Compare commits

base: security:v0.1.1

Branches Tags

security:master security:staging security:develop

security:v0.3.5 security:v0.3.4 security:v0.3.3 security:v0.3.2 security:v0.3.1 security:v0.3.0 security:v0.2.2 security:v0.2.1 security:v0.2.0 security:v0.1.3 security:v0.1.2 security:v0.1.1 security:v0.1.0

...

compare: security:master

Branches Tags

security:staging security:develop security:master

security:v0.3.5 security:v0.3.4 security:v0.3.3 security:v0.3.2 security:v0.3.1 security:v0.3.0 security:v0.2.2 security:v0.2.1 security:v0.2.0 security:v0.1.3 security:v0.1.2 security:v0.1.1 security:v0.1.0

822 Commits

v0.1.1 ... master

Author	SHA1	Message	Date
Ophestra	9fb0b2452e	release: 0.3.5 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-09 00:11:20 +09:00
Ophestra	a3e87dd0ef	container: ignore uninterpreted source ... These can be set to anything by the distribution. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-08 19:39:39 +09:00
Ophestra	90a38c0708	container: strip host-dependent opts in test cases ... This change also improves plumbing for stripping options. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-08 19:35:20 +09:00
Ophestra	39cc8caa93	container: add riscv64 constants ... This target is unlikely to become viable any time soon. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-08 19:03:47 +09:00
Ophestra	c4f64f7606	dist: include target in filename ... Backport patch will be removed in the next release. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-08 16:03:41 +09:00
Ophestra	a9e2a5e59f	internal/rosa/go: 1.25.6 to 1.25.7 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-08 15:42:58 +09:00
Ophestra	9fb0722cdf	internal/rosa/go: alternative bootstrap path ... For targets where the bootstrap toolchain is not available. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-08 15:04:03 +09:00
Ophestra	2f3e323c46	internal/rosa/gnu: gcc toolchain artifact ... This toolchain is hacked to pieces. It works well enough to bootstrap Go, though. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-08 01:00:15 +09:00
Ophestra	1fc9c3200f	internal/rosa: libucontext artifact ... Required by GCC on musl. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-07 22:33:12 +09:00
Ophestra	096a25ad3a	cmd/mbf: dump IR of artifact presets ... This exposes IR outside test cases, useful for verifying correctness of alternative IR emitters. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-07 17:21:43 +09:00
Ophestra	ffd2f979fb	internal/pkg: skip duplicate early ... This significantly increases IR generation performance. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-07 17:11:41 +09:00
Ophestra	31a8cc9b5c	internal/rosa/gnu: binutils artifact ... Appears to be required by GCC? It complains with stuff installed by LLVM. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-07 14:02:23 +09:00
Ophestra	bb3f60fc74	internal/rosa/gnu: gmp, mpfr, mpc artifacts ... Required by GCC. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-07 13:55:40 +09:00
Ophestra	697c91e04d	internal/rosa/cmake: expose earlier build script ... This allows for more flexible build setups. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-07 13:23:13 +09:00
Ophestra	3f7b8b4332	internal/rosa/git: git clone helper ... For obtaining sources of projects that stubbornly refuse to provide release tarballs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-06 21:10:59 +09:00
Ophestra	fa94155f42	internal/rosa/etc: resolv.conf ... Required by programs that download from the internet in measured execArtifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-06 21:04:59 +09:00
Ophestra	233bd163fb	internal/rosa/git: disable flaky test ... This fails intermittently. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-06 20:45:52 +09:00
Ophestra	f9b69c94bc	internal/rosa/ssl: prefix CA paths ... This makes prefixes consistent with everything else since this will end up in the final Rosa OS image. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-06 20:41:58 +09:00
Ophestra	68aefa6d59	internal/rosa/openssl: fix paths ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-06 19:53:51 +09:00
Ophestra	159fd55dbb	internal/rosa/ssl: fix dependencies ... These used to be provided by busybox. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 19:12:48 +09:00
Ophestra	ce6b3ff53b	internal/rosa: unzip artifact ... Because the zip format is too awful and cannot be streamed anyway, supporting it natively comes with no benefit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 19:10:32 +09:00
Ophestra	30afa0e2ab	internal/rosa/git: compile with http support ... This should be able to fetch repositories deterministically. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 18:51:02 +09:00
Ophestra	9b751de078	internal/rosa/gnu: fix test suite flags ... This sets the correct flag and also avoids changing ident per system. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 18:29:47 +09:00
Ophestra	d77ad3bb6e	internal/rosa: curl artifact ... Required for http support in git. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 18:15:16 +09:00
Ophestra	0142fc90b0	internal/rosa/make: post-configure script ... Required for some projects with broken build scripts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 18:13:48 +09:00
Ophestra	3c9f7cfcd0	internal/rosa: libpsl artifact ... Required by curl. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 18:06:33 +09:00
Ophestra	a3526b3ceb	internal/rosa: openssl artifact ... Optional for many programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 18:03:18 +09:00
Ophestra	6ad21e2288	internal/rosa: register custom artifacts ... This also encodes extra information for iana-etc. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 17:50:48 +09:00
Ophestra	27e2e3f996	internal/rosa/llvm: drop git dependency ... This was added quite early and has no effect. Remove it to avoid compiling git early. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 17:44:58 +09:00
Ophestra	e0c720681b	internal/pkg: standardise artifact IR ... This should hopefully provide good separation between the artifact curing backend implementation and the (still work in progress) language. Making the IR parseable also guarantees uniqueness of the representation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-05 08:24:09 +09:00
Ophestra	f982b13a59	internal/pkg: improve error resolution ... This was taking way too long for early failures. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-03 10:01:44 +09:00
Ophestra	443911ada1	internal/rosa: use stage3 mirror ... These get taken down periodically and causes way too many rebuilds when they are taken down. Use mirror until a more elegant solution is available. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-02 23:43:34 +09:00
Ophestra	d7a3706db3	internal/rosa/x: regenerate build system ... These come with 16-year-old scripts that do not understand aarch64 or really anything else relevant to Rosa OS. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-02 19:57:39 +09:00
Ophestra	3226dc44dc	internal/rosa/gnu: libtool artifact ... Required when generating autotools build systems. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-02 19:52:08 +09:00
Ophestra	9f98d12ad8	internal/rosa/gnu: automake artifact ... This is very expensive. Avoid. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-02 18:49:18 +09:00
Ophestra	550e83dda9	internal/rosa/gnu: grep artifact ... Some GNU software do not like the grep in toybox. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-02 18:38:01 +09:00
Ophestra	7877b4e627	cmd/mbf: print extra stage3 information ... This includes ident of all three stages and the matching checksum if check is passing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-02 18:33:16 +09:00
Ophestra	47ce6f5bd0	internal/rosa/llvm: conditionally add Rosa OS paths ... This change also moves rpath flags to a more appropriate method. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-02-02 07:29:35 +09:00
Ophestra	48f4ccba33	internal/rosa/llvm: add rosa vendor ... This cleans up checks specific to Rosa OS, and fixes stack overflow in llvm under certain conditions. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 22:47:13 +09:00
Ophestra	c31884bee4	internal/rosa: disable broken tests ... These fail when running as users with supplementary groups, since they are unmapped in the container. This was not the case in the development container where all groups were dropped, so the failure was missed. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 14:12:40 +09:00
Ophestra	f8661ad479	internal/rosa/hakurei: backport test case fix ... This patch will be removed in the next release. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 12:00:21 +09:00
Ophestra	536f0cbae6	internal/rosa/gnu: gettext 0.26 to 1.0 ... This now requires kernel headers for some reason. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 11:41:07 +09:00
Ophestra	8d872ff1cd	internal/rosa: fetch from gnu mirror ... GNU infrastructure is extraordinarily flaky and fetching from it killed the server too many times. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 11:26:48 +09:00
Ophestra	bf14a412e4	container: fix host-dependent test cases ... These are not fully controlled by hakurei and may change depending on host configuration. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 10:59:56 +09:00
Ophestra	8b4576bc5f	internal/rosa: migrate to make helper ... This migrates artifacts that the helper cannot produce an identical instance of. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 08:55:33 +09:00
Ophestra	29ebc52e26	internal/rosa/hakurei: suffix variants ... This makes log output more useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 05:03:15 +09:00
Ophestra	5f81aac0e2	internal/rosa: make helper ... This change only migrates artifacts that remain unchanged under the helper, so this change should not cause any rebuilds. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 05:01:22 +09:00
Ophestra	47490823be	internal/rosa: improve cmake interface ... This should make the call site look better for new artifacts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 02:42:01 +09:00
Ophestra	1ac8ca7a80	internal/rosa: isolate make implementation ... This will come with a helper eventually. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-31 02:33:14 +09:00
Ophestra	fd8b2fd522	internal/rosa: fix up dependencies ... These are no longer provided by the (incomplete) toybox implementations, so they need to be specified explicitly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-30 03:11:16 +09:00
Ophestra	20a8519044	internal/rosa/mksh: also build lksh ... This is better suited for /system/bin/sh. Full mksh is still included, installed at /system/bin/mksh. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-30 00:54:30 +09:00
Ophestra	8c4fd00c50	internal/rosa/ninja: build in $TMPDIR ... This used to build in /work/system/bin/ and unfortunately leaves its garbage there. This behaviour is from very early stages of this package, and was never fixed. This change updates it to use the "$(mktemp -d)" convention that every other artifact uses. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-30 00:36:43 +09:00
Ophestra	bc3dd6fbb0	internal/rosa: chmod via patch helper ... This works around the zfs overlay mount overhead and significantly reduces I/O in general. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-30 00:29:44 +09:00
Ophestra	616ed29edf	internal/rosa: early toybox variant ... This is a variant of toybox with unfinished tools enabled, for artifacts that will end up in a dependency loop without them. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-30 00:24:14 +09:00
Ophestra	9d9b7294a4	internal/rosa: flags for toolchain-dependent artifact ... This is much cleaner to add extra flags to. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 20:44:43 +09:00
Ophestra	6c1e2f10a7	internal/rosa: remove busybox artifact ... This is no longer used and its implementation is unacceptably shaky. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 19:58:51 +09:00
Ophestra	abf96d2283	internal/rosa: replace busybox with toybox ... The busybox artifact does not run on aarch64, and the workarounds required for it to compile successfully on x86_64 is unacceptably shaky. This change fully replaces it with toybox. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 19:51:18 +09:00
Ophestra	6c90e879da	internal/rosa/llvm: enable asan ... This is required by test suite of latest toybox. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 18:30:37 +09:00
Ophestra	d1b404dc3a	internal/rosa: findutils artifact ... Required by llvm test suite, compiler-rt sanitisers-related tests fail on toybox xargs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 18:24:01 +09:00
Ophestra	744e4e0632	internal/rosa: sed artifact ... Required by various GNU programs as they are not happy with toybox sed. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 18:17:18 +09:00
Ophestra	85eda49b2b	internal/rosa: xz artifact ... Wanted to avoid this as much as possible. Unfortunately newer versions of GNU findutils only come in xz and is required for llvm compiler-rt sanitisers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 18:06:17 +09:00
Ophestra	b26bc05bb0	internal/rosa: remove unused receiver ... This returns the preset itself, it is up to the caller to load the underlying artifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 17:52:50 +09:00
Ophestra	2d63ea8fee	internal/rosa: gzip artifact ... Toybox does not implement this, and it is used by many programs, including toybox itself. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 17:46:30 +09:00
Ophestra	dd4326418c	internal/rosa: toybox artifact ... This compiles surprisingly quickly and required no workarounds, unlike busybox. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 17:44:30 +09:00
Ophestra	79c0106ea0	internal/rosa: replace busybox dash with mksh ... Toybox does not provide a shell, mksh fills that gap. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 02:00:32 +09:00
Ophestra	536db533de	internal/rosa: install bash as sh ... This works around software relying on bashisms even when explicitly invoking sh. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 01:25:44 +09:00
Ophestra	07927006a8	internal/pkg: set User-Agent header ... Avoid living under the default user agent and be at the mercy of some IDS. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 01:17:35 +09:00
Ophestra	77ea27b038	internal/rosa: mksh artifact ... This provides a shell, as part of the effort to replace busybox. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-29 00:51:32 +09:00
Ophestra	e76bc6a13a	internal/rosa: resolve preset by name ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-28 20:57:51 +09:00
Ophestra	cc403c96d8	internal/rosa: remove busybox patch ... This allows different versions of busybox to be attempted, to find one that works on arm. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-28 01:24:56 +09:00
Ophestra	66118ba941	internal/rosa: gawk artifact ... Replaces broken awk in busybox. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-28 01:22:42 +09:00
Ophestra	823ba08dbc	internal/rosa: use patch helper ... This is significantly cleaner and runs somewhat faster. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-28 00:58:34 +09:00
Ophestra	660835151e	internal/rosa: disable busybox SHA1_HWACCEL ... This also pretties up the build output and sets correct linker path. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-28 00:51:09 +09:00
Ophestra	53e6df7e81	internal/rosa: remove uname ... This does not change ident based on target. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 23:37:29 +09:00
Ophestra	bd80327a8f	internal/rosa: add arm64 strings ... This enables building on arm64. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 21:12:39 +09:00
Ophestra	41f9aebbb7	internal/pkg: allow multiarch ... The armv8l busybox binary release needs this to run correctly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 21:07:18 +09:00
Ophestra	a2a0e36802	internal/rosa: cross-platform stage3 ... The stage3 binary seed is arch-specific. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 20:58:31 +09:00
Ophestra	fbe93fc771	internal/rosa/busybox: cross-platform binary ... The initial binary seed is arch-specific. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 20:54:11 +09:00
Ophestra	968d8dbaf1	internal/pkg: encode checksum in ident ... This also rearranges the ident ir to be more predictable, and avoids an obvious and somewhat easy to get into inconsistent state. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 20:18:34 +09:00
Ophestra	f1758a6fa8	internal/rosa: nss artifacts ... Not used by anything for now, but will be part of Rosa OS. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 08:17:58 +09:00
Ophestra	88aaa4497c	internal/rosa/hakurei: dist tarball ... The patch will be removed in the next release. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 07:34:45 +09:00
Ophestra	b7ea68de35	internal/rosa/hakurei: isolate hakurei helper ... For creating the dist tarball, which runs in the same environment. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 07:28:13 +09:00
Ophestra	67e453f5c4	dist: run tests ... This used to be impossible due to nix jank which has been addressed. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 07:00:39 +09:00
Ophestra	67092c835a	internal/rosa/hakurei: v0.3.3 to v0.3.4 ... This now contains the sharefs program which pulls in fuse. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 05:40:53 +09:00
Ophestra	18918d9a0d	internal/rosa: fuse artifact ... Required by hakurei for sharefs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 05:34:42 +09:00
Ophestra	380ca4e022	internal/rosa: pytest artifact ... Required by libfuse. This pulls in many dependencies. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 05:20:37 +09:00
Ophestra	887aef8514	internal/rosa: python pip helper ... Fuse requires pytest which depends on many packages. This helper eases the pain of packaging them. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 05:14:59 +09:00
Ophestra	d61faa09eb	release: 0.3.4 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 03:56:06 +09:00
Ophestra	50153788ef	internal/rosa: hakurei artifact ... This does not yet have fuse from staging. Everything else works perfectly, though. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 02:24:49 +09:00
Ophestra	c84fe63217	internal/rosa: various X artifacts ... Required by xcb which is required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 02:02:49 +09:00
Ophestra	eb67e5e0a8	internal/pkg: exclusive artifacts ... This alleviates scheduler overhead when curing many artifacts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 01:23:50 +09:00
Ophestra	948afe33e5	internal/rosa/acl: use patch helper ... This is significantly less ugly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-27 00:30:50 +09:00
Ophestra	76c657177d	internal/rosa: patch ignore whitespace ... This makes it work better with patches emitted by git. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 21:56:36 +09:00
Ophestra	4356f978aa	internal/rosa: kernel patching ... The side effect of this is to work around zfs performance issue with chmod on overlay mount. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 21:20:52 +09:00
Ophestra	4f17dad645	internal/rosa: isolate patching helper ... This is useful outside llvm as well. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 21:00:29 +09:00
Ophestra	68b7d41c65	internal/rosa: parallel autoconf tests ... These take forever and run sequentially by default for some reason. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 19:52:59 +09:00
Ophestra	e48f303e38	internal/rosa: parallel perl tests ... This is found in the github action, the test target does not appear to support parallelisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 19:45:50 +09:00
Ophestra	f1fd406b82	internal/rosa: link libc ldd ... Musl appears to implement this behaviour but does not install the symlink by default. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 08:00:03 +09:00
Ophestra	53b1de3395	internal/rosa: enable static on various artifacts ... This is implicitly enabled sometimes, but better to be explicit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 07:56:14 +09:00
Ophestra	92dcadbf27	internal/acl: connect getfacl stderr ... This shows whatever failure is happening in the cure container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 07:51:16 +09:00
Ophestra	0bd6a18326	internal/rosa: acl artifact ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 07:38:56 +09:00
Ophestra	67d592c337	internal/pkg: close gzip reader on success ... The Close method panics otherwise. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 07:06:38 +09:00
Ophestra	fdc8a8419b	internal/rosa: static libwayland ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 06:49:08 +09:00
Ophestra	122cfbf63a	internal/rosa: run wayland tests ... Broken test is disabled for now. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 06:39:45 +09:00
Ophestra	504f5d28fe	internal/rosa: libseccomp artifact ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 05:28:36 +09:00
Ophestra	3eadd5c580	internal/rosa: gperf artifact ... Required by libseccomp. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 05:25:39 +09:00
Ophestra	4d29333807	internal/rosa: wayland-protocols artifact ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 05:13:30 +09:00
Ophestra	e1533fa4c6	internal/rosa: wayland artifact ... Required by hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 05:10:35 +09:00
Ophestra	9a74d5273d	internal/rosa: libgd artifact ... Required by graphviz which is required by wayland. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 04:20:11 +09:00
Ophestra	2abc8c454e	internal/pkg: absolute hard link ... This cannot be relative since the curing process is not in the temp directory. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 04:03:05 +09:00
Ophestra	fecb963e85	internal/rosa: libxml2 artifact ... Required by wayland. Release tarball is xz only, unfortunately. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 03:47:42 +09:00
Ophestra	cd9da57f20	internal/rosa: libexpat artifact ... Required by wayland. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 03:15:25 +09:00
Ophestra	c6a95f5a6a	internal/rosa: meson artifact ... Required by wayland and pipewire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 03:03:21 +09:00
Ophestra	228489371d	internal/rosa: setuptools artifact ... Apparently the only way to install python stuff offline. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 02:28:47 +09:00
Ophestra	490471d22b	cmd/mbf: verbose by default ... It usually does not make sense to use this without verbose. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 02:12:56 +09:00
Ophestra	763d2572fe	internal/rosa: pkg-config artifact ... Used by hakurei and many other programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 01:26:54 +09:00
Ophestra	bb1b6beb87	internal/rosa: name suffix by toolchain ... This makes output more useful during bootstrap. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 00:57:03 +09:00
Ophestra	3224a7da63	cmd/mbf: disable threshold by default ... This is not very useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-26 00:05:59 +09:00
Ophestra	8a86cf74ee	internal/rosa/go: symlink executables ... This avoids having to fix up $PATH for every artifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 23:59:08 +09:00
Ophestra	e34a59e332	internal/rosa/go: run toolchain tests ... LLVM patches and a TMPDIR backed by tmpfs fixed most tests. Broken tests in older versions are disabled. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 21:21:53 +09:00
Ophestra	861801597d	internal/pkg: expose response body ... This uses the new measured reader provided by Cache. This should make httpArtifact zero-copy. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 16:10:34 +09:00
Ophestra	334578fdde	internal/pkg: expose underlying reader ... This will be fully implemented in httpArtifact in a future commit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 14:48:25 +09:00
Ophestra	20790af71e	internal/rosa: lazy initialise all artifacts ... This improves performance, though not as drastically as lazy initialising llvm. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 01:43:18 +09:00
Ophestra	43b8a40fc0	internal/rosa: lazy initialise llvm ... This significantly improves performance. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-25 00:29:46 +09:00
Ophestra	87c3059214	internal/rosa: run perl tests ... A broken test with unexplainable failure is disabled. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 18:58:09 +09:00
Ophestra	6956dfc31a	internal/pkg: block on implementation entry ... This avoids blocking while not in Cure method of the implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 16:02:50 +09:00
Ophestra	d9ebaf20f8	internal/rosa: stage3 special case helper ... This makes it cleaner to specify non-stage3 and stage3-exclusive dependencies. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 12:23:35 +09:00
Ophestra	acee0b3632	internal/pkg: increase output buffer size ... This avoids truncating unreasonably long lines from llvm. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 11:45:44 +09:00
Ophestra	5e55a796df	internal/rosa: gnu patch artifact ... This is more robust than the busybox implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 11:32:27 +09:00
Ophestra	f6eaf76ec9	internal/rosa: patch library paths ... This removes the need for reference LDFLAGS in the standard toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-24 11:22:25 +09:00
Ophestra	5c127a7035	internal/rosa: patch header search paths ... This removes the need for reference CFLAGS in the standard toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-23 01:56:52 +09:00
Ophestra	8a26521f5b	internal/rosa/go: run bootstrap toolchain tests ... The objdump test will be re-enabled after fixing llvm search paths. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 07:05:48 +09:00
Ophestra	0fd4556e38	internal/rosa/llvm: fix broken test patch ... Both stage1 and stage2 passes at this point. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 06:42:04 +09:00
Ophestra	50b82dcf82	internal/rosa/gnu: coreutils artifact ... Required by llvm unit and regression tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 05:42:23 +09:00
Ophestra	20a8d30821	internal/rosa/busybox: link /usr/bin/env ... This is required by many scripts which uses bash but still pretends to be portable. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 04:21:06 +09:00
Ophestra	cdf2e4a2fb	internal/rosa: bash artifact ... Required by llvm unit and regression tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 04:06:48 +09:00
Ophestra	dcb8a6ea06	internal/rosa: fix toolchain layer order ... This allows extras to override toolchain artifacts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 03:37:46 +09:00
Ophestra	094a62ba9d	internal/rosa: diffutils artifact ... LLVM tests are not happy with busybox diff. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 03:00:59 +09:00
Ophestra	6420b6e6e8	internal/rosa: libffi artifact ... Required by python during llvm test suite. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-22 02:47:47 +09:00
Ophestra	d7d058fdc5	internal/rosa/gnu: disable broken tests ... These are documented as broken via comments yet not disabled on musl for some reason. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 23:31:45 +09:00
Ophestra	84795b5d9f	internal/rosa/git: add dependencies ... These are required outside the stage3 toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 22:14:48 +09:00
Ophestra	f84d30deed	internal/rosa/gnu: run checks ... Checks are not run for gettext for now since it contains broken tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 22:07:08 +09:00
Ophestra	77821feb8b	internal/rosa: gettext artifact ... Compile time dependency of git. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 21:52:50 +09:00
Ophestra	eb1060f395	internal/rosa: autoconf artifact ... Required by git to reconfigure some options. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 21:44:49 +09:00
Ophestra	0e08254595	internal/rosa: m4 artifact ... Autotools dependency. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 21:42:25 +09:00
Ophestra	349d8693bf	internal/rosa: perl artifact ... This runs without tests for now, will be enabled after some toolchain patches. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 21:33:12 +09:00
Ophestra	e88ae87e50	internal/rosa/llvm: run unit and regression tests ... Two tests are marked expected to fail for Rosa OS. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 08:25:36 +09:00
Ophestra	7cd4aa838c	internal/rosa/llvm: patch source tree ... A few patches are required for disabling broken tests and changing default search paths. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 08:25:17 +09:00
Ophestra	641942a4e3	internal/rosa/cmake: chmod entire source tree ... This works around builds that traverse out of the appended pathname. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 07:26:36 +09:00
Ophestra	b6a66acfe4	internal/rosa: git artifact ... This is required by the clang unit and regression tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 07:00:14 +09:00
Ophestra	b72dc43bc3	internal/pkg: report dependency graph size ... This is an interesting value to know when profiling. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 05:35:28 +09:00
Ophestra	8e59ff98b5	internal/rosa: include iana-etc ... This is used by some programs and will likely end up in the Rosa OS system image anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 05:28:41 +09:00
Ophestra	f06d7fd387	cmd/mbf: expose some artifacts for curing ... This will remain until dist is successfully bootstrapped. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 05:18:08 +09:00
Ophestra	ba75587132	internal/pkg: allow user namespace creation ... No good reason to filter this in the execArtifact container, and the extended filter breaks certain programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-21 04:49:25 +09:00
Ophestra	9a06ce2db0	internal/rosa: bootstrap go toolchain ... This runs without tests for now. Will be fixed in a later commit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-20 07:14:11 +09:00
Ophestra	3ec15bcdf1	internal/rosa/cmake: use hardcoded build directory ... This eliminates some nondeterminism. Still getting 3-stage non-determinism in runtimes and clang, though. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 22:51:34 +09:00
Ophestra	d933234784	internal/pkg: make checksum available to cure ... This enables deduplication by value as implemented in execArtifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 21:29:56 +09:00
Ophestra	1c49c75f95	cmd/mbf: toolchain 3-stage non-determinism check ... This unfortunately fails right now. Requires further investigation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 04:40:44 +09:00
Ophestra	6a01a55d7e	internal/rosa: parallel cmake bootstrap ... This takes a very long time otherwise. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 03:21:29 +09:00
Ophestra	b14964a66d	internal/rosa: standard toolchain via 2-stage bootstrap ... This implements the 2-stage bootstrap build without clumping the stages together in the cmake target. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:57:28 +09:00
Ophestra	ff98c9ded9	internal/rosa: llvm bootstrap artifacts ... This bootstraps the LLVM toolchain across multiple artifacts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:48:44 +09:00
Ophestra	7f3d1d6375	internal/rosa: llvm artifact abstraction ... The llvm bootstrap is multi-stage by nature, and cannot be completed in a single artifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:29:06 +09:00
Ophestra	3a4f20b759	internal/rosa: cmake abstraction ... This is a helper for generating cure script for a cmake-based project. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:20:37 +09:00
Ophestra	21858ecfe4	internal/rosa: ninja artifact ... Generated by cmake, recommended format for llvm toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 02:08:17 +09:00
Ophestra	574a64aa85	internal/rosa: cpython artifact ... Dependency of llvm build scripts, also an optional cure dependency of ninja. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:58:53 +09:00
Ophestra	85d27229fd	internal/rosa: zlib artifact ... Dependency of llvm build scripts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:48:27 +09:00
Ophestra	83fb80d710	internal/rosa: cmake artifact ... This is required for compiling the toolchain and many other programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:36:38 +09:00
Ophestra	fe6dc62ebf	internal/rosa: musl libc artifact ... This will likely be included in Rosa OS. The installation is modified to be entirely contained in prefix. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:25:41 +09:00
Ophestra	823f9c76a7	internal/rosa: busybox from source ... This will be part of the standard toolchain. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:12:47 +09:00
Ophestra	2df913999b	internal/rosa: kernel headers ... This is required by the toolchain and many other programs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 01:03:19 +09:00
Ophestra	52c959bd6a	internal/rosa: minimal rsync artifact ... For installing kernel headers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:58:34 +09:00
Ophestra	d258dea0bf	internal/rosa: bootstrap on gentoo stage3 ... This contains a fully working musl+llvm toolchain and many build systems in a pretty small package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:51:49 +09:00
Ophestra	dc96302111	internal/rosa: GNU make artifact ... This compiles GNU make from source. This is unfortunately required by many programs, but is a cure dependency only. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:40:25 +09:00
Ophestra	88e9a143d6	internal/rosa: toolchain abstraction ... This provides a clean and easy to use API over toolchains. A toolchain is an opaque set of artifacts and environment fixups. Exported toolchains should be functionally indistinguishable from each other. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:28:16 +09:00
Ophestra	8d06c0235b	internal/rosa: busybox binary artifact ... This installs a statically linked busybox binary distribution for decompressing the gentoo stage3 tarball, since there is no native xz implementation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-19 00:07:56 +09:00
Ophestra	4155adc16a	internal/rosa: static etc artifact ... This places configuration files with hardcoded content in /etc to silence test suites expecting them to be present. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-18 23:51:45 +09:00
Ophestra	2a9525c77a	cmd/mbf: command handling ... This tool is a frontend for bootstrapping hakurei via internal/pkg. Named mbf for now for "maiden's best friend" as a tribute to the DOOM source port. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-18 22:19:19 +09:00
Ophestra	efc90c3221	internal/pkg: deduplicate dependency errors ... This significantly simplifies error reporting for caller. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-17 14:41:00 +09:00
Ophestra	610ee13ab3	internal/pkg: lock on-filesystem cache ... Any fine-grained file-based locking here significantly hurts performance and is not part of the use case of the package. This change guarantees exclusive access to prevent inconsistent state on the filesystem. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-16 18:12:51 +09:00
Ophestra	5936e6a4aa	internal/pkg: parallelise scrub ... This significantly improves scrubbing performance. Since the cache directory structure is friendly to simultaneous access, this is possible without synchronisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-16 02:47:59 +09:00
Ophestra	3499a82785	internal/pkg: cache computed identifiers ... This eliminates duplicate identifier computations. The new implementation also significantly reduces allocations while computing identifier for a large dependency tree. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-15 23:30:43 +09:00
Ophestra	088d35e4e6	internal/pkg: optional dependency graph size limit ... This provides a quick check against cyclic dependencies without hurting cure performance. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-14 18:25:46 +09:00
Ophestra	1667df9c43	internal/pkg: zero atime and mtime ... This is significantly more practical than keeping track of them in directory flattening format and setting this in every non-artifact implementation. Only tarArtifact can have meaningful deterministic checksums that are not zero and zeroing them still keeps autotools happy. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-13 01:30:30 +09:00
Ophestra	156dd767ef	internal/pkg: remove typeflag promotion loop ... Expanding this enables sharing of code common between types. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-13 00:33:13 +09:00
Ophestra	5fe166a4a7	internal/pkg: exec prefix verbose output ... This proxies program output through msg with a name and fd prefix. This also avoids introducing additional information to the container via process stdout/stderr. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 22:15:01 +09:00
Ophestra	41a8d03dd2	internal/pkg: cure completion verbose messages ... This reports cure completions to the user. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 21:56:00 +09:00
Ophestra	610572d0e6	internal/pkg: optionally named static file ... These are generally for generating configuration files or build scripts, naming them is quite useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 04:34:50 +09:00
Ophestra	29951c5174	internal/pkg: caller-supplied reporting name for exec ... This does not have a reasonable way of inferring the underlying name. For zero value it falls back to base of executable pathname. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 04:17:47 +09:00
Ophestra	91c3594dee	internal/pkg: append user-facing name in messages ... This makes verbose messages much more useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-12 03:53:19 +09:00
Ophestra	7ccc2fc5ec	internal/pkg: exec with specific timeout ... This change also updates the documentation of NewExec. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 17:46:04 +09:00
Ophestra	63e137856e	internal/pkg: do not discard the result of compact ... This result was mistakenly unused resulting in incorrect identifiers for artifacts with duplicate dependencies. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 04:40:24 +09:00
Ophestra	e1e46504a1	container/check: return error backed by string type ... The struct turned out not necessary during initial implementation but was not unwrapped into its single string field. This change replaces it with the underlying string and removes the indirection. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 04:23:55 +09:00
Ophestra	ec9343ebd6	container/check: intern absolute pathnames ... This improves performance in heavy users like internal/pkg. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 04:18:11 +09:00
Ophestra	423808ac76	nix: use package from module in default ... This makes overriding hakurei easier. Also avoids building hakurei twice since nix does that for some reason. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 03:50:08 +09:00
Ophestra	2494ede106	container/init: configure interface lo ... This enables loopback networking when owning the net namespace. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 03:36:20 +09:00
Ophestra	da3848b92f	internal/pkg: compare interfaces for host net ... An upcoming improvement in the container init makes the current host net check return the same result for both cases. This change Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-11 00:30:32 +09:00
Ophestra	34cb4ebd3b	internal/pkg: pass context to file cure ... This removes the left over embedded contexts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-09 05:31:38 +09:00
Ophestra	f712466714	internal/pkg: move dependency flooding to cache ... This imposes a hard upper limit to concurrency during dependency satisfaction and moves all dependency-related code out of individual implementations of Artifact. This change also includes ctx and msg as part of Cache. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-09 05:20:34 +09:00
Ophestra	f2430b5f5e	internal/pkg: use short wait delay ... The cure is condemned at the point of cancellation and all of its state is destroyed by the deferred cleanup, so it makes little sense to wait for it much. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 18:58:51 +09:00
Ophestra	863e6f5db6	internal/pkg: use correct artifact count ... This updates buffer sizes and counters to use correct total artifact count. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 08:45:37 +09:00
Ophestra	23df2ab999	internal/pkg: place ephemeral upperdir in tmp ... This enables the use of directories made writable this way as scratch space. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 08:23:16 +09:00
Ophestra	7bd4d7d0e6	internal/pkg: support explicit overlay mount ... This removes all but the /work/ auto overlay behaviour and enables much greater flexibility. This also renames ExecContainerPath to ExecPath so it is easier to type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 07:55:09 +09:00
Ophestra	b3c30bcc51	internal/pkg: set container WaitDelay ... This prevents a container from blocking forever after context is canceled. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 06:23:57 +09:00
Ophestra	38059db835	internal/pkg: make tar temporary directory writable ... This allows it to be renamed to work directory. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 04:32:14 +09:00
Ophestra	409fd3149e	internal/pkg: reserve kind range ... This is useful for custom implementations of Artifact. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-08 01:21:51 +09:00
Ophestra	4eea136308	internal/pkg: do not connect stdin ... This introduces external state when verbose. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 23:17:58 +09:00
Ophestra	c86ff02d8d	internal/pkg: tar optional file ... This allows tar to take a single-file directory Artifact as input. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 22:16:26 +09:00
Ophestra	e8dda70c41	internal/pkg: return reader for files ... This improves efficiency for cache hits. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 21:36:47 +09:00
Ophestra	7ea4e8b643	internal/pkg: support tarball compressed via bzip2 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 20:18:28 +09:00
Ophestra	5eefebcb48	internal/pkg: reject entry types disallowed in the cache ... These are not encoded in the format, they are rejected here to serve as a check for cache since checksum is computed for every directory. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 03:22:44 +09:00
Ophestra	8e08e8f518	internal/pkg: automatic overlay mount on work ... This directly submits the upperdir to cache. It is primarily used in bootstrapping where tools are limited and should not be used unless there is a very good reason to. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 03:14:33 +09:00
Ophestra	54da6ce03d	internal/pkg: respect mount order for overlay temp ... Setting it up after everything else prevents covering files in /tmp. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 01:03:49 +09:00
Ophestra	3a21ba1bca	internal/pkg: implement file artifact ... This is an Artifact implementing File, backed by a constant, caller-supplied byte slice. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 00:39:29 +09:00
Ophestra	45301559bf	internal/pkg: fail on empty output directory ... This works around the fact that execArtifact always creates the work directory when setting up the bind mount. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-07 00:04:32 +09:00
Ophestra	0df87ab111	internal/pkg: automatic overlay mount on tmp ... This sets up the last Artifact to target /tmp as a writable overlay mount backed by the host side temp directory. This is useful for an Artifact containing source code to be built for another Artifact for example. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 23:45:08 +09:00
Ophestra	aa0a949cef	internal/pkg: do not clear execute bit ... Only write should be cleared here, clearing execute causes execArtifact to be unable to start anything since no Artifact is able to produce an executable file. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 22:31:44 +09:00
Ophestra	ce0064384d	internal/pkg: automatic overlay mount on root ... This makes it possible to use an Artifact as root without arranging for directory creation in the Artifact ahead of time. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 22:19:47 +09:00
Ophestra	53d80f4b66	internal/pkg/testdata: check network ... This validates hostNet state. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 21:32:10 +09:00
Ophestra	156096ac98	internal/pkg: known checksum exec artifact ... This optionally attaches an output checksum to an execArtifact and enables host networking for the resulting container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 20:58:34 +09:00
Ophestra	ceb75538cf	internal/pkg: update http checksum signature ... This was using the old pre-KnownChecksum function signature. It did not affect correctness since httpArtifact performs internal validation to avoid the strict mode vfs roundtrip, but it prevented content-addressed cache hits. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 18:24:31 +09:00
Ophestra	0741a614ed	internal/pkg: relocate testtool workaround ... This can be reused in other test cases. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 18:06:56 +09:00
Ophestra	e7e9b4caea	internal/pkg: exec nil path check during cure ... This results in os.ErrInvalid instead of a panic, which hopefully improves user experience. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 17:46:12 +09:00
Ophestra	f6d32e482a	internal/pkg: ensure parent for non-directory entries ... This works around streams containing out of order entries. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 05:55:24 +09:00
Ophestra	79adf217f4	internal/pkg: implement exec artifact ... This runs a program in a container environment. Artifacts can be made available to the container, they are cured concurrently and mounted in order. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 05:05:34 +09:00
Ophestra	8efffd72f4	internal/pkg: destroy temp during deferred cleanup ... This avoids missing the cleanup when cure returns an error. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 04:24:54 +09:00
Ophestra	86ad8b72aa	internal/pkg: expose cure through cure context ... This allows a curing Artifact to cure Artifact it depends on. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 01:04:06 +09:00
Ophestra	e91049c3c5	internal/pkg: pass cure context as single value ... This cleans up the function signature and makes backwards compatible API changes possible. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-06 00:56:49 +09:00
Ophestra	3d4d32932d	internal/pkg: verify checksum after uneventful scrub ... This checks that scrub did not condemn any entry without reporting it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 22:54:16 +09:00
Ophestra	0ab6c13c77	internal/pkg: consistency check for on-disk cache ... This change adds a method to check on-disk cache consistency and destroy inconsistent entries as they are encountered. This primarily helps verify artifact implementation correctness, but can also repair a cache that got into an inconsistent state from curing a misbehaving artifact, without having to destroy the entire cache. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 05:30:29 +09:00
Ophestra	834cb0d40b	internal/pkg: override "." for directory checksum ... This makes the checksum consistent with the final resting state of artifact directories without incurring the cost of an extra pair of chown syscalls. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 04:00:13 +09:00
Ophestra	7548a627e5	internal/pkg: delete stale done channels ... There is no reason to keep these around. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 02:12:34 +09:00
Ophestra	b98d27f773	internal/pkg: expand single directory tarball ... This enables much cleaner use of their output without giving up any meaningful data. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 01:43:23 +09:00
Ophestra	f3aa31e401	internal/pkg: temporary scratch space for cure ... This allows for more flexibility during implementation. The use case that required this was for expanding single directory tarballs. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 01:39:18 +09:00
Ophestra	4da26681b5	internal/pkg: compute http identifier from url ... The previous implementation exposes arbitrary user input to the cache as an identifier, which is highly error-prone and can cause the cache to enter an inconsistent state if the user is not careful. This change replaces the implementation to compute identifier late, using url string as params. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 00:43:21 +09:00
Ophestra	4897b0259e	internal/pkg: improve artifact interface ... This moves all cache I/O code to Cache. Artifact now only contains methods for constructing their actual contents. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-05 00:01:23 +09:00
Ophestra	d6e4f85864	internal/pkg: ignore typeflag 'g' ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 12:46:56 +09:00
Ophestra	3eb927823f	internal/pkg: create symlinks for files ... These are much easier to handle than hard links and should be just as transparent for this use case. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 01:48:53 +09:00
Ophestra	d76b9d04b8	internal/pkg: implement tar artifact ... This is useful for unpacking tarballs downloaded from the internet. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 01:34:30 +09:00
Ophestra	fa93476896	internal/pkg: override working directory perms ... This must be writable to enable renaming, and the final result is conventionally read-only alongside the entire directory contents. This change overrides the permission bits as part of Store. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 00:55:52 +09:00
Ophestra	bd0ef086b1	internal/pkg: enable cache access during store ... This is still not ideal as it makes entry into Store sequential. This will be improved after more usage code is written. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-04 00:39:14 +09:00
Ophestra	05202cf994	internal/pkg: pass context in request wrapper ... This method is for the most common use case, and in actual use there will always be an associated context. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 23:53:52 +09:00
Ophestra	40081e7a06	internal/pkg: implement caching for directories ... This works on any directories and should be robust against any bad state the artifact curing process might have failed at. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 22:54:46 +09:00
Ophestra	863d3dcf9f	internal/pkg: wrap checksum string encoding ... This wraps base64.URLEncoding.EncodeToString for cleaner call site. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 22:03:25 +09:00
Ophestra	8ad9909065	internal/pkg: compute identifier from deps ... This provides infrastructure for computing a deterministic identifier based on current artifact kind, opaque parameters data, and optional dependency kind and identifiers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 21:26:25 +09:00
Ophestra	deda16da38	internal/pkg: create work directory ... This is used for artifacts that cure into directories. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 20:56:11 +09:00
Ophestra	55465c6e72	internal/pkg: optionally validate flat pathnames ... This makes the decoder safe against untrusted input without hurting performance for a trusted stream. This should still not be called against untrusted input though. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 18:59:18 +09:00
Ophestra	ce249d23f1	internal/pkg: implement http artifact ... This is useful for downloading source tarballs from the internet. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 15:29:58 +09:00
Ophestra	dd5d792d14	go: 1.25 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-03 15:25:28 +09:00
Ophestra	d15d2ec2bd	internal/pkg: relocate cache test helper ... This is useful for other tests that need a cache instance. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-02 16:08:43 +09:00
Ophestra	3078c41ce7	internal/pkg: encode entry in custom format ... The fact that Gob serialisation is deterministic is an implementation detail. This change replaces Gob with a simple custom format. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-02 15:39:42 +09:00
Ophestra	e9de5d3aca	internal/pkg: implement caching for files ... This change contains primitives for validating and caching single-file artifacts. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-02 12:57:19 +09:00
Ophestra	993afde840	dist: install sharefs ... This also removes the deprecated hpkg program. Signed-off-by: Ophestra <cat@gensokyo.uk>	2026-01-02 00:57:51 +09:00
Ophestra	c9cd16fd2a	cmd/sharefs: prepare directory early ... This change also checks against filesystem daemon running as root early. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 23:17:02 +09:00
Ophestra	e42ea32dbe	nix: configure sharefs via fileSystems ... Turns out this did not work because in the vm test harness, virtualisation.fileSystems completely and silently overrides fileSystems, causing its contents to not even be evaluated anymore. This is not documented as far as I can tell, and is not obvious by any stretch of the imagination. The current hack is cargo culted from nix-community/impermanence and hopefully lasts until this project fully replaces nix. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 23:14:08 +09:00
Ophestra	e7982b4ee9	cmd/sharefs: create directory as root ... This optional behaviour is required on NixOS as it is otherwise impossible to set this up: systemd.mounts breaks startup order somehow even though my unit looks identical to generated ones, fileSystems does not support any kind of initialisation or ordering other than against other mount points. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 22:14:33 +09:00
Ophestra	ef1ebf12d9	cmd/sharefs: handle mount -t fuse.sharefs ... This should have been handled in a custom option parsing function, but that much extra complexity is unnecessary for this edge case. Honestly I do not know why libfuse does not handle this itself. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 20:49:27 +09:00
Ophestra	775a9f57c9	cmd/sharefs: check option parsing behaviour ... This change makes it possible to check parseOpts behaviour as part of Go tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 17:33:12 +09:00
Ophestra	2f8ca83376	cmd/sharefs: containerise filesystem daemon ... This replaces the forking daemonise libfuse function which prevents Go callbacks from calling into the runtime. This also enforces least privilege on the daemon process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 10:16:35 +09:00
Ophestra	3d720ada92	container: optionally allow orphan ... This is required for the typical daemonise use case. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 09:12:02 +09:00
Ophestra	2e5362e536	cmd/sharefs: opaque setup state ... This allows unrestricted use of the type system and prepares setup code for cross-process initialisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 04:14:00 +09:00
Ophestra	6d3bd27220	cmd/sharefs: expand fuse_main ... This change should not change behaviour other than making output more consistent. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 02:30:28 +09:00
Ophestra	a27305cb4a	cmd/sharefs: improve help message ... This improves consistency with the fuse_main help message. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-27 02:20:41 +09:00
Ophestra	0e476c5e5b	cmd/sharefs: allocate sharefs_private early ... This also removes global state used by sharefs_init. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 08:08:41 +09:00
Ophestra	54712e0426	nix: set noatime on sharefs ... Could improve performance, atime is not useful for this filesystem anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 05:34:05 +09:00
Ophestra	b77c1ecfdb	cmd/sharefs/test: check option handling ... This verifies behaviour related to setuid/setgid when starting as root. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 05:28:45 +09:00
Ophestra	dce5839a79	nix: do not restart sharefs ... This avoids disrupting running containers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 04:12:14 +09:00
Ophestra	d597592e1f	cmd/sharefs: rename fuse-helper to fuse-operations ... This is not really just library wrapper functions, but instead implements the callbacks, so fuse-operations makes more sense. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 03:19:32 +09:00
Ophestra	056f5b12d4	cmd/sharefs: move translate_pathname body to macro wrapper ... This is never called directly anywhere and it is simple enough to be included in the macro. This avoids passing the pointer around and dereferencing errno location, resulting in over 5% increase in throughput on the clang build. No change in the gcc build though. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-26 02:10:59 +09:00
Ophestra	da2bb546ba	cmd/sharefs: remove readlink ... This filesystem does not support symbolic links, so readlink is not useful, and unreachable in this case because of the check in getattr. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-25 06:00:58 +09:00
Ophestra	7bfbd59810	cmd/sharefs: implement shared filesystem ... This is for passing files between applications, similar to android /sdcard. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-25 05:13:02 +09:00
Ophestra	ea815a59e8	nix: disable source fortification in devShell ... This generates warnings when compiling without optimisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-21 02:22:28 +09:00
Ophestra	28a8dc67d2	internal/pipewire: raise Core::Sync timeout ... Hopefully relieves spurious failures on a very overloaded system. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-19 00:49:33 +09:00
Ophestra	ec49c63c5f	internal/pipewire: EPOLL_CTL_ADD instead of EPOLL_CTL_MOD ... Implementation is no longer tied down by the limitations of SyscallConn. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-19 00:43:44 +09:00
Ophestra	5a50bf80ee	internal/pipewire: hold socket fd directly ... The interface provided by net is not used here and is a leftover from a previous implementation. This change removes it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-19 00:28:24 +09:00
Ophestra	ce06b7b663	internal/pipewire: inform conn of blocking intent ... The interface does not expose underlying kernel notification mechanisms. This change removes the need to poll in situations were the next call might block. This is made cumbersome by the SyscallConn interface left over from a previous implementation, it will be replaced in a later commit as the current implementation does not make use of any net.Conn methods other than Close. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-19 00:00:33 +09:00
Ophestra	08bdc68f3a	internal/pipewire: sendmsg/recvmsg errors are fatal ... When returned wrapped as a syscall error, these are impossible to recover from, so wrap them as a fatal error. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-18 23:33:12 +09:00
Ophestra	8cb0b433b2	release: 0.3.3 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 20:34:45 +09:00
Ophestra	767f1844d2	test: check shim private dir cleanup ... This asserts that no shim private dir was left behind after all containers terminate. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 20:30:19 +09:00
Ophestra	54610aaddc	internal/outcome: expose pipewire via pipewire-pulse ... This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst. Closes #29. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 12:57:06 +09:00
Ophestra	2e80660169	internal/outcome: look up pipewire-pulse path ... This is for setting up the pipewire-pulse container in shim, for #29. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 12:38:39 +09:00
Ophestra	d0a3c6a2f3	internal/outcome: optional shim private dir ... This is a private work directory owned by the specific shim. Useful for sockets owned by this instance of the shim and requires no direct assistance from the priv-side process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 12:32:46 +09:00
Ophestra	0c0e3d6fc2	hst: add direct hardware option ... This is unfortunately the only possible setup to securely expose PipeWire to the container. Further explanation explained in the doc comment and #29. This will be implemented in a future commit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-15 12:29:32 +09:00
Ophestra	fae910a1ad	container: sync stubbed wait4 loop after notify ... This ensures consistent state observed by wait4 loop when running against stub. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 10:22:48 +09:00
Ophestra	178c8bc28b	internal/pipewire: handle SecurityContext::Create error ... This method can result in an error targeting it, so it is handled here. This change also causes a call to Create to also Core::Sync, as it should have done. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:41:28 +09:00
Ophestra	30dcab0734	internal/pipewire: SecurityContext as destructible ... This proxy can be destroyed by sending a Core::Destroy targeting it. This change implements the Destroy method by embedding destructible. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:31:50 +09:00
Ophestra	0ea051062b	internal/pipewire: reorder context struct ... This change reorders and groups struct elements. This improves readability since this struct holds a lot of state loosely related to each other. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:26:30 +09:00
Ophestra	b0f2ab6fff	internal/pipewire: implement Core::Destroy ... This change also implements pending destructible check on Sync. Destruction method should always be implemented as a wrapper of destructible.destroy. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:20:58 +09:00
Ophestra	00a5bdf006	internal/pipewire: do not emit None for spa_dict ... Turns out the PipeWire server does not expect a value of type None here at all. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 09:06:44 +09:00
Ophestra	a27dfdc058	internal/pipewire: implement Core::CreateObject ... Nothing uses this right now, this would have to be called by wrapper methods on Registry that would search the objects Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 08:10:57 +09:00
Ophestra	6d0d9cecd1	internal/pipewire: handle nil spa_dict correctly ... This now marshals into a value of type None when the slice is nil, and correctly unmarshals from type None. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 07:12:00 +09:00
Ophestra	17248d7d61	internal/pipewire: unmarshal nil pointer correctly ... This now calls unmarshalCheckTypeBounds to advance to the next message. Additionally, handling for None value is relocated to a function for reuse by other types. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 06:58:53 +09:00
Ophestra	41e5628c67	internal/pipewire: return correct size for nil spa_dict ... A nil spa_dict results in a None type value being sent over the wire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 06:07:46 +09:00
Ophestra	ffbec828e1	internal/pipewire: move Core wrapper methods under Core ... These do not belong under Context, and is an early implementation limitation that carried over. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-14 05:37:21 +09:00
Ophestra	de0467a65e	internal/pipewire: treat noAck violation as fatal ... Receiving this event indicates something has gone terribly wrong somehow, and ignoring Core::BoundProps causes inconsistent state anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-13 22:30:06 +09:00
Ophestra	b5999b8814	internal/pipewire: implement Core::RemoveId ... This is emitted by the server when a proxy id is removed for any reason. Currently, the only path for this to be emitted is when a global object is destroyed while some proxy is still bound to it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-13 21:50:32 +09:00
Ophestra	ebc67bb8ad	nix: update flake lock ... NixOS 25.11 introduces a crash in cage and an intermittent crash in foot. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-12 08:39:55 +09:00
Ophestra	e60ff660f6	internal/pipewire: treat unknown opcode as fatal ... Skipping events can cause local state to diverge from the server. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-11 04:22:03 +09:00
Ophestra	47db461546	internal/pipewire: generic Core::Error handling ... This flushes message buffer before queueing the event expecting the error. Since this is quite useful and relatively complex, it is relocated to a method of Context. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-11 04:07:55 +09:00
Ophestra	0a3fe5f907	internal/pipewire: export Registry::Destroy ... This handles the error returned by Sync. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-11 03:34:33 +09:00
Ophestra	b72d502f1c	internal/outcome: populate instance metadata for PipeWire ... These have similar semantics to equivalent Wayland security-context-v1 fields. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-10 03:01:30 +09:00
Ophestra	f8b3db3f66	internal/pipewire: cleaner error message for unsupported type ... The error string itself is descriptive enough, so use it as the error message directly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-10 01:51:06 +09:00
Ophestra	0e2fb1788f	internal/pipewire: implement Registry::Destroy ... This requires error handling infrastructure in Core that does not yet exist, so it is not exported for now. It has been manually tested via linkname against PipeWire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-10 01:25:30 +09:00
Ophestra	d8417e2927	internal/pipewire: implement Registry::GlobalRemove ... This is emitted by PipeWire when a global object disappears, because PipeWire insists that all clients that had called Core::GetRegistry must constantly sync its local registry state with the remote. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-10 01:00:03 +09:00
Ophestra	ccc0d98bd7	release: 0.3.2 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 08:12:52 +09:00
Ophestra	a3fd05765e	container: load initial process started before syscall ... This avoids a race between returning from syscall and checking the state. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 08:12:22 +09:00
Ophestra	c538df7daa	internal/pipewire: expose connection props ... Unused in hakurei but could be useful when the package is moved out of internal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:51:12 +09:00
Ophestra	44e5aa1a36	internal/pipewire: include remaining size in recvmsg wrapper ... This otherwise truncates the received data by len(remaining) bytes. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:36:46 +09:00
Ophestra	cf0e7d8c27	internal/pipewire: reset per-roundtrip state once per call ... This was left in consume when relocating per-roundtrip code out of the per-receive consume method. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:28:33 +09:00
Ophestra	130add21e5	internal/pipewire: increment remote sequence after establishing bounds ... This avoids incrementing it twice proceeding from a partial message. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:21:41 +09:00
Ophestra	5ec4045e24	internal/pipewire: do not clobber error parsing SCMs ... The error is handled later, clobbering it here breaks error handling when SCMs are present. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-09 06:02:15 +09:00
Ophestra	be2075f169	Revert "internal/pipewire: work around remote sequence quirk" ... This reverts commit 564db6863b.	2025-12-09 05:25:41 +09:00
Ophestra	e9fb1d7be5	container/initdaemon: copy wstatus from wait4 loop ... Due to the special nature of the init process, direct use of wait outside the wait4 loop is racy. This change copies the wstatus from wait4 loop state instead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:58:42 +09:00
Ophestra	dafe9f8efc	container: spin instead of block on wait4 ECHILD ... Blocking prevents further wait4 processing causing ops to never receive their signals. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:56:13 +09:00
Ophestra	96dd7abd80	container: improve error message fallback ... This now falls back to message.Error if no other concrete type is matched. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:45:54 +09:00
Ophestra	d5fb179012	cmd/hakurei: exec instead of fork/exec from shell ... There is no reason to keep the shell process around. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:29:41 +09:00
Ophestra	462863e290	container: friendlier error message for op timing out ... This includes the string for the failing op which helps with troubleshooting. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:19:03 +09:00
Ophestra	2786611b88	test/interactive: add app with bad daemon ... This is useful for testing daemon error handling behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 22:12:07 +09:00
Ophestra	791a1dfa55	container: make wait4 loop available to ops ... Due to the special nature of the init process, regular wait calls are unavailable. This change provides infrastructure to access wait4 loop state from Op. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 21:43:49 +09:00
Ophestra	564db6863b	internal/pipewire: work around remote sequence quirk ... Remote sequence sometimes start with a non-zero value, and keeps the same value for a while before going back to zero. Conditions for reproducing this behaviour is not yet known. This change works around this behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 20:10:01 +09:00
Ophestra	87781c7658	treewide: include PipeWire op and enforce PulseAudio check ... This fully replaces PulseAudio with PipeWire and enforces the PulseAudio check and error message. The pipewire-pulse daemon is handled in the NixOS module. Closes #26. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 08:53:04 +09:00
Ophestra	0c38fb7b6a	hst: expose daemon as fs entry ... This is slightly counterintuitive, but it turned out well under this framework since the daemon backs its target file. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 07:38:47 +09:00
Ophestra	357cfcddee	container: start daemons within container ... This is useful for daemons internal to the container. The only current use case is pipewire-pulse. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 07:21:04 +09:00
Ophestra	6bf245cf1b	container: pass context as setup state ... This is useful currently for daemon Op, but could be used for many other things. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 06:06:19 +09:00
Ophestra	c8eeb4a4d1	internal/outcome: integrate pipewire server ... This is very simple and takes almost no inputs. This is not yet hooked up to anything to prevent breaking any existing behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 05:03:16 +09:00
Ophestra	5785714b64	container: call op method right before initial process ... This is at a point considered to be already "within" the container. Daemons internal to the container can be started here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 04:57:24 +09:00
Ophestra	422efcf258	hst: check for insecure PulseAudio enablement ... This is currently still a noop, but required for #26. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 03:13:02 +09:00
Ophestra	104eeecf65	cmd/hakurei: add pipewire flag ... This is for "run" command, formerly permissive defaults behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-08 02:39:55 +09:00
Ophestra	bf856f06e5	internal/pipewire: constant for PIPEWIRE_REMOTE ... This is not defined anywhere in upstream PipeWire, no idea why. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 23:35:29 +09:00
Ophestra	1931b54600	hst: add pipewire flag ... These are for #26. None of them are implemented yet. This fixes up test cases for the change to happen. Existing source code and JSON configuration continue to have the same effect. Existing flags get its EPulse bit replaced by EPipeWire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 22:34:40 +09:00
Ophestra	093e30c788	internal/system: integrate PipeWire SecurityContext ... Tests for this Op happens to be the best out of everything due to the robust infrastructure offered by internal/pipewire. This is now ready to use in internal/outcome for implementing #26. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 17:39:34 +09:00
Ophestra	1b17ccda91	internal/system: optional op check parallelism ... The PipeWire Op check cannot be made parallel due to the OS interaction. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 17:31:10 +09:00
Ophestra	7c6fc1128b	internal/pipewire: set finalizer on scc ... This prevents leaking the socket and pipe fds. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 17:29:22 +09:00
Ophestra	8cdd659239	internal/pipewire: seq access method for consume ... This improves readability as the offset is not immediately obvious. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 17:07:30 +09:00
Ophestra	15c2839a09	internal/pipewire: respond to Core::Ping ... There is currently no known message that will get the PipeWire server to emit this event. It should be handled regardless. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 14:55:56 +09:00
Ophestra	b9b9705b52	internal/pipewire: specify opcode and file count with message ... This adds checking of FileCount while writing a message. Message encoding is relocated to an exported method to be used externally, probably for test stubbing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 13:54:11 +09:00
Ophestra	246e04214a	internal/system: pass syscall error message ... This makes wrapped syscall errors produce a cleaner error message. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 02:08:05 +09:00
Ophestra	503bfc6468	internal/system: port connect by name ... This behaviour is a bit messy and checks what appears to be a windows-specific environment variable for some reason. Keeping everything intact regardless to match upstream behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 02:00:19 +09:00
Ophestra	d837628b4c	internal/system: remove ineffectual join reverting wayland ... Removing the pathname socket used to be handled separately, now it is done during the Close call. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-07 00:43:50 +09:00
Ophestra	3cb58b4b72	internal/pipewire: high level SecurityContext helper ... This sets up close pipe and socket internally, and exposes the resulting pathname socket and close_fd cleanup as an io.Closer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 21:16:27 +09:00
Ophestra	bb1fc4c7bc	internal/pipewire: check pending ids after done ... This is not guaranteed to have completed after a roundtrip. This is leftover from when Roundtrip also sent and waited for sync. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 21:09:55 +09:00
Ophestra	f44923da29	internal/pipewire: post-sync cleanup functions ... This makes it easier to handle resources who only needs to stay alive before the next sync. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 21:03:21 +09:00
Ophestra	5e7861bb00	internal/pipewire: handle dangling files in roundtrip ... This should not be handled on every receive as it could cause valid (though impossible in current upstream implementation) messages to be rejected and raise a protocol error. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 19:21:57 +09:00
Ophestra	7cb3308a53	internal/pipewire: store proxy errors in context ... This change fixes handling of non-fatal errors during a roundtrip as there can be multiple receive calls per roundtrip. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 19:13:46 +09:00
Ophestra	490093a659	internal/pipewire: set errno on an empty message ... This matches upstream behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 16:50:49 +09:00
Ophestra	2b22efcdf1	internal/pipewire: rename context consume method ... This name is more correct since it does not roundtrip, but receives messages. This is also more consistent with the method on event proxies. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 16:44:39 +09:00
Ophestra	8a2f9edcf9	internal/pipewire: use sendmsg/recvmsg directly ... The PipeWire protocol does not work with Go abstractions. This change makes relevant methods call sendmsg/recvmsg directly. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-06 02:12:47 +09:00
Ophestra	0d3f332d45	internal/pipewire: do not send ancillary msg without files ... This is unnecessary and does not match upstream behaviour. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-05 04:20:04 +09:00
Ophestra	d5509cc6e5	internal/pipewire: constants from pipewire/keys.h ... These are PipeWire spa_dict keys. Interestingly many keys in the sample are undefined and appear as magic strings in upstream source code. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-05 03:27:30 +09:00
Ophestra	0d3ae6cb23	internal/pipewire: improve protocol error messages ... These are mostly small formatting changes, with the biggest change being to UnexpectedEOFError where its kind is now described as part of the error type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-04 03:15:58 +09:00
Ophestra	69b1131d66	internal/pipewire: use type name in error strings ... This provides more useful messages for protocol errors. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-04 02:29:27 +09:00
Ophestra	2c0b92771a	internal/pipewire: relocate constants ... This should make things easier to navigate, and possible to fully automatically generate the constants in the future. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-03 03:52:17 +09:00
Ophestra	054c91879f	internal/pipewire: finalizers for dangling files ... This makes their handling much less error-prone. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-03 03:36:02 +09:00
Ophestra	c34439fc5f	internal/pipewire: collect non-protocol errors ... These errors are recoverable and should not terminate event handling. Only terminate event handling for protocol errors or inconsistent state that makes further event handling impossible. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-03 01:35:43 +09:00
Ophestra	32fb137bb2	internal/pipewire: fail on unacknowledged proxies ... These proxies (with special cases documented in the implementation) are only safe for use after acknowledgement from the server. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 21:17:46 +09:00
Ophestra	e7a665e043	internal/pipewire: handle Core::Error ... This event is not encountered in the pw-container sample, but already has existing sample from an excerpt. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 06:16:18 +09:00
Ophestra	af741f20a0	internal/pipewire: implement client context ... This consumes the entire sample, is validated to send identical messages and correctly handle received messages. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 06:03:21 +09:00
Ophestra	39c6716fb0	internal/pipewire: use correct types in header ... This was written when the protocol was still barely understood, so none of the types here are correct and match the rest of the protocol. This change corrects these types. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 03:32:10 +09:00
Ophestra	7bc73afadd	internal/pipewire: wrap EOF error for deserialisation ... The io.ErrUnexpectedEOF error can be returned from multiple places. This change eases error handling. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 03:19:37 +09:00
Ophestra	647aa9d02f	internal/pipewire: preallocate for footer ... This is useful during serialisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-12-02 03:06:27 +09:00
Ophestra	91aaabaa1b	internal/pipewire: benchmarks against Gob and JSON ... Performance does not matter for the use case of this library, but it is still interesting to know. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-30 12:13:46 +09:00
Ophestra	3d4c7cdd9e	internal/pipewire: implement Core::Error ... Sample was captured from pw-cli. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-30 01:39:39 +09:00
Ophestra	4fd6d6c037	internal/pipewire: implement Core::Ping, Core::Pong ... I could not get the server to produce these events, however I am confident enough with the implementation to do it by hand. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-29 23:25:29 +09:00
Ophestra	de3fc7ba38	internal/pipewire: implement SecurityContext::Create ... This is finally the thing we are after. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-29 16:46:39 +09:00
Ophestra	5a5c4705dd	internal/pipewire: implement Registry::Bind ... This change also adds test cases for messages before this one. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-29 03:01:53 +09:00
Ophestra	f703aa20a5	internal/pipewire: implement client generation footer ... This corresponds with the core generation footer and seem to be the only other possible footer type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-29 02:55:30 +09:00
Ophestra	5c12425d48	internal/pipewire: implement Registry::Global ... Dealing with this event reawakened my burning hatred for OOP. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-28 02:32:45 +09:00
Ophestra	cbe86dc4f0	internal/pipewire: add json struct tags ... These match the names found in documentation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-28 01:33:32 +09:00
Ophestra	d08a1081bd	internal/pipewire: do not store spa_dict fields ... This is effectively a poor man's slice, it is entirely unnecessary here and can be handled internally. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-28 01:25:18 +09:00
Ophestra	72a2601d74	internal/pipewire: store sample iovec continuously ... This removes the need for manual splitting. The understanding of the format is robust enough to allow this to happen anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-28 00:35:10 +09:00
Ophestra	1dab87aaf0	internal/pipewire: add missing constants ... These did not appear useful at first since it was assumed to be filenames for loading modules. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 21:28:16 +09:00
Ophestra	2bafde99e3	internal/pipewire: shorten test data filenames ... These were getting very annoying to type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 20:06:01 +09:00
Ophestra	91efeb101a	internal/pipewire: spa_dict size nil check ... This fixes serialisation of NULL spa_dict. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 02:51:36 +09:00
Ophestra	dcb22a61c0	internal/pipewire: require appending marshaler ... This eliminates all non-reflect allocations. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 02:33:19 +09:00
Ophestra	e028a61fc1	internal/pipewire: preallocate for known size ... This is still not efficient by any means, but it should eliminate most non-reflect allocation (all allocation if PODMarshaler is not used). Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 02:26:31 +09:00
Ophestra	73987be7d4	internal/pipewire: size without serialisation ... This is required to achieve zero allocation (other than reflect). Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 02:17:38 +09:00
Ophestra	563b5e66fc	internal/pipewire: simplify spa_dict appends ... This change uses the (somewhat) newly exposed MarshalAppend which improves readability. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 01:52:13 +09:00
Ophestra	2edcfe1e68	internal/pipewire: define size constants ... This gets rid of magic numbers in marshal/unmarshal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-27 00:54:56 +09:00
Ophestra	2698ca00e8	internal/pipewire: implement Core::Done ... The message in the sample does not correspond to any known method call. The spec does not mention what to do with messages like this, but all existing usage code simply drops it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 19:02:21 +09:00
Ophestra	1d0143386d	internal/pipewire: optional final trailing garbage check ... Omitting the check is only useful for custom unmarshaler. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 18:50:39 +09:00
Ophestra	a55c209099	internal/pipewire: additional Client::Info test case ... This appears to add *one single entry* compared to the message before it. The inefficiency of this protocol is beyond imagination. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 16:28:57 +09:00
Ophestra	10ff276da1	internal/pipewire: additional Client::Info test case ... This message follows the other Client::Info event before it. No idea why. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 16:17:38 +09:00
Ophestra	fd4d379b67	internal/pipewire: implement Client::Info ... Everything is already supported, as usual. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-26 16:05:46 +09:00
Ophestra	77f5b89a41	internal/pipewire: implement Core::BoundProps ... Very straightforward type, everything is already supported. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 18:40:19 +09:00
Ophestra	14e33f17e5	internal/pipewire: check nil marshaler ... NULL values have special case in the format. This check ensures correctness serialising nil pointers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 18:36:08 +09:00
Ophestra	cfeb7818eb	internal/pipewire: implement Core::Info and generation footer ... These are not directly related but are first encountered on the same message in the capture. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 15:16:12 +09:00
Ophestra	05391da556	internal/pipewire: implement footer ... The POD itself is serialised without requiring a special case, however its presence is only indicated by the difference in size recorded in the header and payload. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 15:11:22 +09:00
Ophestra	463f8836e6	internal/pipewire: implement Long type ... Thankfully no special case here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 15:05:37 +09:00
Ophestra	2e465c94da	internal/pipewire: implement Id type ... This is, in fact, just a glorified Int type. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 15:01:58 +09:00
Ophestra	26009fd3f7	internal/pipewire: slice at POD boundary ... This prevents incorrectly reading trailing data as part of the current POD. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 14:58:56 +09:00
Ophestra	2d7b896a8c	internal/pipewire: bounds check against wire size ... This covers cases where wire size is not known ahead of time. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 13:42:31 +09:00
Ophestra	a0eb010aab	internal/pipewire: spa_dict trailing garbage within POD ... This performs the check within the bounds of the POD only. This was not caught since spa_dict was only used as the final struct field until now. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 13:39:02 +09:00
Ophestra	b1b27ac1df	internal/pipewire: zero size before validation ... Leftover values from previous invocations cause incorrect behaviour here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 12:21:37 +09:00
Ophestra	fc3d78fe01	internal/pipewire: implement Core::Sync ... Once again, already entirely supported, the offset is not yet fully verified but makes intuitive sense. Will verify this on future occurrences of the message. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 08:52:06 +09:00
Ophestra	591637264a	internal/pipewire: implement Core::GetRegistry ... This struct is entirely supported, so this change is very straightforward. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 08:34:19 +09:00
Ophestra	e77652bf89	internal/pipewire: move test data to files ... These get very big later on, and would be painful to represent as the compound literal. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 08:09:10 +09:00
Ophestra	88d3e46413	internal/pipewire: implement Client::UpdateProperties ... This is the second message on the captured sample. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 04:16:11 +09:00
Ophestra	e51e81bb22	internal/pipewire: implement spa_dict type ... This is a terrible type that defies the type system. It is implemented on the concrete type to avoid special cases. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 04:08:52 +09:00
Ophestra	8f4a3bcf9f	internal/pipewire: use custom marshaler when available ... This reduces special cases. This change also exposes unmarshalled message size on the wire. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 04:05:22 +09:00
Ophestra	827dc9e1ba	internal/pipewire: implement string type ... This is still NUL terminated strings, and an extra NUL character on an 8-byte string does cause an extra 7 bytes of padding. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 04:00:59 +09:00
Ophestra	d92de1c709	internal/pipewire: check for trailing garbage ... This is useful during development. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 01:59:29 +09:00
Ophestra	5bcafcf734	internal/pipewire: implement Core::Hello ... This implements enough types to correctly marshal and unmarshal Core::Hello. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-25 01:20:30 +09:00
Ophestra	9f7b0c2f46	internal/pipewire: add type constants ... This change also centralises encoding testing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-24 22:00:09 +09:00
Ophestra	3e87187c4c	internal/pipewire: implement message header ... Test cases are from interactions between pw-container and PipeWire. Results are validated against corresponding body. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-23 16:20:35 +09:00
Ophestra	b651d95e77	workflows: do not duplicate on pulls ... This condition causes two runs to be created on a pull, as gitea does not check whether a run has already been created for the current commit. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-19 06:59:32 +09:00
Ophestra	aab92ce3c1	internal/wayland: clean up pathname socket ... This is cleaner than cleaning up in internal/system as it covers the failure paths. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-19 06:37:04 +09:00
Ophestra	a495e09a8f	internal/wayland: do not double close fd ... These are already closed during securityContextBindPipe on a non-nil error. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-17 22:03:29 +09:00
Ophestra	3afca2bd5b	internal/wayland: expose WAYLAND_VERSION ... This might be useful troubleshooting information. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-17 01:46:01 +09:00
Ophestra	b73a789dfe	.clang-format: increase indent width ... This significantly increases readability. This patch is pretty big so it is being done after mostly everything has settled. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 20:57:29 +09:00
Ophestra	38b5ff0cec	internal/wayland: check pathname size ... This avoids passing a truncated pathname to the kernel. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 03:34:05 +09:00
Ophestra	3c204b9b40	internal/wayland: increase error detail ... This includes targeted paths in the returned errors. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 02:09:50 +09:00
Ophestra	00771efeb4	internal/wayland: remove fd typecasts ... These are no longer necessary since RawConn is no longer used. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 01:45:37 +09:00
Ophestra	61972d61f6	internal/wayland: reimplement connect/bind code ... The old implementation is relocated to system/wayland/deprecated.go. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-16 01:23:16 +09:00
Ophestra	fe40af7b7e	internal/wayland: relocate connection struct ... This interface is getting replaced, so relocating it to the deprecated wrapper package before working on its replacement. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 23:25:46 +09:00
Ophestra	12751932d1	internal/wayland: improve error handling ... Note: wl_registry_add_listener is undocumented everywhere. Its implementation calls wl_proxy_add_listener which returns 0 on success or -1 on failure. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 21:26:31 +09:00
Ophestra	41b49137a8	.clang-format: do not limit line length ... This hard limit destroys readability in some places. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 17:06:43 +09:00
Ophestra	c761e1de4d	nix: build with clang ... Clang is better than gcc in various ways. This also pulls in clang-format which is very helpful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 16:36:36 +09:00
Ophestra	a91920310d	internal: relocate packages ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-15 13:58:34 +09:00
Ophestra	16e674782a	cmd/hakurei: reorder show entries ... This order semantically makes more sense and generally looks tidier. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 22:14:49 +09:00
Ophestra	47244daefb	treewide: migrate ldd callers ... This discontinues use of the deprecated ldd.Exec function for #25. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 21:59:59 +09:00
Ophestra	46fa104419	ldd: require absolute pathname ... The sandbox which ldd(1) runs in does not inherit parent work directory, so relative pathnames will not work correctly. While it is trivial to support such a use case, the use of relative pathnames is highly error-prone and generally frowned against in this project. The Exec function remains available under the same signature until v0.4.0 where it will be removed. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 21:53:10 +09:00
Ophestra	45953b3d9c	ldd: cancel on decoder error ... This prevents blocking from failures caused by ldd(1) emitting output that is not anticipated by the decoder. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 21:43:34 +09:00
Ophestra	42759e7a9f	ldd: create musl entry representation ... This mostly helps with debugging. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 21:38:35 +09:00
Ophestra	8e2d2c8246	ldd: check decoder scan guard ... This was unreachable via the Parse wrapper. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 18:32:47 +09:00
Ophestra	299685775a	container: provide usage example ... This requires cgo so unfortunately will not run in the playground. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 18:25:22 +09:00
Ophestra	b7406cc4c4	ldd: update package doc comment ... This should hopefully deter misuse of this package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 17:49:01 +09:00
Ophestra	690a0ed0d6	ldd: decode from reader ... This should reduce memory footprint of the parsing process and allow decoding part of the stream. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 08:33:19 +09:00
Ophestra	a9d72a5eb1	internal/outcome: rename run from main ... The "main.go" name is quite confusing as this is often only present in main packages. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 01:06:14 +09:00
Ophestra	6d14bb814f	container/fhs: add constant for /dev/shm/ ... This is mounted for the default read-only /dev/ when programs want to use shm_open(3). Defining it here is less error-prone and saves the extra append at runtime. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-14 01:03:26 +09:00
Ophestra	be0e387ab0	internal/info: relocate from internal ... This is cleaner and makes more sense. The longer LDFLAGS was never a valid concern since it is always inserted by a script. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-13 07:29:46 +09:00
Ophestra	abeb67964f	treewide: document linkname uses ... These provide justification for each use of linkname. Poorly thought out uses of linkname are removed. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-13 07:14:16 +09:00
Ophestra	bf5d10743f	treewide: import internal/system ... For #24. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-13 01:22:47 +09:00
Ophestra	4e7aab07d5	internal/system: relocate from system ... These packages are highly specific to hakurei and are difficult to use safely from other pieces of code. Their exported symbols are made available until v0.4.0 where they will be removed for #24. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-13 01:17:47 +09:00
Ophestra	15a66a2b31	treewide: import internal/helper ... For #24. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 23:19:34 +09:00
Ophestra	f347d44c22	internal/helper: relocate from helper ... This package is ugly and is pending removal only kept alive by xdg-dbus-proxy. Its exported symbols are made available until v0.4.0 where it will be removed for #24. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 23:16:13 +09:00
Ophestra	b5630f6883	test: move package sandbox internal ... This should never be used outside vm tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 23:03:22 +09:00
Ophestra	17ffdb2dcf	release: 0.3.1 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 00:53:14 +09:00
Ophestra	ac34635890	container: set FD_CLOEXEC on all open files ... While fd created from this side always has the FD_CLOEXEC flag, the same is not true for files left open by the parent. This change prevents those files from leaking into the container. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-12 00:18:29 +09:00
Ophestra	9dec9dbc4b	container/init: close setup pipe early ... This prevents leaking the setup pipe. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-11 07:31:58 +09:00
Ophestra	2f74adc8bd	container/init: close initial process files on termination ... This closes them during the adopt wait delay. This also keeps them alive. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-10 20:35:59 +09:00
Ophestra	d7e0104ae4	treewide: reject impossible user-supplied fd ... These are all trusted user input, however this check reduces the likelihood of hard to debug errors. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-10 20:31:26 +09:00
Ophestra	bb92e3ada9	cmd/hakurei: expose current instance identifier ... This writes the 16-byte instance identifier to file descriptor specified by --identifier-fd if set, and closes the file. This enables safely obtaining the new instance's identifier. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-10 07:52:35 +09:00
Ophestra	fad419c2a2	internal/outcome: handle group lookup message ... This results in slightly less messy error reporting. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-09 02:15:48 +09:00
Ophestra	b1a1e73238	nix: update names to reflect new terminology ... These are terminology from way early days. Update them now to be less confusing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-09 01:48:31 +09:00
Ophestra	38e9128a8c	container/std/seccomp: remove ineffectual typecast ... This is no longer necessary since the return type changed. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-07 05:45:51 +09:00
Ophestra	7ee702a44e	container/seccomp/presets: add fields to literals ... This keeps composites analysis happy. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-07 05:11:57 +09:00
Ophestra	3d188ef884	std: separate seccomp constants ... This avoids inadvertently using PNRs as syscall numbers. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-07 04:30:06 +09:00
Ophestra	34ccda84b2	release: 0.3.0 ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-06 01:37:15 +09:00
Ophestra	042013bb04	container/std: syscall JSON adapter ... This provides cross-platform JSON adapter for syscall number. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-06 00:57:53 +09:00
Ophestra	5c2b63a7f1	container: add 386 constants ... While it is unlikely a use case for hakurei on i686 exists, it does not hurt to have this support. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 20:21:14 +09:00
Ophestra	9fd97e71d0	treewide: fit test untyped int literals in 32-bit ... This enables hakurei test suite to run on 32-bit targets. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 20:13:19 +09:00
Ophestra	fba201c995	container/std: relocate rule types ... This enables its use in hst for #15. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 06:00:39 +09:00
Ophestra	7f27a6dc51	container/seccomp: use native types ... This prepares NativeRule for relocation to std for #15. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 05:48:59 +09:00
Ophestra	b65aba9446	container/seccomp: alias libseccomp types ... This enables tests to refer to these types and check its size. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 05:21:43 +09:00
Ophestra	becaf8b6d7	std: relocate seccomp lookup tables ... This should enable resolving NativeRule in hst. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 04:48:05 +09:00
Ophestra	54c0d6bf48	container/seccomp/pnr: define pseudo syscalls ... This eliminates the cgo dependency from syscall lookup. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 04:32:41 +09:00
Ophestra	c1399f5030	std: rename from comp ... Seccomp lookup tables are going to be relocated here, and PNR constants. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 02:47:43 +09:00
Ophestra	9ac63aac0c	hst/grp_pwd: add extra test cases ... Does not change coverage but this helps me crosscheck with my phone. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-05 01:42:42 +09:00
Ophestra	cb9ebf0e15	hst/grp_pwd: specify new uid format ... This leaves slots available for additional uid ranges in Rosa OS. This breaks all existing installations! Users are required to fix ownership manually. Closes #18. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-04 08:24:41 +09:00
Ophestra	9a2a7b749f	cmd/hakurei/print: handle nil config ... There is nothing to print in this case, and such a nil check is missing. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 02:20:18 +09:00
Ophestra	ec5cb9400c	cmd/hpkg/test: print share directory ... This is more useful now that state is tracked here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:51:57 +09:00
Ophestra	ae66b3d2fb	message: rename NewMsg to New ... Should have done this when relocating this from container. Now is a good time to rename it before v0.3.x. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:49:27 +09:00
Ophestra	149bc3671a	internal/store: remove compat adapter ... This is no longer used as everything has been migrated. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:26:01 +09:00
Ophestra	24435694a5	hst/config: make identifier omitempty ... This is an optional field. Serialise it as such. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:23:15 +09:00
Ophestra	1c168babf2	cmd/hakurei/print: use new store interface ... This removes the final uses of the compat interfaces. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-03 01:19:16 +09:00
Ophestra	0edcb7c1d3	test: print share directory ... This is more useful now that state is tracked here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 17:00:59 +09:00
Ophestra	0e5ca74b98	cmd/hakurei/print: serialise array for ps ... Wanted to do this for a long time, since the key is redundant. This also makes it easier to migrate to the new store interface. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 16:37:08 +09:00
Ophestra	23ae7822bf	cmd/hakurei/parse: use new store interface ... This greatly reduces overhead. The iterator also significantly cleans up the usage code. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 16:00:41 +09:00
Ophestra	898b5aed3d	internal/store: iterator over all entries ... This is quite convenient for searching the store or printing active instance information. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 15:54:00 +09:00
Ophestra	7c3c3135d8	internal/outcome: track state in TMPDIR ... The SharePath is a more stable path than RunDirPath, since it is available all the time and should remain consistent. This also fits better into the intended use case of XDG_RUNTIME_DIR. Closes #17. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 12:40:58 +09:00
Ophestra	f33aea9ff9	internal/env: cleaner runtime dir fallback ... This now places rundir inside the fallback runtime dir, so special case in internal/outcome is avoided. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 12:22:32 +09:00
Ophestra	e7fc311d0b	internal/outcome/shim: cover reparent and exit request paths ... These test cases were missed when making the changes. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 11:58:09 +09:00
Ophestra	f5274067f6	internal/outcome/process: nil-safe unlock when failing to lock ... This also prints a debug message which might be useful. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 11:47:51 +09:00
Ophestra	e7161f8e61	internal/outcome: measure finalise time ... This also increases precision of state time output. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 05:17:33 +09:00
Ophestra	6931ad95c3	internal/outcome/shim: EOF as exit request fallback ... In some cases the signal might be delivered before the signal handler is installed, and synchronising against such a case is too expensive. Instead, use the pipe being closed as a fallback to the regular exit request. This change also moves installation of the signal handler early. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 04:41:26 +09:00
Ophestra	2ba599b399	internal/outcome/process: use new store interface ... This change also spawns shim before committing system state, leaving it blocking on the setup pipe. The internal/outcome/process structure is also entirely reworked to be much more readable and less error-prone, while enabling basic performance measurements. A long-standing bug where segment lock is not held during Commit is also resolved. Closes #19. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-02 04:25:45 +09:00
Ophestra	d3d3417125	internal/outcome/process: relocate start and serve ... This is useful for reordering these operations for further cleanup. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-11-01 19:14:59 +09:00
Ophestra	651cdf9ccb	internal/outcome: remove guard on main ... This is no longer exported. Such a check is pointless. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-31 22:58:26 +09:00
Ophestra	68ff0a2ba6	container/params: expose pipe ... This increases flexibility of how caller wants to handle the I/O. Also makes it no longer rely on finalizer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-31 22:39:02 +09:00
Ophestra	6a0ecced90	internal/store: expose save via handle ... The handle is otherwise inaccessible without the compat interface. This change also moves compatibility methods to separate adapter structs to avoid inadvertently using them. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-31 04:20:22 +09:00
Ophestra	b667fea1cb	internal/store: export new interface ... This exposes store operations safe for direct access, and enables #19 to be implemented in internal/outcome. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-31 03:41:26 +09:00
Ophestra	b25ade5f3d	internal/store: rename compat interface ... The new store implementation will be exported as Store. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 18:53:59 +09:00
Ophestra	ebdcff1049	internal/store: rename from state ... This reduces collision with local variable names, and generally makes sense for the new store package, since it no longer specifies the state struct. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 18:43:55 +09:00
Ophestra	46c5ce4936	internal/outcome/shim: check full behaviour ... This took significant effort to stub out, and achieves full coverage after c5aefe5e9d. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 05:20:49 +09:00
Ophestra	36f8064905	internal/outcome/process: output via msg ... This makes it possible to instrument output behaviour through stub. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 03:41:38 +09:00
Ophestra	eeb9f98e5b	internal/outcome/shim: move signal constants ... The magic numbers hurt readability. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-30 01:20:51 +09:00
Ophestra	3f9f331501	internal/outcome/shim: remove noop resume ... The shim does not suspend output to begin with. These are leftovers from when container startup code suspends output. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 23:31:39 +09:00
Ophestra	2563391086	internal/outcome/shim: params check early ... This is unreachable, but keeping it here as a failsafe until more test cases are added. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 23:10:12 +09:00
Ophestra	a0b4e47acc	internal/outcome: rename from app ... This is less ambiguous, and more accurately describes the purpose of the package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 04:33:13 +09:00
Ophestra	a52f7038e5	internal/env: relocate from app ... This package is much cleaner to stub independently, and makes no sense to lump into app. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 04:11:49 +09:00
Ophestra	274686d10d	internal/validate: relocate from app ... These are free of the dispatcher from internal/app. This change relocates them into their own package. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 03:40:09 +09:00
Ophestra	65342d588f	internal/app/state: improve store internals ... This fully exposes the store internals for #19 and are final preparations for removing the legacy store interface. This change also fixes a potential deadlock in the handle initialisation mkdir failure path. This however is never reachable in hakurei as the store is never accessed concurrently. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-29 03:21:00 +09:00
Ophestra	5e5826459e	internal/app/state: improve handles internals ... This replaces the Store interface with something better reflecting the underlying data format for #19. An implementation of Store is provided on top of the new code to ease transition. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-28 22:00:54 +09:00
Ophestra	4a463b7f03	internal/app/state: use absolute pathnames ... This is less error-prone and fits better into internal/app which already uses check.Absolute for all pathnames. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-26 03:41:19 +09:00
Ophestra	dacd9550e0	internal/app/state: acquire big lock for toplevel operations ... This avoids getting into an inconsistent state for simultaneous calls to List and Do on a previously unknown identity. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-26 03:27:56 +09:00
Ophestra	546b00429f	treewide: update doc comments ... Some internal/app/state types were relocated to hst as part of the API. This change updates doc comments referring to them. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-26 03:00:04 +09:00
Ophestra	86f4219062	internal/app/state/data: check full entry behaviour ... This eventually gets relocated to internal/app. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-26 01:49:14 +09:00
Ophestra	fe2929d5f7	internal/app/state: include et header ... This is the initial step of implementing #19. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 22:01:26 +09:00
Ophestra	470e545d27	internal/app/state: use internal/lockedfile ... This is a pretty solid implementation backed by robust tests, with a much cleaner interface. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 21:29:24 +09:00
Ophestra	8d3381821f	internal/app/state: export correct backend value ... This references the underlying multiBackend due to a typo, making the whole dance with c a noop. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 21:11:05 +09:00
Ophestra	e9d00b9071	container/executable: handle nil msg ... This is useful in some tests. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 21:08:54 +09:00
Ophestra	4f41afee0f	internal/app/state: fixed size et-only header ... This header improves the robustness of the format and significantly reduces cleanup overhead. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-25 19:15:06 +09:00
Ophestra	7de593e816	cmd/hakurei: short identifier from lower half ... The upper half is now a nanosecond timestamp. Lower half is still random bytes, so use lower half for short identifier. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-24 00:47:39 +09:00
Ophestra	2442eda8d9	hst/instance: embed config struct ... This makes the resulting json easier to parse since it can now be deserialised into the config struct. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-24 00:42:16 +09:00
Ophestra	05488bfb8f	hst/instance: store priv side pid ... This can receive signals, so is more useful to the caller. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 23:19:55 +09:00
Ophestra	dd94818f20	hst/instance: define instance state ... This is now part of the hst API. This change also improves identifier generation and serialisation. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 22:59:02 +09:00
Ophestra	0fd357e7f6	container/init: do not suspend output ... Init is not very talkative after process start even when verbose. Suspending output here is pointless and does more harm than good. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 08:11:00 +09:00
Ophestra	57231d4acf	container/init: improve signal handling ... The SIGTERM signal is delivered in many other cases and can lead to strange behaviour. The unconditional resume of the logger also causes strange behaviour in the cancellation forwarding path. This change also passes through additional signals. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 08:02:03 +09:00
Ophestra	c5aefe5e9d	internal/app/shim: check behaviour ... This does not yet have full coverage. Test cases covering failsafe paths and error injection will be added eventually. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 06:07:41 +09:00
Ophestra	0f8ffee44d	internal/app: test case for hst template ... This helps with other areas of the test suite as they're all based on hst.Template. This also helps contributors understand the behaviour of internal/app as hst.Template covers almost every aspect of it. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 04:46:58 +09:00
Ophestra	1685a4d000	cmd/hsu: reduce excessive test range ... This is quite a simple piece of code, this many test cases is excessive and wastes time in the integration vm. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-23 04:32:32 +09:00
Ophestra	6c338b433a	internal/app: reduce test case indentation ... This improves readability on narrower displays. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 07:40:32 +09:00
Ophestra	8accd3b219	internal/app/shim: use syscall dispatcher ... This enables instrumented testing of the shim. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 06:58:45 +09:00
Ophestra	c5f59c5488	container/syscall: export prctl wrapper ... This is useful as package "syscall" does not provide such a wrapper. This change also improves error handling to fully conform to the manpage. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 05:26:54 +09:00
Ophestra	fcd9becf9a	cmd/hsu: run in locked thread ... Goroutine scheduling is not helpful in the setuid wrapper, it is not particularly harmful but lock here anyway. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 05:09:08 +09:00
Ophestra	622f945c22	container/init: check msg in entrypoint ... This covers invalid call to Init. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-22 04:20:08 +09:00
Ophestra	e94acc424c	container/comp: rename from bits ... This package will also hold syscall lookup tables for seccomp. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 20:54:03 +09:00
Ophestra	b1a4d801be	hst/container: flags string representation ... This is useful for a user-facing representation other than JSON. This also gets rid of the ugly, outdated flags string builder in cmd/hakurei. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 20:29:52 +09:00
Ophestra	56beae17fe	test: assert hst CGO_ENABLED=0 ... The hst package only deals with data serialisation, however since many parts of hakurei make use of C libraries in some way it can be easy to inadvertently depend on cgo. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 19:49:04 +09:00
Ophestra	ea978101b1	cmd/hakurei/parse: close config fd ... This is cleaner than relying on the finalizer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 06:05:36 +09:00
Ophestra	fbd1638e7f	test/interactive/trace: update nix attribute ... Updated according to evaluation warning. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 06:03:09 +09:00
Ophestra	d42067df7c	cmd/hakurei/json: friendly error messages ... This change handles errors returned by encoding/json and prints significantly cleaner messages. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 05:17:25 +09:00
Ophestra	b9459a80c7	container/init: check use constants for open flags ... These bits are arch-specific. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 03:13:58 +09:00
Ophestra	f8189d1488	container/syscall: dot-import syscall ... This avoids having arch-specific constants for arm64. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-10-21 03:09:14 +09:00
Ophestra	5063b774c1