security/hakurei
security/hakurei
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

nix: cross-platform syscall wrapper
All checks were successful
Test / Create distribution (push) Successful in 42s
Details
Test / Sandbox (push) Successful in 54s
Details
Test / Sandbox (race detector) (push) Successful in 52s
Details
Test / Planterette (push) Successful in 51s
Details
Test / Hakurei (push) Successful in 1m1s
Details
Test / Hakurei (race detector) (push) Successful in 59s
Details
Test / Flake checks (push) Successful in 1m6s
Details

Browse Source 
Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra 2025-07-07 04:22:55 +09:00
parent 356b42a406
commit 72c2b66fc0
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
1 changed files with 17 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
flake.nix
View File

@ -185,15 +185,21 @@
'';
};
generateSyscallTable = pkgs.mkShell {
# this should be made cross-platform via nix
generateSyscallTable =
let
GOARCH = {
x86_64-linux = "amd64";
aarch64-linux = "arm64";
};
in
pkgs.mkShell {
shellHook = "exec ${pkgs.writeShellScript "generate-syscall-table" ''
set -e
${pkgs.perl}/bin/perl \
sandbox/seccomp/mksysnum_linux.pl \
container/seccomp/mksysnum_linux.pl \
${pkgs.linuxHeaders}/include/asm/unistd_64.h | \
${pkgs.go}/bin/gofmt > \
sandbox/seccomp/syscall_linux_amd64.go
container/seccomp/syscall_linux_${GOARCH.${system}}.go
''}";
};
}