hakurei

Author	SHA1	Message	Date
Ophestra	b353c3deea	nix: make src overlay writable All checks were successful Test / Hakurei (push) Successful in 42s Details Test / Create distribution (push) Successful in 33s Details Test / Hakurei (race detector) (push) Successful in 42s Details Test / Sandbox (race detector) (push) Successful in 39s Details Test / Sandbox (push) Successful in 40s Details Test / Hpkg (push) Successful in 40s Details Test / Flake checks (push) Successful in 1m23s Details The lowerdir is in the nix store. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-07 18:07:19 +09:00
Ophestra	fde5f1ca64	container: buffer test output All checks were successful Test / Create distribution (push) Successful in 34s Details Test / Sandbox (push) Successful in 2m2s Details Test / Hakurei (push) Successful in 2m54s Details Test / Hpkg (push) Successful in 3m56s Details Test / Hakurei (race detector) (push) Successful in 4m37s Details Test / Sandbox (race detector) (push) Successful in 4m7s Details Test / Flake checks (push) Successful in 1m26s Details This further reduces noise on test failure by only passing through output of the failed test. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-07 02:55:58 +09:00
Ophestra	4d0bdd84b5	container: test respect verbose flag All checks were successful Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 2m1s Details Test / Hpkg (push) Successful in 3m52s Details Test / Sandbox (race detector) (push) Successful in 4m1s Details Test / Hakurei (race detector) (push) Successful in 4m35s Details Test / Hakurei (push) Successful in 2m4s Details Test / Flake checks (push) Successful in 1m36s Details This reduces noise on test failure. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-07 02:50:00 +09:00
Ophestra	72a931a71a	nix: interactive nixos vm All checks were successful Test / Hakurei (push) Successful in 41s Details Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 39s Details Test / Sandbox (race detector) (push) Successful in 39s Details Test / Hpkg (push) Successful in 40s Details Test / Hakurei (race detector) (push) Successful in 41s Details Test / Flake checks (push) Successful in 1m26s Details This is useful for quickly spinning up an ephemeral hakurei environment for testing changes or reproducing vm test failures. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-07 02:46:04 +09:00
Ophestra	9a25542c6d	container/init: use mount string constants All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m13s Details Test / Sandbox (race detector) (push) Successful in 4m6s Details Test / Hpkg (push) Successful in 4m22s Details Test / Hakurei (race detector) (push) Successful in 4m49s Details Test / Hakurei (push) Successful in 2m4s Details Test / Flake checks (push) Successful in 1m13s Details These literals were missed when the constants were first defined. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-04 04:00:05 +09:00
Ophestra	c6be82bcf9	container/path: fhs path constants All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m6s Details Test / Hakurei (push) Successful in 3m6s Details Test / Sandbox (race detector) (push) Successful in 4m14s Details Test / Hpkg (push) Successful in 4m11s Details Test / Hakurei (race detector) (push) Successful in 4m40s Details Test / Flake checks (push) Successful in 1m18s Details This increases readability since this can help disambiguate absolute paths from similarly named path segments. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-03 21:16:45 +09:00
Ophestra	38245559dc	container/ops: mount dev readonly All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m2s Details Test / Hakurei (push) Successful in 2m57s Details Test / Sandbox (race detector) (push) Successful in 3m53s Details Test / Hpkg (push) Successful in 3m53s Details Test / Hakurei (race detector) (push) Successful in 4m37s Details Test / Flake checks (push) Successful in 1m18s Details There is usually no good reason to write to /dev. This however doesn't work in internal/app because FilesystemConfig supplied by ContainerConfig might add entries to /dev, so internal/app follows DevWritable with Remount instead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-03 19:18:53 +09:00
Ophestra	7b416d47dc	container/ops: merge mqueue and dev Ops All checks were successful Test / Create distribution (push) Successful in 34s Details Test / Sandbox (push) Successful in 40s Details Test / Sandbox (race detector) (push) Successful in 40s Details Test / Hakurei (push) Successful in 43s Details Test / Hakurei (race detector) (push) Successful in 43s Details Test / Hpkg (push) Successful in 41s Details Test / Flake checks (push) Successful in 1m21s Details There is no reason to mount mqueue anywhere else, and these Ops usually follow each other. This change merges them. This helps decrease IPC overhead and also enables mounting dev readonly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-03 19:13:46 +09:00
Ophestra	15170735ba	container/mount: move tmpfs sysroot prefixing to caller All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m4s Details Test / Sandbox (race detector) (push) Successful in 3m54s Details Test / Hpkg (push) Successful in 4m0s Details Test / Hakurei (race detector) (push) Successful in 4m34s Details Test / Hakurei (push) Successful in 2m6s Details Test / Flake checks (push) Successful in 1m18s Details The mountTmpfs helper is a relatively low level function that is not exposed as part of the API. Prefixing sysroot here not only introduces overhead but is also quite error-prone. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-03 18:06:41 +09:00
Ophestra	6a3886e9db	container/op: unexport bind resolved source field All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m5s Details Test / Hakurei (push) Successful in 2m57s Details Test / Hpkg (push) Successful in 3m55s Details Test / Sandbox (race detector) (push) Successful in 3m59s Details Test / Hakurei (race detector) (push) Successful in 4m34s Details Test / Flake checks (push) Successful in 1m21s Details This is used for symlink resolution and is only used internally. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-03 17:57:37 +09:00
Ophestra	ff66296378	container/mount: mount data escape helper function All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m0s Details Test / Hakurei (push) Successful in 2m56s Details Test / Sandbox (race detector) (push) Successful in 3m57s Details Test / Hpkg (push) Successful in 4m7s Details Test / Hakurei (race detector) (push) Successful in 4m38s Details Test / Flake checks (push) Successful in 1m18s Details For formatting user-supplied path strings into overlayfs mount data. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-03 17:46:14 +09:00
Ophestra	347a79df72	container: improve clone flags readability All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m0s Details Test / Sandbox (race detector) (push) Successful in 3m50s Details Test / Hpkg (push) Successful in 3m50s Details Test / Hakurei (race detector) (push) Successful in 4m31s Details Test / Hakurei (push) Successful in 2m3s Details Test / Flake checks (push) Successful in 1m15s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-02 18:19:44 +09:00
Ophestra	0f78864a67	container/mount: export mount string constants All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m1s Details Test / Hakurei (push) Successful in 2m56s Details Test / Sandbox (race detector) (push) Successful in 3m47s Details Test / Hpkg (push) Successful in 4m1s Details Test / Hakurei (race detector) (push) Successful in 4m32s Details Test / Flake checks (push) Successful in 1m19s Details This improves code readability and should also be useful for callers choosing to preserve CAP_SYS_ADMIN. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-02 17:20:09 +09:00
Ophestra	b32b1975a8	hst/container: remove cover All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m6s Details Test / Hakurei (push) Successful in 2m56s Details Test / Sandbox (race detector) (push) Successful in 3m55s Details Test / Hpkg (push) Successful in 3m55s Details Test / Hakurei (race detector) (push) Successful in 4m31s Details Test / Flake checks (push) Successful in 1m20s Details This was never useful, and is now completely replaced by regular FilesystemConfig being able to mount tmpfs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-02 00:34:52 +09:00
Ophestra	2b1eaa62f1	update github notice All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m12s Details Test / Hakurei (push) Successful in 3m0s Details Test / Sandbox (race detector) (push) Successful in 3m52s Details Test / Hpkg (push) Successful in 4m2s Details Test / Hakurei (race detector) (push) Successful in 4m31s Details Test / Flake checks (push) Successful in 1m20s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-02 00:21:16 +09:00
Ophestra	f13dca184c	release: 0.1.3 All checks were successful Test / Create distribution (push) Successful in 26s Details Release / Create release (push) Successful in 41s Details Test / Sandbox (push) Successful in 41s Details Test / Hakurei (push) Successful in 44s Details Test / Hakurei (race detector) (push) Successful in 44s Details Test / Sandbox (race detector) (push) Successful in 42s Details Test / Hpkg (push) Successful in 42s Details Test / Flake checks (push) Successful in 1m17s Details Signed-off-by: Ophestra <cat@gensokyo.uk> v0.1.3	2025-08-02 00:02:54 +09:00
Ophestra	3b8a3d3b00	app: remount root readonly All checks were successful Test / Create distribution (push) Successful in 25s Details Test / Sandbox (push) Successful in 41s Details Test / Sandbox (race detector) (push) Successful in 42s Details Test / Hakurei (race detector) (push) Successful in 45s Details Test / Hpkg (push) Successful in 44s Details Test / Hakurei (push) Successful in 2m13s Details Test / Flake checks (push) Successful in 1m25s Details This does nothing for security, but should help avoid hiding bugs of programs developed in a hakurei container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 23:56:28 +09:00
Ophestra	c5d24979f5	container/ops: expose remount as Op All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m2s Details Test / Hakurei (push) Successful in 2m56s Details Test / Hpkg (push) Successful in 3m53s Details Test / Sandbox (race detector) (push) Successful in 3m56s Details Test / Hakurei (race detector) (push) Successful in 4m34s Details Test / Flake checks (push) Successful in 1m22s Details This is useful for building a filesystem hierarchy then remounting it readonly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 23:48:02 +09:00
Ophestra	1dc780bca7	container/mount: separate remount from bind All checks were successful Test / Create distribution (push) Successful in 34s Details Test / Sandbox (push) Successful in 2m5s Details Test / Hakurei (push) Successful in 2m52s Details Test / Sandbox (race detector) (push) Successful in 3m54s Details Test / Hpkg (push) Successful in 3m59s Details Test / Hakurei (race detector) (push) Successful in 4m34s Details Test / Flake checks (push) Successful in 1m18s Details Remount turns out to be useful in other places. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 23:32:38 +09:00
Ophestra	ec33061c92	nix: remove nscd cover All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Hpkg (push) Successful in 40s Details Test / Sandbox (push) Successful in 1m30s Details Test / Hakurei (push) Successful in 2m18s Details Test / Sandbox (race detector) (push) Successful in 2m21s Details Test / Hakurei (race detector) (push) Successful in 2m50s Details Test / Flake checks (push) Successful in 1m15s Details This is a pd workaround that does nothing in the nixos module. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 22:04:58 +09:00
Ophestra	af0899de96	hst/container: mount tmpfs via magic src string All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m10s Details Test / Hakurei (push) Successful in 2m50s Details Test / Sandbox (race detector) (push) Successful in 3m53s Details Test / Hpkg (push) Successful in 3m54s Details Test / Hakurei (race detector) (push) Successful in 4m30s Details Test / Flake checks (push) Successful in 1m24s Details There's often good reason to mount tmpfs in the container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 21:23:52 +09:00
Ophestra	547a2adaa4	container/mount: pass tmpfs flags All checks were successful Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 2m1s Details Test / Sandbox (race detector) (push) Successful in 3m57s Details Test / Hpkg (push) Successful in 3m55s Details Test / Hakurei (race detector) (push) Successful in 4m30s Details Test / Hakurei (push) Successful in 2m18s Details Test / Flake checks (push) Successful in 1m14s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 18:59:06 +09:00
Ophestra	c02948e155	cmd/hakurei: print autoroot configuration All checks were successful Test / Create distribution (push) Successful in 36s Details Test / Sandbox (push) Successful in 2m3s Details Test / Hakurei (push) Successful in 3m3s Details Test / Sandbox (race detector) (push) Successful in 4m8s Details Test / Hpkg (push) Successful in 4m18s Details Test / Hakurei (race detector) (push) Successful in 4m43s Details Test / Flake checks (push) Successful in 1m22s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 04:29:01 +09:00
Ophestra	387b86bcdd	app: integrate container autoroot All checks were successful Test / Create distribution (push) Successful in 36s Details Test / Sandbox (push) Successful in 2m25s Details Test / Sandbox (race detector) (push) Successful in 4m13s Details Test / Hpkg (push) Successful in 4m36s Details Test / Hakurei (race detector) (push) Successful in 5m2s Details Test / Hakurei (push) Successful in 2m40s Details Test / Flake checks (push) Successful in 1m36s Details Doing this instead of mounting directly on / because it's impossible to ensure a parent is available for every path hakurei wants to mount to. This situation is similar to autoetc hence the similar name, however a symlink mirror will not work in this case. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 04:21:54 +09:00
Ophestra	4e85643865	container: implement autoroot as setup op All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m10s Details Test / Hakurei (push) Successful in 3m7s Details Test / Sandbox (race detector) (push) Successful in 4m1s Details Test / Hpkg (push) Successful in 4m5s Details Test / Hakurei (race detector) (push) Successful in 4m43s Details Test / Flake checks (push) Successful in 1m22s Details This code is useful beyond just pd behaviour, and implementing it this way also reduces IPC overhead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 04:04:36 +09:00
Ophestra	987981df73	test/sandbox: check pd behaviour All checks were successful Test / Create distribution (push) Successful in 34s Details Test / Sandbox (race detector) (push) Successful in 42s Details Test / Hakurei (push) Successful in 44s Details Test / Sandbox (push) Successful in 42s Details Test / Hakurei (race detector) (push) Successful in 45s Details Test / Hpkg (push) Successful in 43s Details Test / Flake checks (push) Successful in 1m23s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 03:27:02 +09:00
Ophestra	f14e7255be	container/ops: use correct flags value in bind string All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 1m57s Details Test / Sandbox (race detector) (push) Successful in 3m47s Details Test / Hpkg (push) Successful in 3m54s Details Test / Hakurei (race detector) (push) Successful in 4m31s Details Test / Hakurei (push) Successful in 2m10s Details Test / Flake checks (push) Successful in 1m22s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-01 00:54:08 +09:00
Ophestra	a8a79a8664	cmd/hpkg: rename from planterette All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 1m58s Details Test / Sandbox (race detector) (push) Successful in 3m47s Details Test / Hpkg (push) Successful in 3m54s Details Test / Hakurei (race detector) (push) Successful in 4m32s Details Test / Hakurei (push) Successful in 2m10s Details Test / Flake checks (push) Successful in 1m19s Details Planterette is now developed in another repository, so rename this proof of concept to avoid confusion. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-31 23:57:11 +09:00
Ophestra	3ae0cec000	test: increase vm memory All checks were successful Test / Create distribution (push) Successful in 34s Details Test / Sandbox (push) Successful in 39s Details Test / Sandbox (race detector) (push) Successful in 39s Details Test / Planterette (push) Successful in 40s Details Test / Hakurei (push) Successful in 2m11s Details Test / Hakurei (race detector) (push) Successful in 2m42s Details Test / Flake checks (push) Successful in 1m10s Details This hopefully fixes the intermittent failures. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-31 22:08:01 +09:00
Ophestra	4e518f11d8	container/ops: autoetc implementation to separate file All checks were successful Test / Create distribution (push) Successful in 1m3s Details Test / Sandbox (push) Successful in 2m9s Details Test / Hakurei (push) Successful in 3m11s Details Test / Sandbox (race detector) (push) Successful in 3m52s Details Test / Planterette (push) Successful in 4m5s Details Test / Hakurei (race detector) (push) Successful in 4m41s Details Test / Flake checks (push) Successful in 1m14s Details This is not a general purpose setup Op. Separate it so it is easier to find. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-31 19:54:03 +09:00
Ophestra	cb513bb1cd	release: 0.1.2 All checks were successful Release / Create release (push) Successful in 41s Details Test / Sandbox (push) Successful in 40s Details Test / Hakurei (push) Successful in 2m37s Details Test / Create distribution (push) Successful in 24s Details Test / Sandbox (race detector) (push) Successful in 3m29s Details Test / Planterette (push) Successful in 3m5s Details Test / Hakurei (race detector) (push) Successful in 2m27s Details Test / Flake checks (push) Successful in 1m19s Details Signed-off-by: Ophestra <cat@gensokyo.uk> v0.1.2	2025-07-29 03:11:33 +09:00
Ophestra	f7bd28118c	hst: configurable wait delay All checks were successful Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m58s Details Test / Hakurei (push) Successful in 2m47s Details Test / Sandbox (race detector) (push) Successful in 3m56s Details Test / Planterette (push) Successful in 3m58s Details Test / Hakurei (race detector) (push) Successful in 4m31s Details Test / Flake checks (push) Successful in 1m17s Details This is useful for programs that take a long time to clean up. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-29 03:06:49 +09:00
Ophestra	940ee00ffe	container/init: configurable lingering process wait delay All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 1m57s Details Test / Hakurei (push) Successful in 2m50s Details Test / Planterette (push) Successful in 3m39s Details Test / Sandbox (race detector) (push) Successful in 3m43s Details Test / Hakurei (race detector) (push) Successful in 4m33s Details Test / Flake checks (push) Successful in 1m16s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-29 02:38:17 +09:00
Ophestra	b43d104680	app: integrate interrupt forwarding All checks were successful Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m58s Details Test / Hakurei (push) Successful in 2m53s Details Test / Sandbox (race detector) (push) Successful in 3m53s Details Test / Planterette (push) Successful in 3m53s Details Test / Hakurei (race detector) (push) Successful in 4m31s Details Test / Flake checks (push) Successful in 1m19s Details This significantly increases usability of command line tools running through hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-29 02:23:06 +09:00
Ophestra	ddf48a6c22	app/shim: implement signal handler outcome in Go All checks were successful Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m53s Details Test / Hakurei (push) Successful in 2m48s Details Test / Planterette (push) Successful in 3m48s Details Test / Sandbox (race detector) (push) Successful in 3m56s Details Test / Hakurei (race detector) (push) Successful in 4m27s Details Test / Flake checks (push) Successful in 1m13s Details This needs to be done from the Go side eventually anyway to integrate the signal forwarding behaviour now supported by the container package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-28 23:39:30 +09:00
Ophestra	a0f499e30a	app/shim: separate signal handler implementation All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 1m57s Details Test / Planterette (push) Successful in 3m44s Details Test / Sandbox (race detector) (push) Successful in 3m50s Details Test / Hakurei (race detector) (push) Successful in 4m25s Details Test / Hakurei (push) Successful in 2m0s Details Test / Flake checks (push) Successful in 1m19s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-28 21:52:53 +09:00
Ophestra	d6b07f12ff	container: forward context cancellation All checks were successful Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m56s Details Test / Hakurei (push) Successful in 2m47s Details Test / Planterette (push) Successful in 3m40s Details Test / Sandbox (race detector) (push) Successful in 3m45s Details Test / Hakurei (race detector) (push) Successful in 4m29s Details Test / Flake checks (push) Successful in 1m18s Details This allows container processes to exit gracefully. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-28 01:45:38 +09:00
Ophestra	65fe09caf9	container: check cancel signal delivery All checks were successful Test / Create distribution (push) Successful in 32s Details Test / Sandbox (push) Successful in 1m55s Details Test / Hakurei (push) Successful in 2m50s Details Test / Sandbox (race detector) (push) Successful in 3m46s Details Test / Planterette (push) Successful in 3m52s Details Test / Hakurei (race detector) (push) Successful in 4m28s Details Test / Flake checks (push) Successful in 1m18s Details This change also makes some parts of the test more robust. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-28 01:04:29 +09:00
Ophestra	a1e5f020f4	container: improve doc comments All checks were successful Test / Create distribution (push) Successful in 31s Details Test / Sandbox (push) Successful in 2m3s Details Test / Hakurei (push) Successful in 2m53s Details Test / Sandbox (race detector) (push) Successful in 3m43s Details Test / Planterette (push) Successful in 3m57s Details Test / Hakurei (race detector) (push) Successful in 4m23s Details Test / Flake checks (push) Successful in 1m10s Details Putting them on the builder methods is more useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-27 12:27:42 +09:00
Ophestra	bd3fa53a55	container: access test case by index in helper All checks were successful Test / Create distribution (push) Successful in 24s Details Test / Hakurei (push) Successful in 40s Details Test / Sandbox (push) Successful in 38s Details Test / Hakurei (race detector) (push) Successful in 41s Details Test / Sandbox (race detector) (push) Successful in 38s Details Test / Planterette (push) Successful in 39s Details Test / Flake checks (push) Successful in 1m17s Details This is more elegant and allows for much easier extension of the tests. Mountinfo is still serialised however due to libPaths nondeterminism. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-26 18:59:19 +09:00
Ophestra	625632c593	nix: update flake lock All checks were successful Test / Create distribution (push) Successful in 39s Details Test / Sandbox (race detector) (push) Successful in 50s Details Test / Sandbox (push) Successful in 52s Details Test / Planterette (push) Successful in 50s Details Test / Hakurei (race detector) (push) Successful in 57s Details Test / Hakurei (push) Successful in 59s Details Test / Flake checks (push) Successful in 1m53s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-26 18:57:54 +09:00
Ophestra	e71ae3b8c5	container: remove custom cmd initialisation All checks were successful Test / Create distribution (push) Successful in 26s Details Test / Hakurei (push) Successful in 45s Details Test / Sandbox (push) Successful in 43s Details Test / Hakurei (race detector) (push) Successful in 45s Details Test / Sandbox (race detector) (push) Successful in 43s Details Test / Planterette (push) Successful in 43s Details Test / Flake checks (push) Successful in 1m27s Details This part of the interface is very unintuitive and only used for testing, even in testing it is inelegant and can be done better. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-25 00:45:10 +09:00
Ophestra	9d7a19d162	container: use more reliable nonexistence All checks were successful Test / Create distribution (push) Successful in 45s Details Test / Sandbox (push) Successful in 2m21s Details Test / Hakurei (push) Successful in 3m8s Details Test / Planterette (push) Successful in 3m55s Details Test / Sandbox (race detector) (push) Successful in 4m6s Details Test / Hakurei (race detector) (push) Successful in 4m41s Details Test / Flake checks (push) Successful in 1m18s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-18 23:18:26 +09:00
Ophestra	6ba19a7ba5	release: 0.1.1 All checks were successful Release / Create release (push) Successful in 41s Details Test / Hakurei (push) Successful in 49s Details Test / Sandbox (push) Successful in 40s Details Test / Create distribution (push) Successful in 24s Details Test / Planterette (push) Successful in 3m13s Details Test / Sandbox (race detector) (push) Successful in 3m46s Details Test / Hakurei (race detector) (push) Successful in 2m18s Details Test / Flake checks (push) Successful in 1m21s Details Signed-off-by: Ophestra <cat@gensokyo.uk> v0.1.1	2025-07-09 05:42:31 +09:00
Ophestra	749a2779f5	test/sandbox: add arm64 constants All checks were successful Test / Create distribution (push) Successful in 24s Details Test / Sandbox (push) Successful in 40s Details Test / Hakurei (push) Successful in 42s Details Test / Hakurei (race detector) (push) Successful in 42s Details Test / Sandbox (race detector) (push) Successful in 38s Details Test / Planterette (push) Successful in 40s Details Test / Flake checks (push) Successful in 1m30s Details Most of these are differences in qemu. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-09 05:36:35 +09:00
Ophestra	e574042d76	test/sandbox: verify seccomp on all test cases All checks were successful Test / Hakurei (push) Successful in 42s Details Test / Sandbox (push) Successful in 39s Details Test / Hakurei (race detector) (push) Successful in 41s Details Test / Create distribution (push) Successful in 33s Details Test / Sandbox (race detector) (push) Successful in 39s Details Test / Planterette (push) Successful in 41s Details Test / Flake checks (push) Successful in 1m17s Details This change also makes seccomp hashes cross-platform. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-09 04:21:35 +09:00
Ophestra	2b44493e8a	test/sandbox: guard on testtool tag All checks were successful Test / Hakurei (push) Successful in 40s Details Test / Create distribution (push) Successful in 31s Details Test / Hakurei (race detector) (push) Successful in 41s Details Test / Planterette (push) Successful in 40s Details Test / Sandbox (push) Successful in 1m30s Details Test / Sandbox (race detector) (push) Successful in 1m43s Details Test / Flake checks (push) Successful in 1m11s Details This tool should not show up when building hakurei normally. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-07 20:11:29 +09:00
Ophestra	c30dd4e630	test/sandbox/seccomp: remove uselib All checks were successful Test / Hakurei (push) Successful in 41s Details Test / Create distribution (push) Successful in 32s Details Test / Hakurei (race detector) (push) Successful in 41s Details Test / Sandbox (push) Successful in 1m27s Details Test / Sandbox (race detector) (push) Successful in 1m44s Details Test / Flake checks (push) Successful in 1m12s Details Test / Planterette (push) Successful in 40s Details This syscall is not wired on all platforms. This test barely does anything anyway and seccomp is covered by the privileged test instrumentation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-07 15:28:55 +09:00
Ophestra	d90da1c8f5	container/seccomp: add arm64 constants All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 2m2s Details Test / Hakurei (push) Successful in 2m52s Details Test / Sandbox (race detector) (push) Successful in 3m9s Details Test / Planterette (push) Successful in 3m40s Details Test / Hakurei (race detector) (push) Successful in 4m28s Details Test / Flake checks (push) Successful in 1m12s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-07 14:58:03 +09:00
Ophestra	5853d7700f	container/seccomp: move bpf hashes All checks were successful Test / Create distribution (push) Successful in 33s Details Test / Sandbox (push) Successful in 1m56s Details Test / Sandbox (race detector) (push) Successful in 3m7s Details Test / Planterette (push) Successful in 3m35s Details Test / Hakurei (race detector) (push) Successful in 4m23s Details Test / Hakurei (push) Successful in 2m7s Details Test / Flake checks (push) Successful in 1m19s Details Filter programs are different across platforms. This representation is also much more readable. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-07 14:41:47 +09:00

1 2 3 4 5 ...

937 Commits