Commit Graph

Select branches

Hide Pull Requests

develop

fpkg

fsu-bypass

master

staging

v0.0.1

v0.0.10

v0.0.11

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.0.6

v0.0.7

v0.0.8

v0.0.9

v0.1.0

v0.2.0

v0.2.1

v0.2.10

v0.2.11

v0.2.12

v0.2.13

v0.2.14

v0.2.15

v0.2.16

v0.2.17

v0.2.18

v0.2.2

v0.2.3

v0.2.4

v0.2.5

v0.2.6

v0.2.7

v0.2.8

v0.2.9

v0.3.0

v0.3.1

v0.3.2

v0.3.3

Mono Color

• 5b7b3fa9a4
  
  helper/seccomp: implement reader interface via pipe Ophestra 2025-02-03 18:10:29 +0900
• d58fb8c6ee
  
  workflows: fix nix store cache Ophestra 2025-02-01 21:05:18 +0900
• 5808fe61c3
  
  nix: vm test set sway background Ophestra 2025-01-25 22:28:04 +0900
• f338d3bb4b
  
  nix: update flake lock Ophestra 2025-01-25 19:46:33 +0900
• 8d04dd72f1
  
  nix: mount nvidia devices Ophestra 2025-01-25 18:05:18 +0900
• 21735a8abe
  
  release: 0.2.12 v0.2.12 Ophestra 2025-01-25 13:40:48 +0900
• 34272672b1
  
  nix: verify silent output when not running with -v Ophestra 2025-01-25 13:38:18 +0900
• 7b96cd6ded
  
  helper/seccomp: do not call F_println if not verbose Ophestra 2025-01-25 13:19:38 +0900
• 163f15e93f
  
  helper/seccomp: separate seccomp package Ophestra 2025-01-25 12:59:11 +0900
• 016da20443
  
  nix: expose compat flag in nixos module Ophestra 2025-01-25 12:42:48 +0900
• 37780456a7
  
  helper: block more unusual/privileged syscalls Ophestra 2025-01-25 12:35:47 +0900
• efacaa40fa
  
  nix: set deny_devel correctly Ophestra 2025-01-24 00:50:35 +0900
• ad6d0ee55f
  
  workflows: rename integration test artifact Ophestra 2025-01-24 00:30:39 +0900
• cf791469d8
  
  workflows: gc store and purge old caches Ophestra 2025-01-24 00:25:57 +0900
• be14421775
  
  workflows: merge test build job into test Ophestra 2025-01-24 00:22:44 +0900
• 045983d7f4
  
  wl: separate inline C Ophestra 2025-01-23 22:06:29 +0900
• 7106b00968
  
  release: 0.2.11 v0.2.11 Ophestra 2025-01-23 20:49:49 +0900
• 96d5d8a396
  
  nix: apply shared home config to reserved aid Ophestra 2025-01-23 20:48:04 +0900
• 8a00a83c71
  
  nix: expose syscall filter policy Ophestra 2025-01-23 17:24:42 +0900
• 134247b57d
  
  nix: configure target users via nixos Ophestra 2025-01-23 17:04:19 +0900
• b5bb7654da
  
  nix: redirect sway output to journal Ophestra 2025-01-23 16:08:22 +0900
• cc1efa22e2
  
  fst: add missing fields to template Ophestra 2025-01-22 12:09:25 +0900
• 580128922b
  
  cmd/fpkg: expose syscall policy options Ophestra 2025-01-22 12:01:30 +0900
• 23e1152baa
  
  app/share: clean BaseError message Ophestra 2025-01-22 11:54:16 +0900
• 8c51012ef5
  
  dbus: enable syscall filter Ophestra 2025-01-22 02:01:01 +0900
• 5a64cdaf4f
  
  ldd: enable syscall filter Ophestra 2025-01-22 02:00:49 +0900
• a30f5e1226
  
  fortify: set up seccomp verbose logging early Ophestra 2025-01-22 01:58:54 +0900
• 9a239fa1a5
  
  helper/bwrap: integrate seccomp into helper interface Ophestra 2025-01-22 01:51:10 +0900
• 82029948e6
  
  proc: append to ExtraFiles slice pointer Ophestra 2025-01-21 12:51:39 +0900
• dfcdc5ce20
  
  state: store config in separate gob stream Ophestra 2025-01-21 12:10:58 +0900
• fa0616b274
  
  fortify: print permissive defaults warning early Ophestra 2025-01-21 11:59:15 +0900
• 20a3d4c458
  
  proc/priv/shim: resolve and load seccomp rules Ophestra 2025-01-20 23:52:56 +0900
• 3df344828f
  
  proc/priv/shim: seccomp bpf filter via libseccomp Ophestra 2025-01-20 23:39:47 +0900
• 27f5922d5c
  
  fst: include syscall filter configuration Ophestra 2025-01-20 21:12:39 +0900
• 2cf1f46ea2
  
  nix: test show without --short Ophestra 2025-01-20 21:10:24 +0900
• 3c55fc8e86
  
  proc/priv/shim: do not log bwrap args Ophestra 2025-01-20 19:51:28 +0900
• eb0ef2d115
  
  helper/bwrap: generic extra file interface Ophestra 2025-01-19 19:18:22 +0900
• 2f70506865
  
  helper/bwrap: move sync to helper state Ophestra 2025-01-19 18:38:13 +0900
• cae567c109
  
  proc/priv/shim: remove unnecessary state Ophestra 2025-01-19 18:05:53 +0900
• 1ec901f79e
  
  release: 0.2.10 v0.2.10 Ophestra 2025-01-18 22:50:08 +0900
• 715addaccd
  
  helper/bwrap: append --sync-fd before -- Ophestra 2025-01-18 12:30:03 +0900
• b31d055e20
  
  proc/priv/init: early init check Ophestra 2025-01-18 12:23:07 +0900
• 7baca66a56
  
  proc: remove duplicate compile-time fortify reference Ophestra 2025-01-18 11:59:33 +0900
• 27d2914286
  
  proc/priv/init: merge init into main program Ophestra 2025-01-18 11:47:01 +0900
• ea8f228af3
  
  proc/priv/shim: merge shim into main program Ophestra 2025-01-17 23:43:32 +0900
• 16db3dabe2
  
  internal: do PR_SET_PDEATHSIG once Ophestra 2025-01-17 23:08:46 +0900
• c4de450217
  
  nix: do not force static linking on nix Ophestra 2025-01-17 22:56:16 +0900
• b60c01f440
  
  fortify: switch to static linking Ophestra 2025-01-16 17:32:52 +0900
• 124743ffd3
  
  app: expose single run method Ophestra 2025-01-15 23:39:51 +0900
• be4d8b6300
  
  release: 0.2.9 v0.2.9 Ophestra 2025-01-15 13:14:43 +0900
• 3e11ce6868
  
  helper/bwrap: separate sequential/static args Ophestra 2025-01-15 10:57:10 +0900
• 562f5ed797
  
  fst: hide sockets exposed via Filesystem Ophestra 2025-01-15 10:07:51 +0900
• db03565614
  
  fst: move sandbox struct to separate file Ophestra 2025-01-15 09:42:44 +0900
• 7d99e45b88
  
  helper/bwrap: register OverlayConfig with gob Ophestra 2025-01-14 12:25:10 +0900
• 1651eb06df
  
  dbus: implement dbus_parse_address Ophestra 2025-01-12 23:24:03 +0900
• ac543a1ce8
  
  dbus: rename makeTestCases Ophestra 2025-01-12 23:21:28 +0900
• e2489059c1
  
  helper/bwrap: implement overlayfs builder Ophestra 2025-01-05 20:09:35 +0900
• 2e3f6a4c51
  
  helper/bwrap: move test out of bwrap package Ophestra 2025-01-05 19:45:24 +0900
• 2162029f46
  
  helper/bwrap: add json struct tag to filesystem Ophestra 2025-01-05 19:41:04 +0900
• a1148edd00
  
  fst/config: allocate filesystem slice Ophestra 2025-01-04 00:16:41 +0900
• 6acd0d4e88
  
  linux/std: handle fsu exit status 1 Ophestra 2025-01-01 21:34:57 +0900
• 35b7142317
  
  fortify: show system info when instance is not specified Ophestra 2025-01-01 19:28:58 +0900
• c4d6651cae
  
  update reverse-DNS style identifiers Ophestra 2024-12-31 16:16:38 +0900
• 22a4b99674
  
  cmd/fpkg/install: deduplicate nix store Ophestra 2024-12-30 02:13:28 +0900
• 1464ef774b
  
  cmd/fpkg: expose nixGL wrappers Ophestra 2024-12-30 02:02:20 +0900
• 66ba4cea5c
  
  cmd/fpkg: remove workDir acl from activation Ophestra 2024-12-29 23:48:45 +0900
• f8d0786509
  
  cmd/fpkg: include nixGL source in inner store Ophestra 2024-12-29 23:37:11 +0900
• 56a73bb019
  
  nix: create nixpkgs symlink Ophestra 2024-12-29 23:23:11 +0900
• fb8abf63db
  
  nix: update flake lock Ophestra 2024-12-29 23:14:16 +0900
• 63802c5f0d
  
  nix: nixos test create parent directory Ophestra 2024-12-29 22:36:53 +0900
• aff80b6b00
  
  cmd/fpkg: optional network access when invoking with nix daemon Ophestra 2024-12-29 18:32:44 +0900
• a98a176907
  
  cmd/fpkg: bind and document more gpu devices Ophestra 2024-12-29 18:25:26 +0900
• 5302879b88
  
  cmd/fpkg: improve readability of fortify invocations Ophestra 2024-12-29 17:55:56 +0900
• 891b3cbde7
  
  cmd/fpkg: compare all three store paths Ophestra 2024-12-29 17:10:41 +0900
• c795293f36
  
  cmd/fpkg: clean up broken links before activation Ophestra 2024-12-29 15:21:40 +0900
• 42e1043300
  
  nix: set home-manager user information Ophestra 2024-12-29 15:11:36 +0900
• 5416b07daa
  
  nix: remove unused argument 'self' Ophestra 2024-12-29 14:49:55 +0900
• e57a0e9bf2
  
  nix: rename fortifyBundle to buildPackage Ophestra 2024-12-29 14:35:37 +0900
• ab48706ebe
  
  dist: install fpkg to /usr/bin Ophestra 2024-12-29 01:04:53 +0900
• c1a459a0b1
  
  cmd/fpkg/start: correct drop to shell wording Ophestra 2024-12-29 00:56:14 +0900
• 5125e96ecf
  
  nix: generate application package build script Ophestra 2024-12-29 00:42:21 +0900
• e0e2f40e84
  
  cmd/fpkg: app bundle helper Ophestra 2024-12-26 13:21:49 +0900
• bf8094c6ca
  
  internal: include path to fortify main program Ophestra 2024-12-26 12:48:48 +0900
• 2e3bb1893e
  
  release: 0.2.8 v0.2.8 Ophestra 2024-12-29 01:09:47 +0900
• 9b206072fa
  
  cmd/fshim: ensure data directory Ophestra 2024-12-28 14:39:01 +0900
• b9e2003d5b
  
  app: ensure extra paths Ophestra 2024-12-28 14:07:49 +0900
• 66ec0d882f
  
  dist: build with -trimpath Ophestra 2024-12-28 13:44:05 +0900
• 847b667489
  
  app: extra acl entries from configuration Ophestra 2024-12-28 13:23:27 +0900
• c70f0612ad
  
  fortify/print: skip nil filesystem entries Ophestra 2024-12-28 12:14:42 +0900
• 85e5b097fd
  
  fst/config: add template etc entry Ophestra 2024-12-28 12:05:32 +0900
• 0107620d8c
  
  app: merge share methods Ophestra 2024-12-28 11:12:35 +0900
• fc26659ea1
  
  fst/config: autoetc read custom path Ophestra 2024-12-27 18:57:44 +0900
• 1f173a469c
  
  system/dbus: fix inverted system bus state Ophestra 2024-12-27 18:38:11 +0900
• 2fdbd6a4dd
  
  fst/config: alternative /etc directory Ophestra 2024-12-27 18:06:26 +0900
• aef847b5ae
  
  helper/bwrap: fix typo in --dir config builder Ophestra 2024-12-27 15:34:43 +0900
• 0a2aa5823b
  
  cmd/fshim: bind finit inside sandbox Ophestra 2024-12-27 14:44:57 +0900
• b956ce4052
  
  ldd: trim leading and trailing white spaces from name Ophestra 2024-12-26 16:53:01 +0900
• dc579dc610
  
  dbus/run: bind ldd entry absolute name Ophestra 2024-12-26 16:36:03 +0900
• ade57c39af
  
  ldd: add fhs glibc test case Ophestra 2024-12-26 16:29:10 +0900
• 614ad86a5b
  
  dbus: fail on LookPath error Ophestra 2024-12-26 15:29:26 +0900