security/hakurei
security/hakurei
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

hakurei: move container helpers toplevel
All checks were successful
Test / Create distribution (push) Successful in 32s
Details
Test / Sandbox (push) Successful in 2m1s
Details
Test / Hakurei (push) Successful in 2m52s
Details
Test / Sandbox (race detector) (push) Successful in 3m8s
Details
Test / Planterette (push) Successful in 3m32s
Details
Test / Hakurei (race detector) (push) Successful in 4m27s
Details
Test / Flake checks (push) Successful in 1m9s
Details

Browse Source 
Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra 2025-07-02 21:31:29 +09:00
parent a1d98823f8
commit eec021cc4b
Signed by: cat
SSH Key Fingerprint: SHA256:gQ67O0enBZ7UdZypgtspB2FDM1g3GVw8nX0XSdcFw8Q
36 changed files with 21 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cmd/hakurei/internal/app/instance/common/container.go
View File

@ -12,7 +12,7 @@ import (
"git.gensokyo.uk/security/hakurei/dbus" "git.gensokyo.uk/security/hakurei/dbus"
"git.gensokyo.uk/security/hakurei/hst" "git.gensokyo.uk/security/hakurei/hst"
"git.gensokyo.uk/security/hakurei/internal/sys" "git.gensokyo.uk/security/hakurei/internal/sys"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
) )
// in practice there should be less than 30 entries added by the runtime; // in practice there should be less than 30 entries added by the runtime;

2
cmd/hakurei/internal/app/internal/setuid/app_nixos_test.go
View File

@ -6,7 +6,7 @@ import (
"git.gensokyo.uk/security/hakurei/cmd/hakurei/internal/app" "git.gensokyo.uk/security/hakurei/cmd/hakurei/internal/app"
"git.gensokyo.uk/security/hakurei/dbus" "git.gensokyo.uk/security/hakurei/dbus"
"git.gensokyo.uk/security/hakurei/hst" "git.gensokyo.uk/security/hakurei/hst"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
"git.gensokyo.uk/security/hakurei/system" "git.gensokyo.uk/security/hakurei/system"
) )

2
cmd/hakurei/internal/app/internal/setuid/app_pd_test.go
View File

@ -8,7 +8,7 @@ import (
"git.gensokyo.uk/security/hakurei/cmd/hakurei/internal/app" "git.gensokyo.uk/security/hakurei/cmd/hakurei/internal/app"
"git.gensokyo.uk/security/hakurei/dbus" "git.gensokyo.uk/security/hakurei/dbus"
"git.gensokyo.uk/security/hakurei/hst" "git.gensokyo.uk/security/hakurei/hst"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
"git.gensokyo.uk/security/hakurei/system" "git.gensokyo.uk/security/hakurei/system"
) )

2
cmd/hakurei/internal/app/internal/setuid/shim.go
View File

@ -13,7 +13,7 @@ import (
"git.gensokyo.uk/security/hakurei" "git.gensokyo.uk/security/hakurei"
"git.gensokyo.uk/security/hakurei/internal" "git.gensokyo.uk/security/hakurei/internal"
"git.gensokyo.uk/security/hakurei/internal/hlog" "git.gensokyo.uk/security/hakurei/internal/hlog"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
) )
/* /*

2
cmd/planterette/app.go
View File

@ -8,7 +8,7 @@ import (
"git.gensokyo.uk/security/hakurei/dbus" "git.gensokyo.uk/security/hakurei/dbus"
"git.gensokyo.uk/security/hakurei/hst" "git.gensokyo.uk/security/hakurei/hst"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
"git.gensokyo.uk/security/hakurei/system" "git.gensokyo.uk/security/hakurei/system"
) )

2
cmd/planterette/with.go
View File

@ -7,7 +7,7 @@ import (
"git.gensokyo.uk/security/hakurei/hst" "git.gensokyo.uk/security/hakurei/hst"
"git.gensokyo.uk/security/hakurei/internal" "git.gensokyo.uk/security/hakurei/internal"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
) )
func withNixDaemon( func withNixDaemon(

2
container.go
View File

@ -14,7 +14,7 @@ import (
. "syscall" . "syscall"
"time" "time"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
) )
type ( type (

4
container_test.go
View File

@ -17,8 +17,8 @@ import (
"git.gensokyo.uk/security/hakurei/internal" "git.gensokyo.uk/security/hakurei/internal"
"git.gensokyo.uk/security/hakurei/internal/hlog" "git.gensokyo.uk/security/hakurei/internal/hlog"
"git.gensokyo.uk/security/hakurei/ldd" "git.gensokyo.uk/security/hakurei/ldd"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
"git.gensokyo.uk/security/hakurei/sandbox/vfs" "git.gensokyo.uk/security/hakurei/vfs"
) )
const ( const (

2
dbus/proc.go
View File

@ -14,7 +14,7 @@ import (
"git.gensokyo.uk/security/hakurei" "git.gensokyo.uk/security/hakurei"
"git.gensokyo.uk/security/hakurei/helper" "git.gensokyo.uk/security/hakurei/helper"
"git.gensokyo.uk/security/hakurei/ldd" "git.gensokyo.uk/security/hakurei/ldd"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
) )
// Start starts and configures a D-Bus proxy process. // Start starts and configures a D-Bus proxy process.

2
hst/container.go
View File

@ -1,7 +1,7 @@
package hst package hst
import ( import (
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
) )
type ( type (

2
hst/template.go
View File

@ -2,7 +2,7 @@ package hst
import ( import (
"git.gensokyo.uk/security/hakurei/dbus" "git.gensokyo.uk/security/hakurei/dbus"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
"git.gensokyo.uk/security/hakurei/system" "git.gensokyo.uk/security/hakurei/system"
) )

2
init.go
View File

@ -13,7 +13,7 @@ import (
. "syscall" . "syscall"
"time" "time"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
) )
const ( const (

2
ldd/exec.go
View File

@ -9,7 +9,7 @@ import (
"time" "time"
"git.gensokyo.uk/security/hakurei" "git.gensokyo.uk/security/hakurei"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
) )
const lddTimeout = 2 * time.Second const lddTimeout = 2 * time.Second

2
mount.go
View File

@ -7,7 +7,7 @@ import (
"path/filepath" "path/filepath"
. "syscall" . "syscall"
"git.gensokyo.uk/security/hakurei/sandbox/vfs" "git.gensokyo.uk/security/hakurei/vfs"
) )
func (p *procPaths) bindMount(source, target string, flags uintptr, eq bool) error { func (p *procPaths) bindMount(source, target string, flags uintptr, eq bool) error {

2
path.go
View File

@ -10,7 +10,7 @@ import (
"strings" "strings"
"syscall" "syscall"
"git.gensokyo.uk/security/hakurei/sandbox/vfs" "git.gensokyo.uk/security/hakurei/vfs"
) )
const ( const (

0
sandbox/seccomp/libseccomp-helper.c → seccomp/libseccomp-helper.c
View File

0
sandbox/seccomp/libseccomp-helper.h → seccomp/libseccomp-helper.h
View File

0
sandbox/seccomp/libseccomp.go → seccomp/libseccomp.go
View File

2
sandbox/seccomp/libseccomp_test.go → seccomp/libseccomp_test.go
View File

@ -8,7 +8,7 @@ import (
"syscall" "syscall"
"testing" "testing"
. "git.gensokyo.uk/security/hakurei/sandbox/seccomp" . "git.gensokyo.uk/security/hakurei/seccomp"
) )
func TestExport(t *testing.T) { func TestExport(t *testing.T) {

0
sandbox/seccomp/mksysnum_linux.pl → seccomp/mksysnum_linux.pl
View File

0
sandbox/seccomp/presets.go → seccomp/presets.go
View File

0
sandbox/seccomp/presets_clone_backwards2.go → seccomp/presets_clone_backwards2.go
View File

0
sandbox/seccomp/presets_clone_generic.go → seccomp/presets_clone_generic.go
View File

0
sandbox/seccomp/proc.go → seccomp/proc.go
View File

0
sandbox/seccomp/seccomp.go → seccomp/seccomp.go
View File

2
sandbox/seccomp/seccomp_test.go → seccomp/seccomp_test.go
View File

@ -6,7 +6,7 @@ import (
"syscall" "syscall"
"testing" "testing"
"git.gensokyo.uk/security/hakurei/sandbox/seccomp" "git.gensokyo.uk/security/hakurei/seccomp"
) )
func TestLibraryError(t *testing.T) { func TestLibraryError(t *testing.T) {

0
sandbox/seccomp/syscall.go → seccomp/syscall.go
View File

0
sandbox/seccomp/syscall_extra_linux_amd64.go → seccomp/syscall_extra_linux_amd64.go
View File

0
sandbox/seccomp/syscall_linux_amd64.go → seccomp/syscall_linux_amd64.go
View File

0
sandbox/seccomp/syscall_test.go → seccomp/syscall_test.go
View File

0
sandbox/vfs/mangle.go → vfs/mangle.go
View File

2
sandbox/vfs/mangle_test.go → vfs/mangle_test.go
View File

@ -3,7 +3,7 @@ package vfs_test
import ( import (
"testing" "testing"
"git.gensokyo.uk/security/hakurei/sandbox/vfs" "git.gensokyo.uk/security/hakurei/vfs"
) )
func TestUnmangle(t *testing.T) { func TestUnmangle(t *testing.T) {

0
sandbox/vfs/mountinfo.go → vfs/mountinfo.go
View File

2
sandbox/vfs/mountinfo_test.go → vfs/mountinfo_test.go
View File

@ -12,7 +12,7 @@ import (
"syscall" "syscall"
"testing" "testing"
"git.gensokyo.uk/security/hakurei/sandbox/vfs" "git.gensokyo.uk/security/hakurei/vfs"
) )
func TestMountInfo(t *testing.T) { func TestMountInfo(t *testing.T) {

0
sandbox/vfs/unfold.go → vfs/unfold.go
View File

2
sandbox/vfs/unfold_test.go → vfs/unfold_test.go
View File

@ -8,7 +8,7 @@ import (
"syscall" "syscall"
"testing" "testing"
"git.gensokyo.uk/security/hakurei/sandbox/vfs" "git.gensokyo.uk/security/hakurei/vfs"
) )
func TestUnfold(t *testing.T) { func TestUnfold(t *testing.T) {