","MINOR=3","DEVNAME=loop3","DEVTYPE=disk","DISKSEQ=5","SEQNUM=1081"]}
-{"action":"remove","devpath":"/devices/virtual/bdi/7:4","env":["ACTION=remove","DEVPATH=/devices/virtual/bdi/7:4","SUBSYSTEM=bdi","SEQNUM=1082"]}
-{"action":"remove","devpath":"/devices/virtual/block/loop4","env":["ACTION=remove","DEVPATH=/devices/virtual/block/loop4","SUBSYSTEM=block","MAJOR=7","MINOR=4","DEVNAME=loop4","DEVTYPE=disk","DISKSEQ=6","SEQNUM=1083"]}
-{"action":"remove","devpath":"/devices/virtual/bdi/7:5","env":["ACTION=remove","DEVPATH=/devices/virtual/bdi/7:5","SUBSYSTEM=bdi","SEQNUM=1084"]}
-{"action":"remove","devpath":"/devices/virtual/block/loop5","env":["ACTION=remove","DEVPATH=/devices/virtual/block/loop5","SUBSYSTEM=block","MAJOR=7","MINOR=5","DEVNAME=loop5","DEVTYPE=disk","DISKSEQ=7","SEQNUM=1085"]}
-{"action":"remove","devpath":"/devices/virtual/bdi/7:6","env":["ACTION=remove","DEVPATH=/devices/virtual/bdi/7:6","SUBSYSTEM=bdi","SEQNUM=1086"]}
-{"action":"remove","devpath":"/devices/virtual/block/loop6","env":["ACTION=remove","DEVPATH=/devices/virtual/block/loop6","SUBSYSTEM=block","MAJOR=7","MINOR=6","DEVNAME=loop6","DEVTYPE=disk","DISKSEQ=8","SEQNUM=1087"]}
-{"action":"remove","devpath":"/devices/virtual/bdi/7:7","env":["ACTION=remove","DEVPATH=/devices/virtual/bdi/7:7","SUBSYSTEM=bdi","SEQNUM=1088"]}
-{"action":"remove","devpath":"/devices/virtual/block/loop7","env":["ACTION=remove","DEVPATH=/devices/virtual/block/loop7","SUBSYSTEM=block","MAJOR=7","MINOR=7","DEVNAME=loop7","DEVTYPE=disk","DISKSEQ=9","SEQNUM=1089"]}
-{"action":"remove","devpath":"/module/loop","env":["ACTION=remove","DEVPATH=/module/loop","SUBSYSTEM=module","SEQNUM=1090"]}

internal/lockedfile/transform_test.go

@@ -40,7 +40,7 @@ func TestTransform(t *testing.T) {
 
 	const maxChunkWords = 8 << 10
 	buf := make([]byte, 2*maxChunkWords*8)
-	for i := range uint64(2 * maxChunkWords) {
+	for i := uint64(0); i < 2*maxChunkWords; i++ {
 		binary.LittleEndian.PutUint64(buf[i*8:], i)
 	}
 	if err := lockedfile.Write(path, bytes.NewReader(buf[:8]), 0666); err != nil {

internal/outcome/dispatcher_test.go

@@ -23,7 +23,6 @@ import (
 	"hakurei.app/container/seccomp"
 	"hakurei.app/container/std"
 	"hakurei.app/hst"
-	"hakurei.app/internal/env"
 	"hakurei.app/internal/stub"
 	"hakurei.app/internal/system"
 	"hakurei.app/message"
@@ -175,7 +174,6 @@ func checkOpBehaviour(t *testing.T, testCases []opBehaviourTestCase) {
 		call("cmdOutput", stub.ExpectArgs{container.Nonexistent, os.Stderr, []string{}, "/"}, []byte("0"), nil),
 		call("tempdir", stub.ExpectArgs{}, container.Nonexistent+"/tmp", nil),
 		call("lookupEnv", stub.ExpectArgs{"XDG_RUNTIME_DIR"}, wantRuntimePath, nil),
-		call("stat", stub.ExpectArgs{env.VarRunNscd}, stubFileInfoIsDir(true), nil),
 		call("getuid", stub.ExpectArgs{}, 1000, nil),
 		call("getgid", stub.ExpectArgs{}, 100, nil),
 

internal/outcome/finalise.go

@@ -58,7 +58,8 @@ func (k *outcome) finalise(
 	supp := make([]string, len(config.Groups))
 	for i, name := range config.Groups {
 		if gid, err := k.lookupGroupId(name); err != nil {
-			if unknownGroupError, ok := errors.AsType[user.UnknownGroupError](err); ok {
+			var unknownGroupError user.UnknownGroupError
+			if errors.As(err, &unknownGroupError) {
 				return newWithMessageError(fmt.Sprintf("unknown group %q", name), unknownGroupError)
 			} else {
 				return &hst.AppError{Step: "look up group by name", Err: err, Msg: err.Error()}

internal/outcome/hsu.go

@@ -51,16 +51,18 @@ func (h *Hsu) ID() (int, error) {
 		cmd.Stderr = os.Stderr // pass through fatal messages
 		cmd.Env = make([]string, 0)
 		cmd.Dir = fhs.Root
-		var p []byte
+		var (
+			p         []byte
+			exitError *exec.ExitError
+		)
+
 		const step = "obtain uid from hsu"
 		if p, h.idErr = h.k.cmdOutput(cmd); h.idErr == nil {
 			h.id, h.idErr = strconv.Atoi(string(p))
 			if h.idErr != nil {
 				h.idErr = &hst.AppError{Step: step, Err: h.idErr, Msg: "invalid uid string from hsu"}
 			}
-		} else if exitError, ok := errors.AsType[*exec.ExitError](h.idErr); ok &&
-			exitError != nil &&
-			exitError.ExitCode() == 1 {
+		} else if errors.As(h.idErr, &exitError) && exitError != nil && exitError.ExitCode() == 1 {
 			// hsu prints an error message in this case
 			h.idErr = &hst.AppError{Step: step, Err: ErrHsuAccess}
 		} else if errors.Is(h.idErr, os.ErrNotExist) {

internal/outcome/outcome.go

@@ -110,7 +110,7 @@ func newOutcomeState(k syscallDispatcher, msg message.Msg, id *hst.ID, config *h
 		Paths: env.CopyPathsFunc(k.fatalf, k.tempdir, func(key string) string {
 			v, _ := k.lookupEnv(key)
 			return v
-		}, k.stat),
+		}),
 		Container: config.Container,
 	}