hakurei

Author	SHA1	Message	Date
Ophestra	6f719bc3c1	system: update doc commands and remove mutex All checks were successful Test / Create distribution (push) Successful in 34s Details Test / Sandbox (push) Successful in 2m6s Details Test / Hakurei (push) Successful in 3m19s Details Test / Hpkg (push) Successful in 3m54s Details Test / Sandbox (race detector) (push) Successful in 4m17s Details Test / Hakurei (race detector) (push) Successful in 5m19s Details Test / Flake checks (push) Successful in 1m39s Details The mutex is not really doing anything, none of these methods make sense when called concurrently anyway. The copylocks analysis is still satisfied by the noCopy struct. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-09-02 04:54:34 +09:00
Ophestra	b14690aa77	internal/app: remove seal interface All checks were successful Test / Create distribution (push) Successful in 34s Details Test / Sandbox (push) Successful in 2m1s Details Test / Hakurei (push) Successful in 3m13s Details Test / Hpkg (push) Successful in 3m55s Details Test / Sandbox (race detector) (push) Successful in 4m33s Details Test / Hakurei (race detector) (push) Successful in 5m19s Details Test / Flake checks (push) Successful in 1m36s Details This further cleans up the package for the restructure. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-08-28 01:07:51 +09:00
Ophestra	0d7c1a9a43	app: rename app implementation package All checks were successful Test / Create distribution (push) Successful in 26s Details Test / Sandbox (push) Successful in 1m48s Details Test / Fortify (push) Successful in 2m36s Details Test / Sandbox (race detector) (push) Successful in 2m52s Details Test / Fpkg (push) Successful in 3m32s Details Test / Fortify (race detector) (push) Successful in 4m9s Details Test / Flake checks (push) Successful in 1m4s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-04-12 10:54:24 +09:00
Ophestra	5c4058d5ac	app: run in native sandbox All checks were successful Test / Create distribution (push) Successful in 20s Details Test / Fortify (push) Successful in 2m5s Details Test / Fpkg (push) Successful in 3m0s Details Test / Data race detector (push) Successful in 4m12s Details Test / Flake checks (push) Successful in 1m4s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 01:52:49 +09:00
Ophestra	c64b8163e7	app: separate instance from process state All checks were successful Test / Create distribution (push) Successful in 19s Details Test / Run NixOS test (push) Successful in 1m59s Details This works better for the implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-21 16:06:24 +09:00
Ophestra	e0f321b2c4	sys: rename from linux All checks were successful Test / Create distribution (push) Successful in 26s Details Test / Run NixOS test (push) Successful in 3m28s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-18 18:47:48 +09:00
Ophestra	90cb01b274	system: move out of internal All checks were successful Test / Create distribution (push) Successful in 25s Details Test / Run NixOS test (push) Successful in 3m17s Details Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-02-17 19:00:43 +09:00
Ophestra	562f5ed797	fst: hide sockets exposed via Filesystem All checks were successful Tests / Go tests (push) Successful in 40s Details Nix / NixOS tests (push) Successful in 2m49s Details This is mostly useful for permissive defaults. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-01-15 10:13:18 +09:00
Ophestra Umiker	df6fc298f6	migrate to git.gensokyo.uk/security/fortify All checks were successful Tests / Go tests (push) Successful in 2m55s Details Nix / NixOS tests (push) Successful in 5m10s Details Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-12-20 00:20:02 +09:00
Ophestra Umiker	2f676c9d6e	fst: rename from fipc All checks were successful Tests / Go tests (push) Successful in 38s Details Nix / NixOS tests (push) Successful in 5m48s Details Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-12-18 15:50:46 +09:00
Ophestra Umiker	b752ec4468	fipc: export config struct All checks were successful Tests / Go tests (push) Successful in 1m12s Details Nix / NixOS tests (push) Successful in 10m51s Details Also store full config as part of state. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-12-18 13:45:55 +09:00
Ophestra Umiker	b291f0b710	app: add nixos-based config test case All checks were successful test / test (push) Successful in 20s Details Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-11-21 12:13:21 +09:00
Ophestra Umiker	584732f80a	cmd: shim and init into separate binaries All checks were successful test / test (push) Successful in 19s Details This change also fixes a deadlock when shim fails to connect and complete the setup. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-11-02 03:13:57 +09:00
Ophestra Umiker	51e84ba8a5	system/dbus: compare sealed value by string All checks were successful test / test (push) Successful in 19s Details Stringer method of dbus.Proxy returns a string representation of its args stream when sealed. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-27 12:09:34 +09:00
Ophestra Umiker	093e99d062	app: separate nixos test cases from tests All checks were successful test / test (push) Successful in 20s Details Test cases are very long, separating them improves editor performance. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-25 17:44:29 +09:00
Ophestra Umiker	ad7e389eee	app: test app permissive defaults sealing behaviour All checks were successful test / test (push) Successful in 20s Details This test seals App against a deterministic os stub and checks the resulting sys and bwrap values against known correct ones. The effects of sys and bwrap on the OS and sandbox is deterministic and tested in their own respective packages. Signed-off-by: Ophestra Umiker <cat@ophivana.moe>	2024-10-25 17:12:13 +09:00

16 Commits