7 Commits

Include renames

Author	SHA1	Message	Date
cat	e9a7cd526f	app: improve shim process management ... This ensures a signal gets delivered to the process instead of relying on parent death behaviour. SIGCONT was chosen as it is the only signal an unprivileged process is allowed to send to processes with different credentials. A custom signal handler is installed because the Go runtime does not expose signal information other than which signal was received, and shim must check pid to ensure reasonable behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-04-07 03:55:17 +09:00
cat	5c4058d5ac	app: run in native sandbox ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 01:52:49 +09:00
cat	ff30a5ab5d	fst: remove empty file ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-21 19:27:08 +09:00
cat	c64b8163e7	app: separate instance from process state ... This works better for the implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-21 16:06:24 +09:00
cat	3c80fd2b0f	app: defer system.I revert ... Just returning an error after a successful call of commit will leave garbage behind with no way for the caller to clean them. This change ensures revert is always called after successful commit with at least per-process state enabled. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-19 21:12:11 +09:00
cat	ef81828e0c	app: remove share method ... This is yet another implementation detail from before system.I, getting rid of this vastly cuts down on redundant seal state. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-19 16:20:25 +09:00
cat	bf95127332	fst: move App interface declaration ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-18 22:36:45 +09:00