Compare commits

base: rosa/hakurei:v0.1.2

Branches Tags

rosa/hakurei:master rosa/hakurei:staging rosa/hakurei:develop

rosa/hakurei:v0.4.6 rosa/hakurei:v0.4.5 rosa/hakurei:v0.4.4 rosa/hakurei:v0.4.3 rosa/hakurei:v0.4.2 rosa/hakurei:v0.4.1 rosa/hakurei:v0.4.0 rosa/hakurei:v0.3.7 rosa/hakurei:v0.3.6 rosa/hakurei:v0.3.5 rosa/hakurei:v0.3.4 rosa/hakurei:v0.3.3 rosa/hakurei:v0.3.2 rosa/hakurei:v0.3.1 rosa/hakurei:v0.3.0 rosa/hakurei:v0.2.2 rosa/hakurei:v0.2.1 rosa/hakurei:v0.2.0 rosa/hakurei:v0.1.3 rosa/hakurei:v0.1.2 rosa/hakurei:v0.1.1 rosa/hakurei:v0.1.0

...

compare: rosa/hakurei:v0.3.4

Branches Tags

rosa/hakurei:staging rosa/hakurei:develop rosa/hakurei:master

rosa/hakurei:v0.4.6 rosa/hakurei:v0.4.5 rosa/hakurei:v0.4.4 rosa/hakurei:v0.4.3 rosa/hakurei:v0.4.2 rosa/hakurei:v0.4.1 rosa/hakurei:v0.4.0 rosa/hakurei:v0.3.7 rosa/hakurei:v0.3.6 rosa/hakurei:v0.3.5 rosa/hakurei:v0.3.4 rosa/hakurei:v0.3.3 rosa/hakurei:v0.3.2 rosa/hakurei:v0.3.1 rosa/hakurei:v0.3.0 rosa/hakurei:v0.2.2 rosa/hakurei:v0.2.1 rosa/hakurei:v0.2.0 rosa/hakurei:v0.1.3 rosa/hakurei:v0.1.2 rosa/hakurei:v0.1.1 rosa/hakurei:v0.1.0

722 Commits

v0.1.2 ... v0.3.4

Author	SHA1	Message	Date
cat	d61faa09eb	release: 0.3.4 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 03:56:06 +09:00
cat	50153788ef	internal/rosa: hakurei artifact ... This does not yet have fuse from staging. Everything else works perfectly, though. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 02:24:49 +09:00
cat	c84fe63217	internal/rosa: various X artifacts ... Required by xcb which is required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 02:02:49 +09:00
cat	eb67e5e0a8	internal/pkg: exclusive artifacts ... This alleviates scheduler overhead when curing many artifacts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 01:23:50 +09:00
cat	948afe33e5	internal/rosa/acl: use patch helper ... This is significantly less ugly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 00:30:50 +09:00
cat	76c657177d	internal/rosa: patch ignore whitespace ... This makes it work better with patches emitted by git. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 21:56:36 +09:00
cat	4356f978aa	internal/rosa: kernel patching ... The side effect of this is to work around zfs performance issue with chmod on overlay mount. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 21:20:52 +09:00
cat	4f17dad645	internal/rosa: isolate patching helper ... This is useful outside llvm as well. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 21:00:29 +09:00
cat	68b7d41c65	internal/rosa: parallel autoconf tests ... These take forever and run sequentially by default for some reason. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 19:52:59 +09:00
cat	e48f303e38	internal/rosa: parallel perl tests ... This is found in the github action, the test target does not appear to support parallelisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 19:45:50 +09:00
cat	f1fd406b82	internal/rosa: link libc ldd ... Musl appears to implement this behaviour but does not install the symlink by default. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 08:00:03 +09:00
cat	53b1de3395	internal/rosa: enable static on various artifacts ... This is implicitly enabled sometimes, but better to be explicit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 07:56:14 +09:00
cat	92dcadbf27	internal/acl: connect getfacl stderr ... This shows whatever failure is happening in the cure container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 07:51:16 +09:00
cat	0bd6a18326	internal/rosa: acl artifact ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 07:38:56 +09:00
cat	67d592c337	internal/pkg: close gzip reader on success ... The Close method panics otherwise. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 07:06:38 +09:00
cat	fdc8a8419b	internal/rosa: static libwayland ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 06:49:08 +09:00
cat	122cfbf63a	internal/rosa: run wayland tests ... Broken test is disabled for now. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 06:39:45 +09:00
cat	504f5d28fe	internal/rosa: libseccomp artifact ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 05:28:36 +09:00
cat	3eadd5c580	internal/rosa: gperf artifact ... Required by libseccomp. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 05:25:39 +09:00
cat	4d29333807	internal/rosa: wayland-protocols artifact ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 05:13:30 +09:00
cat	e1533fa4c6	internal/rosa: wayland artifact ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 05:10:35 +09:00
cat	9a74d5273d	internal/rosa: libgd artifact ... Required by graphviz which is required by wayland. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 04:20:11 +09:00
cat	2abc8c454e	internal/pkg: absolute hard link ... This cannot be relative since the curing process is not in the temp directory. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 04:03:05 +09:00
cat	fecb963e85	internal/rosa: libxml2 artifact ... Required by wayland. Release tarball is xz only, unfortunately. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 03:47:42 +09:00
cat	cd9da57f20	internal/rosa: libexpat artifact ... Required by wayland. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 03:15:25 +09:00
cat	c6a95f5a6a	internal/rosa: meson artifact ... Required by wayland and pipewire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 03:03:21 +09:00
cat	228489371d	internal/rosa: setuptools artifact ... Apparently the only way to install python stuff offline. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 02:28:47 +09:00
cat	490471d22b	cmd/mbf: verbose by default ... It usually does not make sense to use this without verbose. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 02:12:56 +09:00
cat	763d2572fe	internal/rosa: pkg-config artifact ... Used by hakurei and many other programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 01:26:54 +09:00
cat	bb1b6beb87	internal/rosa: name suffix by toolchain ... This makes output more useful during bootstrap. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 00:57:03 +09:00
cat	3224a7da63	cmd/mbf: disable threshold by default ... This is not very useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 00:05:59 +09:00
cat	8a86cf74ee	internal/rosa/go: symlink executables ... This avoids having to fix up $PATH for every artifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 23:59:08 +09:00
cat	e34a59e332	internal/rosa/go: run toolchain tests ... LLVM patches and a TMPDIR backed by tmpfs fixed most tests. Broken tests in older versions are disabled. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 21:21:53 +09:00
cat	861801597d	internal/pkg: expose response body ... This uses the new measured reader provided by Cache. This should make httpArtifact zero-copy. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 16:10:34 +09:00
cat	334578fdde	internal/pkg: expose underlying reader ... This will be fully implemented in httpArtifact in a future commit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 14:48:25 +09:00
cat	20790af71e	internal/rosa: lazy initialise all artifacts ... This improves performance, though not as drastically as lazy initialising llvm. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 01:43:18 +09:00
cat	43b8a40fc0	internal/rosa: lazy initialise llvm ... This significantly improves performance. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 00:29:46 +09:00
cat	87c3059214	internal/rosa: run perl tests ... A broken test with unexplainable failure is disabled. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 18:58:09 +09:00
cat	6956dfc31a	internal/pkg: block on implementation entry ... This avoids blocking while not in Cure method of the implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 16:02:50 +09:00
cat	d9ebaf20f8	internal/rosa: stage3 special case helper ... This makes it cleaner to specify non-stage3 and stage3-exclusive dependencies. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 12:23:35 +09:00
cat	acee0b3632	internal/pkg: increase output buffer size ... This avoids truncating unreasonably long lines from llvm. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 11:45:44 +09:00
cat	5e55a796df	internal/rosa: gnu patch artifact ... This is more robust than the busybox implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 11:32:27 +09:00
cat	f6eaf76ec9	internal/rosa: patch library paths ... This removes the need for reference LDFLAGS in the standard toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 11:22:25 +09:00
cat	5c127a7035	internal/rosa: patch header search paths ... This removes the need for reference CFLAGS in the standard toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-23 01:56:52 +09:00
cat	8a26521f5b	internal/rosa/go: run bootstrap toolchain tests ... The objdump test will be re-enabled after fixing llvm search paths. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 07:05:48 +09:00
cat	0fd4556e38	internal/rosa/llvm: fix broken test patch ... Both stage1 and stage2 passes at this point. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 06:42:04 +09:00
cat	50b82dcf82	internal/rosa/gnu: coreutils artifact ... Required by llvm unit and regression tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 05:42:23 +09:00
cat	20a8d30821	internal/rosa/busybox: link /usr/bin/env ... This is required by many scripts which uses bash but still pretends to be portable. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 04:21:06 +09:00
cat	cdf2e4a2fb	internal/rosa: bash artifact ... Required by llvm unit and regression tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 04:06:48 +09:00
cat	dcb8a6ea06	internal/rosa: fix toolchain layer order ... This allows extras to override toolchain artifacts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 03:37:46 +09:00
cat	094a62ba9d	internal/rosa: diffutils artifact ... LLVM tests are not happy with busybox diff. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 03:00:59 +09:00
cat	6420b6e6e8	internal/rosa: libffi artifact ... Required by python during llvm test suite. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 02:47:47 +09:00
cat	d7d058fdc5	internal/rosa/gnu: disable broken tests ... These are documented as broken via comments yet not disabled on musl for some reason. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 23:31:45 +09:00
cat	84795b5d9f	internal/rosa/git: add dependencies ... These are required outside the stage3 toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 22:14:48 +09:00
cat	f84d30deed	internal/rosa/gnu: run checks ... Checks are not run for gettext for now since it contains broken tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 22:07:08 +09:00
cat	77821feb8b	internal/rosa: gettext artifact ... Compile time dependency of git. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 21:52:50 +09:00
cat	eb1060f395	internal/rosa: autoconf artifact ... Required by git to reconfigure some options. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 21:44:49 +09:00
cat	0e08254595	internal/rosa: m4 artifact ... Autotools dependency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 21:42:25 +09:00
cat	349d8693bf	internal/rosa: perl artifact ... This runs without tests for now, will be enabled after some toolchain patches. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 21:33:12 +09:00
cat	e88ae87e50	internal/rosa/llvm: run unit and regression tests ... Two tests are marked expected to fail for Rosa OS. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 08:25:36 +09:00
cat	7cd4aa838c	internal/rosa/llvm: patch source tree ... A few patches are required for disabling broken tests and changing default search paths. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 08:25:17 +09:00
cat	641942a4e3	internal/rosa/cmake: chmod entire source tree ... This works around builds that traverse out of the appended pathname. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 07:26:36 +09:00
cat	b6a66acfe4	internal/rosa: git artifact ... This is required by the clang unit and regression tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 07:00:14 +09:00
cat	b72dc43bc3	internal/pkg: report dependency graph size ... This is an interesting value to know when profiling. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 05:35:28 +09:00
cat	8e59ff98b5	internal/rosa: include iana-etc ... This is used by some programs and will likely end up in the Rosa OS system image anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 05:28:41 +09:00
cat	f06d7fd387	cmd/mbf: expose some artifacts for curing ... This will remain until dist is successfully bootstrapped. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 05:18:08 +09:00
cat	ba75587132	internal/pkg: allow user namespace creation ... No good reason to filter this in the execArtifact container, and the extended filter breaks certain programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 04:49:25 +09:00
cat	9a06ce2db0	internal/rosa: bootstrap go toolchain ... This runs without tests for now. Will be fixed in a later commit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-20 07:14:11 +09:00
cat	3ec15bcdf1	internal/rosa/cmake: use hardcoded build directory ... This eliminates some nondeterminism. Still getting 3-stage non-determinism in runtimes and clang, though. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 22:51:34 +09:00
cat	d933234784	internal/pkg: make checksum available to cure ... This enables deduplication by value as implemented in execArtifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 21:29:56 +09:00
cat	1c49c75f95	cmd/mbf: toolchain 3-stage non-determinism check ... This unfortunately fails right now. Requires further investigation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 04:40:44 +09:00
cat	6a01a55d7e	internal/rosa: parallel cmake bootstrap ... This takes a very long time otherwise. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 03:21:29 +09:00
cat	b14964a66d	internal/rosa: standard toolchain via 2-stage bootstrap ... This implements the 2-stage bootstrap build without clumping the stages together in the cmake target. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:57:28 +09:00
cat	ff98c9ded9	internal/rosa: llvm bootstrap artifacts ... This bootstraps the LLVM toolchain across multiple artifacts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:48:44 +09:00
cat	7f3d1d6375	internal/rosa: llvm artifact abstraction ... The llvm bootstrap is multi-stage by nature, and cannot be completed in a single artifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:29:06 +09:00
cat	3a4f20b759	internal/rosa: cmake abstraction ... This is a helper for generating cure script for a cmake-based project. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:20:37 +09:00
cat	21858ecfe4	internal/rosa: ninja artifact ... Generated by cmake, recommended format for llvm toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:08:17 +09:00
cat	574a64aa85	internal/rosa: cpython artifact ... Dependency of llvm build scripts, also an optional cure dependency of ninja. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:58:53 +09:00
cat	85d27229fd	internal/rosa: zlib artifact ... Dependency of llvm build scripts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:48:27 +09:00
cat	83fb80d710	internal/rosa: cmake artifact ... This is required for compiling the toolchain and many other programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:36:38 +09:00
cat	fe6dc62ebf	internal/rosa: musl libc artifact ... This will likely be included in Rosa OS. The installation is modified to be entirely contained in prefix. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:25:41 +09:00
cat	823f9c76a7	internal/rosa: busybox from source ... This will be part of the standard toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:12:47 +09:00
cat	2df913999b	internal/rosa: kernel headers ... This is required by the toolchain and many other programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:03:19 +09:00
cat	52c959bd6a	internal/rosa: minimal rsync artifact ... For installing kernel headers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:58:34 +09:00
cat	d258dea0bf	internal/rosa: bootstrap on gentoo stage3 ... This contains a fully working musl+llvm toolchain and many build systems in a pretty small package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:51:49 +09:00
cat	dc96302111	internal/rosa: GNU make artifact ... This compiles GNU make from source. This is unfortunately required by many programs, but is a cure dependency only. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:40:25 +09:00
cat	88e9a143d6	internal/rosa: toolchain abstraction ... This provides a clean and easy to use API over toolchains. A toolchain is an opaque set of artifacts and environment fixups. Exported toolchains should be functionally indistinguishable from each other. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:28:16 +09:00
cat	8d06c0235b	internal/rosa: busybox binary artifact ... This installs a statically linked busybox binary distribution for decompressing the gentoo stage3 tarball, since there is no native xz implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:07:56 +09:00
cat	4155adc16a	internal/rosa: static etc artifact ... This places configuration files with hardcoded content in /etc to silence test suites expecting them to be present. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-18 23:51:45 +09:00
cat	2a9525c77a	cmd/mbf: command handling ... This tool is a frontend for bootstrapping hakurei via internal/pkg. Named mbf for now for "maiden's best friend" as a tribute to the DOOM source port. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-18 22:19:19 +09:00
cat	efc90c3221	internal/pkg: deduplicate dependency errors ... This significantly simplifies error reporting for caller. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-17 14:41:00 +09:00
cat	610ee13ab3	internal/pkg: lock on-filesystem cache ... Any fine-grained file-based locking here significantly hurts performance and is not part of the use case of the package. This change guarantees exclusive access to prevent inconsistent state on the filesystem. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-16 18:12:51 +09:00
cat	5936e6a4aa	internal/pkg: parallelise scrub ... This significantly improves scrubbing performance. Since the cache directory structure is friendly to simultaneous access, this is possible without synchronisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-16 02:47:59 +09:00
cat	3499a82785	internal/pkg: cache computed identifiers ... This eliminates duplicate identifier computations. The new implementation also significantly reduces allocations while computing identifier for a large dependency tree. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-15 23:30:43 +09:00
cat	088d35e4e6	internal/pkg: optional dependency graph size limit ... This provides a quick check against cyclic dependencies without hurting cure performance. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-14 18:25:46 +09:00
cat	1667df9c43	internal/pkg: zero atime and mtime ... This is significantly more practical than keeping track of them in directory flattening format and setting this in every non-artifact implementation. Only tarArtifact can have meaningful deterministic checksums that are not zero and zeroing them still keeps autotools happy. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-13 01:30:30 +09:00
cat	156dd767ef	internal/pkg: remove typeflag promotion loop ... Expanding this enables sharing of code common between types. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-13 00:33:13 +09:00
cat	5fe166a4a7	internal/pkg: exec prefix verbose output ... This proxies program output through msg with a name and fd prefix. This also avoids introducing additional information to the container via process stdout/stderr. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 22:15:01 +09:00
cat	41a8d03dd2	internal/pkg: cure completion verbose messages ... This reports cure completions to the user. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 21:56:00 +09:00
cat	610572d0e6	internal/pkg: optionally named static file ... These are generally for generating configuration files or build scripts, naming them is quite useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 04:34:50 +09:00
cat	29951c5174	internal/pkg: caller-supplied reporting name for exec ... This does not have a reasonable way of inferring the underlying name. For zero value it falls back to base of executable pathname. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 04:17:47 +09:00
cat	91c3594dee	internal/pkg: append user-facing name in messages ... This makes verbose messages much more useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 03:53:19 +09:00
cat	7ccc2fc5ec	internal/pkg: exec with specific timeout ... This change also updates the documentation of NewExec. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 17:46:04 +09:00
cat	63e137856e	internal/pkg: do not discard the result of compact ... This result was mistakenly unused resulting in incorrect identifiers for artifacts with duplicate dependencies. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 04:40:24 +09:00
cat	e1e46504a1	container/check: return error backed by string type ... The struct turned out not necessary during initial implementation but was not unwrapped into its single string field. This change replaces it with the underlying string and removes the indirection. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 04:23:55 +09:00
cat	ec9343ebd6	container/check: intern absolute pathnames ... This improves performance in heavy users like internal/pkg. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 04:18:11 +09:00
cat	423808ac76	nix: use package from module in default ... This makes overriding hakurei easier. Also avoids building hakurei twice since nix does that for some reason. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 03:50:08 +09:00
cat	2494ede106	container/init: configure interface lo ... This enables loopback networking when owning the net namespace. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 03:36:20 +09:00
cat	da3848b92f	internal/pkg: compare interfaces for host net ... An upcoming improvement in the container init makes the current host net check return the same result for both cases. This change Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 00:30:32 +09:00
cat	34cb4ebd3b	internal/pkg: pass context to file cure ... This removes the left over embedded contexts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-09 05:31:38 +09:00
cat	f712466714	internal/pkg: move dependency flooding to cache ... This imposes a hard upper limit to concurrency during dependency satisfaction and moves all dependency-related code out of individual implementations of Artifact. This change also includes ctx and msg as part of Cache. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-09 05:20:34 +09:00
cat	f2430b5f5e	internal/pkg: use short wait delay ... The cure is condemned at the point of cancellation and all of its state is destroyed by the deferred cleanup, so it makes little sense to wait for it much. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 18:58:51 +09:00
cat	863e6f5db6	internal/pkg: use correct artifact count ... This updates buffer sizes and counters to use correct total artifact count. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 08:45:37 +09:00
cat	23df2ab999	internal/pkg: place ephemeral upperdir in tmp ... This enables the use of directories made writable this way as scratch space. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 08:23:16 +09:00
cat	7bd4d7d0e6	internal/pkg: support explicit overlay mount ... This removes all but the /work/ auto overlay behaviour and enables much greater flexibility. This also renames ExecContainerPath to ExecPath so it is easier to type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 07:55:09 +09:00
cat	b3c30bcc51	internal/pkg: set container WaitDelay ... This prevents a container from blocking forever after context is canceled. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 06:23:57 +09:00
cat	38059db835	internal/pkg: make tar temporary directory writable ... This allows it to be renamed to work directory. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 04:32:14 +09:00
cat	409fd3149e	internal/pkg: reserve kind range ... This is useful for custom implementations of Artifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 01:21:51 +09:00
cat	4eea136308	internal/pkg: do not connect stdin ... This introduces external state when verbose. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 23:17:58 +09:00
cat	c86ff02d8d	internal/pkg: tar optional file ... This allows tar to take a single-file directory Artifact as input. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 22:16:26 +09:00
cat	e8dda70c41	internal/pkg: return reader for files ... This improves efficiency for cache hits. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 21:36:47 +09:00
cat	7ea4e8b643	internal/pkg: support tarball compressed via bzip2 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 20:18:28 +09:00
cat	5eefebcb48	internal/pkg: reject entry types disallowed in the cache ... These are not encoded in the format, they are rejected here to serve as a check for cache since checksum is computed for every directory. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 03:22:44 +09:00
cat	8e08e8f518	internal/pkg: automatic overlay mount on work ... This directly submits the upperdir to cache. It is primarily used in bootstrapping where tools are limited and should not be used unless there is a very good reason to. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 03:14:33 +09:00
cat	54da6ce03d	internal/pkg: respect mount order for overlay temp ... Setting it up after everything else prevents covering files in /tmp. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 01:03:49 +09:00
cat	3a21ba1bca	internal/pkg: implement file artifact ... This is an Artifact implementing File, backed by a constant, caller-supplied byte slice. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 00:39:29 +09:00
cat	45301559bf	internal/pkg: fail on empty output directory ... This works around the fact that execArtifact always creates the work directory when setting up the bind mount. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 00:04:32 +09:00
cat	0df87ab111	internal/pkg: automatic overlay mount on tmp ... This sets up the last Artifact to target /tmp as a writable overlay mount backed by the host side temp directory. This is useful for an Artifact containing source code to be built for another Artifact for example. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 23:45:08 +09:00
cat	aa0a949cef	internal/pkg: do not clear execute bit ... Only write should be cleared here, clearing execute causes execArtifact to be unable to start anything since no Artifact is able to produce an executable file. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 22:31:44 +09:00
cat	ce0064384d	internal/pkg: automatic overlay mount on root ... This makes it possible to use an Artifact as root without arranging for directory creation in the Artifact ahead of time. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 22:19:47 +09:00
cat	53d80f4b66	internal/pkg/testdata: check network ... This validates hostNet state. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 21:32:10 +09:00
cat	156096ac98	internal/pkg: known checksum exec artifact ... This optionally attaches an output checksum to an execArtifact and enables host networking for the resulting container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 20:58:34 +09:00
cat	ceb75538cf	internal/pkg: update http checksum signature ... This was using the old pre-KnownChecksum function signature. It did not affect correctness since httpArtifact performs internal validation to avoid the strict mode vfs roundtrip, but it prevented content-addressed cache hits. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 18:24:31 +09:00
cat	0741a614ed	internal/pkg: relocate testtool workaround ... This can be reused in other test cases. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 18:06:56 +09:00
cat	e7e9b4caea	internal/pkg: exec nil path check during cure ... This results in os.ErrInvalid instead of a panic, which hopefully improves user experience. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 17:46:12 +09:00
cat	f6d32e482a	internal/pkg: ensure parent for non-directory entries ... This works around streams containing out of order entries. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 05:55:24 +09:00
cat	79adf217f4	internal/pkg: implement exec artifact ... This runs a program in a container environment. Artifacts can be made available to the container, they are cured concurrently and mounted in order. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 05:05:34 +09:00
cat	8efffd72f4	internal/pkg: destroy temp during deferred cleanup ... This avoids missing the cleanup when cure returns an error. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 04:24:54 +09:00
cat	86ad8b72aa	internal/pkg: expose cure through cure context ... This allows a curing Artifact to cure Artifact it depends on. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 01:04:06 +09:00
cat	e91049c3c5	internal/pkg: pass cure context as single value ... This cleans up the function signature and makes backwards compatible API changes possible. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 00:56:49 +09:00
cat	3d4d32932d	internal/pkg: verify checksum after uneventful scrub ... This checks that scrub did not condemn any entry without reporting it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 22:54:16 +09:00
cat	0ab6c13c77	internal/pkg: consistency check for on-disk cache ... This change adds a method to check on-disk cache consistency and destroy inconsistent entries as they are encountered. This primarily helps verify artifact implementation correctness, but can also repair a cache that got into an inconsistent state from curing a misbehaving artifact, without having to destroy the entire cache. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 05:30:29 +09:00
cat	834cb0d40b	internal/pkg: override "." for directory checksum ... This makes the checksum consistent with the final resting state of artifact directories without incurring the cost of an extra pair of chown syscalls. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 04:00:13 +09:00
cat	7548a627e5	internal/pkg: delete stale done channels ... There is no reason to keep these around. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 02:12:34 +09:00
cat	b98d27f773	internal/pkg: expand single directory tarball ... This enables much cleaner use of their output without giving up any meaningful data. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 01:43:23 +09:00
cat	f3aa31e401	internal/pkg: temporary scratch space for cure ... This allows for more flexibility during implementation. The use case that required this was for expanding single directory tarballs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 01:39:18 +09:00
cat	4da26681b5	internal/pkg: compute http identifier from url ... The previous implementation exposes arbitrary user input to the cache as an identifier, which is highly error-prone and can cause the cache to enter an inconsistent state if the user is not careful. This change replaces the implementation to compute identifier late, using url string as params. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 00:43:21 +09:00
cat	4897b0259e	internal/pkg: improve artifact interface ... This moves all cache I/O code to Cache. Artifact now only contains methods for constructing their actual contents. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 00:01:23 +09:00
cat	d6e4f85864	internal/pkg: ignore typeflag 'g' ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 12:46:56 +09:00
cat	3eb927823f	internal/pkg: create symlinks for files ... These are much easier to handle than hard links and should be just as transparent for this use case. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 01:48:53 +09:00
cat	d76b9d04b8	internal/pkg: implement tar artifact ... This is useful for unpacking tarballs downloaded from the internet. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 01:34:30 +09:00
cat	fa93476896	internal/pkg: override working directory perms ... This must be writable to enable renaming, and the final result is conventionally read-only alongside the entire directory contents. This change overrides the permission bits as part of Store. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 00:55:52 +09:00
cat	bd0ef086b1	internal/pkg: enable cache access during store ... This is still not ideal as it makes entry into Store sequential. This will be improved after more usage code is written. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 00:39:14 +09:00
cat	05202cf994	internal/pkg: pass context in request wrapper ... This method is for the most common use case, and in actual use there will always be an associated context. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 23:53:52 +09:00
cat	40081e7a06	internal/pkg: implement caching for directories ... This works on any directories and should be robust against any bad state the artifact curing process might have failed at. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 22:54:46 +09:00
cat	863d3dcf9f	internal/pkg: wrap checksum string encoding ... This wraps base64.URLEncoding.EncodeToString for cleaner call site. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 22:03:25 +09:00
cat	8ad9909065	internal/pkg: compute identifier from deps ... This provides infrastructure for computing a deterministic identifier based on current artifact kind, opaque parameters data, and optional dependency kind and identifiers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 21:26:25 +09:00
cat	deda16da38	internal/pkg: create work directory ... This is used for artifacts that cure into directories. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 20:56:11 +09:00
cat	55465c6e72	internal/pkg: optionally validate flat pathnames ... This makes the decoder safe against untrusted input without hurting performance for a trusted stream. This should still not be called against untrusted input though. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 18:59:18 +09:00
cat	ce249d23f1	internal/pkg: implement http artifact ... This is useful for downloading source tarballs from the internet. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 15:29:58 +09:00
cat	dd5d792d14	go: 1.25 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 15:25:28 +09:00
cat	d15d2ec2bd	internal/pkg: relocate cache test helper ... This is useful for other tests that need a cache instance. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-02 16:08:43 +09:00
cat	3078c41ce7	internal/pkg: encode entry in custom format ... The fact that Gob serialisation is deterministic is an implementation detail. This change replaces Gob with a simple custom format. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-02 15:39:42 +09:00
cat	e9de5d3aca	internal/pkg: implement caching for files ... This change contains primitives for validating and caching single-file artifacts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-02 12:57:19 +09:00
cat	993afde840	dist: install sharefs ... This also removes the deprecated hpkg program. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-02 00:57:51 +09:00
cat	c9cd16fd2a	cmd/sharefs: prepare directory early ... This change also checks against filesystem daemon running as root early. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 23:17:02 +09:00
cat	e42ea32dbe	nix: configure sharefs via fileSystems ... Turns out this did not work because in the vm test harness, virtualisation.fileSystems completely and silently overrides fileSystems, causing its contents to not even be evaluated anymore. This is not documented as far as I can tell, and is not obvious by any stretch of the imagination. The current hack is cargo culted from nix-community/impermanence and hopefully lasts until this project fully replaces nix. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 23:14:08 +09:00
cat	e7982b4ee9	cmd/sharefs: create directory as root ... This optional behaviour is required on NixOS as it is otherwise impossible to set this up: systemd.mounts breaks startup order somehow even though my unit looks identical to generated ones, fileSystems does not support any kind of initialisation or ordering other than against other mount points. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 22:14:33 +09:00
cat	ef1ebf12d9	cmd/sharefs: handle mount -t fuse.sharefs ... This should have been handled in a custom option parsing function, but that much extra complexity is unnecessary for this edge case. Honestly I do not know why libfuse does not handle this itself. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 20:49:27 +09:00
cat	775a9f57c9	cmd/sharefs: check option parsing behaviour ... This change makes it possible to check parseOpts behaviour as part of Go tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 17:33:12 +09:00
cat	2f8ca83376	cmd/sharefs: containerise filesystem daemon ... This replaces the forking daemonise libfuse function which prevents Go callbacks from calling into the runtime. This also enforces least privilege on the daemon process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 10:16:35 +09:00
cat	3d720ada92	container: optionally allow orphan ... This is required for the typical daemonise use case. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 09:12:02 +09:00
cat	2e5362e536	cmd/sharefs: opaque setup state ... This allows unrestricted use of the type system and prepares setup code for cross-process initialisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 04:14:00 +09:00
cat	6d3bd27220	cmd/sharefs: expand fuse_main ... This change should not change behaviour other than making output more consistent. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 02:30:28 +09:00
cat	a27305cb4a	cmd/sharefs: improve help message ... This improves consistency with the fuse_main help message. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 02:20:41 +09:00
cat	0e476c5e5b	cmd/sharefs: allocate sharefs_private early ... This also removes global state used by sharefs_init. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 08:08:41 +09:00
cat	54712e0426	nix: set noatime on sharefs ... Could improve performance, atime is not useful for this filesystem anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 05:34:05 +09:00
cat	b77c1ecfdb	cmd/sharefs/test: check option handling ... This verifies behaviour related to setuid/setgid when starting as root. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 05:28:45 +09:00
cat	dce5839a79	nix: do not restart sharefs ... This avoids disrupting running containers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 04:12:14 +09:00
cat	d597592e1f	cmd/sharefs: rename fuse-helper to fuse-operations ... This is not really just library wrapper functions, but instead implements the callbacks, so fuse-operations makes more sense. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 03:19:32 +09:00
cat	056f5b12d4	cmd/sharefs: move translate_pathname body to macro wrapper ... This is never called directly anywhere and it is simple enough to be included in the macro. This avoids passing the pointer around and dereferencing errno location, resulting in over 5% increase in throughput on the clang build. No change in the gcc build though. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 02:10:59 +09:00
cat	da2bb546ba	cmd/sharefs: remove readlink ... This filesystem does not support symbolic links, so readlink is not useful, and unreachable in this case because of the check in getattr. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-25 06:00:58 +09:00
cat	7bfbd59810	cmd/sharefs: implement shared filesystem ... This is for passing files between applications, similar to android /sdcard. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-25 05:13:02 +09:00
cat	ea815a59e8	nix: disable source fortification in devShell ... This generates warnings when compiling without optimisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-21 02:22:28 +09:00
cat	28a8dc67d2	internal/pipewire: raise Core::Sync timeout ... Hopefully relieves spurious failures on a very overloaded system. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-19 00:49:33 +09:00
cat	ec49c63c5f	internal/pipewire: EPOLL_CTL_ADD instead of EPOLL_CTL_MOD ... Implementation is no longer tied down by the limitations of SyscallConn. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-19 00:43:44 +09:00
cat	5a50bf80ee	internal/pipewire: hold socket fd directly ... The interface provided by net is not used here and is a leftover from a previous implementation. This change removes it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-19 00:28:24 +09:00
cat	ce06b7b663	internal/pipewire: inform conn of blocking intent ... The interface does not expose underlying kernel notification mechanisms. This change removes the need to poll in situations were the next call might block. This is made cumbersome by the SyscallConn interface left over from a previous implementation, it will be replaced in a later commit as the current implementation does not make use of any net.Conn methods other than Close. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-19 00:00:33 +09:00
cat	08bdc68f3a	internal/pipewire: sendmsg/recvmsg errors are fatal ... When returned wrapped as a syscall error, these are impossible to recover from, so wrap them as a fatal error. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-18 23:33:12 +09:00
cat	8cb0b433b2	release: 0.3.3 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 20:34:45 +09:00
cat	767f1844d2	test: check shim private dir cleanup ... This asserts that no shim private dir was left behind after all containers terminate. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 20:30:19 +09:00
cat	54610aaddc	internal/outcome: expose pipewire via pipewire-pulse ... This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst. Closes #29. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 12:57:06 +09:00
cat	2e80660169	internal/outcome: look up pipewire-pulse path ... This is for setting up the pipewire-pulse container in shim, for #29. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 12:38:39 +09:00
cat	d0a3c6a2f3	internal/outcome: optional shim private dir ... This is a private work directory owned by the specific shim. Useful for sockets owned by this instance of the shim and requires no direct assistance from the priv-side process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 12:32:46 +09:00
cat	0c0e3d6fc2	hst: add direct hardware option ... This is unfortunately the only possible setup to securely expose PipeWire to the container. Further explanation explained in the doc comment and #29. This will be implemented in a future commit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 12:29:32 +09:00
cat	fae910a1ad	container: sync stubbed wait4 loop after notify ... This ensures consistent state observed by wait4 loop when running against stub. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 10:22:48 +09:00
cat	178c8bc28b	internal/pipewire: handle SecurityContext::Create error ... This method can result in an error targeting it, so it is handled here. This change also causes a call to Create to also Core::Sync, as it should have done. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:41:28 +09:00
cat	30dcab0734	internal/pipewire: SecurityContext as destructible ... This proxy can be destroyed by sending a Core::Destroy targeting it. This change implements the Destroy method by embedding destructible. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:31:50 +09:00
cat	0ea051062b	internal/pipewire: reorder context struct ... This change reorders and groups struct elements. This improves readability since this struct holds a lot of state loosely related to each other. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:26:30 +09:00
cat	b0f2ab6fff	internal/pipewire: implement Core::Destroy ... This change also implements pending destructible check on Sync. Destruction method should always be implemented as a wrapper of destructible.destroy. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:20:58 +09:00
cat	00a5bdf006	internal/pipewire: do not emit None for spa_dict ... Turns out the PipeWire server does not expect a value of type None here at all. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:06:44 +09:00
cat	a27dfdc058	internal/pipewire: implement Core::CreateObject ... Nothing uses this right now, this would have to be called by wrapper methods on Registry that would search the objects Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 08:10:57 +09:00
cat	6d0d9cecd1	internal/pipewire: handle nil spa_dict correctly ... This now marshals into a value of type None when the slice is nil, and correctly unmarshals from type None. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 07:12:00 +09:00
cat	17248d7d61	internal/pipewire: unmarshal nil pointer correctly ... This now calls unmarshalCheckTypeBounds to advance to the next message. Additionally, handling for None value is relocated to a function for reuse by other types. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 06:58:53 +09:00
cat	41e5628c67	internal/pipewire: return correct size for nil spa_dict ... A nil spa_dict results in a None type value being sent over the wire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 06:07:46 +09:00
cat	ffbec828e1	internal/pipewire: move Core wrapper methods under Core ... These do not belong under Context, and is an early implementation limitation that carried over. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 05:37:21 +09:00
cat	de0467a65e	internal/pipewire: treat noAck violation as fatal ... Receiving this event indicates something has gone terribly wrong somehow, and ignoring Core::BoundProps causes inconsistent state anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-13 22:30:06 +09:00
cat	b5999b8814	internal/pipewire: implement Core::RemoveId ... This is emitted by the server when a proxy id is removed for any reason. Currently, the only path for this to be emitted is when a global object is destroyed while some proxy is still bound to it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-13 21:50:32 +09:00
cat	ebc67bb8ad	nix: update flake lock ... NixOS 25.11 introduces a crash in cage and an intermittent crash in foot. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-12 08:39:55 +09:00
cat	e60ff660f6	internal/pipewire: treat unknown opcode as fatal ... Skipping events can cause local state to diverge from the server. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-11 04:22:03 +09:00
cat	47db461546	internal/pipewire: generic Core::Error handling ... This flushes message buffer before queueing the event expecting the error. Since this is quite useful and relatively complex, it is relocated to a method of Context. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-11 04:07:55 +09:00
cat	0a3fe5f907	internal/pipewire: export Registry::Destroy ... This handles the error returned by Sync. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-11 03:34:33 +09:00
cat	b72d502f1c	internal/outcome: populate instance metadata for PipeWire ... These have similar semantics to equivalent Wayland security-context-v1 fields. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-10 03:01:30 +09:00
cat	f8b3db3f66	internal/pipewire: cleaner error message for unsupported type ... The error string itself is descriptive enough, so use it as the error message directly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-10 01:51:06 +09:00
cat	0e2fb1788f	internal/pipewire: implement Registry::Destroy ... This requires error handling infrastructure in Core that does not yet exist, so it is not exported for now. It has been manually tested via linkname against PipeWire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-10 01:25:30 +09:00
cat	d8417e2927	internal/pipewire: implement Registry::GlobalRemove ... This is emitted by PipeWire when a global object disappears, because PipeWire insists that all clients that had called Core::GetRegistry must constantly sync its local registry state with the remote. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-10 01:00:03 +09:00
cat	ccc0d98bd7	release: 0.3.2 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 08:12:52 +09:00
cat	a3fd05765e	container: load initial process started before syscall ... This avoids a race between returning from syscall and checking the state. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 08:12:22 +09:00
cat	c538df7daa	internal/pipewire: expose connection props ... Unused in hakurei but could be useful when the package is moved out of internal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:51:12 +09:00
cat	44e5aa1a36	internal/pipewire: include remaining size in recvmsg wrapper ... This otherwise truncates the received data by len(remaining) bytes. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:36:46 +09:00
cat	cf0e7d8c27	internal/pipewire: reset per-roundtrip state once per call ... This was left in consume when relocating per-roundtrip code out of the per-receive consume method. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:28:33 +09:00
cat	130add21e5	internal/pipewire: increment remote sequence after establishing bounds ... This avoids incrementing it twice proceeding from a partial message. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:21:41 +09:00
cat	5ec4045e24	internal/pipewire: do not clobber error parsing SCMs ... The error is handled later, clobbering it here breaks error handling when SCMs are present. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:02:15 +09:00
cat	be2075f169	Revert "internal/pipewire: work around remote sequence quirk" ... This reverts commit 564db6863b.	2025-12-09 05:25:41 +09:00
cat	e9fb1d7be5	container/initdaemon: copy wstatus from wait4 loop ... Due to the special nature of the init process, direct use of wait outside the wait4 loop is racy. This change copies the wstatus from wait4 loop state instead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:58:42 +09:00
cat	dafe9f8efc	container: spin instead of block on wait4 ECHILD ... Blocking prevents further wait4 processing causing ops to never receive their signals. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:56:13 +09:00
cat	96dd7abd80	container: improve error message fallback ... This now falls back to message.Error if no other concrete type is matched. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:45:54 +09:00
cat	d5fb179012	cmd/hakurei: exec instead of fork/exec from shell ... There is no reason to keep the shell process around. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:29:41 +09:00
cat	462863e290	container: friendlier error message for op timing out ... This includes the string for the failing op which helps with troubleshooting. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:19:03 +09:00
cat	2786611b88	test/interactive: add app with bad daemon ... This is useful for testing daemon error handling behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:12:07 +09:00
cat	791a1dfa55	container: make wait4 loop available to ops ... Due to the special nature of the init process, regular wait calls are unavailable. This change provides infrastructure to access wait4 loop state from Op. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 21:43:49 +09:00
cat	564db6863b	internal/pipewire: work around remote sequence quirk ... Remote sequence sometimes start with a non-zero value, and keeps the same value for a while before going back to zero. Conditions for reproducing this behaviour is not yet known. This change works around this behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 20:10:01 +09:00
cat	87781c7658	treewide: include PipeWire op and enforce PulseAudio check ... This fully replaces PulseAudio with PipeWire and enforces the PulseAudio check and error message. The pipewire-pulse daemon is handled in the NixOS module. Closes #26. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 08:53:04 +09:00
cat	0c38fb7b6a	hst: expose daemon as fs entry ... This is slightly counterintuitive, but it turned out well under this framework since the daemon backs its target file. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 07:38:47 +09:00
cat	357cfcddee	container: start daemons within container ... This is useful for daemons internal to the container. The only current use case is pipewire-pulse. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 07:21:04 +09:00
cat	6bf245cf1b	container: pass context as setup state ... This is useful currently for daemon Op, but could be used for many other things. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 06:06:19 +09:00
cat	c8eeb4a4d1	internal/outcome: integrate pipewire server ... This is very simple and takes almost no inputs. This is not yet hooked up to anything to prevent breaking any existing behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 05:03:16 +09:00
cat	5785714b64	container: call op method right before initial process ... This is at a point considered to be already "within" the container. Daemons internal to the container can be started here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 04:57:24 +09:00
cat	422efcf258	hst: check for insecure PulseAudio enablement ... This is currently still a noop, but required for #26. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 03:13:02 +09:00
cat	104eeecf65	cmd/hakurei: add pipewire flag ... This is for "run" command, formerly permissive defaults behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 02:39:55 +09:00
cat	bf856f06e5	internal/pipewire: constant for PIPEWIRE_REMOTE ... This is not defined anywhere in upstream PipeWire, no idea why. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 23:35:29 +09:00
cat	1931b54600	hst: add pipewire flag ... These are for #26. None of them are implemented yet. This fixes up test cases for the change to happen. Existing source code and JSON configuration continue to have the same effect. Existing flags get its EPulse bit replaced by EPipeWire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 22:34:40 +09:00
cat	093e30c788	internal/system: integrate PipeWire SecurityContext ... Tests for this Op happens to be the best out of everything due to the robust infrastructure offered by internal/pipewire. This is now ready to use in internal/outcome for implementing #26. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 17:39:34 +09:00
cat	1b17ccda91	internal/system: optional op check parallelism ... The PipeWire Op check cannot be made parallel due to the OS interaction. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 17:31:10 +09:00
cat	7c6fc1128b	internal/pipewire: set finalizer on scc ... This prevents leaking the socket and pipe fds. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 17:29:22 +09:00
cat	8cdd659239	internal/pipewire: seq access method for consume ... This improves readability as the offset is not immediately obvious. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 17:07:30 +09:00
cat	15c2839a09	internal/pipewire: respond to Core::Ping ... There is currently no known message that will get the PipeWire server to emit this event. It should be handled regardless. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 14:55:56 +09:00
cat	b9b9705b52	internal/pipewire: specify opcode and file count with message ... This adds checking of FileCount while writing a message. Message encoding is relocated to an exported method to be used externally, probably for test stubbing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 13:54:11 +09:00
cat	246e04214a	internal/system: pass syscall error message ... This makes wrapped syscall errors produce a cleaner error message. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 02:08:05 +09:00
cat	503bfc6468	internal/system: port connect by name ... This behaviour is a bit messy and checks what appears to be a windows-specific environment variable for some reason. Keeping everything intact regardless to match upstream behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 02:00:19 +09:00
cat	d837628b4c	internal/system: remove ineffectual join reverting wayland ... Removing the pathname socket used to be handled separately, now it is done during the Close call. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 00:43:50 +09:00
cat	3cb58b4b72	internal/pipewire: high level SecurityContext helper ... This sets up close pipe and socket internally, and exposes the resulting pathname socket and close_fd cleanup as an io.Closer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 21:16:27 +09:00
cat	bb1fc4c7bc	internal/pipewire: check pending ids after done ... This is not guaranteed to have completed after a roundtrip. This is leftover from when Roundtrip also sent and waited for sync. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 21:09:55 +09:00
cat	f44923da29	internal/pipewire: post-sync cleanup functions ... This makes it easier to handle resources who only needs to stay alive before the next sync. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 21:03:21 +09:00
cat	5e7861bb00	internal/pipewire: handle dangling files in roundtrip ... This should not be handled on every receive as it could cause valid (though impossible in current upstream implementation) messages to be rejected and raise a protocol error. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 19:21:57 +09:00
cat	7cb3308a53	internal/pipewire: store proxy errors in context ... This change fixes handling of non-fatal errors during a roundtrip as there can be multiple receive calls per roundtrip. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 19:13:46 +09:00
cat	490093a659	internal/pipewire: set errno on an empty message ... This matches upstream behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 16:50:49 +09:00
cat	2b22efcdf1	internal/pipewire: rename context consume method ... This name is more correct since it does not roundtrip, but receives messages. This is also more consistent with the method on event proxies. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 16:44:39 +09:00
cat	8a2f9edcf9	internal/pipewire: use sendmsg/recvmsg directly ... The PipeWire protocol does not work with Go abstractions. This change makes relevant methods call sendmsg/recvmsg directly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 02:12:47 +09:00
cat	0d3f332d45	internal/pipewire: do not send ancillary msg without files ... This is unnecessary and does not match upstream behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-05 04:20:04 +09:00
cat	d5509cc6e5	internal/pipewire: constants from pipewire/keys.h ... These are PipeWire spa_dict keys. Interestingly many keys in the sample are undefined and appear as magic strings in upstream source code. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-05 03:27:30 +09:00
cat	0d3ae6cb23	internal/pipewire: improve protocol error messages ... These are mostly small formatting changes, with the biggest change being to UnexpectedEOFError where its kind is now described as part of the error type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-04 03:15:58 +09:00
cat	69b1131d66	internal/pipewire: use type name in error strings ... This provides more useful messages for protocol errors. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-04 02:29:27 +09:00
cat	2c0b92771a	internal/pipewire: relocate constants ... This should make things easier to navigate, and possible to fully automatically generate the constants in the future. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-03 03:52:17 +09:00
cat	054c91879f	internal/pipewire: finalizers for dangling files ... This makes their handling much less error-prone. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-03 03:36:02 +09:00
cat	c34439fc5f	internal/pipewire: collect non-protocol errors ... These errors are recoverable and should not terminate event handling. Only terminate event handling for protocol errors or inconsistent state that makes further event handling impossible. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-03 01:35:43 +09:00
cat	32fb137bb2	internal/pipewire: fail on unacknowledged proxies ... These proxies (with special cases documented in the implementation) are only safe for use after acknowledgement from the server. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 21:17:46 +09:00
cat	e7a665e043	internal/pipewire: handle Core::Error ... This event is not encountered in the pw-container sample, but already has existing sample from an excerpt. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 06:16:18 +09:00
cat	af741f20a0	internal/pipewire: implement client context ... This consumes the entire sample, is validated to send identical messages and correctly handle received messages. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 06:03:21 +09:00
cat	39c6716fb0	internal/pipewire: use correct types in header ... This was written when the protocol was still barely understood, so none of the types here are correct and match the rest of the protocol. This change corrects these types. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 03:32:10 +09:00
cat	7bc73afadd	internal/pipewire: wrap EOF error for deserialisation ... The io.ErrUnexpectedEOF error can be returned from multiple places. This change eases error handling. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 03:19:37 +09:00
cat	647aa9d02f	internal/pipewire: preallocate for footer ... This is useful during serialisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 03:06:27 +09:00
cat	91aaabaa1b	internal/pipewire: benchmarks against Gob and JSON ... Performance does not matter for the use case of this library, but it is still interesting to know. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-30 12:13:46 +09:00
cat	3d4c7cdd9e	internal/pipewire: implement Core::Error ... Sample was captured from pw-cli. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-30 01:39:39 +09:00
cat	4fd6d6c037	internal/pipewire: implement Core::Ping, Core::Pong ... I could not get the server to produce these events, however I am confident enough with the implementation to do it by hand. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-29 23:25:29 +09:00
cat	de3fc7ba38	internal/pipewire: implement SecurityContext::Create ... This is finally the thing we are after. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-29 16:46:39 +09:00
cat	5a5c4705dd	internal/pipewire: implement Registry::Bind ... This change also adds test cases for messages before this one. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-29 03:01:53 +09:00
cat	f703aa20a5	internal/pipewire: implement client generation footer ... This corresponds with the core generation footer and seem to be the only other possible footer type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-29 02:55:30 +09:00
cat	5c12425d48	internal/pipewire: implement Registry::Global ... Dealing with this event reawakened my burning hatred for OOP. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-28 02:32:45 +09:00
cat	cbe86dc4f0	internal/pipewire: add json struct tags ... These match the names found in documentation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-28 01:33:32 +09:00
cat	d08a1081bd	internal/pipewire: do not store spa_dict fields ... This is effectively a poor man's slice, it is entirely unnecessary here and can be handled internally. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-28 01:25:18 +09:00
cat	72a2601d74	internal/pipewire: store sample iovec continuously ... This removes the need for manual splitting. The understanding of the format is robust enough to allow this to happen anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-28 00:35:10 +09:00
cat	1dab87aaf0	internal/pipewire: add missing constants ... These did not appear useful at first since it was assumed to be filenames for loading modules. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 21:28:16 +09:00
cat	2bafde99e3	internal/pipewire: shorten test data filenames ... These were getting very annoying to type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 20:06:01 +09:00
cat	91efeb101a	internal/pipewire: spa_dict size nil check ... This fixes serialisation of NULL spa_dict. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 02:51:36 +09:00
cat	dcb22a61c0	internal/pipewire: require appending marshaler ... This eliminates all non-reflect allocations. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 02:33:19 +09:00
cat	e028a61fc1	internal/pipewire: preallocate for known size ... This is still not efficient by any means, but it should eliminate most non-reflect allocation (all allocation if PODMarshaler is not used). Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 02:26:31 +09:00
cat	73987be7d4	internal/pipewire: size without serialisation ... This is required to achieve zero allocation (other than reflect). Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 02:17:38 +09:00
cat	563b5e66fc	internal/pipewire: simplify spa_dict appends ... This change uses the (somewhat) newly exposed MarshalAppend which improves readability. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 01:52:13 +09:00
cat	2edcfe1e68	internal/pipewire: define size constants ... This gets rid of magic numbers in marshal/unmarshal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 00:54:56 +09:00
cat	2698ca00e8	internal/pipewire: implement Core::Done ... The message in the sample does not correspond to any known method call. The spec does not mention what to do with messages like this, but all existing usage code simply drops it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 19:02:21 +09:00
cat	1d0143386d	internal/pipewire: optional final trailing garbage check ... Omitting the check is only useful for custom unmarshaler. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 18:50:39 +09:00
cat	a55c209099	internal/pipewire: additional Client::Info test case ... This appears to add *one single entry* compared to the message before it. The inefficiency of this protocol is beyond imagination. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 16:28:57 +09:00
cat	10ff276da1	internal/pipewire: additional Client::Info test case ... This message follows the other Client::Info event before it. No idea why. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 16:17:38 +09:00
cat	fd4d379b67	internal/pipewire: implement Client::Info ... Everything is already supported, as usual. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 16:05:46 +09:00
cat	77f5b89a41	internal/pipewire: implement Core::BoundProps ... Very straightforward type, everything is already supported. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 18:40:19 +09:00
cat	14e33f17e5	internal/pipewire: check nil marshaler ... NULL values have special case in the format. This check ensures correctness serialising nil pointers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 18:36:08 +09:00
cat	cfeb7818eb	internal/pipewire: implement Core::Info and generation footer ... These are not directly related but are first encountered on the same message in the capture. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 15:16:12 +09:00
cat	05391da556	internal/pipewire: implement footer ... The POD itself is serialised without requiring a special case, however its presence is only indicated by the difference in size recorded in the header and payload. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 15:11:22 +09:00
cat	463f8836e6	internal/pipewire: implement Long type ... Thankfully no special case here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 15:05:37 +09:00
cat	2e465c94da	internal/pipewire: implement Id type ... This is, in fact, just a glorified Int type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 15:01:58 +09:00
cat	26009fd3f7	internal/pipewire: slice at POD boundary ... This prevents incorrectly reading trailing data as part of the current POD. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 14:58:56 +09:00
cat	2d7b896a8c	internal/pipewire: bounds check against wire size ... This covers cases where wire size is not known ahead of time. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 13:42:31 +09:00
cat	a0eb010aab	internal/pipewire: spa_dict trailing garbage within POD ... This performs the check within the bounds of the POD only. This was not caught since spa_dict was only used as the final struct field until now. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 13:39:02 +09:00
cat	b1b27ac1df	internal/pipewire: zero size before validation ... Leftover values from previous invocations cause incorrect behaviour here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 12:21:37 +09:00
cat	fc3d78fe01	internal/pipewire: implement Core::Sync ... Once again, already entirely supported, the offset is not yet fully verified but makes intuitive sense. Will verify this on future occurrences of the message. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 08:52:06 +09:00
cat	591637264a	internal/pipewire: implement Core::GetRegistry ... This struct is entirely supported, so this change is very straightforward. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 08:34:19 +09:00
cat	e77652bf89	internal/pipewire: move test data to files ... These get very big later on, and would be painful to represent as the compound literal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 08:09:10 +09:00
cat	88d3e46413	internal/pipewire: implement Client::UpdateProperties ... This is the second message on the captured sample. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 04:16:11 +09:00
cat	e51e81bb22	internal/pipewire: implement spa_dict type ... This is a terrible type that defies the type system. It is implemented on the concrete type to avoid special cases. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 04:08:52 +09:00
cat	8f4a3bcf9f	internal/pipewire: use custom marshaler when available ... This reduces special cases. This change also exposes unmarshalled message size on the wire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 04:05:22 +09:00
cat	827dc9e1ba	internal/pipewire: implement string type ... This is still NUL terminated strings, and an extra NUL character on an 8-byte string does cause an extra 7 bytes of padding. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 04:00:59 +09:00
cat	d92de1c709	internal/pipewire: check for trailing garbage ... This is useful during development. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 01:59:29 +09:00
cat	5bcafcf734	internal/pipewire: implement Core::Hello ... This implements enough types to correctly marshal and unmarshal Core::Hello. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 01:20:30 +09:00
cat	9f7b0c2f46	internal/pipewire: add type constants ... This change also centralises encoding testing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-24 22:00:09 +09:00
cat	3e87187c4c	internal/pipewire: implement message header ... Test cases are from interactions between pw-container and PipeWire. Results are validated against corresponding body. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-23 16:20:35 +09:00
cat	b651d95e77	workflows: do not duplicate on pulls ... This condition causes two runs to be created on a pull, as gitea does not check whether a run has already been created for the current commit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-19 06:59:32 +09:00
cat	aab92ce3c1	internal/wayland: clean up pathname socket ... This is cleaner than cleaning up in internal/system as it covers the failure paths. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-19 06:37:04 +09:00
cat	a495e09a8f	internal/wayland: do not double close fd ... These are already closed during securityContextBindPipe on a non-nil error. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-17 22:03:29 +09:00
cat	3afca2bd5b	internal/wayland: expose WAYLAND_VERSION ... This might be useful troubleshooting information. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-17 01:46:01 +09:00
cat	b73a789dfe	.clang-format: increase indent width ... This significantly increases readability. This patch is pretty big so it is being done after mostly everything has settled. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 20:57:29 +09:00
cat	38b5ff0cec	internal/wayland: check pathname size ... This avoids passing a truncated pathname to the kernel. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 03:34:05 +09:00
cat	3c204b9b40	internal/wayland: increase error detail ... This includes targeted paths in the returned errors. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 02:09:50 +09:00
cat	00771efeb4	internal/wayland: remove fd typecasts ... These are no longer necessary since RawConn is no longer used. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 01:45:37 +09:00
cat	61972d61f6	internal/wayland: reimplement connect/bind code ... The old implementation is relocated to system/wayland/deprecated.go. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 01:23:16 +09:00
cat	fe40af7b7e	internal/wayland: relocate connection struct ... This interface is getting replaced, so relocating it to the deprecated wrapper package before working on its replacement. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 23:25:46 +09:00
cat	12751932d1	internal/wayland: improve error handling ... Note: wl_registry_add_listener is undocumented everywhere. Its implementation calls wl_proxy_add_listener which returns 0 on success or -1 on failure. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 21:26:31 +09:00
cat	41b49137a8	.clang-format: do not limit line length ... This hard limit destroys readability in some places. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 17:06:43 +09:00
cat	c761e1de4d	nix: build with clang ... Clang is better than gcc in various ways. This also pulls in clang-format which is very helpful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 16:36:36 +09:00
cat	a91920310d	internal: relocate packages ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 13:58:34 +09:00
cat	16e674782a	cmd/hakurei: reorder show entries ... This order semantically makes more sense and generally looks tidier. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 22:14:49 +09:00
cat	47244daefb	treewide: migrate ldd callers ... This discontinues use of the deprecated ldd.Exec function for #25. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 21:59:59 +09:00
cat	46fa104419	ldd: require absolute pathname ... The sandbox which ldd(1) runs in does not inherit parent work directory, so relative pathnames will not work correctly. While it is trivial to support such a use case, the use of relative pathnames is highly error-prone and generally frowned against in this project. The Exec function remains available under the same signature until v0.4.0 where it will be removed. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 21:53:10 +09:00
cat	45953b3d9c	ldd: cancel on decoder error ... This prevents blocking from failures caused by ldd(1) emitting output that is not anticipated by the decoder. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 21:43:34 +09:00
cat	42759e7a9f	ldd: create musl entry representation ... This mostly helps with debugging. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 21:38:35 +09:00
cat	8e2d2c8246	ldd: check decoder scan guard ... This was unreachable via the Parse wrapper. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 18:32:47 +09:00
cat	299685775a	container: provide usage example ... This requires cgo so unfortunately will not run in the playground. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 18:25:22 +09:00
cat	b7406cc4c4	ldd: update package doc comment ... This should hopefully deter misuse of this package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 17:49:01 +09:00
cat	690a0ed0d6	ldd: decode from reader ... This should reduce memory footprint of the parsing process and allow decoding part of the stream. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 08:33:19 +09:00
cat	a9d72a5eb1	internal/outcome: rename run from main ... The "main.go" name is quite confusing as this is often only present in main packages. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 01:06:14 +09:00
cat	6d14bb814f	container/fhs: add constant for /dev/shm/ ... This is mounted for the default read-only /dev/ when programs want to use shm_open(3). Defining it here is less error-prone and saves the extra append at runtime. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 01:03:26 +09:00
cat	be0e387ab0	internal/info: relocate from internal ... This is cleaner and makes more sense. The longer LDFLAGS was never a valid concern since it is always inserted by a script. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-13 07:29:46 +09:00
cat	abeb67964f	treewide: document linkname uses ... These provide justification for each use of linkname. Poorly thought out uses of linkname are removed. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-13 07:14:16 +09:00
cat	bf5d10743f	treewide: import internal/system ... For #24. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-13 01:22:47 +09:00
cat	4e7aab07d5	internal/system: relocate from system ... These packages are highly specific to hakurei and are difficult to use safely from other pieces of code. Their exported symbols are made available until v0.4.0 where they will be removed for #24. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-13 01:17:47 +09:00
cat	15a66a2b31	treewide: import internal/helper ... For #24. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 23:19:34 +09:00
cat	f347d44c22	internal/helper: relocate from helper ... This package is ugly and is pending removal only kept alive by xdg-dbus-proxy. Its exported symbols are made available until v0.4.0 where it will be removed for #24. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 23:16:13 +09:00
cat	b5630f6883	test: move package sandbox internal ... This should never be used outside vm tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 23:03:22 +09:00
cat	17ffdb2dcf	release: 0.3.1 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 00:53:14 +09:00
cat	ac34635890	container: set FD_CLOEXEC on all open files ... While fd created from this side always has the FD_CLOEXEC flag, the same is not true for files left open by the parent. This change prevents those files from leaking into the container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 00:18:29 +09:00
cat	9dec9dbc4b	container/init: close setup pipe early ... This prevents leaking the setup pipe. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-11 07:31:58 +09:00
cat	2f74adc8bd	container/init: close initial process files on termination ... This closes them during the adopt wait delay. This also keeps them alive. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-10 20:35:59 +09:00
cat	d7e0104ae4	treewide: reject impossible user-supplied fd ... These are all trusted user input, however this check reduces the likelihood of hard to debug errors. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-10 20:31:26 +09:00
cat	bb92e3ada9	cmd/hakurei: expose current instance identifier ... This writes the 16-byte instance identifier to file descriptor specified by --identifier-fd if set, and closes the file. This enables safely obtaining the new instance's identifier. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-10 07:52:35 +09:00
cat	fad419c2a2	internal/outcome: handle group lookup message ... This results in slightly less messy error reporting. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-09 02:15:48 +09:00
cat	b1a1e73238	nix: update names to reflect new terminology ... These are terminology from way early days. Update them now to be less confusing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-09 01:48:31 +09:00
cat	38e9128a8c	container/std/seccomp: remove ineffectual typecast ... This is no longer necessary since the return type changed. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-07 05:45:51 +09:00
cat	7ee702a44e	container/seccomp/presets: add fields to literals ... This keeps composites analysis happy. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-07 05:11:57 +09:00
cat	3d188ef884	std: separate seccomp constants ... This avoids inadvertently using PNRs as syscall numbers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-07 04:30:06 +09:00
cat	34ccda84b2	release: 0.3.0 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-06 01:37:15 +09:00
cat	042013bb04	container/std: syscall JSON adapter ... This provides cross-platform JSON adapter for syscall number. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-06 00:57:53 +09:00
cat	5c2b63a7f1	container: add 386 constants ... While it is unlikely a use case for hakurei on i686 exists, it does not hurt to have this support. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 20:21:14 +09:00
cat	9fd97e71d0	treewide: fit test untyped int literals in 32-bit ... This enables hakurei test suite to run on 32-bit targets. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 20:13:19 +09:00
cat	fba201c995	container/std: relocate rule types ... This enables its use in hst for #15. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 06:00:39 +09:00
cat	7f27a6dc51	container/seccomp: use native types ... This prepares NativeRule for relocation to std for #15. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 05:48:59 +09:00
cat	b65aba9446	container/seccomp: alias libseccomp types ... This enables tests to refer to these types and check its size. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 05:21:43 +09:00
cat	becaf8b6d7	std: relocate seccomp lookup tables ... This should enable resolving NativeRule in hst. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 04:48:05 +09:00
cat	54c0d6bf48	container/seccomp/pnr: define pseudo syscalls ... This eliminates the cgo dependency from syscall lookup. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 04:32:41 +09:00
cat	c1399f5030	std: rename from comp ... Seccomp lookup tables are going to be relocated here, and PNR constants. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 02:47:43 +09:00
cat	9ac63aac0c	hst/grp_pwd: add extra test cases ... Does not change coverage but this helps me crosscheck with my phone. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 01:42:42 +09:00
cat	cb9ebf0e15	hst/grp_pwd: specify new uid format ... This leaves slots available for additional uid ranges in Rosa OS. This breaks all existing installations! Users are required to fix ownership manually. Closes #18. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-04 08:24:41 +09:00
cat	9a2a7b749f	cmd/hakurei/print: handle nil config ... There is nothing to print in this case, and such a nil check is missing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 02:20:18 +09:00
cat	ec5cb9400c	cmd/hpkg/test: print share directory ... This is more useful now that state is tracked here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:51:57 +09:00
cat	ae66b3d2fb	message: rename NewMsg to New ... Should have done this when relocating this from container. Now is a good time to rename it before v0.3.x. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:49:27 +09:00
cat	149bc3671a	internal/store: remove compat adapter ... This is no longer used as everything has been migrated. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:26:01 +09:00
cat	24435694a5	hst/config: make identifier omitempty ... This is an optional field. Serialise it as such. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:23:15 +09:00
cat	1c168babf2	cmd/hakurei/print: use new store interface ... This removes the final uses of the compat interfaces. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:19:16 +09:00
cat	0edcb7c1d3	test: print share directory ... This is more useful now that state is tracked here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 17:00:59 +09:00
cat	0e5ca74b98	cmd/hakurei/print: serialise array for ps ... Wanted to do this for a long time, since the key is redundant. This also makes it easier to migrate to the new store interface. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 16:37:08 +09:00
cat	23ae7822bf	cmd/hakurei/parse: use new store interface ... This greatly reduces overhead. The iterator also significantly cleans up the usage code. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 16:00:41 +09:00
cat	898b5aed3d	internal/store: iterator over all entries ... This is quite convenient for searching the store or printing active instance information. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 15:54:00 +09:00
cat	7c3c3135d8	internal/outcome: track state in TMPDIR ... The SharePath is a more stable path than RunDirPath, since it is available all the time and should remain consistent. This also fits better into the intended use case of XDG_RUNTIME_DIR. Closes #17. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 12:40:58 +09:00
cat	f33aea9ff9	internal/env: cleaner runtime dir fallback ... This now places rundir inside the fallback runtime dir, so special case in internal/outcome is avoided. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 12:22:32 +09:00
cat	e7fc311d0b	internal/outcome/shim: cover reparent and exit request paths ... These test cases were missed when making the changes. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 11:58:09 +09:00
cat	f5274067f6	internal/outcome/process: nil-safe unlock when failing to lock ... This also prints a debug message which might be useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 11:47:51 +09:00
cat	e7161f8e61	internal/outcome: measure finalise time ... This also increases precision of state time output. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 05:17:33 +09:00
cat	6931ad95c3	internal/outcome/shim: EOF as exit request fallback ... In some cases the signal might be delivered before the signal handler is installed, and synchronising against such a case is too expensive. Instead, use the pipe being closed as a fallback to the regular exit request. This change also moves installation of the signal handler early. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 04:41:26 +09:00
cat	2ba599b399	internal/outcome/process: use new store interface ... This change also spawns shim before committing system state, leaving it blocking on the setup pipe. The internal/outcome/process structure is also entirely reworked to be much more readable and less error-prone, while enabling basic performance measurements. A long-standing bug where segment lock is not held during Commit is also resolved. Closes #19. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 04:25:45 +09:00
cat	d3d3417125	internal/outcome/process: relocate start and serve ... This is useful for reordering these operations for further cleanup. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-01 19:14:59 +09:00
cat	651cdf9ccb	internal/outcome: remove guard on main ... This is no longer exported. Such a check is pointless. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-31 22:58:26 +09:00
cat	68ff0a2ba6	container/params: expose pipe ... This increases flexibility of how caller wants to handle the I/O. Also makes it no longer rely on finalizer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-31 22:39:02 +09:00
cat	6a0ecced90	internal/store: expose save via handle ... The handle is otherwise inaccessible without the compat interface. This change also moves compatibility methods to separate adapter structs to avoid inadvertently using them. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-31 04:20:22 +09:00
cat	b667fea1cb	internal/store: export new interface ... This exposes store operations safe for direct access, and enables #19 to be implemented in internal/outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-31 03:41:26 +09:00
cat	b25ade5f3d	internal/store: rename compat interface ... The new store implementation will be exported as Store. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 18:53:59 +09:00
cat	ebdcff1049	internal/store: rename from state ... This reduces collision with local variable names, and generally makes sense for the new store package, since it no longer specifies the state struct. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 18:43:55 +09:00
cat	46c5ce4936	internal/outcome/shim: check full behaviour ... This took significant effort to stub out, and achieves full coverage after c5aefe5e9d. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 05:20:49 +09:00
cat	36f8064905	internal/outcome/process: output via msg ... This makes it possible to instrument output behaviour through stub. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 03:41:38 +09:00
cat	eeb9f98e5b	internal/outcome/shim: move signal constants ... The magic numbers hurt readability. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 01:20:51 +09:00
cat	3f9f331501	internal/outcome/shim: remove noop resume ... The shim does not suspend output to begin with. These are leftovers from when container startup code suspends output. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 23:31:39 +09:00
cat	2563391086	internal/outcome/shim: params check early ... This is unreachable, but keeping it here as a failsafe until more test cases are added. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 23:10:12 +09:00
cat	a0b4e47acc	internal/outcome: rename from app ... This is less ambiguous, and more accurately describes the purpose of the package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 04:33:13 +09:00
cat	a52f7038e5	internal/env: relocate from app ... This package is much cleaner to stub independently, and makes no sense to lump into app. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 04:11:49 +09:00
cat	274686d10d	internal/validate: relocate from app ... These are free of the dispatcher from internal/app. This change relocates them into their own package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 03:40:09 +09:00
cat	65342d588f	internal/app/state: improve store internals ... This fully exposes the store internals for #19 and are final preparations for removing the legacy store interface. This change also fixes a potential deadlock in the handle initialisation mkdir failure path. This however is never reachable in hakurei as the store is never accessed concurrently. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 03:21:00 +09:00
cat	5e5826459e	internal/app/state: improve handles internals ... This replaces the Store interface with something better reflecting the underlying data format for #19. An implementation of Store is provided on top of the new code to ease transition. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-28 22:00:54 +09:00
cat	4a463b7f03	internal/app/state: use absolute pathnames ... This is less error-prone and fits better into internal/app which already uses check.Absolute for all pathnames. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-26 03:41:19 +09:00
cat	dacd9550e0	internal/app/state: acquire big lock for toplevel operations ... This avoids getting into an inconsistent state for simultaneous calls to List and Do on a previously unknown identity. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-26 03:27:56 +09:00
cat	546b00429f	treewide: update doc comments ... Some internal/app/state types were relocated to hst as part of the API. This change updates doc comments referring to them. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-26 03:00:04 +09:00
cat	86f4219062	internal/app/state/data: check full entry behaviour ... This eventually gets relocated to internal/app. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-26 01:49:14 +09:00
cat	fe2929d5f7	internal/app/state: include et header ... This is the initial step of implementing #19. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 22:01:26 +09:00
cat	470e545d27	internal/app/state: use internal/lockedfile ... This is a pretty solid implementation backed by robust tests, with a much cleaner interface. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 21:29:24 +09:00
cat	8d3381821f	internal/app/state: export correct backend value ... This references the underlying multiBackend due to a typo, making the whole dance with c a noop. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 21:11:05 +09:00
cat	e9d00b9071	container/executable: handle nil msg ... This is useful in some tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 21:08:54 +09:00
cat	4f41afee0f	internal/app/state: fixed size et-only header ... This header improves the robustness of the format and significantly reduces cleanup overhead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 19:15:06 +09:00
cat	7de593e816	cmd/hakurei: short identifier from lower half ... The upper half is now a nanosecond timestamp. Lower half is still random bytes, so use lower half for short identifier. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-24 00:47:39 +09:00
cat	2442eda8d9	hst/instance: embed config struct ... This makes the resulting json easier to parse since it can now be deserialised into the config struct. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-24 00:42:16 +09:00
cat	05488bfb8f	hst/instance: store priv side pid ... This can receive signals, so is more useful to the caller. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 23:19:55 +09:00
cat	dd94818f20	hst/instance: define instance state ... This is now part of the hst API. This change also improves identifier generation and serialisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 22:59:02 +09:00
cat	0fd357e7f6	container/init: do not suspend output ... Init is not very talkative after process start even when verbose. Suspending output here is pointless and does more harm than good. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 08:11:00 +09:00
cat	57231d4acf	container/init: improve signal handling ... The SIGTERM signal is delivered in many other cases and can lead to strange behaviour. The unconditional resume of the logger also causes strange behaviour in the cancellation forwarding path. This change also passes through additional signals. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 08:02:03 +09:00
cat	c5aefe5e9d	internal/app/shim: check behaviour ... This does not yet have full coverage. Test cases covering failsafe paths and error injection will be added eventually. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 06:07:41 +09:00
cat	0f8ffee44d	internal/app: test case for hst template ... This helps with other areas of the test suite as they're all based on hst.Template. This also helps contributors understand the behaviour of internal/app as hst.Template covers almost every aspect of it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 04:46:58 +09:00
cat	1685a4d000	cmd/hsu: reduce excessive test range ... This is quite a simple piece of code, this many test cases is excessive and wastes time in the integration vm. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 04:32:32 +09:00
cat	6c338b433a	internal/app: reduce test case indentation ... This improves readability on narrower displays. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 07:40:32 +09:00
cat	8accd3b219	internal/app/shim: use syscall dispatcher ... This enables instrumented testing of the shim. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 06:58:45 +09:00
cat	c5f59c5488	container/syscall: export prctl wrapper ... This is useful as package "syscall" does not provide such a wrapper. This change also improves error handling to fully conform to the manpage. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 05:26:54 +09:00
cat	fcd9becf9a	cmd/hsu: run in locked thread ... Goroutine scheduling is not helpful in the setuid wrapper, it is not particularly harmful but lock here anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 05:09:08 +09:00
cat	622f945c22	container/init: check msg in entrypoint ... This covers invalid call to Init. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 04:20:08 +09:00
cat	e94acc424c	container/comp: rename from bits ... This package will also hold syscall lookup tables for seccomp. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 20:54:03 +09:00
cat	b1a4d801be	hst/container: flags string representation ... This is useful for a user-facing representation other than JSON. This also gets rid of the ugly, outdated flags string builder in cmd/hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 20:29:52 +09:00
cat	56beae17fe	test: assert hst CGO_ENABLED=0 ... The hst package only deals with data serialisation, however since many parts of hakurei make use of C libraries in some way it can be easy to inadvertently depend on cgo. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 19:49:04 +09:00
cat	ea978101b1	cmd/hakurei/parse: close config fd ... This is cleaner than relying on the finalizer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 06:05:36 +09:00
cat	fbd1638e7f	test/interactive/trace: update nix attribute ... Updated according to evaluation warning. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 06:03:09 +09:00
cat	d42067df7c	cmd/hakurei/json: friendly error messages ... This change handles errors returned by encoding/json and prints significantly cleaner messages. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 05:17:25 +09:00
cat	b9459a80c7	container/init: check use constants for open flags ... These bits are arch-specific. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 03:13:58 +09:00
cat	f8189d1488	container/syscall: dot-import syscall ... This avoids having arch-specific constants for arm64. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 03:09:14 +09:00
cat	5063b774c1	hst: expose version string ... The hst API is tied to this version string. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 01:56:44 +09:00
cat	766dd89ffa	internal: clean up build strings ... These names are less ambiguous and should be understandable without reading the source code. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 01:49:36 +09:00
cat	699c19e972	hst/container: optional runtime and tmpdir sharing ... Sharing and persisting these directories do not always make sense. Make it optional here. Closes #16. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-19 04:11:38 +09:00
cat	b5b30aea2e	test: place marker in common path ... This discontinues the dependency on shared tmpdir and xdg_runtime_dir implementation detail, for #16. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-19 03:50:48 +09:00
cat	c0e860000a	internal/app: remove spfinal ... This no longer needs to be an independent outcomeOp since spFilesystemOp is moved late. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-19 02:58:46 +09:00
cat	d87020f0ca	hst/config: validate env early ... This should happen in hst since it requires no system state. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-19 02:39:49 +09:00
cat	e47aebb7a0	internal/app/outcome: apply configured filesystems late ... This enables configured filesystems to cover system mount points. Closes #8. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-19 01:41:52 +09:00
cat	543bf69102	internal/app/spx11: check behaviour ... This outcomeOp will likely never change. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-19 01:00:12 +09:00
cat	4cfb1fda8f	internal/app/spwayland: check behaviour ... This op is quite clean. Might get slightly more complex at some point passing socket fd. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-19 00:30:56 +09:00
cat	c12183959a	internal/app/dispatcher: report correct field ... This was mistakenly reporting sharePath on inequivalence causing very confusing output. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-18 23:59:10 +09:00
cat	f5845e312e	internal/app/sptmpdir: check behaviour ... Another simple one. This will change when shared tmpdir and xdg runtime dir becomes optional. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-18 23:46:10 +09:00
cat	a103c4a7c7	internal/app/hsu: check behaviour ... The stub exec.ExitError is hairy as usual, but internal/app is not cross-platform, so this is okay. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-18 20:45:42 +09:00
cat	67ec82ae1b	ldd/exec: raise timeout ... This mostly helps with tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-18 18:03:09 +09:00
cat	f6f0cb56ae	internal/app/hsu: remove wrapper method ... This was added to reduce the size of diffs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-18 17:35:20 +09:00
cat	d4284c109d	internal/app/spruntime: emulate pam_systemd type ... This sets XDG_SESSION_TYPE to the corresponding values specified in pam_systemd(8) according to enablements. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-18 04:33:04 +09:00
cat	030ad2a73b	internal/app/spruntime: check behaviour ... This one is quite simple and has no state. Needs to emulate pam_systemd behaviour so that will change. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-18 03:41:49 +09:00
cat	78d7955abd	internal/app/sppulse: check cookie discovery ... There's quite a bit of code duplication here, but since this is already quite simple it is best to leave it as is for now. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-18 01:30:33 +09:00
cat	b066495a7d	internal/app/sppulse: check buf error injection ... The loadFile behaviour does not guarantee the buffer to be zeroed or not clobbered if an error is returned, but for the current implementation it is good to check. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-18 01:01:52 +09:00
cat	82299d34c6	internal/app/sppulse: correctly handle small cookie ... The trailing zero bytes need to be sliced off, so send cookie size alongside buffer content. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-17 08:03:03 +09:00
cat	792013cefb	internal/app/sppulse: check behaviour ... Still needs to check the relocated functions separately. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-17 06:32:21 +09:00
cat	3f39132935	internal/app/dispatcher: reduce check code duplication ... This also improves readability of test cases. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-17 05:47:12 +09:00
cat	c922c3f80e	internal/app/sppulse: relocate hard to test code ... These are better tested separately instead of creating many op test cases. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-16 05:47:49 +09:00
cat	6cf58ca1b3	internal/app/spfinal: check behaviour ... This will be merged with spFilesystemOp eventually. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-16 02:08:31 +09:00
cat	425421d9b1	hst/container: rename constants ... The shim is an implementation detail and should not be mentioned in the API. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-16 00:27:00 +09:00
cat	5e0f15d76b	hst/container: additional shim exit codes ... These are now considered stable, defined behaviour and can be used by external programs to determine shim outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-15 22:09:33 +09:00
cat	ae65491223	container/init: use one channel for wait4 ... When using two channels it is possible for the other case to be reached before all pending winfo are consumed, causing incorrect reporting. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-15 21:35:19 +09:00
cat	52e3324ef4	test/sandbox: ignore nondeterministic mount point ... No idea what systemd is doing with this to cause its options to change. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-14 07:08:39 +09:00
cat	f95e0a7568	hst/config: hold acl struct by value ... Doc comments are also reworded for clarity. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-14 07:02:14 +09:00
cat	4c647add0d	hst/container: pack boolean options ... The memory saving is relatively insignificant, however this increases serialisation efficiency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-14 06:39:00 +09:00
cat	a341466942	hst: separate container config ... The booleans are getting packed into a single field. This requires non-insignificant amount of code for JSON serialisation to stay compatible. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-14 04:23:05 +09:00
cat	e4ee8df83c	internal/app/spdbus: check behaviour ... This is not done very cleanly, however this op is pending removal for the in-process dbus proxy so not worth spending too much effort here. As long as it checks all paths it is good enough. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-14 01:51:01 +09:00
cat	048c1957f1	helper/args: variadic check function ... This package turns out to be much less widely used than anticipated, and might be facing removal. This change makes test cases cleaner. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-14 01:48:56 +09:00
cat	790d77075e	system/dbus: remove builder state leak ... This enables external testing of system.I state. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-14 01:33:44 +09:00
cat	e5ff40e7d3	container: synchronise after notify ... This should eliminate intermittent failures in the forward test. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-13 19:17:19 +09:00
cat	123d7fbfd5	container/seccomp: remove export pipe ... This was only useful when wrapping bwrap. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-13 18:51:35 +09:00
cat	7638a44fa6	treewide: parallel tests ... Most tests already had no global state, however parallel was never enabled. This change enables it for all applicable tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-13 04:38:48 +09:00
cat	a14b6535a6	helper/stub: write ready byte late ... Hopefully eliminates spurious failures. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-13 01:55:44 +09:00
cat	763ab27e09	system: remove tmpfiles ... This is no longer used. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-13 01:12:44 +09:00
cat	bff2a1e748	container/initplace: remove indirect method ... This is no longer useful and is highly error-prone. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-13 01:06:45 +09:00
cat	8a91234cb4	hst: reword and improve doc comments ... This corrects minor mistakes in doc comments and adds them for undocumented constants. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-12 05:03:14 +09:00
cat	db7051a368	internal/app/spcontainer: check fs init behaviour ... This covers every statement. Some of them are unreachable unless the kernel returns garbage. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-12 03:58:53 +09:00
cat	36f312b3ba	internal/app/spcontainer: resolve path through dispatcher ... This prevents state from os tainting the test data. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-11 20:20:41 +09:00
cat	037144b06e	system/dbus: use well-known address in spec ... The session bus still performs non-standard formatting since it makes no sense for hakurei to start the session bus. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-11 18:52:06 +09:00
cat	f5a597c406	hst: rename /.hakurei constant ... This provides disambiguation from fhs.AbsTmp. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-11 14:32:35 +09:00
cat	8874aaf81b	hst: remove template bind nix store ... This does not add anything meaningful to the template, since there are already prior examples showing src-only bind ops. Remove this since it causes confusion by covering the previous mount point targeting /nix/store. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-11 13:59:10 +09:00
cat	04a27c8e47	hst: use plausible overlay template ... The current value is copied from a test case, and does not resemble its intended use case. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-11 13:51:08 +09:00
cat	9e3df0905b	internal/app/spcontainer: check params init behaviour ... This change also significantly reduces duplicate information in test case. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-11 02:44:02 +09:00
cat	9290748761	internal/app/spaccount: check behaviour ... This begins the effort of fully covering internal/app. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-11 00:54:04 +09:00
cat	23084888a0	internal/app/spaccount: apply default in shim ... The original code clobbers hst.Config, and was not changed when being ported over. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-11 00:38:06 +09:00
cat	50f6fcb326	container/stub: mark test overrides as helper ... This fixes line information in test reporting messages. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-10 22:15:20 +09:00
cat	070e346587	internal/app: relocate params state initialisation ... This is useful for testing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-10 22:00:49 +09:00
cat	24de7c50a0	internal/app: relocate state initialisation ... This is useful for testing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-10 20:15:58 +09:00
cat	f6dd9dab6a	internal/app: hold path hiding in op ... This makes no sense to be part of the global state. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-10 19:56:30 +09:00
cat	776650af01	hst/config: negative WaitDelay bypasses default ... This behaviour might be useful, so do not lock it out. This change also fixes an oversight where the unchecked value is used to determine ForwardCancel. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-10 05:11:32 +09:00
cat	109aaee659	internal/app: copy parts of config to state ... This is less error-prone than passing the address to the entire hst.Config struct, and reduces the likelihood of accidentally clobbering hst.Config. This also improves ease of testing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-10 03:19:09 +09:00
cat	22ee5ae151	internal/app: filter ops in implementation ... This is cleaner and less error-prone, and should also result in negligibly less memory allocation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-10 02:23:34 +09:00
cat	4246256d78	internal/app: hold config address in state ... This can be removed eventually as it is barely used. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-10 01:21:01 +09:00
cat	a941ac025f	container/init: unwrap descriptive fatal error ... These errors are printed with a descriptive message prefixed to them, so it is more readable to expose the underlying errno. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-09 22:04:35 +09:00
cat	87b5c30ef6	message: relocate from container ... This package is quite useful. This change allows it to be imported without importing container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-09 05:18:19 +09:00
cat	df9b77b077	internal/app: do not encode config early ... Finalise no longer clobbers hst.Config. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-09 04:38:54 +09:00
cat	a40d182706	internal/app: build container state in shim ... This significantly decreases ipc overhead. Closes #3. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-08 22:30:40 +09:00
cat	e5baaf416f	internal/app: check transmitted ops ... This simulates params to shim and this is the last step before params to shim is merged. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-08 20:02:09 +09:00
cat	ee6c471fe6	internal/app: relocate ops condition ... This allows reuse and finer grained testing of fromConfig. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-08 19:39:00 +09:00
cat	16bf3178d3	internal/app: relocate dynamic exported state ... This allows reuse of the populateEarly method in test instrumentation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-08 18:34:17 +09:00
cat	034c59a26a	internal/app: relocate late sys/params outcome ... This will end up merged with another op after reordering. For now relocate it into its dedicated op for test instrumentation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-08 18:26:50 +09:00
cat	5bf28901a4	cmd/hsu: check against setgid bit ... The getgroups behaviour is already checked for, but it never hurts to be more careful in a setuid program. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-08 18:22:24 +09:00
cat	9b507715d4	hst/dbus: validate interface strings ... This is relocated to hst to validate early. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-08 04:57:22 +09:00
cat	12ab7ea3b4	hst/fs: access ops through interface ... This removes the final hakurei.app/container import from hst. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-07 23:59:48 +09:00
cat	1f0226f7e0	container/check: relocate overlay escape ... This is used in hst to format strings. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-07 23:56:19 +09:00
cat	584ce3da68	container/bits: move bind bits ... This allows referring to the bits without importing container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-07 21:38:31 +09:00
cat	5d18af0007	container/fhs: move pathname constants ... This allows referencing FHS pathnames without importing container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-07 21:29:16 +09:00
cat	0e6c1a5026	container/check: move absolute pathname ... This allows use of absolute pathname values without importing container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-07 20:57:58 +09:00
cat	d23b4dc9e6	hst/dbus: move dbus config struct ... This allows holding a xdg-dbus-proxy configuration without importing system/dbus. It also makes more sense in the project structure since the config struct is part of the hst API however the rest of the implementation is not. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-07 19:03:51 +09:00
cat	3ce63e95d7	container: move seccomp preset bits ... This allows holding the bits without cgo. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-07 18:28:20 +09:00
cat	2489766efe	hst/config: identity bounds check early ... This makes sense to do here instead of in internal/app. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-07 17:58:28 +09:00
cat	9e48d7f562	hst/config: move container fields from toplevel ... This change also moves pd behaviour to cmd/hakurei, as this does not belong in the hst API. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-07 04:24:45 +09:00
cat	f280994957	internal/app: check nscd socket for path hiding ... This can seriously break things, and exposes extra host attack surface, so include it here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-05 20:47:30 +09:00
cat	ae7b343cde	hst: reword and move constants ... These values are considered part of the stable, exported API, so move them to hst. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-05 17:40:32 +09:00
cat	a63a372fe0	internal/app: merge static stub ...